@objectstack/plugin-approvals 7.3.0 → 7.4.1

package/src/translations/ja-JP.objects.generated.ts

@@ -0,0 +1,156 @@
+// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.
+
+/**
+ * Auto-generated by 'os i18n extract' for locale 'ja-JP'.
+ * Edit translations in place; re-run extract (with --merge) to fill new gaps.
+ * Do not hand-edit the structure — only the leaf string values.
+ */
+
+import type { TranslationData } from '@objectstack/spec/system';
+
+export const jaJPObjects: NonNullable<TranslationData['objects']> = {
+  sys_approval_request: {
+    label: "承認リクエスト",
+    pluralLabel: "承認リクエスト",
+    description: "送信ごとに追跡されるライブ承認インスタンス",
+    fields: {
+      id: {
+        label: "リクエスト ID"
+      },
+      organization_id: {
+        label: "組織",
+        help: "この承認リクエストを所有するテナント（送信者コンテキストから伝播）"
+      },
+      process_name: {
+        label: "ソース",
+        help: "リクエストの発生元 — ノード駆動の承認では `flow:<flowName|nodeId>`"
+      },
+      object_name: {
+        label: "オブジェクト"
+      },
+      record_id: {
+        label: "レコード ID"
+      },
+      submitter_id: {
+        label: "送信者"
+      },
+      submitter_comment: {
+        label: "送信者コメント"
+      },
+      status: {
+        label: "ステータス",
+        help: "リクエストのライフサイクル状態",
+        options: {
+          pending: "保留中",
+          approved: "承認済み",
+          rejected: "却下済み",
+          recalled: "取り消し済み"
+        }
+      },
+      current_step: {
+        label: "現在のステップ",
+        help: "承認待ちのステップの機械名"
+      },
+      current_step_index: {
+        label: "現在のステップ番号"
+      },
+      pending_approvers: {
+        label: "承認待ち承認者",
+        help: "現在のステップを処理できるユーザー ID のカンマ区切りリスト"
+      },
+      payload_json: {
+        label: "スナップショット",
+        help: "送信時のレコードスナップショット"
+      },
+      flow_run_id: {
+        label: "Flow Run",
+        help: "Suspended automation run id this request gates (ADR-0019). The decision resumes it."
+      },
+      flow_node_id: {
+        label: "Flow Node",
+        help: "Approval node id within the flow that opened this request (ADR-0019)."
+      },
+      node_config_json: {
+        label: "Node Config",
+        help: "Snapshot of the Approval node config (approvers/behavior) for node-driven requests (ADR-0019)."
+      },
+      completed_at: {
+        label: "完了日時"
+      },
+      created_at: {
+        label: "作成日時"
+      },
+      updated_at: {
+        label: "更新日時"
+      }
+    },
+    _views: {
+      my_pending: {
+        label: "自分の保留中"
+      },
+      submitted_by_me: {
+        label: "自分が送信"
+      },
+      completed: {
+        label: "完了済み"
+      },
+      all_requests: {
+        label: "すべて"
+      }
+    }
+  },
+  sys_approval_action: {
+    label: "承認アクション",
+    pluralLabel: "承認アクション",
+    description: "承認アクションの追記専用監査証跡",
+    fields: {
+      id: {
+        label: "アクション ID"
+      },
+      organization_id: {
+        label: "組織",
+        help: "このアクションを所有するテナント（親リクエストと同じ）"
+      },
+      request_id: {
+        label: "リクエスト"
+      },
+      step_name: {
+        label: "ステップ",
+        help: "アクション時点のステップの機械名"
+      },
+      step_index: {
+        label: "ステップ番号"
+      },
+      action: {
+        label: "アクション",
+        options: {
+          submit: "申請",
+          approve: "承認",
+          reject: "却下",
+          recall: "取消",
+          escalate: "エスカレーション"
+        }
+      },
+      actor_id: {
+        label: "操作者"
+      },
+      comment: {
+        label: "コメント"
+      },
+      created_at: {
+        label: "作成日時"
+      }
+    },
+    _views: {
+      recent: {
+        label: "最近"
+      },
+      by_actor: {
+        label: "操作者別"
+      },
+      all_actions: {
+        label: "すべて"
+      }
+    }
+  }
+};

package/src/translations/zh-CN.objects.generated.ts

@@ -0,0 +1,156 @@
+// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.
+
+/**
+ * Auto-generated by 'os i18n extract' for locale 'zh-CN'.
+ * Edit translations in place; re-run extract (with --merge) to fill new gaps.
+ * Do not hand-edit the structure — only the leaf string values.
+ */
+
+import type { TranslationData } from '@objectstack/spec/system';
+
+export const zhCNObjects: NonNullable<TranslationData['objects']> = {
+  sys_approval_request: {
+    label: "审批请求",
+    pluralLabel: "审批请求",
+    description: "按提交记录跟踪的实时审批实例",
+    fields: {
+      id: {
+        label: "请求 ID"
+      },
+      organization_id: {
+        label: "组织",
+        help: "拥有该审批请求的租户（从提交方上下文传播）"
+      },
+      process_name: {
+        label: "来源",
+        help: "请求来源 —— 节点驱动的审批为 `flow:<flowName|nodeId>`"
+      },
+      object_name: {
+        label: "对象"
+      },
+      record_id: {
+        label: "记录 ID"
+      },
+      submitter_id: {
+        label: "提交人"
+      },
+      submitter_comment: {
+        label: "提交备注"
+      },
+      status: {
+        label: "状态",
+        help: "请求的生命周期状态",
+        options: {
+          pending: "待处理",
+          approved: "已批准",
+          rejected: "已拒绝",
+          recalled: "已撤回"
+        }
+      },
+      current_step: {
+        label: "当前步骤",
+        help: "当前等待审批的步骤机器名称"
+      },
+      current_step_index: {
+        label: "当前步骤索引"
+      },
+      pending_approvers: {
+        label: "待审批人",
+        help: "可在当前步骤执行操作的用户 ID，逗号分隔"
+      },
+      payload_json: {
+        label: "快照",
+        help: "提交时的记录快照"
+      },
+      flow_run_id: {
+        label: "Flow Run",
+        help: "Suspended automation run id this request gates (ADR-0019). The decision resumes it."
+      },
+      flow_node_id: {
+        label: "Flow Node",
+        help: "Approval node id within the flow that opened this request (ADR-0019)."
+      },
+      node_config_json: {
+        label: "Node Config",
+        help: "Snapshot of the Approval node config (approvers/behavior) for node-driven requests (ADR-0019)."
+      },
+      completed_at: {
+        label: "完成时间"
+      },
+      created_at: {
+        label: "创建时间"
+      },
+      updated_at: {
+        label: "更新时间"
+      }
+    },
+    _views: {
+      my_pending: {
+        label: "我的待办"
+      },
+      submitted_by_me: {
+        label: "我提交的"
+      },
+      completed: {
+        label: "已完成"
+      },
+      all_requests: {
+        label: "全部"
+      }
+    }
+  },
+  sys_approval_action: {
+    label: "审批动作",
+    pluralLabel: "审批动作",
+    description: "追加写入的审批操作审计记录",
+    fields: {
+      id: {
+        label: "动作 ID"
+      },
+      organization_id: {
+        label: "组织",
+        help: "拥有该动作的租户（与父请求保持一致）"
+      },
+      request_id: {
+        label: "请求"
+      },
+      step_name: {
+        label: "步骤",
+        help: "执行该动作时对应步骤的机器名称"
+      },
+      step_index: {
+        label: "步骤索引"
+      },
+      action: {
+        label: "操作",
+        options: {
+          submit: "提交",
+          approve: "批准",
+          reject: "拒绝",
+          recall: "撤回",
+          escalate: "升级"
+        }
+      },
+      actor_id: {
+        label: "执行人"
+      },
+      comment: {
+        label: "评论"
+      },
+      created_at: {
+        label: "创建时间"
+      }
+    },
+    _views: {
+      recent: {
+        label: "最近"
+      },
+      by_actor: {
+        label: "按执行人"
+      },
+      all_actions: {
+        label: "全部"
+      }
+    }
+  }
+};

package/src/action-executor.ts

@@ -1,313 +0,0 @@
-// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.
-
-/**
- * Approval Action Executor — M11.C15.B
- *
- * Pure dispatcher that runs the `ApprovalAction` items declared on
- * `ApprovalProcess.onSubmit / onFinalApprove / onFinalReject / onRecall`
- * and `ApprovalStep.onApprove / onReject`.
- *
- * Supported action types:
- *   - `field_update`   — write `config.field = config.value` on the
- *     business record (under SYSTEM_CTX so the lock hook is bypassed).
- *     `config.value` may be a literal or `"$status"` / `"$now"` /
- *     `"$actor"` / `"$comment"` token resolved against the runtime
- *     context.
- *   - `inbox_notify`   — insert one `sys_notification` row per target.
- *     `config.to` may be `'submitter' | 'pending_approvers'` or an
- *     explicit `string[]` of user ids. `config.title` / `config.body`
- *     interpolate `{record_id}`, `{object}`, `{status}`, `{step}`,
- *     `{actor}`, `{comment}`.
- *   - `webhook`        — POST `config.body` (JSON) to `config.url`,
- *     fire-and-forget (caller awaits with timeout). Headers default
- *     to `Content-Type: application/json`. Failures are logged, not
- *     thrown, so a flaky receiver can't deadlock the approval flow.
- *
- * Unimplemented (logged + skipped):
- *   - `email_alert`    — needs SMTP transport, later milestone.
- *   - `script`         — needs sandboxed runner, later milestone.
- *   - `connector_action` — needs connector registry, later milestone.
- */
-
-import type { ApprovalEngine } from './approval-service.js';
-
-const SYSTEM_CTX = { isSystem: true, roles: [], permissions: [] } as const;
-
-export interface ActionLogger {
-  info?: (msg: string, meta?: any) => void;
-  warn?: (msg: string, meta?: any) => void;
-  error?: (msg: string, meta?: any) => void;
-  debug?: (msg: string, meta?: any) => void;
-}
-
-const noopLogger: Required<ActionLogger> = {
-  info: () => {}, warn: () => {}, error: () => {}, debug: () => {},
-};
-
-/** Possible trigger points; passed to executors for tokenization. */
-export type ApprovalTrigger =
-  | 'submit'
-  | 'step_approve'
-  | 'final_approve'
-  | 'step_reject'
-  | 'final_reject'
-  | 'recall';
-
-export interface ExecutionContext {
-  /** The trigger that caused these actions to fire. */
-  trigger: ApprovalTrigger;
-  /** Approval process row (parsed `definition`). */
-  process: any;
-  /** Approval request row (post-transition). */
-  request: any;
-  /** Current step config (when applicable). */
-  step?: any;
-  /** Business record (optional — looked up on demand if needed). */
-  record?: any;
-  /** Actor whose decision triggered the action; for `submit` this is the submitter. */
-  actorId?: string | null;
-  /** Comment passed with the decision. */
-  comment?: string | null;
-}
-
-/** Default fetch implementation — overridable for tests. */
-export type FetchLike = (
-  input: any,
-  init?: any,
-) => Promise<{ ok: boolean; status: number; statusText: string }>;
-
-export interface ExecuteActionsOptions {
-  engine: ApprovalEngine;
-  logger?: ActionLogger;
-  fetch?: FetchLike;
-  /** Maximum webhook duration in ms; default 5000. */
-  webhookTimeoutMs?: number;
-}
-
-const DEFAULT_WEBHOOK_TIMEOUT_MS = 5000;
-
-/** Public entry point — run an ordered list of actions. */
-export async function executeActions(
-  actions: any[] | undefined | null,
-  ctx: ExecutionContext,
-  opts: ExecuteActionsOptions,
-): Promise<void> {
-  if (!Array.isArray(actions) || actions.length === 0) return;
-  const log = { ...noopLogger, ...(opts.logger ?? {}) };
-  for (const a of actions) {
-    try {
-      await runOne(a, ctx, opts, log);
-    } catch (err: any) {
-      // Approval actions must not crash the transition — log + continue.
-      log.error?.(`[approvals] action '${a?.type ?? '<unknown>'}' failed: ${err?.message ?? err}`, {
-        action: a, trigger: ctx.trigger, request_id: ctx.request?.id,
-      });
-    }
-  }
-}
-
-async function runOne(
-  action: any,
-  ctx: ExecutionContext,
-  opts: ExecuteActionsOptions,
-  log: Required<ActionLogger>,
-): Promise<void> {
-  if (!action || typeof action !== 'object') return;
-  switch (action.type) {
-    case 'field_update': return runFieldUpdate(action, ctx, opts, log);
-    case 'inbox_notify': return runInboxNotify(action, ctx, opts, log);
-    case 'webhook':      return runWebhook(action, ctx, opts, log);
-    case 'email_alert':
-    case 'script':
-    case 'connector_action':
-      log.warn?.(`[approvals] action type '${action.type}' is not implemented yet — skipping`, {
-        action_name: action.name, trigger: ctx.trigger,
-      });
-      return;
-    default:
-      log.warn?.(`[approvals] unknown action type '${action.type}' — skipping`);
-  }
-}
-
-// ── field_update ──────────────────────────────────────────────────
-
-async function runFieldUpdate(
-  action: any,
-  ctx: ExecutionContext,
-  opts: ExecuteActionsOptions,
-  log: Required<ActionLogger>,
-): Promise<void> {
-  const cfg = action.config ?? {};
-  const field: string | undefined = cfg.field;
-  if (!field) {
-    log.warn?.('[approvals] field_update missing config.field');
-    return;
-  }
-  const value = resolveValueToken(cfg.value, ctx);
-  const object = ctx.process?.object_name ?? ctx.process?.object;
-  const recordId = ctx.request?.record_id;
-  if (!object || !recordId) {
-    log.warn?.('[approvals] field_update missing object/record context');
-    return;
-  }
-  await opts.engine.update(
-    object,
-    { id: recordId, [field]: value },
-    { context: SYSTEM_CTX },
-  );
-  log.debug?.(`[approvals] field_update ${object}/${recordId} set ${field}`, { value });
-}
-
-/** Resolve `$status`, `$now`, `$actor`, `$comment` or literal value. */
-function resolveValueToken(raw: unknown, ctx: ExecutionContext): unknown {
-  if (typeof raw !== 'string') return raw;
-  switch (raw) {
-    case '$status':   return ctx.request?.status ?? null;
-    case '$now':      return new Date().toISOString();
-    case '$actor':    return ctx.actorId ?? null;
-    case '$comment':  return ctx.comment ?? null;
-    case '$step':     return ctx.request?.current_step ?? null;
-    case '$request_id': return ctx.request?.id ?? null;
-    default: return raw;
-  }
-}
-
-// ── inbox_notify ──────────────────────────────────────────────────
-
-function interpolate(template: string, ctx: ExecutionContext): string {
-  if (typeof template !== 'string') return template as any;
-  return template
-    .replace(/\{record_id\}/g, String(ctx.request?.record_id ?? ''))
-    .replace(/\{object\}/g, String(ctx.process?.object_name ?? ctx.process?.object ?? ''))
-    .replace(/\{status\}/g, String(ctx.request?.status ?? ''))
-    .replace(/\{step\}/g, String(ctx.request?.current_step ?? ''))
-    .replace(/\{actor\}/g, String(ctx.actorId ?? ''))
-    .replace(/\{comment\}/g, String(ctx.comment ?? ''))
-    .replace(/\{process\}/g, String(ctx.process?.name ?? ''));
-}
-
-async function runInboxNotify(
-  action: any,
-  ctx: ExecutionContext,
-  opts: ExecuteActionsOptions,
-  log: Required<ActionLogger>,
-): Promise<void> {
-  const cfg = action.config ?? {};
-  const recipients = resolveRecipients(cfg.to, ctx);
-  if (recipients.length === 0) {
-    log.debug?.('[approvals] inbox_notify resolved no recipients — skipping');
-    return;
-  }
-  const title = interpolate(cfg.title ?? 'Approval update', ctx);
-  const body  = interpolate(cfg.body ?? '', ctx);
-  // sys_notification.type is a select with a fixed enum; 'system' is the
-  // safe default. Callers may override via cfg.notificationType but must
-  // pick a value the schema accepts.
-  const type  = String(cfg.notificationType ?? 'system');
-  const rawLink = cfg.link
-    ? interpolate(String(cfg.link), ctx)
-    : `/console/system/approvals?requestId=${encodeURIComponent(ctx.request?.id ?? '')}`;
-  // sys_notification.url is a URL field — only forward absolute URLs.
-  // Relative deep-links (`/system/approvals`) get stripped to satisfy
-  // validation; the recipient can still navigate via the source linkage.
-  const url = /^https?:\/\//i.test(rawLink) ? rawLink : null;
-  const now = new Date().toISOString();
-
-  for (const recipient of recipients) {
-    try {
-      await opts.engine.insert(
-        'sys_notification',
-        {
-          id: `notif_${cryptoRandom()}`,
-          recipient_id: String(recipient),
-          type,
-          title,
-          body,
-          url,
-          is_read: false,
-          source_object: ctx.process?.object_name ?? ctx.process?.object ?? null,
-          source_id: ctx.request?.record_id ?? null,
-          created_at: now,
-          updated_at: now,
-        },
-        { context: SYSTEM_CTX },
-      );
-    } catch (err: any) {
-      // Notification persistence is best-effort.
-      log.warn?.(`[approvals] inbox_notify insert failed for ${recipient}: ${err?.message ?? err}`);
-    }
-  }
-}
-
-function resolveRecipients(to: unknown, ctx: ExecutionContext): string[] {
-  if (Array.isArray(to)) return to.map(String).filter(Boolean);
-  if (typeof to === 'string') {
-    if (to === 'submitter') return ctx.request?.submitter_id ? [String(ctx.request.submitter_id)] : [];
-    if (to === 'pending_approvers') {
-      const list = ctx.request?.pending_approvers ?? [];
-      if (Array.isArray(list)) return list.map(String).filter(Boolean);
-      if (typeof list === 'string') return list.split(',').map(s => s.trim()).filter(Boolean);
-      return [];
-    }
-    // Fall through: literal user id.
-    return [to];
-  }
-  return [];
-}
-
-function cryptoRandom(): string {
-  const g: any = globalThis as any;
-  if (g.crypto?.randomUUID) return g.crypto.randomUUID();
-  return `${Date.now().toString(36)}_${Math.random().toString(36).slice(2, 12)}`;
-}
-
-// ── webhook ──────────────────────────────────────────────────────
-
-async function runWebhook(
-  action: any,
-  ctx: ExecutionContext,
-  opts: ExecuteActionsOptions,
-  log: Required<ActionLogger>,
-): Promise<void> {
-  const cfg = action.config ?? {};
-  const url: string | undefined = cfg.url;
-  if (!url) {
-    log.warn?.('[approvals] webhook missing config.url');
-    return;
-  }
-  const fetchImpl: FetchLike = opts.fetch ?? (globalThis as any).fetch;
-  if (!fetchImpl) {
-    log.warn?.('[approvals] webhook skipped — no fetch implementation available');
-    return;
-  }
-  const timeoutMs = opts.webhookTimeoutMs ?? DEFAULT_WEBHOOK_TIMEOUT_MS;
-  const headers = { 'Content-Type': 'application/json', ...(cfg.headers ?? {}) };
-  const payload = {
-    trigger: ctx.trigger,
-    request: ctx.request,
-    step: ctx.step ? { name: ctx.step.name, index: ctx.request?.current_step_index } : null,
-    actor_id: ctx.actorId ?? null,
-    comment: ctx.comment ?? null,
-    process_name: ctx.process?.name,
-    object: ctx.process?.object_name ?? ctx.process?.object,
-    ...(cfg.body && typeof cfg.body === 'object' ? cfg.body : {}),
-  };
-  // Manual timeout — works in Node 18+ without AbortController dependency.
-  const controller = (globalThis as any).AbortController ? new (globalThis as any).AbortController() : null;
-  const timer = setTimeout(() => controller?.abort(), timeoutMs);
-  try {
-    const res = await fetchImpl(url, {
-      method: cfg.method ?? 'POST',
-      headers,
-      body: JSON.stringify(payload),
-      signal: controller?.signal,
-    });
-    if (!res.ok) {
-      log.warn?.(`[approvals] webhook ${url} → ${res.status} ${res.statusText}`);
-    }
-  } catch (err: any) {
-    log.warn?.(`[approvals] webhook ${url} failed: ${err?.message ?? err}`);
-  } finally {
-    clearTimeout(timer);
-  }
-}