@oimlsmart/platform-server 0.1.4 → 0.1.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oimlsmart/platform-server",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "description": "The OIML SMART platform server kernel: the store seam (ServerStore + the D1 and SQLite implementations), the canonical D1 migration set both deployments apply, the instance profile, the mailer, the RBAC map, the OIDC/OAuth client cones, and the shared role/permission vocabulary. Consumed by the smart monorepo (browser/) and the identity service.",
   "type": "module",
   "repository": {

package/src/vocab/permissions.ts

@@ -145,6 +145,12 @@ export const TRANSITION_PERMISSIONS: Record<string, readonly ActionPermission[]>
   // records mode (TODO.adoption/02): the registered-offline entry — the
   // application's honest hop into ACCEPTED without a fake walked history.
   'application:register_offline->ACCEPTED': ['records.register'],
+  // DEMO_FLOWS wave 1: the lifecycle closure — the IA marks the Evaluation
+  // Project COMPLETED once the completion gate's settling conditions all
+  // hold (the model's completion_settled guard refuses otherwise); the act
+  // is the IA's decision desk on the application, the same family as the
+  // accept/reject decisions.
+  'application:ia_marks_completed->COMPLETED': ['application.accept'],
 
   // test_request (the dispatch; TODO.adoption/07's quote leg: the
   // laboratory's quotation response and the IA's commercial decision on it)
@@ -161,6 +167,9 @@ export const TRANSITION_PERMISSIONS: Record<string, readonly ActionPermission[]>
   // test_report
   'test_report:lab_submits->SUBMITTED': ['tr.submit'],
   'test_report:ia_starts_review->UNDER_REVIEW': ['tr.review'],
+  // DEMO_FLOWS wave 1: the review period's opening on the test report —
+  // the IA's TR-review desk (the consultation rides the review class).
+  'test_report:ia_opens_consultation->CONSULTATION': ['tr.review'],
   'test_report:ia_accepts->ACCEPTED': ['tr.review'],
   'test_report:ia_rejects->REJECTED': ['tr.review'],
   'test_report:lab_withdraws_for_edit->DRAFT': ['tr.submit'],
@@ -184,6 +193,9 @@ export const TRANSITION_PERMISSIONS: Record<string, readonly ActionPermission[]>
   // Fired by the TR-review service when the last report is determined —
   // the reviewing officer holds tr.review, the evaluation worker er.review.
   'evaluation_report:last_tr_determined->ALL_TR_REVIEWED': ['tr.review', 'er.review'],
+  // DEMO_FLOWS wave 1: the review period's opening — the IA officer's
+  // evaluation-work act (the consultation is the ER's review surface).
+  'evaluation_report:ia_opens_consultation->CONSULTATION': ['er.review'],
   'evaluation_report:ia_approves->APPROVED': ['er.finalize'],
   'evaluation_report:ia_rejects->REJECTED': ['er.finalize'],
   'evaluation_report:ia_approves_with_conditions->CONDITIONALLY_APPROVED': ['er.finalize'],
@@ -217,6 +229,22 @@ export const TRANSITION_PERMISSIONS: Record<string, readonly ActionPermission[]>
   'certificate:revise->ACTIVE': ['certificate.issue'],
   'certificate:transfer_ownership->ACTIVE': ['certificate.issue'],
 
+  // certificate_registration (DEMO_FLOWS wave 1 — the register's
+  // auto-publish doctrine, the program owner's 2026-08-28 decision): the
+  // hub-side registration submission lifecycle — the registrant
+  // announcement's shell, the signed package's intake verification, the
+  // publication, the recorded refusal. All three edges are SYSTEM acts:
+  // the intake automation walks them on the verified signed submission
+  // (no human gate between verify and publish — the register's trust is
+  // in the signature + the receipt machinery; the human review surfaces
+  // stay read postures). The map names the desk authority the automation
+  // exercises — the same shape the other engine-fired edges ride (the
+  // sample_verification projection's transitions name
+  // verification.perform).
+  'certificate_registration:intake_verifies->SUBMITTED': ['certificate.register'],
+  'certificate_registration:auto_publishes->PUBLISHED': ['certificate.register'],
+  'certificate_registration:intake_refuses->REFUSED': ['certificate.register'],
+
   // test_assignment (the laboratory's work items; `omit` rides the IA's
   // dispatch withdrawal cascade)
   'test_assignment:lab_accepts->ACCEPTED': ['run.perform'],
@@ -354,6 +382,10 @@ export const STORE_MACHINES: Record<string, string> = {
   formInstances: 'form_instance',
   evaluationReports: 'evaluation_report',
   certificates: 'certificate',
+  // DEMO_FLOWS wave 1: the register's registration submissions are
+  // machinated too (the intake-verify → auto-publish chain); the generic
+  // write path gates status writes on the machine's declared edges.
+  certificateRegistrations: 'certificate_registration',
   testAssignments: 'test_assignment',
   testRuns: 'test_run',
   measuringInstrumentSamples: 'measuring_instrument_sample',