@open-mercato/core 0.7.1-develop.7193.1.910a5b0a1e → 0.7.1-develop.7195.1.b5efd1d51a

package/dist/modules/workflows/lib/task-handler.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/workflows/lib/task-handler.ts"],
-  "sourcesContent": ["/**\n * Workflows Module - User Task Handler Service\n *\n * Handles user task lifecycle operations:\n * - Completing user tasks\n * - Claiming tasks from role queues\n * - Reassigning tasks\n * - Escalating overdue tasks\n *\n * Functional API (no classes) following Open Mercato conventions.\n */\n\nimport { EntityManager } from '@mikro-orm/core'\nimport type { AwilixContainer } from 'awilix'\nimport {\n  UserTask,\n  WorkflowInstance,\n  WorkflowEvent,\n  StepInstance,\n} from '../data/entities'\nimport { executeWorkflow } from './workflow-executor'\nimport { findDefinitionForInstance } from './find-definition'\nimport * as stepHandler from './step-handler'\nimport * as transitionHandler from './transition-handler'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows')\n\n// ============================================================================\n// Types and Interfaces\n// ============================================================================\n\nexport interface CompleteUserTaskOptions {\n  taskId: string\n  formData: Record<string, any>\n  userId: string\n  comments?: string\n}\n\nexport class UserTaskError extends Error {\n  constructor(\n    message: string,\n    public code: string,\n    public details?: any\n  ) {\n    super(message)\n    this.name = 'UserTaskError'\n  }\n}\n\n// ============================================================================\n// User Task Completion\n// ============================================================================\n\n/**\n * Complete a user task and resume workflow execution\n *\n * This function:\n * 1. Validates the task exists and can be completed\n * 2. Updates the task with form data and completion info\n * 3. Merges form data into workflow context\n * 4. Logs completion event\n * 5. Resumes workflow execution\n *\n * @param em - Entity manager\n * @param container - DI container for workflow execution\n * @param options - Task completion options\n * @throws UserTaskError if task not found or validation fails\n */\nexport async function completeUserTask(\n  em: EntityManager,\n  container: AwilixContainer,\n  options: CompleteUserTaskOptions\n): Promise<void> {\n  const { taskId, formData, userId, comments } = options\n\n  // Fetch task\n  const task = await em.findOne(UserTask, {\n    id: taskId,\n    status: { $in: ['PENDING', 'IN_PROGRESS'] },\n  })\n\n  if (!task) {\n    throw new UserTaskError(\n      'Task not found or already completed',\n      'TASK_NOT_FOUND',\n      { taskId }\n    )\n  }\n\n  // Validate form data against schema (simple validation for MVP)\n  // In Phase 7, we'll add comprehensive JSON Schema validation\n  if (task.formSchema) {\n    try {\n      validateFormData(formData, task.formSchema)\n    } catch (error) {\n      throw new UserTaskError(\n        error instanceof Error ? error.message : 'Form validation failed',\n        'FORM_VALIDATION_FAILED',\n        { taskId, formSchema: task.formSchema, formData }\n      )\n    }\n  }\n\n  // Update task\n  const now = new Date()\n  task.status = 'COMPLETED'\n  task.formData = formData\n  task.completedBy = userId\n  task.completedAt = now\n  task.comments = comments || null\n  task.updatedAt = now\n\n  await em.flush()\n\n  // Fetch workflow instance\n  const instance = await em.findOne(WorkflowInstance, task.workflowInstanceId)\n  if (!instance) {\n    throw new UserTaskError(\n      'Workflow instance not found',\n      'INSTANCE_NOT_FOUND',\n      { workflowInstanceId: task.workflowInstanceId }\n    )\n  }\n\n  // Branch-scoped completion: when the task belongs to a parallel branch,\n  // merge form data into the branch namespace and resume just that branch.\n  if (task.branchInstanceId) {\n    await logWorkflowEvent(em, {\n      workflowInstanceId: instance.id,\n      stepInstanceId: task.stepInstanceId,\n      branchInstanceId: task.branchInstanceId,\n      eventType: 'USER_TASK_COMPLETED',\n      eventData: { taskId: task.id, taskName: task.taskName, completedBy: userId, formData },\n      userId,\n      tenantId: instance.tenantId,\n      organizationId: instance.organizationId,\n    })\n\n    const { resumeBranch } = await import('./parallel-handler')\n    const resumed = await resumeBranch(em, {\n      instanceId: instance.id,\n      branchInstanceId: task.branchInstanceId,\n      tenantId: instance.tenantId,\n      organizationId: instance.organizationId,\n      contextMerge: formData,\n      exitStepInstanceId: task.stepInstanceId,\n      exitOutput: { userTaskId: task.id, formData },\n    })\n\n    if (resumed) {\n      await executeWorkflow(em, container, instance.id, { userId })\n    }\n    return\n  }\n\n  // Merge form data into workflow context\n  instance.context = {\n    ...instance.context,\n    ...formData,\n  }\n  instance.updatedAt = now\n\n  // Log USER_TASK_COMPLETED event\n  await logWorkflowEvent(em, {\n    workflowInstanceId: instance.id,\n    stepInstanceId: task.stepInstanceId,\n    eventType: 'USER_TASK_COMPLETED',\n    eventData: {\n      taskId: task.id,\n      taskName: task.taskName,\n      completedBy: userId,\n      formData,\n    },\n    userId,\n    tenantId: instance.tenantId,\n    organizationId: instance.organizationId,\n  })\n\n  // Mark the step instance as completed\n  const stepInstance = await em.findOne(StepInstance, {\n    id: task.stepInstanceId,\n    status: 'ACTIVE',\n  })\n\n  if (stepInstance) {\n    await stepHandler.exitStep(em, stepInstance, { userTaskId: task.id, formData })\n  }\n\n  // Find the next automatic transition from the current step\n  const currentStepId = instance.currentStepId\n\n  // Load workflow definition to find transitions\n  const definition = await findDefinitionForInstance(em, instance)\n\n  if (!definition) {\n    throw new UserTaskError(\n      'Workflow definition not found',\n      'DEFINITION_NOT_FOUND',\n      { definitionId: instance.definitionId }\n    )\n  }\n\n  // Find automatic transitions from current step\n  const autoTransitions = (definition.definition.transitions || []).filter(\n    (t: any) => t.fromStepId === currentStepId && t.trigger === 'auto'\n  )\n\n  if (autoTransitions.length === 0) {\n    // No automatic transitions, workflow stays paused at current step\n    return\n  }\n\n  // Find valid transitions using transition handler\n  const transitionContext = {\n    workflowContext: instance.context,\n    userId,\n  }\n\n  const validTransitions = await transitionHandler.findValidTransitions(\n    em,\n    instance,\n    currentStepId,\n    transitionContext\n  )\n\n  const firstValidTransition = validTransitions.find(t => t.isValid)\n\n  if (!firstValidTransition || !firstValidTransition.transition) {\n    // Resume workflow execution anyway, maybe conditions will be met later\n    instance.status = 'RUNNING'\n    await em.flush()\n    return\n  }\n\n  // Execute the transition to move to next step\n\n  const transitionResult = await transitionHandler.executeTransition(\n    em,\n    container,\n    instance,\n    currentStepId,\n    firstValidTransition.transition.toStepId,\n    transitionContext\n  )\n\n  if (!transitionResult.success) {\n    logger.error('Transition failed', { component: 'task-handler', err: transitionResult.error })\n    // Don't throw, just leave workflow in current state\n    return\n  }\n\n  // Now continue workflow execution from the new step\n  await executeWorkflow(em, container, instance.id, { userId })\n}\n\n/**\n * Claim a user task from a role queue\n *\n * Allows a user to claim a task that's assigned to their role(s).\n * Prevents race conditions by checking task status.\n *\n * @param em - Entity manager\n * @param taskId - Task ID to claim\n * @param userId - User claiming the task\n * @throws UserTaskError if task cannot be claimed\n */\nexport async function claimUserTask(\n  em: EntityManager,\n  taskId: string,\n  userId: string\n): Promise<void> {\n  const task = await em.findOne(UserTask, {\n    id: taskId,\n    status: 'PENDING',\n  })\n\n  if (!task) {\n    throw new UserTaskError(\n      'Task not found or already claimed',\n      'TASK_NOT_FOUND',\n      { taskId }\n    )\n  }\n\n  if (task.assignedTo) {\n    throw new UserTaskError(\n      'Task is already assigned to a specific user',\n      'TASK_ALREADY_ASSIGNED',\n      { taskId, assignedTo: task.assignedTo }\n    )\n  }\n\n  if (!task.assignedToRoles || task.assignedToRoles.length === 0) {\n    throw new UserTaskError(\n      'Task is not assigned to any roles',\n      'TASK_NOT_ROLE_ASSIGNED',\n      { taskId }\n    )\n  }\n\n  // Update task\n  const now = new Date()\n  task.claimedBy = userId\n  task.claimedAt = now\n  task.status = 'IN_PROGRESS'\n  task.updatedAt = now\n\n  await em.flush()\n\n  // Log event\n  const instance = await em.findOne(WorkflowInstance, task.workflowInstanceId)\n  if (instance) {\n    await logWorkflowEvent(em, {\n      workflowInstanceId: instance.id,\n      stepInstanceId: task.stepInstanceId,\n      eventType: 'USER_TASK_STARTED',\n      eventData: {\n        taskId: task.id,\n        taskName: task.taskName,\n        claimedBy: userId,\n      },\n      userId,\n      tenantId: instance.tenantId,\n      organizationId: instance.organizationId,\n    })\n  }\n}\n\n// ============================================================================\n// Helper Functions\n// ============================================================================\n\n/**\n * Log workflow event to event sourcing table\n */\nasync function logWorkflowEvent(\n  em: EntityManager,\n  event: {\n    workflowInstanceId: string\n    stepInstanceId: string | null\n    branchInstanceId?: string | null\n    eventType: string\n    eventData: any\n    userId?: string\n    tenantId: string\n    organizationId: string\n  }\n): Promise<WorkflowEvent> {\n  const workflowEvent = em.create(WorkflowEvent, {\n    ...event,\n    occurredAt: new Date(),\n  })\n\n  await em.persist(workflowEvent).flush()\n  return workflowEvent\n}\n\n/**\n * Validate form data against JSON schema (basic validation for MVP)\n *\n * In Phase 7, we'll implement comprehensive JSON Schema validation.\n * For MVP, we do basic type checking.\n *\n * @param formData - User-provided form data\n * @param formSchema - JSON schema defining expected structure\n * @throws Error if validation fails\n */\nfunction validateFormData(\n  formData: Record<string, any>,\n  formSchema: any\n): void {\n  // For MVP: Basic validation - just check required fields exist\n  if (!formSchema || !formSchema.properties) {\n    return // No schema to validate against\n  }\n\n  const requiredFields = formSchema.required || []\n\n  for (const field of requiredFields) {\n    if (!(field in formData) || formData[field] === null || formData[field] === undefined) {\n      throw new Error(`Required field missing: ${field}`)\n    }\n  }\n\n  // Additional type validation can be added in Phase 7\n  // For now, this basic validation is sufficient\n}\n"],
-  "mappings": "AAcA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,uBAAuB;AAChC,SAAS,iCAAiC;AAC1C,YAAY,iBAAiB;AAC7B,YAAY,uBAAuB;AACnC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAahC,MAAM,sBAAsB,MAAM;AAAA,EACvC,YACE,SACO,MACA,SACP;AACA,UAAM,OAAO;AAHN;AACA;AAGP,SAAK,OAAO;AAAA,EACd;AACF;AAqBA,eAAsB,iBACpB,IACA,WACA,SACe;AACf,QAAM,EAAE,QAAQ,UAAU,QAAQ,SAAS,IAAI;AAG/C,QAAM,OAAO,MAAM,GAAG,QAAQ,UAAU;AAAA,IACtC,IAAI;AAAA,IACJ,QAAQ,EAAE,KAAK,CAAC,WAAW,aAAa,EAAE;AAAA,EAC5C,CAAC;AAED,MAAI,CAAC,MAAM;AACT,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA,EAAE,OAAO;AAAA,IACX;AAAA,EACF;AAIA,MAAI,KAAK,YAAY;AACnB,QAAI;AACF,uBAAiB,UAAU,KAAK,UAAU;AAAA,IAC5C,SAAS,OAAO;AACd,YAAM,IAAI;AAAA,QACR,iBAAiB,QAAQ,MAAM,UAAU;AAAA,QACzC;AAAA,QACA,EAAE,QAAQ,YAAY,KAAK,YAAY,SAAS;AAAA,MAClD;AAAA,IACF;AAAA,EACF;AAGA,QAAM,MAAM,oBAAI,KAAK;AACrB,OAAK,SAAS;AACd,OAAK,WAAW;AAChB,OAAK,cAAc;AACnB,OAAK,cAAc;AACnB,OAAK,WAAW,YAAY;AAC5B,OAAK,YAAY;AAEjB,QAAM,GAAG,MAAM;AAGf,QAAM,WAAW,MAAM,GAAG,QAAQ,kBAAkB,KAAK,kBAAkB;AAC3E,MAAI,CAAC,UAAU;AACb,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA,EAAE,oBAAoB,KAAK,mBAAmB;AAAA,IAChD;AAAA,EACF;AAIA,MAAI,KAAK,kBAAkB;AACzB,UAAM,iBAAiB,IAAI;AAAA,MACzB,oBAAoB,SAAS;AAAA,MAC7B,gBAAgB,KAAK;AAAA,MACrB,kBAAkB,KAAK;AAAA,MACvB,WAAW;AAAA,MACX,WAAW,EAAE,QAAQ,KAAK,IAAI,UAAU,KAAK,UAAU,aAAa,QAAQ,SAAS;AAAA,MACrF;AAAA,MACA,UAAU,SAAS;AAAA,MACnB,gBAAgB,SAAS;AAAA,IAC3B,CAAC;AAED,UAAM,EAAE,aAAa,IAAI,MAAM,OAAO,oBAAoB;AAC1D,UAAM,UAAU,MAAM,aAAa,IAAI;AAAA,MACrC,YAAY,SAAS;AAAA,MACrB,kBAAkB,KAAK;AAAA,MACvB,UAAU,SAAS;AAAA,MACnB,gBAAgB,SAAS;AAAA,MACzB,cAAc;AAAA,MACd,oBAAoB,KAAK;AAAA,MACzB,YAAY,EAAE,YAAY,KAAK,IAAI,SAAS;AAAA,IAC9C,CAAC;AAED,QAAI,SAAS;AACX,YAAM,gBAAgB,IAAI,WAAW,SAAS,IAAI,EAAE,OAAO,CAAC;AAAA,IAC9D;AACA;AAAA,EACF;AAGA,WAAS,UAAU;AAAA,IACjB,GAAG,SAAS;AAAA,IACZ,GAAG;AAAA,EACL;AACA,WAAS,YAAY;AAGrB,QAAM,iBAAiB,IAAI;AAAA,IACzB,oBAAoB,SAAS;AAAA,IAC7B,gBAAgB,KAAK;AAAA,IACrB,WAAW;AAAA,IACX,WAAW;AAAA,MACT,QAAQ,KAAK;AAAA,MACb,UAAU,KAAK;AAAA,MACf,aAAa;AAAA,MACb;AAAA,IACF;AAAA,IACA;AAAA,IACA,UAAU,SAAS;AAAA,IACnB,gBAAgB,SAAS;AAAA,EAC3B,CAAC;AAGD,QAAM,eAAe,MAAM,GAAG,QAAQ,cAAc;AAAA,IAClD,IAAI,KAAK;AAAA,IACT,QAAQ;AAAA,EACV,CAAC;AAED,MAAI,cAAc;AAChB,UAAM,YAAY,SAAS,IAAI,cAAc,EAAE,YAAY,KAAK,IAAI,SAAS,CAAC;AAAA,EAChF;AAGA,QAAM,gBAAgB,SAAS;AAG/B,QAAM,aAAa,MAAM,0BAA0B,IAAI,QAAQ;AAE/D,MAAI,CAAC,YAAY;AACf,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA,EAAE,cAAc,SAAS,aAAa;AAAA,IACxC;AAAA,EACF;AAGA,QAAM,mBAAmB,WAAW,WAAW,eAAe,CAAC,GAAG;AAAA,IAChE,CAAC,MAAW,EAAE,eAAe,iBAAiB,EAAE,YAAY;AAAA,EAC9D;AAEA,MAAI,gBAAgB,WAAW,GAAG;AAEhC;AAAA,EACF;AAGA,QAAM,oBAAoB;AAAA,IACxB,iBAAiB,SAAS;AAAA,IAC1B;AAAA,EACF;AAEA,QAAM,mBAAmB,MAAM,kBAAkB;AAAA,IAC/C;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,QAAM,uBAAuB,iBAAiB,KAAK,OAAK,EAAE,OAAO;AAEjE,MAAI,CAAC,wBAAwB,CAAC,qBAAqB,YAAY;AAE7D,aAAS,SAAS;AAClB,UAAM,GAAG,MAAM;AACf;AAAA,EACF;AAIA,QAAM,mBAAmB,MAAM,kBAAkB;AAAA,IAC/C;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,qBAAqB,WAAW;AAAA,IAChC;AAAA,EACF;AAEA,MAAI,CAAC,iBAAiB,SAAS;AAC7B,WAAO,MAAM,qBAAqB,EAAE,WAAW,gBAAgB,KAAK,iBAAiB,MAAM,CAAC;AAE5F;AAAA,EACF;AAGA,QAAM,gBAAgB,IAAI,WAAW,SAAS,IAAI,EAAE,OAAO,CAAC;AAC9D;AAaA,eAAsB,cACpB,IACA,QACA,QACe;AACf,QAAM,OAAO,MAAM,GAAG,QAAQ,UAAU;AAAA,IACtC,IAAI;AAAA,IACJ,QAAQ;AAAA,EACV,CAAC;AAED,MAAI,CAAC,MAAM;AACT,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA,EAAE,OAAO;AAAA,IACX;AAAA,EACF;AAEA,MAAI,KAAK,YAAY;AACnB,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA,EAAE,QAAQ,YAAY,KAAK,WAAW;AAAA,IACxC;AAAA,EACF;AAEA,MAAI,CAAC,KAAK,mBAAmB,KAAK,gBAAgB,WAAW,GAAG;AAC9D,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA,EAAE,OAAO;AAAA,IACX;AAAA,EACF;AAGA,QAAM,MAAM,oBAAI,KAAK;AACrB,OAAK,YAAY;AACjB,OAAK,YAAY;AACjB,OAAK,SAAS;AACd,OAAK,YAAY;AAEjB,QAAM,GAAG,MAAM;AAGf,QAAM,WAAW,MAAM,GAAG,QAAQ,kBAAkB,KAAK,kBAAkB;AAC3E,MAAI,UAAU;AACZ,UAAM,iBAAiB,IAAI;AAAA,MACzB,oBAAoB,SAAS;AAAA,MAC7B,gBAAgB,KAAK;AAAA,MACrB,WAAW;AAAA,MACX,WAAW;AAAA,QACT,QAAQ,KAAK;AAAA,QACb,UAAU,KAAK;AAAA,QACf,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA,UAAU,SAAS;AAAA,MACnB,gBAAgB,SAAS;AAAA,IAC3B,CAAC;AAAA,EACH;AACF;AASA,eAAe,iBACb,IACA,OAUwB;AACxB,QAAM,gBAAgB,GAAG,OAAO,eAAe;AAAA,IAC7C,GAAG;AAAA,IACH,YAAY,oBAAI,KAAK;AAAA,EACvB,CAAC;AAED,QAAM,GAAG,QAAQ,aAAa,EAAE,MAAM;AACtC,SAAO;AACT;AAYA,SAAS,iBACP,UACA,YACM;AAEN,MAAI,CAAC,cAAc,CAAC,WAAW,YAAY;AACzC;AAAA,EACF;AAEA,QAAM,iBAAiB,WAAW,YAAY,CAAC;AAE/C,aAAW,SAAS,gBAAgB;AAClC,QAAI,EAAE,SAAS,aAAa,SAAS,KAAK,MAAM,QAAQ,SAAS,KAAK,MAAM,QAAW;AACrF,YAAM,IAAI,MAAM,2BAA2B,KAAK,EAAE;AAAA,IACpD;AAAA,EACF;AAIF;",
+  "sourcesContent": ["/**\n * Workflows Module - User Task Handler Service\n *\n * Handles user task lifecycle operations:\n * - Completing user tasks\n * - Claiming tasks from role queues\n * - Reassigning tasks\n * - Escalating overdue tasks\n *\n * Functional API (no classes) following Open Mercato conventions.\n */\n\nimport { EntityManager } from '@mikro-orm/core'\nimport type { AwilixContainer } from 'awilix'\nimport {\n  UserTask,\n  WorkflowInstance,\n  WorkflowEvent,\n  StepInstance,\n} from '../data/entities'\nimport { executeWorkflow } from './workflow-executor'\nimport { findDefinitionForInstance } from './find-definition'\nimport {\n  findTaskDecision,\n  findTaskDecisionTransition,\n  withRecordedDecision,\n} from './task-decisions'\nimport { loadTaskDecisionContext } from './task-decision-context'\nimport { readRequiredFormFields } from './task-form-schema'\nimport * as stepHandler from './step-handler'\nimport * as transitionHandler from './transition-handler'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows')\n\n// ============================================================================\n// Types and Interfaces\n// ============================================================================\n\n/**\n * Tenant/organization the caller is acting within. Every task lookup filters on\n * it, so a task id from another tenant resolves to \"not found\" instead of being\n * mutated.\n */\nexport interface UserTaskScope {\n  tenantId: string\n  organizationId: string\n}\n\n/**\n * Shape of the `taskHandler` DI registration (`di.ts`).\n *\n * The functions below stay exported \u2014 third-party modules may import them and\n * `BACKWARD_COMPATIBILITY.md` \u00A73 freezes import paths \u2014 but callers inside the\n * platform MUST resolve this service instead, per the module's first rule.\n */\nexport interface TaskHandlerService {\n  completeUserTask: typeof completeUserTask\n  claimUserTask: typeof claimUserTask\n  releaseUserTask: typeof releaseUserTask\n  reassignUserTask: typeof reassignUserTask\n}\n\nexport interface CompleteUserTaskOptions {\n  taskId: string\n  formData: Record<string, any>\n  userId: string\n  comments?: string\n  /**\n   * The decision button the assignee pressed, when the step authored any.\n   *\n   * It does two things: it SELECTS the outgoing route (the decision's\n   * `transitionId` wins over the first-valid-transition default), and it is\n   * RECORDED as part of the completion payload. Omitted, completion behaves\n   * exactly as it always did.\n   */\n  decisionId?: string\n  scope: UserTaskScope\n}\n\nexport class UserTaskError extends Error {\n  constructor(\n    message: string,\n    public code: string,\n    public details?: any\n  ) {\n    super(message)\n    this.name = 'UserTaskError'\n  }\n}\n\n// ============================================================================\n// User Task Completion\n// ============================================================================\n\n/**\n * Complete a user task and resume workflow execution\n *\n * This function:\n * 1. Validates the task exists and can be completed\n * 2. Updates the task with form data and completion info\n * 3. Merges form data into workflow context\n * 4. Logs completion event\n * 5. Resumes workflow execution\n *\n * @param em - Entity manager\n * @param container - DI container for workflow execution\n * @param options - Task completion options\n * @throws UserTaskError if task not found or validation fails\n */\nexport async function completeUserTask(\n  em: EntityManager,\n  container: AwilixContainer,\n  options: CompleteUserTaskOptions\n): Promise<void> {\n  const { taskId, formData, userId, comments, decisionId, scope } = options\n\n  // Fetch task\n  const task = await em.findOne(UserTask, {\n    id: taskId,\n    tenantId: scope.tenantId,\n    organizationId: scope.organizationId,\n    status: { $in: ['PENDING', 'IN_PROGRESS'] },\n  })\n\n  if (!task) {\n    throw new UserTaskError(\n      'Task not found or already completed',\n      'TASK_NOT_FOUND',\n      { taskId }\n    )\n  }\n\n  // A task addressed to one person is that person's to finish. Tasks that name\n  // nobody \u2014 agent dispositions, role queues nobody has claimed \u2014 stay open to\n  // anyone the route's feature gate already admitted, so this narrows the\n  // over-permissive case without stranding the unassigned ones.\n  const claimant = task.claimedBy ?? task.assignedTo\n  if (claimant && claimant !== userId) {\n    throw new UserTaskError(\n      'Task is assigned to another user',\n      'TASK_ASSIGNED_TO_ANOTHER_USER',\n      { taskId, assignedTo: claimant }\n    )\n  }\n\n  // Validate form data against schema (simple validation for MVP)\n  // In Phase 7, we'll add comprehensive JSON Schema validation\n  if (task.formSchema) {\n    try {\n      validateFormData(formData, task.formSchema)\n    } catch (error) {\n      throw new UserTaskError(\n        error instanceof Error ? error.message : 'Form validation failed',\n        'FORM_VALIDATION_FAILED',\n        { taskId, formSchema: task.formSchema, formData }\n      )\n    }\n  }\n\n  // Resolve the pressed decision BEFORE anything is mutated: an unknown\n  // decision id must leave the task untouched rather than complete it down the\n  // default route. The list is re-resolved from the instance's pinned\n  // definition, so it is exactly the list the assignee was shown.\n  const chosenDecision = decisionId\n    ? findTaskDecision((await loadTaskDecisionContext(em, task)).decisions, decisionId)\n    : null\n\n  if (decisionId && !chosenDecision) {\n    throw new UserTaskError(\n      'Unknown decision for this task',\n      'UNKNOWN_DECISION',\n      { taskId, decisionId }\n    )\n  }\n\n  // The chosen decision rides along inside the completion payload the task\n  // already persists \u2014 no new column, and downstream route conditions can read\n  // it once the payload is merged into the run context.\n  const completionData = withRecordedDecision(formData, chosenDecision?.id)\n\n  // Update task\n  const now = new Date()\n  task.status = 'COMPLETED'\n  task.formData = completionData\n  task.completedBy = userId\n  task.completedAt = now\n  task.comments = comments || null\n  task.updatedAt = now\n\n  await em.flush()\n\n  // Fetch workflow instance\n  const instance = await em.findOne(WorkflowInstance, task.workflowInstanceId)\n  if (!instance) {\n    throw new UserTaskError(\n      'Workflow instance not found',\n      'INSTANCE_NOT_FOUND',\n      { workflowInstanceId: task.workflowInstanceId }\n    )\n  }\n\n  // Branch-scoped completion: when the task belongs to a parallel branch,\n  // merge form data into the branch namespace and resume just that branch.\n  //\n  // The decision is RECORDED here exactly as it is on the main path, but it does\n  // not select the route: a branch advances through `resumeBranch` with its own\n  // token, and overriding a branch's outgoing route is a parallel-execution\n  // change rather than a task-surface one.\n  if (task.branchInstanceId) {\n    await logWorkflowEvent(em, {\n      workflowInstanceId: instance.id,\n      stepInstanceId: task.stepInstanceId,\n      branchInstanceId: task.branchInstanceId,\n      eventType: 'USER_TASK_COMPLETED',\n      eventData: {\n        taskId: task.id,\n        taskName: task.taskName,\n        completedBy: userId,\n        formData: completionData,\n        ...(chosenDecision ? { decisionId: chosenDecision.id } : {}),\n      },\n      userId,\n      tenantId: instance.tenantId,\n      organizationId: instance.organizationId,\n    })\n\n    const { resumeBranch } = await import('./parallel-handler')\n    const resumed = await resumeBranch(em, {\n      instanceId: instance.id,\n      branchInstanceId: task.branchInstanceId,\n      tenantId: instance.tenantId,\n      organizationId: instance.organizationId,\n      contextMerge: completionData,\n      exitStepInstanceId: task.stepInstanceId,\n      exitOutput: { userTaskId: task.id, formData: completionData },\n    })\n\n    if (resumed) {\n      await executeWorkflow(em, container, instance.id, { userId })\n    }\n    return\n  }\n\n  // Merge form data into workflow context\n  instance.context = {\n    ...instance.context,\n    ...completionData,\n  }\n  instance.updatedAt = now\n\n  // Log USER_TASK_COMPLETED event\n  await logWorkflowEvent(em, {\n    workflowInstanceId: instance.id,\n    stepInstanceId: task.stepInstanceId,\n    eventType: 'USER_TASK_COMPLETED',\n    eventData: {\n      taskId: task.id,\n      taskName: task.taskName,\n      completedBy: userId,\n      formData: completionData,\n      ...(chosenDecision ? { decisionId: chosenDecision.id } : {}),\n    },\n    userId,\n    tenantId: instance.tenantId,\n    organizationId: instance.organizationId,\n  })\n\n  // Mark the step instance as completed\n  const stepInstance = await em.findOne(StepInstance, {\n    id: task.stepInstanceId,\n    status: 'ACTIVE',\n  })\n\n  if (stepInstance) {\n    await stepHandler.exitStep(em, stepInstance, { userTaskId: task.id, formData: completionData })\n  }\n\n  // Find the next automatic transition from the current step\n  const currentStepId = instance.currentStepId\n\n  // Load workflow definition to find transitions\n  const definition = await findDefinitionForInstance(em, instance)\n\n  if (!definition) {\n    throw new UserTaskError(\n      'Workflow definition not found',\n      'DEFINITION_NOT_FOUND',\n      { definitionId: instance.definitionId }\n    )\n  }\n\n  const transitionContext = {\n    workflowContext: instance.context,\n    userId,\n  }\n\n  // A decision names the route to take. It is bound to the transition's durable\n  // id, so it survives every route reorder, and it is looked up among the routes\n  // LEAVING this step only \u2014 a button can never send the run down a route that\n  // does not start where the run currently is. A decision whose route no longer\n  // exists there falls through to the default evaluation rather than stranding\n  // the run at a step it already completed.\n  const decisionTransition = chosenDecision\n    ? findTaskDecisionTransition(\n        definition.definition.transitions || [],\n        chosenDecision.transitionId,\n        currentStepId\n      )\n    : null\n\n  if (chosenDecision && !decisionTransition) {\n    logger.warn('Task decision route not found on the current step; falling back to auto routing', {\n      component: 'task-handler',\n      taskId: task.id,\n      decisionId: chosenDecision.id,\n      transitionId: chosenDecision.transitionId,\n      currentStepId,\n    })\n  }\n\n  let selectedTransition = decisionTransition ?? null\n  let targetStepId = selectedTransition?.toStepId ?? null\n\n  if (!targetStepId) {\n    // Find automatic transitions from current step\n    const autoTransitions = (definition.definition.transitions || []).filter(\n      (t: any) => t.fromStepId === currentStepId && t.trigger === 'auto'\n    )\n\n    if (autoTransitions.length === 0) {\n      // No automatic transitions, workflow stays paused at current step\n      return\n    }\n\n    // Find valid transitions using transition handler\n    const validTransitions = await transitionHandler.findValidTransitions(\n      em,\n      instance,\n      currentStepId,\n      transitionContext\n    )\n\n    const firstValidTransition = validTransitions.find(t => t.isValid)\n\n    if (!firstValidTransition || !firstValidTransition.transition) {\n      // Resume workflow execution anyway, maybe conditions will be met later\n      instance.status = 'RUNNING'\n      await em.flush()\n      return\n    }\n\n    targetStepId = firstValidTransition.transition.toStepId\n    selectedTransition = firstValidTransition.transition\n  }\n\n  // Resume from the paused wait BEFORE executing the transition, exactly as\n  // `sendSignal` does. Without it the executor's defense-in-depth PAUSED check\n  // stops the run at the first step the completion traverses, so the instance\n  // sits there as PAUSED and never reaches END. Guarded on PAUSED so completing\n  // a stale task can never resurrect a CANCELLED or terminal run.\n  if (instance.status === 'PAUSED') {\n    instance.status = 'RUNNING'\n    await em.flush()\n  }\n\n  // Execute the transition to move to next step\n\n  const transitionResult = await transitionHandler.executeTransition(\n    em,\n    container,\n    instance,\n    currentStepId,\n    targetStepId,\n    { ...transitionContext, transitionId: selectedTransition?.transitionId },\n  )\n\n  if (!transitionResult.success) {\n    logger.error('Transition failed', { component: 'task-handler', err: transitionResult.error })\n    // Don't throw, just leave workflow in current state\n    return\n  }\n\n  // Now continue workflow execution from the new step\n  await executeWorkflow(em, container, instance.id, { userId })\n}\n\n/**\n * Whether the caller belongs to at least one of the task's queues.\n *\n * Exact string equality on role NAMES \u2014 no case folding and no trimming, because\n * the names on both sides come from the same tenant role table and normalizing\n * one side would let `Approver` claim an `approver` queue that RBAC treats as a\n * different role.\n */\nfunction hasRoleOverlap(\n  taskRoles: readonly string[],\n  callerRoleNames: readonly string[],\n): boolean {\n  if (callerRoleNames.length === 0) return false\n  const held = new Set(callerRoleNames)\n  return taskRoles.some((role) => held.has(role))\n}\n\n/**\n * Claim a user task from a role queue\n *\n * Allows a user to claim a task that's assigned to their role(s).\n *\n * The claim itself is a COMPARE-AND-SET, not a read-then-write: the lookup\n * below only decides which error to report, while the row is taken with a\n * conditional `UPDATE \u2026 WHERE status = 'PENDING' AND claimed_by IS NULL`. Two\n * callers racing for the same task \u2014 which is exactly what the work inbox's\n * claim-next affordance produces \u2014 therefore cannot both win; the loser sees\n * zero affected rows and the same `TASK_NOT_FOUND` it would have seen a moment\n * later. Reading the status and flushing the entity afterwards would have let\n * both transactions read `PENDING` and both write.\n *\n * Membership in the queue is a REQUIREMENT, not a hint: a caller who holds none\n * of `assignedToRoles` is refused with the same `TASK_NOT_FOUND` a nonexistent\n * id produces, so a queue the caller does not belong to is indistinguishable\n * from a task that is not there. Holding `workflows.tasks.claim` admits you to\n * the endpoint; it does not admit you to somebody else's queue.\n *\n * `assignedToRoles` and `callerRoleNames` are both role NAMES \u2014 the Studio\n * picker writes names, the engine copies them onto the task, and `auth.roles`\n * carries names. A role RENAME therefore orphans existing assignments; moving\n * the comparison onto immutable role ids is a coordinated data + authored-\n * definition migration and is deliberately not done here.\n *\n * @param em - Entity manager\n * @param taskId - Task ID to claim\n * @param userId - User claiming the task\n * @param scope - Tenant/organization the caller acts within; both the lookup and\n *   the conditional update filter on it, so a task belonging to another tenant\n *   is never reachable and never writable\n * @param callerRoleNames - Server-derived role names of the caller (`auth.roles`),\n *   never client-supplied. Required rather than optional so a caller that cannot\n *   supply them fails to compile instead of silently claiming any queue.\n * @throws UserTaskError if task cannot be claimed\n */\nexport async function claimUserTask(\n  em: EntityManager,\n  taskId: string,\n  userId: string,\n  scope: UserTaskScope,\n  callerRoleNames: readonly string[]\n): Promise<void> {\n  const task = await em.findOne(UserTask, {\n    id: taskId,\n    tenantId: scope.tenantId,\n    organizationId: scope.organizationId,\n    status: 'PENDING',\n  })\n\n  if (!task) {\n    throw new UserTaskError(\n      'Task not found or already claimed',\n      'TASK_NOT_FOUND',\n      { taskId }\n    )\n  }\n\n  if (task.assignedTo) {\n    throw new UserTaskError(\n      'Task is already assigned to a specific user',\n      'TASK_ALREADY_ASSIGNED',\n      { taskId, assignedTo: task.assignedTo }\n    )\n  }\n\n  if (!task.assignedToRoles || task.assignedToRoles.length === 0) {\n    throw new UserTaskError(\n      'Task is not assigned to any roles',\n      'TASK_NOT_ROLE_ASSIGNED',\n      { taskId }\n    )\n  }\n\n  if (!hasRoleOverlap(task.assignedToRoles, callerRoleNames)) {\n    throw new UserTaskError(\n      'Task not found or already claimed',\n      'TASK_NOT_FOUND',\n      { taskId }\n    )\n  }\n\n  const now = new Date()\n  const claimed = await em.nativeUpdate(\n    UserTask,\n    {\n      id: taskId,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      status: 'PENDING',\n      claimedBy: null,\n    },\n    {\n      claimedBy: userId,\n      claimedAt: now,\n      status: 'IN_PROGRESS',\n      updatedAt: now,\n    },\n  )\n\n  if (claimed === 0) {\n    throw new UserTaskError(\n      'Task not found or already claimed',\n      'TASK_NOT_FOUND',\n      { taskId }\n    )\n  }\n\n  // The conditional update above already wrote the row; mirroring it onto the\n  // managed entity keeps the caller's identity-mapped copy from reporting the\n  // pre-claim state back to the client.\n  task.claimedBy = userId\n  task.claimedAt = now\n  task.status = 'IN_PROGRESS'\n  task.updatedAt = now\n\n  await em.flush()\n\n  // Log event\n  const instance = await em.findOne(WorkflowInstance, task.workflowInstanceId)\n  if (instance) {\n    await logWorkflowEvent(em, {\n      workflowInstanceId: instance.id,\n      stepInstanceId: task.stepInstanceId,\n      eventType: 'USER_TASK_STARTED',\n      eventData: {\n        taskId: task.id,\n        taskName: task.taskName,\n        claimedBy: userId,\n      },\n      userId,\n      tenantId: instance.tenantId,\n      organizationId: instance.organizationId,\n    })\n  }\n}\n\n/**\n * Release a claimed task back to its role queue.\n *\n * The counterpart of `claimUserTask`, and deliberately its mirror image: the\n * write is the same compare-and-set, guarded on the caller still being the\n * claimant, so a task reassigned or completed in the meantime is refused rather\n * than silently reopened. It uses the EXISTING statuses \u2014 the row goes back to\n * `PENDING` \u2014 because adding a `UserTaskStatus` value is an Ask-First\n * state-machine change and a released task is exactly as pending as it was\n * before anyone claimed it.\n *\n * @throws UserTaskError if the task is not the caller's to release\n */\nexport async function releaseUserTask(\n  em: EntityManager,\n  taskId: string,\n  userId: string,\n  scope: UserTaskScope\n): Promise<void> {\n  const task = await em.findOne(UserTask, {\n    id: taskId,\n    tenantId: scope.tenantId,\n    organizationId: scope.organizationId,\n    status: 'IN_PROGRESS',\n  })\n\n  if (!task) {\n    throw new UserTaskError(\n      'Task not found or not claimed',\n      'TASK_NOT_FOUND',\n      { taskId }\n    )\n  }\n\n  if (task.claimedBy !== userId) {\n    throw new UserTaskError(\n      'Task is claimed by another user',\n      'TASK_ASSIGNED_TO_ANOTHER_USER',\n      { taskId, claimedBy: task.claimedBy }\n    )\n  }\n\n  const now = new Date()\n  const released = await em.nativeUpdate(\n    UserTask,\n    {\n      id: taskId,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      status: 'IN_PROGRESS',\n      claimedBy: userId,\n    },\n    {\n      claimedBy: null,\n      claimedAt: null,\n      status: 'PENDING',\n      updatedAt: now,\n    },\n  )\n\n  if (released === 0) {\n    throw new UserTaskError(\n      'Task not found or not claimed',\n      'TASK_NOT_FOUND',\n      { taskId }\n    )\n  }\n\n  task.claimedBy = null\n  task.claimedAt = null\n  task.status = 'PENDING'\n  task.updatedAt = now\n\n  await em.flush()\n\n  const instance = await em.findOne(WorkflowInstance, task.workflowInstanceId)\n  if (instance) {\n    await logWorkflowEvent(em, {\n      workflowInstanceId: instance.id,\n      stepInstanceId: task.stepInstanceId,\n      eventType: 'USER_TASK_RELEASED',\n      eventData: {\n        taskId: task.id,\n        taskName: task.taskName,\n        releasedBy: userId,\n      },\n      userId,\n      tenantId: instance.tenantId,\n      organizationId: instance.organizationId,\n    })\n  }\n}\n\n// ============================================================================\n// User Task Reassignment\n// ============================================================================\n\n/**\n * The new owner of a task, as the reassign route resolved it.\n *\n * At least one of the two must be non-empty, and the route enforces it: the\n * shape \u00A76.4 makes uncompletable is precisely \"no assignee AND no role queue\",\n * so a reassignment that produced it would be the one write that can create the\n * problem reassignment exists to fix.\n */\nexport interface ReassignUserTaskTarget {\n  assignedTo?: string | null\n  assignedToRoles?: readonly string[] | null\n}\n\nexport interface ReassignUserTaskOptions {\n  taskId: string\n  /** Who performed the reassignment \u2014 recorded on `reassigned_by`. */\n  userId: string\n  target: ReassignUserTaskTarget\n  reason?: string | null\n  scope: UserTaskScope\n}\n\n/**\n * Statuses a task can be reassigned in.\n *\n * The same pair `completeUserTask` accepts: moving a COMPLETED or CANCELLED row\n * to somebody else records an audit trail for work that can never be done, and\n * the assignee would be handed a task whose Complete button always fails.\n */\nconst REASSIGNABLE_STATUSES: readonly string[] = ['PENDING', 'IN_PROGRESS']\n\n/**\n * Move a task to a different assignee or role queue, with an audit trail.\n *\n * This is the ACT half of the \u00A76.4 model's central asymmetry: administration\n * widens seeing, never acting, so an administrator who can see a colleague's\n * task \u2014 or a task that belongs to nobody at all \u2014 takes it first and the taking\n * is permanently recorded. It is also the documented remedy for the one shape\n * the model leaves uncompletable (no assignee, no claim, no role queue), which\n * is why it deliberately accepts a task in exactly that state.\n *\n * No new `UserTaskStatus` value is introduced. The audit lives on the columns\n * Phase 4a added (`reassigned_by` / `reassigned_at` / `reassign_reason`) plus a\n * `WorkflowEvent`, and a reassigned task is exactly as pending or in-progress as\n * it was \u2014 the same choice `releaseUserTask` made, and the one Phase 3a's\n * failure queue made when it reused `PAUSED` plus a marker.\n *\n * An in-flight CLAIM is always released. Handing a row to somebody else while a\n * colleague still holds it would leave `claimedBy ?? assignedTo` naming the old\n * claimant, so the predicate would keep treating the task as theirs and the new\n * assignee could not act on what they were just given.\n *\n * @throws UserTaskError when the task is absent from the caller's scope or is\n *         in a terminal status\n */\nexport async function reassignUserTask(\n  em: EntityManager,\n  options: ReassignUserTaskOptions,\n): Promise<UserTask> {\n  const { taskId, userId, target, reason, scope } = options\n\n  const task = await em.findOne(UserTask, {\n    id: taskId,\n    tenantId: scope.tenantId,\n    organizationId: scope.organizationId,\n  })\n\n  if (!task) {\n    throw new UserTaskError('Task not found', 'TASK_NOT_FOUND', { taskId })\n  }\n\n  if (!REASSIGNABLE_STATUSES.includes(task.status)) {\n    throw new UserTaskError(\n      'Task is no longer open and cannot be reassigned',\n      'TASK_NOT_REASSIGNABLE',\n      { taskId, status: task.status },\n    )\n  }\n\n  const assignedTo = target.assignedTo ?? null\n  const assignedToRoles =\n    target.assignedToRoles && target.assignedToRoles.length > 0 ? [...target.assignedToRoles] : null\n\n  const previous = {\n    assignedTo: task.assignedTo ?? null,\n    assignedToRoles: task.assignedToRoles ?? null,\n    claimedBy: task.claimedBy ?? null,\n  }\n\n  const now = new Date()\n\n  task.assignedTo = assignedTo\n  // Reassignment is a backoffice administration act and its target is resolved\n  // from the tenant's user/role vocabulary, so the row lands in the backoffice\n  // namespace. Portal reassignment would need a portal principal picker and is\n  // not part of this surface.\n  task.assigneeKind = 'user'\n  task.assignedToRoles = assignedToRoles\n  task.claimedBy = null\n  task.claimedAt = null\n  // A queued task must be PENDING to be claimable, and a task whose claim was\n  // just released is exactly as pending as it was before anyone claimed it.\n  if (task.status === 'IN_PROGRESS') task.status = 'PENDING'\n  task.reassignedBy = userId\n  task.reassignedAt = now\n  task.reassignReason = reason ?? null\n  task.updatedAt = now\n\n  await em.flush()\n\n  const instance = await em.findOne(WorkflowInstance, task.workflowInstanceId)\n  if (instance) {\n    await logWorkflowEvent(em, {\n      workflowInstanceId: instance.id,\n      stepInstanceId: task.stepInstanceId,\n      branchInstanceId: task.branchInstanceId ?? null,\n      eventType: 'USER_TASK_REASSIGNED',\n      eventData: {\n        taskId: task.id,\n        taskName: task.taskName,\n        reassignedBy: userId,\n        reason: reason ?? null,\n        from: previous,\n        to: { assignedTo, assignedToRoles },\n      },\n      userId,\n      tenantId: instance.tenantId,\n      organizationId: instance.organizationId,\n    })\n  }\n\n  return task\n}\n\n// ============================================================================\n// Helper Functions\n// ============================================================================\n\n/**\n * Log workflow event to event sourcing table\n */\nasync function logWorkflowEvent(\n  em: EntityManager,\n  event: {\n    workflowInstanceId: string\n    stepInstanceId: string | null\n    branchInstanceId?: string | null\n    eventType: string\n    eventData: any\n    userId?: string\n    tenantId: string\n    organizationId: string\n  }\n): Promise<WorkflowEvent> {\n  const workflowEvent = em.create(WorkflowEvent, {\n    ...event,\n    occurredAt: new Date(),\n  })\n\n  await em.persist(workflowEvent).flush()\n  return workflowEvent\n}\n\n/**\n * Validate form data against the task's authored schema.\n *\n * Required-field presence in BOTH accepted `formSchema` shapes: the JSON-Schema\n * form and the `{ fields: [...] }` form the Studio writes, whose per-field\n * `required: true` flag this used to ignore entirely \u2014 so a task authored in\n * the visual editor validated nothing however many fields its author marked\n * mandatory. Both shapes now resolve through `lib/task-form-schema.ts`, the\n * same module the renderer walks, so they cannot drift apart again.\n *\n * Presence-only, deliberately: type checking would need the full JSON-Schema\n * vocabulary, and what matters is that a required field cannot be skipped.\n *\n * @param formData - User-provided form data\n * @param formSchema - Authored schema, in either accepted shape\n * @throws Error if validation fails\n */\nexport function validateFormData(\n  formData: Record<string, any>,\n  formSchema: unknown\n): void {\n  for (const field of readRequiredFormFields(formSchema)) {\n    if (!(field in formData) || formData[field] === null || formData[field] === undefined) {\n      throw new Error(`Required field missing: ${field}`)\n    }\n  }\n}\n"],
+  "mappings": "AAcA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,uBAAuB;AAChC,SAAS,iCAAiC;AAC1C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,+BAA+B;AACxC,SAAS,8BAA8B;AACvC,YAAY,iBAAiB;AAC7B,YAAY,uBAAuB;AACnC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AA+ChC,MAAM,sBAAsB,MAAM;AAAA,EACvC,YACE,SACO,MACA,SACP;AACA,UAAM,OAAO;AAHN;AACA;AAGP,SAAK,OAAO;AAAA,EACd;AACF;AAqBA,eAAsB,iBACpB,IACA,WACA,SACe;AACf,QAAM,EAAE,QAAQ,UAAU,QAAQ,UAAU,YAAY,MAAM,IAAI;AAGlE,QAAM,OAAO,MAAM,GAAG,QAAQ,UAAU;AAAA,IACtC,IAAI;AAAA,IACJ,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,IACtB,QAAQ,EAAE,KAAK,CAAC,WAAW,aAAa,EAAE;AAAA,EAC5C,CAAC;AAED,MAAI,CAAC,MAAM;AACT,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA,EAAE,OAAO;AAAA,IACX;AAAA,EACF;AAMA,QAAM,WAAW,KAAK,aAAa,KAAK;AACxC,MAAI,YAAY,aAAa,QAAQ;AACnC,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA,EAAE,QAAQ,YAAY,SAAS;AAAA,IACjC;AAAA,EACF;AAIA,MAAI,KAAK,YAAY;AACnB,QAAI;AACF,uBAAiB,UAAU,KAAK,UAAU;AAAA,IAC5C,SAAS,OAAO;AACd,YAAM,IAAI;AAAA,QACR,iBAAiB,QAAQ,MAAM,UAAU;AAAA,QACzC;AAAA,QACA,EAAE,QAAQ,YAAY,KAAK,YAAY,SAAS;AAAA,MAClD;AAAA,IACF;AAAA,EACF;AAMA,QAAM,iBAAiB,aACnB,kBAAkB,MAAM,wBAAwB,IAAI,IAAI,GAAG,WAAW,UAAU,IAChF;AAEJ,MAAI,cAAc,CAAC,gBAAgB;AACjC,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA,EAAE,QAAQ,WAAW;AAAA,IACvB;AAAA,EACF;AAKA,QAAM,iBAAiB,qBAAqB,UAAU,gBAAgB,EAAE;AAGxE,QAAM,MAAM,oBAAI,KAAK;AACrB,OAAK,SAAS;AACd,OAAK,WAAW;AAChB,OAAK,cAAc;AACnB,OAAK,cAAc;AACnB,OAAK,WAAW,YAAY;AAC5B,OAAK,YAAY;AAEjB,QAAM,GAAG,MAAM;AAGf,QAAM,WAAW,MAAM,GAAG,QAAQ,kBAAkB,KAAK,kBAAkB;AAC3E,MAAI,CAAC,UAAU;AACb,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA,EAAE,oBAAoB,KAAK,mBAAmB;AAAA,IAChD;AAAA,EACF;AASA,MAAI,KAAK,kBAAkB;AACzB,UAAM,iBAAiB,IAAI;AAAA,MACzB,oBAAoB,SAAS;AAAA,MAC7B,gBAAgB,KAAK;AAAA,MACrB,kBAAkB,KAAK;AAAA,MACvB,WAAW;AAAA,MACX,WAAW;AAAA,QACT,QAAQ,KAAK;AAAA,QACb,UAAU,KAAK;AAAA,QACf,aAAa;AAAA,QACb,UAAU;AAAA,QACV,GAAI,iBAAiB,EAAE,YAAY,eAAe,GAAG,IAAI,CAAC;AAAA,MAC5D;AAAA,MACA;AAAA,MACA,UAAU,SAAS;AAAA,MACnB,gBAAgB,SAAS;AAAA,IAC3B,CAAC;AAED,UAAM,EAAE,aAAa,IAAI,MAAM,OAAO,oBAAoB;AAC1D,UAAM,UAAU,MAAM,aAAa,IAAI;AAAA,MACrC,YAAY,SAAS;AAAA,MACrB,kBAAkB,KAAK;AAAA,MACvB,UAAU,SAAS;AAAA,MACnB,gBAAgB,SAAS;AAAA,MACzB,cAAc;AAAA,MACd,oBAAoB,KAAK;AAAA,MACzB,YAAY,EAAE,YAAY,KAAK,IAAI,UAAU,eAAe;AAAA,IAC9D,CAAC;AAED,QAAI,SAAS;AACX,YAAM,gBAAgB,IAAI,WAAW,SAAS,IAAI,EAAE,OAAO,CAAC;AAAA,IAC9D;AACA;AAAA,EACF;AAGA,WAAS,UAAU;AAAA,IACjB,GAAG,SAAS;AAAA,IACZ,GAAG;AAAA,EACL;AACA,WAAS,YAAY;AAGrB,QAAM,iBAAiB,IAAI;AAAA,IACzB,oBAAoB,SAAS;AAAA,IAC7B,gBAAgB,KAAK;AAAA,IACrB,WAAW;AAAA,IACX,WAAW;AAAA,MACT,QAAQ,KAAK;AAAA,MACb,UAAU,KAAK;AAAA,MACf,aAAa;AAAA,MACb,UAAU;AAAA,MACV,GAAI,iBAAiB,EAAE,YAAY,eAAe,GAAG,IAAI,CAAC;AAAA,IAC5D;AAAA,IACA;AAAA,IACA,UAAU,SAAS;AAAA,IACnB,gBAAgB,SAAS;AAAA,EAC3B,CAAC;AAGD,QAAM,eAAe,MAAM,GAAG,QAAQ,cAAc;AAAA,IAClD,IAAI,KAAK;AAAA,IACT,QAAQ;AAAA,EACV,CAAC;AAED,MAAI,cAAc;AAChB,UAAM,YAAY,SAAS,IAAI,cAAc,EAAE,YAAY,KAAK,IAAI,UAAU,eAAe,CAAC;AAAA,EAChG;AAGA,QAAM,gBAAgB,SAAS;AAG/B,QAAM,aAAa,MAAM,0BAA0B,IAAI,QAAQ;AAE/D,MAAI,CAAC,YAAY;AACf,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA,EAAE,cAAc,SAAS,aAAa;AAAA,IACxC;AAAA,EACF;AAEA,QAAM,oBAAoB;AAAA,IACxB,iBAAiB,SAAS;AAAA,IAC1B;AAAA,EACF;AAQA,QAAM,qBAAqB,iBACvB;AAAA,IACE,WAAW,WAAW,eAAe,CAAC;AAAA,IACtC,eAAe;AAAA,IACf;AAAA,EACF,IACA;AAEJ,MAAI,kBAAkB,CAAC,oBAAoB;AACzC,WAAO,KAAK,mFAAmF;AAAA,MAC7F,WAAW;AAAA,MACX,QAAQ,KAAK;AAAA,MACb,YAAY,eAAe;AAAA,MAC3B,cAAc,eAAe;AAAA,MAC7B;AAAA,IACF,CAAC;AAAA,EACH;AAEA,MAAI,qBAAqB,sBAAsB;AAC/C,MAAI,eAAe,oBAAoB,YAAY;AAEnD,MAAI,CAAC,cAAc;AAEjB,UAAM,mBAAmB,WAAW,WAAW,eAAe,CAAC,GAAG;AAAA,MAChE,CAAC,MAAW,EAAE,eAAe,iBAAiB,EAAE,YAAY;AAAA,IAC9D;AAEA,QAAI,gBAAgB,WAAW,GAAG;AAEhC;AAAA,IACF;AAGA,UAAM,mBAAmB,MAAM,kBAAkB;AAAA,MAC/C;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,UAAM,uBAAuB,iBAAiB,KAAK,OAAK,EAAE,OAAO;AAEjE,QAAI,CAAC,wBAAwB,CAAC,qBAAqB,YAAY;AAE7D,eAAS,SAAS;AAClB,YAAM,GAAG,MAAM;AACf;AAAA,IACF;AAEA,mBAAe,qBAAqB,WAAW;AAC/C,yBAAqB,qBAAqB;AAAA,EAC5C;AAOA,MAAI,SAAS,WAAW,UAAU;AAChC,aAAS,SAAS;AAClB,UAAM,GAAG,MAAM;AAAA,EACjB;AAIA,QAAM,mBAAmB,MAAM,kBAAkB;AAAA,IAC/C;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,EAAE,GAAG,mBAAmB,cAAc,oBAAoB,aAAa;AAAA,EACzE;AAEA,MAAI,CAAC,iBAAiB,SAAS;AAC7B,WAAO,MAAM,qBAAqB,EAAE,WAAW,gBAAgB,KAAK,iBAAiB,MAAM,CAAC;AAE5F;AAAA,EACF;AAGA,QAAM,gBAAgB,IAAI,WAAW,SAAS,IAAI,EAAE,OAAO,CAAC;AAC9D;AAUA,SAAS,eACP,WACA,iBACS;AACT,MAAI,gBAAgB,WAAW,EAAG,QAAO;AACzC,QAAM,OAAO,IAAI,IAAI,eAAe;AACpC,SAAO,UAAU,KAAK,CAAC,SAAS,KAAK,IAAI,IAAI,CAAC;AAChD;AAuCA,eAAsB,cACpB,IACA,QACA,QACA,OACA,iBACe;AACf,QAAM,OAAO,MAAM,GAAG,QAAQ,UAAU;AAAA,IACtC,IAAI;AAAA,IACJ,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,IACtB,QAAQ;AAAA,EACV,CAAC;AAED,MAAI,CAAC,MAAM;AACT,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA,EAAE,OAAO;AAAA,IACX;AAAA,EACF;AAEA,MAAI,KAAK,YAAY;AACnB,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA,EAAE,QAAQ,YAAY,KAAK,WAAW;AAAA,IACxC;AAAA,EACF;AAEA,MAAI,CAAC,KAAK,mBAAmB,KAAK,gBAAgB,WAAW,GAAG;AAC9D,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA,EAAE,OAAO;AAAA,IACX;AAAA,EACF;AAEA,MAAI,CAAC,eAAe,KAAK,iBAAiB,eAAe,GAAG;AAC1D,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA,EAAE,OAAO;AAAA,IACX;AAAA,EACF;AAEA,QAAM,MAAM,oBAAI,KAAK;AACrB,QAAM,UAAU,MAAM,GAAG;AAAA,IACvB;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,QAAQ;AAAA,MACR,WAAW;AAAA,IACb;AAAA,IACA;AAAA,MACE,WAAW;AAAA,MACX,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,WAAW;AAAA,IACb;AAAA,EACF;AAEA,MAAI,YAAY,GAAG;AACjB,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA,EAAE,OAAO;AAAA,IACX;AAAA,EACF;AAKA,OAAK,YAAY;AACjB,OAAK,YAAY;AACjB,OAAK,SAAS;AACd,OAAK,YAAY;AAEjB,QAAM,GAAG,MAAM;AAGf,QAAM,WAAW,MAAM,GAAG,QAAQ,kBAAkB,KAAK,kBAAkB;AAC3E,MAAI,UAAU;AACZ,UAAM,iBAAiB,IAAI;AAAA,MACzB,oBAAoB,SAAS;AAAA,MAC7B,gBAAgB,KAAK;AAAA,MACrB,WAAW;AAAA,MACX,WAAW;AAAA,QACT,QAAQ,KAAK;AAAA,QACb,UAAU,KAAK;AAAA,QACf,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA,UAAU,SAAS;AAAA,MACnB,gBAAgB,SAAS;AAAA,IAC3B,CAAC;AAAA,EACH;AACF;AAeA,eAAsB,gBACpB,IACA,QACA,QACA,OACe;AACf,QAAM,OAAO,MAAM,GAAG,QAAQ,UAAU;AAAA,IACtC,IAAI;AAAA,IACJ,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,IACtB,QAAQ;AAAA,EACV,CAAC;AAED,MAAI,CAAC,MAAM;AACT,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA,EAAE,OAAO;AAAA,IACX;AAAA,EACF;AAEA,MAAI,KAAK,cAAc,QAAQ;AAC7B,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA,EAAE,QAAQ,WAAW,KAAK,UAAU;AAAA,IACtC;AAAA,EACF;AAEA,QAAM,MAAM,oBAAI,KAAK;AACrB,QAAM,WAAW,MAAM,GAAG;AAAA,IACxB;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,QAAQ;AAAA,MACR,WAAW;AAAA,IACb;AAAA,IACA;AAAA,MACE,WAAW;AAAA,MACX,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,WAAW;AAAA,IACb;AAAA,EACF;AAEA,MAAI,aAAa,GAAG;AAClB,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA,EAAE,OAAO;AAAA,IACX;AAAA,EACF;AAEA,OAAK,YAAY;AACjB,OAAK,YAAY;AACjB,OAAK,SAAS;AACd,OAAK,YAAY;AAEjB,QAAM,GAAG,MAAM;AAEf,QAAM,WAAW,MAAM,GAAG,QAAQ,kBAAkB,KAAK,kBAAkB;AAC3E,MAAI,UAAU;AACZ,UAAM,iBAAiB,IAAI;AAAA,MACzB,oBAAoB,SAAS;AAAA,MAC7B,gBAAgB,KAAK;AAAA,MACrB,WAAW;AAAA,MACX,WAAW;AAAA,QACT,QAAQ,KAAK;AAAA,QACb,UAAU,KAAK;AAAA,QACf,YAAY;AAAA,MACd;AAAA,MACA;AAAA,MACA,UAAU,SAAS;AAAA,MACnB,gBAAgB,SAAS;AAAA,IAC3B,CAAC;AAAA,EACH;AACF;AAmCA,MAAM,wBAA2C,CAAC,WAAW,aAAa;AA0B1E,eAAsB,iBACpB,IACA,SACmB;AACnB,QAAM,EAAE,QAAQ,QAAQ,QAAQ,QAAQ,MAAM,IAAI;AAElD,QAAM,OAAO,MAAM,GAAG,QAAQ,UAAU;AAAA,IACtC,IAAI;AAAA,IACJ,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,EACxB,CAAC;AAED,MAAI,CAAC,MAAM;AACT,UAAM,IAAI,cAAc,kBAAkB,kBAAkB,EAAE,OAAO,CAAC;AAAA,EACxE;AAEA,MAAI,CAAC,sBAAsB,SAAS,KAAK,MAAM,GAAG;AAChD,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA,EAAE,QAAQ,QAAQ,KAAK,OAAO;AAAA,IAChC;AAAA,EACF;AAEA,QAAM,aAAa,OAAO,cAAc;AACxC,QAAM,kBACJ,OAAO,mBAAmB,OAAO,gBAAgB,SAAS,IAAI,CAAC,GAAG,OAAO,eAAe,IAAI;AAE9F,QAAM,WAAW;AAAA,IACf,YAAY,KAAK,cAAc;AAAA,IAC/B,iBAAiB,KAAK,mBAAmB;AAAA,IACzC,WAAW,KAAK,aAAa;AAAA,EAC/B;AAEA,QAAM,MAAM,oBAAI,KAAK;AAErB,OAAK,aAAa;AAKlB,OAAK,eAAe;AACpB,OAAK,kBAAkB;AACvB,OAAK,YAAY;AACjB,OAAK,YAAY;AAGjB,MAAI,KAAK,WAAW,cAAe,MAAK,SAAS;AACjD,OAAK,eAAe;AACpB,OAAK,eAAe;AACpB,OAAK,iBAAiB,UAAU;AAChC,OAAK,YAAY;AAEjB,QAAM,GAAG,MAAM;AAEf,QAAM,WAAW,MAAM,GAAG,QAAQ,kBAAkB,KAAK,kBAAkB;AAC3E,MAAI,UAAU;AACZ,UAAM,iBAAiB,IAAI;AAAA,MACzB,oBAAoB,SAAS;AAAA,MAC7B,gBAAgB,KAAK;AAAA,MACrB,kBAAkB,KAAK,oBAAoB;AAAA,MAC3C,WAAW;AAAA,MACX,WAAW;AAAA,QACT,QAAQ,KAAK;AAAA,QACb,UAAU,KAAK;AAAA,QACf,cAAc;AAAA,QACd,QAAQ,UAAU;AAAA,QAClB,MAAM;AAAA,QACN,IAAI,EAAE,YAAY,gBAAgB;AAAA,MACpC;AAAA,MACA;AAAA,MACA,UAAU,SAAS;AAAA,MACnB,gBAAgB,SAAS;AAAA,IAC3B,CAAC;AAAA,EACH;AAEA,SAAO;AACT;AASA,eAAe,iBACb,IACA,OAUwB;AACxB,QAAM,gBAAgB,GAAG,OAAO,eAAe;AAAA,IAC7C,GAAG;AAAA,IACH,YAAY,oBAAI,KAAK;AAAA,EACvB,CAAC;AAED,QAAM,GAAG,QAAQ,aAAa,EAAE,MAAM;AACtC,SAAO;AACT;AAmBO,SAAS,iBACd,UACA,YACM;AACN,aAAW,SAAS,uBAAuB,UAAU,GAAG;AACtD,QAAI,EAAE,SAAS,aAAa,SAAS,KAAK,MAAM,QAAQ,SAAS,KAAK,MAAM,QAAW;AACrF,YAAM,IAAI,MAAM,2BAA2B,KAAK,EAAE;AAAA,IACpD;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/workflows/lib/task-inspector-config.js

@@ -0,0 +1,182 @@
+import { flattenTaskText } from "./task-resolution.js";
+const TASK_PRIORITY_VALUES = ["low", "medium", "high", "extreme"];
+const TASK_ON_BREACH_ACTIONS = ["notify", "reassign", "route"];
+const TASK_DECISION_STYLES = [
+  "primary",
+  "secondary",
+  "destructive"
+];
+const TASK_ASSIGNEE_KINDS = ["user", "customer"];
+const TASK_ASSIGNEE_KIND_MODES = {
+  user: ["role", "user", "dynamic", "rule"],
+  customer: ["user", "dynamic"]
+};
+function isTaskAssigneeKind(value) {
+  return typeof value === "string" && TASK_ASSIGNEE_KINDS.includes(value);
+}
+function deriveTaskAssigneeKind(config) {
+  return config.assigneeKind === "customer" ? "customer" : "user";
+}
+function assignmentModesForAssigneeKind(kind) {
+  return TASK_ASSIGNEE_KIND_MODES[kind] ?? TASK_ASSIGNEE_KIND_MODES.user;
+}
+function coerceAssignmentModeToAssigneeKind(mode, kind) {
+  const allowed = assignmentModesForAssigneeKind(kind);
+  if (allowed.includes(mode)) return mode;
+  if (allowed.includes("dynamic")) return "dynamic";
+  return allowed[0] ?? "role";
+}
+function resolveTaskAssigneeKindPersistence(original, edited) {
+  if (edited === "customer") return "customer";
+  return original === "user" ? "user" : void 0;
+}
+const TEMPLATE_TOKEN_PATTERN = /\{\{[^}]+\}\}/;
+let draftKeyCounter = 0;
+function nextDraftKey(prefix) {
+  draftKeyCounter += 1;
+  return `${prefix}_${draftKeyCounter}`;
+}
+function generateDecisionId() {
+  return `d_${Date.now().toString(36)}_${Math.random().toString(36).slice(2, 11)}`;
+}
+function flattenTaskTextForEditing(value) {
+  return flattenTaskText(value) ?? "";
+}
+function applyEditedTaskText(original, edited) {
+  if (!edited.trim().length) return void 0;
+  if (original != null && flattenTaskTextForEditing(original) === edited) return original;
+  return edited;
+}
+function isTaskPriority(value) {
+  return typeof value === "string" && TASK_PRIORITY_VALUES.includes(value);
+}
+function deriveTaskAssignmentMode(config) {
+  if (typeof config.assignmentRule === "string" && config.assignmentRule.length > 0) return "rule";
+  const assignedTo = config.assignedTo;
+  if (typeof assignedTo === "string" && assignedTo.length > 0) {
+    return TEMPLATE_TOKEN_PATTERN.test(assignedTo) ? "dynamic" : "user";
+  }
+  return "role";
+}
+function entityBindingsToDrafts(bindings) {
+  if (!Array.isArray(bindings)) return [];
+  return bindings.map((binding) => ({
+    key: nextDraftKey("binding"),
+    entityType: typeof binding?.entityType === "string" ? binding.entityType : "",
+    idPath: typeof binding?.idPath === "string" ? binding.idPath : "",
+    label: flattenTaskTextForEditing(binding?.label),
+    ...binding?.label != null ? { labelSource: binding.label } : {}
+  }));
+}
+function draftsToEntityBindings(drafts) {
+  if (!Array.isArray(drafts)) return void 0;
+  const bindings = drafts.reduce((acc, draft) => {
+    const entityType = draft.entityType.trim();
+    const idPath = draft.idPath.trim();
+    if (!entityType || !idPath) return acc;
+    const label = applyEditedTaskText(draft.labelSource, draft.label);
+    acc.push({ entityType, idPath, ...label !== void 0 ? { label } : {} });
+    return acc;
+  }, []);
+  return bindings.length > 0 ? bindings : void 0;
+}
+function remindersToOffsets(reminders) {
+  if (!Array.isArray(reminders)) return [];
+  return reminders.map((reminder) => typeof reminder?.offset === "string" ? reminder.offset : "");
+}
+function offsetsToReminders(offsets) {
+  if (!Array.isArray(offsets)) return void 0;
+  const reminders = offsets.map((offset) => typeof offset === "string" ? offset.trim() : "").filter((offset) => offset.length > 0).map((offset) => ({ offset }));
+  return reminders.length > 0 ? reminders : void 0;
+}
+function onBreachToDraft(onBreach) {
+  return {
+    action: onBreach?.action ?? "",
+    reassignTo: onBreach?.reassignTo ?? "",
+    transitionId: onBreach?.transitionId ?? ""
+  };
+}
+function draftToOnBreach(draft) {
+  const action = draft?.action;
+  if (!action) return void 0;
+  if (action === "reassign") {
+    const reassignTo = draft?.reassignTo.trim() ?? "";
+    return reassignTo ? { action, reassignTo } : { action };
+  }
+  if (action === "route") {
+    const transitionId = draft?.transitionId.trim() ?? "";
+    return transitionId ? { action, transitionId } : { action };
+  }
+  return { action };
+}
+function decisionsToDrafts(decisions) {
+  if (!Array.isArray(decisions)) return [];
+  return decisions.map((decision) => ({
+    key: nextDraftKey("decision"),
+    id: typeof decision?.id === "string" ? decision.id : "",
+    label: flattenTaskTextForEditing(decision?.label),
+    ...decision?.label != null ? { labelSource: decision.label } : {},
+    transitionId: typeof decision?.transitionId === "string" ? decision.transitionId : "",
+    style: decision?.style ?? ""
+  }));
+}
+function draftsToDecisions(drafts) {
+  if (!Array.isArray(drafts)) return void 0;
+  const decisions = drafts.reduce((acc, draft) => {
+    const id = draft.id.trim();
+    const transitionId = draft.transitionId.trim();
+    if (!id || !transitionId) return acc;
+    const label = applyEditedTaskText(draft.labelSource, draft.label) ?? id;
+    acc.push({ id, label, transitionId, ...draft.style ? { style: draft.style } : {} });
+    return acc;
+  }, []);
+  return decisions.length > 0 ? decisions : void 0;
+}
+function newDecisionDraft(transitionId = "") {
+  return { key: nextDraftKey("decision"), id: generateDecisionId(), label: "", transitionId, style: "" };
+}
+function newEntityBindingDraft() {
+  return { key: nextDraftKey("binding"), entityType: "", idPath: "", label: "" };
+}
+function resolveTaskDeadlinePersistence(config, edited) {
+  const duration = edited.trim();
+  if (!duration) return {};
+  if (config.deadline) {
+    return { deadline: config.deadline.duration === duration ? config.deadline : { duration } };
+  }
+  return { slaDuration: duration };
+}
+function readTaskDeadlineDraft(config) {
+  const duration = config.deadline?.duration ?? config.slaDuration;
+  return typeof duration === "string" ? duration : "";
+}
+export {
+  TASK_ASSIGNEE_KINDS,
+  TASK_ASSIGNEE_KIND_MODES,
+  TASK_DECISION_STYLES,
+  TASK_ON_BREACH_ACTIONS,
+  TASK_PRIORITY_VALUES,
+  applyEditedTaskText,
+  assignmentModesForAssigneeKind,
+  coerceAssignmentModeToAssigneeKind,
+  decisionsToDrafts,
+  deriveTaskAssigneeKind,
+  deriveTaskAssignmentMode,
+  draftToOnBreach,
+  draftsToDecisions,
+  draftsToEntityBindings,
+  entityBindingsToDrafts,
+  flattenTaskTextForEditing,
+  generateDecisionId,
+  isTaskAssigneeKind,
+  isTaskPriority,
+  newDecisionDraft,
+  newEntityBindingDraft,
+  offsetsToReminders,
+  onBreachToDraft,
+  readTaskDeadlineDraft,
+  remindersToOffsets,
+  resolveTaskAssigneeKindPersistence,
+  resolveTaskDeadlinePersistence
+};
+//# sourceMappingURL=task-inspector-config.js.map

package/dist/modules/workflows/lib/task-inspector-config.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/workflows/lib/task-inspector-config.ts"],
+  "sourcesContent": ["/**\n * Task inspector \u2194 `userTaskConfig` mapping (spec \u00A76.1).\n *\n * PURE by construction (no React, ORM, DI or xyflow imports): the inspector\n * sections are thin controls over the drafts this module produces, so every\n * rule about what a save writes is unit-testable without rendering a dialog.\n *\n * The governing rule everywhere below is UNTOUCHED MEANS UNCHANGED. A config\n * that carried no inspector vocabulary must serialize byte-identically after a\n * save that never touched these sections, and a value the author did not edit\n * must come back in the shape it was authored in \u2014 that is why every mapper\n * takes the ORIGINAL alongside the edited draft rather than rebuilding from\n * the draft alone.\n */\n\nimport { flattenTaskText } from './task-resolution'\nimport type {\n  TaskDeadline,\n  TaskDecision,\n  TaskEntityBinding,\n  TaskLocalizedString,\n  TaskOnBreach,\n  TaskPriority,\n  TaskReminder,\n  UserTaskAssigneeKind,\n  UserTaskConfig,\n} from '../data/validators'\n\n/** Mirrors the platform's priority labels; `''` is \"not set\". */\nexport const TASK_PRIORITY_VALUES: readonly TaskPriority[] = ['low', 'medium', 'high', 'extreme'] as const\n\nexport const TASK_ON_BREACH_ACTIONS: readonly TaskOnBreach['action'][] = ['notify', 'reassign', 'route'] as const\n\nexport const TASK_DECISION_STYLES: readonly NonNullable<TaskDecision['style']>[] = [\n  'primary',\n  'secondary',\n  'destructive',\n] as const\n\n/**\n * Which of the four \u00A76.1 assignment tabs a stored config belongs to. Derived,\n * never persisted: the tab IS the three assignment keys, so there is no fifth\n * source of truth to keep in sync.\n */\nexport type TaskAssignmentMode = 'role' | 'user' | 'dynamic' | 'rule'\n\n/**\n * Which principal namespace the task is addressed to (design \u00A77.1). `'user'` is\n * the backoffice; `'customer'` is a portal principal, and the only value the\n * engine treats as portal work.\n */\nexport const TASK_ASSIGNEE_KINDS: readonly UserTaskAssigneeKind[] = ['user', 'customer'] as const\n\n/**\n * The assignment modes each audience can actually be EXECUTED in \u2014 read off\n * `resolveTaskAssignment`, not off what the tab strip happens to render.\n *\n * `assigneeKind: 'customer'` is honoured ONLY when an individual assignee\n * resolves to a non-empty string, and it forces `assignedToRoles` to null. So\n * the two modes that name no individual are inert for a portal task: a role\n * queue leaves `assignedTo` null (the row is created backoffice), and\n * `assignmentRule` is not read by `resolveTaskAssignment` at all. Offering them\n * under the customer audience would be offering an author a control the engine\n * silently discards.\n *\n * Order mirrors the full list so a tab does not move when the audience changes.\n */\nexport const TASK_ASSIGNEE_KIND_MODES: Record<UserTaskAssigneeKind, readonly TaskAssignmentMode[]> = {\n  user: ['role', 'user', 'dynamic', 'rule'],\n  customer: ['user', 'dynamic'],\n}\n\nexport function isTaskAssigneeKind(value: unknown): value is UserTaskAssigneeKind {\n  return typeof value === 'string' && (TASK_ASSIGNEE_KINDS as readonly string[]).includes(value)\n}\n\n/**\n * The audience a stored config opens on. Absent means `'user'` \u2014 which is what\n * every definition authored before the key existed has always meant, and why\n * nothing has to be written for the default.\n */\nexport function deriveTaskAssigneeKind(\n  config: Pick<UserTaskConfig, 'assigneeKind'>,\n): UserTaskAssigneeKind {\n  return config.assigneeKind === 'customer' ? 'customer' : 'user'\n}\n\nexport function assignmentModesForAssigneeKind(\n  kind: UserTaskAssigneeKind,\n): readonly TaskAssignmentMode[] {\n  return TASK_ASSIGNEE_KIND_MODES[kind] ?? TASK_ASSIGNEE_KIND_MODES.user\n}\n\n/**\n * The tab a mode collapses to when the audience no longer offers it.\n *\n * Only the customer audience narrows the set, and what it drops are the two\n * modes that name no individual. Landing on Dynamic rather than on the first\n * remaining tab is the honest default: a portal principal's id comes out of the\n * run context, it is not a literal an author types.\n */\nexport function coerceAssignmentModeToAssigneeKind(\n  mode: TaskAssignmentMode,\n  kind: UserTaskAssigneeKind,\n): TaskAssignmentMode {\n  const allowed = assignmentModesForAssigneeKind(kind)\n  if (allowed.includes(mode)) return mode\n  if (allowed.includes('dynamic')) return 'dynamic'\n  return allowed[0] ?? 'role'\n}\n\n/**\n * What the audience picker writes back.\n *\n * `'customer'` is the only value the engine acts on, so it is the only value\n * that has to be persisted: a step left on the backoffice audience writes\n * NOTHING and a config that never declared the key serializes byte-identically\n * after a save that opened the inspector. The one exception is a config that\n * already spelled `'user'` explicitly \u2014 the same \"untouched means unchanged\"\n * rule `resolveTaskDeadlinePersistence` follows for its two keys, so opening the\n * inspector never rewrites a shape the author chose.\n */\nexport function resolveTaskAssigneeKindPersistence(\n  original: UserTaskAssigneeKind | undefined,\n  edited: UserTaskAssigneeKind,\n): UserTaskAssigneeKind | undefined {\n  if (edited === 'customer') return 'customer'\n  return original === 'user' ? 'user' : undefined\n}\n\nexport interface TaskEntityBindingDraft {\n  /** Stable React key; never persisted. */\n  key: string\n  entityType: string\n  idPath: string\n  label: string\n  /** The authored label before editing, so a locale map survives an untouched save. */\n  labelSource?: TaskLocalizedString\n}\n\nexport interface TaskOnBreachDraft {\n  action: '' | TaskOnBreach['action']\n  reassignTo: string\n  transitionId: string\n}\n\nexport interface TaskDecisionDraft {\n  /** Stable React key; never persisted (the durable `id` below is). */\n  key: string\n  id: string\n  label: string\n  labelSource?: TaskLocalizedString\n  transitionId: string\n  style: '' | NonNullable<TaskDecision['style']>\n}\n\nconst TEMPLATE_TOKEN_PATTERN = /\\{\\{[^}]+\\}\\}/\n\nlet draftKeyCounter = 0\n\nfunction nextDraftKey(prefix: string): string {\n  draftKeyCounter += 1\n  return `${prefix}_${draftKeyCounter}`\n}\n\n/** A durable, opaque decision id \u2014 never an index, never derived from the label. */\nexport function generateDecisionId(): string {\n  return `d_${Date.now().toString(36)}_${Math.random().toString(36).slice(2, 11)}`\n}\n\n/** The single-line form of authored copy, for editing in a plain control. */\nexport function flattenTaskTextForEditing(value: TaskLocalizedString | undefined | null): string {\n  return flattenTaskText(value) ?? ''\n}\n\n/**\n * Write edited copy back. Text identical to what the control was seeded with\n * returns the ORIGINAL value, so a locale map an author never touched is never\n * flattened to the tenant default by opening the inspector.\n */\nexport function applyEditedTaskText(\n  original: TaskLocalizedString | undefined | null,\n  edited: string,\n): TaskLocalizedString | undefined {\n  if (!edited.trim().length) return undefined\n  if (original != null && flattenTaskTextForEditing(original) === edited) return original\n  return edited\n}\n\nexport function isTaskPriority(value: unknown): value is TaskPriority {\n  return typeof value === 'string' && (TASK_PRIORITY_VALUES as readonly string[]).includes(value)\n}\n\n/**\n * Which tab a stored assignment opens on. An `assignedTo` carrying a `{{\u2026}}`\n * pill is Dynamic; a plain one is User; a business rule wins over both because\n * it is the only form the engine resolves through another module.\n */\nexport function deriveTaskAssignmentMode(\n  config: Pick<UserTaskConfig, 'assignedTo' | 'assignmentRule'>,\n): TaskAssignmentMode {\n  if (typeof config.assignmentRule === 'string' && config.assignmentRule.length > 0) return 'rule'\n  const assignedTo = config.assignedTo\n  if (typeof assignedTo === 'string' && assignedTo.length > 0) {\n    return TEMPLATE_TOKEN_PATTERN.test(assignedTo) ? 'dynamic' : 'user'\n  }\n  return 'role'\n}\n\nexport function entityBindingsToDrafts(\n  bindings: TaskEntityBinding[] | undefined | null,\n): TaskEntityBindingDraft[] {\n  if (!Array.isArray(bindings)) return []\n  return bindings.map((binding) => ({\n    key: nextDraftKey('binding'),\n    entityType: typeof binding?.entityType === 'string' ? binding.entityType : '',\n    idPath: typeof binding?.idPath === 'string' ? binding.idPath : '',\n    label: flattenTaskTextForEditing(binding?.label),\n    ...(binding?.label != null ? { labelSource: binding.label } : {}),\n  }))\n}\n\n/** Rows missing an entity type or an id path describe nothing and are dropped. */\nexport function draftsToEntityBindings(\n  drafts: TaskEntityBindingDraft[] | undefined | null,\n): TaskEntityBinding[] | undefined {\n  if (!Array.isArray(drafts)) return undefined\n  const bindings = drafts.reduce<TaskEntityBinding[]>((acc, draft) => {\n    const entityType = draft.entityType.trim()\n    const idPath = draft.idPath.trim()\n    if (!entityType || !idPath) return acc\n    const label = applyEditedTaskText(draft.labelSource, draft.label)\n    acc.push({ entityType, idPath, ...(label !== undefined ? { label } : {}) })\n    return acc\n  }, [])\n  return bindings.length > 0 ? bindings : undefined\n}\n\nexport function remindersToOffsets(reminders: TaskReminder[] | undefined | null): string[] {\n  if (!Array.isArray(reminders)) return []\n  return reminders.map((reminder) => (typeof reminder?.offset === 'string' ? reminder.offset : ''))\n}\n\nexport function offsetsToReminders(offsets: string[] | undefined | null): TaskReminder[] | undefined {\n  if (!Array.isArray(offsets)) return undefined\n  const reminders = offsets\n    .map((offset) => (typeof offset === 'string' ? offset.trim() : ''))\n    .filter((offset) => offset.length > 0)\n    .map((offset) => ({ offset }))\n  return reminders.length > 0 ? reminders : undefined\n}\n\nexport function onBreachToDraft(onBreach: TaskOnBreach | undefined | null): TaskOnBreachDraft {\n  return {\n    action: onBreach?.action ?? '',\n    reassignTo: onBreach?.reassignTo ?? '',\n    transitionId: onBreach?.transitionId ?? '',\n  }\n}\n\n/** Only the qualifier the chosen action actually uses is persisted. */\nexport function draftToOnBreach(draft: TaskOnBreachDraft | undefined | null): TaskOnBreach | undefined {\n  const action = draft?.action\n  if (!action) return undefined\n  if (action === 'reassign') {\n    const reassignTo = draft?.reassignTo.trim() ?? ''\n    return reassignTo ? { action, reassignTo } : { action }\n  }\n  if (action === 'route') {\n    const transitionId = draft?.transitionId.trim() ?? ''\n    return transitionId ? { action, transitionId } : { action }\n  }\n  return { action }\n}\n\nexport function decisionsToDrafts(decisions: TaskDecision[] | undefined | null): TaskDecisionDraft[] {\n  if (!Array.isArray(decisions)) return []\n  return decisions.map((decision) => ({\n    key: nextDraftKey('decision'),\n    id: typeof decision?.id === 'string' ? decision.id : '',\n    label: flattenTaskTextForEditing(decision?.label),\n    ...(decision?.label != null ? { labelSource: decision.label } : {}),\n    transitionId: typeof decision?.transitionId === 'string' ? decision.transitionId : '',\n    style: decision?.style ?? '',\n  }))\n}\n\n/**\n * A decision without a durable id or a route it points at is not a button the\n * task surface could render, so it is dropped rather than persisted broken. A\n * decision whose route was DELETED still persists \u2014 that is the Problems-panel\n * warning's job, not a silent deletion of the author's work.\n */\nexport function draftsToDecisions(\n  drafts: TaskDecisionDraft[] | undefined | null,\n): TaskDecision[] | undefined {\n  if (!Array.isArray(drafts)) return undefined\n  const decisions = drafts.reduce<TaskDecision[]>((acc, draft) => {\n    const id = draft.id.trim()\n    const transitionId = draft.transitionId.trim()\n    if (!id || !transitionId) return acc\n    const label = applyEditedTaskText(draft.labelSource, draft.label) ?? id\n    acc.push({ id, label, transitionId, ...(draft.style ? { style: draft.style } : {}) })\n    return acc\n  }, [])\n  return decisions.length > 0 ? decisions : undefined\n}\n\nexport function newDecisionDraft(transitionId = ''): TaskDecisionDraft {\n  return { key: nextDraftKey('decision'), id: generateDecisionId(), label: '', transitionId, style: '' }\n}\n\nexport function newEntityBindingDraft(): TaskEntityBindingDraft {\n  return { key: nextDraftKey('binding'), entityType: '', idPath: '', label: '' }\n}\n\nexport interface TaskDeadlinePersistence {\n  deadline?: TaskDeadline\n  slaDuration?: string\n}\n\n/**\n * Which key the edited deadline is written back to.\n *\n * `deadline` is the business-word superset and `slaDuration` the original bare\n * form, and 1.1 declared that the bare form keeps working forever. So the\n * inspector edits whichever key the config already carries and NEVER migrates\n * one to the other: a definition authored before this section keeps saving the\n * shape an older engine can read, and a definition that already declares a\n * `deadline` keeps it.\n */\nexport function resolveTaskDeadlinePersistence(\n  config: Pick<UserTaskConfig, 'deadline' | 'slaDuration'>,\n  edited: string,\n): TaskDeadlinePersistence {\n  const duration = edited.trim()\n  if (!duration) return {}\n  if (config.deadline) {\n    return { deadline: config.deadline.duration === duration ? config.deadline : { duration } }\n  }\n  return { slaDuration: duration }\n}\n\n/** The duration the deadline control opens with, whichever key carries it. */\nexport function readTaskDeadlineDraft(config: Pick<UserTaskConfig, 'deadline' | 'slaDuration'>): string {\n  const duration = config.deadline?.duration ?? config.slaDuration\n  return typeof duration === 'string' ? duration : ''\n}\n"],
+  "mappings": "AAeA,SAAS,uBAAuB;AAczB,MAAM,uBAAgD,CAAC,OAAO,UAAU,QAAQ,SAAS;AAEzF,MAAM,yBAA4D,CAAC,UAAU,YAAY,OAAO;AAEhG,MAAM,uBAAsE;AAAA,EACjF;AAAA,EACA;AAAA,EACA;AACF;AAcO,MAAM,sBAAuD,CAAC,QAAQ,UAAU;AAgBhF,MAAM,2BAAwF;AAAA,EACnG,MAAM,CAAC,QAAQ,QAAQ,WAAW,MAAM;AAAA,EACxC,UAAU,CAAC,QAAQ,SAAS;AAC9B;AAEO,SAAS,mBAAmB,OAA+C;AAChF,SAAO,OAAO,UAAU,YAAa,oBAA0C,SAAS,KAAK;AAC/F;AAOO,SAAS,uBACd,QACsB;AACtB,SAAO,OAAO,iBAAiB,aAAa,aAAa;AAC3D;AAEO,SAAS,+BACd,MAC+B;AAC/B,SAAO,yBAAyB,IAAI,KAAK,yBAAyB;AACpE;AAUO,SAAS,mCACd,MACA,MACoB;AACpB,QAAM,UAAU,+BAA+B,IAAI;AACnD,MAAI,QAAQ,SAAS,IAAI,EAAG,QAAO;AACnC,MAAI,QAAQ,SAAS,SAAS,EAAG,QAAO;AACxC,SAAO,QAAQ,CAAC,KAAK;AACvB;AAaO,SAAS,mCACd,UACA,QACkC;AAClC,MAAI,WAAW,WAAY,QAAO;AAClC,SAAO,aAAa,SAAS,SAAS;AACxC;AA4BA,MAAM,yBAAyB;AAE/B,IAAI,kBAAkB;AAEtB,SAAS,aAAa,QAAwB;AAC5C,qBAAmB;AACnB,SAAO,GAAG,MAAM,IAAI,eAAe;AACrC;AAGO,SAAS,qBAA6B;AAC3C,SAAO,KAAK,KAAK,IAAI,EAAE,SAAS,EAAE,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,EAAE,CAAC;AAChF;AAGO,SAAS,0BAA0B,OAAuD;AAC/F,SAAO,gBAAgB,KAAK,KAAK;AACnC;AAOO,SAAS,oBACd,UACA,QACiC;AACjC,MAAI,CAAC,OAAO,KAAK,EAAE,OAAQ,QAAO;AAClC,MAAI,YAAY,QAAQ,0BAA0B,QAAQ,MAAM,OAAQ,QAAO;AAC/E,SAAO;AACT;AAEO,SAAS,eAAe,OAAuC;AACpE,SAAO,OAAO,UAAU,YAAa,qBAA2C,SAAS,KAAK;AAChG;AAOO,SAAS,yBACd,QACoB;AACpB,MAAI,OAAO,OAAO,mBAAmB,YAAY,OAAO,eAAe,SAAS,EAAG,QAAO;AAC1F,QAAM,aAAa,OAAO;AAC1B,MAAI,OAAO,eAAe,YAAY,WAAW,SAAS,GAAG;AAC3D,WAAO,uBAAuB,KAAK,UAAU,IAAI,YAAY;AAAA,EAC/D;AACA,SAAO;AACT;AAEO,SAAS,uBACd,UAC0B;AAC1B,MAAI,CAAC,MAAM,QAAQ,QAAQ,EAAG,QAAO,CAAC;AACtC,SAAO,SAAS,IAAI,CAAC,aAAa;AAAA,IAChC,KAAK,aAAa,SAAS;AAAA,IAC3B,YAAY,OAAO,SAAS,eAAe,WAAW,QAAQ,aAAa;AAAA,IAC3E,QAAQ,OAAO,SAAS,WAAW,WAAW,QAAQ,SAAS;AAAA,IAC/D,OAAO,0BAA0B,SAAS,KAAK;AAAA,IAC/C,GAAI,SAAS,SAAS,OAAO,EAAE,aAAa,QAAQ,MAAM,IAAI,CAAC;AAAA,EACjE,EAAE;AACJ;AAGO,SAAS,uBACd,QACiC;AACjC,MAAI,CAAC,MAAM,QAAQ,MAAM,EAAG,QAAO;AACnC,QAAM,WAAW,OAAO,OAA4B,CAAC,KAAK,UAAU;AAClE,UAAM,aAAa,MAAM,WAAW,KAAK;AACzC,UAAM,SAAS,MAAM,OAAO,KAAK;AACjC,QAAI,CAAC,cAAc,CAAC,OAAQ,QAAO;AACnC,UAAM,QAAQ,oBAAoB,MAAM,aAAa,MAAM,KAAK;AAChE,QAAI,KAAK,EAAE,YAAY,QAAQ,GAAI,UAAU,SAAY,EAAE,MAAM,IAAI,CAAC,EAAG,CAAC;AAC1E,WAAO;AAAA,EACT,GAAG,CAAC,CAAC;AACL,SAAO,SAAS,SAAS,IAAI,WAAW;AAC1C;AAEO,SAAS,mBAAmB,WAAwD;AACzF,MAAI,CAAC,MAAM,QAAQ,SAAS,EAAG,QAAO,CAAC;AACvC,SAAO,UAAU,IAAI,CAAC,aAAc,OAAO,UAAU,WAAW,WAAW,SAAS,SAAS,EAAG;AAClG;AAEO,SAAS,mBAAmB,SAAkE;AACnG,MAAI,CAAC,MAAM,QAAQ,OAAO,EAAG,QAAO;AACpC,QAAM,YAAY,QACf,IAAI,CAAC,WAAY,OAAO,WAAW,WAAW,OAAO,KAAK,IAAI,EAAG,EACjE,OAAO,CAAC,WAAW,OAAO,SAAS,CAAC,EACpC,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE;AAC/B,SAAO,UAAU,SAAS,IAAI,YAAY;AAC5C;AAEO,SAAS,gBAAgB,UAA8D;AAC5F,SAAO;AAAA,IACL,QAAQ,UAAU,UAAU;AAAA,IAC5B,YAAY,UAAU,cAAc;AAAA,IACpC,cAAc,UAAU,gBAAgB;AAAA,EAC1C;AACF;AAGO,SAAS,gBAAgB,OAAuE;AACrG,QAAM,SAAS,OAAO;AACtB,MAAI,CAAC,OAAQ,QAAO;AACpB,MAAI,WAAW,YAAY;AACzB,UAAM,aAAa,OAAO,WAAW,KAAK,KAAK;AAC/C,WAAO,aAAa,EAAE,QAAQ,WAAW,IAAI,EAAE,OAAO;AAAA,EACxD;AACA,MAAI,WAAW,SAAS;AACtB,UAAM,eAAe,OAAO,aAAa,KAAK,KAAK;AACnD,WAAO,eAAe,EAAE,QAAQ,aAAa,IAAI,EAAE,OAAO;AAAA,EAC5D;AACA,SAAO,EAAE,OAAO;AAClB;AAEO,SAAS,kBAAkB,WAAmE;AACnG,MAAI,CAAC,MAAM,QAAQ,SAAS,EAAG,QAAO,CAAC;AACvC,SAAO,UAAU,IAAI,CAAC,cAAc;AAAA,IAClC,KAAK,aAAa,UAAU;AAAA,IAC5B,IAAI,OAAO,UAAU,OAAO,WAAW,SAAS,KAAK;AAAA,IACrD,OAAO,0BAA0B,UAAU,KAAK;AAAA,IAChD,GAAI,UAAU,SAAS,OAAO,EAAE,aAAa,SAAS,MAAM,IAAI,CAAC;AAAA,IACjE,cAAc,OAAO,UAAU,iBAAiB,WAAW,SAAS,eAAe;AAAA,IACnF,OAAO,UAAU,SAAS;AAAA,EAC5B,EAAE;AACJ;AAQO,SAAS,kBACd,QAC4B;AAC5B,MAAI,CAAC,MAAM,QAAQ,MAAM,EAAG,QAAO;AACnC,QAAM,YAAY,OAAO,OAAuB,CAAC,KAAK,UAAU;AAC9D,UAAM,KAAK,MAAM,GAAG,KAAK;AACzB,UAAM,eAAe,MAAM,aAAa,KAAK;AAC7C,QAAI,CAAC,MAAM,CAAC,aAAc,QAAO;AACjC,UAAM,QAAQ,oBAAoB,MAAM,aAAa,MAAM,KAAK,KAAK;AACrE,QAAI,KAAK,EAAE,IAAI,OAAO,cAAc,GAAI,MAAM,QAAQ,EAAE,OAAO,MAAM,MAAM,IAAI,CAAC,EAAG,CAAC;AACpF,WAAO;AAAA,EACT,GAAG,CAAC,CAAC;AACL,SAAO,UAAU,SAAS,IAAI,YAAY;AAC5C;AAEO,SAAS,iBAAiB,eAAe,IAAuB;AACrE,SAAO,EAAE,KAAK,aAAa,UAAU,GAAG,IAAI,mBAAmB,GAAG,OAAO,IAAI,cAAc,OAAO,GAAG;AACvG;AAEO,SAAS,wBAAgD;AAC9D,SAAO,EAAE,KAAK,aAAa,SAAS,GAAG,YAAY,IAAI,QAAQ,IAAI,OAAO,GAAG;AAC/E;AAiBO,SAAS,+BACd,QACA,QACyB;AACzB,QAAM,WAAW,OAAO,KAAK;AAC7B,MAAI,CAAC,SAAU,QAAO,CAAC;AACvB,MAAI,OAAO,UAAU;AACnB,WAAO,EAAE,UAAU,OAAO,SAAS,aAAa,WAAW,OAAO,WAAW,EAAE,SAAS,EAAE;AAAA,EAC5F;AACA,SAAO,EAAE,aAAa,SAAS;AACjC;AAGO,SAAS,sBAAsB,QAAkE;AACtG,QAAM,WAAW,OAAO,UAAU,YAAY,OAAO;AACrD,SAAO,OAAO,aAAa,WAAW,WAAW;AACnD;",
+  "names": []
+}

package/dist/modules/workflows/lib/task-list-query.js

@@ -0,0 +1,19 @@
+const TEXT_FILTERS = ["status", "workflowInstanceId"];
+const FLAG_FILTERS = ["myTasks", "overdue"];
+function buildTaskListQueryParams(filters, pagination) {
+  const params = new URLSearchParams();
+  params.set("limit", String(pagination.limit));
+  params.set("offset", String(pagination.offset));
+  for (const key of TEXT_FILTERS) {
+    const value = filters[key];
+    if (typeof value === "string" && value.length > 0) params.set(key, value);
+  }
+  for (const key of FLAG_FILTERS) {
+    if (filters[key] === "true") params.set(key, "true");
+  }
+  return params;
+}
+export {
+  buildTaskListQueryParams
+};
+//# sourceMappingURL=task-list-query.js.map

package/dist/modules/workflows/lib/task-list-query.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/workflows/lib/task-list-query.ts"],
+  "sourcesContent": ["/**\n * Query-string builder for the user-task inbox list request (PURE).\n *\n * The inbox defaults its view filter to \"My Tasks\", so every filter the page\n * offers has to reach `GET /api/workflows/tasks`. Forwarding only a subset is\n * silent: the default view claims to show the caller's tasks while listing\n * every task in the organization. Keeping the builder outside the component\n * makes the forwarded set unit-testable.\n */\n\nexport type TaskListFilterValues = Record<string, unknown>\n\nexport type TaskListPagination = {\n  limit: number\n  offset: number\n}\n\nconst TEXT_FILTERS = ['status', 'workflowInstanceId'] as const\nconst FLAG_FILTERS = ['myTasks', 'overdue'] as const\n\n/**\n * @deprecated The inbox moved to `/backend/work-inbox`; use\n * `buildWorkInboxListQueryParams` from `lib/work-inbox/query.ts`, which forwards\n * the kind/module/entity-type/role filters the Work Inbox adds. Kept exported\n * because import paths are a frozen contract surface\n * (BACKWARD_COMPATIBILITY.md \u00A73) and `GET /api/workflows/tasks` still exists.\n */\nexport function buildTaskListQueryParams(\n  filters: TaskListFilterValues,\n  pagination: TaskListPagination,\n): URLSearchParams {\n  const params = new URLSearchParams()\n  params.set('limit', String(pagination.limit))\n  params.set('offset', String(pagination.offset))\n\n  for (const key of TEXT_FILTERS) {\n    const value = filters[key]\n    if (typeof value === 'string' && value.length > 0) params.set(key, value)\n  }\n\n  for (const key of FLAG_FILTERS) {\n    if (filters[key] === 'true') params.set(key, 'true')\n  }\n\n  return params\n}\n"],
+  "mappings": "AAiBA,MAAM,eAAe,CAAC,UAAU,oBAAoB;AACpD,MAAM,eAAe,CAAC,WAAW,SAAS;AASnC,SAAS,yBACd,SACA,YACiB;AACjB,QAAM,SAAS,IAAI,gBAAgB;AACnC,SAAO,IAAI,SAAS,OAAO,WAAW,KAAK,CAAC;AAC5C,SAAO,IAAI,UAAU,OAAO,WAAW,MAAM,CAAC;AAE9C,aAAW,OAAO,cAAc;AAC9B,UAAM,QAAQ,QAAQ,GAAG;AACzB,QAAI,OAAO,UAAU,YAAY,MAAM,SAAS,EAAG,QAAO,IAAI,KAAK,KAAK;AAAA,EAC1E;AAEA,aAAW,OAAO,cAAc;AAC9B,QAAI,QAAQ,GAAG,MAAM,OAAQ,QAAO,IAAI,KAAK,MAAM;AAAA,EACrD;AAEA,SAAO;AACT;",
+  "names": []
+}

package/dist/modules/workflows/lib/task-notifications.js

@@ -0,0 +1,119 @@
+import { resolveNotificationService } from "../../notifications/lib/notificationService.js";
+import {
+  buildNotificationFromType,
+  buildRoleNotificationFromType
+} from "../../notifications/lib/notificationBuilder.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("workflows");
+const TASK_NOTIFICATION_SOURCE_ENTITY_TYPE = "workflows:user_task";
+function buildTaskDeepLink(taskId) {
+  return `/backend/tasks/${taskId}`;
+}
+function buildTaskNotificationGroupKey(taskId, notificationType) {
+  const base = `${TASK_NOTIFICATION_SOURCE_ENTITY_TYPE}:${taskId}`;
+  return notificationType ? `${base}:${notificationType}` : base;
+}
+async function resolveRoleIdsByName(ctx, tenantId, roleNames) {
+  const rootEm = ctx.resolve("em");
+  const em = rootEm.fork();
+  const { findWithDecryption } = await import("@open-mercato/shared/lib/encryption/find");
+  const { Role } = await import("../../auth/data/entities.js");
+  const roles = await findWithDecryption(
+    em,
+    Role,
+    { name: { $in: roleNames }, tenantId, deletedAt: null },
+    {},
+    { tenantId }
+  );
+  return roles.map((role) => role.id).filter((roleId) => typeof roleId === "string" && roleId.length > 0);
+}
+function normalizeAssignedRoles(roles) {
+  return Array.isArray(roles) ? roles.filter((role) => typeof role === "string" && role.length > 0) : [];
+}
+async function deliverTaskNotification(ctx, typeDef, recipients, content, component) {
+  const assignedToRoles = normalizeAssignedRoles(recipients.assignedToRoles);
+  if (!recipients.assignedUserId && assignedToRoles.length === 0) return;
+  const effectiveTypeDef = content.actions ? {
+    ...typeDef,
+    actions: content.actions,
+    ...content.primaryActionId ? { primaryActionId: content.primaryActionId } : {}
+  } : typeDef;
+  try {
+    const notificationService = resolveNotificationService(ctx);
+    const scope = {
+      tenantId: content.tenantId,
+      organizationId: content.organizationId ?? null
+    };
+    const common = {
+      bodyVariables: content.bodyVariables,
+      sourceEntityType: TASK_NOTIFICATION_SOURCE_ENTITY_TYPE,
+      sourceEntityId: content.taskId,
+      linkHref: buildTaskDeepLink(content.taskId),
+      groupKey: content.groupKey
+    };
+    if (recipients.assignedUserId) {
+      await notificationService.create(
+        buildNotificationFromType(effectiveTypeDef, {
+          ...common,
+          recipientUserId: recipients.assignedUserId
+        }),
+        scope
+      );
+      return;
+    }
+    const roleIds = await resolveRoleIdsByName(ctx, content.tenantId, assignedToRoles);
+    if (roleIds.length === 0) {
+      logger.warn("Task assigned to roles that resolve to no role in this tenant", {
+        component,
+        taskId: content.taskId
+      });
+      return;
+    }
+    for (const roleId of roleIds) {
+      await notificationService.createForRole(
+        buildRoleNotificationFromType(effectiveTypeDef, { ...common, roleId }),
+        scope
+      );
+    }
+  } catch (err) {
+    logger.error("Failed to create notification", { component, err });
+  }
+}
+async function notifyTaskLifecycleEvent(options) {
+  const { ctx, payload, notificationType, component } = options;
+  if (!payload?.taskId || !payload?.tenantId) return;
+  const typeDef = options.notificationTypes.find((type) => type.type === notificationType);
+  if (!typeDef) return;
+  await deliverTaskNotification(
+    ctx,
+    typeDef,
+    { assignedUserId: payload.assignedUserId, assignedToRoles: payload.assignedToRoles },
+    {
+      taskId: payload.taskId,
+      tenantId: payload.tenantId,
+      organizationId: payload.organizationId ?? null,
+      bodyVariables: {
+        taskName: payload.taskName,
+        workflowName: payload.workflowName,
+        dueDate: payload.dueDate ?? ""
+      },
+      groupKey: buildTaskNotificationGroupKey(
+        payload.taskId,
+        options.groupByType ? notificationType : void 0
+      ),
+      ...options.actions ? { actions: options.actions } : {},
+      ...options.primaryActionId ? { primaryActionId: options.primaryActionId } : {}
+    },
+    component
+  );
+}
+export {
+  TASK_NOTIFICATION_SOURCE_ENTITY_TYPE,
+  buildTaskDeepLink,
+  buildTaskNotificationGroupKey,
+  deliverTaskNotification,
+  normalizeAssignedRoles,
+  notifyTaskLifecycleEvent,
+  resolveRoleIdsByName
+};
+//# sourceMappingURL=task-notifications.js.map

package/dist/modules/workflows/lib/task-notifications.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/workflows/lib/task-notifications.ts"],
+  "sourcesContent": ["/**\n * Delivering a task notification to whoever the task actually names.\n *\n * One place, three subscribers: assignment, reminder and deadline breach all\n * address the same audience \u2014 the individual assignee when there is one, and\n * otherwise every member of the authored role queue. Keeping the recipient\n * resolution here is what stops a reminder from reaching a narrower audience\n * than the assignment did.\n *\n * The caller supplies the `groupKey` so a retried delivery refreshes one row in\n * place. Assignment keeps its historic bare `workflows:user_task:<id>` key;\n * reminder and breach suffix the type, so a reminder never overwrites the\n * assignment it is reminding about.\n */\n\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { NotificationTypeDefinition } from '@open-mercato/shared/modules/notifications/types'\nimport { resolveNotificationService } from '../../notifications/lib/notificationService'\nimport {\n  buildNotificationFromType,\n  buildRoleNotificationFromType,\n} from '../../notifications/lib/notificationBuilder'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows')\n\nexport interface TaskNotificationResolverContext {\n  resolve: <T = unknown>(name: string) => T\n}\n\nexport interface TaskNotificationRecipients {\n  assignedUserId?: string | null\n  assignedToRoles?: string[] | null\n}\n\nexport interface TaskNotificationContent {\n  taskId: string\n  tenantId: string\n  organizationId?: string | null\n  bodyVariables: Record<string, string>\n  groupKey: string\n  /** Overrides the type definition's static actions when the caller computed them per task. */\n  actions?: NotificationTypeDefinition['actions']\n  primaryActionId?: string\n}\n\nexport const TASK_NOTIFICATION_SOURCE_ENTITY_TYPE = 'workflows:user_task'\n\nexport function buildTaskDeepLink(taskId: string): string {\n  return `/backend/tasks/${taskId}`\n}\n\n/** Historic key for the assignment notification; kept byte-identical. */\nexport function buildTaskNotificationGroupKey(taskId: string, notificationType?: string): string {\n  const base = `${TASK_NOTIFICATION_SOURCE_ENTITY_TYPE}:${taskId}`\n  return notificationType ? `${base}:${notificationType}` : base\n}\n\n/**\n * `UserTask.assignedToRoles` stores role NAMES (that is what the Studio's role\n * picker and the task API's `myTasks` filter both speak), while the\n * notification service addresses a role by id. Resolve the names against the\n * caller's tenant so a role name from another tenant can never widen delivery.\n */\nexport async function resolveRoleIdsByName(\n  ctx: TaskNotificationResolverContext,\n  tenantId: string,\n  roleNames: string[]\n): Promise<string[]> {\n  const rootEm = ctx.resolve<EntityManager>('em')\n  const em = rootEm.fork()\n  const { findWithDecryption } = await import('@open-mercato/shared/lib/encryption/find')\n  const { Role } = await import('../../auth/data/entities')\n\n  const roles = await findWithDecryption(\n    em,\n    Role,\n    { name: { $in: roleNames }, tenantId, deletedAt: null },\n    {},\n    { tenantId }\n  )\n\n  return roles\n    .map((role) => role.id)\n    .filter((roleId): roleId is string => typeof roleId === 'string' && roleId.length > 0)\n}\n\nexport function normalizeAssignedRoles(roles: unknown): string[] {\n  return Array.isArray(roles)\n    ? roles.filter((role): role is string => typeof role === 'string' && role.length > 0)\n    : []\n}\n\n/**\n * Create the notification for one task event, addressed to the assignee or to\n * the role queue. Best-effort by contract: a delivery failure must never break\n * the workflow engine or the queue job that triggered it.\n */\nexport async function deliverTaskNotification(\n  ctx: TaskNotificationResolverContext,\n  typeDef: NotificationTypeDefinition,\n  recipients: TaskNotificationRecipients,\n  content: TaskNotificationContent,\n  component: string\n): Promise<void> {\n  const assignedToRoles = normalizeAssignedRoles(recipients.assignedToRoles)\n  if (!recipients.assignedUserId && assignedToRoles.length === 0) return\n\n  const effectiveTypeDef: NotificationTypeDefinition = content.actions\n    ? {\n        ...typeDef,\n        actions: content.actions,\n        ...(content.primaryActionId ? { primaryActionId: content.primaryActionId } : {}),\n      }\n    : typeDef\n\n  try {\n    const notificationService = resolveNotificationService(ctx)\n    const scope = {\n      tenantId: content.tenantId,\n      organizationId: content.organizationId ?? null,\n    }\n\n    const common = {\n      bodyVariables: content.bodyVariables,\n      sourceEntityType: TASK_NOTIFICATION_SOURCE_ENTITY_TYPE,\n      sourceEntityId: content.taskId,\n      linkHref: buildTaskDeepLink(content.taskId),\n      groupKey: content.groupKey,\n    }\n\n    if (recipients.assignedUserId) {\n      await notificationService.create(\n        buildNotificationFromType(effectiveTypeDef, {\n          ...common,\n          recipientUserId: recipients.assignedUserId,\n        }),\n        scope\n      )\n      return\n    }\n\n    const roleIds = await resolveRoleIdsByName(ctx, content.tenantId, assignedToRoles)\n    if (roleIds.length === 0) {\n      logger.warn('Task assigned to roles that resolve to no role in this tenant', {\n        component,\n        taskId: content.taskId,\n      })\n      return\n    }\n\n    for (const roleId of roleIds) {\n      await notificationService.createForRole(\n        buildRoleNotificationFromType(effectiveTypeDef, { ...common, roleId }),\n        scope\n      )\n    }\n  } catch (err) {\n    logger.error('Failed to create notification', { component, err })\n  }\n}\n\n/**\n * Payload shape shared by every task lifecycle event that produces a\n * notification. The three subscribers differ only in which notification type\n * they name, which is why they route through one function.\n */\nexport type TaskLifecycleNotificationPayload = {\n  taskId: string\n  taskName: string\n  workflowName: string\n  assignedUserId?: string | null\n  assignedToRoles?: string[] | null\n  dueDate?: string | null\n  tenantId: string\n  organizationId?: string | null\n}\n\nexport async function notifyTaskLifecycleEvent(options: {\n  ctx: TaskNotificationResolverContext\n  notificationTypes: NotificationTypeDefinition[]\n  notificationType: string\n  payload: TaskLifecycleNotificationPayload\n  /** Omit to reuse the historic bare group key (assignment only). */\n  groupByType?: boolean\n  actions?: NotificationTypeDefinition['actions']\n  primaryActionId?: string\n  component: string\n}): Promise<void> {\n  const { ctx, payload, notificationType, component } = options\n  if (!payload?.taskId || !payload?.tenantId) return\n\n  const typeDef = options.notificationTypes.find((type) => type.type === notificationType)\n  if (!typeDef) return\n\n  await deliverTaskNotification(\n    ctx,\n    typeDef,\n    { assignedUserId: payload.assignedUserId, assignedToRoles: payload.assignedToRoles },\n    {\n      taskId: payload.taskId,\n      tenantId: payload.tenantId,\n      organizationId: payload.organizationId ?? null,\n      bodyVariables: {\n        taskName: payload.taskName,\n        workflowName: payload.workflowName,\n        dueDate: payload.dueDate ?? '',\n      },\n      groupKey: buildTaskNotificationGroupKey(\n        payload.taskId,\n        options.groupByType ? notificationType : undefined\n      ),\n      ...(options.actions ? { actions: options.actions } : {}),\n      ...(options.primaryActionId ? { primaryActionId: options.primaryActionId } : {}),\n    },\n    component\n  )\n}\n"],
+  "mappings": "AAiBA,SAAS,kCAAkC;AAC3C;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAsBhC,MAAM,uCAAuC;AAE7C,SAAS,kBAAkB,QAAwB;AACxD,SAAO,kBAAkB,MAAM;AACjC;AAGO,SAAS,8BAA8B,QAAgB,kBAAmC;AAC/F,QAAM,OAAO,GAAG,oCAAoC,IAAI,MAAM;AAC9D,SAAO,mBAAmB,GAAG,IAAI,IAAI,gBAAgB,KAAK;AAC5D;AAQA,eAAsB,qBACpB,KACA,UACA,WACmB;AACnB,QAAM,SAAS,IAAI,QAAuB,IAAI;AAC9C,QAAM,KAAK,OAAO,KAAK;AACvB,QAAM,EAAE,mBAAmB,IAAI,MAAM,OAAO,0CAA0C;AACtF,QAAM,EAAE,KAAK,IAAI,MAAM,OAAO,0BAA0B;AAExD,QAAM,QAAQ,MAAM;AAAA,IAClB;AAAA,IACA;AAAA,IACA,EAAE,MAAM,EAAE,KAAK,UAAU,GAAG,UAAU,WAAW,KAAK;AAAA,IACtD,CAAC;AAAA,IACD,EAAE,SAAS;AAAA,EACb;AAEA,SAAO,MACJ,IAAI,CAAC,SAAS,KAAK,EAAE,EACrB,OAAO,CAAC,WAA6B,OAAO,WAAW,YAAY,OAAO,SAAS,CAAC;AACzF;AAEO,SAAS,uBAAuB,OAA0B;AAC/D,SAAO,MAAM,QAAQ,KAAK,IACtB,MAAM,OAAO,CAAC,SAAyB,OAAO,SAAS,YAAY,KAAK,SAAS,CAAC,IAClF,CAAC;AACP;AAOA,eAAsB,wBACpB,KACA,SACA,YACA,SACA,WACe;AACf,QAAM,kBAAkB,uBAAuB,WAAW,eAAe;AACzE,MAAI,CAAC,WAAW,kBAAkB,gBAAgB,WAAW,EAAG;AAEhE,QAAM,mBAA+C,QAAQ,UACzD;AAAA,IACE,GAAG;AAAA,IACH,SAAS,QAAQ;AAAA,IACjB,GAAI,QAAQ,kBAAkB,EAAE,iBAAiB,QAAQ,gBAAgB,IAAI,CAAC;AAAA,EAChF,IACA;AAEJ,MAAI;AACF,UAAM,sBAAsB,2BAA2B,GAAG;AAC1D,UAAM,QAAQ;AAAA,MACZ,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ,kBAAkB;AAAA,IAC5C;AAEA,UAAM,SAAS;AAAA,MACb,eAAe,QAAQ;AAAA,MACvB,kBAAkB;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,UAAU,kBAAkB,QAAQ,MAAM;AAAA,MAC1C,UAAU,QAAQ;AAAA,IACpB;AAEA,QAAI,WAAW,gBAAgB;AAC7B,YAAM,oBAAoB;AAAA,QACxB,0BAA0B,kBAAkB;AAAA,UAC1C,GAAG;AAAA,UACH,iBAAiB,WAAW;AAAA,QAC9B,CAAC;AAAA,QACD;AAAA,MACF;AACA;AAAA,IACF;AAEA,UAAM,UAAU,MAAM,qBAAqB,KAAK,QAAQ,UAAU,eAAe;AACjF,QAAI,QAAQ,WAAW,GAAG;AACxB,aAAO,KAAK,iEAAiE;AAAA,QAC3E;AAAA,QACA,QAAQ,QAAQ;AAAA,MAClB,CAAC;AACD;AAAA,IACF;AAEA,eAAW,UAAU,SAAS;AAC5B,YAAM,oBAAoB;AAAA,QACxB,8BAA8B,kBAAkB,EAAE,GAAG,QAAQ,OAAO,CAAC;AAAA,QACrE;AAAA,MACF;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,WAAO,MAAM,iCAAiC,EAAE,WAAW,IAAI,CAAC;AAAA,EAClE;AACF;AAkBA,eAAsB,yBAAyB,SAU7B;AAChB,QAAM,EAAE,KAAK,SAAS,kBAAkB,UAAU,IAAI;AACtD,MAAI,CAAC,SAAS,UAAU,CAAC,SAAS,SAAU;AAE5C,QAAM,UAAU,QAAQ,kBAAkB,KAAK,CAAC,SAAS,KAAK,SAAS,gBAAgB;AACvF,MAAI,CAAC,QAAS;AAEd,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA,EAAE,gBAAgB,QAAQ,gBAAgB,iBAAiB,QAAQ,gBAAgB;AAAA,IACnF;AAAA,MACE,QAAQ,QAAQ;AAAA,MAChB,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ,kBAAkB;AAAA,MAC1C,eAAe;AAAA,QACb,UAAU,QAAQ;AAAA,QAClB,cAAc,QAAQ;AAAA,QACtB,SAAS,QAAQ,WAAW;AAAA,MAC9B;AAAA,MACA,UAAU;AAAA,QACR,QAAQ;AAAA,QACR,QAAQ,cAAc,mBAAmB;AAAA,MAC3C;AAAA,MACA,GAAI,QAAQ,UAAU,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;AAAA,MACtD,GAAI,QAAQ,kBAAkB,EAAE,iBAAiB,QAAQ,gBAAgB,IAAI,CAAC;AAAA,IAChF;AAAA,IACA;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/workflows/lib/task-permission-settings.js

@@ -0,0 +1,43 @@
+import { parseBooleanFromUnknown } from "@open-mercato/shared/lib/boolean";
+const WORKFLOWS_CONFIG_MODULE = "workflows";
+const TASK_PERMISSIONS_BUSINESS_CONTEXT_KEY = "task_permissions_business_context";
+const TASK_PERMISSIONS_BUSINESS_CONTEXT_DEFAULT = true;
+async function readTaskPermissionsBusinessContext(moduleConfigService, tenantId) {
+  if (!moduleConfigService) return TASK_PERMISSIONS_BUSINESS_CONTEXT_DEFAULT;
+  try {
+    const value = await moduleConfigService.getValue(
+      WORKFLOWS_CONFIG_MODULE,
+      TASK_PERMISSIONS_BUSINESS_CONTEXT_KEY,
+      {
+        defaultValue: TASK_PERMISSIONS_BUSINESS_CONTEXT_DEFAULT,
+        scope: { tenantId }
+      }
+    );
+    const parsed = parseBooleanFromUnknown(value);
+    return parsed === null ? TASK_PERMISSIONS_BUSINESS_CONTEXT_DEFAULT : parsed;
+  } catch {
+    return TASK_PERMISSIONS_BUSINESS_CONTEXT_DEFAULT;
+  }
+}
+async function resolveTaskVisibilityPolicy(moduleConfigService, tenantId) {
+  return {
+    businessContextEnabled: await readTaskPermissionsBusinessContext(moduleConfigService, tenantId)
+  };
+}
+async function writeTaskPermissionsBusinessContext(moduleConfigService, tenantId, enabled) {
+  await moduleConfigService.setValue(
+    WORKFLOWS_CONFIG_MODULE,
+    TASK_PERMISSIONS_BUSINESS_CONTEXT_KEY,
+    enabled,
+    { tenantId }
+  );
+}
+export {
+  TASK_PERMISSIONS_BUSINESS_CONTEXT_DEFAULT,
+  TASK_PERMISSIONS_BUSINESS_CONTEXT_KEY,
+  WORKFLOWS_CONFIG_MODULE,
+  readTaskPermissionsBusinessContext,
+  resolveTaskVisibilityPolicy,
+  writeTaskPermissionsBusinessContext
+};
+//# sourceMappingURL=task-permission-settings.js.map

package/dist/modules/workflows/lib/task-permission-settings.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/workflows/lib/task-permission-settings.ts"],
+  "sourcesContent": ["/**\n * The tenant opt-out from the \u00A76.4 task-permission model.\n *\n * ## What it is\n *\n * One tenant-scoped boolean, `workflows` / `task_permissions_business_context`,\n * default `true`. `true` is the new model. `false` restores the pre-change READ\n * filter \u2014 `SCOPE \u2227 workflows.tasks.view` \u2014 on the task list, the task detail\n * and the work inbox, and nothing else.\n *\n * ## What it is NOT\n *\n * **It is a `SELECT` filter, not an authorization mode.** `actable` and\n * `claimable` are computed by the new rule whether it is on or off: completing\n * still requires being the assignee or claimant, claiming still requires role\n * overlap on an unclaimed `PENDING` row, tenant and organization scoping are\n * never reachable by a setting, and the portal routes never consult it at all.\n * If `businessContextEnabled` is read anywhere outside a read filter, that is a\n * review failure. The predicate enforces this structurally \u2014 the flag reaches\n * `decideTaskVisibility` as `policy` and only ever widens `visible`.\n *\n * ## Why the read fails to `true`\n *\n * The exemplar this route is copied from (`entities/api/entity-settings.ts`)\n * swallows read errors and returns its permissive default. Inverted here on\n * purpose: a config read that fails \u2014 no container, no service, a broken row \u2014\n * must NOT silently reopen every task in the tenant to everyone holding\n * `workflows.tasks.view`. Only an explicitly stored, explicitly false value\n * opts a tenant out.\n *\n * ## Lifecycle\n *\n * A migration aid with a removal date. It exists for one minor release so a\n * tenant with an unusual role topology can keep the lights on while they grant\n * `workflows.tasks.view_all`, and it is removed in the release after. A\n * permanent opt-out is a permanent second security model to test.\n */\n\nimport { parseBooleanFromUnknown } from '@open-mercato/shared/lib/boolean'\nimport type { TaskVisibilityPolicy } from './task-visibility'\n\n/** `module_configs.module_id` for the workflows module's own settings. */\nexport const WORKFLOWS_CONFIG_MODULE = 'workflows'\n\n/** `module_configs.name`. Well within `moduleConfigKeySchema`'s 128 chars. */\nexport const TASK_PERMISSIONS_BUSINESS_CONTEXT_KEY = 'task_permissions_business_context'\n\n/** Default-ON at release, per the spec's flagged BC paragraph. */\nexport const TASK_PERMISSIONS_BUSINESS_CONTEXT_DEFAULT = true\n\n/** The `ModuleConfigService` slice this needs, so tests need no container. */\nexport type TaskPermissionsConfigService = {\n  getValue: (\n    moduleId: string,\n    name: string,\n    options?: { defaultValue?: unknown; scope?: { tenantId?: string | null } },\n  ) => Promise<unknown>\n  setValue: (\n    moduleId: string,\n    name: string,\n    value: unknown,\n    scope?: { tenantId?: string | null },\n  ) => Promise<unknown>\n}\n\n/**\n * Read the tenant's setting.\n *\n * Tenant-scoped only \u2014 never organization-scoped. One organization inside a\n * tenant running wide open next to a narrow one is unreviewable, so the scope\n * carries `tenantId` and nothing else. Callers MUST pass the tenant id from the\n * authenticated context, never from request input.\n */\nexport async function readTaskPermissionsBusinessContext(\n  moduleConfigService: TaskPermissionsConfigService | null | undefined,\n  tenantId: string | null,\n): Promise<boolean> {\n  if (!moduleConfigService) return TASK_PERMISSIONS_BUSINESS_CONTEXT_DEFAULT\n  try {\n    const value = await moduleConfigService.getValue(\n      WORKFLOWS_CONFIG_MODULE,\n      TASK_PERMISSIONS_BUSINESS_CONTEXT_KEY,\n      {\n        defaultValue: TASK_PERMISSIONS_BUSINESS_CONTEXT_DEFAULT,\n        scope: { tenantId },\n      },\n    )\n    const parsed = parseBooleanFromUnknown(value)\n    // An unparseable stored value is a resolution failure, not an opt-out.\n    return parsed === null ? TASK_PERMISSIONS_BUSINESS_CONTEXT_DEFAULT : parsed\n  } catch {\n    return TASK_PERMISSIONS_BUSINESS_CONTEXT_DEFAULT\n  }\n}\n\n/** The `policy` argument `decideTaskVisibility` and the filter builders take. */\nexport async function resolveTaskVisibilityPolicy(\n  moduleConfigService: TaskPermissionsConfigService | null | undefined,\n  tenantId: string | null,\n): Promise<TaskVisibilityPolicy> {\n  return {\n    businessContextEnabled: await readTaskPermissionsBusinessContext(moduleConfigService, tenantId),\n  }\n}\n\nexport async function writeTaskPermissionsBusinessContext(\n  moduleConfigService: TaskPermissionsConfigService,\n  tenantId: string,\n  enabled: boolean,\n): Promise<void> {\n  await moduleConfigService.setValue(\n    WORKFLOWS_CONFIG_MODULE,\n    TASK_PERMISSIONS_BUSINESS_CONTEXT_KEY,\n    enabled,\n    { tenantId },\n  )\n}\n"],
+  "mappings": "AAsCA,SAAS,+BAA+B;AAIjC,MAAM,0BAA0B;AAGhC,MAAM,wCAAwC;AAG9C,MAAM,4CAA4C;AAyBzD,eAAsB,mCACpB,qBACA,UACkB;AAClB,MAAI,CAAC,oBAAqB,QAAO;AACjC,MAAI;AACF,UAAM,QAAQ,MAAM,oBAAoB;AAAA,MACtC;AAAA,MACA;AAAA,MACA;AAAA,QACE,cAAc;AAAA,QACd,OAAO,EAAE,SAAS;AAAA,MACpB;AAAA,IACF;AACA,UAAM,SAAS,wBAAwB,KAAK;AAE5C,WAAO,WAAW,OAAO,4CAA4C;AAAA,EACvE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGA,eAAsB,4BACpB,qBACA,UAC+B;AAC/B,SAAO;AAAA,IACL,wBAAwB,MAAM,mCAAmC,qBAAqB,QAAQ;AAAA,EAChG;AACF;AAEA,eAAsB,oCACpB,qBACA,UACA,SACe;AACf,QAAM,oBAAoB;AAAA,IACxB;AAAA,IACA;AAAA,IACA;AAAA,IACA,EAAE,SAAS;AAAA,EACb;AACF;",
+  "names": []
+}