@open-mercato/core 0.7.1-develop.7193.1.910a5b0a1e → 0.7.1-develop.7195.1.b5efd1d51a

package/dist/modules/workflows/lib/work-inbox/presentation.js

@@ -0,0 +1,90 @@
+const NEUTRAL = {
+  badge: "bg-status-neutral-bg text-status-neutral-text",
+  icon: "text-status-neutral-icon",
+  text: "text-status-neutral-text"
+};
+const INFO = {
+  badge: "bg-status-info-bg text-status-info-text",
+  icon: "text-status-info-icon",
+  text: "text-status-info-text"
+};
+const WARNING = {
+  badge: "bg-status-warning-bg text-status-warning-text",
+  icon: "text-status-warning-icon",
+  text: "text-status-warning-text"
+};
+const SUCCESS = {
+  badge: "bg-status-success-bg text-status-success-text",
+  icon: "text-status-success-icon",
+  text: "text-status-success-text"
+};
+const ERROR = {
+  badge: "bg-status-error-bg text-status-error-text",
+  icon: "text-status-error-icon",
+  text: "text-status-error-text"
+};
+const STATUS_DESCRIPTORS = {
+  PENDING: { ...WARNING, iconName: "Clock" },
+  IN_PROGRESS: { ...INFO, iconName: "Loader" },
+  COMPLETED: { ...SUCCESS, iconName: "CheckCircle2" },
+  CANCELLED: { ...NEUTRAL, iconName: "XCircle" },
+  ESCALATED: { ...ERROR, iconName: "AlertTriangle" }
+};
+function describeWorkInboxStatus(status) {
+  return STATUS_DESCRIPTORS[status] ?? { ...NEUTRAL, iconName: "Circle" };
+}
+const PRIORITY_DESCRIPTORS = {
+  extreme: { ...ERROR, iconName: "Flame" },
+  high: { ...WARNING, iconName: "ArrowUp" },
+  medium: { ...INFO, iconName: "Minus" },
+  low: { ...NEUTRAL, iconName: "ArrowDown" }
+};
+function describeWorkInboxPriority(priority) {
+  return priority ? PRIORITY_DESCRIPTORS[priority] : null;
+}
+const WORK_INBOX_OVERDUE_TONE = {
+  ...ERROR,
+  iconName: "AlertTriangle"
+};
+const TASK_ACTION_BLOCK_DESCRIPTORS = {
+  "not-workable": {
+    ...INFO,
+    iconName: "CheckCircle2",
+    messageKey: "workflows.tasks.detail.cannotComplete",
+    remedy: null
+  },
+  "owned-by-another": {
+    ...WARNING,
+    iconName: "AlertTriangle",
+    messageKey: "workflows.tasks.detail.blocked.ownedByAnother",
+    remedy: "reassign"
+  },
+  "not-in-your-queue": {
+    ...WARNING,
+    iconName: "AlertTriangle",
+    messageKey: "workflows.tasks.detail.blocked.notInYourQueue",
+    remedy: "reassign"
+  },
+  unowned: {
+    ...WARNING,
+    iconName: "AlertTriangle",
+    messageKey: "workflows.tasks.detail.blocked.unowned",
+    remedy: "reassign"
+  },
+  unavailable: {
+    ...INFO,
+    iconName: "AlertTriangle",
+    messageKey: "workflows.tasks.detail.blocked.unavailable",
+    remedy: null
+  }
+};
+function describeTaskActionBlock(reason) {
+  return TASK_ACTION_BLOCK_DESCRIPTORS[reason] ?? TASK_ACTION_BLOCK_DESCRIPTORS.unavailable;
+}
+export {
+  WORK_INBOX_OVERDUE_TONE,
+  describeTaskActionBlock,
+  describeWorkInboxPriority,
+  describeWorkInboxStatus
+};
+//# sourceMappingURL=presentation.js.map

package/dist/modules/workflows/lib/work-inbox/presentation.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/workflows/lib/work-inbox/presentation.ts"],
+  "sourcesContent": ["/**\n * Work Inbox \u2014 status and priority presentation (PURE).\n *\n * Two rules the module is held to live here rather than inside the page:\n *\n * 1. **Design-system tokens only.** The retired task list hard-coded\n *    `bg-yellow-100` / `bg-blue-100` / `bg-green-100` badges and `text-red-600`\n *    overdue markers, none of which are dark-mode aware.\n * 2. **Status is never colour-only** (workflows AGENTS.md \u2192 canvas/status rule,\n *    spec \u00A74.6). Every descriptor therefore pairs its token with an icon name\n *    AND keeps its own translated label, so the badge reads without colour.\n *\n * Icon *names* rather than components keep this file free of React so it can be\n * asserted as data.\n */\n\nimport type { TaskActionBlockReason } from '../../data/types'\nimport type { WorkInboxPriority } from './provider'\n\nexport type WorkInboxToneClasses = {\n  badge: string\n  icon: string\n  text: string\n}\n\nexport type WorkInboxStatusDescriptor = WorkInboxToneClasses & {\n  iconName: WorkInboxIconName\n}\n\nexport type WorkInboxIconName =\n  | 'Clock'\n  | 'Loader'\n  | 'CheckCircle2'\n  | 'XCircle'\n  | 'AlertTriangle'\n  | 'Flame'\n  | 'ArrowUp'\n  | 'Minus'\n  | 'ArrowDown'\n  | 'Circle'\n\nconst NEUTRAL: WorkInboxToneClasses = {\n  badge: 'bg-status-neutral-bg text-status-neutral-text',\n  icon: 'text-status-neutral-icon',\n  text: 'text-status-neutral-text',\n}\n\nconst INFO: WorkInboxToneClasses = {\n  badge: 'bg-status-info-bg text-status-info-text',\n  icon: 'text-status-info-icon',\n  text: 'text-status-info-text',\n}\n\nconst WARNING: WorkInboxToneClasses = {\n  badge: 'bg-status-warning-bg text-status-warning-text',\n  icon: 'text-status-warning-icon',\n  text: 'text-status-warning-text',\n}\n\nconst SUCCESS: WorkInboxToneClasses = {\n  badge: 'bg-status-success-bg text-status-success-text',\n  icon: 'text-status-success-icon',\n  text: 'text-status-success-text',\n}\n\nconst ERROR: WorkInboxToneClasses = {\n  badge: 'bg-status-error-bg text-status-error-text',\n  icon: 'text-status-error-icon',\n  text: 'text-status-error-text',\n}\n\nconst STATUS_DESCRIPTORS: Record<string, WorkInboxStatusDescriptor> = {\n  PENDING: { ...WARNING, iconName: 'Clock' },\n  IN_PROGRESS: { ...INFO, iconName: 'Loader' },\n  COMPLETED: { ...SUCCESS, iconName: 'CheckCircle2' },\n  CANCELLED: { ...NEUTRAL, iconName: 'XCircle' },\n  ESCALATED: { ...ERROR, iconName: 'AlertTriangle' },\n}\n\n/** An unknown status from a third-party source still renders, neutrally. */\nexport function describeWorkInboxStatus(status: string): WorkInboxStatusDescriptor {\n  return STATUS_DESCRIPTORS[status] ?? { ...NEUTRAL, iconName: 'Circle' }\n}\n\nconst PRIORITY_DESCRIPTORS: Record<WorkInboxPriority, WorkInboxStatusDescriptor> = {\n  extreme: { ...ERROR, iconName: 'Flame' },\n  high: { ...WARNING, iconName: 'ArrowUp' },\n  medium: { ...INFO, iconName: 'Minus' },\n  low: { ...NEUTRAL, iconName: 'ArrowDown' },\n}\n\nexport function describeWorkInboxPriority(\n  priority: WorkInboxPriority | null,\n): WorkInboxStatusDescriptor | null {\n  return priority ? PRIORITY_DESCRIPTORS[priority] : null\n}\n\nexport const WORK_INBOX_OVERDUE_TONE: WorkInboxStatusDescriptor = {\n  ...ERROR,\n  iconName: 'AlertTriangle',\n}\n\nexport type TaskActionBlockDescriptor = WorkInboxToneClasses & {\n  iconName: WorkInboxIconName\n  /** Flat i18n key for the sentence a human can act on. */\n  messageKey: string\n  /**\n   * The remedy \u00A76.4 names, when there is one. `reassign` is the ONLY remedy the\n   * model offers for an ownership refusal \u2014 administration widens seeing, never\n   * acting, so taking the row is the supported path.\n   */\n  remedy: 'reassign' | null\n}\n\n/**\n * How an act refusal reads to a human (PURE).\n *\n * The reason itself is the SERVER's (`lib/task-visibility.ts`); this only says\n * which sentence and which DS tone render it, so the page never decides whether\n * an action is allowed. `unavailable` stays deliberately vague \u2014 it stands for\n * the entity-gate refusal the act routes answer as a bare 404, and widening it\n * into \"binding X blocked you\" would leak exactly what that 404 withholds.\n */\nconst TASK_ACTION_BLOCK_DESCRIPTORS: Record<TaskActionBlockReason, TaskActionBlockDescriptor> = {\n  'not-workable': {\n    ...INFO,\n    iconName: 'CheckCircle2',\n    messageKey: 'workflows.tasks.detail.cannotComplete',\n    remedy: null,\n  },\n  'owned-by-another': {\n    ...WARNING,\n    iconName: 'AlertTriangle',\n    messageKey: 'workflows.tasks.detail.blocked.ownedByAnother',\n    remedy: 'reassign',\n  },\n  'not-in-your-queue': {\n    ...WARNING,\n    iconName: 'AlertTriangle',\n    messageKey: 'workflows.tasks.detail.blocked.notInYourQueue',\n    remedy: 'reassign',\n  },\n  unowned: {\n    ...WARNING,\n    iconName: 'AlertTriangle',\n    messageKey: 'workflows.tasks.detail.blocked.unowned',\n    remedy: 'reassign',\n  },\n  unavailable: {\n    ...INFO,\n    iconName: 'AlertTriangle',\n    messageKey: 'workflows.tasks.detail.blocked.unavailable',\n    remedy: null,\n  },\n}\n\n/** An unknown reason from a newer server still renders, non-diagnostically. */\nexport function describeTaskActionBlock(reason: string): TaskActionBlockDescriptor {\n  return (\n    TASK_ACTION_BLOCK_DESCRIPTORS[reason as TaskActionBlockReason] ??\n    TASK_ACTION_BLOCK_DESCRIPTORS.unavailable\n  )\n}\n"],
+  "mappings": "AAyCA,MAAM,UAAgC;AAAA,EACpC,OAAO;AAAA,EACP,MAAM;AAAA,EACN,MAAM;AACR;AAEA,MAAM,OAA6B;AAAA,EACjC,OAAO;AAAA,EACP,MAAM;AAAA,EACN,MAAM;AACR;AAEA,MAAM,UAAgC;AAAA,EACpC,OAAO;AAAA,EACP,MAAM;AAAA,EACN,MAAM;AACR;AAEA,MAAM,UAAgC;AAAA,EACpC,OAAO;AAAA,EACP,MAAM;AAAA,EACN,MAAM;AACR;AAEA,MAAM,QAA8B;AAAA,EAClC,OAAO;AAAA,EACP,MAAM;AAAA,EACN,MAAM;AACR;AAEA,MAAM,qBAAgE;AAAA,EACpE,SAAS,EAAE,GAAG,SAAS,UAAU,QAAQ;AAAA,EACzC,aAAa,EAAE,GAAG,MAAM,UAAU,SAAS;AAAA,EAC3C,WAAW,EAAE,GAAG,SAAS,UAAU,eAAe;AAAA,EAClD,WAAW,EAAE,GAAG,SAAS,UAAU,UAAU;AAAA,EAC7C,WAAW,EAAE,GAAG,OAAO,UAAU,gBAAgB;AACnD;AAGO,SAAS,wBAAwB,QAA2C;AACjF,SAAO,mBAAmB,MAAM,KAAK,EAAE,GAAG,SAAS,UAAU,SAAS;AACxE;AAEA,MAAM,uBAA6E;AAAA,EACjF,SAAS,EAAE,GAAG,OAAO,UAAU,QAAQ;AAAA,EACvC,MAAM,EAAE,GAAG,SAAS,UAAU,UAAU;AAAA,EACxC,QAAQ,EAAE,GAAG,MAAM,UAAU,QAAQ;AAAA,EACrC,KAAK,EAAE,GAAG,SAAS,UAAU,YAAY;AAC3C;AAEO,SAAS,0BACd,UACkC;AAClC,SAAO,WAAW,qBAAqB,QAAQ,IAAI;AACrD;AAEO,MAAM,0BAAqD;AAAA,EAChE,GAAG;AAAA,EACH,UAAU;AACZ;AAuBA,MAAM,gCAA0F;AAAA,EAC9F,gBAAgB;AAAA,IACd,GAAG;AAAA,IACH,UAAU;AAAA,IACV,YAAY;AAAA,IACZ,QAAQ;AAAA,EACV;AAAA,EACA,oBAAoB;AAAA,IAClB,GAAG;AAAA,IACH,UAAU;AAAA,IACV,YAAY;AAAA,IACZ,QAAQ;AAAA,EACV;AAAA,EACA,qBAAqB;AAAA,IACnB,GAAG;AAAA,IACH,UAAU;AAAA,IACV,YAAY;AAAA,IACZ,QAAQ;AAAA,EACV;AAAA,EACA,SAAS;AAAA,IACP,GAAG;AAAA,IACH,UAAU;AAAA,IACV,YAAY;AAAA,IACZ,QAAQ;AAAA,EACV;AAAA,EACA,aAAa;AAAA,IACX,GAAG;AAAA,IACH,UAAU;AAAA,IACV,YAAY;AAAA,IACZ,QAAQ;AAAA,EACV;AACF;AAGO,SAAS,wBAAwB,QAA2C;AACjF,SACE,8BAA8B,MAA+B,KAC7D,8BAA8B;AAElC;",
+  "names": []
+}

package/dist/modules/workflows/lib/work-inbox/provider.js

@@ -0,0 +1,118 @@
+import { hasFeature } from "@open-mercato/shared/security/features";
+const WORK_INBOX_PRIORITIES = ["extreme", "high", "medium", "low"];
+const WORK_INBOX_TERMINAL_STATUSES = ["COMPLETED", "CANCELLED"];
+const GLOBAL_WORK_INBOX_SOURCES_KEY = "__openMercatoWorkInboxSources__";
+let localEntries = null;
+function readGlobalEntries() {
+  try {
+    const value = globalThis[GLOBAL_WORK_INBOX_SOURCES_KEY];
+    return Array.isArray(value) ? value : null;
+  } catch {
+    return null;
+  }
+}
+function writeGlobalEntries(entries) {
+  try {
+    ;
+    globalThis[GLOBAL_WORK_INBOX_SOURCES_KEY] = entries;
+  } catch {
+  }
+}
+function registerWorkInboxSources(entries) {
+  const replacedModuleIds = new Set(entries.map((entry) => entry.moduleId));
+  const kept = getWorkInboxSources().filter((entry) => !replacedModuleIds.has(entry.moduleId));
+  const added = [];
+  for (const entry of entries) {
+    for (const provider of entry.sources) {
+      added.push({ moduleId: entry.moduleId, provider });
+    }
+  }
+  const merged = [...kept, ...added];
+  localEntries = merged;
+  writeGlobalEntries(merged);
+}
+function getWorkInboxSources() {
+  const globalEntries = readGlobalEntries();
+  if (globalEntries) return globalEntries;
+  return localEntries ?? [];
+}
+function clearWorkInboxSources() {
+  localEntries = [];
+  writeGlobalEntries([]);
+}
+function isWorkInboxSourceAdmitted(provider, admission) {
+  const required = provider.administrativeQueueFeature;
+  if (!required) return true;
+  if (!admission) return true;
+  if (admission.isSuperAdmin) return true;
+  return hasFeature(admission.grantedFeatures, required);
+}
+function selectWorkInboxSources(query, admission) {
+  return getWorkInboxSources().filter((entry) => {
+    if (query.kinds && !query.kinds.includes(entry.provider.kind)) return false;
+    if (query.moduleIds && !query.moduleIds.includes(entry.moduleId)) return false;
+    return isWorkInboxSourceAdmitted(entry.provider, admission);
+  });
+}
+function isWorkInboxOpenStatus(status) {
+  return !WORK_INBOX_TERMINAL_STATUSES.includes(status);
+}
+function deriveWorkInboxOverdue(dueDate, status, now) {
+  if (!dueDate) return false;
+  if (!isWorkInboxOpenStatus(status)) return false;
+  const due = dueDate instanceof Date ? dueDate : new Date(dueDate);
+  const dueMs = due.getTime();
+  if (Number.isNaN(dueMs)) return false;
+  return dueMs < now.getTime();
+}
+function normalizeWorkInboxPriority(value) {
+  if (typeof value !== "string") return null;
+  const lowered = value.toLowerCase();
+  return WORK_INBOX_PRIORITIES.includes(lowered) ? lowered : null;
+}
+const UNSET_PRIORITY_RANK = WORK_INBOX_PRIORITIES.indexOf("medium");
+function priorityRank(priority) {
+  if (!priority) return UNSET_PRIORITY_RANK;
+  return WORK_INBOX_PRIORITIES.indexOf(priority);
+}
+function dueRank(dueDate) {
+  if (!dueDate) return Number.POSITIVE_INFINITY;
+  const parsed = Date.parse(dueDate);
+  return Number.isNaN(parsed) ? Number.POSITIVE_INFINITY : parsed;
+}
+function createdRank(createdAt) {
+  const parsed = Date.parse(createdAt);
+  return Number.isNaN(parsed) ? Number.POSITIVE_INFINITY : parsed;
+}
+function compareWorkInboxRows(left, right) {
+  const byPriority = priorityRank(left.priority) - priorityRank(right.priority);
+  if (byPriority !== 0) return byPriority;
+  const byDue = dueRank(left.dueDate) - dueRank(right.dueDate);
+  if (byDue !== 0) return byDue;
+  const byCreated = createdRank(left.createdAt) - createdRank(right.createdAt);
+  if (byCreated !== 0) return byCreated;
+  return left.id < right.id ? -1 : left.id > right.id ? 1 : 0;
+}
+function sortWorkInboxRows(rows) {
+  return [...rows].sort(compareWorkInboxRows);
+}
+function serializeWorkInboxRow(row) {
+  const { details, ...common } = row;
+  return { ...details, ...common };
+}
+export {
+  WORK_INBOX_PRIORITIES,
+  WORK_INBOX_TERMINAL_STATUSES,
+  clearWorkInboxSources,
+  compareWorkInboxRows,
+  deriveWorkInboxOverdue,
+  getWorkInboxSources,
+  isWorkInboxOpenStatus,
+  isWorkInboxSourceAdmitted,
+  normalizeWorkInboxPriority,
+  registerWorkInboxSources,
+  selectWorkInboxSources,
+  serializeWorkInboxRow,
+  sortWorkInboxRows
+};
+//# sourceMappingURL=provider.js.map

package/dist/modules/workflows/lib/work-inbox/provider.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/workflows/lib/work-inbox/provider.ts"],
+  "sourcesContent": ["/**\n * Work Inbox \u2014 source-provider contract and registry (spec \u00A72.3, \u00A76.3).\n *\n * The inbox is a PROJECTION, not a table: phase 1 reads existing rows through\n * providers instead of migrating anything into a new `Task` entity. Core\n * registers the `user_task` provider; `agent_orchestrator` optionally registers\n * `agent_disposition`. Nothing here imports an optional peer \u2014 a provider that\n * is not registered simply does not contribute rows, so without enterprise the\n * inbox shows workflow tasks and no error is raised anywhere.\n *\n * The registry is modelled on `@open-mercato/shared/lib/crud/enricher-registry`\n * (many modules contributing to one merged list, HMR-safe `globalThis` storage)\n * with one deliberate difference: there is no generated work-inbox registry to\n * bootstrap from, so `registerWorkInboxSources` MERGES by `moduleId` instead of\n * replacing the whole set. Each module registers its own sources from its `di.ts`\n * at module-DI load time, re-registering the same module is idempotent, and the\n * modules stay independent of each other's load order.\n */\n\nimport { hasFeature } from '@open-mercato/shared/security/features'\nimport type {\n  TaskEntityHiddenMarker,\n  TaskVisibilityRequestContext,\n} from '../task-visibility-request'\n\n/** Mirrors the platform's priority labels (root AGENTS.md \u2192 PR Workflow). */\nexport const WORK_INBOX_PRIORITIES = ['extreme', 'high', 'medium', 'low'] as const\n\nexport type WorkInboxPriority = (typeof WORK_INBOX_PRIORITIES)[number]\n\n/**\n * Statuses a work item is still actionable in. Terminal statuses are listed\n * instead of open ones so a provider that introduces its own vocabulary is\n * treated as open rather than silently disappearing from the queue.\n */\nexport const WORK_INBOX_TERMINAL_STATUSES = ['COMPLETED', 'CANCELLED'] as const\n\nexport type WorkInboxEntityBinding = {\n  entityType: string\n  entityId: string\n  label?: string | null\n}\n\n/**\n * Declarative action a provider offers on its rows. Kept serializable (an id, a\n * translation key, an endpoint template and a row predicate) so the page renders\n * every provider's actions through one code path and no provider ships UI code\n * into the inbox bundle.\n */\nexport type WorkInboxAction = {\n  id: string\n  labelKey: string\n  /** POST endpoint; `{id}` is replaced with the row id. */\n  endpoint: string\n  appliesTo: WorkInboxActionPredicate\n}\n\nexport type WorkInboxActionPredicate = 'claimable' | 'claimed-by-me' | 'open' | 'always'\n\nexport type WorkInboxRow = {\n  id: string\n  /** Provider discriminator \u2014 `user_task`, `agent_disposition`, \u2026 */\n  kind: string\n  moduleId: string\n  title: string\n  description: string | null\n  status: string\n  priority: WorkInboxPriority | null\n  dueDate: string | null\n  overdue: boolean\n  createdAt: string\n  updatedAt: string\n  assignedTo: string | null\n  assignedToRoles: string[] | null\n  claimedBy: string | null\n  entityTypes: string[]\n  entityBindings: WorkInboxEntityBinding[]\n  detailHref: string | null\n  actions: WorkInboxAction[]\n  /**\n   * Provider-specific payload. The API spreads it UNDER the common fields, so a\n   * `user_task` row on the wire stays a strict superset of what\n   * `GET /api/workflows/tasks` already returned \u2014 which is what keeps the\n   * enterprise \"Review proposal\" row action (it reads `row.proposalId`) working\n   * against the new table.\n   */\n  details: Record<string, unknown>\n}\n\nexport type WorkInboxQuery = {\n  kinds: string[] | null\n  moduleIds: string[] | null\n  entityTypes: string[] | null\n  roles: string[] | null\n  priorities: WorkInboxPriority[] | null\n  statuses: string[] | null\n  overdueOnly: boolean\n  myWork: boolean\n  assignedTo: string | null\n  workflowInstanceId: string | null\n  limit: number\n  offset: number\n  now: Date\n}\n\n/**\n * Caller scope every provider MUST filter on. `organizationIds === null` is the\n * wildcard scope the directory helper returns for an unrestricted operator;\n * `tenantId` is never optional (module MUST #10).\n *\n * `visibility` carries the \u00A76.4 rule's per-request inputs \u2014 the principal, the\n * tenant policy and the entity-access map \u2014 resolved ONCE by the route. It is\n * required rather than optional on purpose: a provider that forgets to apply it\n * would silently serve every row in the organization, and a compile error is the\n * only reliable way to notice that.\n */\nexport type WorkInboxScope = {\n  tenantId: string\n  organizationIds: string[] | null\n  userId: string\n  roles: string[]\n  visibility: TaskVisibilityRequestContext\n}\n\n/**\n * Runtime seam. Providers resolve their own services through it rather than\n * importing them, so a provider registered by another module never drags that\n * module's internals into this one. Structural on purpose \u2014 no awilix import.\n */\nexport type WorkInboxSourceContext = {\n  scope: WorkInboxScope\n  resolve: <T>(name: string) => T\n  /**\n   * The queue feature the source being invoked declared, handed back to it so a\n   * provider that serves `UserTask` rows can pass it to the \u00A76.4 predicate\n   * (`TaskFacts.administrativeQueueFeature`) without importing the registry it\n   * is registered in.\n   */\n  administrativeQueueFeature?: string | null\n}\n\nexport type WorkInboxSourceResult = {\n  rows: WorkInboxRow[]\n  total: number\n  /**\n   * Rows this source refused on entity access to a caller entitled to know they\n   * are there (design \u00A73.6). Optional and additive: a source that omits it\n   * reports nothing, which is what every source did before.\n   *\n   * It carries ids and the blocking entity type, never row content \u2014 the point\n   * is that an administrator can tell \"no such task\" from \"you cannot see its\n   * record\", not that they can read the record anyway.\n   */\n  entityHidden?: TaskEntityHiddenMarker[]\n}\n\nexport type WorkInboxSourceProvider = {\n  kind: string\n  moduleId: string\n  /** Injection spot id the detail view renders for this kind, when any. */\n  render?: string\n  actions?: WorkInboxAction[]\n  /**\n   * ACL feature that admits a principal to this source's UNASSIGNED rows,\n   * declaring \"this kind is an administrative queue, not personal work\".\n   *\n   * \u00A76.4 makes a row visible to whoever it belongs to, and a queue item belongs\n   * to nobody: it carries no assignee, no claimant and no role queue, because\n   * the module that raised it cannot know a tenant's routing policy or role\n   * vocabulary. Without a declaration such a row falls back to core's own\n   * administrative grant (`workflows.tasks.view_all`); with one it is admitted\n   * to exactly the population that could already act on that kind of work.\n   *\n   * It has two consumers, and both must agree or a row is counted in one place\n   * and dropped in another:\n   *\n   * 1. **Source admission** \u2014 a source declaring a queue feature contributes\n   *    nothing at all to a caller who does not hold it, so the whole kind\n   *    disappears rather than answering an expensive query per request.\n   * 2. **The \u00A76.4 predicate** \u2014 passed back to the provider through\n   *    `WorkInboxSourceContext.administrativeQueueFeature` so a provider serving\n   *    `UserTask` rows uses it as the unassigned-queue arm instead of\n   *    `workflows.tasks.view_all`.\n   *\n   * Absent (the core `user_task` source) leaves both behaviours exactly as they\n   * were: no admission gate, `workflows.tasks.view_all` as the queue feature.\n   */\n  administrativeQueueFeature?: string\n  list: (query: WorkInboxQuery, context: WorkInboxSourceContext) => Promise<WorkInboxSourceResult>\n}\n\nexport type WorkInboxSourceEntry = {\n  moduleId: string\n  provider: WorkInboxSourceProvider\n}\n\nconst GLOBAL_WORK_INBOX_SOURCES_KEY = '__openMercatoWorkInboxSources__'\n\nlet localEntries: WorkInboxSourceEntry[] | null = null\n\nfunction readGlobalEntries(): WorkInboxSourceEntry[] | null {\n  try {\n    const value = (globalThis as Record<string, unknown>)[GLOBAL_WORK_INBOX_SOURCES_KEY]\n    return Array.isArray(value) ? (value as WorkInboxSourceEntry[]) : null\n  } catch {\n    return null\n  }\n}\n\nfunction writeGlobalEntries(entries: WorkInboxSourceEntry[]): void {\n  try {\n    ;(globalThis as Record<string, unknown>)[GLOBAL_WORK_INBOX_SOURCES_KEY] = entries\n  } catch {\n    // ignore global assignment failures\n  }\n}\n\n/**\n * Register (or re-register) one module's work-inbox sources.\n *\n * Additive across modules, replacing within a module: calling it again for the\n * same `moduleId` swaps that module's providers and leaves every other module's\n * untouched. Registration order between modules is therefore irrelevant, which\n * matters because each module registers from its own `di.ts`.\n */\nexport function registerWorkInboxSources(\n  entries: Array<{ moduleId: string; sources: WorkInboxSourceProvider[] }>,\n): void {\n  const replacedModuleIds = new Set(entries.map((entry) => entry.moduleId))\n  const kept = getWorkInboxSources().filter((entry) => !replacedModuleIds.has(entry.moduleId))\n  const added: WorkInboxSourceEntry[] = []\n  for (const entry of entries) {\n    for (const provider of entry.sources) {\n      added.push({ moduleId: entry.moduleId, provider })\n    }\n  }\n  const merged = [...kept, ...added]\n  localEntries = merged\n  writeGlobalEntries(merged)\n}\n\nexport function getWorkInboxSources(): WorkInboxSourceEntry[] {\n  const globalEntries = readGlobalEntries()\n  if (globalEntries) return globalEntries\n  return localEntries ?? []\n}\n\n/** Test seam \u2014 drops every registration so a suite starts from a known set. */\nexport function clearWorkInboxSources(): void {\n  localEntries = []\n  writeGlobalEntries([])\n}\n\n/**\n * The caller facts source admission is decided from \u2014 the same principal the\n * \u00A76.4 predicate reads, narrowed to what this decision needs.\n */\nexport type WorkInboxSourceAdmission = {\n  grantedFeatures: readonly string[]\n  isSuperAdmin: boolean\n}\n\n/**\n * Whether this caller is admitted to an administrative-queue source at all.\n *\n * `hasFeature` rather than an array membership test, because a tenant `admin`\n * holds `agent_orchestrator.*` and not the concrete id \u2014 comparing raw strings\n * would lock every real administrator out of the queue the grant exists for.\n * A source that declares no queue feature is open to everyone the rows\n * themselves admit.\n */\nexport function isWorkInboxSourceAdmitted(\n  provider: WorkInboxSourceProvider,\n  admission: WorkInboxSourceAdmission | null | undefined,\n): boolean {\n  const required = provider.administrativeQueueFeature\n  if (!required) return true\n  if (!admission) return true\n  if (admission.isSuperAdmin) return true\n  return hasFeature(admission.grantedFeatures, required)\n}\n\n/**\n * Providers that can contribute to this query. Kind and module narrowing is\n * answered here rather than inside each provider so a filtered request does not\n * pay for a query per excluded source.\n *\n * `admission` is optional so every existing caller keeps its behaviour; when it\n * is supplied, a source declaring an `administrativeQueueFeature` the caller\n * does not hold is dropped before it is ever asked for rows.\n */\nexport function selectWorkInboxSources(\n  query: WorkInboxQuery,\n  admission?: WorkInboxSourceAdmission | null,\n): WorkInboxSourceEntry[] {\n  return getWorkInboxSources().filter((entry) => {\n    if (query.kinds && !query.kinds.includes(entry.provider.kind)) return false\n    if (query.moduleIds && !query.moduleIds.includes(entry.moduleId)) return false\n    return isWorkInboxSourceAdmitted(entry.provider, admission)\n  })\n}\n\nexport function isWorkInboxOpenStatus(status: string): boolean {\n  return !(WORK_INBOX_TERMINAL_STATUSES as readonly string[]).includes(status)\n}\n\n/**\n * Overdue is DERIVED, never stored: a due date in the past on an item nobody has\n * finished yet. Terminal items are never overdue however late they were closed.\n */\nexport function deriveWorkInboxOverdue(\n  dueDate: Date | string | null | undefined,\n  status: string,\n  now: Date,\n): boolean {\n  if (!dueDate) return false\n  if (!isWorkInboxOpenStatus(status)) return false\n  const due = dueDate instanceof Date ? dueDate : new Date(dueDate)\n  const dueMs = due.getTime()\n  if (Number.isNaN(dueMs)) return false\n  return dueMs < now.getTime()\n}\n\nexport function normalizeWorkInboxPriority(value: unknown): WorkInboxPriority | null {\n  if (typeof value !== 'string') return null\n  const lowered = value.toLowerCase()\n  return (WORK_INBOX_PRIORITIES as readonly string[]).includes(lowered)\n    ? (lowered as WorkInboxPriority)\n    : null\n}\n\n/**\n * Unprioritized work sorts with `medium`, not last: an item nobody labelled is\n * ordinary work, and sinking it below every explicit `low` would bury the whole\n * pre-Phase-4 backlog under a handful of deliberately deprioritized rows.\n */\nconst UNSET_PRIORITY_RANK = WORK_INBOX_PRIORITIES.indexOf('medium')\n\nfunction priorityRank(priority: WorkInboxPriority | null): number {\n  if (!priority) return UNSET_PRIORITY_RANK\n  return WORK_INBOX_PRIORITIES.indexOf(priority)\n}\n\nfunction dueRank(dueDate: string | null): number {\n  if (!dueDate) return Number.POSITIVE_INFINITY\n  const parsed = Date.parse(dueDate)\n  return Number.isNaN(parsed) ? Number.POSITIVE_INFINITY : parsed\n}\n\nfunction createdRank(createdAt: string): number {\n  const parsed = Date.parse(createdAt)\n  return Number.isNaN(parsed) ? Number.POSITIVE_INFINITY : parsed\n}\n\n/**\n * Canonical inbox ordering (spec \u00A76.2): priority first, then the nearest due\n * date, then oldest first. Every tier is compared explicitly and the row id\n * breaks the final tie, so the order is total and stable across providers.\n */\nexport function compareWorkInboxRows(left: WorkInboxRow, right: WorkInboxRow): number {\n  const byPriority = priorityRank(left.priority) - priorityRank(right.priority)\n  if (byPriority !== 0) return byPriority\n\n  const byDue = dueRank(left.dueDate) - dueRank(right.dueDate)\n  if (byDue !== 0) return byDue\n\n  const byCreated = createdRank(left.createdAt) - createdRank(right.createdAt)\n  if (byCreated !== 0) return byCreated\n\n  return left.id < right.id ? -1 : left.id > right.id ? 1 : 0\n}\n\nexport function sortWorkInboxRows(rows: WorkInboxRow[]): WorkInboxRow[] {\n  return [...rows].sort(compareWorkInboxRows)\n}\n\n/**\n * Flatten a row for the wire: the provider payload first, the common projection\n * on top. Spreading `details` UNDER the common fields is what makes a\n * `user_task` row a strict superset of the row `GET /api/workflows/tasks`\n * already returns \u2014 the enterprise \"Review proposal\" row action reads\n * `row.proposalId`, which lives only in the provider payload, and the common\n * fields still win wherever both define a key.\n */\nexport type WorkInboxWireRow = Omit<WorkInboxRow, 'details'> & Record<string, unknown>\n\nexport function serializeWorkInboxRow(row: WorkInboxRow): WorkInboxWireRow {\n  const { details, ...common } = row\n  return { ...details, ...common }\n}\n"],
+  "mappings": "AAmBA,SAAS,kBAAkB;AAOpB,MAAM,wBAAwB,CAAC,WAAW,QAAQ,UAAU,KAAK;AASjE,MAAM,+BAA+B,CAAC,aAAa,WAAW;AAiKrE,MAAM,gCAAgC;AAEtC,IAAI,eAA8C;AAElD,SAAS,oBAAmD;AAC1D,MAAI;AACF,UAAM,QAAS,WAAuC,6BAA6B;AACnF,WAAO,MAAM,QAAQ,KAAK,IAAK,QAAmC;AAAA,EACpE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,mBAAmB,SAAuC;AACjE,MAAI;AACF;AAAC,IAAC,WAAuC,6BAA6B,IAAI;AAAA,EAC5E,QAAQ;AAAA,EAER;AACF;AAUO,SAAS,yBACd,SACM;AACN,QAAM,oBAAoB,IAAI,IAAI,QAAQ,IAAI,CAAC,UAAU,MAAM,QAAQ,CAAC;AACxE,QAAM,OAAO,oBAAoB,EAAE,OAAO,CAAC,UAAU,CAAC,kBAAkB,IAAI,MAAM,QAAQ,CAAC;AAC3F,QAAM,QAAgC,CAAC;AACvC,aAAW,SAAS,SAAS;AAC3B,eAAW,YAAY,MAAM,SAAS;AACpC,YAAM,KAAK,EAAE,UAAU,MAAM,UAAU,SAAS,CAAC;AAAA,IACnD;AAAA,EACF;AACA,QAAM,SAAS,CAAC,GAAG,MAAM,GAAG,KAAK;AACjC,iBAAe;AACf,qBAAmB,MAAM;AAC3B;AAEO,SAAS,sBAA8C;AAC5D,QAAM,gBAAgB,kBAAkB;AACxC,MAAI,cAAe,QAAO;AAC1B,SAAO,gBAAgB,CAAC;AAC1B;AAGO,SAAS,wBAA8B;AAC5C,iBAAe,CAAC;AAChB,qBAAmB,CAAC,CAAC;AACvB;AAoBO,SAAS,0BACd,UACA,WACS;AACT,QAAM,WAAW,SAAS;AAC1B,MAAI,CAAC,SAAU,QAAO;AACtB,MAAI,CAAC,UAAW,QAAO;AACvB,MAAI,UAAU,aAAc,QAAO;AACnC,SAAO,WAAW,UAAU,iBAAiB,QAAQ;AACvD;AAWO,SAAS,uBACd,OACA,WACwB;AACxB,SAAO,oBAAoB,EAAE,OAAO,CAAC,UAAU;AAC7C,QAAI,MAAM,SAAS,CAAC,MAAM,MAAM,SAAS,MAAM,SAAS,IAAI,EAAG,QAAO;AACtE,QAAI,MAAM,aAAa,CAAC,MAAM,UAAU,SAAS,MAAM,QAAQ,EAAG,QAAO;AACzE,WAAO,0BAA0B,MAAM,UAAU,SAAS;AAAA,EAC5D,CAAC;AACH;AAEO,SAAS,sBAAsB,QAAyB;AAC7D,SAAO,CAAE,6BAAmD,SAAS,MAAM;AAC7E;AAMO,SAAS,uBACd,SACA,QACA,KACS;AACT,MAAI,CAAC,QAAS,QAAO;AACrB,MAAI,CAAC,sBAAsB,MAAM,EAAG,QAAO;AAC3C,QAAM,MAAM,mBAAmB,OAAO,UAAU,IAAI,KAAK,OAAO;AAChE,QAAM,QAAQ,IAAI,QAAQ;AAC1B,MAAI,OAAO,MAAM,KAAK,EAAG,QAAO;AAChC,SAAO,QAAQ,IAAI,QAAQ;AAC7B;AAEO,SAAS,2BAA2B,OAA0C;AACnF,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,UAAU,MAAM,YAAY;AAClC,SAAQ,sBAA4C,SAAS,OAAO,IAC/D,UACD;AACN;AAOA,MAAM,sBAAsB,sBAAsB,QAAQ,QAAQ;AAElE,SAAS,aAAa,UAA4C;AAChE,MAAI,CAAC,SAAU,QAAO;AACtB,SAAO,sBAAsB,QAAQ,QAAQ;AAC/C;AAEA,SAAS,QAAQ,SAAgC;AAC/C,MAAI,CAAC,QAAS,QAAO,OAAO;AAC5B,QAAM,SAAS,KAAK,MAAM,OAAO;AACjC,SAAO,OAAO,MAAM,MAAM,IAAI,OAAO,oBAAoB;AAC3D;AAEA,SAAS,YAAY,WAA2B;AAC9C,QAAM,SAAS,KAAK,MAAM,SAAS;AACnC,SAAO,OAAO,MAAM,MAAM,IAAI,OAAO,oBAAoB;AAC3D;AAOO,SAAS,qBAAqB,MAAoB,OAA6B;AACpF,QAAM,aAAa,aAAa,KAAK,QAAQ,IAAI,aAAa,MAAM,QAAQ;AAC5E,MAAI,eAAe,EAAG,QAAO;AAE7B,QAAM,QAAQ,QAAQ,KAAK,OAAO,IAAI,QAAQ,MAAM,OAAO;AAC3D,MAAI,UAAU,EAAG,QAAO;AAExB,QAAM,YAAY,YAAY,KAAK,SAAS,IAAI,YAAY,MAAM,SAAS;AAC3E,MAAI,cAAc,EAAG,QAAO;AAE5B,SAAO,KAAK,KAAK,MAAM,KAAK,KAAK,KAAK,KAAK,MAAM,KAAK,IAAI;AAC5D;AAEO,SAAS,kBAAkB,MAAsC;AACtE,SAAO,CAAC,GAAG,IAAI,EAAE,KAAK,oBAAoB;AAC5C;AAYO,SAAS,sBAAsB,KAAqC;AACzE,QAAM,EAAE,SAAS,GAAG,OAAO,IAAI;AAC/B,SAAO,EAAE,GAAG,SAAS,GAAG,OAAO;AACjC;",
+  "names": []
+}

package/dist/modules/workflows/lib/work-inbox/query.js

@@ -0,0 +1,70 @@
+import { parseBooleanWithDefault } from "@open-mercato/shared/lib/boolean";
+import { parseNumberWithDefault } from "@open-mercato/shared/lib/number";
+import { parseCommaSeparatedList, trimToUndefined } from "@open-mercato/shared/lib/string";
+import { normalizeWorkInboxPriority } from "./provider.js";
+const WORK_INBOX_DEFAULT_LIMIT = 50;
+const WORK_INBOX_MAX_LIMIT = 100;
+function listOrNull(raw) {
+  const values = parseCommaSeparatedList(raw);
+  return values.length > 0 ? values : null;
+}
+function prioritiesOrNull(raw) {
+  const values = parseCommaSeparatedList(raw).map(normalizeWorkInboxPriority).filter((value) => value !== null);
+  return values.length > 0 ? values : null;
+}
+const WORK_INBOX_TEXT_FILTERS = [
+  "kind",
+  "module",
+  "entityType",
+  "role",
+  "priority",
+  "status"
+];
+const WORK_INBOX_FLAG_FILTERS = ["overdue", "myWork"];
+function buildWorkInboxListQueryParams(filters, pagination) {
+  const params = new URLSearchParams();
+  params.set("limit", String(Math.min(pagination.limit, WORK_INBOX_MAX_LIMIT)));
+  params.set("offset", String(pagination.offset));
+  for (const key of WORK_INBOX_TEXT_FILTERS) {
+    const value = filters[key];
+    if (typeof value === "string" && value.length > 0) params.set(key, value);
+  }
+  for (const key of WORK_INBOX_FLAG_FILTERS) {
+    if (filters[key] === "true") params.set(key, "true");
+  }
+  return params;
+}
+function parseWorkInboxQuery(searchParams, now) {
+  const limit = Math.min(
+    parseNumberWithDefault(searchParams.get("limit"), WORK_INBOX_DEFAULT_LIMIT, {
+      min: 1,
+      integer: true
+    }),
+    WORK_INBOX_MAX_LIMIT
+  );
+  const myWork = parseBooleanWithDefault(searchParams.get("myWork"), false) || parseBooleanWithDefault(searchParams.get("myTasks"), false);
+  return {
+    kinds: listOrNull(searchParams.get("kind")),
+    moduleIds: listOrNull(searchParams.get("module")),
+    entityTypes: listOrNull(searchParams.get("entityType")),
+    roles: listOrNull(searchParams.get("role")),
+    priorities: prioritiesOrNull(searchParams.get("priority")),
+    statuses: listOrNull(searchParams.get("status")),
+    overdueOnly: parseBooleanWithDefault(searchParams.get("overdue"), false),
+    myWork,
+    assignedTo: trimToUndefined(searchParams.get("assignedTo")) ?? null,
+    workflowInstanceId: trimToUndefined(searchParams.get("workflowInstanceId")) ?? null,
+    limit,
+    offset: parseNumberWithDefault(searchParams.get("offset"), 0, { min: 0, integer: true }),
+    now
+  };
+}
+export {
+  WORK_INBOX_DEFAULT_LIMIT,
+  WORK_INBOX_FLAG_FILTERS,
+  WORK_INBOX_MAX_LIMIT,
+  WORK_INBOX_TEXT_FILTERS,
+  buildWorkInboxListQueryParams,
+  parseWorkInboxQuery
+};
+//# sourceMappingURL=query.js.map

package/dist/modules/workflows/lib/work-inbox/query.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/workflows/lib/work-inbox/query.ts"],
+  "sourcesContent": ["/**\n * Work Inbox \u2014 query-string parsing (PURE).\n *\n * Kept out of the route handler so every filter, the limit clamp and the\n * priority vocabulary can be asserted without a request, a container or a\n * database. The route only supplies the caller scope.\n */\n\nimport { parseBooleanWithDefault } from '@open-mercato/shared/lib/boolean'\nimport { parseNumberWithDefault } from '@open-mercato/shared/lib/number'\nimport { parseCommaSeparatedList, trimToUndefined } from '@open-mercato/shared/lib/string'\nimport { normalizeWorkInboxPriority } from './provider'\nimport type { WorkInboxPriority, WorkInboxQuery } from './provider'\n\nexport const WORK_INBOX_DEFAULT_LIMIT = 50\n\n/** Project rule: `pageSize` never exceeds 100 (root AGENTS.md \u2192 UI & HTTP). */\nexport const WORK_INBOX_MAX_LIMIT = 100\n\nfunction listOrNull(raw: string | null): string[] | null {\n  const values = parseCommaSeparatedList(raw)\n  return values.length > 0 ? values : null\n}\n\nfunction prioritiesOrNull(raw: string | null): WorkInboxPriority[] | null {\n  const values = parseCommaSeparatedList(raw)\n    .map(normalizeWorkInboxPriority)\n    .filter((value): value is WorkInboxPriority => value !== null)\n  return values.length > 0 ? values : null\n}\n\n/**\n * `myWork` also answers to `myTasks`, the name the shipped task inbox has always\n * sent, so a bookmarked filter keeps meaning what it meant.\n */\n/** Filter ids the inbox page offers, in the order they appear in the filter bar. */\nexport const WORK_INBOX_TEXT_FILTERS = [\n  'kind',\n  'module',\n  'entityType',\n  'role',\n  'priority',\n  'status',\n] as const\n\nexport const WORK_INBOX_FLAG_FILTERS = ['overdue', 'myWork'] as const\n\nexport type WorkInboxFilterValues = Record<string, unknown>\n\n/**\n * Client \u2192 server filter forwarding, kept outside the page for the same reason\n * `lib/task-list-query.ts` is: forwarding only a subset is silent, and the view\n * then claims a narrowing it never asked the server for.\n */\nexport function buildWorkInboxListQueryParams(\n  filters: WorkInboxFilterValues,\n  pagination: { limit: number; offset: number },\n): URLSearchParams {\n  const params = new URLSearchParams()\n  params.set('limit', String(Math.min(pagination.limit, WORK_INBOX_MAX_LIMIT)))\n  params.set('offset', String(pagination.offset))\n\n  for (const key of WORK_INBOX_TEXT_FILTERS) {\n    const value = filters[key]\n    if (typeof value === 'string' && value.length > 0) params.set(key, value)\n  }\n\n  for (const key of WORK_INBOX_FLAG_FILTERS) {\n    if (filters[key] === 'true') params.set(key, 'true')\n  }\n\n  return params\n}\n\nexport function parseWorkInboxQuery(searchParams: URLSearchParams, now: Date): WorkInboxQuery {\n  const limit = Math.min(\n    parseNumberWithDefault(searchParams.get('limit'), WORK_INBOX_DEFAULT_LIMIT, {\n      min: 1,\n      integer: true,\n    }),\n    WORK_INBOX_MAX_LIMIT,\n  )\n\n  const myWork =\n    parseBooleanWithDefault(searchParams.get('myWork'), false) ||\n    parseBooleanWithDefault(searchParams.get('myTasks'), false)\n\n  return {\n    kinds: listOrNull(searchParams.get('kind')),\n    moduleIds: listOrNull(searchParams.get('module')),\n    entityTypes: listOrNull(searchParams.get('entityType')),\n    roles: listOrNull(searchParams.get('role')),\n    priorities: prioritiesOrNull(searchParams.get('priority')),\n    statuses: listOrNull(searchParams.get('status')),\n    overdueOnly: parseBooleanWithDefault(searchParams.get('overdue'), false),\n    myWork,\n    assignedTo: trimToUndefined(searchParams.get('assignedTo')) ?? null,\n    workflowInstanceId: trimToUndefined(searchParams.get('workflowInstanceId')) ?? null,\n    limit,\n    offset: parseNumberWithDefault(searchParams.get('offset'), 0, { min: 0, integer: true }),\n    now,\n  }\n}\n"],
+  "mappings": "AAQA,SAAS,+BAA+B;AACxC,SAAS,8BAA8B;AACvC,SAAS,yBAAyB,uBAAuB;AACzD,SAAS,kCAAkC;AAGpC,MAAM,2BAA2B;AAGjC,MAAM,uBAAuB;AAEpC,SAAS,WAAW,KAAqC;AACvD,QAAM,SAAS,wBAAwB,GAAG;AAC1C,SAAO,OAAO,SAAS,IAAI,SAAS;AACtC;AAEA,SAAS,iBAAiB,KAAgD;AACxE,QAAM,SAAS,wBAAwB,GAAG,EACvC,IAAI,0BAA0B,EAC9B,OAAO,CAAC,UAAsC,UAAU,IAAI;AAC/D,SAAO,OAAO,SAAS,IAAI,SAAS;AACtC;AAOO,MAAM,0BAA0B;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,MAAM,0BAA0B,CAAC,WAAW,QAAQ;AASpD,SAAS,8BACd,SACA,YACiB;AACjB,QAAM,SAAS,IAAI,gBAAgB;AACnC,SAAO,IAAI,SAAS,OAAO,KAAK,IAAI,WAAW,OAAO,oBAAoB,CAAC,CAAC;AAC5E,SAAO,IAAI,UAAU,OAAO,WAAW,MAAM,CAAC;AAE9C,aAAW,OAAO,yBAAyB;AACzC,UAAM,QAAQ,QAAQ,GAAG;AACzB,QAAI,OAAO,UAAU,YAAY,MAAM,SAAS,EAAG,QAAO,IAAI,KAAK,KAAK;AAAA,EAC1E;AAEA,aAAW,OAAO,yBAAyB;AACzC,QAAI,QAAQ,GAAG,MAAM,OAAQ,QAAO,IAAI,KAAK,MAAM;AAAA,EACrD;AAEA,SAAO;AACT;AAEO,SAAS,oBAAoB,cAA+B,KAA2B;AAC5F,QAAM,QAAQ,KAAK;AAAA,IACjB,uBAAuB,aAAa,IAAI,OAAO,GAAG,0BAA0B;AAAA,MAC1E,KAAK;AAAA,MACL,SAAS;AAAA,IACX,CAAC;AAAA,IACD;AAAA,EACF;AAEA,QAAM,SACJ,wBAAwB,aAAa,IAAI,QAAQ,GAAG,KAAK,KACzD,wBAAwB,aAAa,IAAI,SAAS,GAAG,KAAK;AAE5D,SAAO;AAAA,IACL,OAAO,WAAW,aAAa,IAAI,MAAM,CAAC;AAAA,IAC1C,WAAW,WAAW,aAAa,IAAI,QAAQ,CAAC;AAAA,IAChD,aAAa,WAAW,aAAa,IAAI,YAAY,CAAC;AAAA,IACtD,OAAO,WAAW,aAAa,IAAI,MAAM,CAAC;AAAA,IAC1C,YAAY,iBAAiB,aAAa,IAAI,UAAU,CAAC;AAAA,IACzD,UAAU,WAAW,aAAa,IAAI,QAAQ,CAAC;AAAA,IAC/C,aAAa,wBAAwB,aAAa,IAAI,SAAS,GAAG,KAAK;AAAA,IACvE;AAAA,IACA,YAAY,gBAAgB,aAAa,IAAI,YAAY,CAAC,KAAK;AAAA,IAC/D,oBAAoB,gBAAgB,aAAa,IAAI,oBAAoB,CAAC,KAAK;AAAA,IAC/E;AAAA,IACA,QAAQ,uBAAuB,aAAa,IAAI,QAAQ,GAAG,GAAG,EAAE,KAAK,GAAG,SAAS,KAAK,CAAC;AAAA,IACvF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/workflows/lib/work-inbox/service.js

@@ -0,0 +1,56 @@
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import {
+  selectWorkInboxSources,
+  sortWorkInboxRows
+} from "./provider.js";
+const logger = createLogger("workflows");
+async function listWorkInbox(query, context) {
+  const entries = selectWorkInboxSources(query, context.scope.visibility.principal);
+  const collected = [];
+  const entityHidden = [];
+  const kinds = [];
+  const degradedKinds = [];
+  let total = 0;
+  for (const entry of entries) {
+    try {
+      const result = await entry.provider.list(query, {
+        ...context,
+        administrativeQueueFeature: entry.provider.administrativeQueueFeature ?? null
+      });
+      collected.push(...result.rows);
+      if (result.entityHidden) entityHidden.push(...result.entityHidden);
+      total += result.total;
+      kinds.push(entry.provider.kind);
+    } catch (error) {
+      degradedKinds.push(entry.provider.kind);
+      logger.error("Work inbox source failed", {
+        component: "work-inbox",
+        moduleId: entry.moduleId,
+        kind: entry.provider.kind,
+        err: error
+      });
+    }
+  }
+  const ordered = sortWorkInboxRows(collected);
+  return {
+    rows: ordered.slice(query.offset, query.offset + query.limit),
+    total,
+    // NOT sliced with the page: a marker is a diagnosis about the whole result,
+    // and paging it would make an administrator hunt for the explanation of a
+    // gap they can already see.
+    entityHidden,
+    kinds,
+    degradedKinds
+  };
+}
+async function listClaimableWorkInbox(query, context) {
+  const result = await listWorkInbox(query, context);
+  return result.rows.filter(
+    (row) => row.status === "PENDING" && !row.assignedTo && !row.claimedBy && Array.isArray(row.assignedToRoles) && row.assignedToRoles.length > 0
+  );
+}
+export {
+  listClaimableWorkInbox,
+  listWorkInbox
+};
+//# sourceMappingURL=service.js.map

package/dist/modules/workflows/lib/work-inbox/service.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/workflows/lib/work-inbox/service.ts"],
+  "sourcesContent": ["/**\n * Work Inbox \u2014 the `workInboxService` DI implementation (BC \u00A79: new DI keys are\n * free to add).\n *\n * It merges every registered source into one queue. A source that throws is\n * logged and contributes nothing rather than failing the whole inbox: one\n * module's outage must not hide another module's work \u2014 the same fail-soft\n * stance the response-enricher registry takes.\n */\n\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport {\n  selectWorkInboxSources,\n  sortWorkInboxRows,\n} from './provider'\nimport type {\n  WorkInboxQuery,\n  WorkInboxRow,\n  WorkInboxSourceContext,\n} from './provider'\nimport type { TaskEntityHiddenMarker } from '../task-visibility-request'\n\nconst logger = createLogger('workflows')\n\nexport type WorkInboxListResult = {\n  rows: WorkInboxRow[]\n  total: number\n  /** Entity-gated rows, merged across sources \u2014 see `WorkInboxSourceResult`. */\n  entityHidden: TaskEntityHiddenMarker[]\n  /** Kinds that actually answered \u2014 the UI offers exactly these as filters. */\n  kinds: string[]\n  /** Kinds whose provider failed, so the caller can say the view is partial. */\n  degradedKinds: string[]\n}\n\n/**\n * Merge, sort, then page.\n *\n * Each source is asked for `offset + limit` rows and reports its own true\n * total; the merged window is ordered with the canonical comparator and sliced.\n * With one source that is exactly a normal page. With several it is the honest\n * phase-1 read-model behavior \u2014 a cross-source ordered index needs the `Task`\n * entity that resolved question #1 defers.\n */\nexport async function listWorkInbox(\n  query: WorkInboxQuery,\n  context: WorkInboxSourceContext,\n): Promise<WorkInboxListResult> {\n  // Administrative-queue sources are dropped before they are asked for rows: a\n  // caller without the declared feature must not pay for a query whose every row\n  // the rule would then refuse.\n  const entries = selectWorkInboxSources(query, context.scope.visibility.principal)\n\n  const collected: WorkInboxRow[] = []\n  const entityHidden: TaskEntityHiddenMarker[] = []\n  const kinds: string[] = []\n  const degradedKinds: string[] = []\n  let total = 0\n\n  for (const entry of entries) {\n    try {\n      // Each source is handed its OWN declaration, so a provider serving\n      // `UserTask` rows applies its queue feature as the unassigned-queue arm\n      // without importing the registry it is registered in.\n      const result = await entry.provider.list(query, {\n        ...context,\n        administrativeQueueFeature: entry.provider.administrativeQueueFeature ?? null,\n      })\n      collected.push(...result.rows)\n      if (result.entityHidden) entityHidden.push(...result.entityHidden)\n      total += result.total\n      kinds.push(entry.provider.kind)\n    } catch (error) {\n      degradedKinds.push(entry.provider.kind)\n      logger.error('Work inbox source failed', {\n        component: 'work-inbox',\n        moduleId: entry.moduleId,\n        kind: entry.provider.kind,\n        err: error,\n      })\n    }\n  }\n\n  const ordered = sortWorkInboxRows(collected)\n\n  return {\n    rows: ordered.slice(query.offset, query.offset + query.limit),\n    total,\n    // NOT sliced with the page: a marker is a diagnosis about the whole result,\n    // and paging it would make an administrator hunt for the explanation of a\n    // gap they can already see.\n    entityHidden,\n    kinds,\n    degradedKinds,\n  }\n}\n\n/**\n * Claimable candidates for the caller, in inbox order \u2014 the queue the\n * claim-next affordance walks. Deliberately a read: the actual claim is a\n * compare-and-set inside `taskHandler`, so a candidate list that is already\n * stale by the time it is used is expected and safe.\n */\nexport async function listClaimableWorkInbox(\n  query: WorkInboxQuery,\n  context: WorkInboxSourceContext,\n): Promise<WorkInboxRow[]> {\n  const result = await listWorkInbox(query, context)\n  return result.rows.filter(\n    (row) =>\n      row.status === 'PENDING' &&\n      !row.assignedTo &&\n      !row.claimedBy &&\n      Array.isArray(row.assignedToRoles) &&\n      row.assignedToRoles.length > 0,\n  )\n}\n\nexport type WorkInboxService = {\n  listWorkInbox: typeof listWorkInbox\n  listClaimableWorkInbox: typeof listClaimableWorkInbox\n}\n"],
+  "mappings": "AAUA,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAQP,MAAM,SAAS,aAAa,WAAW;AAsBvC,eAAsB,cACpB,OACA,SAC8B;AAI9B,QAAM,UAAU,uBAAuB,OAAO,QAAQ,MAAM,WAAW,SAAS;AAEhF,QAAM,YAA4B,CAAC;AACnC,QAAM,eAAyC,CAAC;AAChD,QAAM,QAAkB,CAAC;AACzB,QAAM,gBAA0B,CAAC;AACjC,MAAI,QAAQ;AAEZ,aAAW,SAAS,SAAS;AAC3B,QAAI;AAIF,YAAM,SAAS,MAAM,MAAM,SAAS,KAAK,OAAO;AAAA,QAC9C,GAAG;AAAA,QACH,4BAA4B,MAAM,SAAS,8BAA8B;AAAA,MAC3E,CAAC;AACD,gBAAU,KAAK,GAAG,OAAO,IAAI;AAC7B,UAAI,OAAO,aAAc,cAAa,KAAK,GAAG,OAAO,YAAY;AACjE,eAAS,OAAO;AAChB,YAAM,KAAK,MAAM,SAAS,IAAI;AAAA,IAChC,SAAS,OAAO;AACd,oBAAc,KAAK,MAAM,SAAS,IAAI;AACtC,aAAO,MAAM,4BAA4B;AAAA,QACvC,WAAW;AAAA,QACX,UAAU,MAAM;AAAA,QAChB,MAAM,MAAM,SAAS;AAAA,QACrB,KAAK;AAAA,MACP,CAAC;AAAA,IACH;AAAA,EACF;AAEA,QAAM,UAAU,kBAAkB,SAAS;AAE3C,SAAO;AAAA,IACL,MAAM,QAAQ,MAAM,MAAM,QAAQ,MAAM,SAAS,MAAM,KAAK;AAAA,IAC5D;AAAA;AAAA;AAAA;AAAA,IAIA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAQA,eAAsB,uBACpB,OACA,SACyB;AACzB,QAAM,SAAS,MAAM,cAAc,OAAO,OAAO;AACjD,SAAO,OAAO,KAAK;AAAA,IACjB,CAAC,QACC,IAAI,WAAW,aACf,CAAC,IAAI,cACL,CAAC,IAAI,aACL,MAAM,QAAQ,IAAI,eAAe,KACjC,IAAI,gBAAgB,SAAS;AAAA,EACjC;AACF;",
+  "names": []
+}

package/dist/modules/workflows/lib/work-inbox/user-task-source.js

@@ -0,0 +1,149 @@
+import { UserTask } from "../../data/entities.js";
+import { serializeUserTask, USER_TASK_INBOX_KIND } from "../../api/tasks/serialize.js";
+import {
+  WORK_INBOX_TERMINAL_STATUSES,
+  deriveWorkInboxOverdue,
+  normalizeWorkInboxPriority
+} from "./provider.js";
+import {
+  buildTaskVisibilityRequestConditions,
+  partitionTaskPage
+} from "../task-visibility-request.js";
+const WORKFLOWS_MODULE_ID = "workflows";
+const USER_TASK_WORK_INBOX_ACTIONS = [
+  {
+    id: "claim",
+    labelKey: "workflows.tasks.actions.claim",
+    endpoint: "/api/workflows/tasks/{id}/claim",
+    appliesTo: "claimable"
+  },
+  {
+    id: "unclaim",
+    labelKey: "workflows.tasks.actions.unclaim",
+    endpoint: "/api/workflows/tasks/{id}/unclaim",
+    appliesTo: "claimed-by-me"
+  }
+];
+function asBindings(value) {
+  if (!Array.isArray(value)) return [];
+  const bindings = [];
+  for (const item of value) {
+    if (!item || typeof item !== "object" || Array.isArray(item)) continue;
+    const record = item;
+    const entityType = record.entityType;
+    const entityId = record.entityId;
+    if (typeof entityType !== "string" || typeof entityId !== "string") continue;
+    const label = typeof record.label === "string" ? record.label : null;
+    bindings.push({ entityType, entityId, label });
+  }
+  return bindings;
+}
+function buildUserTaskWorkInboxWhere(query, scope, options = {}) {
+  const conditions = [];
+  if (query.statuses && query.statuses.length > 0) {
+    conditions.push({ status: { $in: query.statuses } });
+  }
+  if (query.overdueOnly) {
+    conditions.push({ dueDate: { $lt: query.now } });
+    conditions.push({ status: { $nin: [...WORK_INBOX_TERMINAL_STATUSES] } });
+  }
+  if (query.assignedTo) {
+    conditions.push({ assignedTo: query.assignedTo });
+  }
+  if (query.workflowInstanceId) {
+    conditions.push({ workflowInstanceId: query.workflowInstanceId });
+  }
+  if (query.priorities && query.priorities.length > 0) {
+    conditions.push({ priority: { $in: query.priorities } });
+  }
+  if (query.roles && query.roles.length > 0) {
+    conditions.push({ assignedToRoles: { $overlap: query.roles } });
+  }
+  if (query.entityTypes && query.entityTypes.length > 0) {
+    conditions.push({
+      $or: query.entityTypes.map((entityType) => ({
+        entityBindings: { $contains: [{ entityType }] }
+      }))
+    });
+  }
+  if (query.myWork) {
+    conditions.push({
+      $or: [
+        { assignedTo: scope.userId },
+        { claimedBy: scope.userId },
+        { assignedToRoles: { $overlap: scope.roles } }
+      ]
+    });
+  }
+  conditions.push(
+    ...buildTaskVisibilityRequestConditions(scope.visibility, {
+      administrativeQueueFeature: options.administrativeQueueFeature ?? null
+    })
+  );
+  const where = { tenantId: scope.tenantId };
+  if (scope.organizationIds) {
+    where.organizationId = { $in: scope.organizationIds };
+  }
+  if (conditions.length > 0) {
+    where.$and = conditions;
+  }
+  return where;
+}
+function toUserTaskWorkInboxRow(task, now) {
+  const details = serializeUserTask(task);
+  const bindings = asBindings(details.entityBindings);
+  return {
+    id: details.id,
+    kind: USER_TASK_INBOX_KIND,
+    moduleId: WORKFLOWS_MODULE_ID,
+    title: details.taskName,
+    description: details.description ?? null,
+    status: details.status,
+    priority: normalizeWorkInboxPriority(details.priority),
+    dueDate: details.dueDate ?? null,
+    overdue: deriveWorkInboxOverdue(details.dueDate ?? null, details.status, now),
+    createdAt: details.createdAt,
+    updatedAt: details.updatedAt,
+    assignedTo: details.assignedTo ?? null,
+    assignedToRoles: details.assignedToRoles ?? null,
+    claimedBy: details.claimedBy ?? null,
+    entityTypes: [...new Set(bindings.map((binding) => binding.entityType))],
+    entityBindings: bindings,
+    detailHref: `/backend/tasks/${details.id}`,
+    actions: USER_TASK_WORK_INBOX_ACTIONS,
+    details
+  };
+}
+async function listUserTaskWorkItems(query, context) {
+  const em = context.resolve("em");
+  const options = {
+    administrativeQueueFeature: context.administrativeQueueFeature ?? null
+  };
+  const where = buildUserTaskWorkInboxWhere(query, context.scope, options);
+  const [tasks, total] = await em.findAndCount(UserTask, where, {
+    orderBy: [{ dueDate: "ASC" }, { createdAt: "DESC" }],
+    limit: query.offset + query.limit,
+    offset: 0
+  });
+  const { visible, entityHidden } = partitionTaskPage(context.scope.visibility, tasks, options);
+  return {
+    rows: visible.map((task) => toUserTaskWorkInboxRow(task, query.now)),
+    total,
+    ...entityHidden.length > 0 ? { entityHidden } : {}
+  };
+}
+const userTaskWorkInboxSource = {
+  kind: USER_TASK_INBOX_KIND,
+  moduleId: WORKFLOWS_MODULE_ID,
+  render: "work-inbox:user_task:detail",
+  actions: USER_TASK_WORK_INBOX_ACTIONS,
+  list: listUserTaskWorkItems
+};
+export {
+  USER_TASK_WORK_INBOX_ACTIONS,
+  WORKFLOWS_MODULE_ID,
+  buildUserTaskWorkInboxWhere,
+  toUserTaskWorkInboxRow,
+  userTaskWorkInboxSource
+};
+//# sourceMappingURL=user-task-source.js.map

package/dist/modules/workflows/lib/work-inbox/user-task-source.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/workflows/lib/work-inbox/user-task-source.ts"],
+  "sourcesContent": ["/**\n * Work Inbox \u2014 the core `user_task` source.\n *\n * A read-model over the existing `user_tasks` rows (spec \u00A76.3: \"phase 1: a\n * projection/read-model over existing `UserTask` \u2026 with no data migration\").\n * Nothing here writes; the inbox's mutations go through `taskHandler`.\n *\n * Rows are projected through the SAME `serializeUserTask` the task list route\n * uses and carried on the wire under `details`, so a work-inbox row remains a\n * strict superset of a task-list row.\n */\n\nimport type { EntityManager, FilterQuery } from '@mikro-orm/core'\nimport { UserTask } from '../../data/entities'\nimport { serializeUserTask, USER_TASK_INBOX_KIND } from '../../api/tasks/serialize'\nimport {\n  WORK_INBOX_TERMINAL_STATUSES,\n  deriveWorkInboxOverdue,\n  normalizeWorkInboxPriority,\n} from './provider'\nimport {\n  buildTaskVisibilityRequestConditions,\n  partitionTaskPage,\n} from '../task-visibility-request'\nimport type {\n  WorkInboxAction,\n  WorkInboxEntityBinding,\n  WorkInboxQuery,\n  WorkInboxRow,\n  WorkInboxScope,\n  WorkInboxSourceContext,\n  WorkInboxSourceProvider,\n  WorkInboxSourceResult,\n} from './provider'\n\nexport const WORKFLOWS_MODULE_ID = 'workflows'\n\n/**\n * Declarative actions the inbox renders for a workflow task. `complete` points\n * at the task detail page rather than an endpoint because completing needs the\n * form; claim and unclaim are one-shot POSTs.\n */\nexport const USER_TASK_WORK_INBOX_ACTIONS: WorkInboxAction[] = [\n  {\n    id: 'claim',\n    labelKey: 'workflows.tasks.actions.claim',\n    endpoint: '/api/workflows/tasks/{id}/claim',\n    appliesTo: 'claimable',\n  },\n  {\n    id: 'unclaim',\n    labelKey: 'workflows.tasks.actions.unclaim',\n    endpoint: '/api/workflows/tasks/{id}/unclaim',\n    appliesTo: 'claimed-by-me',\n  },\n]\n\ntype WorkInboxWhere = FilterQuery<UserTask>\n\n/**\n * Per-source options a `UserTask`-serving provider passes through to the \u00A76.4\n * rule.\n *\n * `administrativeQueueFeature` is the source's own declaration, handed back by\n * `listWorkInbox`. Core's `user_task` source declares none, so an unassigned row\n * keeps falling back to `workflows.tasks.view_all` exactly as before; a\n * specialized source (an administrative queue raised by another module) supplies\n * its own, and the SQL filter and the predicate must be given the SAME value or\n * a row is counted in `pagination.total` and then dropped from the page.\n */\nexport type UserTaskWorkInboxOptions = {\n  administrativeQueueFeature?: string | null\n}\n\nfunction asBindings(value: unknown): WorkInboxEntityBinding[] {\n  if (!Array.isArray(value)) return []\n  const bindings: WorkInboxEntityBinding[] = []\n  for (const item of value) {\n    if (!item || typeof item !== 'object' || Array.isArray(item)) continue\n    const record = item as Record<string, unknown>\n    const entityType = record.entityType\n    const entityId = record.entityId\n    if (typeof entityType !== 'string' || typeof entityId !== 'string') continue\n    const label = typeof record.label === 'string' ? record.label : null\n    bindings.push({ entityType, entityId, label })\n  }\n  return bindings\n}\n\n/**\n * Translate a work-inbox query into the ORM filter.\n *\n * Exported and pure so the tenant/organization scoping and every filter can be\n * asserted without a database. Independent predicates are pushed onto `$and`\n * rather than merged into one object, because several of them (`myWork`,\n * `entityTypes`) each need their own `$or` group and a single object can only\n * carry one.\n */\nexport function buildUserTaskWorkInboxWhere(\n  query: WorkInboxQuery,\n  scope: WorkInboxScope,\n  options: UserTaskWorkInboxOptions = {},\n): WorkInboxWhere {\n  const conditions: Record<string, unknown>[] = []\n\n  if (query.statuses && query.statuses.length > 0) {\n    conditions.push({ status: { $in: query.statuses } })\n  }\n\n  if (query.overdueOnly) {\n    conditions.push({ dueDate: { $lt: query.now } })\n    conditions.push({ status: { $nin: [...WORK_INBOX_TERMINAL_STATUSES] } })\n  }\n\n  if (query.assignedTo) {\n    conditions.push({ assignedTo: query.assignedTo })\n  }\n\n  if (query.workflowInstanceId) {\n    conditions.push({ workflowInstanceId: query.workflowInstanceId })\n  }\n\n  if (query.priorities && query.priorities.length > 0) {\n    conditions.push({ priority: { $in: query.priorities } })\n  }\n\n  if (query.roles && query.roles.length > 0) {\n    conditions.push({ assignedToRoles: { $overlap: query.roles } })\n  }\n\n  if (query.entityTypes && query.entityTypes.length > 0) {\n    conditions.push({\n      $or: query.entityTypes.map((entityType) => ({\n        entityBindings: { $contains: [{ entityType }] },\n      })),\n    })\n  }\n\n  if (query.myWork) {\n    conditions.push({\n      $or: [\n        { assignedTo: scope.userId },\n        { claimedBy: scope.userId },\n        { assignedToRoles: { $overlap: scope.roles } },\n      ],\n    })\n  }\n\n  // \u00A76.4. Pushed onto the SAME `$and` array as every other predicate, so the\n  // relationship clause, the entity gate and the caller's own filters compose\n  // rather than overwrite each other. Empty for an administrator, a superadmin,\n  // or a tenant that has flipped the opt-out \u2014 the rule then adds nothing and\n  // tenant/organization scoping below is still the floor.\n  conditions.push(\n    ...buildTaskVisibilityRequestConditions(scope.visibility, {\n      administrativeQueueFeature: options.administrativeQueueFeature ?? null,\n    }),\n  )\n\n  const where: Record<string, unknown> = { tenantId: scope.tenantId }\n  if (scope.organizationIds) {\n    where.organizationId = { $in: scope.organizationIds }\n  }\n  if (conditions.length > 0) {\n    where.$and = conditions\n  }\n\n  return where as WorkInboxWhere\n}\n\nexport function toUserTaskWorkInboxRow(task: UserTask, now: Date): WorkInboxRow {\n  const details = serializeUserTask(task)\n  const bindings = asBindings(details.entityBindings)\n  return {\n    id: details.id,\n    kind: USER_TASK_INBOX_KIND,\n    moduleId: WORKFLOWS_MODULE_ID,\n    title: details.taskName,\n    description: details.description ?? null,\n    status: details.status,\n    priority: normalizeWorkInboxPriority(details.priority),\n    dueDate: details.dueDate ?? null,\n    overdue: deriveWorkInboxOverdue(details.dueDate ?? null, details.status, now),\n    createdAt: details.createdAt,\n    updatedAt: details.updatedAt,\n    assignedTo: details.assignedTo ?? null,\n    assignedToRoles: details.assignedToRoles ?? null,\n    claimedBy: details.claimedBy ?? null,\n    entityTypes: [...new Set(bindings.map((binding) => binding.entityType))],\n    entityBindings: bindings,\n    detailHref: `/backend/tasks/${details.id}`,\n    actions: USER_TASK_WORK_INBOX_ACTIONS,\n    details,\n  }\n}\n\n/**\n * SQL orders by due date (Postgres puts NULLs last on ASC, which is what the\n * inbox wants) and then by recency; the canonical priority \u2192 due \u2192 created\n * ordering is applied by the merge service over the returned window, because\n * `priority` is an authored label with no ordinal column to sort on. Phase 1 is\n * a projection \u2014 a persisted sort key belongs with the `Task` entity, which\n * resolved question #1 defers to the next cycle.\n */\nasync function listUserTaskWorkItems(\n  query: WorkInboxQuery,\n  context: WorkInboxSourceContext,\n): Promise<WorkInboxSourceResult> {\n  const em = context.resolve<EntityManager>('em')\n  const options: UserTaskWorkInboxOptions = {\n    administrativeQueueFeature: context.administrativeQueueFeature ?? null,\n  }\n  const where = buildUserTaskWorkInboxWhere(query, context.scope, options)\n\n  const [tasks, total] = await em.findAndCount(UserTask, where, {\n    orderBy: [{ dueDate: 'ASC' }, { createdAt: 'DESC' }],\n    limit: query.offset + query.limit,\n    offset: 0,\n  })\n\n  // The `WHERE` already IS the rule; running the predicate over the page keeps\n  // this source routed through the single decision point and makes a\n  // SQL/predicate divergence lose a row instead of leaking one. It is handed the\n  // SAME queue feature the filter was built with, for exactly that reason.\n  const { visible, entityHidden } = partitionTaskPage(context.scope.visibility, tasks, options)\n\n  return {\n    rows: visible.map((task) => toUserTaskWorkInboxRow(task, query.now)),\n    total,\n    ...(entityHidden.length > 0 ? { entityHidden } : {}),\n  }\n}\n\nexport const userTaskWorkInboxSource: WorkInboxSourceProvider = {\n  kind: USER_TASK_INBOX_KIND,\n  moduleId: WORKFLOWS_MODULE_ID,\n  render: 'work-inbox:user_task:detail',\n  actions: USER_TASK_WORK_INBOX_ACTIONS,\n  list: listUserTaskWorkItems,\n}\n"],
+  "mappings": "AAaA,SAAS,gBAAgB;AACzB,SAAS,mBAAmB,4BAA4B;AACxD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAYA,MAAM,sBAAsB;AAO5B,MAAM,+BAAkD;AAAA,EAC7D;AAAA,IACE,IAAI;AAAA,IACJ,UAAU;AAAA,IACV,UAAU;AAAA,IACV,WAAW;AAAA,EACb;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,UAAU;AAAA,IACV,UAAU;AAAA,IACV,WAAW;AAAA,EACb;AACF;AAmBA,SAAS,WAAW,OAA0C;AAC5D,MAAI,CAAC,MAAM,QAAQ,KAAK,EAAG,QAAO,CAAC;AACnC,QAAM,WAAqC,CAAC;AAC5C,aAAW,QAAQ,OAAO;AACxB,QAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,IAAI,EAAG;AAC9D,UAAM,SAAS;AACf,UAAM,aAAa,OAAO;AAC1B,UAAM,WAAW,OAAO;AACxB,QAAI,OAAO,eAAe,YAAY,OAAO,aAAa,SAAU;AACpE,UAAM,QAAQ,OAAO,OAAO,UAAU,WAAW,OAAO,QAAQ;AAChE,aAAS,KAAK,EAAE,YAAY,UAAU,MAAM,CAAC;AAAA,EAC/C;AACA,SAAO;AACT;AAWO,SAAS,4BACd,OACA,OACA,UAAoC,CAAC,GACrB;AAChB,QAAM,aAAwC,CAAC;AAE/C,MAAI,MAAM,YAAY,MAAM,SAAS,SAAS,GAAG;AAC/C,eAAW,KAAK,EAAE,QAAQ,EAAE,KAAK,MAAM,SAAS,EAAE,CAAC;AAAA,EACrD;AAEA,MAAI,MAAM,aAAa;AACrB,eAAW,KAAK,EAAE,SAAS,EAAE,KAAK,MAAM,IAAI,EAAE,CAAC;AAC/C,eAAW,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,4BAA4B,EAAE,EAAE,CAAC;AAAA,EACzE;AAEA,MAAI,MAAM,YAAY;AACpB,eAAW,KAAK,EAAE,YAAY,MAAM,WAAW,CAAC;AAAA,EAClD;AAEA,MAAI,MAAM,oBAAoB;AAC5B,eAAW,KAAK,EAAE,oBAAoB,MAAM,mBAAmB,CAAC;AAAA,EAClE;AAEA,MAAI,MAAM,cAAc,MAAM,WAAW,SAAS,GAAG;AACnD,eAAW,KAAK,EAAE,UAAU,EAAE,KAAK,MAAM,WAAW,EAAE,CAAC;AAAA,EACzD;AAEA,MAAI,MAAM,SAAS,MAAM,MAAM,SAAS,GAAG;AACzC,eAAW,KAAK,EAAE,iBAAiB,EAAE,UAAU,MAAM,MAAM,EAAE,CAAC;AAAA,EAChE;AAEA,MAAI,MAAM,eAAe,MAAM,YAAY,SAAS,GAAG;AACrD,eAAW,KAAK;AAAA,MACd,KAAK,MAAM,YAAY,IAAI,CAAC,gBAAgB;AAAA,QAC1C,gBAAgB,EAAE,WAAW,CAAC,EAAE,WAAW,CAAC,EAAE;AAAA,MAChD,EAAE;AAAA,IACJ,CAAC;AAAA,EACH;AAEA,MAAI,MAAM,QAAQ;AAChB,eAAW,KAAK;AAAA,MACd,KAAK;AAAA,QACH,EAAE,YAAY,MAAM,OAAO;AAAA,QAC3B,EAAE,WAAW,MAAM,OAAO;AAAA,QAC1B,EAAE,iBAAiB,EAAE,UAAU,MAAM,MAAM,EAAE;AAAA,MAC/C;AAAA,IACF,CAAC;AAAA,EACH;AAOA,aAAW;AAAA,IACT,GAAG,qCAAqC,MAAM,YAAY;AAAA,MACxD,4BAA4B,QAAQ,8BAA8B;AAAA,IACpE,CAAC;AAAA,EACH;AAEA,QAAM,QAAiC,EAAE,UAAU,MAAM,SAAS;AAClE,MAAI,MAAM,iBAAiB;AACzB,UAAM,iBAAiB,EAAE,KAAK,MAAM,gBAAgB;AAAA,EACtD;AACA,MAAI,WAAW,SAAS,GAAG;AACzB,UAAM,OAAO;AAAA,EACf;AAEA,SAAO;AACT;AAEO,SAAS,uBAAuB,MAAgB,KAAyB;AAC9E,QAAM,UAAU,kBAAkB,IAAI;AACtC,QAAM,WAAW,WAAW,QAAQ,cAAc;AAClD,SAAO;AAAA,IACL,IAAI,QAAQ;AAAA,IACZ,MAAM;AAAA,IACN,UAAU;AAAA,IACV,OAAO,QAAQ;AAAA,IACf,aAAa,QAAQ,eAAe;AAAA,IACpC,QAAQ,QAAQ;AAAA,IAChB,UAAU,2BAA2B,QAAQ,QAAQ;AAAA,IACrD,SAAS,QAAQ,WAAW;AAAA,IAC5B,SAAS,uBAAuB,QAAQ,WAAW,MAAM,QAAQ,QAAQ,GAAG;AAAA,IAC5E,WAAW,QAAQ;AAAA,IACnB,WAAW,QAAQ;AAAA,IACnB,YAAY,QAAQ,cAAc;AAAA,IAClC,iBAAiB,QAAQ,mBAAmB;AAAA,IAC5C,WAAW,QAAQ,aAAa;AAAA,IAChC,aAAa,CAAC,GAAG,IAAI,IAAI,SAAS,IAAI,CAAC,YAAY,QAAQ,UAAU,CAAC,CAAC;AAAA,IACvE,gBAAgB;AAAA,IAChB,YAAY,kBAAkB,QAAQ,EAAE;AAAA,IACxC,SAAS;AAAA,IACT;AAAA,EACF;AACF;AAUA,eAAe,sBACb,OACA,SACgC;AAChC,QAAM,KAAK,QAAQ,QAAuB,IAAI;AAC9C,QAAM,UAAoC;AAAA,IACxC,4BAA4B,QAAQ,8BAA8B;AAAA,EACpE;AACA,QAAM,QAAQ,4BAA4B,OAAO,QAAQ,OAAO,OAAO;AAEvE,QAAM,CAAC,OAAO,KAAK,IAAI,MAAM,GAAG,aAAa,UAAU,OAAO;AAAA,IAC5D,SAAS,CAAC,EAAE,SAAS,MAAM,GAAG,EAAE,WAAW,OAAO,CAAC;AAAA,IACnD,OAAO,MAAM,SAAS,MAAM;AAAA,IAC5B,QAAQ;AAAA,EACV,CAAC;AAMD,QAAM,EAAE,SAAS,aAAa,IAAI,kBAAkB,QAAQ,MAAM,YAAY,OAAO,OAAO;AAE5F,SAAO;AAAA,IACL,MAAM,QAAQ,IAAI,CAAC,SAAS,uBAAuB,MAAM,MAAM,GAAG,CAAC;AAAA,IACnE;AAAA,IACA,GAAI,aAAa,SAAS,IAAI,EAAE,aAAa,IAAI,CAAC;AAAA,EACpD;AACF;AAEO,MAAM,0BAAmD;AAAA,EAC9D,MAAM;AAAA,EACN,UAAU;AAAA,EACV,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,MAAM;AACR;",
+  "names": []
+}