@rytass/bpm-core-nestjs-module 0.22.0 → 0.24.0

package/CHANGELOG.md

@@ -1,3 +1,98 @@
+## 0.24.0 (2026-11-14)
+
+### 🚀 Features
+
+- **bpm-core:** page the stuck approval instance list ([6cd50975](https://github.com/Rytass/BPMCore/commit/6cd50975))
+- **bpm-core-react:** mount the stuck approval instances page like the other admin pages ([fc19c298](https://github.com/Rytass/BPMCore/commit/fc19c298))
+- **bpm-core:** let an administrator cancel an approval instance and tell its initiator ([03674ced](https://github.com/Rytass/BPMCore/commit/03674ced))
+- **bpm-core:** list the approval instances that are stuck for administrators ([51118ce4](https://github.com/Rytass/BPMCore/commit/51118ce4))
+- **bpm-core:** record why an approval instance could not move on ([820c7fb7](https://github.com/Rytass/BPMCore/commit/820c7fb7))
+- let reassignMemberTasks take an optional list of task ids ([4b3c22a1](https://github.com/Rytass/BPMCore/commit/4b3c22a1))
+- **workflow-engine:** continue a manager chain where an earlier one stopped, or skip when its start already qualifies ([50397fbd](https://github.com/Rytass/BPMCore/commit/50397fbd))
+- **bpm-core:** check a manager chain continuation at publish and translate its lint ([6662b051](https://github.com/Rytass/BPMCore/commit/6662b051))
+
+### 🩹 Fixes
+
+- **bpm-core:** tell the initiator of an administrator cancel only after it commits ([2fca97e7](https://github.com/Rytass/BPMCore/commit/2fca97e7))
+- **bpm-core:** retry a failed ADVANCE_FAILED write once and log the lost row as an error ([71ec27ac](https://github.com/Rytass/BPMCore/commit/71ec27ac))
+- **bpm-core:** export the administrator cancel input like the other workflow inputs ([988981ae](https://github.com/Rytass/BPMCore/commit/988981ae))
+
+### 🔥 Performance
+
+- **workflow-engine:** index the ADVANCE_FAILED rows the stuck list reads ([2cf16d8d](https://github.com/Rytass/BPMCore/commit/2cf16d8d))
+- **workflow-engine:** page and count the stuck list in the database ([67d244c4](https://github.com/Rytass/BPMCore/commit/67d244c4))
+- **workflow-engine:** read only in-flight instances for the stuck list ([a9867d18](https://github.com/Rytass/BPMCore/commit/a9867d18))
+- **bpm-core:** read the unresolved failures of every stuck candidate in one batch ([c1a2e34d](https://github.com/Rytass/BPMCore/commit/c1a2e34d))
+
+### ❤️ Thank You
+
+- Chia Yu Pai @fantasywind
+- Kai-Chieh Yang
+
+## 0.23.0 (2026-11-14)
+
+### 🚀 Features
+
+- **form-data-source:** gate approver runtime options by fill units ([f6659766](https://github.com/Rytass/BPMCore/commit/f6659766))
+- **workflow-engine:** list approver fill units for open tasks ([86d517b5](https://github.com/Rytass/BPMCore/commit/86d517b5))
+- **workflow-engine:** answer approver-fill VALUE_NOT_RESOLVED as 400 formDataErrors ([3bb29a51](https://github.com/Rytass/BPMCore/commit/3bb29a51))
+- **form-data-source:** locate approver-fill VALUE_NOT_RESOLVED on its field or cell ([1a17907a](https://github.com/Rytass/BPMCore/commit/1a17907a))
+- **bpm-core-client:** expose host error code on BPMGraphQLRequestError ([3a388721](https://github.com/Rytass/BPMCore/commit/3a388721))
+- **bpm-core-react:** pass column-mode table access to approver fill ([c4fcb87d](https://github.com/Rytass/BPMCore/commit/c4fcb87d))
+- **bpm-core-react:** add per-table access to form renderer ([98cd5208](https://github.com/Rytass/BPMCore/commit/98cd5208))
+- **field-access:** reject publish when a table dependent column is not opened ([a4f64372](https://github.com/Rytass/BPMCore/commit/a4f64372))
+- **workflow-engine:** fail closed when a dependent column's source changes ([576de175](https://github.com/Rytass/BPMCore/commit/576de175))
+- **field-access:** export dependency break helper for column fills ([d25212c6](https://github.com/Rytass/BPMCore/commit/d25212c6))
+- **field-access:** allow approver-filled data-source columns in column mode ([3b8cb06a](https://github.com/Rytass/BPMCore/commit/3b8cb06a))
+- **workflow-engine:** resolve approver-filled data-source cells on decide ([dd80b145](https://github.com/Rytass/BPMCore/commit/dd80b145))
+- **workflow-engine:** enforce column-mode cell locks on decide ([16bb16ef](https://github.com/Rytass/BPMCore/commit/16bb16ef))
+- **workflow-engine:** settle column-mode approver cells on submit and resubmit ([31655ee2](https://github.com/Rytass/BPMCore/commit/31655ee2))
+- **workflow-engine:** resolve approver-filled data-source options on decide ([bd300033](https://github.com/Rytass/BPMCore/commit/bd300033))
+- **field-access:** lint per-column fill conflicts and approver data sources ([2d081bb2](https://github.com/Rytass/BPMCore/commit/2d081bb2))
+- **field-access:** read per-column fill units for table fields ([996bffcc](https://github.com/Rytass/BPMCore/commit/996bffcc))
+- **notification:** keep SLA auto-approve open when the instance guard blocks it ([894a45ac](https://github.com/Rytass/BPMCore/commit/894a45ac))
+- **workflow-engine:** expose recordTaskAutoDecisionFailed on the engine token ([40d69180](https://github.com/Rytass/BPMCore/commit/40d69180))
+- **workflow-engine:** record case lifecycle instance events ([b7b5f791](https://github.com/Rytass/BPMCore/commit/b7b5f791))
+- **instance-event:** export writer and expose enabled getter ([864e9db5](https://github.com/Rytass/BPMCore/commit/864e9db5))
+- **instance-event:** expose admin list and retry resolvers ([4cbb84ac](https://github.com/Rytass/BPMCore/commit/4cbb84ac))
+- **instance-event:** purge delivered rows past retention ([69d19f9a](https://github.com/Rytass/BPMCore/commit/69d19f9a))
+- **instance-event:** schedule periodic delivery scans ([ac9b7dc3](https://github.com/Rytass/BPMCore/commit/ac9b7dc3))
+- **instance-event:** deliver on commit via subscriber ([53641feb](https://github.com/Rytass/BPMCore/commit/53641feb))
+- **instance-event:** add outbox delivery service ([b7ddcd3f](https://github.com/Rytass/BPMCore/commit/b7ddcd3f))
+- **instance-event:** add outbox event writer ([fd891be4](https://github.com/Rytass/BPMCore/commit/fd891be4))
+- **instance-event:** add lifecycle event outbox and observer wiring ([74dcdffd](https://github.com/Rytass/BPMCore/commit/74dcdffd))
+- **workflow-engine:** add pre-decision host guard for submit, resubmit and decide ([8d450dd3](https://github.com/Rytass/BPMCore/commit/8d450dd3))
+- **form:** add HOST_RULE issue reason with optional host code ([3d58779d](https://github.com/Rytass/BPMCore/commit/3d58779d))
+- **template:** exclude host-managed templates from lists by default ([54fac148](https://github.com/Rytass/BPMCore/commit/54fac148))
+- **form:** exclude host-managed forms from lists by default ([416fa081](https://github.com/Rytass/BPMCore/commit/416fa081))
+- **template:** add approvalTemplateByKey query ([c936675c](https://github.com/Rytass/BPMCore/commit/c936675c))
+- **template:** add service-only hostManaged flag to templates and forms ([cd292961](https://github.com/Rytass/BPMCore/commit/cd292961))
+- **template:** upsert approval template by key on compose ([7c0b635e](https://github.com/Rytass/BPMCore/commit/7c0b635e))
+- **template:** add a host-owned key to approval templates ([2aa09ba3](https://github.com/Rytass/BPMCore/commit/2aa09ba3))
+- **form:** allow defaults on dynamic sources without value dependencies ([0e553c0a](https://github.com/Rytass/BPMCore/commit/0e553c0a))
+- **bpm-core:** accept a required boolean the approver fills in ([5a0b4757](https://github.com/Rytass/BPMCore/commit/5a0b4757))
+- **instances:** filter approval instances by template key ([18d496c7](https://github.com/Rytass/BPMCore/commit/18d496c7))
+- **conditions:** optionally read unfilled form fields as null ([958d3be6](https://github.com/Rytass/BPMCore/commit/958d3be6))
+- **template:** add a HOST_ONLY launch mode to template versions ([d83db05e](https://github.com/Rytass/BPMCore/commit/d83db05e))
+- **initiator:** let a host add customFields to the built snapshot ([609bc5ab](https://github.com/Rytass/BPMCore/commit/609bc5ab))
+- **inbox:** filter inbox and approval history by template ([6870883a](https://github.com/Rytass/BPMCore/commit/6870883a))
+- **migrations:** add the host integration round schema ([34eef9b2](https://github.com/Rytass/BPMCore/commit/34eef9b2))
+
+### 🩹 Fixes
+
+- **workflow-engine:** trim the task filter template key ([b74446b8](https://github.com/Rytass/BPMCore/commit/b74446b8))
+- **workflow-engine:** report only changed keys to the resubmit guard ([53d7bdb2](https://github.com/Rytass/BPMCore/commit/53d7bdb2))
+- **template:** declare the live template key index on the entity ([49b37f69](https://github.com/Rytass/BPMCore/commit/49b37f69))
+- **workflow-engine:** pass the approver auth context to the decide guard ([0569d7db](https://github.com/Rytass/BPMCore/commit/0569d7db))
+- **workflow-engine:** skip the open-cell schema read for nodes without column fills ([5842bfb7](https://github.com/Rytass/BPMCore/commit/5842bfb7))
+- **workflow-engine:** restore approver cells only on unchanged rows ([0d166129](https://github.com/Rytass/BPMCore/commit/0d166129))
+- **workflow-engine:** read grant units for summaries and keep whole-field writes ([2fa00549](https://github.com/Rytass/BPMCore/commit/2fa00549))
+- **workflow-engine:** record the deciding member as the actor of rejection and return events ([07ab1888](https://github.com/Rytass/BPMCore/commit/07ab1888))
+
+### ❤️ Thank You
+
+- Chia Yu Pai @fantasywind
+
 ## 0.22.0 (2026-11-13)
 
 ### 🚀 Features

package/README.md

@@ -1054,6 +1054,33 @@ the initiator. Both settings are read from the instance's workflow snapshot;
 left out, the chain behaves exactly as before. An engine from before this
 change ignores them and climbs from the initiator.
 
+Two more settings cover a flow that signs a manager chain up to some level,
+inserts other stages (an HR countersign, say), and then picks the chain up again
+to the final approver. `startFrom: { type: 'CHAIN_CONTINUATION', nodeId }` names
+the earlier chain stage (S) to continue. The stage climbs from S's start and
+signs only managers above the position level S actually got a signature from
+(the highest level, on the day each person approved, of those who really
+approved S's latest round; an SLA auto-approval does not count, and a stage whose
+latest round was skipped counts as nobody); when that level already reaches this
+stage's `minPositionLevel`, the whole stage is skipped. `skipWhenStartReached:
+true` skips the stage when the start person's own highest position level
+already reaches `minPositionLevel`; a start without a level does not skip. A
+skip creates no task and advances the token like `SKIP_NODE`, writing
+`skippedByManagerChainReached: true` in the `TOKEN_ADVANCED` payload.
+
+The two exclude each other and neither is allowed on a notify node. For a
+continuation, publish requires S to be an `ORG_MANAGER_CHAIN` user task on every
+path to this stage that is not a continuation itself and starts at the initiator
+or an earlier stage's approver (not a form field), requires this stage's
+`minPositionLevel` to be higher than S's, and refuses
+`whenEmpty: 'INITIATOR_MANAGER'` here. A stage that can be skipped this way
+cannot have approver-fillable fields and cannot be a `NODE_ACTOR` source
+(`NodeActorSourceSkipReason` gains `managerChainReached`, so an exhaustive
+`Record` over it needs the new member). An engine that has `startFrom` but not
+`CHAIN_CONTINUATION` refuses a continuation by name, while one from before
+`skipWhenStartReached` ignores that key and runs the stage as before, so upgrade
+the engine before publishing a template that uses it.
+
 Fallback types:
 
 | Type       | Behavior                                                                                                                                                                                                                                        |
@@ -1751,7 +1778,12 @@ administrator (`@BPMAdminOnly()`) can move it without that person's help:
   module, the list is always empty.
 - `reassignTask(input)` moves one task's seat from `fromMemberId` to
   `toMemberId`. `reassignMemberTasks(input)` does the same for every open task
-  the source member holds, one transaction and one result per task.
+  the source member holds, one transaction and one result per task. Its
+  optional `taskIds` limits the batch to those tasks: omitted or `null` keeps
+  every open task, an empty list is refused with a `BadRequestException` (the
+  service checks it itself, so it holds without a `ValidationPipe`), and an id
+  the member does not hold gets no result row and no error. Deploy the server
+  before a screen that sends `taskIds`.
 
 The rules that differ from the holder's own transfer:
 
@@ -1785,6 +1817,41 @@ decided it already (both answer a `ConflictException`). The task-level
 assignee, delegation chain and `openedAt` stay as they were: a seat transfer is
 not a claim of the whole stage.
 
+## Stuck Approval Instances (unreleased)
+
+Not in a published version yet. It landed after `v0.21.4`.
+
+A decision on a task, or an initiator's resubmission of a returned instance,
+can fail to move the instance on to its next stage (the next stage has no
+resolvable approver, say). The transaction rolls back, so the task is still
+open or the instance is still returned, and the person who pressed sees the
+error. Without a trace, nobody else would know the instance is stuck.
+
+- The failure is recorded as an `ADVANCE_FAILED` activity record, written in a
+  transaction of its own after the first one has rolled back. Only an
+  `HttpException` with a status below 500 is recorded; its message is what the
+  operator sees. A 5xx, which usually clears on retry, and a plain `Error`,
+  which may carry SQL, are not recorded. The caller still gets the original
+  error, unchanged.
+- An administrator (`@BPMAdminOnly()`) lists the instances that are still stuck
+  with `stuckApprovalInstances`: one row per `RUNNING` or `RETURNED` instance,
+  newest failure first, with the reason, the node, who has to press again now
+  (read when the list loads, so it follows a later reassignment) and, for a
+  timeout approval the system made, `automatic: 'SLA_AUTO_APPROVE'`. The list
+  is always paged — `page` (default 1) and `pageSize` (default 20, at most
+  100) — and `stuckApprovalInstanceCount` gives the total.
+- `adminCancelApprovalInstance(input)` ends a running or returned instance
+  whoever started it. `input.reason` is required. After it, the instance leaves
+  the stuck list.
+- The initiator is sent an in-app notification with the reason, unless the
+  administrator is the initiator. It is written only after the cancellation
+  has committed; if writing it fails, the failure is logged and the
+  cancellation stands.
+- The `INSTANCE_CANCELLED` activity record of that cancellation carries
+  `cancelledByAdministrator: true` in its payload, and the reason as `comment`.
+  A host that reads `INSTANCE_CANCELLED` can tell it from the initiator
+  withdrawing, whose payload has no such key.
+
 ## Delegation Rules
 
 > The priority order and the root check below are unreleased (they landed after

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rytass/bpm-core-nestjs-module",
-  "version": "0.22.0",
+  "version": "0.24.0",
   "description": "Embeddable NestJS BPM approval workflow module: workflow engine, approval templates, forms, organization/member contracts, attachments, signatures, notifications, delegation, and TypeORM migrations.",
   "keywords": [
     "bpm",
@@ -162,7 +162,7 @@
     "@nestjs/core": ">=10.0.0",
     "@nestjs/graphql": ">=12.0.0",
     "@nestjs/typeorm": ">=10.0.0",
-    "@rytass/bpm-core-shared": "^0.22.0",
+    "@rytass/bpm-core-shared": "^0.24.0",
     "@rytass/secret-adapter-vault-nestjs": ">=0.4.5",
     "express": ">=4.0.0",
     "graphql": ">=16.0.0",

package/src/index.d.ts

@@ -10,6 +10,7 @@ export * from './lib/expression-function';
 export * from './lib/form';
 export * from './lib/form-data-source';
 export * from './lib/identity';
+export * from './lib/instance-event';
 export * from './lib/notification';
 export * from './lib/organization';
 export * from './lib/signature';

package/src/index.js

@@ -13,6 +13,7 @@ tslib_1.__exportStar(require("./lib/expression-function"), exports);
 tslib_1.__exportStar(require("./lib/form"), exports);
 tslib_1.__exportStar(require("./lib/form-data-source"), exports);
 tslib_1.__exportStar(require("./lib/identity"), exports);
+tslib_1.__exportStar(require("./lib/instance-event"), exports);
 tslib_1.__exportStar(require("./lib/notification"), exports);
 tslib_1.__exportStar(require("./lib/organization"), exports);
 tslib_1.__exportStar(require("./lib/signature"), exports);

package/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../libs/bpm-core/src/index.ts"],"names":[],"mappings":";;;AAAA,2DAAiC;AACjC,oDAA0B;AAC1B,yDAA+B;AAC/B,yDAA+B;AAC/B,uDAA6B;AAC7B,0DAAgC;AAChC,yDAA+B;AAC/B,2DAAiC;AACjC,oEAA0C;AAC1C,qDAA2B;AAC3B,iEAAuC;AACvC,yDAA+B;AAC/B,6DAAmC;AACnC,6DAAmC;AACnC,0DAAgC;AAChC,yDAA+B;AAC/B,gEAAsC;AACtC,iEAAuC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../libs/bpm-core/src/index.ts"],"names":[],"mappings":";;;AAAA,2DAAiC;AACjC,oDAA0B;AAC1B,yDAA+B;AAC/B,yDAA+B;AAC/B,uDAA6B;AAC7B,0DAAgC;AAChC,yDAA+B;AAC/B,2DAAiC;AACjC,oEAA0C;AAC1C,qDAA2B;AAC3B,iEAAuC;AACvC,yDAA+B;AAC/B,+DAAqC;AACrC,6DAAmC;AACnC,6DAAmC;AACnC,0DAAgC;AAChC,yDAA+B;AAC/B,gEAAsC;AACtC,iEAAuC"}

package/src/lib/bpm/bpm-root-options.d.ts

@@ -5,12 +5,15 @@ import { BPMAuthModuleOptions } from '../bpm-auth/bpm-auth.options';
 import { BPMBusinessCalendar } from '../calendar/business-calendar.token';
 import type { BPMExpressionFunction } from '../expression-function/expression-function.types';
 import { BPMFormDataSourceRegistry } from '../form-data-source/form-data-source.types';
+import type { BPMInstanceEventDeliveryOptions } from '../instance-event/instance-event.options';
+import type { BPMInstanceEventObserver } from '../instance-event/instance-event.token';
 import { BPMRootIdentityOptions } from '../identity/identity-options';
 import { BPMMemberResolver } from '../identity/member-resolver.interface';
 import { BPMRootNotificationOptions } from '../notification/notification-options';
 import { BPMRootOrganizationOptions } from '../organization/organization-time-zone';
 import { BPMRootSignatureOptions } from '../signature/signature-options';
 import { BPMInitiatorCustomFieldsResolver } from '../workflow-engine/initiator-custom-fields-resolver.token';
+import { BPMInstanceGuard } from '../workflow-engine/instance-guard.token';
 import { BPMWorkflowServiceTaskDispatcher } from '../workflow-engine/workflow-service-task-dispatcher.token';
 import { BPMRootWorkflowWebhookOptions } from '../workflow-webhook/workflow-webhook-options';
 import { BPMWorkflowWebhookRegistry } from '../workflow-webhook/workflow-webhook.types';
@@ -79,6 +82,28 @@ export interface BPMRootRuntimeOptions extends BPMRootAttachmentOptions, BPMRoot
      * When omitted, only the built-ins are available.
      */
     readonly expressionFunctions?: readonly BPMExpressionFunction[];
+    /**
+     * Reads a form field the case has no value for as `null` (a table as `[]`)
+     * instead of failing the expression with a missing key (ADR 27 §3). Only
+     * top-level fields of the case's form schema are filled; table columns are
+     * not, and nothing is written back to `form_data`. Applies to every
+     * workflow expression on a case (entry conditions, gateways, approver
+     * expressions, WEBHOOK payloads, `SET_FORM_FIELD`), to delegation
+     * `scopeConditionCel`, and to dry runs given the form schema.
+     *
+     * Defaults to `false`. Turning it on changes what existing expressions mean
+     * for an unfilled field `x`:
+     *
+     * | expression       | off                 | on                       |
+     * | ---------------- | ------------------- | ------------------------ |
+     * | `has(form.x)`    | `false`             | `true`                   |
+     * | `form.x == null` | missing-key error   | `true`                   |
+     * | `form.x > 5`     | missing-key error   | type error (still fails) |
+     *
+     * A template that tests "not filled" with `has(form.x)` must switch to
+     * `form.x == null` before the host turns this on.
+     */
+    readonly expressionMissingFormFieldsAsNull?: boolean;
     /**
      * Versioned form option DataSource catalog, as a ready instance. When
      * omitted, BPM exposes an empty catalog.
@@ -101,6 +126,38 @@ export interface BPMRootRuntimeOptions extends BPMRootAttachmentOptions, BPMRoot
      * given. When omitted, `customFields` is `{}`.
      */
     readonly initiatorCustomFieldsResolver?: BPMInitiatorCustomFieldsResolver;
+    /**
+     * Pre-decision guard that can refuse a submit, resubmit or decide before the
+     * engine commits it, as a ready instance. Refusals come back as a 400 with
+     * `formDataErrors` (reason `HOST_RULE`); a timeout or a failing guard comes
+     * back as a 503. The guard runs inside the engine transaction, so a refusal
+     * rolls the whole change back.
+     *
+     * `instanceGuardProvider` takes precedence when both are given. When omitted,
+     * no guard runs.
+     */
+    readonly instanceGuard?: BPMInstanceGuard;
+    /**
+     * Time the guard gets to answer, in milliseconds. Default 5000. A guard that
+     * does not answer in time fails closed (503 `BPM_INSTANCE_GUARD_TIMEOUT`).
+     * Only read when a guard is bound.
+     */
+    readonly instanceGuardTimeoutMs?: number;
+    /**
+     * Receives instance lifecycle events (ADR 27 §1), as a ready instance. BPM
+     * writes one outbox row per event in the same transaction as the state change
+     * and calls the observer after commit, at least once per event. Hosts dedupe
+     * on `event.id`.
+     *
+     * `instanceEventObserverProvider` takes precedence when both are given. When
+     * omitted, no outbox rows are written.
+     */
+    readonly instanceEventObserver?: BPMInstanceEventObserver;
+    /**
+     * Outbox tuning for instance lifecycle events (ADR 27 §1.4). Unset or
+     * non-positive fields take the webhook-matching defaults.
+     */
+    readonly instanceEventDelivery?: Partial<BPMInstanceEventDeliveryOptions>;
     /**
      * Host identity source, as a ready instance.
      *

package/src/lib/bpm/bpm-root-options.js.map

@@ -1 +1 @@
-{"version":3,"file":"bpm-root-options.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/bpm/bpm-root-options.ts"],"names":[],"mappings":";;;;;AAAA,2CAMwB;AAUxB,mFAGgD;AA0IhD;;;;;;;;;;;GAWG;AACU,QAAA,gBAAgB,GAC3B,MAAM,CAAC,kBAAkB,CAAC,CAAC;AAoB7B;;;;;;GAMG;AAGI,IAAM,oBAAoB,4BAA1B,MAAM,oBAAoB;IAC/B,MAAM,CAAC,OAAO,CAAC,UAAiC,EAAE;QAChD,IAAA,uDAA8B,EAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAE7D,OAAO;YACL,OAAO,EAAE,CAAC,wBAAgB,CAAC;YAC3B,MAAM,EAAE,sBAAoB;YAC5B,SAAS,EAAE;gBACT;oBACE,OAAO,EAAE,wBAAgB;oBACzB,QAAQ,EAAE,OAAO;iBAClB;aACF;SACF,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,YAAY,CACjB,UAA4C,EAAE;QAE9C,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QAEtC,OAAO;YACL,OAAO,EAAE,CAAC,wBAAgB,CAAC;YAC3B,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE;YACpD,MAAM,EAAE,sBAAoB;YAC5B,SAAS,EAAE;gBACT;oBACE,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;oBACnC,OAAO,EAAE,wBAAgB;oBACzB,UAAU,EAAE,KAAK,EACf,GAAG,IAAwB,EACK,EAAE;wBAClC,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;wBAE7D,IAAA,uDAA8B,EAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;wBAE9D,OAAO,QAAQ,CAAC;oBAClB,CAAC;iBACF;aACF;SACF,CAAC;IACJ,CAAC;CACF,CAAA;AA1CY,oDAAoB;+BAApB,oBAAoB;IAFhC,IAAA,eAAM,GAAE;IACR,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,oBAAoB,CA0ChC"}
+{"version":3,"file":"bpm-root-options.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/bpm/bpm-root-options.ts"],"names":[],"mappings":";;;;;AAAA,2CAMwB;AAYxB,mFAGgD;AAsMhD;;;;;;;;;;;GAWG;AACU,QAAA,gBAAgB,GAC3B,MAAM,CAAC,kBAAkB,CAAC,CAAC;AAoB7B;;;;;;GAMG;AAGI,IAAM,oBAAoB,4BAA1B,MAAM,oBAAoB;IAC/B,MAAM,CAAC,OAAO,CAAC,UAAiC,EAAE;QAChD,IAAA,uDAA8B,EAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAE7D,OAAO;YACL,OAAO,EAAE,CAAC,wBAAgB,CAAC;YAC3B,MAAM,EAAE,sBAAoB;YAC5B,SAAS,EAAE;gBACT;oBACE,OAAO,EAAE,wBAAgB;oBACzB,QAAQ,EAAE,OAAO;iBAClB;aACF;SACF,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,YAAY,CACjB,UAA4C,EAAE;QAE9C,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QAEtC,OAAO;YACL,OAAO,EAAE,CAAC,wBAAgB,CAAC;YAC3B,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE;YACpD,MAAM,EAAE,sBAAoB;YAC5B,SAAS,EAAE;gBACT;oBACE,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;oBACnC,OAAO,EAAE,wBAAgB;oBACzB,UAAU,EAAE,KAAK,EACf,GAAG,IAAwB,EACK,EAAE;wBAClC,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;wBAE7D,IAAA,uDAA8B,EAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;wBAE9D,OAAO,QAAQ,CAAC;oBAClB,CAAC;iBACF;aACF;SACF,CAAC;IACJ,CAAC;CACF,CAAA;AA1CY,oDAAoB;+BAApB,oBAAoB;IAFhC,IAAA,eAAM,GAAE;IACR,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,oBAAoB,CA0ChC"}

package/src/lib/bpm/bpm-root.module.d.ts

@@ -4,9 +4,11 @@ import { BPMResolverMetadataFactory } from '../bpm-auth/bpm-resolver-metadata';
 import { BPMBusinessCalendar } from '../calendar/business-calendar.token';
 import type { BPMExpressionFunction } from '../expression-function/expression-function.types';
 import { BPMFormDataSourceRegistry } from '../form-data-source';
+import type { BPMInstanceEventObserver } from '../instance-event/instance-event.token';
 import { BPMMemberResolver } from '../identity/member-resolver.interface';
 import { BPMWorkflowWebhookRegistry } from '../workflow-webhook/workflow-webhook.types';
 import { BPMInitiatorCustomFieldsResolver } from '../workflow-engine/initiator-custom-fields-resolver.token';
+import { BPMInstanceGuard } from '../workflow-engine/instance-guard.token';
 import { BPMWorkflowServiceTaskDispatcher } from '../workflow-engine/workflow-service-task-dispatcher.token';
 import { BPMRootRuntimeOptions } from './bpm-root-options';
 /**
@@ -79,6 +81,25 @@ interface BPMRootModuleWiringOptions extends Pick<ModuleMetadata, 'imports'> {
      * provider and the runtime twin reach the same place. When none is given, `customFields` of an engine-built snapshot is `{}`.
      */
     readonly initiatorCustomFieldsResolverProvider?: Provider<BPMInitiatorCustomFieldsResolver>;
+    /**
+     * Host-provided pre-decision guard, as a Nest provider for
+     * `BPM_INSTANCE_GUARD`. Runs on submit, resubmit and decide, inside the
+     * engine transaction.
+     *
+     * Runtime twin: {@link BPMRootRuntimeOptions.instanceGuard}. When both are
+     * given this provider wins. When neither is given the engine behaves as it
+     * did before the guard existed.
+     */
+    readonly instanceGuardProvider?: Provider<BPMInstanceGuard>;
+    /**
+     * Host-provided instance lifecycle event observer, as a Nest provider for
+     * `BPM_INSTANCE_EVENT_OBSERVER`.
+     *
+     * Runtime twin: {@link BPMRootRuntimeOptions.instanceEventObserver}. When both
+     * are given this provider wins. When neither is given, no outbox rows are
+     * written.
+     */
+    readonly instanceEventObserverProvider?: Provider<BPMInstanceEventObserver>;
     /**
      * Host-provided member resolver, as a Nest provider.
      *

package/src/lib/bpm/bpm-root.module.js

@@ -12,6 +12,7 @@ const delegation_module_1 = require("../delegation/delegation.module");
 const expression_function_module_1 = require("../expression-function/expression-function.module");
 const form_module_1 = require("../form/form.module");
 const form_data_source_1 = require("../form-data-source");
+const instance_event_module_1 = require("../instance-event/instance-event.module");
 const identity_module_1 = require("../identity/identity.module");
 const notification_module_1 = require("../notification/notification.module");
 const notification_options_module_1 = require("../notification/notification-options.module");
@@ -118,6 +119,7 @@ function createBPMFeatureModules(wiring) {
     const workflowEngineModule = workflow_engine_module_1.WorkflowEngineModule.forRoot({
         imports: wiring.imports,
         initiatorCustomFieldsResolverProvider: wiring.initiatorCustomFieldsResolverProvider,
+        instanceGuardProvider: wiring.instanceGuardProvider,
         serviceTaskDispatcherProvider: wiring.workflowServiceTaskDispatcherProvider,
     });
     return [
@@ -168,6 +170,10 @@ function createBPMFeatureModules(wiring) {
             imports: wiring.imports,
             registryProvider: wiring.workflowWebhookRegistryProvider,
         }),
+        instance_event_module_1.InstanceEventModule.forRoot({
+            imports: wiring.imports,
+            observerProvider: wiring.instanceEventObserverProvider,
+        }),
     ];
 }
 //# sourceMappingURL=bpm-root.module.js.map

package/src/lib/bpm/bpm-root.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"bpm-root.module.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/bpm/bpm-root.module.ts"],"names":[],"mappings":";;;;;AAAA,2CAOwB;AACxB,uEAAmE;AAEnE,iEAA4D;AAC5D,6EAG2C;AAG3C,iEAA6D;AAC7D,uEAAmE;AACnE,kGAA6F;AAE7F,qDAAiD;AACjD,0DAI6B;AAC7B,iEAA6D;AAE7D,6EAAyE;AACzE,6FAAwF;AACxF,yGAAmG;AACnG,yFAGqD;AAErD,6EAAyE;AACzE,oEAAgE;AAChE,iEAA6D;AAC7D,sFAAiF;AAGjF,yDAI4B;AA0L5B;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEI,IAAM,aAAa,qBAAnB,MAAM,aAAa;IACxB;;;OAGG;IACH,MAAM,CAAC,OAAO,CAAC,UAAgC,EAAE;QAC/C,IAAI,OAAO,CAAC,uBAAuB,EAAE,CAAC;YACpC,IAAA,gDAAwB,EAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,cAAc,GAAG,uBAAuB,CAAC;YAC7C,GAAG,OAAO;YACV,aAAa,EAAE,uCAAoB,CAAC,OAAO,CAAC,OAAO,CAAC;SACrD,CAAC,CAAC;QAEH,OAAO;YACL,OAAO,EAAE,CAAC,GAAG,cAAc,CAAC;YAC5B,OAAO,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,cAAc,CAAC;YACxD,MAAM,EAAE,eAAa;SACtB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,YAAY,CAAC,UAAqC,EAAE;QACzD,IAAI,OAAO,CAAC,uBAAuB,EAAE,CAAC;YACpC,IAAA,gDAAwB,EAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,cAAc,GAAG,uBAAuB,CAAC;YAC7C,GAAG,OAAO;YACV,aAAa,EAAE,uCAAoB,CAAC,YAAY,CAAC;gBAC/C,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,CAAC;SACH,CAAC,CAAC;QAEH,OAAO;YACL,OAAO,EAAE,CAAC,GAAG,cAAc,CAAC;YAC5B,OAAO,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,cAAc,CAAC;YACxD,MAAM,EAAE,eAAa;SACtB,CAAC;IACJ,CAAC;CACF,CAAA;AAtDY,sCAAa;wBAAb,aAAa;IADzB,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,aAAa,CAsDzB;AAeD;;;;;;;;;GASG;AACH,SAAS,uBAAuB,CAAC,MAAqB;IACpD,MAAM,MAAM,GAA8B,CAAC,mCAAgB,CAAC,CAAC;IAC7D,MAAM,UAAU,GAAG,CAAC,OAA8B,EAAyB,EAAE,CAC3E,OAAO,CAAC;IACV,4EAA4E;IAC5E,8DAA8D;IAC9D,MAAM,oBAAoB,GAAkB,6CAAoB,CAAC,OAAO,CAAC;QACvE,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,qCAAqC,EACnC,MAAM,CAAC,qCAAqC;QAC9C,6BAA6B,EAAE,MAAM,CAAC,qCAAqC;KAC5E,CAAC,CAAC;IAEH,OAAO;QACL,MAAM,CAAC,aAAa;QACpB,uDAAyB,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAC9D,8DAA4B,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QACjE,gCAAc,CAAC,OAAO,CAAC;YACrB,wBAAwB,EAAE,MAAM,CAAC,wBAAwB;YACzD,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC;QACF,+BAAa,CAAC,YAAY,CAAC;YACzB,MAAM;YACN,UAAU,EAAE,CAAC,OAA8B,EAAwB,EAAE,CAAC,CAAC;gBACrE,cAAc,EAAE,OAAO,CAAC,kBAAkB;aAC3C,CAAC;SACH,CAAC;QACF,gCAAc,CAAC,YAAY,CAAC;YAC1B,yBAAyB,EAAE,MAAM,CAAC,yBAAyB;YAC3D,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM;YACN,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;YACrD,UAAU;SACX,CAAC;QACF,wCAAkB;QAClB,oCAAgB,CAAC,YAAY,CAAC;YAC5B,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;YACnD,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM;YACN,eAAe,EAAE,MAAM,CAAC,yBAAyB;YACjD,UAAU;SACX,CAAC;QACF,qDAAwB,CAAC,OAAO,CAAC;YAC/B,iBAAiB,EAAE,MAAM,CAAC,2BAA2B;YACrD,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC;QACF,wBAAU;QACV,uCAAoB,CAAC,OAAO,CAAC;YAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,gBAAgB,EAAE,MAAM,CAAC,8BAA8B;YACvD,oBAAoB;SACiB,CAAC;QACxC,gCAAc;QACd,oCAAgB;QAChB,wCAAkB;QAClB,kCAAe,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QACpD,oBAAoB;QACpB,+CAAqB,CAAC,OAAO,CAAC;YAC5B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,gBAAgB,EAAE,MAAM,CAAC,+BAA+B;SAClB,CAAC;KAC1C,CAAC;AACJ,CAAC"}
+{"version":3,"file":"bpm-root.module.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/bpm/bpm-root.module.ts"],"names":[],"mappings":";;;;;AAAA,2CAOwB;AACxB,uEAAmE;AAEnE,iEAA4D;AAC5D,6EAG2C;AAG3C,iEAA6D;AAC7D,uEAAmE;AACnE,kGAA6F;AAE7F,qDAAiD;AACjD,0DAI6B;AAC7B,mFAGiD;AAEjD,iEAA6D;AAE7D,6EAAyE;AACzE,6FAAwF;AACxF,yGAAmG;AACnG,yFAGqD;AAErD,6EAAyE;AACzE,oEAAgE;AAChE,iEAA6D;AAC7D,sFAAiF;AAIjF,yDAI4B;AA+M5B;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEI,IAAM,aAAa,qBAAnB,MAAM,aAAa;IACxB;;;OAGG;IACH,MAAM,CAAC,OAAO,CAAC,UAAgC,EAAE;QAC/C,IAAI,OAAO,CAAC,uBAAuB,EAAE,CAAC;YACpC,IAAA,gDAAwB,EAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,cAAc,GAAG,uBAAuB,CAAC;YAC7C,GAAG,OAAO;YACV,aAAa,EAAE,uCAAoB,CAAC,OAAO,CAAC,OAAO,CAAC;SACrD,CAAC,CAAC;QAEH,OAAO;YACL,OAAO,EAAE,CAAC,GAAG,cAAc,CAAC;YAC5B,OAAO,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,cAAc,CAAC;YACxD,MAAM,EAAE,eAAa;SACtB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,YAAY,CAAC,UAAqC,EAAE;QACzD,IAAI,OAAO,CAAC,uBAAuB,EAAE,CAAC;YACpC,IAAA,gDAAwB,EAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,cAAc,GAAG,uBAAuB,CAAC;YAC7C,GAAG,OAAO;YACV,aAAa,EAAE,uCAAoB,CAAC,YAAY,CAAC;gBAC/C,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,CAAC;SACH,CAAC,CAAC;QAEH,OAAO;YACL,OAAO,EAAE,CAAC,GAAG,cAAc,CAAC;YAC5B,OAAO,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,cAAc,CAAC;YACxD,MAAM,EAAE,eAAa;SACtB,CAAC;IACJ,CAAC;CACF,CAAA;AAtDY,sCAAa;wBAAb,aAAa;IADzB,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,aAAa,CAsDzB;AAeD;;;;;;;;;GASG;AACH,SAAS,uBAAuB,CAAC,MAAqB;IACpD,MAAM,MAAM,GAA8B,CAAC,mCAAgB,CAAC,CAAC;IAC7D,MAAM,UAAU,GAAG,CAAC,OAA8B,EAAyB,EAAE,CAC3E,OAAO,CAAC;IACV,4EAA4E;IAC5E,8DAA8D;IAC9D,MAAM,oBAAoB,GAAkB,6CAAoB,CAAC,OAAO,CAAC;QACvE,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,qCAAqC,EACnC,MAAM,CAAC,qCAAqC;QAC9C,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;QACnD,6BAA6B,EAAE,MAAM,CAAC,qCAAqC;KAC5E,CAAC,CAAC;IAEH,OAAO;QACL,MAAM,CAAC,aAAa;QACpB,uDAAyB,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAC9D,8DAA4B,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QACjE,gCAAc,CAAC,OAAO,CAAC;YACrB,wBAAwB,EAAE,MAAM,CAAC,wBAAwB;YACzD,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC;QACF,+BAAa,CAAC,YAAY,CAAC;YACzB,MAAM;YACN,UAAU,EAAE,CAAC,OAA8B,EAAwB,EAAE,CAAC,CAAC;gBACrE,cAAc,EAAE,OAAO,CAAC,kBAAkB;aAC3C,CAAC;SACH,CAAC;QACF,gCAAc,CAAC,YAAY,CAAC;YAC1B,yBAAyB,EAAE,MAAM,CAAC,yBAAyB;YAC3D,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM;YACN,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;YACrD,UAAU;SACX,CAAC;QACF,wCAAkB;QAClB,oCAAgB,CAAC,YAAY,CAAC;YAC5B,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;YACnD,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM;YACN,eAAe,EAAE,MAAM,CAAC,yBAAyB;YACjD,UAAU;SACX,CAAC;QACF,qDAAwB,CAAC,OAAO,CAAC;YAC/B,iBAAiB,EAAE,MAAM,CAAC,2BAA2B;YACrD,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC;QACF,wBAAU;QACV,uCAAoB,CAAC,OAAO,CAAC;YAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,gBAAgB,EAAE,MAAM,CAAC,8BAA8B;YACvD,oBAAoB;SACiB,CAAC;QACxC,gCAAc;QACd,oCAAgB;QAChB,wCAAkB;QAClB,kCAAe,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QACpD,oBAAoB;QACpB,+CAAqB,CAAC,OAAO,CAAC;YAC5B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,gBAAgB,EAAE,MAAM,CAAC,+BAA+B;SAClB,CAAC;QACzC,2CAAmB,CAAC,OAAO,CAAC;YAC1B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,gBAAgB,EAAE,MAAM,CAAC,6BAA6B;SAClB,CAAC;KACxC,CAAC;AACJ,CAAC"}

package/src/lib/form/dto/form-definition.input.d.ts

@@ -4,6 +4,11 @@ export declare class CreateFormDefinitionInput {
     createdByMemberId: string | null;
     schemaJson: string | null;
     uiSchemaJson: string | null;
+    /**
+     * Host-owned flag (ADR 27 §6). Service-only: deliberately has no `@Field`,
+     * so GraphQL callers cannot set it. Absent creates the form with `false`.
+     */
+    hostManaged?: boolean;
 }
 export declare class UpdateFormDefinitionInput {
     id: string;

package/src/lib/form/dto/form-definition.input.js.map

@@ -1 +1 @@
-{"version":3,"file":"form-definition.input.js","sourceRoot":"","sources":["../../../../../../../libs/bpm-core/src/lib/form/dto/form-definition.input.ts"],"names":[],"mappings":";;;;AAAA,6CAAuD;AACvD,qDAA+D;AAGxD,IAAM,yBAAyB,GAA/B,MAAM,yBAAyB;CAwBrC,CAAA;AAxBY,8DAAyB;AAGpC;IAFC,IAAA,eAAK,GAAE;IACP,IAAA,0BAAQ,GAAE;;uDACG;AAKd;IAHC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;8DACiB;AAK5B;IAHC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;oEACuB;AAKlC;IAHC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;6DACgB;AAK3B;IAHC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;+DACkB;oCAvBlB,yBAAyB;IADrC,IAAA,mBAAS,GAAE;GACC,yBAAyB,CAwBrC;AAGM,IAAM,yBAAyB,GAA/B,MAAM,yBAAyB;CAcrC,CAAA;AAdY,8DAAyB;AAGpC;IAFC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,YAAE,CAAC;IACf,IAAA,wBAAM,GAAE;;qDACG;AAKZ;IAHC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;uDACU;AAKrB;IAHC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;8DACiB;oCAbjB,yBAAyB;IADrC,IAAA,mBAAS,GAAE;GACC,yBAAyB,CAcrC;AAGM,IAAM,8BAA8B,GAApC,MAAM,8BAA8B;CAY1C,CAAA;AAZY,wEAA8B;AAGzC;IAFC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,YAAE,CAAC;IACf,IAAA,wBAAM,GAAE;;iEACU;AAInB;IAFC,IAAA,eAAK,GAAE;IACP,IAAA,0BAAQ,GAAE;;kEACS;AAIpB;IAFC,IAAA,eAAK,GAAE;IACP,IAAA,0BAAQ,GAAE;;oEACW;yCAXX,8BAA8B;IAD1C,IAAA,mBAAS,GAAE;GACC,8BAA8B,CAY1C;AAGM,IAAM,iCAAiC,GAAvC,MAAM,iCAAiC;CAc7C,CAAA;AAdY,8EAAiC;AAG5C;IAFC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,YAAE,CAAC;IACf,IAAA,wBAAM,GAAE;;2EACiB;AAK1B;IAHC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;qEACgB;AAK3B;IAHC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;uEACkB;4CAblB,iCAAiC;IAD7C,IAAA,mBAAS,GAAE;GACC,iCAAiC,CAc7C;AAGM,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;CAS/B,CAAA;AATY,kDAAmB;AAG9B;IAFC,IAAA,eAAK,GAAE;IACP,IAAA,0BAAQ,GAAE;;uDACS;AAKpB;IAHC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;yDACkB;8BARlB,mBAAmB;IAD/B,IAAA,mBAAS,GAAE;GACC,mBAAmB,CAS/B"}
+{"version":3,"file":"form-definition.input.js","sourceRoot":"","sources":["../../../../../../../libs/bpm-core/src/lib/form/dto/form-definition.input.ts"],"names":[],"mappings":";;;;AAAA,6CAAuD;AACvD,qDAA+D;AAGxD,IAAM,yBAAyB,GAA/B,MAAM,yBAAyB;CA8BrC,CAAA;AA9BY,8DAAyB;AAGpC;IAFC,IAAA,eAAK,GAAE;IACP,IAAA,0BAAQ,GAAE;;uDACG;AAKd;IAHC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;8DACiB;AAK5B;IAHC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;oEACuB;AAKlC;IAHC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;6DACgB;AAK3B;IAHC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;+DACkB;oCAvBlB,yBAAyB;IADrC,IAAA,mBAAS,GAAE;GACC,yBAAyB,CA8BrC;AAGM,IAAM,yBAAyB,GAA/B,MAAM,yBAAyB;CAcrC,CAAA;AAdY,8DAAyB;AAGpC;IAFC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,YAAE,CAAC;IACf,IAAA,wBAAM,GAAE;;qDACG;AAKZ;IAHC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;uDACU;AAKrB;IAHC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;8DACiB;oCAbjB,yBAAyB;IADrC,IAAA,mBAAS,GAAE;GACC,yBAAyB,CAcrC;AAGM,IAAM,8BAA8B,GAApC,MAAM,8BAA8B;CAY1C,CAAA;AAZY,wEAA8B;AAGzC;IAFC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,YAAE,CAAC;IACf,IAAA,wBAAM,GAAE;;iEACU;AAInB;IAFC,IAAA,eAAK,GAAE;IACP,IAAA,0BAAQ,GAAE;;kEACS;AAIpB;IAFC,IAAA,eAAK,GAAE;IACP,IAAA,0BAAQ,GAAE;;oEACW;yCAXX,8BAA8B;IAD1C,IAAA,mBAAS,GAAE;GACC,8BAA8B,CAY1C;AAGM,IAAM,iCAAiC,GAAvC,MAAM,iCAAiC;CAc7C,CAAA;AAdY,8EAAiC;AAG5C;IAFC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,YAAE,CAAC;IACf,IAAA,wBAAM,GAAE;;2EACiB;AAK1B;IAHC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;qEACgB;AAK3B;IAHC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;uEACkB;4CAblB,iCAAiC;IAD7C,IAAA,mBAAS,GAAE;GACC,iCAAiC,CAc7C;AAGM,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;CAS/B,CAAA;AATY,kDAAmB;AAG9B;IAFC,IAAA,eAAK,GAAE;IACP,IAAA,0BAAQ,GAAE;;uDACS;AAKpB;IAHC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;yDACkB;8BARlB,mBAAmB;IAD/B,IAAA,mBAAS,GAAE;GACC,mBAAmB,CAS/B"}

package/src/lib/form/form-definition.entity.d.ts

@@ -6,6 +6,11 @@ export declare class FormDefinitionEntity {
     currentVersionNumber?: number | null;
     currentVersionCreatedAt?: Date | null;
     currentVersionPublishedAt?: Date | null;
+    /**
+     * The form is maintained by host code (ADR 27 §9). `formDefinitions` leaves
+     * it out unless `includeHostManaged` is passed. Not a lock.
+     */
+    hostManaged: boolean;
     deletedAt: Date | null;
     createdAt: Date;
     updatedAt: Date;

package/src/lib/form/form-definition.entity.js

@@ -39,6 +39,13 @@ tslib_1.__decorate([
     (0, graphql_1.Field)(() => Date, { nullable: true }),
     tslib_1.__metadata("design:type", Object)
 ], FormDefinitionEntity.prototype, "currentVersionPublishedAt", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)('boolean', { default: false, name: 'host_managed' }),
+    (0, graphql_1.Field)({
+        description: 'The form is maintained by host code. formDefinitions leaves it out unless includeHostManaged is true. Not a lock.',
+    }),
+    tslib_1.__metadata("design:type", Boolean)
+], FormDefinitionEntity.prototype, "hostManaged", void 0);
 tslib_1.__decorate([
     (0, typeorm_1.DeleteDateColumn)({ name: 'deleted_at', type: 'timestamptz' }),
     (0, graphql_1.Field)(() => Date, { nullable: true }),

package/src/lib/form/form-definition.entity.js.map

@@ -1 +1 @@
-{"version":3,"file":"form-definition.entity.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/form/form-definition.entity.ts"],"names":[],"mappings":";;;;AAAA,6CAA6D;AAC7D,qCAOiB;AAIV,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;CAyChC,CAAA;AAzCY,oDAAoB;AAG/B;IAFC,IAAA,gCAAsB,EAAC,MAAM,CAAC;IAC9B,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,YAAE,CAAC;;gDACJ;AAIZ;IAFC,IAAA,gBAAM,EAAC,MAAM,CAAC;IACd,IAAA,eAAK,GAAE;;kDACM;AAId;IAFC,IAAA,gBAAM,EAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAClC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;yDACZ;AAI5B;IAFC,IAAA,gBAAM,EAAC,MAAM,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC9D,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,YAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;8DACH;AAGjC;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,aAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;kEACA;AAGrC;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;qEACA;AAGtC;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;uEACE;AAIxC;IAFC,IAAA,0BAAgB,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IAC7D,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;uDACd;AAIxB;IAFC,IAAA,0BAAgB,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IAC7D,IAAA,eAAK,GAAE;sCACI,IAAI;uDAAC;AAIjB;IAFC,IAAA,0BAAgB,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IAC7D,IAAA,eAAK,GAAE;sCACI,IAAI;uDAAC;AAIjB;IAFC,IAAA,gBAAM,EAAC,MAAM,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAChE,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;+DACN;+BAxCvB,oBAAoB;IAFhC,IAAA,gBAAM,EAAC,kBAAkB,CAAC;IAC1B,IAAA,oBAAU,EAAC,gBAAgB,CAAC;GAChB,oBAAoB,CAyChC"}
+{"version":3,"file":"form-definition.entity.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/form/form-definition.entity.ts"],"names":[],"mappings":";;;;AAAA,6CAA6D;AAC7D,qCAOiB;AAIV,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;CAoDhC,CAAA;AApDY,oDAAoB;AAG/B;IAFC,IAAA,gCAAsB,EAAC,MAAM,CAAC;IAC9B,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,YAAE,CAAC;;gDACJ;AAIZ;IAFC,IAAA,gBAAM,EAAC,MAAM,CAAC;IACd,IAAA,eAAK,GAAE;;kDACM;AAId;IAFC,IAAA,gBAAM,EAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAClC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;yDACZ;AAI5B;IAFC,IAAA,gBAAM,EAAC,MAAM,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC9D,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,YAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;8DACH;AAGjC;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,aAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;kEACA;AAGrC;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;qEACA;AAGtC;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;uEACE;AAWxC;IALC,IAAA,gBAAM,EAAC,SAAS,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IAC3D,IAAA,eAAK,EAAC;QACL,WAAW,EACT,mHAAmH;KACtH,CAAC;;yDACoB;AAItB;IAFC,IAAA,0BAAgB,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IAC7D,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;uDACd;AAIxB;IAFC,IAAA,0BAAgB,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IAC7D,IAAA,eAAK,GAAE;sCACI,IAAI;uDAAC;AAIjB;IAFC,IAAA,0BAAgB,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IAC7D,IAAA,eAAK,GAAE;sCACI,IAAI;uDAAC;AAIjB;IAFC,IAAA,gBAAM,EAAC,MAAM,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAChE,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;+DACN;+BAnDvB,oBAAoB;IAFhC,IAAA,gBAAM,EAAC,kBAAkB,CAAC;IAC1B,IAAA,oBAAU,EAAC,gBAAgB,CAAC;GAChB,oBAAoB,CAoDhC"}

package/src/lib/form/form-schema.validator.js

@@ -400,7 +400,7 @@ function lintSelectField(field, type, path, scope) {
     return [
         ...sourceErrors,
         ...(hasDataSource
-            ? lintDynamicDefaultValue(field, path)
+            ? lintDynamicDefaultValue(field, type, path)
             : lintSelectDefaultValue(field, type, path)),
     ];
 }
@@ -555,10 +555,22 @@ function lintConstantValue(value, path) {
         ? []
         : [`${path} must be a primitive constant`];
 }
-function lintDynamicDefaultValue(field, path) {
-    return Object.prototype.hasOwnProperty.call(field, 'defaultValue')
-        ? [`${path}.defaultValue is not supported for dynamic data sources`]
-        : [];
+/**
+ * A dynamic data source may carry a default value only when its value cannot
+ * change per filler or per row. FIELD, ROW_FIELD and EXPRESSION bindings make
+ * the option set depend on other values, so a fixed default could go stale.
+ * CONSTANT bindings and bindings-free sources are fixed and may use a default.
+ */
+function lintDynamicDefaultValue(field, type, path) {
+    if (typeof field.defaultValue === 'undefined') {
+        return [];
+    }
+    const hasDependentBinding = readBindingSources(field).some((from) => from.kind !== 'CONSTANT');
+    return hasDependentBinding
+        ? [
+            `${path}.defaultValue is not allowed when the dynamic data source depends on other values (FIELD, ROW_FIELD or EXPRESSION binding)`,
+        ]
+        : lintSelectDefaultValue(field, type, path);
 }
 function lintBooleanField(field, path) {
     return lintOptionalDefaultValue(field.defaultValue, path, (value) => typeof value === 'boolean' || value === null);