@rytass/bpm-core-react 0.15.0 → 0.17.0

package/CHANGELOG.md

@@ -1,3 +1,89 @@
+## 0.17.0 (2026-10-15)
+
+### 🚀 Features
+
+- ⚠️  **workflow-engine:** end SLA-terminated instances as EXPIRED ([7dcca4e](https://github.com/Rytass/BPMCore/commit/7dcca4e))
+- **template:** allow lastDecision in edge conditions ([e8b4788](https://github.com/Rytass/BPMCore/commit/e8b4788))
+- **react:** add member task reassignment modal to admin users ([f12e9f8](https://github.com/Rytass/BPMCore/commit/f12e9f8))
+- **workflow-engine:** add administrator in-place task reassignment ([02ce920](https://github.com/Rytass/BPMCore/commit/02ce920))
+- **template-designer:** let the fallback mode pick a position ([257a361](https://github.com/Rytass/BPMCore/commit/257a361))
+- **views:** ask for a successor unit before retiring an org unit ([b79cd5c](https://github.com/Rytass/BPMCore/commit/b79cd5c))
+- ⚠️  **organization:** retire org units into a successor unit ([514e0b2](https://github.com/Rytass/BPMCore/commit/514e0b2))
+
+### 🩹 Fixes
+
+- **migrations:** check pg_trgm with the other required extensions ([30a1e58](https://github.com/Rytass/BPMCore/commit/30a1e58))
+- **template:** check CEL roots per call site on publish ([868d236](https://github.com/Rytass/BPMCore/commit/868d236))
+- **instance-detail:** show how a closed instance ended ([a110e08](https://github.com/Rytass/BPMCore/commit/a110e08))
+- ⚠️  **delegation:** order rules by priority, higher first ([96cca55](https://github.com/Rytass/BPMCore/commit/96cca55))
+- **react:** drop a late member task listing in the reassignment modal ([1a7724e](https://github.com/Rytass/BPMCore/commit/1a7724e))
+- **react:** keep reassigned task titles and fit the result table ([3b90530](https://github.com/Rytass/BPMCore/commit/3b90530))
+- **template-designer:** keep unknown approver fallbacks read-only ([5ea88fe](https://github.com/Rytass/BPMCore/commit/5ea88fe))
+
+### ⚠️  Breaking Changes
+
+- **workflow-engine:** end SLA-terminated instances as EXPIRED  ([7dcca4e](https://github.com/Rytass/BPMCore/commit/7dcca4e))
+  an instance ended by SLA `TERMINATE_INSTANCE` is now
+  `EXPIRED` instead of `CANCELLED`, and its activity log is
+  `INSTANCE_EXPIRED` with a null actor instead of `INSTANCE_CANCELLED` in
+  the initiator's name. Instances terminated before this change stay
+  CANCELLED. A host implementing `BPMWorkflowEngineService` itself must add
+  `expireApprovalInstance`.
+- **delegation:** order rules by priority, higher first  ([96cca55](https://github.com/Rytass/BPMCore/commit/96cca55))
+  when several active delegation rules of one principal
+  match a task, the rule with the highest priority now applies instead of
+  the oldest. No data migration is needed: priority had no effect before,
+  but principals with overlapping rules may now be delegated differently,
+  so review their priorities.
+- **organization:** retire org units into a successor unit  ([514e0b2](https://github.com/Rytass/BPMCore/commit/514e0b2))
+  deleteOrgUnit now also refuses a unit that has no open
+  memberships but still has an open ORG_UNIT-scoped manager rule; it used to
+  retire it and leave the rule silently dormant. Pass transferToOrgUnitId (or
+  end the rule first) to retire such a unit. The refusal message keeps its
+  leading "Org unit with memberships cannot be deleted" sentence.
+
+### ❤️ Thank You
+
+- Chia Yu Pai @fantasywind
+
+## 0.16.2 (2026-10-14)
+
+### 🚀 Features
+
+- **react:** support react-pdf 11 and pdfjs-dist 6 in the PDF preview ([ab7f3ca](https://github.com/Rytass/BPMCore/commit/ab7f3ca))
+
+### 🩹 Fixes
+
+- **views:** treat a blank member e-mail as missing ([d8504ed](https://github.com/Rytass/BPMCore/commit/d8504ed))
+- **views:** drop empty parentheses when a member has no e-mail ([2b02a60](https://github.com/Rytass/BPMCore/commit/2b02a60))
+
+### ❤️ Thank You
+
+- Chia Yu Pai @fantasywind
+- Kai-Chieh Yang
+
+## 0.16.0 (2026-10-13)
+
+### 🚀 Features
+
+- ⚠️  **attachment:** boot without attachment settings ([808bc65](https://github.com/Rytass/BPMCore/commit/808bc65))
+
+### ⚠️  Breaking Changes
+
+- **attachment:** boot without attachment settings  ([808bc65](https://github.com/Rytass/BPMCore/commit/808bc65))
+  BPMResolvedAttachmentOptions.publicBaseUrl is
+  string | null, DEFAULT_BPM_ATTACHMENT_OPTIONS no longer carries a
+  signedUrlSecret, and attachmentAllowInsecureSignedUrlSecret is
+  deprecated and ignored. A host running more than one API replica must
+  set a shared attachmentSignedUrlSecret, since a generated one only
+  verifies on the process that signed the URL.
+  Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
+
+### ❤️ Thank You
+
+- Chia Yu Pai @fantasywind
+- Claude Opus 5.5
+
 ## 0.15.0 (2026-10-13)
 
 ### ⚠️  Breaking Changes

package/README.md

@@ -17,13 +17,23 @@ network query.
 The controlled `FormBuilderView` loads only the host-registered DataSource
 Catalog. It filters sources by control capability, supports typed field and
 constant parameter bindings, preserves bindings when a field key is renamed,
-and asks for confirmation before source/mode changes or removing a field used
-by another dynamic field. The editor can send the complete schema to the
+and asks for confirmation before switching the selection mode, replacing an
+already-configured DataSource, or removing a field used by another dynamic
+field. Picking a source applies at once; switching away from a configured
+source drops its bindings. The editor can send the complete schema to the
 server-side lint contract before publishing.
 
 ## Status
 
-`0.4.0` (breaking) — drops the bundled navigation shell. BPM views no longer wrap themselves in an `<AppLayout>` / Mezzanine `<Navigation>`; the host owns the layout chrome and mounts BPM views inside its own sidebar / top bar. New host-facing widgets ship in the root barrel: `useBPMMember`, `useBPMLogout`, `<BPMNotificationBellButton />`. See `CHANGELOG.md` for the migration walkthrough, and `docs/integration-guide.md` for a host integration recipe.
+The current version is in `package.json` and `CHANGELOG.md` (the packages
+share one version number under `nx release`).
+
+Version 0.4.0 was a breaking release that dropped the bundled navigation shell:
+BPM views no longer wrap themselves in an `<AppLayout>` / Mezzanine `<Navigation>`,
+and the host owns the layout chrome. The 0.4.0 entry in `CHANGELOG.md` has the
+migration walkthrough. Host-facing widgets in the root barrel are `useBPMMember`,
+`useBPMLogout`, and `<BPMNotificationBellButton />`. For a host integration
+recipe, see `docs/integration-guide.md`.
 
 ## Install
 
@@ -31,11 +41,35 @@ server-side lint contract before publishing.
 pnpm add @rytass/bpm-core-react @rytass/bpm-core-client @rytass/bpm-core-shared @mezzanine-ui/react @mezzanine-ui/icons
 ```
 
-Peer requirements: React 18+, Mezzanine UI 1.1+. Next.js is required only when consuming the `pages/*` subpath; framework-agnostic consumers can use `views/*` directly with their own router adapter.
+Required peers: `react` / `react-dom` 18+, `@mezzanine-ui/react`, `@mezzanine-ui/core`
+and `@mezzanine-ui/icons` `>=1.0.0` (this workspace develops against Mezzanine
+1.5.1, pinned in the root `package.json`), plus `@rytass/bpm-core-client` and
+`@rytass/bpm-core-shared` at the same version. Every other peer is declared
+optional in `package.json` → `peerDependenciesMeta` and is needed only by the
+feature that imports it:
+
+- `next` (>=15) — the `pages/*` and `next/*` subpaths; framework-agnostic
+  consumers can use `views/*` directly with their own router adapter.
+- `@xyflow/react`, `dagre` — the flow designer and flow diagrams.
+- `@hello-pangea/dnd` — drag-and-drop in the form builder.
+- `@uiw/react-codemirror`, `@codemirror/view`, `@codemirror/lang-json` — JSON editors.
+- `react-pdf` (>=10), `pdfjs-dist` (`^5.4.296 || ^6.3.289`) — PDF preview.
+- `ai` (>=6), `@ai-sdk/react`, `@ai-sdk/openai` — the designer AI assistant.
+
+`package.json` is the authoritative list.
+
+### Next.js + pnpm setup (conditional)
 
-### Next.js + pnpm setup
+`transpilePackages` is **not required by default**. The published packages ship
+compiled `dist/` output with `exports` maps. This repository's `apps/client`
+does not set `transpilePackages` (`apps/client/next.config.js`) and imports the
+libraries through tsconfig path aliases to their source.
 
-If your host uses Next.js (15+) with pnpm strict mode, add the package to `transpilePackages` in `next.config.js`. Without this, Next's Turbopack cannot resolve transitive peer-dep imports such as `@rytass/bpm-core-client/workflow` from inside pnpm-isolated `node_modules/.pnpm/...` paths.
+Add the setting only if your build reports an unresolved transitive import
+under pnpm strict mode, for example `@rytass/bpm-core-client/workflow` imported
+from inside `node_modules/.pnpm/...`. This README has **not** reproduced that
+failure against the published packages; treat the snippet below as the workaround
+to try in that case, not as a requirement.
 
 ```js
 /** @type {import('next').NextConfig} */
@@ -54,6 +88,20 @@ module.exports = {
 };
 ```
 
+### Designer feature flags (Next.js host env)
+
+The designer page shim (`pages/templates/designer`) reads these server-side
+environment variables. Set them in the host's `.env.local` or deployment config.
+
+- `BPM_AI_ASSISTANT_ENABLED=true`: shows the designer AI assistant. It is hidden
+  by default. It also needs `OPENAI_API_KEY` (server-only); without the key the
+  toggle shows as a disabled placeholder.
+- `BPM_TEMPLATE_DRY_RUN_ENABLED=false`: hides the 試跑流程 (dry-run) button. The
+  button is shown by default; only the exact value `'false'` hides it.
+
+For direct control, `TemplateDesignerView` accepts `showAiAssistant`,
+`aiAssistantAvailable`, and `showDryRun` props.
+
 ## Usage
 
 ### Host integration shape

package/dist/chunks/{FormBuilderView-CLg-JYmu.js → FormBuilderView-BYL42M0d.js}

@@ -1,6 +1,6 @@
 "use client";
 import { t as e } from "./bpm-form-field-Cao0rMol.js";
-import { t } from "./FormRendererView-DU9LLrOF.js";
+import { t } from "./FormRendererView-cZGOOjU5.js";
 import { useEffect as n, useMemo as r, useState as i } from "react";
 import { Accordion as a, Badge as o, BaseCard as s, Button as c, DatePicker as l, DateTimePicker as u, Icon as d, Input as f, Modal as ee, Section as te, SectionGroup as ne, Select as p, Tab as re, TabItem as ie, Table as ae, Tag as oe, Textarea as se, Toggle as m, Typography as h } from "@mezzanine-ui/react";
 import { Fragment as g, jsx as _, jsxs as v } from "react/jsx-runtime";
@@ -444,15 +444,11 @@ function mn({ onChange: le, value: y }) {
 	}
 	function Gn(e) {
 		let t = b.fields.flatMap((t) => k(t) ? t.columns.flatMap((n) => O(n) && Ve(n).includes(e) ? [`${t.fieldKey}.${n.fieldKey}`] : []) : O(t) && Ve(t).includes(e) ? [t.fieldKey] : []);
-		if (t.length > 0) {
-			W({
-				affectedFieldKeys: t,
-				fieldKey: e,
-				kind: "remove-field"
-			});
-			return;
-		}
-		Kn(e);
+		t.length > 0 ? W({
+			affectedFieldKeys: t,
+			fieldKey: e,
+			kind: "remove-field"
+		}) : Kn(e);
 	}
 	function Kn(e) {
 		let t = b.fields.filter((t) => t.fieldKey !== e);
@@ -588,25 +584,13 @@ function mn({ onChange: le, value: y }) {
 		U && (nr(U), W(null));
 	}
 	function nr(e) {
-		if (e.kind === "remove-field") {
-			Kn(e.fieldKey);
-			return;
-		}
-		if (e.kind === "remove-column") {
-			Xn(e.fieldKey, e.columnIndex);
-			return;
-		}
-		if (e.kind === "replace-column") {
-			Y(e.fieldKey, (t) => ({
-				...t,
-				columns: t.columns.map((t) => t.fieldKey === e.columnKey ? e.nextColumn : t)
-			})), G(e.columnIndex);
-			return;
-		}
-		x({
+		e.kind === "remove-field" ? Kn(e.fieldKey) : e.kind === "remove-column" ? Xn(e.fieldKey, e.columnIndex) : e.kind === "replace-column" ? (Y(e.fieldKey, (t) => ({
+			...t,
+			columns: t.columns.map((t) => t.fieldKey === e.columnKey ? e.nextColumn : t)
+		})), G(e.columnIndex)) : (x({
 			...b,
 			fields: b.fields.map((t) => t.fieldKey === e.fieldKey ? e.nextField : t)
-		}), M(null), H(null);
+		}), M(null), H(null));
 	}
 	async function rr() {
 		Vn(!0);
@@ -1075,11 +1059,7 @@ function mn({ onChange: le, value: y }) {
 		let r = e.columns[t], i = P.find((e) => e.id === n)?.id;
 		if (!r || !i || r.type === i) return;
 		let a = wn(r, i), o = Cn(r);
-		if (o.length === 0) {
-			X(e, t, a), G(t);
-			return;
-		}
-		W({
+		o.length === 0 ? (X(e, t, a), G(t)) : W({
 			columnIndex: t,
 			columnKey: r.fieldKey,
 			fieldKey: e.fieldKey,
@@ -2000,4 +1980,4 @@ function Pn(e, t, n) {
 //#endregion
 export { mn as t };
 
-//# sourceMappingURL=FormBuilderView-CLg-JYmu.js.map
+//# sourceMappingURL=FormBuilderView-BYL42M0d.js.map