@rytass/bpm-core-react 0.17.0 → 0.17.1

package/dist/index.cjs

@@ -1,2 +1,2 @@
-"use client";Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});require('./index.css');const e=require("./chunks/router-adapter--gYs13E8.cjs"),t=require("./chunks/auth-provider-4BeCw7cI.cjs"),n=require("./chunks/format-date-time-D-cx5M8z.cjs"),r=require("./chunks/providers-DHtDZFNA.cjs"),i=require("./chunks/routes-config-C1j_vFKo.cjs"),a=require("./chunks/bpm-form-field-Bc6k4ZEO.cjs"),o=require("./chunks/use-bpm-member-DpNAQtNC.cjs"),s=require("./chunks/admin-pickers-qe3j--gX.cjs"),c=require("./chunks/approval-instance-list-page-ax0pm8bt.cjs"),l=require("./chunks/dashboard-page-BWQBSGDq.cjs");let u=require("@mezzanine-ui/react"),d=require("react/jsx-runtime"),f=require("@mezzanine-ui/icons");function p(){let{logout:e}=t.n();return e}var m={root:`bpm_root_jl5S-`,badge:`bpm_badge_SIKJk`};function h({label:e=`通知中心`}={}){let{open:t}=r.o(),{unreadCount:n}=r.i(),i=n>0?`${e}，${n} 則未讀`:e;return(0,d.jsxs)(`span`,{className:m.root,children:[(0,d.jsx)(u.NavigationIconButton,{"aria-label":i,icon:f.NotificationUnreadIcon,onClick:()=>{t()},title:e,type:`button`}),n>0?(0,d.jsx)(`span`,{className:m.badge,children:n>99?`99+`:n}):null]})}exports.ApprovalInstanceListPage=c.t,exports.AuthProvider=t.t,exports.BPMFormField=a.t,exports.BPMNotificationBellButton=h,exports.BPMRoutesProvider=i.t,exports.DashboardPage=l.t,exports.MemberPicker=s.t,exports.NotificationDrawer=r.n,exports.NotificationDrawerProvider=r.a,exports.NotificationUnreadProvider=r.r,exports.OrgUnitPicker=s.n,exports.PositionPicker=s.r,exports.Providers=r.t,exports.RouterAdapterProvider=e.t,exports.createDefaultBPMRoutes=i.n,exports.defaultBrowserSearchParams=e.n,exports.formatDateTime=n.t,exports.isBPMAdminMember=o.t,exports.readMemberOption=s.i,exports.readOrgUnitOption=s.a,exports.readPositionOption=s.o,exports.useAuth=t.n,exports.useBPMLogout=p,exports.useBPMMember=o.n,exports.useBPMRoutes=i.r,exports.useNotificationDrawer=r.o,exports.useNotificationUnread=r.i,exports.useRouterAdapter=e.r;
+"use client";Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});require('./index.css');const e=require("./chunks/router-adapter--gYs13E8.cjs"),t=require("./chunks/auth-provider-4BeCw7cI.cjs"),n=require("./chunks/format-date-time-D-cx5M8z.cjs"),r=require("./chunks/providers-DHtDZFNA.cjs"),i=require("./chunks/routes-config-C1j_vFKo.cjs"),a=require("./chunks/bpm-form-field-Bc6k4ZEO.cjs"),o=require("./chunks/use-bpm-member-DpNAQtNC.cjs"),s=require("./chunks/admin-pickers-BRHk3qKq.cjs"),c=require("./chunks/approval-instance-list-page-ax0pm8bt.cjs"),l=require("./chunks/dashboard-page-BWQBSGDq.cjs");let u=require("@mezzanine-ui/react"),d=require("react/jsx-runtime"),f=require("@mezzanine-ui/icons");function p(){let{logout:e}=t.n();return e}var m={root:`bpm_root_jl5S-`,badge:`bpm_badge_SIKJk`};function h({label:e=`通知中心`}={}){let{open:t}=r.o(),{unreadCount:n}=r.i(),i=n>0?`${e}，${n} 則未讀`:e;return(0,d.jsxs)(`span`,{className:m.root,children:[(0,d.jsx)(u.NavigationIconButton,{"aria-label":i,icon:f.NotificationUnreadIcon,onClick:()=>{t()},title:e,type:`button`}),n>0?(0,d.jsx)(`span`,{className:m.badge,children:n>99?`99+`:n}):null]})}exports.ApprovalInstanceListPage=c.t,exports.AuthProvider=t.t,exports.BPMFormField=a.t,exports.BPMNotificationBellButton=h,exports.BPMRoutesProvider=i.t,exports.DashboardPage=l.t,exports.MemberPicker=s.t,exports.NotificationDrawer=r.n,exports.NotificationDrawerProvider=r.a,exports.NotificationUnreadProvider=r.r,exports.OrgUnitPicker=s.n,exports.PositionPicker=s.r,exports.Providers=r.t,exports.RouterAdapterProvider=e.t,exports.createDefaultBPMRoutes=i.n,exports.defaultBrowserSearchParams=e.n,exports.formatDateTime=n.t,exports.isBPMAdminMember=o.t,exports.readMemberOption=s.i,exports.readOrgUnitOption=s.a,exports.readPositionOption=s.o,exports.useAuth=t.n,exports.useBPMLogout=p,exports.useBPMMember=o.n,exports.useBPMRoutes=i.r,exports.useNotificationDrawer=r.o,exports.useNotificationUnread=r.i,exports.useRouterAdapter=e.r;
 //# sourceMappingURL=index.cjs.map

package/dist/index.d.cts

@@ -0,0 +1,15 @@
+export * from './lib/auth-provider.cjs';
+export * from './lib/format-date-time.cjs';
+export * from './lib/notification-drawer-provider.cjs';
+export * from './lib/notification-unread-provider.cjs';
+export * from './lib/providers.cjs';
+export * from './lib/router-adapter.cjs';
+export * from './lib/routes-config.cjs';
+export * from './lib/use-bpm-logout.cjs';
+export * from './lib/use-bpm-member.cjs';
+export * from './components/admin-pickers.cjs';
+export * from './components/approval-instance-list-page.cjs';
+export * from './components/bpm-form-field.cjs';
+export * from './components/bpm-notification-bell-button.cjs';
+export * from './components/dashboard-page.cjs';
+export * from './components/notification-drawer.cjs';

package/dist/index.d.ts

@@ -1,15 +1,15 @@
-export * from './lib/auth-provider';
-export * from './lib/format-date-time';
-export * from './lib/notification-drawer-provider';
-export * from './lib/notification-unread-provider';
-export * from './lib/providers';
-export * from './lib/router-adapter';
-export * from './lib/routes-config';
-export * from './lib/use-bpm-logout';
-export * from './lib/use-bpm-member';
-export * from './components/admin-pickers';
-export * from './components/approval-instance-list-page';
-export * from './components/bpm-form-field';
-export * from './components/bpm-notification-bell-button';
-export * from './components/dashboard-page';
-export * from './components/notification-drawer';
+export * from './lib/auth-provider.js';
+export * from './lib/format-date-time.js';
+export * from './lib/notification-drawer-provider.js';
+export * from './lib/notification-unread-provider.js';
+export * from './lib/providers.js';
+export * from './lib/router-adapter.js';
+export * from './lib/routes-config.js';
+export * from './lib/use-bpm-logout.js';
+export * from './lib/use-bpm-member.js';
+export * from './components/admin-pickers.js';
+export * from './components/approval-instance-list-page.js';
+export * from './components/bpm-form-field.js';
+export * from './components/bpm-notification-bell-button.js';
+export * from './components/dashboard-page.js';
+export * from './components/notification-drawer.js';

package/dist/index.js

@@ -6,7 +6,7 @@ import { a as o, i as s, n as c, o as l, r as u, t as d } from "./chunks/provide
 import { n as f, r as p, t as m } from "./chunks/routes-config-yZbESPlw.js";
 import { t as h } from "./chunks/bpm-form-field-Cao0rMol.js";
 import { n as g, t as _ } from "./chunks/use-bpm-member-D57LKe_u.js";
-import { a as v, i as y, n as b, o as x, r as S, t as C } from "./chunks/admin-pickers-DxhzECkD.js";
+import { a as v, i as y, n as b, o as x, r as S, t as C } from "./chunks/admin-pickers-Djq3h-UR.js";
 import { t as w } from "./chunks/approval-instance-list-page-CPXMP3PL.js";
 import { t as T } from "./chunks/dashboard-page-DdBvV6YI.js";
 import { NavigationIconButton as E } from "@mezzanine-ui/react";

package/dist/lib/auth-provider.d.cts

@@ -0,0 +1,37 @@
+import { ReactElement, ReactNode } from 'react';
+import { ApiMember } from '@rytass/bpm-core-client';
+interface AuthContextValue {
+    readonly loading: boolean;
+    readonly member: ApiMember | null;
+    readonly login: (input: {
+        readonly identifier: string;
+        readonly password: string;
+    }) => Promise<ApiMember>;
+    readonly logout: () => Promise<void>;
+    readonly refresh: () => Promise<ApiMember | null>;
+}
+export interface AuthProviderProps {
+    readonly children: ReactNode;
+    /**
+     * Paths that should not redirect to `/login` when there is no session.
+     * Defaults to `['/login']`. Override when your host runs the login UI
+     * under a different path.
+     */
+    readonly publicPaths?: readonly string[];
+    /**
+     * Where to send unauthenticated users. Defaults to `'/login'`.
+     */
+    readonly loginPath?: string;
+}
+/**
+ * BPM auth context provider. Reads / writes the host BPM API session via
+ * `@rytass/bpm-core-client` (`loginApi` / `logoutApi` / `readApiCurrentMember`)
+ * and uses the host-supplied {@link useRouterAdapter} to redirect
+ * unauthenticated users.
+ */
+export declare function AuthProvider({ children, publicPaths, loginPath, }: AuthProviderProps): ReactElement;
+/**
+ * Access the BPM auth context. Throws when used outside `<AuthProvider>`.
+ */
+export declare function useAuth(): AuthContextValue;
+export {};

package/dist/lib/format-date-time.d.cts

@@ -0,0 +1,5 @@
+/**
+ * Default BPM datetime formatter: `YYYY-MM-DD HH:mm:ss`. Returns `'-'` for
+ * `null` / `undefined` so list cells render a consistent placeholder.
+ */
+export declare function formatDateTime(value: string | null | undefined): string;

package/dist/lib/format-member-label.d.cts

@@ -0,0 +1,12 @@
+/**
+ * How the e-mail is attached to the name: `ascii` is `name (email)`,
+ * `fullwidth` is `name（email）` and `dot` is `name · email`. Each call site
+ * keeps the separator it always had.
+ */
+export type MemberLabelStyle = 'ascii' | 'dot' | 'fullwidth';
+/**
+ * `name` followed by the e-mail in the given style. A host may resolve a member
+ * with `email: ''` (or a blank string), and then the label is just the name —
+ * never `name ()` or `name · `.
+ */
+export declare function formatMemberLabel(name: string, email: string | null | undefined, style?: MemberLabelStyle): string;

package/dist/lib/member-profile-resolution.d.cts

@@ -0,0 +1,48 @@
+import { MemberProfileRecord } from '@rytass/bpm-core-client/template';
+/** Most ids asked for on their own after a failed batch, per round. */
+export declare const MAX_PER_ID_REQUESTS = 20;
+/** Most per-id requests in flight at once. */
+export declare const PER_ID_CONCURRENCY = 4;
+export type MemberProfileResolution = Readonly<{
+    /** Ids whose lookup failed even when asked for on their own. */
+    failedIds: readonly string[];
+    profiles: readonly MemberProfileRecord[];
+    /**
+     * Ids left unasked because a failed batch held more than the per-id budget.
+     * They were not tried, so a later round may ask for them again.
+     */
+    skippedIds: readonly string[];
+}>;
+export type MemberProfileResolutionLimits = Readonly<{
+    concurrency?: number;
+    maxPerIdRequests?: number;
+}>;
+/**
+ * Looks up member profiles in one batch, and degrades per id when the batch
+ * request fails.
+ *
+ * The host fails a whole lookup when it contains an id it cannot handle (a
+ * foreign id stored in a template, say). Treating that as "nobody resolved"
+ * labels every approver of the template 「未知會員」 for the sake of one bad
+ * id, so a failed batch is retried one id at a time and only the ids that fail
+ * on their own are reported back in `failedIds`.
+ *
+ * The retry is bounded: at most `maxPerIdRequests` ids are asked for on their
+ * own (the rest come back in `skippedIds` without a request), and at most
+ * `concurrency` of those requests run at once, so one bad id in a large
+ * template cannot turn into a burst of requests.
+ *
+ * A single-id batch is not retried: it already is the per-id request.
+ */
+export declare function resolveMemberProfilesPerIdOnFailure(memberIds: readonly string[], resolveMembers: (memberIds: readonly string[]) => Promise<readonly MemberProfileRecord[]>, limits?: MemberProfileResolutionLimits): Promise<MemberProfileResolution>;
+/**
+ * The ids still worth asking the directory for: those that already failed on
+ * their own in this session are left out, so they stay 「未知會員」 instead of
+ * being re-requested every time the option list changes.
+ *
+ * A failed id stays 「未知會員」 for the rest of the session, even when the
+ * failure was transient (a network blip, say), unless a later member search
+ * returns it and replaces the placeholder. Ids skipped over the per-id cap
+ * were never asked and must not be added to `failedMemberIds`.
+ */
+export declare function excludeFailedMemberIds(memberIds: readonly string[], failedMemberIds: ReadonlySet<string>): readonly string[];

package/dist/lib/notification-drawer-provider.d.cts

@@ -0,0 +1,27 @@
+import { ReactElement, ReactNode } from 'react';
+interface NotificationDrawerContextValue {
+    readonly close: () => void;
+    readonly isOpen: boolean;
+    readonly open: () => void;
+    readonly toggle: () => void;
+}
+interface NotificationDrawerProviderProps {
+    readonly children: ReactNode;
+}
+/**
+ * Controls the open/closed state of the BPM notification drawer. Wraps
+ * children with a context that `<NotificationDrawer />` reads to mount /
+ * hide itself, and that the host navigation reads (via
+ * `<BPMNotificationBellButton />` or `useNotificationDrawer().open`) to
+ * open the drawer when the bell icon is clicked.
+ *
+ * When used outside this provider, the returned hook is a safe no-op so
+ * components don't crash in test or storybook environments.
+ */
+export declare function NotificationDrawerProvider({ children, }: NotificationDrawerProviderProps): ReactElement;
+/**
+ * Read the BPM notification drawer's open state and control helpers.
+ * Returns a no-op stub when used outside `<NotificationDrawerProvider>`.
+ */
+export declare function useNotificationDrawer(): NotificationDrawerContextValue;
+export {};

package/dist/lib/notification-unread-provider.d.cts

@@ -0,0 +1,25 @@
+import { ReactElement, ReactNode } from 'react';
+interface NotificationUnreadContextValue {
+    readonly refreshUnreadCount: () => Promise<number>;
+    readonly unreadCount: number;
+}
+interface NotificationUnreadProviderProps {
+    readonly children: ReactNode;
+}
+/**
+ * Polls BPM for the current member's unread notification count via
+ * `readUnreadNotificationCount` and exposes it through context for the
+ * host navigation (`<BPMNotificationBellButton />` badge or any custom
+ * trigger using `useNotificationUnread().unreadCount`) and the BPM
+ * `<NotificationDrawer />` (header count). Refresh is triggered on
+ * mount and whenever the auth member id changes; consumers can call
+ * `refreshUnreadCount()` after acknowledging a notification.
+ */
+export declare function NotificationUnreadProvider({ children, }: NotificationUnreadProviderProps): ReactElement;
+/**
+ * Read the current unread-notification count and a manual refresh helper.
+ * Returns a zero/no-op stub when used outside
+ * `<NotificationUnreadProvider>`.
+ */
+export declare function useNotificationUnread(): NotificationUnreadContextValue;
+export {};

package/dist/lib/org-tree-draft.d.cts

@@ -0,0 +1,27 @@
+import { OrgUnitRecord } from '@rytass/bpm-core-client/organization';
+export type OrgUnitParentDraftMap = ReadonlyMap<string, string | null>;
+export type OrgUnitHierarchyDraftChange = Readonly<{
+    orgUnitId: string;
+    parentId: string | null;
+    previousParentId: string | null;
+}>;
+export type OrgUnitParentAssignmentResult = Readonly<{
+    message: string;
+    parentDraft: OrgUnitParentDraftMap;
+    status: 'INVALID' | 'UNCHANGED' | 'UPDATED';
+}>;
+export declare function createOrgUnitParentDraftMap(orgUnits: readonly OrgUnitRecord[]): OrgUnitParentDraftMap;
+export declare function assignOrgUnitDraftParent({ orgUnitId, parentDraft, parentId, }: {
+    readonly orgUnitId: string;
+    readonly parentDraft: OrgUnitParentDraftMap;
+    readonly parentId: string | null;
+}): OrgUnitParentAssignmentResult;
+export declare function readOrgUnitHierarchyDraftChanges({ orgUnits, parentDraft, }: {
+    readonly orgUnits: readonly OrgUnitRecord[];
+    readonly parentDraft: OrgUnitParentDraftMap;
+}): readonly OrgUnitHierarchyDraftChange[];
+export declare function readOrgUnitParentValidationMessage({ orgUnitId, parentDraft, parentId, }: {
+    readonly orgUnitId: string;
+    readonly parentDraft: OrgUnitParentDraftMap;
+    readonly parentId: string | null;
+}): string | null;

package/dist/lib/providers.d.cts

@@ -0,0 +1,31 @@
+import { ReactElement, ReactNode } from 'react';
+import { CalendarLocale } from '@mezzanine-ui/react/moment';
+interface ProvidersProps {
+    readonly children: ReactNode;
+    /** Override Mezzanine calendar locale. Defaults to `CalendarLocale.ZH_TW`. */
+    readonly locale?: CalendarLocale;
+    /**
+     * Public paths that should not trigger redirect to `/login` when there
+     * is no session. Forwarded to `<AuthProvider>`. Defaults to `['/login']`.
+     */
+    readonly publicPaths?: readonly string[];
+    /** Where to send unauthenticated users. Defaults to `'/login'`. */
+    readonly loginPath?: string;
+}
+/**
+ * One-stop BPM admin provider stack. Wires:
+ *
+ * - Mezzanine UI calendar locale (moment-based, `ZH_TW` by default)
+ * - `<AuthProvider>` (BPM session via REST `/auth/*`)
+ * - `<NotificationUnreadProvider>` (polls unread count)
+ * - `<NotificationDrawerProvider>` (controls drawer open/close state)
+ * - `<NotificationDrawer />` mounted at the root so the host navigation
+ *   bell (`<BPMNotificationBellButton />` or any custom trigger calling
+ *   `useNotificationDrawer().open`) can open it.
+ *
+ * Consumer hosts wrap this **inside** a `<RouterAdapterProvider>` (provided
+ * by the `pages/*` subpath shims when consuming via Next.js, or wired by
+ * hand for other frameworks).
+ */
+export declare function Providers({ children, locale, publicPaths, loginPath, }: ProvidersProps): ReactElement;
+export {};

package/dist/lib/router-adapter.d.cts

@@ -0,0 +1,47 @@
+import { ReactElement, ReactNode } from 'react';
+/**
+ * Framework-agnostic router contract every BPM view consumes.
+ *
+ * Next.js App Router consumers wire it from `useRouter()` / `usePathname()`,
+ * but the contract is intentionally generic so SPA / Remix / Tanstack Router
+ * hosts can plug in the same `<RouterAdapterProvider>` with their own
+ * navigation primitives.
+ */
+export interface RouterAdapter {
+    /** Current pathname (e.g. "/inbox"). `null` during SSR before hydration. */
+    readonly pathname: string | null;
+    /** Navigate to `href` (push onto history). */
+    push(href: string): void;
+    /** Navigate to `href` and replace the current history entry. */
+    replace(href: string): void;
+    /** Optional: go back. Falls back to `history.back()` when omitted. */
+    back?(): void;
+    /**
+     * Optional search params accessor. Returned `URLSearchParams` should be
+     * read-only — mutating it does not navigate. Default implementation reads
+     * `window.location.search` on the client.
+     */
+    searchParams?(): URLSearchParams;
+}
+export interface RouterAdapterProviderProps {
+    readonly value: RouterAdapter;
+    readonly children: ReactNode;
+}
+/**
+ * Wraps the BPM React tree so `useRouterAdapter()` resolves to the host's
+ * navigation primitives. Consumers typically put this once at the very root
+ * of their layout (or inside a `'use client'` shim that reads
+ * `useRouter()` + `usePathname()` from `next/navigation`).
+ */
+export declare function RouterAdapterProvider({ value, children, }: RouterAdapterProviderProps): ReactElement;
+/**
+ * Reads the host-provided {@link RouterAdapter}. Throws when used outside a
+ * `<RouterAdapterProvider>` to surface wiring mistakes early.
+ */
+export declare function useRouterAdapter(): RouterAdapter;
+/**
+ * Pure default search-params reader for the browser. Server-side returns an
+ * empty `URLSearchParams`. Used internally when a {@link RouterAdapter}
+ * does not override `searchParams()`.
+ */
+export declare function defaultBrowserSearchParams(): URLSearchParams;

package/dist/lib/routes-config.d.cts

@@ -0,0 +1,117 @@
+import { ReactElement, ReactNode } from 'react';
+/**
+ * Framework-agnostic path mapping every BPM view uses for internal
+ * cross-navigation. When a host embeds BPM under a non-root prefix
+ * (e.g. `/workspace/bpm/*`) it provides its own implementation through
+ * `<BPMRoutesProvider value={...}>`; otherwise the default factory
+ * preserves the historical `/instances/:id`, `/templates`, etc. paths.
+ *
+ * Function-shape (instead of string templates) means:
+ * - Optional and multi-param routes can branch on argument presence
+ *   (`caseNew(templateId?)`).
+ * - Query-string composition stays inside the host's resolver, not the
+ *   view.
+ * - TypeScript flags missing arguments at compile time.
+ *
+ * Mirror sibling: {@link RouterAdapter} owns *navigation primitives*
+ * (`push`, `replace`, `pathname`); `BPMRoutes` owns *path strings*. The
+ * two compose: views call `router.push(routes.caseDetail(id))`.
+ */
+export interface BPMRoutes {
+    /** Workflow dashboard landing. Used by sidebar + dashboard tiles. */
+    dashboard(): string;
+    /** Inbox (待簽) — pending tasks assigned to the current member. */
+    inbox(): string;
+    /** Sent (我發起的) — instances the current member initiated or submitted on someone's behalf. */
+    sent(): string;
+    /** CC (抄送給我) — instances the current member is copied on. */
+    cc(): string;
+    /** Cross-view search. */
+    search(): string;
+    /** Personal delegation rules. */
+    delegations(): string;
+    /**
+     * Reserved for hosts that want a dedicated `/notifications` page —
+     * BPM's built-in views do **not** navigate here by default (the
+     * notification drawer mounted by `<BPMNextProviders>` is the primary
+     * unread-notification UX). The `createDefaultBPMRoutes()` factory
+     * returns `'/notifications'` so consumers can mount their own page
+     * at that path if desired; no BPM-shipped `pages/notifications`
+     * shim exists.
+     */
+    notifications(): string;
+    /**
+     * Detail page for one approval instance.
+     *
+     * @example default → `/instances/abc123`
+     */
+    caseDetail(instanceId: string): string;
+    /**
+     * Launch a new approval instance. When `templateId` is passed, the
+     * launch form is pre-populated for that template — by default this is
+     * appended as a `?templateId=` query string so the path itself stays
+     * stable for routing.
+     *
+     * @example default `caseNew()` → `/instances/new`
+     * @example default `caseNew('tpl-1')` → `/instances/new?templateId=tpl-1`
+     */
+    caseNew(templateId?: string): string;
+    /** Template index. */
+    templates(): string;
+    /**
+     * Unified "form + flow" creation wizard. Designs a form and an approval
+     * flow together, then publishes both atomically. This is the only place
+     * forms are designed — there is no separate standalone form builder page.
+     */
+    templateCompose(): string;
+    /** Template designer (xyflow canvas). */
+    templateDesigner(templateId: string): string;
+    /** Template version history. */
+    templateVersions(templateId: string): string;
+    /** Template categories admin. */
+    templateCategories(): string;
+    /** Per-member notification preferences. */
+    notificationSettings(): string;
+    /** Admin: organization tree management. */
+    adminOrgs(): string;
+    /** Admin: member directory mapping. */
+    adminUsers(): string;
+    /** Admin: delegation rule management. */
+    adminDelegations(): string;
+    /** Admin: database-managed notify webhook endpoints (ADR 18). */
+    adminWebhookEndpoints(): string;
+}
+/**
+ * Factory for the default `BPMRoutes` value. Reproduces the exact path
+ * literals BPM views used before `BPMRoutesContext` existed, so existing
+ * hosts (no provider mounted) keep working unchanged.
+ */
+export declare function createDefaultBPMRoutes(): BPMRoutes;
+export interface BPMRoutesProviderProps {
+    /**
+     * Override the path mapping. Provide a full implementation, or spread
+     * the default and override individual entries:
+     *
+     * ```tsx
+     * <BPMRoutesProvider value={{
+     *   ...createDefaultBPMRoutes(),
+     *   caseDetail: (id) => `/workspace/cases/${id}`,
+     * }}>
+     * ```
+     */
+    readonly value?: BPMRoutes;
+    readonly children: ReactNode;
+}
+/**
+ * Wraps the BPM React tree with a {@link BPMRoutes} value. Mounting the
+ * provider is **optional** — `useBPMRoutes()` falls back to
+ * {@link createDefaultBPMRoutes} when no provider is present. Use it
+ * only when the host needs to remap BPM's internal paths.
+ */
+export declare function BPMRoutesProvider({ value, children, }: BPMRoutesProviderProps): ReactElement;
+/**
+ * Reads the host-configured {@link BPMRoutes}. Falls back to
+ * {@link createDefaultBPMRoutes} when no `<BPMRoutesProvider>` ancestor
+ * is mounted, so views remain self-contained.
+ */
+export declare function useBPMRoutes(): BPMRoutes;

package/dist/lib/task-node-label.d.cts

@@ -0,0 +1,10 @@
+import { TaskRecord } from '@rytass/bpm-core-client/workflow';
+/**
+ * What a task list shows in its 「節點」 column: the node's display name
+ * (`nodeLabel`, resolved server-side from the instance's workflow snapshot),
+ * falling back to the raw `nodeId` when the server sent none — an unknown node
+ * or a host running its own queries. An ad-hoc task keeps the label of the
+ * node it was spawned on and gets the same 臨時會簽／臨時加簽 marker the
+ * instance timeline uses.
+ */
+export declare function readTaskNodeText(task: Pick<TaskRecord, 'adhocType' | 'isAdhoc' | 'nodeId' | 'nodeLabel'>): string;

package/dist/lib/use-bpm-logout.d.cts

@@ -0,0 +1,12 @@
+/**
+ * Drop-in logout handler for host navigation menus. Wraps the BPM auth
+ * context's logout flow — calls `logoutApi()` against the BPM REST
+ * session endpoint, clears the in-memory member, then redirects to the
+ * configured `loginPath`.
+ *
+ * Hosts mount this on their own logout buttons / menu items so they do
+ * not need to touch `useAuth()` directly. To customize the post-logout
+ * destination, override the `loginPath` prop on `<BPMNextProviders>` or
+ * `<AuthProvider>`.
+ */
+export declare function useBPMLogout(): () => Promise<void>;

package/dist/lib/use-bpm-member.d.cts

@@ -0,0 +1,17 @@
+import { ApiMember } from '@rytass/bpm-core-client';
+/**
+ * Read the currently authenticated BPM member. Returns `null` when there
+ * is no active session — typically only seen on the login page or during
+ * the brief loading window before `<AuthProvider>` resolves the cookie.
+ *
+ * Convenience alias for `useAuth().member` aimed at host navigations
+ * (avatar, display name, role-based menu visibility) that should not
+ * depend on the broader `useAuth()` surface.
+ */
+export declare function useBPMMember(): ApiMember | null;
+/**
+ * Whether the member passes the server's `@BPMAdminOnly()` check — the
+ * `BPM_ADMIN` role or one of the administrator permissions. Use it to decide
+ * whether to show administrator-only UI; the server still enforces access.
+ */
+export declare function isBPMAdminMember(member: Pick<ApiMember, 'permissions' | 'roles'> | null): boolean;

package/dist/next/BPMNextProviders.d.cts

@@ -0,0 +1,51 @@
+import { ReactElement, ReactNode } from 'react';
+import { CalendarLocale } from '@mezzanine-ui/react/moment';
+export interface BPMNextProvidersProps {
+    readonly children: ReactNode;
+    /**
+     * Override the Mezzanine calendar locale. Forwarded to the inner
+     * `<Providers>`. Defaults to `CalendarLocale.ZH_TW`.
+     */
+    readonly locale?: CalendarLocale;
+    /**
+     * Routes that must remain accessible without a BPM session — visiting
+     * these does not redirect to `loginPath` even when `member` is null.
+     * Forwarded to `<AuthProvider>`. Defaults to `['/login']`.
+     *
+     * Hosts that mount BPM under a non-root prefix (see
+     * `<BPMRoutesProvider>`) should typically expand this to include their
+     * own auth-bypass paths.
+     */
+    readonly publicPaths?: readonly string[];
+    /**
+     * Where to redirect unauthenticated users. Forwarded to
+     * `<AuthProvider>`. Defaults to `'/login'`. Hosts owning their own
+     * login route (the recommended case) override this to their host
+     * route, e.g. `'/auth/sign-in'`.
+     */
+    readonly loginPath?: string;
+}
+/**
+ * One-line Next.js App Router shim for the full BPM provider stack.
+ * Mounts in the host's root layout (or layout for the BPM sub-tree):
+ *
+ * ```tsx
+ * import { BPMNextProviders } from '@rytass/bpm-core-react/next';
+ *
+ * export default function RootLayout({ children }) {
+ *   return (
+ *     <html><body>
+ *       <BPMNextProviders loginPath="/auth/sign-in">
+ *         {children}
+ *       </BPMNextProviders>
+ *     </body></html>
+ *   );
+ * }
+ * ```
+ *
+ * Forwards every prop on {@link BPMNextProvidersProps} to the inner
+ * `<Providers>` and `<AuthProvider>`. For per-feature path remapping
+ * (BPM internal navigation), additionally wrap with
+ * `<BPMRoutesProvider>` exported from the same subpath.
+ */
+export declare function BPMNextProviders({ children, locale, publicPaths, loginPath, }: BPMNextProvidersProps): ReactElement;

package/dist/next/index.d.cts

@@ -0,0 +1,2 @@
+export * from './BPMNextProviders.cjs';
+export { BPMRoutesProvider, createDefaultBPMRoutes, useBPMRoutes, type BPMRoutes, type BPMRoutesProviderProps, } from '../lib/routes-config.cjs';

package/dist/next/index.d.ts

@@ -1,2 +1,2 @@
-export * from './BPMNextProviders';
-export { BPMRoutesProvider, createDefaultBPMRoutes, useBPMRoutes, type BPMRoutes, type BPMRoutesProviderProps, } from '../lib/routes-config';
+export * from './BPMNextProviders.js';
+export { BPMRoutesProvider, createDefaultBPMRoutes, useBPMRoutes, type BPMRoutes, type BPMRoutesProviderProps, } from '../lib/routes-config.js';

package/dist/next/workflow-chat-route.d.cts

@@ -0,0 +1,17 @@
+import { ToolSet } from 'ai';
+/**
+ * Strict guardrail: the assistant may ONLY design this approval flow, using the
+ * provided tools. Anything else is declined. Lives server-side so it cannot be
+ * overridden by client-supplied messages.
+ */
+export declare const WORKFLOW_CHAT_SYSTEM_PROMPT = "\u4F60\u662F\u300C\u7C3D\u6838\u6D41\u7A0B\u8A2D\u8A08\u5668\u300D\u9801\u9762\u5167\u5EFA\u7684 AI \u52A9\u7406\uFF0C\u552F\u4E00\u8077\u8CAC\u662F\u5354\u52A9\u4F7F\u7528\u8005\u5728\u9019\u500B\u756B\u5E03\u4E0A\u8A2D\u8A08\uFF0F\u4FEE\u6539\u4E00\u500B\u7C3D\u6838\u5BE9\u6279\u6D41\u7A0B\uFF08workflow\uFF09\u3002\n\n\u4F60\u53EA\u80FD\u900F\u904E\u7CFB\u7D71\u63D0\u4F9B\u7684\u5DE5\u5177\uFF08tools\uFF09\u4F86\u64CD\u4F5C\u6D41\u7A0B\uFF1A\u65B0\u589E/\u91CD\u547D\u540D/\u522A\u9664\u7BC0\u9EDE\u3001\u9023\u7DDA\u3001\u8A2D\u5B9A\u7C3D\u6838\u4EBA\u3001\u8A2D\u5B9A\u689D\u4EF6\u5206\u6D41\u3001\u8A2D\u5B9A\u7CFB\u7D71\u7BC0\u9EDE\u52D5\u4F5C\u3001\u81EA\u52D5\u6392\u7248\u3001\u67E5\u8A62\u73FE\u6CC1\u8207\u9A57\u8B49\u7B49\u3002\u9664\u4E86\u9019\u4E9B\u5DE5\u5177\uFF0C\u4F60\u6C92\u6709\u5176\u4ED6\u80FD\u529B\u3002\n\n\u5DE5\u4F5C\u5B88\u5247\uFF1A\n1. \u52D5\u4F5C\u524D\uFF0C\u5148\u547C\u53EB get_workflow_snapshot \u4E86\u89E3\u76EE\u524D\u756B\u5E03\u7684\u7BC0\u9EDE\u8207\u9023\u7DDA\uFF0C\u518D\u898F\u5283\u8981\u547C\u53EB\u54EA\u4E9B\u5DE5\u5177\u3002\n2. \u76E1\u91CF\u7528\u9AD8\u968E\u5DE5\u5177\uFF08insert_approval_step / insert_notification / insert_conditional_branch\uFF09\u4E00\u6B21\u5B8C\u6210\u591A\u6B65\uFF1B\u9700\u8981\u7D30\u4FEE\u6642\u518D\u7528\u7D30\u9846\u7C92\u5DE5\u5177\u3002\n3. **\u91CD\u8981\uFF1A\u8981\u679C\u65B7\u3001\u5148\u628A\u6D41\u7A0B\u756B\u51FA\u4F86\u3002** \u4F7F\u7528\u8005\u53EA\u7D66\u4E00\u5169\u53E5\u8A71\u6642\uFF0C\u76F4\u63A5\u4F9D\u5E38\u898B\u516C\u53F8\u6163\u4F8B\u5EFA\u7ACB\u521D\u7A3F\uFF0C\u4E0D\u8981\u53CD\u8986\u8FFD\u554F\u7D30\u7BC0\u3002\u7C3D\u6838\u4EBA\u82E5\u4F7F\u7528\u8005\u6C92\u6307\u5B9A\uFF0C\u5C31\u7701\u7565 approverResolver\uFF08\u7CFB\u7D71\u6703\u81EA\u52D5\u7528\u300C\u76F4\u5C6C\u4E3B\u7BA1\u300D\u70BA\u9810\u8A2D\uFF0C\u4E0D\u9700\u8981\u771F\u5BE6\u6703\u54E1 id\uFF09\uFF1B\u901A\u77E5\u7BC0\u9EDE\u540C\u7406\u53EF\u7701\u7565 action\uFF08\u9810\u8A2D\u7AD9\u5167\u901A\u77E5\uFF09\u3002\u5148\u628A\u7D50\u69CB\u5EFA\u597D\u3001\u518D\u8ACB\u4F7F\u7528\u8005\u8ABF\u6574\u3002\n4. \u5DE5\u5177\u547C\u53EB\u4E0D\u6703\u56E0\u70BA\u300C\u7F3A\u7C3D\u6838\u4EBA/\u7F3A\u8CC7\u6599\u300D\u800C\u5931\u6557\uFF1B\u7F3A\u7684\u90E8\u5206\u6703\u4EE5\u5408\u7406\u9810\u8A2D\u88DC\u4E0A\uFF0C\u4E26\u7531 validate_workflow \u6A19\u793A\u3002\u6240\u4EE5\u653E\u5FC3\u9023\u7E8C\u547C\u53EB\u5DE5\u5177\u628A\u6D41\u7A0B\u5EFA\u5B8C\uFF0C\u4E0D\u8981\u56E0\u70BA\u6015\u7F3A\u6B04\u4F4D\u5C31\u505C\u4E0B\u4F86\u554F\u3002\n5. \u7576\u4F7F\u7528\u8005\u300C\u9EDE\u540D\u300D\u67D0\u500B\u4EBA\u6216\u90E8\u9580\u7576\u7C3D\u6838\u4EBA/\u6536\u4EF6\u8005\u6642\uFF0C\u5148\u7528 search_members\uFF08\u4F9D\u59D3\u540D\u95DC\u9375\u5B57\uFF09\u3001list_org_units\u3001list_positions \u67E5\u5230\u771F\u5BE6 id\uFF0C\u518D\u7528 set_user_task_approver / set_service_action \u6307\u5B9A\uFF08\u5982 DIRECT memberIds\u3001ORG_UNIT_MANAGER orgUnitId\u3001POSITION positionId\uFF09\u3002\u67E5\u4E0D\u5230\u5C31\u56DE\u5831\u4E26\u8ACB\u4F7F\u7528\u8005\u78BA\u8A8D\uFF0C\u4E0D\u8981\u7DE8\u9020 id\u3002\n6. \u7BC0\u9EDE id \u53EF\u5F9E snapshot \u53D6\u5F97\uFF1B\u9023\u7DDA\u689D\u4EF6\u9700\u8981\u5148\u7D81\u5B9A\u8868\u55AE\u6B04\u4F4D\uFF08\u82E5 list_form_fields \u70BA\u7A7A\uFF0C\u63D0\u9192\u4F7F\u7528\u8005\u5148\u7D81\u5B9A\u8868\u55AE\u7248\u672C\uFF09\u3002\n7. **\u689D\u4EF6\u5206\u6D41\u52D9\u5FC5\u4E3B\u52D5\u88DC\u4E0A\u300C\u5176\u4ED6\u60C5\u6CC1\u300D**\uFF1A\u8A2D\u8A08 exclusiveGateway\uFF08\u689D\u4EF6\u5206\u6D41\uFF09\u6642\uFF0C\u9664\u4E86\u7B26\u5408\u689D\u4EF6\u7684\u5206\u652F\uFF0C\u4E00\u5B9A\u8981\u4FDD\u7559\u4E00\u689D\u672A\u8A2D\u689D\u4EF6\u3001\u6A19\u8A18\u70BA\u9810\u8A2D\uFF08isDefault\uFF09\u7684\u300C\u5176\u4ED6\u60C5\u6CC1\u300D\u8DEF\u5F91\u7576 else\uFF08\u901A\u5E38\u6307\u5411\u5F8C\u7E8C\u7BC0\u9EDE\u6216\u5B8C\u6210\uFF09\u3002\u4E0D\u8981\u628A\u6240\u6709\u8F38\u51FA\u9023\u7DDA\u90FD\u8A2D\u6210\u689D\u4EF6\u800C\u6C92\u6709\u9810\u8A2D\u51FA\u53E3\uFF1B\u7F3A\u9810\u8A2D\u51FA\u53E3\u6642\uFF0C\u7528 set_edge_default \u628A\u5176\u4E2D\u4E00\u689D\u8A2D\u70BA\u9810\u8A2D\u3002\n8. \u5B8C\u6210\u5F8C\uFF0C\u547C\u53EB validate_workflow\uFF0C\u4E26\u7528\u4E00\u5169\u53E5\u8A71\u8AAA\u660E\u4F60\u5EFA\u4E86\u4EC0\u9EBC\u6D41\u7A0B\u3001\u54EA\u4E9B\u5730\u65B9\uFF08\u5982\u7C3D\u6838\u4EBA\u3001\u689D\u4EF6\u9580\u6ABB\uFF09\u5EFA\u8B70\u4F7F\u7528\u8005\u518D\u78BA\u8A8D\u6216\u6307\u5B9A\u3002\n9. \u5168\u7A0B\u4F7F\u7528\u7E41\u9AD4\u4E2D\u6587\uFF08\u53F0\u7063\u7528\u8A9E\uFF09\u56DE\u8986\u3002\n\n\u56B4\u683C\u754C\u7DDA\uFF1A\n- \u53EA\u505A\u300C\u8A2D\u8A08\u9019\u500B\u7C3D\u6838\u6D41\u7A0B\u300D\u76F8\u95DC\u7684\u4E8B\u3002\u4EFB\u4F55\u8207\u6B64\u7121\u95DC\u7684\u8ACB\u6C42\uFF08\u9592\u804A\u3001\u5BEB\u8A69\u3001\u5BEB\u7A0B\u5F0F\u3001\u67E5\u5929\u6C23\uFF0F\u65B0\u805E\u3001\u64CD\u4F5C\u5176\u4ED6\u7CFB\u7D71\u6216\u9801\u9762\u3001\u56DE\u7B54\u4E00\u822C\u77E5\u8B58\u554F\u984C\u7B49\uFF09\u4E00\u5F8B\u5A49\u62D2\uFF0C\u4E26\u7C21\u77ED\u5F15\u5C0E\u4F7F\u7528\u8005\u56DE\u5230\u6D41\u7A0B\u8A2D\u8A08\uFF0C\u4F8B\u5982\uFF1A\u300C\u6211\u53EA\u80FD\u5354\u52A9\u4F60\u8A2D\u8A08\u9019\u500B\u7C3D\u6838\u6D41\u7A0B\uFF0C\u9700\u8981\u6211\u5E6B\u4F60\u65B0\u589E\u95DC\u5361\u6216\u8A2D\u5B9A\u689D\u4EF6\u55CE\uFF1F\u300D\n- \u4E0D\u8981\u5047\u88DD\u57F7\u884C\u4F60\u5DE5\u5177\u4EE5\u5916\u7684\u52D5\u4F5C\uFF0C\u4E5F\u4E0D\u8981\u7DE8\u9020\u7D50\u679C\u3002";
+/** Build AI SDK tools from WORKFLOW_TOOLSET — no `execute`, so the browser runs them. */
+export declare function buildWorkflowAiSdkTools(): ToolSet;
+export interface WorkflowChatRouteOptions {
+    /** Override the OpenAI model id (else BPM_LLM_MODEL env, else the default). */
+    readonly model?: string;
+    /** Override the system prompt (else the strict design-only guardrail). */
+    readonly system?: string;
+}
+/** Create the `POST` handler for the workflow chat route. */
+export declare function createWorkflowChatPOST(options?: WorkflowChatRouteOptions): (request: Request) => Promise<Response>;

package/dist/pages/admin/delegations/index.d.cts

@@ -0,0 +1,4 @@
+import { Metadata } from 'next';
+import { ReactElement } from 'react';
+export declare const metadata: Metadata;
+export default function AdminDelegationsPage(): ReactElement;

package/dist/pages/admin/orgs/index.cjs

@@ -1,2 +1,2 @@
-Object.defineProperties(exports,{__esModule:{value:!0},[Symbol.toStringTag]:{value:`Module`}});const e=require("../../../chunks/orgs-Dr0FFoZo.cjs");let t=require("react/jsx-runtime");var n={title:`組織管理 | BPM Admin`,description:`維護組織樹、職位、會員歸屬與簽核主管解析規則。`};function r(){return(0,t.jsx)(e.t,{})}exports.default=r,exports.metadata=n;
+Object.defineProperties(exports,{__esModule:{value:!0},[Symbol.toStringTag]:{value:`Module`}});const e=require("../../../chunks/orgs-C8usknWb.cjs");let t=require("react/jsx-runtime");var n={title:`組織管理 | BPM Admin`,description:`維護組織樹、職位、會員歸屬與簽核主管解析規則。`};function r(){return(0,t.jsx)(e.t,{})}exports.default=r,exports.metadata=n;
 //# sourceMappingURL=index.cjs.map

package/dist/pages/admin/orgs/index.d.cts

@@ -0,0 +1,4 @@
+import { Metadata } from 'next';
+import { ReactElement } from 'react';
+export declare const metadata: Metadata;
+export default function AdminOrgsPage(): ReactElement;

package/dist/pages/admin/orgs/index.js

@@ -1,4 +1,4 @@
-import { t as e } from "../../../chunks/orgs-CY0i1fie.js";
+import { t as e } from "../../../chunks/orgs-Lg7tXv2u.js";
 import { jsx as t } from "react/jsx-runtime";
 //#region src/pages/admin/orgs/index.tsx
 var n = {

package/dist/pages/admin/users/index.cjs

@@ -1,2 +1,2 @@
-Object.defineProperties(exports,{__esModule:{value:!0},[Symbol.toStringTag]:{value:`Module`}});const e=require("../../../chunks/users-DVBJluFR.cjs");let t=require("react/jsx-runtime");var n={title:`會員對照 | BPM Admin`,description:`檢視 BPM 內部會員組織歸屬與主管解析。`};function r(){return(0,t.jsx)(e.t,{})}exports.default=r,exports.metadata=n;
+Object.defineProperties(exports,{__esModule:{value:!0},[Symbol.toStringTag]:{value:`Module`}});const e=require("../../../chunks/users-DVQicZIo.cjs");let t=require("react/jsx-runtime");var n={title:`會員對照 | BPM Admin`,description:`檢視 BPM 內部會員組織歸屬與主管解析。`};function r(){return(0,t.jsx)(e.t,{})}exports.default=r,exports.metadata=n;
 //# sourceMappingURL=index.cjs.map

package/dist/pages/admin/users/index.d.cts

@@ -0,0 +1,4 @@
+import { Metadata } from 'next';
+import { ReactElement } from 'react';
+export declare const metadata: Metadata;
+export default function AdminUsersPage(): ReactElement;

package/dist/pages/admin/users/index.js

@@ -1,4 +1,4 @@
-import { t as e } from "../../../chunks/users-BCyePbwB.js";
+import { t as e } from "../../../chunks/users-DRbuDYF1.js";
 import { jsx as t } from "react/jsx-runtime";
 //#region src/pages/admin/users/index.tsx
 var n = {