@rytass/bpm-core-react 0.18.1 → 0.20.0

package/dist/views/templates/designer/expression/ExpressionField.d.cts

@@ -0,0 +1,79 @@
+import { ReactElement } from 'react';
+import { ExpressionUsagePoint } from '@rytass/bpm-core-shared';
+import { WorkflowExpressionDialect } from '@rytass/bpm-core-shared/workflow';
+import { GraphQlRequestOptions } from '@rytass/bpm-core-client';
+import { ExpressionCatalogRecord, ExpressionEvaluationRecord, ExpressionIssueRecord, ExpressionPreviewRecord, PreviewExpressionInput } from '@rytass/bpm-core-client/template';
+/**
+ * Where the backend check of one expression stands. `UNAVAILABLE`: the check
+ * itself failed (network, 403); the field cannot vouch for the expression.
+ */
+export type ExpressionFieldStatus = 'CHECKING' | 'EMPTY' | 'INVALID' | 'UNAVAILABLE' | 'VALID';
+export interface ExpressionFieldLint {
+    readonly issues: readonly ExpressionIssueRecord[];
+    readonly status: ExpressionFieldStatus;
+}
+/** The backend calls the field makes; injectable for tests and Storybook. */
+export interface ExpressionFieldApi {
+    readonly preview: (input: PreviewExpressionInput, options?: GraphQlRequestOptions) => Promise<ExpressionPreviewRecord>;
+    readonly readCatalog: (input: Readonly<{
+        formDefinitionVersionId?: string | null;
+        usagePoint: ExpressionUsagePoint;
+    }>, options?: GraphQlRequestOptions) => Promise<ExpressionCatalogRecord>;
+}
+export interface ExpressionFieldProps {
+    readonly api?: ExpressionFieldApi;
+    /** Lint delay after the last keystroke. */
+    readonly debounceMs?: number;
+    readonly dialect: WorkflowExpressionDialect;
+    readonly disabled?: boolean;
+    /** FLOW_CONDITION: the type of the node the edge leaves. */
+    readonly edgeSourceNodeType?: string | null;
+    /** Offer a sample-data trial run (EVALUATE) under the field. */
+    readonly evaluable?: boolean;
+    readonly formDefinitionVersionId?: string | null;
+    readonly hintText?: string;
+    readonly label: string;
+    readonly name: string;
+    readonly onChange: (value: string) => void;
+    /** Every change of the backend check, so a host can block applying. */
+    readonly onLintChange?: (lint: ExpressionFieldLint) => void;
+    readonly required?: boolean;
+    readonly rows?: number;
+    /** SERVICE_FORM_FIELD_VALUE: the field the value is written to. */
+    readonly targetFieldKey?: string | null;
+    readonly usagePoint: ExpressionUsagePoint;
+    readonly value: string;
+}
+interface CatalogOption {
+    readonly id: string;
+    readonly name: string;
+}
+/** Catalog entries as insertable snippets: field paths, then `name(`. */
+export declare function readExpressionCatalogOptions(catalog: ExpressionCatalogRecord | null): readonly CatalogOption[];
+export interface ExpressionCatalogFunctionNote {
+    readonly id: string;
+    readonly text: string;
+}
+/**
+ * What each catalog function does, as plain lines under the picker. The
+ * picker's options carry only a name (Mezzanine `DropdownOption` has no
+ * secondary text), so a function's `description` was never shown. Functions
+ * without one are left out; the text is rendered as text, never as HTML.
+ */
+export declare function readExpressionCatalogFunctionNotes(catalog: ExpressionCatalogRecord | null): readonly ExpressionCatalogFunctionNote[];
+/** Appends a snippet, separated by a space unless the text already ends in one. */
+export declare function appendExpressionSnippet(value: string, snippet: string): string;
+/** The status badge copy; the issues themselves are listed underneath. */
+export declare function readExpressionFieldStatusText(status: ExpressionFieldStatus): string | null;
+/** The parsed trial-run sample, or why it cannot be one. */
+export declare function readExpressionSample(json: string): Readonly<Record<string, unknown>> | string;
+/** One trial-run outcome as plain text (rendered as text, never as HTML). */
+export declare function readExpressionEvaluationText(evaluation: ExpressionEvaluationRecord): string;
+/**
+ * A CEL expression input (Phase 23 P4, ADR 22 §3.8): Mezzanine Textarea plus
+ * a catalog picker, with the backend's lint findings listed underneath. The
+ * browser only sends text; parsing, linting and the optional trial run all
+ * happen on the backend (`previewExpression`, designer-only).
+ */
+export declare function ExpressionField({ api, debounceMs, dialect, disabled, edgeSourceNodeType, evaluable, formDefinitionVersionId, hintText, label, name, onChange, onLintChange, required, rows, targetFieldKey, usagePoint, value, }: ExpressionFieldProps): ReactElement;
+export {};

package/dist/views/templates/designer/expression/ExpressionField.d.ts

@@ -0,0 +1,79 @@
+import { ReactElement } from 'react';
+import { ExpressionUsagePoint } from '@rytass/bpm-core-shared';
+import { WorkflowExpressionDialect } from '@rytass/bpm-core-shared/workflow';
+import { GraphQlRequestOptions } from '@rytass/bpm-core-client';
+import { ExpressionCatalogRecord, ExpressionEvaluationRecord, ExpressionIssueRecord, ExpressionPreviewRecord, PreviewExpressionInput } from '@rytass/bpm-core-client/template';
+/**
+ * Where the backend check of one expression stands. `UNAVAILABLE`: the check
+ * itself failed (network, 403); the field cannot vouch for the expression.
+ */
+export type ExpressionFieldStatus = 'CHECKING' | 'EMPTY' | 'INVALID' | 'UNAVAILABLE' | 'VALID';
+export interface ExpressionFieldLint {
+    readonly issues: readonly ExpressionIssueRecord[];
+    readonly status: ExpressionFieldStatus;
+}
+/** The backend calls the field makes; injectable for tests and Storybook. */
+export interface ExpressionFieldApi {
+    readonly preview: (input: PreviewExpressionInput, options?: GraphQlRequestOptions) => Promise<ExpressionPreviewRecord>;
+    readonly readCatalog: (input: Readonly<{
+        formDefinitionVersionId?: string | null;
+        usagePoint: ExpressionUsagePoint;
+    }>, options?: GraphQlRequestOptions) => Promise<ExpressionCatalogRecord>;
+}
+export interface ExpressionFieldProps {
+    readonly api?: ExpressionFieldApi;
+    /** Lint delay after the last keystroke. */
+    readonly debounceMs?: number;
+    readonly dialect: WorkflowExpressionDialect;
+    readonly disabled?: boolean;
+    /** FLOW_CONDITION: the type of the node the edge leaves. */
+    readonly edgeSourceNodeType?: string | null;
+    /** Offer a sample-data trial run (EVALUATE) under the field. */
+    readonly evaluable?: boolean;
+    readonly formDefinitionVersionId?: string | null;
+    readonly hintText?: string;
+    readonly label: string;
+    readonly name: string;
+    readonly onChange: (value: string) => void;
+    /** Every change of the backend check, so a host can block applying. */
+    readonly onLintChange?: (lint: ExpressionFieldLint) => void;
+    readonly required?: boolean;
+    readonly rows?: number;
+    /** SERVICE_FORM_FIELD_VALUE: the field the value is written to. */
+    readonly targetFieldKey?: string | null;
+    readonly usagePoint: ExpressionUsagePoint;
+    readonly value: string;
+}
+interface CatalogOption {
+    readonly id: string;
+    readonly name: string;
+}
+/** Catalog entries as insertable snippets: field paths, then `name(`. */
+export declare function readExpressionCatalogOptions(catalog: ExpressionCatalogRecord | null): readonly CatalogOption[];
+export interface ExpressionCatalogFunctionNote {
+    readonly id: string;
+    readonly text: string;
+}
+/**
+ * What each catalog function does, as plain lines under the picker. The
+ * picker's options carry only a name (Mezzanine `DropdownOption` has no
+ * secondary text), so a function's `description` was never shown. Functions
+ * without one are left out; the text is rendered as text, never as HTML.
+ */
+export declare function readExpressionCatalogFunctionNotes(catalog: ExpressionCatalogRecord | null): readonly ExpressionCatalogFunctionNote[];
+/** Appends a snippet, separated by a space unless the text already ends in one. */
+export declare function appendExpressionSnippet(value: string, snippet: string): string;
+/** The status badge copy; the issues themselves are listed underneath. */
+export declare function readExpressionFieldStatusText(status: ExpressionFieldStatus): string | null;
+/** The parsed trial-run sample, or why it cannot be one. */
+export declare function readExpressionSample(json: string): Readonly<Record<string, unknown>> | string;
+/** One trial-run outcome as plain text (rendered as text, never as HTML). */
+export declare function readExpressionEvaluationText(evaluation: ExpressionEvaluationRecord): string;
+/**
+ * A CEL expression input (Phase 23 P4, ADR 22 §3.8): Mezzanine Textarea plus
+ * a catalog picker, with the backend's lint findings listed underneath. The
+ * browser only sends text; parsing, linting and the optional trial run all
+ * happen on the backend (`previewExpression`, designer-only).
+ */
+export declare function ExpressionField({ api, debounceMs, dialect, disabled, edgeSourceNodeType, evaluable, formDefinitionVersionId, hintText, label, name, onChange, onLintChange, required, rows, targetFieldKey, usagePoint, value, }: ExpressionFieldProps): ReactElement;
+export {};

package/dist/views/templates/designer/expression/use-workflow-expression-references.d.cts

@@ -0,0 +1,22 @@
+import { WorkflowExpressionsDraft, WorkflowExpressionsRecord } from '@rytass/bpm-core-client/template';
+import { GraphQlRequestOptions } from '@rytass/bpm-core-client';
+export interface WorkflowExpressionReferences {
+    readonly analysis: WorkflowExpressionsRecord | null;
+    /** Field key → labels of the expressions reading it. */
+    readonly references: ReadonlyMap<string, readonly string[]>;
+    /**
+     * The references of the draft as it is now. Answers from the last analysis
+     * when it was made for this very draft, otherwise asks the backend at once.
+     * Resolves to `null` when the backend cannot answer, so a caller guarding a
+     * destructive edit can refuse it instead of letting it through.
+     */
+    readonly resolveCurrentReferences: () => Promise<ReadonlyMap<string, readonly string[]> | null>;
+}
+/**
+ * The backend's reading of the draft's expressions (Phase 23 P4), refreshed a
+ * moment after the draft stops changing. Field references come from the
+ * backend's AST, never from parsing CEL in the browser. A failed analysis
+ * leaves the last answer in place for display; `resolveCurrentReferences`
+ * never answers from a stale or missing analysis.
+ */
+export declare function useWorkflowExpressionReferences(draft: WorkflowExpressionsDraft, enabled: boolean, analyze?: (draft: WorkflowExpressionsDraft, options?: GraphQlRequestOptions) => Promise<WorkflowExpressionsRecord>, debounceMs?: number): WorkflowExpressionReferences;

package/dist/views/templates/designer/expression/use-workflow-expression-references.d.ts

@@ -0,0 +1,22 @@
+import { WorkflowExpressionsDraft, WorkflowExpressionsRecord } from '@rytass/bpm-core-client/template';
+import { GraphQlRequestOptions } from '@rytass/bpm-core-client';
+export interface WorkflowExpressionReferences {
+    readonly analysis: WorkflowExpressionsRecord | null;
+    /** Field key → labels of the expressions reading it. */
+    readonly references: ReadonlyMap<string, readonly string[]>;
+    /**
+     * The references of the draft as it is now. Answers from the last analysis
+     * when it was made for this very draft, otherwise asks the backend at once.
+     * Resolves to `null` when the backend cannot answer, so a caller guarding a
+     * destructive edit can refuse it instead of letting it through.
+     */
+    readonly resolveCurrentReferences: () => Promise<ReadonlyMap<string, readonly string[]> | null>;
+}
+/**
+ * The backend's reading of the draft's expressions (Phase 23 P4), refreshed a
+ * moment after the draft stops changing. Field references come from the
+ * backend's AST, never from parsing CEL in the browser. A failed analysis
+ * leaves the last answer in place for display; `resolveCurrentReferences`
+ * never answers from a stale or missing analysis.
+ */
+export declare function useWorkflowExpressionReferences(draft: WorkflowExpressionsDraft, enabled: boolean, analyze?: (draft: WorkflowExpressionsDraft, options?: GraphQlRequestOptions) => Promise<WorkflowExpressionsRecord>, debounceMs?: number): WorkflowExpressionReferences;

package/dist/views/templates/designer/expression/workflow-expression-edits.d.cts

@@ -0,0 +1,58 @@
+import { WorkflowDefinition, WorkflowEdge, WorkflowNode } from '@rytass/bpm-core-shared/workflow';
+/**
+ * Pure designer edits for the free-text expressions the command layer has no
+ * primitive for (Phase 23 P4): a node's entry condition and an edge's
+ * hand-written CEL condition. The designer applies them through
+ * `controller.replaceState`; the assistant cannot reach them (its toolset
+ * offers `set_edge_condition`, the structured builder, instead).
+ */
+/** Nodes that may carry `entryCondition`. */
+export declare function hasWorkflowEntryCondition(node: WorkflowNode): node is Extract<WorkflowNode, {
+    type: 'serviceTask' | 'userTask';
+}>;
+/** Sets (or, for blank text, removes) a node's entry condition. */
+export declare function setWorkflowNodeEntryCondition(definition: WorkflowDefinition, nodeId: string, condition: string): WorkflowDefinition;
+/**
+ * An edge whose condition was written by hand rather than by the structured
+ * builder (field + operator + value).
+ */
+export declare function isWorkflowEdgeExpressionCondition(edge: WorkflowEdge): boolean;
+/**
+ * Writes a hand-written condition on an edge, dropping the builder's
+ * field / operator / value and the default flag (a conditional edge is not
+ * the else path).
+ */
+export declare function setWorkflowEdgeExpressionCondition(definition: WorkflowDefinition, edgeId: string, condition: string): WorkflowDefinition;
+/** The type of the node an edge leaves, for the `lastDecision` check. */
+export declare function readWorkflowEdgeSourceNodeType(definition: WorkflowDefinition, edgeId: string): string | null;
+/**
+ * Fields a form edit would rename or delete while expressions still read
+ * them (docs/24 §1): keys present before the edit, missing after it, and
+ * referenced. Each comes with the labels of the expressions reading it.
+ */
+export declare function readRemovedExpressionFields(beforeFieldKeys: readonly string[], afterFieldKeys: readonly string[], references: ReadonlyMap<string, readonly string[]>): readonly {
+    readonly fieldKey: string;
+    readonly labels: readonly string[];
+}[];
+export type FormEditExpressionCheck = {
+    readonly kind: 'allowed';
+} | {
+    readonly kind: 'blocked';
+    readonly fields: readonly {
+        readonly fieldKey: string;
+        readonly labels: readonly string[];
+    }[];
+} | {
+    readonly kind: 'unverified';
+    readonly fieldKeys: readonly string[];
+};
+/**
+ * Whether a form edit may be applied (docs/24 §1: renaming or deleting a
+ * field an expression reads is refused). An edit that removes no field needs
+ * no answer from the backend. One that does is checked against the references
+ * of the draft as it is now; when those cannot be had (analysis not run yet,
+ * request failed, 403) the edit is refused as `unverified` rather than let
+ * through — cel-legacy's publish lint does not check field existence, so this
+ * is the only guard such a template has.
+ */
+export declare function checkFormEditExpressionFields(beforeFieldKeys: readonly string[], afterFieldKeys: readonly string[], resolveReferences: () => Promise<ReadonlyMap<string, readonly string[]> | null>): Promise<FormEditExpressionCheck>;

package/dist/views/templates/designer/expression/workflow-expression-edits.d.ts

@@ -0,0 +1,58 @@
+import { WorkflowDefinition, WorkflowEdge, WorkflowNode } from '@rytass/bpm-core-shared/workflow';
+/**
+ * Pure designer edits for the free-text expressions the command layer has no
+ * primitive for (Phase 23 P4): a node's entry condition and an edge's
+ * hand-written CEL condition. The designer applies them through
+ * `controller.replaceState`; the assistant cannot reach them (its toolset
+ * offers `set_edge_condition`, the structured builder, instead).
+ */
+/** Nodes that may carry `entryCondition`. */
+export declare function hasWorkflowEntryCondition(node: WorkflowNode): node is Extract<WorkflowNode, {
+    type: 'serviceTask' | 'userTask';
+}>;
+/** Sets (or, for blank text, removes) a node's entry condition. */
+export declare function setWorkflowNodeEntryCondition(definition: WorkflowDefinition, nodeId: string, condition: string): WorkflowDefinition;
+/**
+ * An edge whose condition was written by hand rather than by the structured
+ * builder (field + operator + value).
+ */
+export declare function isWorkflowEdgeExpressionCondition(edge: WorkflowEdge): boolean;
+/**
+ * Writes a hand-written condition on an edge, dropping the builder's
+ * field / operator / value and the default flag (a conditional edge is not
+ * the else path).
+ */
+export declare function setWorkflowEdgeExpressionCondition(definition: WorkflowDefinition, edgeId: string, condition: string): WorkflowDefinition;
+/** The type of the node an edge leaves, for the `lastDecision` check. */
+export declare function readWorkflowEdgeSourceNodeType(definition: WorkflowDefinition, edgeId: string): string | null;
+/**
+ * Fields a form edit would rename or delete while expressions still read
+ * them (docs/24 §1): keys present before the edit, missing after it, and
+ * referenced. Each comes with the labels of the expressions reading it.
+ */
+export declare function readRemovedExpressionFields(beforeFieldKeys: readonly string[], afterFieldKeys: readonly string[], references: ReadonlyMap<string, readonly string[]>): readonly {
+    readonly fieldKey: string;
+    readonly labels: readonly string[];
+}[];
+export type FormEditExpressionCheck = {
+    readonly kind: 'allowed';
+} | {
+    readonly kind: 'blocked';
+    readonly fields: readonly {
+        readonly fieldKey: string;
+        readonly labels: readonly string[];
+    }[];
+} | {
+    readonly kind: 'unverified';
+    readonly fieldKeys: readonly string[];
+};
+/**
+ * Whether a form edit may be applied (docs/24 §1: renaming or deleting a
+ * field an expression reads is refused). An edit that removes no field needs
+ * no answer from the backend. One that does is checked against the references
+ * of the draft as it is now; when those cannot be had (analysis not run yet,
+ * request failed, 403) the edit is refused as `unverified` rather than let
+ * through — cel-legacy's publish lint does not check field existence, so this
+ * is the only guard such a template has.
+ */
+export declare function checkFormEditExpressionFields(beforeFieldKeys: readonly string[], afterFieldKeys: readonly string[], resolveReferences: () => Promise<ReadonlyMap<string, readonly string[]> | null>): Promise<FormEditExpressionCheck>;

package/dist/views/templates/designer/expression/workflow-expression-tools.d.cts

@@ -0,0 +1,14 @@
+import { WorkflowDesignerState, WorkflowExpressionTools } from '@rytass/bpm-core-shared';
+import { ExpressionPreviewRecord, PreviewExpressionInput, readExpressionCatalog } from '@rytass/bpm-core-client/template';
+/** The client calls the tools make; injectable for tests. */
+export interface WorkflowExpressionToolsApi {
+    readonly preview: (input: PreviewExpressionInput) => Promise<ExpressionPreviewRecord>;
+    readonly readCatalog: typeof readExpressionCatalog;
+}
+/**
+ * The assistant's expression tools (Phase 23 P4, ADR 22 §3.8), backed by the
+ * designer-only GraphQL operations. Every answer comes from the backend; the
+ * browser neither parses nor evaluates CEL. Findings are written as designer
+ * sentences so the model can relay them to the user.
+ */
+export declare function createWorkflowExpressionTools(state: WorkflowDesignerState, api?: WorkflowExpressionToolsApi): WorkflowExpressionTools;

package/dist/views/templates/designer/expression/workflow-expression-tools.d.ts

@@ -0,0 +1,14 @@
+import { WorkflowDesignerState, WorkflowExpressionTools } from '@rytass/bpm-core-shared';
+import { ExpressionPreviewRecord, PreviewExpressionInput, readExpressionCatalog } from '@rytass/bpm-core-client/template';
+/** The client calls the tools make; injectable for tests. */
+export interface WorkflowExpressionToolsApi {
+    readonly preview: (input: PreviewExpressionInput) => Promise<ExpressionPreviewRecord>;
+    readonly readCatalog: typeof readExpressionCatalog;
+}
+/**
+ * The assistant's expression tools (Phase 23 P4, ADR 22 §3.8), backed by the
+ * designer-only GraphQL operations. Every answer comes from the backend; the
+ * browser neither parses nor evaluates CEL. Findings are written as designer
+ * sentences so the model can relay them to the user.
+ */
+export declare function createWorkflowExpressionTools(state: WorkflowDesignerState, api?: WorkflowExpressionToolsApi): WorkflowExpressionTools;

package/dist/views/templates/designer/field-access-matrix/FieldAccessMatrixDrawer.d.cts

@@ -5,6 +5,12 @@ import { WorkflowDefinition } from '@rytass/bpm-core-shared/workflow';
 import { BPMLanguage } from '../../../../lib/language-provider.cjs';
 export interface FieldAccessMatrixDrawerProps {
     readonly definition: WorkflowDefinition;
+    /**
+     * Phase 23 P4: per field key, the labels of the expressions that read it
+     * (from `analyzeWorkflowExpressions`). Such a field cannot be renamed or
+     * deleted while they do; the matrix marks it.
+     */
+    readonly expressionReferences?: ReadonlyMap<string, readonly string[]>;
     readonly formSchema: FormDefinitionSchema | null;
     readonly language: BPMLanguage;
     /**
@@ -30,4 +36,4 @@ export declare function rebaseFieldAccessDraft(current: readonly FieldAccessMatr
  * `setFieldAccessMatrix` on 套用. The checks are recomputed from the draft
  * with the publish lint's own rules, so a conflict shows before applying.
  */
-export declare function FieldAccessMatrixDrawer({ definition, formSchema, language, onApply, onClose, open, }: FieldAccessMatrixDrawerProps): ReactElement;
+export declare function FieldAccessMatrixDrawer({ definition, expressionReferences, formSchema, language, onApply, onClose, open, }: FieldAccessMatrixDrawerProps): ReactElement;

package/dist/views/templates/designer/field-access-matrix/FieldAccessMatrixDrawer.d.ts

@@ -5,6 +5,12 @@ import { WorkflowDefinition } from '@rytass/bpm-core-shared/workflow';
 import { BPMLanguage } from '../../../../lib/language-provider.js';
 export interface FieldAccessMatrixDrawerProps {
     readonly definition: WorkflowDefinition;
+    /**
+     * Phase 23 P4: per field key, the labels of the expressions that read it
+     * (from `analyzeWorkflowExpressions`). Such a field cannot be renamed or
+     * deleted while they do; the matrix marks it.
+     */
+    readonly expressionReferences?: ReadonlyMap<string, readonly string[]>;
     readonly formSchema: FormDefinitionSchema | null;
     readonly language: BPMLanguage;
     /**
@@ -30,4 +36,4 @@ export declare function rebaseFieldAccessDraft(current: readonly FieldAccessMatr
  * `setFieldAccessMatrix` on 套用. The checks are recomputed from the draft
  * with the publish lint's own rules, so a conflict shows before applying.
  */
-export declare function FieldAccessMatrixDrawer({ definition, formSchema, language, onApply, onClose, open, }: FieldAccessMatrixDrawerProps): ReactElement;
+export declare function FieldAccessMatrixDrawer({ definition, expressionReferences, formSchema, language, onApply, onClose, open, }: FieldAccessMatrixDrawerProps): ReactElement;

package/dist/views/templates/designer/index.cjs

@@ -1 +1 @@
-Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("../../../chunks/designer-Df79YzUn.cjs");exports.TemplateDesignerView=e.t;
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("../../../chunks/designer-CX9bhYJS.cjs");exports.TemplateDesignerView=e.t;

package/dist/views/templates/designer/index.js

@@ -1 +1 @@
-export { t as TemplateDesignerView } from "../../../chunks/designer-ubnZbP-A.js";
+export { t as TemplateDesignerView } from "../../../chunks/designer-CZDlQ9Nf.js";

package/dist/views/templates/designer/notify-webhook-designer.d.cts

@@ -40,6 +40,14 @@ export declare function readNotifyWebhookBindingKinds(type: NotifyWebhookParamet
 export declare function readCompatibleFormFields(formFields: readonly FormFieldDefinition[], type: NotifyWebhookParameterType): readonly FormFieldDefinition[];
 /** The value a binding starts with when its source kind is picked. */
 export declare function createNotifyWebhookBindingSource(kind: NotifyWebhookBindingKind, parameter: DesignerParameter, formFields: readonly FormFieldDefinition[]): NotifyWebhookBindingSource;
+/**
+ * Whether a parameter can be bound to a cel-v2 expression over `form`
+ * (ADR 22 §3.7). An expression yields a scalar, so never a `stringArray`, and
+ * it reads the bound form, so not before one is bound. Kept apart from
+ * {@link readNotifyWebhookBindingKinds}, which lists the sources that need no
+ * backend check.
+ */
+export declare function canBindNotifyWebhookExpression(type: NotifyWebhookParameterType, formFields: readonly FormFieldDefinition[] | null): boolean;
 /**
  * Reads a typed constant from a text input. A number parameter takes plain
  * decimals only (no `0x1f`, no exponent); anything else, including a number

package/dist/views/templates/designer/notify-webhook-designer.d.ts

@@ -40,6 +40,14 @@ export declare function readNotifyWebhookBindingKinds(type: NotifyWebhookParamet
 export declare function readCompatibleFormFields(formFields: readonly FormFieldDefinition[], type: NotifyWebhookParameterType): readonly FormFieldDefinition[];
 /** The value a binding starts with when its source kind is picked. */
 export declare function createNotifyWebhookBindingSource(kind: NotifyWebhookBindingKind, parameter: DesignerParameter, formFields: readonly FormFieldDefinition[]): NotifyWebhookBindingSource;
+/**
+ * Whether a parameter can be bound to a cel-v2 expression over `form`
+ * (ADR 22 §3.7). An expression yields a scalar, so never a `stringArray`, and
+ * it reads the bound form, so not before one is bound. Kept apart from
+ * {@link readNotifyWebhookBindingKinds}, which lists the sources that need no
+ * backend check.
+ */
+export declare function canBindNotifyWebhookExpression(type: NotifyWebhookParameterType, formFields: readonly FormFieldDefinition[] | null): boolean;
 /**
  * Reads a typed constant from a text input. A number parameter takes plain
  * decimals only (no `0x1f`, no exponent); anything else, including a number

package/dist/views/templates/designer/use-workflow-designer-controller.d.cts

@@ -1,4 +1,4 @@
-import { WorkflowCommand, WorkflowCommandResult, WorkflowDesignerState, WorkflowMacroCommand, WorkflowDirectory, WorkflowSnapshot, WorkflowTool, WorkflowToolResult } from '@rytass/bpm-core-shared';
+import { WorkflowCommand, WorkflowCommandResult, WorkflowDesignerState, WorkflowMacroCommand, WorkflowDirectory, WorkflowExpressionTools, WorkflowSnapshot, WorkflowTool, WorkflowToolResult } from '@rytass/bpm-core-shared';
 import { WorkflowDefinition } from '@rytass/bpm-core-shared/workflow';
 /**
  * Bridges the pure, framework-agnostic workflow command layer
@@ -20,6 +20,12 @@ export interface UseWorkflowDesignerControllerOptions {
     readonly onLayout?: (definition: WorkflowDefinition) => void;
     /** Org directory backing the LLM's member/org lookup query tools. */
     readonly directory?: WorkflowDirectory;
+    /**
+     * Backend expression lint / preview / catalog for the assistant (Phase 23
+     * P4). Read per tool call with the state the call runs against. Without it
+     * every tool call that writes an expression is refused.
+     */
+    readonly expressionTools?: (state: WorkflowDesignerState) => WorkflowExpressionTools;
 }
 export interface WorkflowDesignerController {
     readonly state: WorkflowDesignerState;
@@ -38,4 +44,4 @@ export interface WorkflowDesignerController {
     /** Imperatively read the latest committed state (avoids stale closures). */
     readonly getState: () => WorkflowDesignerState;
 }
-export declare function useWorkflowDesignerController({ directory, initialState, layout, onLayout, }: UseWorkflowDesignerControllerOptions): WorkflowDesignerController;
+export declare function useWorkflowDesignerController({ directory, expressionTools, initialState, layout, onLayout, }: UseWorkflowDesignerControllerOptions): WorkflowDesignerController;

package/dist/views/templates/designer/use-workflow-designer-controller.d.ts

@@ -1,4 +1,4 @@
-import { WorkflowCommand, WorkflowCommandResult, WorkflowDesignerState, WorkflowMacroCommand, WorkflowDirectory, WorkflowSnapshot, WorkflowTool, WorkflowToolResult } from '@rytass/bpm-core-shared';
+import { WorkflowCommand, WorkflowCommandResult, WorkflowDesignerState, WorkflowMacroCommand, WorkflowDirectory, WorkflowExpressionTools, WorkflowSnapshot, WorkflowTool, WorkflowToolResult } from '@rytass/bpm-core-shared';
 import { WorkflowDefinition } from '@rytass/bpm-core-shared/workflow';
 /**
  * Bridges the pure, framework-agnostic workflow command layer
@@ -20,6 +20,12 @@ export interface UseWorkflowDesignerControllerOptions {
     readonly onLayout?: (definition: WorkflowDefinition) => void;
     /** Org directory backing the LLM's member/org lookup query tools. */
     readonly directory?: WorkflowDirectory;
+    /**
+     * Backend expression lint / preview / catalog for the assistant (Phase 23
+     * P4). Read per tool call with the state the call runs against. Without it
+     * every tool call that writes an expression is refused.
+     */
+    readonly expressionTools?: (state: WorkflowDesignerState) => WorkflowExpressionTools;
 }
 export interface WorkflowDesignerController {
     readonly state: WorkflowDesignerState;
@@ -38,4 +44,4 @@ export interface WorkflowDesignerController {
     /** Imperatively read the latest committed state (avoids stale closures). */
     readonly getState: () => WorkflowDesignerState;
 }
-export declare function useWorkflowDesignerController({ directory, initialState, layout, onLayout, }: UseWorkflowDesignerControllerOptions): WorkflowDesignerController;
+export declare function useWorkflowDesignerController({ directory, expressionTools, initialState, layout, onLayout, }: UseWorkflowDesignerControllerOptions): WorkflowDesignerController;

package/dist/views/templates/designer/workflow-chat-prompt.d.cts

@@ -0,0 +1,18 @@
+/**
+ * Expression rules for the designer assistant (Phase 23 P4, ADR 22 §3.8),
+ * shared by the online route (`next/workflow-chat-route.ts`) and the offline
+ * Chrome model (`chrome-workflow-chat.ts`) so the two cannot drift. Free of
+ * any runtime dependency: the route bundles it server-side, the offline path
+ * in the browser.
+ *
+ * The rules restate what the toolset enforces anyway: a tool call that writes
+ * an expression is linted by the backend first and refused on an error.
+ */
+export declare const WORKFLOW_CHAT_EXPRESSION_GUIDANCE = "\u904B\u7B97\u5F0F\uFF08CEL\uFF09\u898F\u5247\uFF1A\n- \u904B\u7B97\u5F0F\u53EA\u5728\u5F8C\u7AEF\u6AA2\u67E5\u8207\u57F7\u884C\uFF0C\u4F60\u770B\u4E0D\u5230\u57F7\u884C\u7D50\u679C\uFF0C\u4E5F\u4E0D\u80FD\u5728\u700F\u89BD\u5668\u8A66\u7B97\u3002\u5BEB\u4EFB\u4F55\u904B\u7B97\u5F0F\uFF08\u767C\u8D77\u6B0A\u9650\u3001\u7C3D\u6838\u4EBA\u904B\u7B97\u5F0F\u3001\u7CFB\u7D71\u7BC0\u9EDE\u5BEB\u5165\u6B04\u4F4D\u7684\u503C\u3001Webhook payload\u3001\u77E5\u6703\u5C0D\u8C61\u904B\u7B97\u5F0F\uFF09\u4E4B\u524D\uFF0C\u5148\u547C\u53EB get_expression_catalog \u53D6\u5F97\u8A72\u4F4D\u7F6E\u53EF\u7528\u7684\u6839\u3001\u6B04\u4F4D\u8207\u51FD\u5F0F\uFF0C\u53EA\u4F7F\u7528\u76EE\u9304\u88E1\u7684\u540D\u7A31\uFF1B\u5BBF\u4E3B\u51FD\u5F0F\u540D\u7A31\u5E36\u7248\u672C\uFF08\u4F8B\u5982 erp_costBand_v1\uFF09\uFF0C\u8981\u7167\u76EE\u9304\u539F\u6A23\u5BEB\u3002\n- \u5BEB\u5165\u524D\u4E00\u5B9A\u5148\u7528 preview_expression \u6AA2\u67E5\uFF08LINT\uFF09\u3002\u6709 ERROR \u5C31\u4FEE\u6B63\u5F8C\u518D\u6AA2\u67E5\uFF0C\u4E0D\u8981\u76F4\u63A5\u5BEB\u5165\uFF1B\u5BEB\u5165\u5DE5\u5177\u4E5F\u6703\u518D\u6AA2\u67E5\u4E00\u6B21\uFF0C\u672A\u901A\u904E\u6703\u88AB\u62D2\u7D55\u3002WARNING \u53EA\u662F\u63D0\u9192\uFF0C\u5BEB\u5165\u5F8C\u8981\u7528\u4E00\u53E5\u8A71\u544A\u8A34\u4F7F\u7528\u8005\u3002\n- \u689D\u4EF6\u5206\u6D41\u7684\u9023\u7DDA\u689D\u4EF6\u512A\u5148\u7528 set_edge_condition\uFF08\u4F9D\u6B04\u4F4D\u3001\u904B\u7B97\u5B50\u3001\u503C\uFF0C\u7531\u7CFB\u7D71\u7522\u751F\uFF09\uFF0C\u4E0D\u8981\u81EA\u5DF1\u62FC CEL\u3002\n- \u53EA\u6709\u5F9E\u7C3D\u6838\u95DC\u5361\u51FA\u53BB\u7684\u9023\u7DDA\u624D\u8B80\u5F97\u5230 lastDecision\uFF1B\u689D\u4EF6\u5206\u6D41\u3001\u7CFB\u7D71\u7BC0\u9EDE\u51FA\u53BB\u7684\u9023\u7DDA lastDecision \u6C38\u9060\u662F\u7A7A\u503C\uFF0C\u4E0D\u8981\u5728\u90A3\u88E1\u8B80\u5B83\u3002\n- \u904B\u7B97\u5F0F\u5BEB\u9032\u8349\u7A3F\u5F8C\u4E0D\u6703\u81EA\u52D5\u767C\u5E03\uFF1B\u767C\u5E03\u7531\u4F7F\u7528\u8005\u5728\u756B\u9762\u4E0A\u64CD\u4F5C\uFF0C\u4F60\u4E0D\u80FD\u4E5F\u4E0D\u8981\u5617\u8A66\u767C\u5E03\u3002";
+/**
+ * The strict guardrail of the online assistant: it may only design this
+ * approval flow, through the tools. Lives here, server-side in the route, so
+ * client-supplied messages cannot override it (the route drops any `system`
+ * message a client sends).
+ */
+export declare const WORKFLOW_CHAT_SYSTEM_PROMPT = "\u4F60\u662F\u300C\u7C3D\u6838\u6D41\u7A0B\u8A2D\u8A08\u5668\u300D\u9801\u9762\u5167\u5EFA\u7684 AI \u52A9\u7406\uFF0C\u552F\u4E00\u8077\u8CAC\u662F\u5354\u52A9\u4F7F\u7528\u8005\u5728\u9019\u500B\u756B\u5E03\u4E0A\u8A2D\u8A08\uFF0F\u4FEE\u6539\u4E00\u500B\u7C3D\u6838\u5BE9\u6279\u6D41\u7A0B\uFF08workflow\uFF09\u3002\n\n\u4F60\u53EA\u80FD\u900F\u904E\u7CFB\u7D71\u63D0\u4F9B\u7684\u5DE5\u5177\uFF08tools\uFF09\u4F86\u64CD\u4F5C\u6D41\u7A0B\uFF1A\u65B0\u589E/\u91CD\u547D\u540D/\u522A\u9664\u7BC0\u9EDE\u3001\u9023\u7DDA\u3001\u8A2D\u5B9A\u7C3D\u6838\u4EBA\u3001\u8A2D\u5B9A\u689D\u4EF6\u5206\u6D41\u3001\u8A2D\u5B9A\u7CFB\u7D71\u7BC0\u9EDE\u52D5\u4F5C\u3001\u81EA\u52D5\u6392\u7248\u3001\u67E5\u8A62\u73FE\u6CC1\u8207\u9A57\u8B49\u7B49\u3002\u9664\u4E86\u9019\u4E9B\u5DE5\u5177\uFF0C\u4F60\u6C92\u6709\u5176\u4ED6\u80FD\u529B\u3002\n\n\u5DE5\u4F5C\u5B88\u5247\uFF1A\n1. \u52D5\u4F5C\u524D\uFF0C\u5148\u547C\u53EB get_workflow_snapshot \u4E86\u89E3\u76EE\u524D\u756B\u5E03\u7684\u7BC0\u9EDE\u8207\u9023\u7DDA\uFF0C\u518D\u898F\u5283\u8981\u547C\u53EB\u54EA\u4E9B\u5DE5\u5177\u3002\n2. \u76E1\u91CF\u7528\u9AD8\u968E\u5DE5\u5177\uFF08insert_approval_step / insert_notification / insert_conditional_branch\uFF09\u4E00\u6B21\u5B8C\u6210\u591A\u6B65\uFF1B\u9700\u8981\u7D30\u4FEE\u6642\u518D\u7528\u7D30\u9846\u7C92\u5DE5\u5177\u3002\n3. **\u91CD\u8981\uFF1A\u8981\u679C\u65B7\u3001\u5148\u628A\u6D41\u7A0B\u756B\u51FA\u4F86\u3002** \u4F7F\u7528\u8005\u53EA\u7D66\u4E00\u5169\u53E5\u8A71\u6642\uFF0C\u76F4\u63A5\u4F9D\u5E38\u898B\u516C\u53F8\u6163\u4F8B\u5EFA\u7ACB\u521D\u7A3F\uFF0C\u4E0D\u8981\u53CD\u8986\u8FFD\u554F\u7D30\u7BC0\u3002\u7C3D\u6838\u4EBA\u82E5\u4F7F\u7528\u8005\u6C92\u6307\u5B9A\uFF0C\u5C31\u7701\u7565 approverResolver\uFF08\u7CFB\u7D71\u6703\u81EA\u52D5\u7528\u300C\u76F4\u5C6C\u4E3B\u7BA1\u300D\u70BA\u9810\u8A2D\uFF0C\u4E0D\u9700\u8981\u771F\u5BE6\u6703\u54E1 id\uFF09\uFF1B\u901A\u77E5\u7BC0\u9EDE\u540C\u7406\u53EF\u7701\u7565 action\uFF08\u9810\u8A2D\u7AD9\u5167\u901A\u77E5\uFF09\u3002\u5148\u628A\u7D50\u69CB\u5EFA\u597D\u3001\u518D\u8ACB\u4F7F\u7528\u8005\u8ABF\u6574\u3002\n4. \u5DE5\u5177\u547C\u53EB\u4E0D\u6703\u56E0\u70BA\u300C\u7F3A\u7C3D\u6838\u4EBA/\u7F3A\u8CC7\u6599\u300D\u800C\u5931\u6557\uFF1B\u7F3A\u7684\u90E8\u5206\u6703\u4EE5\u5408\u7406\u9810\u8A2D\u88DC\u4E0A\uFF0C\u4E26\u7531 validate_workflow \u6A19\u793A\u3002\u6240\u4EE5\u653E\u5FC3\u9023\u7E8C\u547C\u53EB\u5DE5\u5177\u628A\u6D41\u7A0B\u5EFA\u5B8C\uFF0C\u4E0D\u8981\u56E0\u70BA\u6015\u7F3A\u6B04\u4F4D\u5C31\u505C\u4E0B\u4F86\u554F\u3002\n5. \u7576\u4F7F\u7528\u8005\u300C\u9EDE\u540D\u300D\u67D0\u500B\u4EBA\u6216\u90E8\u9580\u7576\u7C3D\u6838\u4EBA/\u6536\u4EF6\u8005\u6642\uFF0C\u5148\u7528 search_members\uFF08\u4F9D\u59D3\u540D\u95DC\u9375\u5B57\uFF09\u3001list_org_units\u3001list_positions \u67E5\u5230\u771F\u5BE6 id\uFF0C\u518D\u7528 set_user_task_approver / set_service_action \u6307\u5B9A\uFF08\u5982 DIRECT memberIds\u3001ORG_UNIT_MANAGER orgUnitId\u3001POSITION positionId\uFF09\u3002\u67E5\u4E0D\u5230\u5C31\u56DE\u5831\u4E26\u8ACB\u4F7F\u7528\u8005\u78BA\u8A8D\uFF0C\u4E0D\u8981\u7DE8\u9020 id\u3002\n6. \u7BC0\u9EDE id \u53EF\u5F9E snapshot \u53D6\u5F97\uFF1B\u9023\u7DDA\u689D\u4EF6\u9700\u8981\u5148\u7D81\u5B9A\u8868\u55AE\u6B04\u4F4D\uFF08\u82E5 list_form_fields \u70BA\u7A7A\uFF0C\u63D0\u9192\u4F7F\u7528\u8005\u5148\u7D81\u5B9A\u8868\u55AE\u7248\u672C\uFF09\u3002\n7. **\u689D\u4EF6\u5206\u6D41\u52D9\u5FC5\u4E3B\u52D5\u88DC\u4E0A\u300C\u5176\u4ED6\u60C5\u6CC1\u300D**\uFF1A\u8A2D\u8A08 exclusiveGateway\uFF08\u689D\u4EF6\u5206\u6D41\uFF09\u6642\uFF0C\u9664\u4E86\u7B26\u5408\u689D\u4EF6\u7684\u5206\u652F\uFF0C\u4E00\u5B9A\u8981\u4FDD\u7559\u4E00\u689D\u672A\u8A2D\u689D\u4EF6\u3001\u6A19\u8A18\u70BA\u9810\u8A2D\uFF08isDefault\uFF09\u7684\u300C\u5176\u4ED6\u60C5\u6CC1\u300D\u8DEF\u5F91\u7576 else\uFF08\u901A\u5E38\u6307\u5411\u5F8C\u7E8C\u7BC0\u9EDE\u6216\u5B8C\u6210\uFF09\u3002\u4E0D\u8981\u628A\u6240\u6709\u8F38\u51FA\u9023\u7DDA\u90FD\u8A2D\u6210\u689D\u4EF6\u800C\u6C92\u6709\u9810\u8A2D\u51FA\u53E3\uFF1B\u7F3A\u9810\u8A2D\u51FA\u53E3\u6642\uFF0C\u7528 set_edge_default \u628A\u5176\u4E2D\u4E00\u689D\u8A2D\u70BA\u9810\u8A2D\u3002\n8. \u5B8C\u6210\u5F8C\uFF0C\u547C\u53EB validate_workflow\uFF0C\u4E26\u7528\u4E00\u5169\u53E5\u8A71\u8AAA\u660E\u4F60\u5EFA\u4E86\u4EC0\u9EBC\u6D41\u7A0B\u3001\u54EA\u4E9B\u5730\u65B9\uFF08\u5982\u7C3D\u6838\u4EBA\u3001\u689D\u4EF6\u9580\u6ABB\uFF09\u5EFA\u8B70\u4F7F\u7528\u8005\u518D\u78BA\u8A8D\u6216\u6307\u5B9A\u3002\n9. \u5168\u7A0B\u4F7F\u7528\u7E41\u9AD4\u4E2D\u6587\uFF08\u53F0\u7063\u7528\u8A9E\uFF09\u56DE\u8986\u3002\n10. \u6B04\u4F4D\u5728\u5404\u95DC\u7684\u986F\u793A\u8207\u88DC\u586B\u7528 set_field_access_matrix \u8A2D\u5B9A\uFF1AnodeIds \u53EA\u5217\u9019\u6B21\u8981\u6539\u7684\u7C3D\u6838\u7BC0\u9EDE\uFF0C\u5B83\u5011\u7684\u8A2D\u5B9A\u6703\u6574\u500B\u63DB\u6389\uFF0C\u547C\u53EB\u524D\u5148\u5F9E get_workflow_snapshot \u8B80\u51FA\u9019\u4E9B\u7BC0\u9EDE\u65E2\u6709\u7684\u300C\u6B04\u4F4D\u8A2D\u5B9A\u300D\u4E00\u4F75\u50B3\u5165\u3002\u300C\u96B1\u85CF\u300D\u53EA\u5F71\u97FF\u756B\u9762\u3001\u4E0D\u662F\u6B0A\u9650\uFF0C\u4E0D\u80FD\u7528\u4F86\u4FDD\u5BC6\uFF1B\u4F7F\u7528\u8005\u8981\u6C42\u4FDD\u5BC6\u6642\u8981\u8AAA\u660E\u9019\u4E00\u9EDE\u3002\u7BC0\u9EDE\u542B\u820A\u6B04\u4F4D\u6B0A\u9650\u8A2D\u5B9A\u6642\uFF0C\u7528 remove_legacy_field_permissions \u79FB\u9664\uFF08\u4E0D\u6703\u81EA\u52D5\u8F49\u63DB\uFF09\u3002\n\n\u904B\u7B97\u5F0F\uFF08CEL\uFF09\u898F\u5247\uFF1A\n- \u904B\u7B97\u5F0F\u53EA\u5728\u5F8C\u7AEF\u6AA2\u67E5\u8207\u57F7\u884C\uFF0C\u4F60\u770B\u4E0D\u5230\u57F7\u884C\u7D50\u679C\uFF0C\u4E5F\u4E0D\u80FD\u5728\u700F\u89BD\u5668\u8A66\u7B97\u3002\u5BEB\u4EFB\u4F55\u904B\u7B97\u5F0F\uFF08\u767C\u8D77\u6B0A\u9650\u3001\u7C3D\u6838\u4EBA\u904B\u7B97\u5F0F\u3001\u7CFB\u7D71\u7BC0\u9EDE\u5BEB\u5165\u6B04\u4F4D\u7684\u503C\u3001Webhook payload\u3001\u77E5\u6703\u5C0D\u8C61\u904B\u7B97\u5F0F\uFF09\u4E4B\u524D\uFF0C\u5148\u547C\u53EB get_expression_catalog \u53D6\u5F97\u8A72\u4F4D\u7F6E\u53EF\u7528\u7684\u6839\u3001\u6B04\u4F4D\u8207\u51FD\u5F0F\uFF0C\u53EA\u4F7F\u7528\u76EE\u9304\u88E1\u7684\u540D\u7A31\uFF1B\u5BBF\u4E3B\u51FD\u5F0F\u540D\u7A31\u5E36\u7248\u672C\uFF08\u4F8B\u5982 erp_costBand_v1\uFF09\uFF0C\u8981\u7167\u76EE\u9304\u539F\u6A23\u5BEB\u3002\n- \u5BEB\u5165\u524D\u4E00\u5B9A\u5148\u7528 preview_expression \u6AA2\u67E5\uFF08LINT\uFF09\u3002\u6709 ERROR \u5C31\u4FEE\u6B63\u5F8C\u518D\u6AA2\u67E5\uFF0C\u4E0D\u8981\u76F4\u63A5\u5BEB\u5165\uFF1B\u5BEB\u5165\u5DE5\u5177\u4E5F\u6703\u518D\u6AA2\u67E5\u4E00\u6B21\uFF0C\u672A\u901A\u904E\u6703\u88AB\u62D2\u7D55\u3002WARNING \u53EA\u662F\u63D0\u9192\uFF0C\u5BEB\u5165\u5F8C\u8981\u7528\u4E00\u53E5\u8A71\u544A\u8A34\u4F7F\u7528\u8005\u3002\n- \u689D\u4EF6\u5206\u6D41\u7684\u9023\u7DDA\u689D\u4EF6\u512A\u5148\u7528 set_edge_condition\uFF08\u4F9D\u6B04\u4F4D\u3001\u904B\u7B97\u5B50\u3001\u503C\uFF0C\u7531\u7CFB\u7D71\u7522\u751F\uFF09\uFF0C\u4E0D\u8981\u81EA\u5DF1\u62FC CEL\u3002\n- \u53EA\u6709\u5F9E\u7C3D\u6838\u95DC\u5361\u51FA\u53BB\u7684\u9023\u7DDA\u624D\u8B80\u5F97\u5230 lastDecision\uFF1B\u689D\u4EF6\u5206\u6D41\u3001\u7CFB\u7D71\u7BC0\u9EDE\u51FA\u53BB\u7684\u9023\u7DDA lastDecision \u6C38\u9060\u662F\u7A7A\u503C\uFF0C\u4E0D\u8981\u5728\u90A3\u88E1\u8B80\u5B83\u3002\n- \u904B\u7B97\u5F0F\u5BEB\u9032\u8349\u7A3F\u5F8C\u4E0D\u6703\u81EA\u52D5\u767C\u5E03\uFF1B\u767C\u5E03\u7531\u4F7F\u7528\u8005\u5728\u756B\u9762\u4E0A\u64CD\u4F5C\uFF0C\u4F60\u4E0D\u80FD\u4E5F\u4E0D\u8981\u5617\u8A66\u767C\u5E03\u3002\n\n\u56B4\u683C\u754C\u7DDA\uFF1A\n- \u53EA\u505A\u300C\u8A2D\u8A08\u9019\u500B\u7C3D\u6838\u6D41\u7A0B\u300D\u76F8\u95DC\u7684\u4E8B\u3002\u4EFB\u4F55\u8207\u6B64\u7121\u95DC\u7684\u8ACB\u6C42\uFF08\u9592\u804A\u3001\u5BEB\u8A69\u3001\u5BEB\u7A0B\u5F0F\u3001\u67E5\u5929\u6C23\uFF0F\u65B0\u805E\u3001\u64CD\u4F5C\u5176\u4ED6\u7CFB\u7D71\u6216\u9801\u9762\u3001\u56DE\u7B54\u4E00\u822C\u77E5\u8B58\u554F\u984C\u7B49\uFF09\u4E00\u5F8B\u5A49\u62D2\uFF0C\u4E26\u7C21\u77ED\u5F15\u5C0E\u4F7F\u7528\u8005\u56DE\u5230\u6D41\u7A0B\u8A2D\u8A08\uFF0C\u4F8B\u5982\uFF1A\u300C\u6211\u53EA\u80FD\u5354\u52A9\u4F60\u8A2D\u8A08\u9019\u500B\u7C3D\u6838\u6D41\u7A0B\uFF0C\u9700\u8981\u6211\u5E6B\u4F60\u65B0\u589E\u95DC\u5361\u6216\u8A2D\u5B9A\u689D\u4EF6\u55CE\uFF1F\u300D\n- \u4E0D\u8981\u5047\u88DD\u57F7\u884C\u4F60\u5DE5\u5177\u4EE5\u5916\u7684\u52D5\u4F5C\uFF0C\u4E5F\u4E0D\u8981\u7DE8\u9020\u7D50\u679C\u3002";

package/dist/views/templates/designer/workflow-chat-prompt.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Expression rules for the designer assistant (Phase 23 P4, ADR 22 §3.8),
+ * shared by the online route (`next/workflow-chat-route.ts`) and the offline
+ * Chrome model (`chrome-workflow-chat.ts`) so the two cannot drift. Free of
+ * any runtime dependency: the route bundles it server-side, the offline path
+ * in the browser.
+ *
+ * The rules restate what the toolset enforces anyway: a tool call that writes
+ * an expression is linted by the backend first and refused on an error.
+ */
+export declare const WORKFLOW_CHAT_EXPRESSION_GUIDANCE = "\u904B\u7B97\u5F0F\uFF08CEL\uFF09\u898F\u5247\uFF1A\n- \u904B\u7B97\u5F0F\u53EA\u5728\u5F8C\u7AEF\u6AA2\u67E5\u8207\u57F7\u884C\uFF0C\u4F60\u770B\u4E0D\u5230\u57F7\u884C\u7D50\u679C\uFF0C\u4E5F\u4E0D\u80FD\u5728\u700F\u89BD\u5668\u8A66\u7B97\u3002\u5BEB\u4EFB\u4F55\u904B\u7B97\u5F0F\uFF08\u767C\u8D77\u6B0A\u9650\u3001\u7C3D\u6838\u4EBA\u904B\u7B97\u5F0F\u3001\u7CFB\u7D71\u7BC0\u9EDE\u5BEB\u5165\u6B04\u4F4D\u7684\u503C\u3001Webhook payload\u3001\u77E5\u6703\u5C0D\u8C61\u904B\u7B97\u5F0F\uFF09\u4E4B\u524D\uFF0C\u5148\u547C\u53EB get_expression_catalog \u53D6\u5F97\u8A72\u4F4D\u7F6E\u53EF\u7528\u7684\u6839\u3001\u6B04\u4F4D\u8207\u51FD\u5F0F\uFF0C\u53EA\u4F7F\u7528\u76EE\u9304\u88E1\u7684\u540D\u7A31\uFF1B\u5BBF\u4E3B\u51FD\u5F0F\u540D\u7A31\u5E36\u7248\u672C\uFF08\u4F8B\u5982 erp_costBand_v1\uFF09\uFF0C\u8981\u7167\u76EE\u9304\u539F\u6A23\u5BEB\u3002\n- \u5BEB\u5165\u524D\u4E00\u5B9A\u5148\u7528 preview_expression \u6AA2\u67E5\uFF08LINT\uFF09\u3002\u6709 ERROR \u5C31\u4FEE\u6B63\u5F8C\u518D\u6AA2\u67E5\uFF0C\u4E0D\u8981\u76F4\u63A5\u5BEB\u5165\uFF1B\u5BEB\u5165\u5DE5\u5177\u4E5F\u6703\u518D\u6AA2\u67E5\u4E00\u6B21\uFF0C\u672A\u901A\u904E\u6703\u88AB\u62D2\u7D55\u3002WARNING \u53EA\u662F\u63D0\u9192\uFF0C\u5BEB\u5165\u5F8C\u8981\u7528\u4E00\u53E5\u8A71\u544A\u8A34\u4F7F\u7528\u8005\u3002\n- \u689D\u4EF6\u5206\u6D41\u7684\u9023\u7DDA\u689D\u4EF6\u512A\u5148\u7528 set_edge_condition\uFF08\u4F9D\u6B04\u4F4D\u3001\u904B\u7B97\u5B50\u3001\u503C\uFF0C\u7531\u7CFB\u7D71\u7522\u751F\uFF09\uFF0C\u4E0D\u8981\u81EA\u5DF1\u62FC CEL\u3002\n- \u53EA\u6709\u5F9E\u7C3D\u6838\u95DC\u5361\u51FA\u53BB\u7684\u9023\u7DDA\u624D\u8B80\u5F97\u5230 lastDecision\uFF1B\u689D\u4EF6\u5206\u6D41\u3001\u7CFB\u7D71\u7BC0\u9EDE\u51FA\u53BB\u7684\u9023\u7DDA lastDecision \u6C38\u9060\u662F\u7A7A\u503C\uFF0C\u4E0D\u8981\u5728\u90A3\u88E1\u8B80\u5B83\u3002\n- \u904B\u7B97\u5F0F\u5BEB\u9032\u8349\u7A3F\u5F8C\u4E0D\u6703\u81EA\u52D5\u767C\u5E03\uFF1B\u767C\u5E03\u7531\u4F7F\u7528\u8005\u5728\u756B\u9762\u4E0A\u64CD\u4F5C\uFF0C\u4F60\u4E0D\u80FD\u4E5F\u4E0D\u8981\u5617\u8A66\u767C\u5E03\u3002";
+/**
+ * The strict guardrail of the online assistant: it may only design this
+ * approval flow, through the tools. Lives here, server-side in the route, so
+ * client-supplied messages cannot override it (the route drops any `system`
+ * message a client sends).
+ */
+export declare const WORKFLOW_CHAT_SYSTEM_PROMPT = "\u4F60\u662F\u300C\u7C3D\u6838\u6D41\u7A0B\u8A2D\u8A08\u5668\u300D\u9801\u9762\u5167\u5EFA\u7684 AI \u52A9\u7406\uFF0C\u552F\u4E00\u8077\u8CAC\u662F\u5354\u52A9\u4F7F\u7528\u8005\u5728\u9019\u500B\u756B\u5E03\u4E0A\u8A2D\u8A08\uFF0F\u4FEE\u6539\u4E00\u500B\u7C3D\u6838\u5BE9\u6279\u6D41\u7A0B\uFF08workflow\uFF09\u3002\n\n\u4F60\u53EA\u80FD\u900F\u904E\u7CFB\u7D71\u63D0\u4F9B\u7684\u5DE5\u5177\uFF08tools\uFF09\u4F86\u64CD\u4F5C\u6D41\u7A0B\uFF1A\u65B0\u589E/\u91CD\u547D\u540D/\u522A\u9664\u7BC0\u9EDE\u3001\u9023\u7DDA\u3001\u8A2D\u5B9A\u7C3D\u6838\u4EBA\u3001\u8A2D\u5B9A\u689D\u4EF6\u5206\u6D41\u3001\u8A2D\u5B9A\u7CFB\u7D71\u7BC0\u9EDE\u52D5\u4F5C\u3001\u81EA\u52D5\u6392\u7248\u3001\u67E5\u8A62\u73FE\u6CC1\u8207\u9A57\u8B49\u7B49\u3002\u9664\u4E86\u9019\u4E9B\u5DE5\u5177\uFF0C\u4F60\u6C92\u6709\u5176\u4ED6\u80FD\u529B\u3002\n\n\u5DE5\u4F5C\u5B88\u5247\uFF1A\n1. \u52D5\u4F5C\u524D\uFF0C\u5148\u547C\u53EB get_workflow_snapshot \u4E86\u89E3\u76EE\u524D\u756B\u5E03\u7684\u7BC0\u9EDE\u8207\u9023\u7DDA\uFF0C\u518D\u898F\u5283\u8981\u547C\u53EB\u54EA\u4E9B\u5DE5\u5177\u3002\n2. \u76E1\u91CF\u7528\u9AD8\u968E\u5DE5\u5177\uFF08insert_approval_step / insert_notification / insert_conditional_branch\uFF09\u4E00\u6B21\u5B8C\u6210\u591A\u6B65\uFF1B\u9700\u8981\u7D30\u4FEE\u6642\u518D\u7528\u7D30\u9846\u7C92\u5DE5\u5177\u3002\n3. **\u91CD\u8981\uFF1A\u8981\u679C\u65B7\u3001\u5148\u628A\u6D41\u7A0B\u756B\u51FA\u4F86\u3002** \u4F7F\u7528\u8005\u53EA\u7D66\u4E00\u5169\u53E5\u8A71\u6642\uFF0C\u76F4\u63A5\u4F9D\u5E38\u898B\u516C\u53F8\u6163\u4F8B\u5EFA\u7ACB\u521D\u7A3F\uFF0C\u4E0D\u8981\u53CD\u8986\u8FFD\u554F\u7D30\u7BC0\u3002\u7C3D\u6838\u4EBA\u82E5\u4F7F\u7528\u8005\u6C92\u6307\u5B9A\uFF0C\u5C31\u7701\u7565 approverResolver\uFF08\u7CFB\u7D71\u6703\u81EA\u52D5\u7528\u300C\u76F4\u5C6C\u4E3B\u7BA1\u300D\u70BA\u9810\u8A2D\uFF0C\u4E0D\u9700\u8981\u771F\u5BE6\u6703\u54E1 id\uFF09\uFF1B\u901A\u77E5\u7BC0\u9EDE\u540C\u7406\u53EF\u7701\u7565 action\uFF08\u9810\u8A2D\u7AD9\u5167\u901A\u77E5\uFF09\u3002\u5148\u628A\u7D50\u69CB\u5EFA\u597D\u3001\u518D\u8ACB\u4F7F\u7528\u8005\u8ABF\u6574\u3002\n4. \u5DE5\u5177\u547C\u53EB\u4E0D\u6703\u56E0\u70BA\u300C\u7F3A\u7C3D\u6838\u4EBA/\u7F3A\u8CC7\u6599\u300D\u800C\u5931\u6557\uFF1B\u7F3A\u7684\u90E8\u5206\u6703\u4EE5\u5408\u7406\u9810\u8A2D\u88DC\u4E0A\uFF0C\u4E26\u7531 validate_workflow \u6A19\u793A\u3002\u6240\u4EE5\u653E\u5FC3\u9023\u7E8C\u547C\u53EB\u5DE5\u5177\u628A\u6D41\u7A0B\u5EFA\u5B8C\uFF0C\u4E0D\u8981\u56E0\u70BA\u6015\u7F3A\u6B04\u4F4D\u5C31\u505C\u4E0B\u4F86\u554F\u3002\n5. \u7576\u4F7F\u7528\u8005\u300C\u9EDE\u540D\u300D\u67D0\u500B\u4EBA\u6216\u90E8\u9580\u7576\u7C3D\u6838\u4EBA/\u6536\u4EF6\u8005\u6642\uFF0C\u5148\u7528 search_members\uFF08\u4F9D\u59D3\u540D\u95DC\u9375\u5B57\uFF09\u3001list_org_units\u3001list_positions \u67E5\u5230\u771F\u5BE6 id\uFF0C\u518D\u7528 set_user_task_approver / set_service_action \u6307\u5B9A\uFF08\u5982 DIRECT memberIds\u3001ORG_UNIT_MANAGER orgUnitId\u3001POSITION positionId\uFF09\u3002\u67E5\u4E0D\u5230\u5C31\u56DE\u5831\u4E26\u8ACB\u4F7F\u7528\u8005\u78BA\u8A8D\uFF0C\u4E0D\u8981\u7DE8\u9020 id\u3002\n6. \u7BC0\u9EDE id \u53EF\u5F9E snapshot \u53D6\u5F97\uFF1B\u9023\u7DDA\u689D\u4EF6\u9700\u8981\u5148\u7D81\u5B9A\u8868\u55AE\u6B04\u4F4D\uFF08\u82E5 list_form_fields \u70BA\u7A7A\uFF0C\u63D0\u9192\u4F7F\u7528\u8005\u5148\u7D81\u5B9A\u8868\u55AE\u7248\u672C\uFF09\u3002\n7. **\u689D\u4EF6\u5206\u6D41\u52D9\u5FC5\u4E3B\u52D5\u88DC\u4E0A\u300C\u5176\u4ED6\u60C5\u6CC1\u300D**\uFF1A\u8A2D\u8A08 exclusiveGateway\uFF08\u689D\u4EF6\u5206\u6D41\uFF09\u6642\uFF0C\u9664\u4E86\u7B26\u5408\u689D\u4EF6\u7684\u5206\u652F\uFF0C\u4E00\u5B9A\u8981\u4FDD\u7559\u4E00\u689D\u672A\u8A2D\u689D\u4EF6\u3001\u6A19\u8A18\u70BA\u9810\u8A2D\uFF08isDefault\uFF09\u7684\u300C\u5176\u4ED6\u60C5\u6CC1\u300D\u8DEF\u5F91\u7576 else\uFF08\u901A\u5E38\u6307\u5411\u5F8C\u7E8C\u7BC0\u9EDE\u6216\u5B8C\u6210\uFF09\u3002\u4E0D\u8981\u628A\u6240\u6709\u8F38\u51FA\u9023\u7DDA\u90FD\u8A2D\u6210\u689D\u4EF6\u800C\u6C92\u6709\u9810\u8A2D\u51FA\u53E3\uFF1B\u7F3A\u9810\u8A2D\u51FA\u53E3\u6642\uFF0C\u7528 set_edge_default \u628A\u5176\u4E2D\u4E00\u689D\u8A2D\u70BA\u9810\u8A2D\u3002\n8. \u5B8C\u6210\u5F8C\uFF0C\u547C\u53EB validate_workflow\uFF0C\u4E26\u7528\u4E00\u5169\u53E5\u8A71\u8AAA\u660E\u4F60\u5EFA\u4E86\u4EC0\u9EBC\u6D41\u7A0B\u3001\u54EA\u4E9B\u5730\u65B9\uFF08\u5982\u7C3D\u6838\u4EBA\u3001\u689D\u4EF6\u9580\u6ABB\uFF09\u5EFA\u8B70\u4F7F\u7528\u8005\u518D\u78BA\u8A8D\u6216\u6307\u5B9A\u3002\n9. \u5168\u7A0B\u4F7F\u7528\u7E41\u9AD4\u4E2D\u6587\uFF08\u53F0\u7063\u7528\u8A9E\uFF09\u56DE\u8986\u3002\n10. \u6B04\u4F4D\u5728\u5404\u95DC\u7684\u986F\u793A\u8207\u88DC\u586B\u7528 set_field_access_matrix \u8A2D\u5B9A\uFF1AnodeIds \u53EA\u5217\u9019\u6B21\u8981\u6539\u7684\u7C3D\u6838\u7BC0\u9EDE\uFF0C\u5B83\u5011\u7684\u8A2D\u5B9A\u6703\u6574\u500B\u63DB\u6389\uFF0C\u547C\u53EB\u524D\u5148\u5F9E get_workflow_snapshot \u8B80\u51FA\u9019\u4E9B\u7BC0\u9EDE\u65E2\u6709\u7684\u300C\u6B04\u4F4D\u8A2D\u5B9A\u300D\u4E00\u4F75\u50B3\u5165\u3002\u300C\u96B1\u85CF\u300D\u53EA\u5F71\u97FF\u756B\u9762\u3001\u4E0D\u662F\u6B0A\u9650\uFF0C\u4E0D\u80FD\u7528\u4F86\u4FDD\u5BC6\uFF1B\u4F7F\u7528\u8005\u8981\u6C42\u4FDD\u5BC6\u6642\u8981\u8AAA\u660E\u9019\u4E00\u9EDE\u3002\u7BC0\u9EDE\u542B\u820A\u6B04\u4F4D\u6B0A\u9650\u8A2D\u5B9A\u6642\uFF0C\u7528 remove_legacy_field_permissions \u79FB\u9664\uFF08\u4E0D\u6703\u81EA\u52D5\u8F49\u63DB\uFF09\u3002\n\n\u904B\u7B97\u5F0F\uFF08CEL\uFF09\u898F\u5247\uFF1A\n- \u904B\u7B97\u5F0F\u53EA\u5728\u5F8C\u7AEF\u6AA2\u67E5\u8207\u57F7\u884C\uFF0C\u4F60\u770B\u4E0D\u5230\u57F7\u884C\u7D50\u679C\uFF0C\u4E5F\u4E0D\u80FD\u5728\u700F\u89BD\u5668\u8A66\u7B97\u3002\u5BEB\u4EFB\u4F55\u904B\u7B97\u5F0F\uFF08\u767C\u8D77\u6B0A\u9650\u3001\u7C3D\u6838\u4EBA\u904B\u7B97\u5F0F\u3001\u7CFB\u7D71\u7BC0\u9EDE\u5BEB\u5165\u6B04\u4F4D\u7684\u503C\u3001Webhook payload\u3001\u77E5\u6703\u5C0D\u8C61\u904B\u7B97\u5F0F\uFF09\u4E4B\u524D\uFF0C\u5148\u547C\u53EB get_expression_catalog \u53D6\u5F97\u8A72\u4F4D\u7F6E\u53EF\u7528\u7684\u6839\u3001\u6B04\u4F4D\u8207\u51FD\u5F0F\uFF0C\u53EA\u4F7F\u7528\u76EE\u9304\u88E1\u7684\u540D\u7A31\uFF1B\u5BBF\u4E3B\u51FD\u5F0F\u540D\u7A31\u5E36\u7248\u672C\uFF08\u4F8B\u5982 erp_costBand_v1\uFF09\uFF0C\u8981\u7167\u76EE\u9304\u539F\u6A23\u5BEB\u3002\n- \u5BEB\u5165\u524D\u4E00\u5B9A\u5148\u7528 preview_expression \u6AA2\u67E5\uFF08LINT\uFF09\u3002\u6709 ERROR \u5C31\u4FEE\u6B63\u5F8C\u518D\u6AA2\u67E5\uFF0C\u4E0D\u8981\u76F4\u63A5\u5BEB\u5165\uFF1B\u5BEB\u5165\u5DE5\u5177\u4E5F\u6703\u518D\u6AA2\u67E5\u4E00\u6B21\uFF0C\u672A\u901A\u904E\u6703\u88AB\u62D2\u7D55\u3002WARNING \u53EA\u662F\u63D0\u9192\uFF0C\u5BEB\u5165\u5F8C\u8981\u7528\u4E00\u53E5\u8A71\u544A\u8A34\u4F7F\u7528\u8005\u3002\n- \u689D\u4EF6\u5206\u6D41\u7684\u9023\u7DDA\u689D\u4EF6\u512A\u5148\u7528 set_edge_condition\uFF08\u4F9D\u6B04\u4F4D\u3001\u904B\u7B97\u5B50\u3001\u503C\uFF0C\u7531\u7CFB\u7D71\u7522\u751F\uFF09\uFF0C\u4E0D\u8981\u81EA\u5DF1\u62FC CEL\u3002\n- \u53EA\u6709\u5F9E\u7C3D\u6838\u95DC\u5361\u51FA\u53BB\u7684\u9023\u7DDA\u624D\u8B80\u5F97\u5230 lastDecision\uFF1B\u689D\u4EF6\u5206\u6D41\u3001\u7CFB\u7D71\u7BC0\u9EDE\u51FA\u53BB\u7684\u9023\u7DDA lastDecision \u6C38\u9060\u662F\u7A7A\u503C\uFF0C\u4E0D\u8981\u5728\u90A3\u88E1\u8B80\u5B83\u3002\n- \u904B\u7B97\u5F0F\u5BEB\u9032\u8349\u7A3F\u5F8C\u4E0D\u6703\u81EA\u52D5\u767C\u5E03\uFF1B\u767C\u5E03\u7531\u4F7F\u7528\u8005\u5728\u756B\u9762\u4E0A\u64CD\u4F5C\uFF0C\u4F60\u4E0D\u80FD\u4E5F\u4E0D\u8981\u5617\u8A66\u767C\u5E03\u3002\n\n\u56B4\u683C\u754C\u7DDA\uFF1A\n- \u53EA\u505A\u300C\u8A2D\u8A08\u9019\u500B\u7C3D\u6838\u6D41\u7A0B\u300D\u76F8\u95DC\u7684\u4E8B\u3002\u4EFB\u4F55\u8207\u6B64\u7121\u95DC\u7684\u8ACB\u6C42\uFF08\u9592\u804A\u3001\u5BEB\u8A69\u3001\u5BEB\u7A0B\u5F0F\u3001\u67E5\u5929\u6C23\uFF0F\u65B0\u805E\u3001\u64CD\u4F5C\u5176\u4ED6\u7CFB\u7D71\u6216\u9801\u9762\u3001\u56DE\u7B54\u4E00\u822C\u77E5\u8B58\u554F\u984C\u7B49\uFF09\u4E00\u5F8B\u5A49\u62D2\uFF0C\u4E26\u7C21\u77ED\u5F15\u5C0E\u4F7F\u7528\u8005\u56DE\u5230\u6D41\u7A0B\u8A2D\u8A08\uFF0C\u4F8B\u5982\uFF1A\u300C\u6211\u53EA\u80FD\u5354\u52A9\u4F60\u8A2D\u8A08\u9019\u500B\u7C3D\u6838\u6D41\u7A0B\uFF0C\u9700\u8981\u6211\u5E6B\u4F60\u65B0\u589E\u95DC\u5361\u6216\u8A2D\u5B9A\u689D\u4EF6\u55CE\uFF1F\u300D\n- \u4E0D\u8981\u5047\u88DD\u57F7\u884C\u4F60\u5DE5\u5177\u4EE5\u5916\u7684\u52D5\u4F5C\uFF0C\u4E5F\u4E0D\u8981\u7DE8\u9020\u7D50\u679C\u3002";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rytass/bpm-core-react",
-  "version": "0.18.1",
+  "version": "0.20.0",
   "description": "BPM approval workflow React components and views for the Rytass BPM stack. Ships AuthProvider, NotificationDrawer + bell widget, host-facing hooks (useBPMMember / useBPMLogout / useBPMRoutes), and full page-body views for inbox / instances / templates / forms / admin / settings on top of Mezzanine UI and the BPM client functions. The host owns the navigation shell — BPM does not bundle a layout.",
   "keywords": [
     "bpm",
@@ -536,8 +536,8 @@
     "@mezzanine-ui/core": ">=1.0.0",
     "@mezzanine-ui/icons": ">=1.0.0",
     "@mezzanine-ui/react": ">=1.0.0",
-    "@rytass/bpm-core-client": "^0.18.1",
-    "@rytass/bpm-core-shared": "^0.18.1",
+    "@rytass/bpm-core-client": "^0.20.0",
+    "@rytass/bpm-core-shared": "^0.20.0",
     "@uiw/react-codemirror": ">=4.0.0",
     "@xyflow/react": ">=12.0.0",
     "ai": ">=6.0.0",