@rytass/bpm-core-shared 0.17.5 → 0.17.7

package/src/lib/field-access-matrix.d.ts

@@ -0,0 +1,101 @@
+import { FieldAccessIssue, UserTaskFillConflict } from './field-access-lint';
+import type { FormDefinitionSchema, FormFieldDefinition } from './form';
+import type { FieldAccessEntry, WorkflowDefinition } from './workflow';
+/**
+ * What a cell of the field access matrix offers. `DEFAULT` writes nothing for
+ * the node, so the field falls back to the derived value; the other four each
+ * stand for one `FieldAccessEntry` (`fill` other than `NONE` is always shown,
+ * since a hidden fill cannot be published).
+ */
+export type FieldAccessChoice = 'DEFAULT' | 'FILL_OPTIONAL' | 'FILL_REQUIRED' | 'HIDE' | 'SHOW';
+export declare const FIELD_ACCESS_CHOICES: readonly FieldAccessChoice[];
+/**
+ * What a viewer at one place in the flow gets for a field. `FILL` is the
+ * applicant's own field; `NOT_SHOWN` is an approver-filled field nobody has
+ * filled in yet, which BPM leaves off the screen; `HIDDEN` is a node that
+ * chose to hide the field (display only, never a permission).
+ */
+export type FieldAccessEffective = 'FILL' | 'FILL_OPTIONAL' | 'FILL_REQUIRED' | 'HIDDEN' | 'NOT_SHOWN' | 'READ_ONLY';
+/**
+ * Why a cell reads the way it does: the node lists the field (`EXPLICIT`), an
+ * ordinary field every node sees read-only (`APPLICANT_FIELD`), an
+ * approver-filled field a fill node before this one has filled in
+ * (`FILLED_EARLIER`), or one no such node has yet (`NOT_YET_FILLED`).
+ */
+export type FieldAccessCellReason = 'APPLICANT_FIELD' | 'EXPLICIT' | 'FILLED_EARLIER' | 'NOT_YET_FILLED';
+/** A hint the matrix shows that does not block publishing. */
+export interface FieldAccessNotice {
+    readonly code: 'shownBeforeFilled';
+    readonly fieldKey: string;
+    readonly nodeId: string;
+}
+export interface FieldAccessMatrixColumn {
+    /**
+     * The label of the edge from an exclusive gateway straight into the node,
+     * so nodes on mutually exclusive branches can say which branch they are on.
+     */
+    readonly branchLabel: string | null;
+    /** Why the node cannot let its approver fill fields in. */
+    readonly fillConflicts: readonly UserTaskFillConflict[];
+    /** Node-level issues: the legacy key, an invalid list, fill conflicts. */
+    readonly issues: readonly FieldAccessIssue[];
+    readonly label: string;
+    readonly nodeId: string;
+    /** 1-based position among the user tasks, in flow order (關卡 N). */
+    readonly stage: number;
+}
+export interface FieldAccessMatrixCell {
+    readonly choice: FieldAccessChoice;
+    /** The fill choices this cell cannot take, for the node or the field. */
+    readonly disabledChoices: readonly FieldAccessChoice[];
+    readonly effective: FieldAccessEffective;
+    readonly explicit: FieldAccessEntry | null;
+    readonly nodeId: string;
+    readonly reason: FieldAccessCellReason;
+}
+export interface FieldAccessMatrixRow {
+    readonly applicant: {
+        readonly effective: Extract<FieldAccessEffective, 'FILL' | 'NOT_SHOWN'>;
+    };
+    /** One per column, in column order. */
+    readonly cells: readonly FieldAccessMatrixCell[];
+    readonly field: FormFieldDefinition;
+    readonly fieldKey: string;
+    /** Why the form will not let an approver fill this field in. */
+    readonly fillBlockers: readonly FieldAccessIssue[];
+    /** The user tasks that fill this field in, in column order. */
+    readonly fillNodeIds: readonly string[];
+    /** Publish-blocking issues that name this field. */
+    readonly issues: readonly FieldAccessIssue[];
+    readonly notices: readonly FieldAccessNotice[];
+}
+export interface FieldAccessMatrix {
+    readonly columns: readonly FieldAccessMatrixColumn[];
+    /**
+     * Every publish-blocking field access issue of the definition, the same set
+     * the publish lint reports apart from its early-read rule, in lint order.
+     */
+    readonly issues: readonly FieldAccessIssue[];
+    readonly rows: readonly FieldAccessMatrixRow[];
+}
+export declare function readFieldAccessChoice(entry: FieldAccessEntry | null): FieldAccessChoice;
+/** The entry a choice writes for the field, or `null` for `DEFAULT`. */
+export declare function readFieldAccessEntryForChoice(fieldKey: string, choice: FieldAccessChoice): FieldAccessEntry | null;
+/**
+ * The designer's field access matrix: one row per top-level form field, one
+ * column per user task in flow order, and in each cell the node's explicit
+ * entry or, without one, what the engine's `resolveFieldAccess` would give a
+ * viewer at that node.
+ *
+ * The engine reveals an approver-filled field once a fill node has produced a
+ * task in the case; at design time that reads as "a fill node earlier in the
+ * column order reaches this one". A fill node on another branch, or one only
+ * reached by looping back, does not count, so the cell shows the more
+ * cautious `NOT_SHOWN`.
+ *
+ * The issues come from the same `field-access-lint` rules the publish lint
+ * runs, so the matrix and publishing never disagree; only the early-read rule
+ * (`approverFilledFieldReadEarly`), which reads every node's expressions, is
+ * left to publishing.
+ */
+export declare function readFieldAccessMatrix(definition: WorkflowDefinition, schema: FormDefinitionSchema | null): FieldAccessMatrix;

package/src/lib/field-access-matrix.js

@@ -0,0 +1,213 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FIELD_ACCESS_CHOICES = void 0;
+exports.readFieldAccessChoice = readFieldAccessChoice;
+exports.readFieldAccessEntryForChoice = readFieldAccessEntryForChoice;
+exports.readFieldAccessMatrix = readFieldAccessMatrix;
+const field_access_lint_1 = require("./field-access-lint");
+const field_access_1 = require("./field-access");
+exports.FIELD_ACCESS_CHOICES = [
+    'DEFAULT',
+    'SHOW',
+    'HIDE',
+    'FILL_OPTIONAL',
+    'FILL_REQUIRED',
+];
+const FILL_CHOICES = [
+    'FILL_OPTIONAL',
+    'FILL_REQUIRED',
+];
+function readFieldAccessChoice(entry) {
+    if (entry === null) {
+        return 'DEFAULT';
+    }
+    if (entry.fill === 'REQUIRED') {
+        return 'FILL_REQUIRED';
+    }
+    if (entry.fill === 'OPTIONAL') {
+        return 'FILL_OPTIONAL';
+    }
+    return entry.display === 'HIDE' ? 'HIDE' : 'SHOW';
+}
+const CHOICE_FILLS = {
+    FILL_OPTIONAL: 'OPTIONAL',
+    FILL_REQUIRED: 'REQUIRED',
+    HIDE: 'NONE',
+    SHOW: 'NONE',
+};
+/** The entry a choice writes for the field, or `null` for `DEFAULT`. */
+function readFieldAccessEntryForChoice(fieldKey, choice) {
+    return choice === 'DEFAULT'
+        ? null
+        : {
+            display: choice === 'HIDE' ? 'HIDE' : 'SHOW',
+            fieldKey,
+            fill: CHOICE_FILLS[choice],
+        };
+}
+/**
+ * The user tasks in flow order: a topological walk from the nodes nothing
+ * leads into, ties broken by definition order. A cycle (a loop back for
+ * rework) has no topological order, so the walk then takes the earliest
+ * remaining node, in definition order, that a placed node leads into —
+ * entering the loop where the flow does — and carries on.
+ */
+function readFlowOrderedUserTasks(definition) {
+    const nodeIds = definition.nodes.map((node) => node.id);
+    const known = new Set(nodeIds);
+    const edges = definition.edges.filter((edge) => known.has(edge.source) &&
+        known.has(edge.target) &&
+        edge.source !== edge.target);
+    const walk = (remaining, ordered) => {
+        var _a, _b;
+        if (remaining.length === 0) {
+            return ordered;
+        }
+        const left = new Set(remaining);
+        const placed = new Set(ordered);
+        const next = (_b = (_a = remaining.find((nodeId) => !edges.some((edge) => edge.target === nodeId && left.has(edge.source)))) !== null && _a !== void 0 ? _a : remaining.find((nodeId) => edges.some((edge) => edge.target === nodeId && placed.has(edge.source)))) !== null && _b !== void 0 ? _b : remaining[0];
+        return walk(remaining.filter((nodeId) => nodeId !== next), [...ordered, next]);
+    };
+    const order = walk([...new Set(nodeIds)], []);
+    const userTasks = definition.nodes.filter((node) => node.type === 'userTask');
+    const firstById = new Map([...userTasks]
+        .reverse()
+        .map((node) => [node.id, node]));
+    return order.flatMap((nodeId) => {
+        const node = firstById.get(nodeId);
+        return node === undefined ? [] : [node];
+    });
+}
+function readBranchLabel(definition, nodeId) {
+    const gatewayIds = new Set(definition.nodes
+        .filter((node) => node.type === 'exclusiveGateway')
+        .map((node) => node.id));
+    const label = definition.edges
+        .filter((edge) => edge.target === nodeId && gatewayIds.has(edge.source))
+        .map((edge) => { var _a, _b, _c; return (_c = (_b = (_a = edge.data) === null || _a === void 0 ? void 0 : _a.label) === null || _b === void 0 ? void 0 : _b.trim()) !== null && _c !== void 0 ? _c : ''; })
+        .find((value) => value !== '');
+    return label !== null && label !== void 0 ? label : null;
+}
+function readExplicitEffective(entry) {
+    if (entry.fill === 'REQUIRED') {
+        return 'FILL_REQUIRED';
+    }
+    if (entry.fill === 'OPTIONAL') {
+        return 'FILL_OPTIONAL';
+    }
+    return entry.display === 'HIDE' ? 'HIDDEN' : 'READ_ONLY';
+}
+/**
+ * The designer's field access matrix: one row per top-level form field, one
+ * column per user task in flow order, and in each cell the node's explicit
+ * entry or, without one, what the engine's `resolveFieldAccess` would give a
+ * viewer at that node.
+ *
+ * The engine reveals an approver-filled field once a fill node has produced a
+ * task in the case; at design time that reads as "a fill node earlier in the
+ * column order reaches this one". A fill node on another branch, or one only
+ * reached by looping back, does not count, so the cell shows the more
+ * cautious `NOT_SHOWN`.
+ *
+ * The issues come from the same `field-access-lint` rules the publish lint
+ * runs, so the matrix and publishing never disagree; only the early-read rule
+ * (`approverFilledFieldReadEarly`), which reads every node's expressions, is
+ * left to publishing.
+ */
+function readFieldAccessMatrix(definition, schema) {
+    var _a;
+    const userTasks = readFlowOrderedUserTasks(definition);
+    const issues = [
+        ...definition.nodes
+            .filter((node) => node.type === 'userTask')
+            .flatMap((node) => (0, field_access_lint_1.readNodeFieldAccessIssues)(node)),
+        ...(0, field_access_lint_1.readDefinitionFieldAccessIssues)(definition),
+        ...(0, field_access_lint_1.readFormFieldAccessIssues)(definition, schema),
+    ];
+    const columns = userTasks.map((node, index) => ({
+        branchLabel: readBranchLabel(definition, node.id),
+        fillConflicts: (0, field_access_lint_1.readUserTaskFillConflicts)(node),
+        issues: (0, field_access_lint_1.readNodeFieldAccessIssues)(node).filter((issue) => issue.fieldKeys.length === 0),
+        label: node.data.label,
+        nodeId: node.id,
+        stage: index + 1,
+    }));
+    const reachable = new Map(userTasks.map((node) => [
+        node.id,
+        (0, field_access_lint_1.readReachableWorkflowNodeIds)(definition.edges, [node.id]),
+    ]));
+    const accessByNode = new Map(userTasks.map((node) => [
+        node.id,
+        new Map((0, field_access_1.readNodeFieldAccess)(node).map((entry) => [
+            entry.fieldKey,
+            entry,
+        ])),
+    ]));
+    const indexById = new Map(userTasks.map((node, index) => [node.id, index]));
+    const isFilledBefore = (fillNodeIds, nodeIndex) => fillNodeIds.some((fillNodeId) => {
+        var _a, _b, _c;
+        const fillIndex = (_a = indexById.get(fillNodeId)) !== null && _a !== void 0 ? _a : -1;
+        return (fillIndex < nodeIndex &&
+            ((_c = (_b = reachable.get(fillNodeId)) === null || _b === void 0 ? void 0 : _b.has(userTasks[nodeIndex].id)) !== null && _c !== void 0 ? _c : false));
+    });
+    const rows = ((_a = schema === null || schema === void 0 ? void 0 : schema.fields) !== null && _a !== void 0 ? _a : []).map((field) => {
+        const { fieldKey } = field;
+        const fillNodeIds = userTasks
+            .filter((node) => (0, field_access_1.readNodeFillableFieldKeys)(node).has(fieldKey))
+            .map((node) => node.id);
+        const isApproverFilled = fillNodeIds.length > 0;
+        const fillBlockers = (0, field_access_lint_1.readFormFieldFillIssues)(field);
+        const fieldDisabledChoices = fillBlockers.length > 0
+            ? FILL_CHOICES
+            : field.type === 'boolean'
+                ? ['FILL_REQUIRED']
+                : [];
+        const cells = userTasks.map((node, index) => {
+            var _a, _b;
+            const explicit = (_b = (_a = accessByNode.get(node.id)) === null || _a === void 0 ? void 0 : _a.get(fieldKey)) !== null && _b !== void 0 ? _b : null;
+            const filledBefore = isFilledBefore(fillNodeIds, index);
+            const reason = explicit !== null
+                ? 'EXPLICIT'
+                : !isApproverFilled
+                    ? 'APPLICANT_FIELD'
+                    : filledBefore
+                        ? 'FILLED_EARLIER'
+                        : 'NOT_YET_FILLED';
+            return {
+                choice: readFieldAccessChoice(explicit),
+                disabledChoices: columns[index].fillConflicts.length > 0
+                    ? FILL_CHOICES
+                    : fieldDisabledChoices,
+                effective: explicit !== null
+                    ? readExplicitEffective(explicit)
+                    : reason === 'NOT_YET_FILLED'
+                        ? 'NOT_SHOWN'
+                        : 'READ_ONLY',
+                explicit,
+                nodeId: node.id,
+                reason,
+            };
+        });
+        return {
+            applicant: { effective: isApproverFilled ? 'NOT_SHOWN' : 'FILL' },
+            cells,
+            field,
+            fieldKey,
+            fillBlockers,
+            fillNodeIds,
+            issues: issues.filter((issue) => issue.fieldKeys.includes(fieldKey)),
+            notices: cells
+                .filter((cell, index) => isApproverFilled &&
+                cell.effective === 'READ_ONLY' &&
+                cell.reason === 'EXPLICIT' &&
+                !isFilledBefore(fillNodeIds, index))
+                .map((cell) => ({
+                code: 'shownBeforeFilled',
+                fieldKey,
+                nodeId: cell.nodeId,
+            })),
+        };
+    });
+    return { columns, issues, rows };
+}
+//# sourceMappingURL=field-access-matrix.js.map

package/src/lib/field-access-matrix.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"field-access-matrix.js","sourceRoot":"","sources":["../../../../../libs/shared/src/lib/field-access-matrix.ts"],"names":[],"mappings":";;;AA4HA,sDAgBC;AAYD,sEAWC;AA8GD,sDA2HC;AA5YD,2DAS6B;AAC7B,iDAAgF;AAkBnE,QAAA,oBAAoB,GAAiC;IAChE,SAAS;IACT,MAAM;IACN,MAAM;IACN,eAAe;IACf,eAAe;CAChB,CAAC;AAqFF,MAAM,YAAY,GAAiC;IACjD,eAAe;IACf,eAAe;CAChB,CAAC;AAEF,SAAgB,qBAAqB,CACnC,KAA8B;IAE9B,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC9B,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC9B,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,OAAO,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;AACpD,CAAC;AAED,MAAM,YAAY,GAEd;IACF,aAAa,EAAE,UAAU;IACzB,aAAa,EAAE,UAAU;IACzB,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;CACb,CAAC;AAEF,wEAAwE;AACxE,SAAgB,6BAA6B,CAC3C,QAAgB,EAChB,MAAyB;IAEzB,OAAO,MAAM,KAAK,SAAS;QACzB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC;YACE,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAC5C,QAAQ;YACR,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC;SAC3B,CAAC;AACR,CAAC;AAED;;;;;;GAMG;AACH,SAAS,wBAAwB,CAC/B,UAA8B;IAE9B,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CACnC,CAAC,IAAI,EAAE,EAAE,CACP,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;QACtB,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;QACtB,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAC9B,CAAC;IACF,MAAM,IAAI,GAAG,CACX,SAA4B,EAC5B,OAA0B,EACP,EAAE;;QACrB,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,IAAI,GACR,MAAA,MAAA,SAAS,CAAC,IAAI,CACZ,CAAC,MAAM,EAAE,EAAE,CACT,CAAC,KAAK,CAAC,IAAI,CACT,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAC1D,CACJ,mCACD,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CACxB,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CACxE,mCACD,SAAS,CAAC,CAAC,CAAC,CAAC;QAEf,OAAO,IAAI,CACT,SAAS,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC,EAC7C,CAAC,GAAG,OAAO,EAAE,IAAI,CAAC,CACnB,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CACvC,CAAC,IAAI,EAAwB,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,CACzD,CAAC;IACF,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,CAAC,GAAG,SAAS,CAAC;SACX,OAAO,EAAE;SACT,GAAG,CAAC,CAAC,IAAI,EAA0B,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAC1D,CAAC;IAEF,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;QAC9B,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEnC,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CACtB,UAA8B,EAC9B,MAAc;IAEd,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,UAAU,CAAC,KAAK;SACb,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,kBAAkB,CAAC;SAClD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAC1B,CAAC;IACF,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK;SAC3B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;SACvE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,mBAAC,OAAA,MAAA,MAAA,MAAA,IAAI,CAAC,IAAI,0CAAE,KAAK,0CAAE,IAAI,EAAE,mCAAI,EAAE,CAAA,EAAA,CAAC;SAC7C,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;IAEjC,OAAO,KAAK,aAAL,KAAK,cAAL,KAAK,GAAI,IAAI,CAAC;AACvB,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAuB;IACpD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC9B,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC9B,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,OAAO,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAgB,qBAAqB,CACnC,UAA8B,EAC9B,MAAmC;;IAEnC,MAAM,SAAS,GAAG,wBAAwB,CAAC,UAAU,CAAC,CAAC;IACvD,MAAM,MAAM,GAAgC;QAC1C,GAAG,UAAU,CAAC,KAAK;aAChB,MAAM,CAAC,CAAC,IAAI,EAAwB,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC;aAChE,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,6CAAyB,EAAC,IAAI,CAAC,CAAC;QACrD,GAAG,IAAA,mDAA+B,EAAC,UAAU,CAAC;QAC9C,GAAG,IAAA,6CAAyB,EAAC,UAAU,EAAE,MAAM,CAAC;KACjD,CAAC;IACF,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAA2B,EAAE,CAAC,CAAC;QACvE,WAAW,EAAE,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC;QACjD,aAAa,EAAE,IAAA,6CAAyB,EAAC,IAAI,CAAC;QAC9C,MAAM,EAAE,IAAA,6CAAyB,EAAC,IAAI,CAAC,CAAC,MAAM,CAC5C,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,CACxC;QACD,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;QACtB,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,KAAK,EAAE,KAAK,GAAG,CAAC;KACjB,CAAC,CAAC,CAAC;IACJ,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAiC,EAAE,CAAC;QACrD,IAAI,CAAC,EAAE;QACP,IAAA,gDAA4B,EAAC,UAAU,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;KAC1D,CAAC,CACH,CAAC;IACF,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAmD,EAAE,CAAC;QACvE,IAAI,CAAC,EAAE;QACP,IAAI,GAAG,CACL,IAAA,kCAAmB,EAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAA8B,EAAE,CAAC;YACnE,KAAK,CAAC,QAAQ;YACd,KAAK;SACN,CAAC,CACH;KACF,CAAC,CACH,CAAC;IACF,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAoB,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CACnE,CAAC;IACF,MAAM,cAAc,GAAG,CACrB,WAA8B,EAC9B,SAAiB,EACR,EAAE,CACX,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE;;QAC9B,MAAM,SAAS,GAAG,MAAA,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,mCAAI,CAAC,CAAC,CAAC;QAElD,OAAO,CACL,SAAS,GAAG,SAAS;YACrB,CAAC,MAAA,MAAA,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,0CAAE,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,mCAAI,KAAK,CAAC,CACnE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEL,MAAM,IAAI,GAAG,CAAC,MAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,MAAM,mCAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAwB,EAAE;QACtE,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;QAC3B,MAAM,WAAW,GAAG,SAAS;aAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,wCAAyB,EAAC,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;aAC/D,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1B,MAAM,gBAAgB,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC;QAChD,MAAM,YAAY,GAAG,IAAA,2CAAuB,EAAC,KAAK,CAAC,CAAC;QACpD,MAAM,oBAAoB,GACxB,YAAY,CAAC,MAAM,GAAG,CAAC;YACrB,CAAC,CAAC,YAAY;YACd,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS;gBACxB,CAAC,CAAC,CAAC,eAAe,CAAC;gBACnB,CAAC,CAAC,EAAE,CAAC;QACX,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAyB,EAAE;;YACjE,MAAM,QAAQ,GAAG,MAAA,MAAA,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,0CAAE,GAAG,CAAC,QAAQ,CAAC,mCAAI,IAAI,CAAC;YAClE,MAAM,YAAY,GAAG,cAAc,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YACxD,MAAM,MAAM,GACV,QAAQ,KAAK,IAAI;gBACf,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,CAAC,gBAAgB;oBACjB,CAAC,CAAC,iBAAiB;oBACnB,CAAC,CAAC,YAAY;wBACZ,CAAC,CAAC,gBAAgB;wBAClB,CAAC,CAAC,gBAAgB,CAAC;YAE3B,OAAO;gBACL,MAAM,EAAE,qBAAqB,CAAC,QAAQ,CAAC;gBACvC,eAAe,EACb,OAAO,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;oBACrC,CAAC,CAAC,YAAY;oBACd,CAAC,CAAC,oBAAoB;gBAC1B,SAAS,EACP,QAAQ,KAAK,IAAI;oBACf,CAAC,CAAC,qBAAqB,CAAC,QAAQ,CAAC;oBACjC,CAAC,CAAC,MAAM,KAAK,gBAAgB;wBAC3B,CAAC,CAAC,WAAW;wBACb,CAAC,CAAC,WAAW;gBACnB,QAAQ;gBACR,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,MAAM;aACP,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,OAAO;YACL,SAAS,EAAE,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE;YACjE,KAAK;YACL,KAAK;YACL,QAAQ;YACR,YAAY;YACZ,WAAW;YACX,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACpE,OAAO,EAAE,KAAK;iBACX,MAAM,CACL,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,gBAAgB;gBAChB,IAAI,CAAC,SAAS,KAAK,WAAW;gBAC9B,IAAI,CAAC,MAAM,KAAK,UAAU;gBAC1B,CAAC,cAAc,CAAC,WAAW,EAAE,KAAK,CAAC,CACtC;iBACA,GAAG,CAAC,CAAC,IAAI,EAAqB,EAAE,CAAC,CAAC;gBACjC,IAAI,EAAE,mBAAmB;gBACzB,QAAQ;gBACR,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC,CAAC;SACN,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACnC,CAAC"}

package/src/lib/field-access.d.ts

@@ -0,0 +1,63 @@
+import type { FieldAccessEntry, UserTaskNode, WorkflowDefinition } from './workflow';
+/** What a viewer may do with one top-level form field (`resolveFieldAccess`). */
+export interface ResolvedFieldAccess {
+    readonly editable: boolean;
+    readonly visible: boolean;
+}
+/**
+ * Reads `fieldAccess` off a user task without trusting its shape: saved drafts
+ * can hold anything, and no caller may throw because of one. A value that is
+ * not an array reads as `[]`; an entry that is not an object or has no
+ * non-empty `fieldKey` string is skipped; the first entry for a `fieldKey`
+ * wins, so every reader agrees on which one counts. An unknown `fill` reads as
+ * `NONE`, so a malformed entry never lets anyone write, and an unknown
+ * `display` reads as `SHOW`. The deprecated `fieldPermissions` is never read.
+ */
+export declare const readNodeFieldAccess: (node: UserTaskNode) => readonly FieldAccessEntry[];
+/**
+ * The top-level form field a field path addresses: `items.price` and
+ * `items[0]` both address `items`.
+ */
+export declare const readTopLevelFieldKey: (fieldPath: string) => string;
+/**
+ * The top-level form field a `SET_FORM_FIELD` `fieldPath` writes. The engine
+ * accepts an optional leading `form.` or `formData.` segment and trims each
+ * segment, so `form.amount` and ` amount ` both write `amount`.
+ */
+export declare const readFormFieldPathTopLevelKey: (fieldPath: string) => string;
+export declare const readNodeFillableFieldKeys: (node: UserTaskNode) => ReadonlySet<string>;
+export declare const readNodeRequiredFieldKeys: (node: UserTaskNode) => ReadonlySet<string>;
+/** Every field some user task lets its approver fill in. */
+export declare const readApproverFilledFieldKeys: (definition: WorkflowDefinition) => ReadonlySet<string>;
+/**
+ * The approver-filled fields that have been revealed to the applicant: those a
+ * user task that already produced a non-ad-hoc task lets its approver fill in.
+ * Ids that are missing or point to a non-user task are skipped.
+ */
+export declare const readRevealedFieldKeys: (definition: WorkflowDefinition, nodeIdsWithNonAdhocTask: Iterable<string>) => ReadonlySet<string>;
+/**
+ * Resolves what a viewer may see and edit per top-level form field. Rules, the
+ * first match wins:
+ *
+ * 1. a non-ad-hoc task at a user task that lists the field: as configured;
+ * 2. an ad-hoc task at a user task that lists the field: the configured
+ *    visibility, never editable;
+ * 3. a field some user task fills in: read-only once revealed, hidden before;
+ * 4. any other field: visible, read-only.
+ */
+export declare const resolveFieldAccess: (input: {
+    readonly definition: WorkflowDefinition;
+    readonly fieldKeys: readonly string[];
+    readonly isAdhocTask: boolean;
+    readonly nodeId: string | null;
+    readonly revealedFieldKeys: ReadonlySet<string>;
+}) => Readonly<Record<string, ResolvedFieldAccess>>;
+export declare const omitFormDataKeys: (formData: Readonly<Record<string, unknown>>, keys: ReadonlySet<string>) => Readonly<Record<string, unknown>>;
+/**
+ * For each key: the stored value when `stored` has it as an own property,
+ * otherwise the key is left out of the result entirely (a submitted value for
+ * it is dropped, never trusted).
+ */
+export declare const overlayStoredFormDataKeys: (submitted: Readonly<Record<string, unknown>>, stored: Readonly<Record<string, unknown>>, keys: ReadonlySet<string>) => Readonly<Record<string, unknown>>;
+/** `undefined`, `null`, a blank string and an empty array are empty. */
+export declare const isFormDataValueEmpty: (value: unknown) => boolean;

package/src/lib/field-access.js

@@ -0,0 +1,140 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isFormDataValueEmpty = exports.overlayStoredFormDataKeys = exports.omitFormDataKeys = exports.resolveFieldAccess = exports.readRevealedFieldKeys = exports.readApproverFilledFieldKeys = exports.readNodeRequiredFieldKeys = exports.readNodeFillableFieldKeys = exports.readFormFieldPathTopLevelKey = exports.readTopLevelFieldKey = exports.readNodeFieldAccess = void 0;
+const hasOwn = (target, key) => Object.prototype.hasOwnProperty.call(target, key);
+const isRecord = (value) => typeof value === 'object' && value !== null && !Array.isArray(value);
+const isUserTaskNode = (node) => node.type === 'userTask';
+const findUserTaskNode = (definition, nodeId) => definition.nodes.find((node) => isUserTaskNode(node) && node.id === nodeId);
+/**
+ * Reads `fieldAccess` off a user task without trusting its shape: saved drafts
+ * can hold anything, and no caller may throw because of one. A value that is
+ * not an array reads as `[]`; an entry that is not an object or has no
+ * non-empty `fieldKey` string is skipped; the first entry for a `fieldKey`
+ * wins, so every reader agrees on which one counts. An unknown `fill` reads as
+ * `NONE`, so a malformed entry never lets anyone write, and an unknown
+ * `display` reads as `SHOW`. The deprecated `fieldPermissions` is never read.
+ */
+const readNodeFieldAccess = (node) => {
+    const raw = node.data.fieldAccess;
+    if (!Array.isArray(raw)) {
+        return [];
+    }
+    return raw.reduce((collected, entry) => {
+        if (!isRecord(entry) ||
+            typeof entry['fieldKey'] !== 'string' ||
+            entry['fieldKey'] === '' ||
+            collected.some((existing) => existing.fieldKey === entry['fieldKey'])) {
+            return collected;
+        }
+        const fill = entry['fill'];
+        return [
+            ...collected,
+            {
+                display: entry['display'] === 'HIDE' ? 'HIDE' : 'SHOW',
+                fieldKey: entry['fieldKey'],
+                fill: fill === 'OPTIONAL' || fill === 'REQUIRED' ? fill : 'NONE',
+            },
+        ];
+    }, []);
+};
+exports.readNodeFieldAccess = readNodeFieldAccess;
+/**
+ * The top-level form field a field path addresses: `items.price` and
+ * `items[0]` both address `items`.
+ */
+const readTopLevelFieldKey = (fieldPath) => fieldPath.split('.')[0].split('[')[0];
+exports.readTopLevelFieldKey = readTopLevelFieldKey;
+/**
+ * The top-level form field a `SET_FORM_FIELD` `fieldPath` writes. The engine
+ * accepts an optional leading `form.` or `formData.` segment and trims each
+ * segment, so `form.amount` and ` amount ` both write `amount`.
+ */
+const readFormFieldPathTopLevelKey = (fieldPath) => {
+    const segments = fieldPath
+        .split('.')
+        .map((segment) => segment.trim())
+        .filter(Boolean);
+    const fieldSegments = segments[0] === 'form' || segments[0] === 'formData'
+        ? segments.slice(1)
+        : segments;
+    return (0, exports.readTopLevelFieldKey)(fieldSegments.join('.'));
+};
+exports.readFormFieldPathTopLevelKey = readFormFieldPathTopLevelKey;
+const readNodeFillableFieldKeys = (node) => new Set((0, exports.readNodeFieldAccess)(node)
+    .filter((entry) => entry.fill !== 'NONE')
+    .map((entry) => entry.fieldKey));
+exports.readNodeFillableFieldKeys = readNodeFillableFieldKeys;
+const readNodeRequiredFieldKeys = (node) => new Set((0, exports.readNodeFieldAccess)(node)
+    .filter((entry) => entry.fill === 'REQUIRED')
+    .map((entry) => entry.fieldKey));
+exports.readNodeRequiredFieldKeys = readNodeRequiredFieldKeys;
+/** Every field some user task lets its approver fill in. */
+const readApproverFilledFieldKeys = (definition) => new Set(definition.nodes
+    .filter(isUserTaskNode)
+    .flatMap((node) => [...(0, exports.readNodeFillableFieldKeys)(node)]));
+exports.readApproverFilledFieldKeys = readApproverFilledFieldKeys;
+/**
+ * The approver-filled fields that have been revealed to the applicant: those a
+ * user task that already produced a non-ad-hoc task lets its approver fill in.
+ * Ids that are missing or point to a non-user task are skipped.
+ */
+const readRevealedFieldKeys = (definition, nodeIdsWithNonAdhocTask) => new Set([...new Set(nodeIdsWithNonAdhocTask)].flatMap((nodeId) => {
+    const node = findUserTaskNode(definition, nodeId);
+    return node === undefined ? [] : [...(0, exports.readNodeFillableFieldKeys)(node)];
+}));
+exports.readRevealedFieldKeys = readRevealedFieldKeys;
+/**
+ * Resolves what a viewer may see and edit per top-level form field. Rules, the
+ * first match wins:
+ *
+ * 1. a non-ad-hoc task at a user task that lists the field: as configured;
+ * 2. an ad-hoc task at a user task that lists the field: the configured
+ *    visibility, never editable;
+ * 3. a field some user task fills in: read-only once revealed, hidden before;
+ * 4. any other field: visible, read-only.
+ */
+const resolveFieldAccess = (input) => {
+    const node = input.nodeId === null
+        ? undefined
+        : findUserTaskNode(input.definition, input.nodeId);
+    const listed = new Map((node === undefined ? [] : (0, exports.readNodeFieldAccess)(node)).map((entry) => [entry.fieldKey, entry]));
+    const approverFilled = (0, exports.readApproverFilledFieldKeys)(input.definition);
+    return Object.fromEntries(input.fieldKeys.map((fieldKey) => {
+        const entry = listed.get(fieldKey);
+        if (entry !== undefined) {
+            return [
+                fieldKey,
+                {
+                    editable: !input.isAdhocTask && entry.fill !== 'NONE',
+                    visible: entry.display === 'SHOW',
+                },
+            ];
+        }
+        if (approverFilled.has(fieldKey)) {
+            return [
+                fieldKey,
+                { editable: false, visible: input.revealedFieldKeys.has(fieldKey) },
+            ];
+        }
+        return [fieldKey, { editable: false, visible: true }];
+    }));
+};
+exports.resolveFieldAccess = resolveFieldAccess;
+const omitFormDataKeys = (formData, keys) => Object.fromEntries(Object.entries(formData).filter(([key]) => !keys.has(key)));
+exports.omitFormDataKeys = omitFormDataKeys;
+/**
+ * For each key: the stored value when `stored` has it as an own property,
+ * otherwise the key is left out of the result entirely (a submitted value for
+ * it is dropped, never trusted).
+ */
+const overlayStoredFormDataKeys = (submitted, stored, keys) => (Object.assign(Object.assign({}, (0, exports.omitFormDataKeys)(submitted, keys)), Object.fromEntries([...keys]
+    .filter((key) => hasOwn(stored, key))
+    .map((key) => [key, stored[key]]))));
+exports.overlayStoredFormDataKeys = overlayStoredFormDataKeys;
+/** `undefined`, `null`, a blank string and an empty array are empty. */
+const isFormDataValueEmpty = (value) => value === undefined ||
+    value === null ||
+    (typeof value === 'string' && value.trim() === '') ||
+    (Array.isArray(value) && value.length === 0);
+exports.isFormDataValueEmpty = isFormDataValueEmpty;
+//# sourceMappingURL=field-access.js.map

package/src/lib/field-access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"field-access.js","sourceRoot":"","sources":["../../../../../libs/shared/src/lib/field-access.ts"],"names":[],"mappings":";;;AAYA,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,GAAW,EAAW,EAAE,CACtD,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAEpD,MAAM,QAAQ,GAAG,CAAC,KAAc,EAA8C,EAAE,CAC9E,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAEvE,MAAM,cAAc,GAAG,CAAC,IAEvB,EAAwB,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC;AAErD,MAAM,gBAAgB,GAAG,CACvB,UAA8B,EAC9B,MAAc,EACY,EAAE,CAC5B,UAAU,CAAC,KAAK,CAAC,IAAI,CACnB,CAAC,IAAI,EAAwB,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,KAAK,MAAM,CAC3E,CAAC;AAEJ;;;;;;;;GAQG;AACI,MAAM,mBAAmB,GAAG,CACjC,IAAkB,EACW,EAAE;IAC/B,MAAM,GAAG,GAAY,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC;IAE3C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,GAAG,CAAC,MAAM,CACf,CAAC,SAAS,EAAE,KAAc,EAAE,EAAE;QAC5B,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;YAChB,OAAO,KAAK,CAAC,UAAU,CAAC,KAAK,QAAQ;YACrC,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE;YACxB,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,UAAU,CAAC,CAAC,EACrE,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAE3B,OAAO;YACL,GAAG,SAAS;YACZ;gBACE,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;gBACtD,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC;gBAC3B,IAAI,EAAE,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;aACjE;SACF,CAAC;IACJ,CAAC,EACD,EAAE,CACH,CAAC;AACJ,CAAC,CAAC;AAjCW,QAAA,mBAAmB,uBAiC9B;AAEF;;;GAGG;AACI,MAAM,oBAAoB,GAAG,CAAC,SAAiB,EAAU,EAAE,CAChE,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAD3B,QAAA,oBAAoB,wBACO;AAExC;;;;GAIG;AACI,MAAM,4BAA4B,GAAG,CAAC,SAAiB,EAAU,EAAE;IACxE,MAAM,QAAQ,GAAG,SAAS;SACvB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;SAChC,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,MAAM,aAAa,GACjB,QAAQ,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,UAAU;QAClD,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QACnB,CAAC,CAAC,QAAQ,CAAC;IAEf,OAAO,IAAA,4BAAoB,EAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACvD,CAAC,CAAC;AAXW,QAAA,4BAA4B,gCAWvC;AAEK,MAAM,yBAAyB,GAAG,CACvC,IAAkB,EACG,EAAE,CACvB,IAAI,GAAG,CACL,IAAA,2BAAmB,EAAC,IAAI,CAAC;KACtB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC;KACxC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAClC,CAAC;AAPS,QAAA,yBAAyB,6BAOlC;AAEG,MAAM,yBAAyB,GAAG,CACvC,IAAkB,EACG,EAAE,CACvB,IAAI,GAAG,CACL,IAAA,2BAAmB,EAAC,IAAI,CAAC;KACtB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC;KAC5C,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAClC,CAAC;AAPS,QAAA,yBAAyB,6BAOlC;AAEJ,4DAA4D;AACrD,MAAM,2BAA2B,GAAG,CACzC,UAA8B,EACT,EAAE,CACvB,IAAI,GAAG,CACL,UAAU,CAAC,KAAK;KACb,MAAM,CAAC,cAAc,CAAC;KACtB,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,GAAG,IAAA,iCAAyB,EAAC,IAAI,CAAC,CAAC,CAAC,CAC3D,CAAC;AAPS,QAAA,2BAA2B,+BAOpC;AAEJ;;;;GAIG;AACI,MAAM,qBAAqB,GAAG,CACnC,UAA8B,EAC9B,uBAAyC,EACpB,EAAE,CACvB,IAAI,GAAG,CACL,CAAC,GAAG,IAAI,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;IACvD,MAAM,IAAI,GAAG,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAElD,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,IAAA,iCAAyB,EAAC,IAAI,CAAC,CAAC,CAAC;AACxE,CAAC,CAAC,CACH,CAAC;AAVS,QAAA,qBAAqB,yBAU9B;AAEJ;;;;;;;;;GASG;AACI,MAAM,kBAAkB,GAAG,CAAC,KAMlC,EAAiD,EAAE;IAClD,MAAM,IAAI,GACR,KAAK,CAAC,MAAM,KAAK,IAAI;QACnB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAA,2BAAmB,EAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CACvD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAU,CAC5C,CACF,CAAC;IACF,MAAM,cAAc,GAAG,IAAA,mCAA2B,EAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAErE,OAAO,MAAM,CAAC,WAAW,CACvB,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAA0C,EAAE;QACvE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAEnC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO;gBACL,QAAQ;gBACR;oBACE,QAAQ,EAAE,CAAC,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;oBACrD,OAAO,EAAE,KAAK,CAAC,OAAO,KAAK,MAAM;iBAClC;aACF,CAAC;QACJ,CAAC;QAED,IAAI,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjC,OAAO;gBACL,QAAQ;gBACR,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;aACpE,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,CACH,CAAC;AACJ,CAAC,CAAC;AA1CW,QAAA,kBAAkB,sBA0C7B;AAEK,MAAM,gBAAgB,GAAG,CAC9B,QAA2C,EAC3C,IAAyB,EACU,EAAE,CACrC,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAC3D,CAAC;AANS,QAAA,gBAAgB,oBAMzB;AAEJ;;;;GAIG;AACI,MAAM,yBAAyB,GAAG,CACvC,SAA4C,EAC5C,MAAyC,EACzC,IAAyB,EACU,EAAE,CAAC,iCACnC,IAAA,wBAAgB,EAAC,SAAS,EAAE,IAAI,CAAC,GACjC,MAAM,CAAC,WAAW,CACnB,CAAC,GAAG,IAAI,CAAC;KACN,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;KACpC,GAAG,CAAC,CAAC,GAAG,EAA8B,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAChE,EACD,CAAC;AAXU,QAAA,yBAAyB,6BAWnC;AAEH,wEAAwE;AACjE,MAAM,oBAAoB,GAAG,CAAC,KAAc,EAAW,EAAE,CAC9D,KAAK,KAAK,SAAS;IACnB,KAAK,KAAK,IAAI;IACd,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;IAClD,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;AAJlC,QAAA,oBAAoB,wBAIc"}

package/src/lib/workflow-command.d.ts

@@ -1,5 +1,5 @@
 import { FormDefinitionSchema } from './form';
-import { ApproverResolver, DecisionPolicy, ExcludeInitiatorConfig, ReturnResubmitStrategy, ServiceAction, SlaConfig, WorkflowDefinition, WorkflowEdgeConditionOperator, WorkflowNodeTriggerMode } from './workflow';
+import { ApproverResolver, DecisionPolicy, ExcludeInitiatorConfig, FieldAccessEntry, ReturnResubmitStrategy, ServiceAction, SlaConfig, WorkflowDefinition, WorkflowEdgeConditionOperator, WorkflowNodeTriggerMode } from './workflow';
 import { NodePaletteType, WorkflowEdgeIdFactory } from './workflow-graph';
 /**
  * The serialisable command layer that the template designer — and the LLM
@@ -79,6 +79,27 @@ export type WorkflowCommand = {
     readonly allowReject?: boolean;
     readonly allowTransfer?: boolean;
     readonly description?: string;
+} | {
+    /**
+     * Writes the field access of every user task at once, the way the
+     * designer's field access matrix applies: each node gets the entries
+     * listed for it, in order, and a user task with none listed loses its
+     * `fieldAccess` key. Pass the whole matrix, not a change set —
+     * unless `nodeIds` is given: then only those user tasks are rewritten,
+     * every other node keeps what it has, and an entry for a node outside
+     * `nodeIds` is refused.
+     */
+    readonly type: 'setFieldAccessMatrix';
+    readonly entries: readonly FieldAccessMatrixEntry[];
+    readonly nodeIds?: readonly string[];
+} | {
+    /**
+     * Drops the deprecated `fieldPermissions` key from a user task. Nothing
+     * is converted into `fieldAccess`: the old key was never enforced, so
+     * what it held means nothing.
+     */
+    readonly type: 'removeLegacyFieldPermissions';
+    readonly nodeId: string;
 } | {
     readonly type: 'setServiceAction';
     readonly nodeId: string;
@@ -120,6 +141,10 @@ export type WorkflowCommand = {
 } | {
     readonly type: 'autoLayout';
 };
+/** One `fieldAccess` entry of `setFieldAccessMatrix`, with its node. */
+export interface FieldAccessMatrixEntry extends FieldAccessEntry {
+    readonly nodeId: string;
+}
 /** High-level intents that fold into a sequence of primitive commands. */
 export type WorkflowMacroCommand = {
     readonly type: 'insertApprovalStep';