@things-factory/worklist 10.1.246 → 10.1.248

package/dist-server/controllers/activity-instance/issue.js

@@ -1,272 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.issue = issue;
-const typeorm_1 = require("typeorm");
-const activity_js_1 = require("../../service/activity/activity.js");
-const activity_instance_js_1 = require("../../service/activity-instance/activity-instance.js");
-const common_js_1 = require("../common.js");
-const submit_js_1 = require("../activity-thread/submit.js");
-const approval_line_input_js_1 = require("./approval-line-input.js");
-const assignee_input_js_1 = require("./assignee-input.js");
-const assignee_pool_js_1 = require("../../service/activity-instance/assignee-pool.js");
-const entitlement_js_1 = require("./entitlement.js");
-const claim_draft_js_1 = require("./claim-draft.js");
-const approval_expectation_js_1 = require("./approval-expectation.js");
-const seat_standing_js_1 = require("../activity-approval/seat-standing.js");
-const resolve_judgeable_seats_js_1 = require("../activity-approval/resolve-judgeable-seats.js");
-async function issue(activityInstance, context) {
-    const { domain, user, tx } = context.state;
-    const issuedAt = new Date();
-    var { id, name, description, assignees, uiType, uiSource, viewType, viewSource, dueAt, priority, approvalLine, activityId, activityType, assigneeRoles, supervisoryRole, input } = activityInstance;
-    var origin = id
-        ? await tx.getRepository(activity_instance_js_1.ActivityInstance).findOne({
-            where: { domain: { id: domain.id }, id },
-            relations: [
-                'domain',
-                'activity',
-                'assigneeRoles',
-                'supervisoryRole',
-                'updater',
-                'creator',
-                'starter',
-                'terminator'
-            ]
-        })
-        : null;
-    /*
-      남의 초안은 못 내보낸다.
-  
-      내보내는 순간 결재선과 담당자가 서고, 그것은 **다른 사람들의 의무**가 된다. 새로 시작하는
-      것(id 없음)은 주인이 없으므로 이 검사에 안 걸린다. 자격 규칙은 `entitlement.ts` 에 있다.
-    */
-    if (origin) {
-        await (0, entitlement_js_1.assertMayWorkOnDraft)(origin, context);
-    }
-    /*
-      Prerequisites for a Task to Be Issued.
-      - The previous state of the task should be Draft.
-    */
-    if (origin && origin.state !== activity_instance_js_1.ActivityInstanceStatus.Draft) {
-        throw new Error(context.t(`error.activity-instance is already issued`, {
-            id: id,
-            state: origin.state
-        }));
-    }
-    /*
-     * An id that is not here is refused - not taken as a new case. Taken as new, a draft discarded a moment
-     * ago came back under the same id, issued. And a draft that is here is claimed before anything else is
-     * written, so a discard cannot slip in between - see claim-draft.ts.
-     */
-    if (id && !origin) {
-        throw new Error(context.t('error.activity-instance not found', { activityInstance: id }));
-    }
-    if (origin) {
-        await (0, claim_draft_js_1.claimDraft)(origin.id, context);
-    }
-    var repository = tx.getRepository(activity_js_1.Activity);
-    var activity = origin?.activity ||
-        (await repository.findOne({
-            where: { domain: domain.parentId ? { id: (0, typeorm_1.In)([domain.id, domain.parentId]) } : { id: domain.id }, id: activityId },
-            relations: ['assigneeRoles', 'supervisoryRole']
-        }));
-    if (!activity) {
-        throw new Error(context.t('error.activity not found', {
-            activity: activityId
-        }));
-    }
-    /*
-     * The activity's approval line is set on its detail screen and nowhere else (ruling 2026-09-24).
-     * A line handed in must be absent or the same one - § approval-line-input.ts.
-     */
-    if ((0, approval_line_input_js_1.approvalLineInputRefusal)(activity.approvalLine, approvalLine)) {
-        throw Object.assign(new Error(context.t('error.activity-instance approval line is set')), { code: approval_line_input_js_1.LINE_IS_SET });
-    }
-    if (!origin) {
-        activityInstance.name = name || activity.name;
-        activityInstance.description = description || activity.description;
-        activityInstance.activityType = activityType || activity.activityType;
-        activityInstance.uiType = uiType || activity.uiType;
-        activityInstance.uiSource = uiSource || activity.uiSource;
-        activityInstance.viewType = viewType || activity.viewType;
-        activityInstance.viewSource = viewSource || activity.viewSource;
-        activityInstance.supervisoryRole = supervisoryRole || activity.supervisoryRole;
-        activityInstance.priority = priority ?? activity.priority;
-        activityInstance.adhocType = 'standard';
-        activityInstance.refBy = activityId;
-        /*
-         * 낸 쪽이 직접 주지 않았으면 액티비티의 선언을 따른다.
-         *
-         * 위의 `if (!assignees || !approvalLine)` 안에 두지 않는다 — 둘 다 준 건에서는 그 블록에 안 들어가고,
-         * 그러면 이 축만 조용히 빠진다.
-         */
-        if (activityInstance.rejectionIsFinal === undefined || activityInstance.rejectionIsFinal === null) {
-            activityInstance.rejectionIsFinal = activity.rejectionIsFinal ?? false;
-        }
-        if (!assignees || !approvalLine) {
-            if (!assignees) {
-                assignees = activityInstance.assignees = activity.assignees;
-            }
-            if (!approvalLine) {
-                approvalLine = activityInstance.approvalLine = activity.approvalLine;
-            }
-            if (!dueAt && activity.standardTime) {
-                activityInstance.dueAt = new Date(issuedAt.getTime() + activity.standardTime * 1000);
-            }
-        }
-    }
-    /*
-     * The pool - handed in, else the activity's for a new case (a draft keeps the one it was written with). Every
-     * role is read in the case's domain, each once, or the case is refused by name: a role nobody here holds only
-     * looks like a pool. § assignee-pool.ts
-     */
-    if (assigneeRoles) {
-        activityInstance.assigneeRoles = await (0, assignee_pool_js_1.resolvePoolRoles)(assigneeRoles, context);
-    }
-    else if (!origin) {
-        activityInstance.assigneeRoles = await (0, assignee_pool_js_1.resolvePoolRoles)(activity.assigneeRoles, context);
-    }
-    /*
-     * A role is not an assignee - it became the role's first user. Seen after the activity's list is taken
-     * over, so a list saved on the activity before this is refused too. § assignee-input.ts
-     */
-    if ((0, assignee_input_js_1.roleAssigneeRefusal)(assignees)) {
-        throw Object.assign(new Error(context.t('error.activity-instance a role is not an assignee')), {
-            code: assignee_input_js_1.ROLE_IS_NOT_AN_ASSIGNEE
-        });
-    }
-    /*
-     * **결재를 받겠다고 낸 건은 결재선이 있어야 한다.**
-     *
-     * 액티비티의 결재선을 물려받은 뒤에 본다 — 낸 쪽이 직접 주지 않아도 액티비티가 들고 있으면 그것이
-     * 이 건의 결재선이다. 물려받기 전에 보면 멀쩡한 건을 막는다.
-     *
-     * 초안을 다시 내는 경우 결재선은 원본이 들고 있으므로 그것까지 함께 본다.
-     *
-     * 판단은 `approval-expectation.ts` 가 든다 — 여기서 조건을 적으면 시험할 수 없다.
-     */
-    const expectation = (0, approval_expectation_js_1.judgeApprovalExpectation)({
-        requireApproval: activityInstance.requireApproval,
-        approvalLine: activityInstance.approvalLine ?? origin?.approvalLine,
-        activityName: activity.name
-    });
-    if ((0, approval_expectation_js_1.expectationBroken)(expectation)) {
-        throw new Error(context.t('error.approval line is empty but approval was required', {
-            activity: expectation.activityName,
-            defaultValue: `"${expectation.activityName}" 에 결재선이 없습니다. 이 건은 결재를 받기로 하고 낸 것이라 올리지 않습니다 — ` +
-                '그대로 두면 결재 없이 확정됩니다.'
-        }));
-    }
-    /*
-     * **결재 자리마다 설 사람이 있어야 올릴 수 있다.** 아무도 못 서는 자리가 있으면 그 건은 거기서 영영
-     * 선다. 올리는 이 자리에서 막아야 결재선을 고칠 수 있는 사람이 무엇을 고쳐야 하는지 읽는다.
-     * 상신자도 결재 자리에 설 수 있다(2026-10-23, ADR-0052 ② 를 거둠).
-     *
-     * 판단은 `seat-standing.ts` 가 들고, 자리를 푸는 것은 `resolve-judgeable-seats.ts` 가 한다 — 여기에
-     * 조건을 적으면 위의 결재선 검사와 같은 이유로 시험할 수 없다.
-     */
-    const standing = (0, seat_standing_js_1.judgeSeatsStand)({
-        seats: await (0, resolve_judgeable_seats_js_1.resolveJudgeableSeats)(activityInstance.approvalLine ?? origin?.approvalLine, context)
-    });
-    if ((0, seat_standing_js_1.standingBroken)(standing)) {
-        /*
-         * 사유마다 한 문장씩 — **자리가 같다고 사유를 합치지 않는다.** 관리자가 할 일이 다르다: 하나는
-         * 「그 자리에 다른 결재자를」이고 하나는 「그 역할에 사람을」이다. (ADR-0047 ② 의 낱말)
-         */
-        throw new Error(standing.refusals
-            .map(refusal => {
-            /* 이름이 안 풀린 자리는 결재선에 적힌 값이라도 보인다 — 관리자가 고칠 실마리가 그것뿐이다. */
-            const seats = refusal.seats
-                .map(seat => `${seat.order}차${seat.name ? ` (${seat.name})` : seat.pointsAt ? ` (${seat.pointsAt})` : ''}`)
-                .join(', ');
-            const said = {
-                'approval-role-empty': `${seats} 결재 자리가 지목한 역할에 사람이 없습니다. 그대로 올리면 아무도 결재할 수 없습니다 — 그 역할에 사람을 넣어 주십시오.`,
-                'approval-person-missing': `${seats} 결재 자리가 지목한 사람을 찾을 수 없습니다. 그대로 올리면 아무도 결재할 수 없습니다 — 그 자리에 지금 있는 사람을 다시 지정해 주십시오.`
-            }[refusal.because];
-            return context.t(seat_standing_js_1.STANDING_REFUSAL_KEYS[refusal.because], { seats, defaultValue: said });
-        })
-            .join(' '));
-    }
-    const activitySearchKeys = (0, common_js_1.fillActivitySearchKeys)(activity?.searchKeys, input);
-    if (activity.startingType == 'post') {
-        /*
-          startingType이 'post'이면,
-          activityInstance 이슈와 동시에 issuer에게 할당된 activityThread가 생성되고 submit까지 모두 완료되게 된다.
-          만일, 결재선이 있다면, 상신되게 된다.
-        */
-        const posted = await tx.getRepository(activity_instance_js_1.ActivityInstance).save({
-            version: 1,
-            creator: user,
-            ...origin,
-            ...activityInstance,
-            transaction: 'post',
-            activity,
-            ...activitySearchKeys,
-            state: activity_instance_js_1.ActivityInstanceStatus.Started,
-            domain,
-            issuer: user,
-            updater: user,
-            issuedAt,
-            startedAt: issuedAt
-        });
-        const thread = await (0, common_js_1.createActivityThreadForUser)('post', posted, user, context);
-        /* post 방식은 thread가 하나이므로, instance의 output을 그대로 thread의 output이라고 판단할 수 있다. 따라서, 아래 로직은 제거한다. */
-        // const data = { ...activityInstance.input, ...activityInstance.output }
-        // const output = (activity.model || [])
-        //   .filter(item => item.inout === 'inout' || item.inout === 'out')
-        //   .reduce((inout, item) => {
-        //     inout[item.tag] = data[item.tag]
-        //     return inout
-        //   }, {})
-        await (0, submit_js_1.submit)({ id: thread.id, output: activityInstance.output }, context);
-        return await tx.getRepository(activity_instance_js_1.ActivityInstance).findOneBy({ id: posted.id });
-    }
-    else {
-        const issued = await tx.getRepository(activity_instance_js_1.ActivityInstance).save({
-            version: 1,
-            creator: user,
-            ...origin,
-            ...activityInstance,
-            transaction: 'issue',
-            activity,
-            ...activitySearchKeys,
-            state: activity_instance_js_1.ActivityInstanceStatus.Issued,
-            domain,
-            issuer: user,
-            updater: user,
-            issuedAt
-        });
-        /*
-        1. 하나의 thread가 필요한 경우 (대부분)
-           조건 : activityInstance의 threadsMin이 1 이어야 한다.
-           로직 1 : getSystemUserFromOrgMemberItem 의 결과가 한명이라면 그대로 activityThread.assignee로 직접 할당한다.
-           로직 2 : getSystemUserFromOrgMemberItem 의 결과가 한명이 아니라면, assigneeRoles 가 있는 경우에만 처리가 가능하다.
-                   이 경우에는 assignee를 비운다. - createActivityThreadWithUnassigned
-        2. 할당되지 않은 복수개의 thread가 필요한 경우
-           조건 : threadsMin이 1 이상이어야 한다.
-           로직 1 : getSystemUserFromOrgMemberItem 의 결과와 threadsMin 값이 같다면, 그대로 activityThread.assignee로 직접 할당한다. createActivityThreadsForAllRoleUsers
-           로직 2 : createActivityThreadWithUnassigned
-        3. 모든 assignee가 처리를 해야하는 경우
-           조건 : threadsMin이 0 이어야 한다.
-           로직 : getSystemUserFromOrgMemberItem 의 결과로 createActivityThreadsForUsers
-        */
-        // assignees가 복수인 것은 아무 의미가 없다.
-        const assignedUsers = await Promise.all((assignees || []).map(assignee => (0, common_js_1.getSystemUserFromOrgMemberItem)(assignee, context)));
-        if (assignedUsers.length == 0) {
-            if ((0, assignee_pool_js_1.poolIdsOf)(issued).length) {
-                if (issued.threadsMin === 0) {
-                    /* 풀의 역할들 중 하나라도 가진 사람 모두에게 — 한 사람에 한 번 */
-                    await (0, common_js_1.createActivityThreadsForAllRoleUsers)('issue', issued, context);
-                }
-                else {
-                    /* minimum threads 설정에 따른 pending assignment 상태로 activityThread를 만드는 경우 */
-                    await (0, common_js_1.createActivityThreadWithUnassigned)('issue', issued, context);
-                }
-            }
-        }
-        else {
-            await (0, common_js_1.createActivityThreadsForUsers)('issue', issued, assignedUsers, context);
-        }
-        return await tx.getRepository(activity_instance_js_1.ActivityInstance).findOneBy({ id: issued.id });
-    }
-}
-//# sourceMappingURL=issue.js.map

package/dist-server/controllers/activity-instance/issue.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"issue.js","sourceRoot":"","sources":["../../../server/controllers/activity-instance/issue.ts"],"names":[],"mappings":";;AAsBA,sBA0TC;AAhVD,qCAA4B;AAC5B,oEAA6D;AAC7D,+FAA+G;AAE/G,4CAOqB;AACrB,4DAAqD;AACrD,qEAAgF;AAChF,2DAAkF;AAClF,uFAA8F;AAC9F,qDAAuD;AACvD,qDAA6C;AAC7C,uEAAuF;AACvF,4EAA8G;AAC9G,gGAAuF;AAEhF,KAAK,UAAU,KAAK,CACzB,gBAAuC,EACvC,OAAwB;IAExB,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;IAC1C,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAA;IAC3B,IAAI,EACF,EAAE,EACF,IAAI,EACJ,WAAW,EACX,SAAS,EACT,MAAM,EACN,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,KAAK,EACL,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,aAAa,EACb,eAAe,EACf,KAAK,EACN,GAAG,gBAAgB,CAAA;IAEpB,IAAI,MAAM,GAAG,EAAE;QACb,CAAC,CAAC,MAAM,EAAE,CAAC,aAAa,CAAC,uCAAgB,CAAC,CAAC,OAAO,CAAC;YAC/C,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE;YACxC,SAAS,EAAE;gBACT,QAAQ;gBACR,UAAU;gBACV,eAAe;gBACf,iBAAiB;gBACjB,SAAS;gBACT,SAAS;gBACT,SAAS;gBACT,YAAY;aACb;SACF,CAAC;QACJ,CAAC,CAAC,IAAI,CAAA;IAER;;;;;MAKE;IACF,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,IAAA,qCAAoB,EAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7C,CAAC;IAED;;;MAGE;IACF,IAAI,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,6CAAsB,CAAC,KAAK,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CACb,OAAO,CAAC,CAAC,CAAC,2CAA2C,EAAE;YACrD,EAAE,EAAE,EAAE;YACN,KAAK,EAAE,MAAM,CAAC,KAAK;SACpB,CAAC,CACH,CAAA;IACH,CAAC;IAED;;;;OAIG;IACH,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,mCAAmC,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;IAC3F,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,IAAA,2BAAU,EAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;IACtC,CAAC;IAED,IAAI,UAAU,GAAG,EAAE,CAAC,aAAa,CAAC,sBAAQ,CAAC,CAAA;IAC3C,IAAI,QAAQ,GACV,MAAM,EAAE,QAAQ;QAChB,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC;YACxB,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAA,YAAE,EAAC,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE;YACjH,SAAS,EAAE,CAAC,eAAe,EAAE,iBAAiB,CAAC;SAChD,CAAC,CAAC,CAAA;IAEL,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,OAAO,CAAC,CAAC,CAAC,0BAA0B,EAAE;YACpC,QAAQ,EAAE,UAAU;SACrB,CAAC,CACH,CAAA;IACH,CAAC;IAED;;;OAGG;IACH,IAAI,IAAA,iDAAwB,EAAC,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC,EAAE,CAAC;QAClE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,8CAA8C,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,oCAAW,EAAE,CAAC,CAAA;IAClH,CAAC;IAED,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,gBAAgB,CAAC,IAAI,GAAG,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAA;QAC7C,gBAAgB,CAAC,WAAW,GAAG,WAAW,IAAI,QAAQ,CAAC,WAAW,CAAA;QAClE,gBAAgB,CAAC,YAAY,GAAG,YAAY,IAAI,QAAQ,CAAC,YAAY,CAAA;QACrE,gBAAgB,CAAC,MAAM,GAAG,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAA;QACnD,gBAAgB,CAAC,QAAQ,GAAG,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAA;QACzD,gBAAgB,CAAC,QAAQ,GAAG,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAA;QACzD,gBAAgB,CAAC,UAAU,GAAG,UAAU,IAAI,QAAQ,CAAC,UAAU,CAAA;QAC/D,gBAAgB,CAAC,eAAe,GAAG,eAAe,IAAI,QAAQ,CAAC,eAAe,CAAA;QAC9E,gBAAgB,CAAC,QAAQ,GAAG,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAA;QAEzD,gBAAgB,CAAC,SAAS,GAAG,UAAU,CAAA;QACvC,gBAAgB,CAAC,KAAK,GAAG,UAAU,CAAA;QAEnC;;;;;WAKG;QACH,IAAI,gBAAgB,CAAC,gBAAgB,KAAK,SAAS,IAAI,gBAAgB,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;YAClG,gBAAgB,CAAC,gBAAgB,GAAG,QAAQ,CAAC,gBAAgB,IAAI,KAAK,CAAA;QACxE,CAAC;QAED,IAAI,CAAC,SAAS,IAAI,CAAC,YAAY,EAAE,CAAC;YAChC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,SAAS,GAAG,gBAAgB,CAAC,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAA;YAC7D,CAAC;YAED,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,YAAY,GAAG,gBAAgB,CAAC,YAAY,GAAG,QAAQ,CAAC,YAAY,CAAA;YACtE,CAAC;YAED,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;gBACpC,gBAAgB,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,YAAY,GAAG,IAAI,CAAC,CAAA;YACtF,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,IAAI,aAAa,EAAE,CAAC;QAClB,gBAAgB,CAAC,aAAa,GAAG,MAAM,IAAA,mCAAgB,EAAC,aAAa,EAAE,OAAO,CAAC,CAAA;IACjF,CAAC;SAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACnB,gBAAgB,CAAC,aAAa,GAAG,MAAM,IAAA,mCAAgB,EAAC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC,CAAA;IAC1F,CAAC;IAED;;;OAGG;IACH,IAAI,IAAA,uCAAmB,EAAC,SAAS,CAAC,EAAE,CAAC;QACnC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,mDAAmD,CAAC,CAAC,EAAE;YAC7F,IAAI,EAAE,2CAAuB;SAC9B,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;;;;OASG;IACH,MAAM,WAAW,GAAG,IAAA,kDAAwB,EAAC;QAC3C,eAAe,EAAE,gBAAgB,CAAC,eAAe;QACjD,YAAY,EAAE,gBAAgB,CAAC,YAAY,IAAI,MAAM,EAAE,YAAY;QACnE,YAAY,EAAE,QAAQ,CAAC,IAAI;KAC5B,CAAC,CAAA;IAEF,IAAI,IAAA,2CAAiB,EAAC,WAAW,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,OAAO,CAAC,CAAC,CAAC,wDAAwD,EAAE;YAClE,QAAQ,EAAE,WAAW,CAAC,YAAY;YAClC,YAAY,EACV,IAAI,WAAW,CAAC,YAAY,kDAAkD;gBAC9E,qBAAqB;SACxB,CAAC,CACH,CAAA;IACH,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,QAAQ,GAAG,IAAA,kCAAe,EAAC;QAC/B,KAAK,EAAE,MAAM,IAAA,kDAAqB,EAAC,gBAAgB,CAAC,YAAY,IAAI,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC;KACnG,CAAC,CAAA;IAEF,IAAI,IAAA,iCAAc,EAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B;;;WAGG;QACH,MAAM,IAAI,KAAK,CACb,QAAQ,CAAC,QAAQ;aACd,GAAG,CAAC,OAAO,CAAC,EAAE;YACb,yDAAyD;YACzD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK;iBACxB,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;iBAC1G,IAAI,CAAC,IAAI,CAAC,CAAA;YAEb,MAAM,IAAI,GAAG;gBACX,qBAAqB,EAAE,GAAG,KAAK,uEAAuE;gBACtG,yBAAyB,EAAE,GAAG,KAAK,kFAAkF;aACtH,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;YAElB,OAAO,OAAO,CAAC,CAAC,CAAC,wCAAqB,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAA;QACzF,CAAC,CAAC;aACD,IAAI,CAAC,GAAG,CAAC,CACb,CAAA;IACH,CAAC;IAED,MAAM,kBAAkB,GAAG,IAAA,kCAAsB,EAAC,QAAQ,EAAE,UAAU,EAAE,KAAK,CAAC,CAAA;IAE9E,IAAI,QAAQ,CAAC,YAAY,IAAI,MAAM,EAAE,CAAC;QACpC;;;;UAIE;QACF,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,uCAAgB,CAAC,CAAC,IAAI,CAAC;YAC3D,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,IAAI;YACb,GAAG,MAAM;YACT,GAAG,gBAAgB;YACnB,WAAW,EAAE,MAAM;YACnB,QAAQ;YACR,GAAG,kBAAkB;YACrB,KAAK,EAAE,6CAAsB,CAAC,OAAO;YACrC,MAAM;YACN,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,IAAI;YACb,QAAQ;YACR,SAAS,EAAE,QAAQ;SACpB,CAAC,CAAA;QAEF,MAAM,MAAM,GAAG,MAAM,IAAA,uCAA2B,EAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;QAE/E,iGAAiG;QACjG,yEAAyE;QACzE,wCAAwC;QACxC,oEAAoE;QACpE,+BAA+B;QAC/B,uCAAuC;QACvC,mBAAmB;QACnB,WAAW;QAEX,MAAM,IAAA,kBAAM,EAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,gBAAgB,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,CAAA;QAEzE,OAAO,MAAM,EAAE,CAAC,aAAa,CAAC,uCAAgB,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAA;IAC9E,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,uCAAgB,CAAC,CAAC,IAAI,CAAC;YAC3D,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,IAAI;YACb,GAAG,MAAM;YACT,GAAG,gBAAgB;YACnB,WAAW,EAAE,OAAO;YACpB,QAAQ;YACR,GAAG,kBAAkB;YACrB,KAAK,EAAE,6CAAsB,CAAC,MAAM;YACpC,MAAM;YACN,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,IAAI;YACb,QAAQ;SACT,CAAC,CAAA;QAEF;;;;;;;;;;;;;UAaE;QAEF,+BAA+B;QAC/B,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,GAAG,CACrC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAA,0CAA8B,EAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CACrF,CAAA;QAED,IAAI,aAAa,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YAC9B,IAAI,IAAA,4BAAS,EAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;gBAC7B,IAAI,MAAM,CAAC,UAAU,KAAK,CAAC,EAAE,CAAC;oBAC5B,0CAA0C;oBAC1C,MAAM,IAAA,gDAAoC,EAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAA;gBACtE,CAAC;qBAAM,CAAC;oBACN,0EAA0E;oBAC1E,MAAM,IAAA,8CAAkC,EAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAA;gBACpE,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,IAAA,yCAA6B,EAAC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,CAAC,CAAA;QAC9E,CAAC;QAED,OAAO,MAAM,EAAE,CAAC,aAAa,CAAC,uCAAgB,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAA;IAC9E,CAAC;AACH,CAAC","sourcesContent":["import { In } from 'typeorm'\nimport { Activity } from '../../service/activity/activity.js'\nimport { ActivityInstance, ActivityInstanceStatus } from '../../service/activity-instance/activity-instance.js'\nimport { ActivityInstanceIssue } from '../../service/activity-instance/activity-instance-type.js'\nimport {\n  createActivityThreadWithUnassigned,\n  createActivityThreadsForAllRoleUsers,\n  createActivityThreadsForUsers,\n  getSystemUserFromOrgMemberItem,\n  createActivityThreadForUser,\n  fillActivitySearchKeys\n} from '../common.js'\nimport { submit } from '../activity-thread/submit.js'\nimport { LINE_IS_SET, approvalLineInputRefusal } from './approval-line-input.js'\nimport { ROLE_IS_NOT_AN_ASSIGNEE, roleAssigneeRefusal } from './assignee-input.js'\nimport { poolIdsOf, resolvePoolRoles } from '../../service/activity-instance/assignee-pool.js'\nimport { assertMayWorkOnDraft } from './entitlement.js'\nimport { claimDraft } from './claim-draft.js'\nimport { expectationBroken, judgeApprovalExpectation } from './approval-expectation.js'\nimport { STANDING_REFUSAL_KEYS, judgeSeatsStand, standingBroken } from '../activity-approval/seat-standing.js'\nimport { resolveJudgeableSeats } from '../activity-approval/resolve-judgeable-seats.js'\n\nexport async function issue(\n  activityInstance: ActivityInstanceIssue,\n  context: ResolverContext\n): Promise<ActivityInstance> {\n  const { domain, user, tx } = context.state\n  const issuedAt = new Date()\n  var {\n    id,\n    name,\n    description,\n    assignees,\n    uiType,\n    uiSource,\n    viewType,\n    viewSource,\n    dueAt,\n    priority,\n    approvalLine,\n    activityId,\n    activityType,\n    assigneeRoles,\n    supervisoryRole,\n    input\n  } = activityInstance\n\n  var origin = id\n    ? await tx.getRepository(ActivityInstance).findOne({\n        where: { domain: { id: domain.id }, id },\n        relations: [\n          'domain',\n          'activity',\n          'assigneeRoles',\n          'supervisoryRole',\n          'updater',\n          'creator',\n          'starter',\n          'terminator'\n        ]\n      })\n    : null\n\n  /*\n    남의 초안은 못 내보낸다.\n\n    내보내는 순간 결재선과 담당자가 서고, 그것은 **다른 사람들의 의무**가 된다. 새로 시작하는\n    것(id 없음)은 주인이 없으므로 이 검사에 안 걸린다. 자격 규칙은 `entitlement.ts` 에 있다.\n  */\n  if (origin) {\n    await assertMayWorkOnDraft(origin, context)\n  }\n\n  /* \n    Prerequisites for a Task to Be Issued.\n    - The previous state of the task should be Draft.\n  */\n  if (origin && origin.state !== ActivityInstanceStatus.Draft) {\n    throw new Error(\n      context.t(`error.activity-instance is already issued`, {\n        id: id,\n        state: origin.state\n      })\n    )\n  }\n\n  /*\n   * An id that is not here is refused - not taken as a new case. Taken as new, a draft discarded a moment\n   * ago came back under the same id, issued. And a draft that is here is claimed before anything else is\n   * written, so a discard cannot slip in between - see claim-draft.ts.\n   */\n  if (id && !origin) {\n    throw new Error(context.t('error.activity-instance not found', { activityInstance: id }))\n  }\n\n  if (origin) {\n    await claimDraft(origin.id, context)\n  }\n\n  var repository = tx.getRepository(Activity)\n  var activity =\n    origin?.activity ||\n    (await repository.findOne({\n      where: { domain: domain.parentId ? { id: In([domain.id, domain.parentId]) } : { id: domain.id }, id: activityId },\n      relations: ['assigneeRoles', 'supervisoryRole']\n    }))\n\n  if (!activity) {\n    throw new Error(\n      context.t('error.activity not found', {\n        activity: activityId\n      })\n    )\n  }\n\n  /*\n   * The activity's approval line is set on its detail screen and nowhere else (ruling 2026-09-24).\n   * A line handed in must be absent or the same one - § approval-line-input.ts.\n   */\n  if (approvalLineInputRefusal(activity.approvalLine, approvalLine)) {\n    throw Object.assign(new Error(context.t('error.activity-instance approval line is set')), { code: LINE_IS_SET })\n  }\n\n  if (!origin) {\n    activityInstance.name = name || activity.name\n    activityInstance.description = description || activity.description\n    activityInstance.activityType = activityType || activity.activityType\n    activityInstance.uiType = uiType || activity.uiType\n    activityInstance.uiSource = uiSource || activity.uiSource\n    activityInstance.viewType = viewType || activity.viewType\n    activityInstance.viewSource = viewSource || activity.viewSource\n    activityInstance.supervisoryRole = supervisoryRole || activity.supervisoryRole\n    activityInstance.priority = priority ?? activity.priority\n\n    activityInstance.adhocType = 'standard'\n    activityInstance.refBy = activityId\n\n    /*\n     * 낸 쪽이 직접 주지 않았으면 액티비티의 선언을 따른다.\n     *\n     * 위의 `if (!assignees || !approvalLine)` 안에 두지 않는다 — 둘 다 준 건에서는 그 블록에 안 들어가고,\n     * 그러면 이 축만 조용히 빠진다.\n     */\n    if (activityInstance.rejectionIsFinal === undefined || activityInstance.rejectionIsFinal === null) {\n      activityInstance.rejectionIsFinal = activity.rejectionIsFinal ?? false\n    }\n\n    if (!assignees || !approvalLine) {\n      if (!assignees) {\n        assignees = activityInstance.assignees = activity.assignees\n      }\n\n      if (!approvalLine) {\n        approvalLine = activityInstance.approvalLine = activity.approvalLine\n      }\n\n      if (!dueAt && activity.standardTime) {\n        activityInstance.dueAt = new Date(issuedAt.getTime() + activity.standardTime * 1000)\n      }\n    }\n  }\n\n  /*\n   * The pool - handed in, else the activity's for a new case (a draft keeps the one it was written with). Every\n   * role is read in the case's domain, each once, or the case is refused by name: a role nobody here holds only\n   * looks like a pool. § assignee-pool.ts\n   */\n  if (assigneeRoles) {\n    activityInstance.assigneeRoles = await resolvePoolRoles(assigneeRoles, context)\n  } else if (!origin) {\n    activityInstance.assigneeRoles = await resolvePoolRoles(activity.assigneeRoles, context)\n  }\n\n  /*\n   * A role is not an assignee - it became the role's first user. Seen after the activity's list is taken\n   * over, so a list saved on the activity before this is refused too. § assignee-input.ts\n   */\n  if (roleAssigneeRefusal(assignees)) {\n    throw Object.assign(new Error(context.t('error.activity-instance a role is not an assignee')), {\n      code: ROLE_IS_NOT_AN_ASSIGNEE\n    })\n  }\n\n  /*\n   * **결재를 받겠다고 낸 건은 결재선이 있어야 한다.**\n   *\n   * 액티비티의 결재선을 물려받은 뒤에 본다 — 낸 쪽이 직접 주지 않아도 액티비티가 들고 있으면 그것이\n   * 이 건의 결재선이다. 물려받기 전에 보면 멀쩡한 건을 막는다.\n   *\n   * 초안을 다시 내는 경우 결재선은 원본이 들고 있으므로 그것까지 함께 본다.\n   *\n   * 판단은 `approval-expectation.ts` 가 든다 — 여기서 조건을 적으면 시험할 수 없다.\n   */\n  const expectation = judgeApprovalExpectation({\n    requireApproval: activityInstance.requireApproval,\n    approvalLine: activityInstance.approvalLine ?? origin?.approvalLine,\n    activityName: activity.name\n  })\n\n  if (expectationBroken(expectation)) {\n    throw new Error(\n      context.t('error.approval line is empty but approval was required', {\n        activity: expectation.activityName,\n        defaultValue:\n          `\"${expectation.activityName}\" 에 결재선이 없습니다. 이 건은 결재를 받기로 하고 낸 것이라 올리지 않습니다 — ` +\n          '그대로 두면 결재 없이 확정됩니다.'\n      })\n    )\n  }\n\n  /*\n   * **결재 자리마다 설 사람이 있어야 올릴 수 있다.** 아무도 못 서는 자리가 있으면 그 건은 거기서 영영\n   * 선다. 올리는 이 자리에서 막아야 결재선을 고칠 수 있는 사람이 무엇을 고쳐야 하는지 읽는다.\n   * 상신자도 결재 자리에 설 수 있다(2026-10-23, ADR-0052 ② 를 거둠).\n   *\n   * 판단은 `seat-standing.ts` 가 들고, 자리를 푸는 것은 `resolve-judgeable-seats.ts` 가 한다 — 여기에\n   * 조건을 적으면 위의 결재선 검사와 같은 이유로 시험할 수 없다.\n   */\n  const standing = judgeSeatsStand({\n    seats: await resolveJudgeableSeats(activityInstance.approvalLine ?? origin?.approvalLine, context)\n  })\n\n  if (standingBroken(standing)) {\n    /*\n     * 사유마다 한 문장씩 — **자리가 같다고 사유를 합치지 않는다.** 관리자가 할 일이 다르다: 하나는\n     * 「그 자리에 다른 결재자를」이고 하나는 「그 역할에 사람을」이다. (ADR-0047 ② 의 낱말)\n     */\n    throw new Error(\n      standing.refusals\n        .map(refusal => {\n          /* 이름이 안 풀린 자리는 결재선에 적힌 값이라도 보인다 — 관리자가 고칠 실마리가 그것뿐이다. */\n          const seats = refusal.seats\n            .map(seat => `${seat.order}차${seat.name ? ` (${seat.name})` : seat.pointsAt ? ` (${seat.pointsAt})` : ''}`)\n            .join(', ')\n\n          const said = {\n            'approval-role-empty': `${seats} 결재 자리가 지목한 역할에 사람이 없습니다. 그대로 올리면 아무도 결재할 수 없습니다 — 그 역할에 사람을 넣어 주십시오.`,\n            'approval-person-missing': `${seats} 결재 자리가 지목한 사람을 찾을 수 없습니다. 그대로 올리면 아무도 결재할 수 없습니다 — 그 자리에 지금 있는 사람을 다시 지정해 주십시오.`\n          }[refusal.because]\n\n          return context.t(STANDING_REFUSAL_KEYS[refusal.because], { seats, defaultValue: said })\n        })\n        .join(' ')\n    )\n  }\n\n  const activitySearchKeys = fillActivitySearchKeys(activity?.searchKeys, input)\n\n  if (activity.startingType == 'post') {\n    /* \n      startingType이 'post'이면, \n      activityInstance 이슈와 동시에 issuer에게 할당된 activityThread가 생성되고 submit까지 모두 완료되게 된다.\n      만일, 결재선이 있다면, 상신되게 된다.\n    */\n    const posted = await tx.getRepository(ActivityInstance).save({\n      version: 1,\n      creator: user,\n      ...origin,\n      ...activityInstance,\n      transaction: 'post',\n      activity,\n      ...activitySearchKeys,\n      state: ActivityInstanceStatus.Started,\n      domain,\n      issuer: user,\n      updater: user,\n      issuedAt,\n      startedAt: issuedAt\n    })\n\n    const thread = await createActivityThreadForUser('post', posted, user, context)\n\n    /* post 방식은 thread가 하나이므로, instance의 output을 그대로 thread의 output이라고 판단할 수 있다. 따라서, 아래 로직은 제거한다. */\n    // const data = { ...activityInstance.input, ...activityInstance.output }\n    // const output = (activity.model || [])\n    //   .filter(item => item.inout === 'inout' || item.inout === 'out')\n    //   .reduce((inout, item) => {\n    //     inout[item.tag] = data[item.tag]\n    //     return inout\n    //   }, {})\n\n    await submit({ id: thread.id, output: activityInstance.output }, context)\n\n    return await tx.getRepository(ActivityInstance).findOneBy({ id: posted.id })\n  } else {\n    const issued = await tx.getRepository(ActivityInstance).save({\n      version: 1,\n      creator: user,\n      ...origin,\n      ...activityInstance,\n      transaction: 'issue',\n      activity,\n      ...activitySearchKeys,\n      state: ActivityInstanceStatus.Issued,\n      domain,\n      issuer: user,\n      updater: user,\n      issuedAt\n    })\n\n    /*\n    1. 하나의 thread가 필요한 경우 (대부분)\n       조건 : activityInstance의 threadsMin이 1 이어야 한다.\n       로직 1 : getSystemUserFromOrgMemberItem 의 결과가 한명이라면 그대로 activityThread.assignee로 직접 할당한다.\n       로직 2 : getSystemUserFromOrgMemberItem 의 결과가 한명이 아니라면, assigneeRoles 가 있는 경우에만 처리가 가능하다.\n               이 경우에는 assignee를 비운다. - createActivityThreadWithUnassigned\n    2. 할당되지 않은 복수개의 thread가 필요한 경우\n       조건 : threadsMin이 1 이상이어야 한다.\n       로직 1 : getSystemUserFromOrgMemberItem 의 결과와 threadsMin 값이 같다면, 그대로 activityThread.assignee로 직접 할당한다. createActivityThreadsForAllRoleUsers\n       로직 2 : createActivityThreadWithUnassigned\n    3. 모든 assignee가 처리를 해야하는 경우\n       조건 : threadsMin이 0 이어야 한다.\n       로직 : getSystemUserFromOrgMemberItem 의 결과로 createActivityThreadsForUsers\n    */\n\n    // assignees가 복수인 것은 아무 의미가 없다.\n    const assignedUsers = await Promise.all(\n      (assignees || []).map(assignee => getSystemUserFromOrgMemberItem(assignee, context))\n    )\n\n    if (assignedUsers.length == 0) {\n      if (poolIdsOf(issued).length) {\n        if (issued.threadsMin === 0) {\n          /* 풀의 역할들 중 하나라도 가진 사람 모두에게 — 한 사람에 한 번 */\n          await createActivityThreadsForAllRoleUsers('issue', issued, context)\n        } else {\n          /* minimum threads 설정에 따른 pending assignment 상태로 activityThread를 만드는 경우 */\n          await createActivityThreadWithUnassigned('issue', issued, context)\n        }\n      }\n    } else {\n      await createActivityThreadsForUsers('issue', issued, assignedUsers, context)\n    }\n\n    return await tx.getRepository(ActivityInstance).findOneBy({ id: issued.id })\n  }\n}\n"]}

package/dist-server/controllers/activity-instance/pick.d.ts

@@ -1,2 +0,0 @@
-import { ActivityThread } from '../../service/activity-thread/activity-thread.js';
-export declare function pick(id: string, context: ResolverContext): Promise<ActivityThread>;

package/dist-server/controllers/activity-instance/pick.js

@@ -1,112 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.pick = pick;
-const typeorm_1 = require("typeorm");
-const shell_1 = require("@things-factory/shell");
-const activity_instance_js_1 = require("../../service/activity-instance/activity-instance.js");
-const activity_thread_js_1 = require("../../service/activity-thread/activity-thread.js");
-const common_js_1 = require("../common.js");
-const entitlement_js_1 = require("./entitlement.js");
-async function pick(id, context) {
-    const { domain, user, tx } = context.state;
-    const repository = tx.getRepository(activity_instance_js_1.ActivityInstance);
-    var activityInstance = await repository.findOne({
-        where: { domain: { id: domain.id }, id },
-        relations: ['domain', 'activity', 'assigneeRoles', 'supervisoryRole', 'updater', 'creator', 'starter', 'terminator']
-    });
-    if (!activityInstance) {
-        throw new Error(context.t('error.activity-instance not found', {
-            activityInstance: id
-        }));
-    }
-    /*
-      누가 집을 수 있나 — 상태만 보면 **아무나 집는다.**
-  
-      담당 역할을 relations 로 불러오면서 한 번도 안 봤다. 그래서 그 도메인에 로그인한
-      사람이면 특정 역할에 걸어 둔 업무도 집을 수 있었다. 자격 규칙은 `entitlement.ts` 에 있다.
-    */
-    await (0, entitlement_js_1.assertMayPick)(activityInstance, context);
-    /*
-      Prerequisites for a Task to Be Picked.
-      - The previous state of the task must not be Assigned.
-    */
-    if (activityInstance.state !== activity_instance_js_1.ActivityInstanceStatus.Issued &&
-        activityInstance.state !== activity_instance_js_1.ActivityInstanceStatus.Unassigned) {
-        throw new Error(context.t(`error.activity-instance should not be assigned`, {
-            id,
-            actual: activityInstance.state
-        }));
-    }
-    /*
-     * Take hold of it before making a thread. Measured on postgres (tests/pick-race.pg.test.ts): two people
-     * picking a case that waits for one both read it as issued and both got a thread. The UPDATE matches
-     * only a case still waiting and holds its row to the end of this transaction; whoever is second waits,
-     * then finds it assigned and is refused by name. A case waiting for more than one person is still
-     * unassigned after the first pick, so the second person gets in - as intended.
-     */
-    const claimed = await repository.update({
-        domain: { id: domain.id },
-        id,
-        state: (0, typeorm_1.In)([activity_instance_js_1.ActivityInstanceStatus.Issued, activity_instance_js_1.ActivityInstanceStatus.Unassigned])
-    }, { updater: user });
-    if (!claimed.affected) {
-        throw new Error(context.t('error.activity-approval taken by someone else', { activityApproval: id }));
-    }
-    /*
-     * Read it again under the hold, and ask again who may take it. What was read above came before the wait:
-     * a manager may have put the case in a role's pool meanwhile (assign.ts), and saving that old read back
-     * would wipe the pool out - and let someone outside the role take it.
-     */
-    const current = await repository.findOne({
-        where: { domain: { id: domain.id }, id },
-        relations: ['domain', 'activity', 'assigneeRoles', 'supervisoryRole', 'updater', 'creator', 'starter', 'terminator'],
-        /*
-         * Lock the case's row only - postgres refuses FOR UPDATE on the nullable side of the relations' outer
-         * joins. `tables` takes table names, not entity names (typeorm SelectQueryBuilder), so it is read off
-         * the metadata rather than written here; 'ActivityInstance' failed every pick on postgres.
-         */
-        ...((0, shell_1.writeLockSupported)(tx)
-            ? { lock: { mode: 'pessimistic_write', tables: [repository.metadata.tableNameWithoutPrefix] } }
-            : {})
-    });
-    await (0, entitlement_js_1.assertMayPick)(current, context);
-    /*
-     * The case's threads, read under the hold on the case - case first, then thread, the order every way into a
-     * waiting case takes (assign.ts, activity-thread/check-authority.ts).
-     */
-    const threadRepository = tx.getRepository(activity_thread_js_1.ActivityThread);
-    const threads = await threadRepository.find({
-        where: { activityInstance: { id } },
-        /* A locking read is a current read - a plain one may answer from the snapshot taken before the wait. */
-        ...((0, shell_1.writeLockSupported)(tx) ? { lock: { mode: 'pessimistic_write' } } : {})
-    });
-    /* One person, one thread of a case - the database says so too (ix_activity_thread_0), only not by name. */
-    if (threads.some(thread => thread.assigneeId === user.id)) {
-        throw new Error(context.t('error.activity-instance already yours', { id }));
-    }
-    const picked = await repository.save({
-        ...current,
-        transaction: 'pick',
-        updater: user
-    });
-    /*
-     * A case in a pool waits with one unassigned thread, and that thread is what puts it on the pool's to-do
-     * lists. The picker takes that very thread. A new thread beside it left the waiting one behind, and the case
-     * stayed on the list of everyone in the pool after one of them had taken it.
-     */
-    const waiting = threads.find(thread => thread.state === activity_thread_js_1.ActivityThreadStatus.Unassigned);
-    if (!waiting) {
-        return (await (0, common_js_1.createActivityThreadsForUsers)('pick', picked, [user], context))[0];
-    }
-    const taken = await threadRepository.save(Object.assign(waiting, {
-        assignee: user,
-        state: activity_thread_js_1.ActivityThreadStatus.Assigned,
-        transaction: 'pick',
-        updater: user,
-        assignedAt: new Date()
-    }));
-    await (0, common_js_1.leaveTheRestOfThePoolOneWaiting)('pick', picked, threads, context);
-    await (0, common_js_1.updateActivityInstanceState)(id, { causedBy: [taken] }, context);
-    return taken;
-}
-//# sourceMappingURL=pick.js.map

package/dist-server/controllers/activity-instance/pick.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"pick.js","sourceRoot":"","sources":["../../../server/controllers/activity-instance/pick.ts"],"names":[],"mappings":";;AASA,oBAgIC;AAzID,qCAA4B;AAE5B,iDAA0D;AAE1D,+FAA+G;AAC/G,yFAAuG;AACvG,4CAA0H;AAC1H,qDAAgD;AAEzC,KAAK,UAAU,IAAI,CAAC,EAAU,EAAE,OAAwB;IAC7D,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;IAC1C,MAAM,UAAU,GAAG,EAAE,CAAC,aAAa,CAAC,uCAAgB,CAAC,CAAA;IAErD,IAAI,gBAAgB,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC;QAC9C,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE;QACxC,SAAS,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,eAAe,EAAE,iBAAiB,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,CAAC;KACrH,CAAC,CAAA;IAEF,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,OAAO,CAAC,CAAC,CAAC,mCAAmC,EAAE;YAC7C,gBAAgB,EAAE,EAAE;SACrB,CAAC,CACH,CAAA;IACH,CAAC;IAED;;;;;MAKE;IACF,MAAM,IAAA,8BAAa,EAAC,gBAAgB,EAAE,OAAO,CAAC,CAAA;IAE9C;;;MAGE;IACF,IACE,gBAAgB,CAAC,KAAK,KAAK,6CAAsB,CAAC,MAAM;QACxD,gBAAgB,CAAC,KAAK,KAAK,6CAAsB,CAAC,UAAU,EAC5D,CAAC;QACD,MAAM,IAAI,KAAK,CACb,OAAO,CAAC,CAAC,CAAC,gDAAgD,EAAE;YAC1D,EAAE;YACF,MAAM,EAAE,gBAAgB,CAAC,KAAK;SAC/B,CAAC,CACH,CAAA;IACH,CAAC;IAED;;;;;;OAMG;IACH,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,MAAM,CACrC;QACE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE;QACzB,EAAE;QACF,KAAK,EAAE,IAAA,YAAE,EAAC,CAAC,6CAAsB,CAAC,MAAM,EAAE,6CAAsB,CAAC,UAAU,CAAC,CAAC;KAC9E,EACD,EAAE,OAAO,EAAE,IAAI,EAAE,CAClB,CAAA;IAED,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,+CAA+C,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;IACvG,CAAC;IAED;;;;OAIG;IACH,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC;QACvC,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE;QACxC,SAAS,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,eAAe,EAAE,iBAAiB,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,CAAC;QACpH;;;;WAIG;QACH,GAAG,CAAC,IAAA,0BAAkB,EAAC,EAAE,CAAC;YACxB,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,mBAA4B,EAAE,MAAM,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,EAAE;YACxG,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAA;IAEF,MAAM,IAAA,8BAAa,EAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IAErC;;;OAGG;IACH,MAAM,gBAAgB,GAAG,EAAE,CAAC,aAAa,CAAC,mCAAc,CAAC,CAAA;IACzD,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC;QAC1C,KAAK,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,EAAE,EAAE;QACnC,wGAAwG;QACxG,GAAG,CAAC,IAAA,0BAAkB,EAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,mBAA4B,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpF,CAAC,CAAA;IAEF,2GAA2G;IAC3G,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uCAAuC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;IAC7E,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC;QACnC,GAAG,OAAO;QACV,WAAW,EAAE,MAAM;QACnB,OAAO,EAAE,IAAI;KACd,CAAC,CAAA;IAEF;;;;OAIG;IACH,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,yCAAoB,CAAC,UAAU,CAAC,CAAA;IAExF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,IAAA,yCAA6B,EAAC,MAAM,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAClF,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,IAAI,CACvC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE;QACrB,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,yCAAoB,CAAC,QAAQ;QACpC,WAAW,EAAE,MAAM;QACnB,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,IAAI,IAAI,EAAE;KACvB,CAAC,CACH,CAAA;IAED,MAAM,IAAA,2CAA+B,EAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;IACvE,MAAM,IAAA,uCAA2B,EAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;IAErE,OAAO,KAAK,CAAA;AACd,CAAC","sourcesContent":["import { In } from 'typeorm'\n\nimport { writeLockSupported } from '@things-factory/shell'\n\nimport { ActivityInstance, ActivityInstanceStatus } from '../../service/activity-instance/activity-instance.js'\nimport { ActivityThread, ActivityThreadStatus } from '../../service/activity-thread/activity-thread.js'\nimport { createActivityThreadsForUsers, leaveTheRestOfThePoolOneWaiting, updateActivityInstanceState } from '../common.js'\nimport { assertMayPick } from './entitlement.js'\n\nexport async function pick(id: string, context: ResolverContext): Promise<ActivityThread> {\n  const { domain, user, tx } = context.state\n  const repository = tx.getRepository(ActivityInstance)\n\n  var activityInstance = await repository.findOne({\n    where: { domain: { id: domain.id }, id },\n    relations: ['domain', 'activity', 'assigneeRoles', 'supervisoryRole', 'updater', 'creator', 'starter', 'terminator']\n  })\n\n  if (!activityInstance) {\n    throw new Error(\n      context.t('error.activity-instance not found', {\n        activityInstance: id\n      })\n    )\n  }\n\n  /*\n    누가 집을 수 있나 — 상태만 보면 **아무나 집는다.**\n\n    담당 역할을 relations 로 불러오면서 한 번도 안 봤다. 그래서 그 도메인에 로그인한\n    사람이면 특정 역할에 걸어 둔 업무도 집을 수 있었다. 자격 규칙은 `entitlement.ts` 에 있다.\n  */\n  await assertMayPick(activityInstance, context)\n\n  /* \n    Prerequisites for a Task to Be Picked.\n    - The previous state of the task must not be Assigned.\n  */\n  if (\n    activityInstance.state !== ActivityInstanceStatus.Issued &&\n    activityInstance.state !== ActivityInstanceStatus.Unassigned\n  ) {\n    throw new Error(\n      context.t(`error.activity-instance should not be assigned`, {\n        id,\n        actual: activityInstance.state\n      })\n    )\n  }\n\n  /*\n   * Take hold of it before making a thread. Measured on postgres (tests/pick-race.pg.test.ts): two people\n   * picking a case that waits for one both read it as issued and both got a thread. The UPDATE matches\n   * only a case still waiting and holds its row to the end of this transaction; whoever is second waits,\n   * then finds it assigned and is refused by name. A case waiting for more than one person is still\n   * unassigned after the first pick, so the second person gets in - as intended.\n   */\n  const claimed = await repository.update(\n    {\n      domain: { id: domain.id },\n      id,\n      state: In([ActivityInstanceStatus.Issued, ActivityInstanceStatus.Unassigned])\n    },\n    { updater: user }\n  )\n\n  if (!claimed.affected) {\n    throw new Error(context.t('error.activity-approval taken by someone else', { activityApproval: id }))\n  }\n\n  /*\n   * Read it again under the hold, and ask again who may take it. What was read above came before the wait:\n   * a manager may have put the case in a role's pool meanwhile (assign.ts), and saving that old read back\n   * would wipe the pool out - and let someone outside the role take it.\n   */\n  const current = await repository.findOne({\n    where: { domain: { id: domain.id }, id },\n    relations: ['domain', 'activity', 'assigneeRoles', 'supervisoryRole', 'updater', 'creator', 'starter', 'terminator'],\n    /*\n     * Lock the case's row only - postgres refuses FOR UPDATE on the nullable side of the relations' outer\n     * joins. `tables` takes table names, not entity names (typeorm SelectQueryBuilder), so it is read off\n     * the metadata rather than written here; 'ActivityInstance' failed every pick on postgres.\n     */\n    ...(writeLockSupported(tx)\n      ? { lock: { mode: 'pessimistic_write' as const, tables: [repository.metadata.tableNameWithoutPrefix] } }\n      : {})\n  })\n\n  await assertMayPick(current, context)\n\n  /*\n   * The case's threads, read under the hold on the case - case first, then thread, the order every way into a\n   * waiting case takes (assign.ts, activity-thread/check-authority.ts).\n   */\n  const threadRepository = tx.getRepository(ActivityThread)\n  const threads = await threadRepository.find({\n    where: { activityInstance: { id } },\n    /* A locking read is a current read - a plain one may answer from the snapshot taken before the wait. */\n    ...(writeLockSupported(tx) ? { lock: { mode: 'pessimistic_write' as const } } : {})\n  })\n\n  /* One person, one thread of a case - the database says so too (ix_activity_thread_0), only not by name. */\n  if (threads.some(thread => thread.assigneeId === user.id)) {\n    throw new Error(context.t('error.activity-instance already yours', { id }))\n  }\n\n  const picked = await repository.save({\n    ...current,\n    transaction: 'pick',\n    updater: user\n  })\n\n  /*\n   * A case in a pool waits with one unassigned thread, and that thread is what puts it on the pool's to-do\n   * lists. The picker takes that very thread. A new thread beside it left the waiting one behind, and the case\n   * stayed on the list of everyone in the pool after one of them had taken it.\n   */\n  const waiting = threads.find(thread => thread.state === ActivityThreadStatus.Unassigned)\n\n  if (!waiting) {\n    return (await createActivityThreadsForUsers('pick', picked, [user], context))[0]\n  }\n\n  const taken = await threadRepository.save(\n    Object.assign(waiting, {\n      assignee: user,\n      state: ActivityThreadStatus.Assigned,\n      transaction: 'pick',\n      updater: user,\n      assignedAt: new Date()\n    })\n  )\n\n  await leaveTheRestOfThePoolOneWaiting('pick', picked, threads, context)\n  await updateActivityInstanceState(id, { causedBy: [taken] }, context)\n\n  return taken\n}\n"]}

package/dist-server/controllers/activity-read/assert-may-read.d.ts

@@ -1,20 +0,0 @@
-import { ActivityApproval } from '../../service/activity-approval/activity-approval.js';
-import { ActivityInstance } from '../../service/activity-instance/activity-instance.js';
-import { ActivityThread } from '../../service/activity-thread/activity-thread.js';
-/**
- * Whether the caller takes part in this instance or reads every case - for a module whose record hangs on a case and
- * opens to the same people (an expense's receipt to its approvers, ADR-0139).
- */
-export declare function mayReadInstance(instance: ActivityInstance, context: ResolverContext): Promise<boolean>;
-/**
- * Throws a named refusal unless the caller takes part in this instance or reads every case.
- *
- * The draft screen reopens an instance by id. Four of plant's working roles (OPERATOR and the other
- * hands-on roles) hold no activity-instance query privilege, so while this door asked it they could
- * write a draft, see it under "raised by me", and not open it again.
- */
-export declare function assertMayReadInstance(instance: ActivityInstance, context: ResolverContext): Promise<void>;
-/** Throws a named refusal unless the caller takes part in this thread or reads every case. */
-export declare function assertMayReadThread(thread: ActivityThread, context: ResolverContext): Promise<void>;
-/** An approval is read through its thread: the same people, the same refusal. */
-export declare function assertMayReadApproval(approval: ActivityApproval, context: ResolverContext): Promise<void>;

package/dist-server/controllers/activity-read/assert-may-read.js

@@ -1,108 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.mayReadInstance = mayReadInstance;
-exports.assertMayReadInstance = assertMayReadInstance;
-exports.assertMayReadThread = assertMayReadThread;
-exports.assertMayReadApproval = assertMayReadApproval;
-const auth_base_1 = require("@things-factory/auth-base");
-const typeorm_1 = require("typeorm");
-const shell_1 = require("@things-factory/shell");
-const activity_approval_js_1 = require("../../service/activity-approval/activity-approval.js");
-const activity_instance_js_1 = require("../../service/activity-instance/activity-instance.js");
-const assignee_pool_js_1 = require("../../service/activity-instance/assignee-pool.js");
-const activity_thread_js_1 = require("../../service/activity-thread/activity-thread.js");
-const participates_js_1 = require("./participates.js");
-/** Whoever may read every instance may read this one. */
-async function readsEveryCase(context) {
-    const { domain, user, unsafeIP, prohibitedPrivileges } = context.state;
-    return await (0, auth_base_1.checkPermission)({ category: 'activity-instance', privilege: 'query', owner: true }, user, domain, unsafeIP, prohibitedPrivileges);
-}
-async function factsOf(thread) {
-    const instance = thread.activityInstanceId
-        ? await (0, shell_1.getRepository)(activity_instance_js_1.ActivityInstance).findOne({
-            where: { domain: { id: thread.domainId }, id: thread.activityInstanceId }
-        })
-        : null;
-    const approvals = await (0, shell_1.getRepository)(activity_approval_js_1.ActivityApproval).find({
-        where: { domain: { id: thread.domainId }, activityThread: { id: thread.id } }
-    });
-    return {
-        domainId: thread.domainId,
-        assigneeIds: [thread.assigneeId],
-        issuerId: instance?.issuerId,
-        creatorId: instance?.creatorId,
-        starterId: instance?.starterId,
-        supervisoryRoleId: instance?.supervisoryRoleId,
-        approvals: approvals.map(one => ({ approverId: one.approverId, approverRoleId: one.approverRoleId }))
-    };
-}
-async function factsOfInstance(instance) {
-    const threads = await (0, shell_1.getRepository)(activity_thread_js_1.ActivityThread).find({
-        where: { domain: { id: instance.domainId }, activityInstance: { id: instance.id } }
-    });
-    const approvals = threads.length
-        ? await (0, shell_1.getRepository)(activity_approval_js_1.ActivityApproval).find({
-            where: { domain: { id: instance.domainId }, activityThread: { id: (0, typeorm_1.In)(threads.map(one => one.id)) } }
-        })
-        : [];
-    return {
-        domainId: instance.domainId,
-        assigneeIds: threads.map(one => one.assigneeId),
-        waitingRoleIds: (0, assignee_pool_js_1.poolIdsOf)(instance),
-        issuerId: instance.issuerId,
-        creatorId: instance.creatorId,
-        starterId: instance.starterId,
-        supervisoryRoleId: instance.supervisoryRoleId,
-        approvals: approvals.map(one => ({ approverId: one.approverId, approverRoleId: one.approverRoleId }))
-    };
-}
-async function readerOf(context) {
-    const { domain, user } = context.state;
-    const withRoles = await (0, shell_1.getRepository)(auth_base_1.User).findOne({ where: { id: user.id }, relations: ['roles'] });
-    const roleIds = (withRoles?.roles || []).filter(role => role.domainId === domain.id).map(role => role.id);
-    return { domainId: domain.id, userId: user.id, roleIds };
-}
-/**
- * Whether the caller takes part in this instance or reads every case - for a module whose record hangs on a case and
- * opens to the same people (an expense's receipt to its approvers, ADR-0139).
- */
-async function mayReadInstance(instance, context) {
-    return (0, participates_js_1.participates)(await factsOfInstance(instance), await readerOf(context)) || (await readsEveryCase(context));
-}
-/**
- * Throws a named refusal unless the caller takes part in this instance or reads every case.
- *
- * The draft screen reopens an instance by id. Four of plant's working roles (OPERATOR and the other
- * hands-on roles) hold no activity-instance query privilege, so while this door asked it they could
- * write a draft, see it under "raised by me", and not open it again.
- */
-async function assertMayReadInstance(instance, context) {
-    if ((0, participates_js_1.participates)(await factsOfInstance(instance), await readerOf(context)))
-        return;
-    if (await readsEveryCase(context))
-        return;
-    throw new Error(context.t('error.activity-case not a participant'));
-}
-/** Throws a named refusal unless the caller takes part in this thread or reads every case. */
-async function assertMayReadThread(thread, context) {
-    if ((0, participates_js_1.participates)(await factsOf(thread), await readerOf(context)))
-        return;
-    if (await readsEveryCase(context))
-        return;
-    throw new Error(context.t('error.activity-case not a participant'));
-}
-/** An approval is read through its thread: the same people, the same refusal. */
-async function assertMayReadApproval(approval, context) {
-    const { domain } = context.state;
-    const thread = approval.activityThreadId
-        ? await (0, shell_1.getRepository)(activity_thread_js_1.ActivityThread).findOne({ where: { domain: { id: domain.id }, id: approval.activityThreadId } })
-        : null;
-    if (!thread) {
-        /* An approval with no thread in this domain has nobody to take part in it. */
-        if (await readsEveryCase(context))
-            return;
-        throw new Error(context.t('error.activity-case not a participant'));
-    }
-    await assertMayReadThread(thread, context);
-}
-//# sourceMappingURL=assert-may-read.js.map

package/dist-server/controllers/activity-read/assert-may-read.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"assert-may-read.js","sourceRoot":"","sources":["../../../server/controllers/activity-read/assert-may-read.ts"],"names":[],"mappings":";;AAkFA,0CAEC;AASD,sDAKC;AAGD,kDAKC;AAGD,sDAcC;AA3HD,yDAAiE;AACjE,qCAA4B;AAE5B,iDAAqD;AAErD,+FAAuF;AACvF,+FAAuF;AACvF,uFAA4E;AAC5E,yFAAiF;AACjF,uDAA2D;AAE3D,yDAAyD;AACzD,KAAK,UAAU,cAAc,CAAC,OAAwB;IACpD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;IAEtE,OAAO,MAAM,IAAA,2BAAe,EAC1B,EAAE,QAAQ,EAAE,mBAAmB,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAClE,IAAI,EACJ,MAAM,EACN,QAAQ,EACR,oBAAoB,CACrB,CAAA;AACH,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,MAAsB;IAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,kBAAkB;QACxC,CAAC,CAAC,MAAM,IAAA,qBAAa,EAAC,uCAAgB,CAAC,CAAC,OAAO,CAAC;YAC5C,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,kBAAkB,EAAE;SAC1E,CAAC;QACJ,CAAC,CAAC,IAAI,CAAA;IAER,MAAM,SAAS,GAAG,MAAM,IAAA,qBAAa,EAAC,uCAAgB,CAAC,CAAC,IAAI,CAAC;QAC3D,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE;KAC9E,CAAC,CAAA;IAEF,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC;QAChC,QAAQ,EAAE,QAAQ,EAAE,QAAQ;QAC5B,SAAS,EAAE,QAAQ,EAAE,SAAS;QAC9B,SAAS,EAAE,QAAQ,EAAE,SAAS;QAC9B,iBAAiB,EAAE,QAAQ,EAAE,iBAAiB;QAC9C,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC;KACtG,CAAA;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAA0B;IACvD,MAAM,OAAO,GAAG,MAAM,IAAA,qBAAa,EAAC,mCAAc,CAAC,CAAC,IAAI,CAAC;QACvD,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAE;KACpF,CAAC,CAAA;IAEF,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM;QAC9B,CAAC,CAAC,MAAM,IAAA,qBAAa,EAAC,uCAAgB,CAAC,CAAC,IAAI,CAAC;YACzC,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,EAAE,IAAA,YAAE,EAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE;SACrG,CAAC;QACJ,CAAC,CAAC,EAAE,CAAA;IAEN,OAAO;QACL,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC;QAC/C,cAAc,EAAE,IAAA,4BAAS,EAAC,QAAQ,CAAC;QACnC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;QAC7C,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC;KACtG,CAAA;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,OAAwB;IAC9C,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;IAEtC,MAAM,SAAS,GAAG,MAAM,IAAA,qBAAa,EAAC,gBAAI,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IACrG,MAAM,OAAO,GAAG,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAEzG,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,CAAA;AAC1D,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,eAAe,CAAC,QAA0B,EAAE,OAAwB;IACxF,OAAO,IAAA,8BAAY,EAAC,MAAM,eAAe,CAAC,QAAQ,CAAC,EAAE,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC,CAAA;AAClH,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,qBAAqB,CAAC,QAA0B,EAAE,OAAwB;IAC9F,IAAI,IAAA,8BAAY,EAAC,MAAM,eAAe,CAAC,QAAQ,CAAC,EAAE,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;QAAE,OAAM;IAClF,IAAI,MAAM,cAAc,CAAC,OAAO,CAAC;QAAE,OAAM;IAEzC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uCAAuC,CAAC,CAAC,CAAA;AACrE,CAAC;AAED,8FAA8F;AACvF,KAAK,UAAU,mBAAmB,CAAC,MAAsB,EAAE,OAAwB;IACxF,IAAI,IAAA,8BAAY,EAAC,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;QAAE,OAAM;IACxE,IAAI,MAAM,cAAc,CAAC,OAAO,CAAC;QAAE,OAAM;IAEzC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uCAAuC,CAAC,CAAC,CAAA;AACrE,CAAC;AAED,iFAAiF;AAC1E,KAAK,UAAU,qBAAqB,CAAC,QAA0B,EAAE,OAAwB;IAC9F,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;IAEhC,MAAM,MAAM,GAAG,QAAQ,CAAC,gBAAgB;QACtC,CAAC,CAAC,MAAM,IAAA,qBAAa,EAAC,mCAAc,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,gBAAgB,EAAE,EAAE,CAAC;QACtH,CAAC,CAAC,IAAI,CAAA;IAER,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,8EAA8E;QAC9E,IAAI,MAAM,cAAc,CAAC,OAAO,CAAC;YAAE,OAAM;QACzC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uCAAuC,CAAC,CAAC,CAAA;IACrE,CAAC;IAED,MAAM,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAC5C,CAAC","sourcesContent":["import { checkPermission, User } from '@things-factory/auth-base'\nimport { In } from 'typeorm'\n\nimport { getRepository } from '@things-factory/shell'\n\nimport { ActivityApproval } from '../../service/activity-approval/activity-approval.js'\nimport { ActivityInstance } from '../../service/activity-instance/activity-instance.js'\nimport { poolIdsOf } from '../../service/activity-instance/assignee-pool.js'\nimport { ActivityThread } from '../../service/activity-thread/activity-thread.js'\nimport { CaseFacts, participates } from './participates.js'\n\n/** Whoever may read every instance may read this one. */\nasync function readsEveryCase(context: ResolverContext): Promise<boolean> {\n  const { domain, user, unsafeIP, prohibitedPrivileges } = context.state\n\n  return await checkPermission(\n    { category: 'activity-instance', privilege: 'query', owner: true },\n    user,\n    domain,\n    unsafeIP,\n    prohibitedPrivileges\n  )\n}\n\nasync function factsOf(thread: ActivityThread): Promise<CaseFacts> {\n  const instance = thread.activityInstanceId\n    ? await getRepository(ActivityInstance).findOne({\n        where: { domain: { id: thread.domainId }, id: thread.activityInstanceId }\n      })\n    : null\n\n  const approvals = await getRepository(ActivityApproval).find({\n    where: { domain: { id: thread.domainId }, activityThread: { id: thread.id } }\n  })\n\n  return {\n    domainId: thread.domainId,\n    assigneeIds: [thread.assigneeId],\n    issuerId: instance?.issuerId,\n    creatorId: instance?.creatorId,\n    starterId: instance?.starterId,\n    supervisoryRoleId: instance?.supervisoryRoleId,\n    approvals: approvals.map(one => ({ approverId: one.approverId, approverRoleId: one.approverRoleId }))\n  }\n}\n\nasync function factsOfInstance(instance: ActivityInstance): Promise<CaseFacts> {\n  const threads = await getRepository(ActivityThread).find({\n    where: { domain: { id: instance.domainId }, activityInstance: { id: instance.id } }\n  })\n\n  const approvals = threads.length\n    ? await getRepository(ActivityApproval).find({\n        where: { domain: { id: instance.domainId }, activityThread: { id: In(threads.map(one => one.id)) } }\n      })\n    : []\n\n  return {\n    domainId: instance.domainId,\n    assigneeIds: threads.map(one => one.assigneeId),\n    waitingRoleIds: poolIdsOf(instance),\n    issuerId: instance.issuerId,\n    creatorId: instance.creatorId,\n    starterId: instance.starterId,\n    supervisoryRoleId: instance.supervisoryRoleId,\n    approvals: approvals.map(one => ({ approverId: one.approverId, approverRoleId: one.approverRoleId }))\n  }\n}\n\nasync function readerOf(context: ResolverContext) {\n  const { domain, user } = context.state\n\n  const withRoles = await getRepository(User).findOne({ where: { id: user.id }, relations: ['roles'] })\n  const roleIds = (withRoles?.roles || []).filter(role => role.domainId === domain.id).map(role => role.id)\n\n  return { domainId: domain.id, userId: user.id, roleIds }\n}\n\n/**\n * Whether the caller takes part in this instance or reads every case - for a module whose record hangs on a case and\n * opens to the same people (an expense's receipt to its approvers, ADR-0139).\n */\nexport async function mayReadInstance(instance: ActivityInstance, context: ResolverContext): Promise<boolean> {\n  return participates(await factsOfInstance(instance), await readerOf(context)) || (await readsEveryCase(context))\n}\n\n/**\n * Throws a named refusal unless the caller takes part in this instance or reads every case.\n *\n * The draft screen reopens an instance by id. Four of plant's working roles (OPERATOR and the other\n * hands-on roles) hold no activity-instance query privilege, so while this door asked it they could\n * write a draft, see it under \"raised by me\", and not open it again.\n */\nexport async function assertMayReadInstance(instance: ActivityInstance, context: ResolverContext): Promise<void> {\n  if (participates(await factsOfInstance(instance), await readerOf(context))) return\n  if (await readsEveryCase(context)) return\n\n  throw new Error(context.t('error.activity-case not a participant'))\n}\n\n/** Throws a named refusal unless the caller takes part in this thread or reads every case. */\nexport async function assertMayReadThread(thread: ActivityThread, context: ResolverContext): Promise<void> {\n  if (participates(await factsOf(thread), await readerOf(context))) return\n  if (await readsEveryCase(context)) return\n\n  throw new Error(context.t('error.activity-case not a participant'))\n}\n\n/** An approval is read through its thread: the same people, the same refusal. */\nexport async function assertMayReadApproval(approval: ActivityApproval, context: ResolverContext): Promise<void> {\n  const { domain } = context.state\n\n  const thread = approval.activityThreadId\n    ? await getRepository(ActivityThread).findOne({ where: { domain: { id: domain.id }, id: approval.activityThreadId } })\n    : null\n\n  if (!thread) {\n    /* An approval with no thread in this domain has nobody to take part in it. */\n    if (await readsEveryCase(context)) return\n    throw new Error(context.t('error.activity-case not a participant'))\n  }\n\n  await assertMayReadThread(thread, context)\n}\n"]}