@things-factory/worklist 10.1.247 → 10.1.248

package/dist-server/service/activity/activity.js

@@ -1,328 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.Activity = exports.AssigneeItem = exports.ActivityUIType = exports.MultipleInstanceType = exports.ActivityType = exports.ActivityStartingType = exports.ActivityStatus = void 0;
-const tslib_1 = require("tslib");
-const type_graphql_1 = require("type-graphql");
-const typeorm_1 = require("typeorm");
-const auth_base_1 = require("@things-factory/auth-base");
-const shell_1 = require("@things-factory/shell");
-const organization_1 = require("@things-factory/organization");
-const activity_model_type_js_1 = require("./activity-model-type.js");
-const activity_search_key_item_type_js_1 = require("./activity-search-key-item-type.js");
-const activity_decision_key_item_type_js_1 = require("./activity-decision-key-item-type.js");
-var ActivityStatus;
-(function (ActivityStatus) {
-    ActivityStatus["Draft"] = "draft";
-    ActivityStatus["Released"] = "released";
-    ActivityStatus["Deprecated"] = "deprecated";
-})(ActivityStatus || (exports.ActivityStatus = ActivityStatus = {}));
-(0, type_graphql_1.registerEnumType)(ActivityStatus, {
-    name: 'ActivityStatus',
-    description: 'state enumeration of a activity'
-});
-var ActivityStartingType;
-(function (ActivityStartingType) {
-    ActivityStartingType["None"] = "";
-    ActivityStartingType["Post"] = "post";
-    ActivityStartingType["Issue"] = "issue";
-})(ActivityStartingType || (exports.ActivityStartingType = ActivityStartingType = {}));
-(0, type_graphql_1.registerEnumType)(ActivityStartingType, {
-    name: 'ActivityStartingType',
-    description: 'whether the purpose of starting the activity is to issue or post'
-});
-var ActivityType;
-(function (ActivityType) {
-    ActivityType["Task"] = "task";
-    ActivityType["Service"] = "service";
-    ActivityType["Send"] = "send";
-    ActivityType["Receive"] = "receive";
-    ActivityType["User"] = "user";
-    ActivityType["Manual"] = "manual";
-    ActivityType["BusinessRule"] = "business-rule";
-    ActivityType["Script"] = "script";
-    ActivityType["Subprocess"] = "sub-process";
-    ActivityType["Call"] = "call";
-})(ActivityType || (exports.ActivityType = ActivityType = {}));
-(0, type_graphql_1.registerEnumType)(ActivityType, {
-    name: 'ActivityType',
-    description: 'type enumeration of a activity based on BPMN 2.0'
-});
-var MultipleInstanceType;
-(function (MultipleInstanceType) {
-    MultipleInstanceType["Single"] = "single";
-    MultipleInstanceType["Parallel"] = "parallel";
-    MultipleInstanceType["Sequential"] = "sequential";
-})(MultipleInstanceType || (exports.MultipleInstanceType = MultipleInstanceType = {}));
-(0, type_graphql_1.registerEnumType)(MultipleInstanceType, {
-    name: 'MultipleInstanceType',
-    description: 'type enumeration of a multiple instance property based on BPMN 2.0'
-});
-var ActivityUIType;
-(function (ActivityUIType) {
-    ActivityUIType["Generated"] = "generated";
-    ActivityUIType["Template"] = "template";
-    ActivityUIType["Board"] = "board";
-    ActivityUIType["CustomElement"] = "custom-element";
-    ActivityUIType["Page"] = "page";
-    ActivityUIType["External"] = "external";
-})(ActivityUIType || (exports.ActivityUIType = ActivityUIType = {}));
-(0, type_graphql_1.registerEnumType)(ActivityUIType, {
-    name: 'ActivityUIType',
-    description: 'user-interface type enumeration of a activity'
-});
-let AssigneeItem = class AssigneeItem {
-};
-exports.AssigneeItem = AssigneeItem;
-tslib_1.__decorate([
-    (0, type_graphql_1.Field)(type => organization_1.OrgMemberTargetType, { nullable: true }),
-    tslib_1.__metadata("design:type", String)
-], AssigneeItem.prototype, "type", void 0);
-tslib_1.__decorate([
-    (0, type_graphql_1.Field)({ nullable: true }),
-    tslib_1.__metadata("design:type", String)
-], AssigneeItem.prototype, "value", void 0);
-tslib_1.__decorate([
-    (0, type_graphql_1.Field)(type => organization_1.OrgMemberTarget, { nullable: true }),
-    tslib_1.__metadata("design:type", organization_1.OrgMemberTarget)
-], AssigneeItem.prototype, "assignee", void 0);
-exports.AssigneeItem = AssigneeItem = tslib_1.__decorate([
-    (0, type_graphql_1.ObjectType)()
-], AssigneeItem);
-let Activity = class Activity {
-    constructor() {
-        this.version = 1;
-        this.priority = 1;
-    }
-};
-exports.Activity = Activity;
-tslib_1.__decorate([
-    (0, typeorm_1.PrimaryGeneratedColumn)('uuid'),
-    (0, type_graphql_1.Field)(type => type_graphql_1.ID),
-    tslib_1.__metadata("design:type", String)
-], Activity.prototype, "id", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.VersionColumn)({ default: 1 }),
-    (0, type_graphql_1.Field)({ nullable: true }),
-    tslib_1.__metadata("design:type", Number)
-], Activity.prototype, "version", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.ManyToOne)(type => shell_1.Domain),
-    (0, type_graphql_1.Field)(type => shell_1.Domain, { nullable: true }),
-    tslib_1.__metadata("design:type", shell_1.Domain)
-], Activity.prototype, "domain", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.RelationId)((activity) => activity.domain),
-    tslib_1.__metadata("design:type", String)
-], Activity.prototype, "domainId", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.Column)(),
-    (0, type_graphql_1.Field)({ nullable: true }),
-    tslib_1.__metadata("design:type", String)
-], Activity.prototype, "name", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.Column)({ nullable: true }),
-    (0, type_graphql_1.Field)({ nullable: true, description: 'Display name for a person. `name` is the callback key.' }),
-    tslib_1.__metadata("design:type", String)
-], Activity.prototype, "label", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.Column)({ nullable: true }),
-    (0, type_graphql_1.Field)({ nullable: true }),
-    tslib_1.__metadata("design:type", String)
-], Activity.prototype, "description", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.Column)({ nullable: true }),
-    (0, type_graphql_1.Field)({ nullable: true, description: 'BPMN 2.0 task type' }),
-    tslib_1.__metadata("design:type", String)
-], Activity.prototype, "activityType", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.Column)({ nullable: true }),
-    (0, type_graphql_1.Field)({ nullable: true }),
-    tslib_1.__metadata("design:type", String)
-], Activity.prototype, "state", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.Column)('simple-json', { nullable: true }),
-    (0, type_graphql_1.Field)(type => [activity_search_key_item_type_js_1.ActivitySearchKeyItem], { nullable: true }),
-    tslib_1.__metadata("design:type", Array)
-], Activity.prototype, "searchKeys", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.Column)('simple-json', { nullable: true }),
-    (0, type_graphql_1.Field)(type => [activity_decision_key_item_type_js_1.ActivityDecisionKeyItem], {
-        nullable: true,
-        description: 'Which input values an approver judges by, and the part each one plays'
-    }),
-    tslib_1.__metadata("design:type", Array)
-], Activity.prototype, "decisionKeys", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.Column)('simple-json', { nullable: true }),
-    (0, type_graphql_1.Field)(type => [activity_model_type_js_1.ActivityModelItem], { nullable: true }),
-    tslib_1.__metadata("design:type", Array)
-], Activity.prototype, "model", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.Column)({ nullable: true, default: 1 }),
-    (0, type_graphql_1.Field)({ nullable: true }),
-    tslib_1.__metadata("design:type", Number)
-], Activity.prototype, "priority", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.Column)({ nullable: true }),
-    (0, type_graphql_1.Field)({ nullable: true, description: 'Whether the purpose of starting the activity is to issue or post' }),
-    tslib_1.__metadata("design:type", String)
-], Activity.prototype, "startingType", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.Column)({ nullable: true }),
-    (0, type_graphql_1.Field)({
-        nullable: true,
-        description: 'Parallel or sequential are properties as a multi-instance activity, otherwise it means a single instance.'
-    }),
-    tslib_1.__metadata("design:type", String)
-], Activity.prototype, "multiple", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.Column)({ nullable: true }),
-    (0, type_graphql_1.Field)({ nullable: true, description: 'Autostart schedule in crontab format' }),
-    tslib_1.__metadata("design:type", String)
-], Activity.prototype, "schedule", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.Column)({ nullable: true }),
-    (0, type_graphql_1.Field)({ nullable: true, description: 'ID of the autostart schedule registered in the schedule service' }),
-    tslib_1.__metadata("design:type", String)
-], Activity.prototype, "scheduleId", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.Column)({ nullable: true }),
-    (0, type_graphql_1.Field)({ nullable: true, description: 'Time zone to which automatic scheduling is applied' }),
-    tslib_1.__metadata("design:type", String)
-], Activity.prototype, "timezone", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.Column)({ nullable: true }),
-    (0, type_graphql_1.Field)({ nullable: true, description: 'Standard time for this activity to be performed' }),
-    tslib_1.__metadata("design:type", Number)
-], Activity.prototype, "standardTime", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.ManyToOne)(type => auth_base_1.Role, { nullable: true }),
-    (0, type_graphql_1.Field)(type => auth_base_1.Role, { nullable: true }),
-    tslib_1.__metadata("design:type", auth_base_1.Role)
-], Activity.prototype, "issuerRole", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.RelationId)((activity) => activity.issuerRole),
-    tslib_1.__metadata("design:type", String)
-], Activity.prototype, "issuerRoleId", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.ManyToMany)(type => auth_base_1.Role),
-    (0, typeorm_1.JoinTable)({
-        name: 'activities_assignee_roles',
-        joinColumn: { name: 'activities_id', referencedColumnName: 'id' },
-        inverseJoinColumn: { name: 'roles_id', referencedColumnName: 'id' }
-    }),
-    (0, type_graphql_1.Field)(type => [auth_base_1.Role], {
-        nullable: true,
-        description: 'Roles whose holders may pick up a case of this activity - anyone holding any one of them.'
-    }),
-    tslib_1.__metadata("design:type", Array)
-], Activity.prototype, "assigneeRoles", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.RelationId)((activity) => activity.assigneeRoles),
-    tslib_1.__metadata("design:type", Array)
-], Activity.prototype, "assigneeRoleIds", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.ManyToOne)(type => auth_base_1.Role, { nullable: true }),
-    (0, type_graphql_1.Field)(type => auth_base_1.Role, { nullable: true, description: 'The final authority on a given activity.' }),
-    tslib_1.__metadata("design:type", auth_base_1.Role)
-], Activity.prototype, "supervisoryRole", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.RelationId)((activity) => activity.supervisoryRole),
-    tslib_1.__metadata("design:type", String)
-], Activity.prototype, "supervisoryRoleId", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.Column)('simple-json', { nullable: true }),
-    (0, type_graphql_1.Field)(type => [AssigneeItem], { nullable: true, description: 'Who to resolve for the activity.' }),
-    tslib_1.__metadata("design:type", Array)
-], Activity.prototype, "assignees", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.Column)('simple-json', { nullable: true }),
-    (0, type_graphql_1.Field)(type => [organization_1.ApprovalLineItem], {
-        nullable: true,
-        description: 'Approval line for handling the activity.'
-    }),
-    tslib_1.__metadata("design:type", Array)
-], Activity.prototype, "approvalLine", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.Column)({ type: 'boolean', nullable: true, default: false }),
-    (0, type_graphql_1.Field)({ nullable: true, description: 'true when a rejection closes the case for good — it cannot be restarted' }),
-    tslib_1.__metadata("design:type", Boolean)
-], Activity.prototype, "rejectionIsFinal", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.Column)({ nullable: true }),
-    (0, type_graphql_1.Field)({ nullable: true, description: 'The type of UI to be shown when a task is performed' }),
-    tslib_1.__metadata("design:type", String)
-], Activity.prototype, "uiType", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.Column)({ nullable: true }),
-    (0, type_graphql_1.Field)({ nullable: true }),
-    tslib_1.__metadata("design:type", String)
-], Activity.prototype, "uiSource", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.Column)({ nullable: true }),
-    (0, type_graphql_1.Field)({ nullable: true, description: 'The type of view to be shown when a task is approved' }),
-    tslib_1.__metadata("design:type", String)
-], Activity.prototype, "viewType", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.Column)({ nullable: true }),
-    (0, type_graphql_1.Field)({ nullable: true }),
-    tslib_1.__metadata("design:type", String)
-], Activity.prototype, "viewSource", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.Column)({ nullable: true }),
-    (0, type_graphql_1.Field)({ nullable: true, description: 'The type of report to be shown when a task is approved' }),
-    tslib_1.__metadata("design:type", String)
-], Activity.prototype, "reportType", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.Column)({ nullable: true }),
-    (0, type_graphql_1.Field)({ nullable: true }),
-    tslib_1.__metadata("design:type", String)
-], Activity.prototype, "reportSource", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.CreateDateColumn)(),
-    (0, type_graphql_1.Field)({ nullable: true }),
-    tslib_1.__metadata("design:type", Date)
-], Activity.prototype, "createdAt", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.UpdateDateColumn)(),
-    (0, type_graphql_1.Field)({ nullable: true }),
-    tslib_1.__metadata("design:type", Date)
-], Activity.prototype, "updatedAt", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.ManyToOne)(type => auth_base_1.User, { nullable: true }),
-    (0, type_graphql_1.Field)(type => auth_base_1.User, { nullable: true, description: 'User assigned to the client application' }),
-    tslib_1.__metadata("design:type", auth_base_1.User)
-], Activity.prototype, "client", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.RelationId)((activity) => activity.client),
-    tslib_1.__metadata("design:type", String)
-], Activity.prototype, "clientId", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.ManyToOne)(type => auth_base_1.User, { nullable: true }),
-    (0, type_graphql_1.Field)(type => auth_base_1.User, { nullable: true }),
-    tslib_1.__metadata("design:type", auth_base_1.User)
-], Activity.prototype, "creator", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.RelationId)((activity) => activity.creator),
-    tslib_1.__metadata("design:type", String)
-], Activity.prototype, "creatorId", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.ManyToOne)(type => auth_base_1.User, { nullable: true }),
-    (0, type_graphql_1.Field)(type => auth_base_1.User, { nullable: true }),
-    tslib_1.__metadata("design:type", auth_base_1.User)
-], Activity.prototype, "updater", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.RelationId)((activity) => activity.updater),
-    tslib_1.__metadata("design:type", String)
-], Activity.prototype, "updaterId", void 0);
-tslib_1.__decorate([
-    (0, type_graphql_1.Field)(type => String, { nullable: true }),
-    tslib_1.__metadata("design:type", String)
-], Activity.prototype, "thumbnail", void 0);
-exports.Activity = Activity = tslib_1.__decorate([
-    (0, typeorm_1.Entity)(),
-    (0, typeorm_1.Index)('ix_activity_0', (activity) => [activity.domain, activity.name], { unique: true }),
-    (0, typeorm_1.Index)('ix_activity_1', (activity) => [activity.domain, activity.state, activity.priority], { unique: false }),
-    (0, type_graphql_1.ObjectType)({ description: 'Entity for Activity' })
-], Activity);
-//# sourceMappingURL=activity.js.map

package/dist-server/service/activity/activity.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"activity.js","sourceRoot":"","sources":["../../../server/service/activity/activity.ts"],"names":[],"mappings":";;;;AAAA,+CAAsE;AACtE,qCAYgB;AAEhB,yDAAsD;AACtD,iDAA8C;AAC9C,+DAAqG;AAErG,qEAA4D;AAC5D,yFAA0E;AAC1E,6FAA8E;AAE9E,IAAY,cAIX;AAJD,WAAY,cAAc;IACxB,iCAAe,CAAA;IACf,uCAAqB,CAAA;IACrB,2CAAyB,CAAA;AAC3B,CAAC,EAJW,cAAc,8BAAd,cAAc,QAIzB;AAED,IAAA,+BAAgB,EAAC,cAAc,EAAE;IAC/B,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,iCAAiC;CAC/C,CAAC,CAAA;AAEF,IAAY,oBAIX;AAJD,WAAY,oBAAoB;IAC9B,iCAAS,CAAA;IACT,qCAAa,CAAA;IACb,uCAAe,CAAA;AACjB,CAAC,EAJW,oBAAoB,oCAApB,oBAAoB,QAI/B;AAED,IAAA,+BAAgB,EAAC,oBAAoB,EAAE;IACrC,IAAI,EAAE,sBAAsB;IAC5B,WAAW,EAAE,kEAAkE;CAChF,CAAC,CAAA;AAEF,IAAY,YAWX;AAXD,WAAY,YAAY;IACtB,6BAAa,CAAA;IACb,mCAAmB,CAAA;IACnB,6BAAa,CAAA;IACb,mCAAmB,CAAA;IACnB,6BAAa,CAAA;IACb,iCAAiB,CAAA;IACjB,8CAA8B,CAAA;IAC9B,iCAAiB,CAAA;IACjB,0CAA0B,CAAA;IAC1B,6BAAa,CAAA;AACf,CAAC,EAXW,YAAY,4BAAZ,YAAY,QAWvB;AAED,IAAA,+BAAgB,EAAC,YAAY,EAAE;IAC7B,IAAI,EAAE,cAAc;IACpB,WAAW,EAAE,kDAAkD;CAChE,CAAC,CAAA;AAEF,IAAY,oBAIX;AAJD,WAAY,oBAAoB;IAC9B,yCAAiB,CAAA;IACjB,6CAAqB,CAAA;IACrB,iDAAyB,CAAA;AAC3B,CAAC,EAJW,oBAAoB,oCAApB,oBAAoB,QAI/B;AAED,IAAA,+BAAgB,EAAC,oBAAoB,EAAE;IACrC,IAAI,EAAE,sBAAsB;IAC5B,WAAW,EAAE,oEAAoE;CAClF,CAAC,CAAA;AAEF,IAAY,cAOX;AAPD,WAAY,cAAc;IACxB,yCAAuB,CAAA;IACvB,uCAAqB,CAAA;IACrB,iCAAe,CAAA;IACf,kDAAgC,CAAA;IAChC,+BAAa,CAAA;IACb,uCAAqB,CAAA;AACvB,CAAC,EAPW,cAAc,8BAAd,cAAc,QAOzB;AAED,IAAA,+BAAgB,EAAC,cAAc,EAAE;IAC/B,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,+CAA+C;CAC7D,CAAC,CAAA;AAGK,IAAM,YAAY,GAAlB,MAAM,YAAY;CASxB,CAAA;AATY,oCAAY;AAEvB;IADC,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,kCAAmB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;0CAC7B;AAG1B;IADC,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;2CACZ;AAGd;IADC,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,8BAAe,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;sCACxC,8BAAe;8CAAA;uBARf,YAAY;IADxB,IAAA,yBAAU,GAAE;GACA,YAAY,CASxB;AAMM,IAAM,QAAQ,GAAd,MAAM,QAAQ;IAAd;QAOL,YAAO,GAAY,CAAC,CAAA;QAyEpB,aAAQ,GAAY,CAAC,CAAA;IAsJvB,CAAC;CAAA,CAAA;AAtOY,4BAAQ;AAGV;IAFR,IAAA,gCAAsB,EAAC,MAAM,CAAC;IAC9B,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,iBAAE,CAAC;;oCACC;AAInB;IAFC,IAAA,uBAAa,EAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAC7B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;yCACN;AAIpB;IAFC,IAAA,mBAAS,EAAC,IAAI,CAAC,EAAE,CAAC,cAAM,CAAC;IACzB,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,cAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;sCACjC,cAAM;wCAAA;AAGf;IADC,IAAA,oBAAU,EAAC,CAAC,QAAkB,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;;0CACnC;AAIjB;IAFC,IAAA,gBAAM,GAAE;IACR,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;sCACb;AAcb;IAFC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,wDAAwD,EAAE,CAAC;;uCACnF;AAId;IAFC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;6CACN;AAIpB;IAFC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC;;8CAClC;AAI3B;IAFC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;uCACJ;AAItB;IAFC,IAAA,gBAAM,EAAC,aAAa,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACzC,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC,wDAAqB,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;4CACvB;AAwBpC;IALC,IAAA,gBAAM,EAAC,aAAa,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACzC,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC,4DAAuB,CAAC,EAAE;QACxC,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,uEAAuE;KACrF,CAAC;;8CACsC;AAIxC;IAFC,IAAA,gBAAM,EAAC,aAAa,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACzC,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC,0CAAiB,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;uCAC5B;AAI3B;IAFC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACtC,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;0CACL;AAIrB;IAFC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,kEAAkE,EAAE,CAAC;;8CACxE;AAQnC;IANC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAA,oBAAK,EAAC;QACL,QAAQ,EAAE,IAAI;QACd,WAAW,EACT,2GAA2G;KAC9G,CAAC;;0CAC6B;AAI/B;IAFC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,sCAAsC,EAAE,CAAC;;0CAC9D;AAIjB;IAFC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,iEAAiE,EAAE,CAAC;;4CACvF;AAInB;IAFC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,oDAAoD,EAAE,CAAC;;0CAC5E;AAIjB;IAFC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,iDAAiD,EAAE,CAAC;;8CACrE;AAIrB;IAFC,IAAA,mBAAS,EAAC,IAAI,CAAC,EAAE,CAAC,gBAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,gBAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;sCAC3B,gBAAI;4CAAA;AAGjB;IADC,IAAA,oBAAU,EAAC,CAAC,QAAkB,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC;;8CACnC;AAgBrB;IAVC,IAAA,oBAAU,EAAC,IAAI,CAAC,EAAE,CAAC,gBAAI,CAAC;IACxB,IAAA,mBAAS,EAAC;QACT,IAAI,EAAE,2BAA2B;QACjC,UAAU,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,oBAAoB,EAAE,IAAI,EAAE;QACjE,iBAAiB,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,oBAAoB,EAAE,IAAI,EAAE;KACpE,CAAC;IACD,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC,gBAAI,CAAC,EAAE;QACrB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,2FAA2F;KACzG,CAAC;;+CACoB;AAGtB;IADC,IAAA,oBAAU,EAAC,CAAC,QAAkB,EAAE,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;;iDACjC;AAI1B;IAFC,IAAA,mBAAS,EAAC,IAAI,CAAC,EAAE,CAAC,gBAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,gBAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,0CAA0C,EAAE,CAAC;sCAC/E,gBAAI;iDAAA;AAGtB;IADC,IAAA,oBAAU,EAAC,CAAC,QAAkB,EAAE,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC;;mDACnC;AAI1B;IAFC,IAAA,gBAAM,EAAC,aAAa,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACzC,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,kCAAkC,EAAE,CAAC;;2CACzE;AAO1B;IALC,IAAA,gBAAM,EAAC,aAAa,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACzC,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC,+BAAgB,CAAC,EAAE;QACjC,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,0CAA0C;KACxD,CAAC;;8CAC+B;AAqBjC;IAFC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC3D,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,yEAAyE,EAAE,CAAC;;kDACxF;AAI1B;IAFC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,qDAAqD,EAAE,CAAC;;wCACvE;AAIvB;IAFC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;0CACT;AAIjB;IAFC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,sDAAsD,EAAE,CAAC;;0CACtE;AAIzB;IAFC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;4CACP;AAInB;IAFC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,wDAAwD,EAAE,CAAC;;4CACtE;AAI3B;IAFC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;8CACL;AAIrB;IAFC,IAAA,0BAAgB,GAAE;IAClB,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;sCACd,IAAI;2CAAA;AAIhB;IAFC,IAAA,0BAAgB,GAAE;IAClB,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;sCACd,IAAI;2CAAA;AAIhB;IAFC,IAAA,mBAAS,EAAC,IAAI,CAAC,EAAE,CAAC,gBAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,gBAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,yCAAyC,EAAE,CAAC;sCACvF,gBAAI;wCAAA;AAGb;IADC,IAAA,oBAAU,EAAC,CAAC,QAAkB,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;;0CACnC;AAIjB;IAFC,IAAA,mBAAS,EAAC,IAAI,CAAC,EAAE,CAAC,gBAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,gBAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;sCAC9B,gBAAI;yCAAA;AAGd;IADC,IAAA,oBAAU,EAAC,CAAC,QAAkB,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC;;2CACnC;AAIlB;IAFC,IAAA,mBAAS,EAAC,IAAI,CAAC,EAAE,CAAC,gBAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,gBAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;sCAC9B,gBAAI;yCAAA;AAGd;IADC,IAAA,oBAAU,EAAC,CAAC,QAAkB,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC;;2CACnC;AAGlB;IADC,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;2CACxB;mBArOP,QAAQ;IAJpB,IAAA,gBAAM,GAAE;IACR,IAAA,eAAK,EAAC,eAAe,EAAE,CAAC,QAAkB,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAClG,IAAA,eAAK,EAAC,eAAe,EAAE,CAAC,QAAkB,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACvH,IAAA,yBAAU,EAAC,EAAE,WAAW,EAAE,qBAAqB,EAAE,CAAC;GACtC,QAAQ,CAsOpB","sourcesContent":["import { Field, ID, ObjectType, registerEnumType } from 'type-graphql'\nimport {\n  Column,\n  CreateDateColumn,\n  Entity,\n  Index,\n  JoinTable,\n  ManyToMany,\n  ManyToOne,\n  PrimaryGeneratedColumn,\n  RelationId,\n  UpdateDateColumn,\n  VersionColumn\n} from 'typeorm'\n\nimport { Role, User } from '@things-factory/auth-base'\nimport { Domain } from '@things-factory/shell'\nimport { OrgMemberTargetType, OrgMemberTarget, ApprovalLineItem } from '@things-factory/organization'\n\nimport { ActivityModelItem } from './activity-model-type.js'\nimport { ActivitySearchKeyItem } from './activity-search-key-item-type.js'\nimport { ActivityDecisionKeyItem } from './activity-decision-key-item-type.js'\n\nexport enum ActivityStatus {\n  Draft = 'draft',\n  Released = 'released',\n  Deprecated = 'deprecated'\n}\n\nregisterEnumType(ActivityStatus, {\n  name: 'ActivityStatus',\n  description: 'state enumeration of a activity'\n})\n\nexport enum ActivityStartingType {\n  None = '',\n  Post = 'post',\n  Issue = 'issue'\n}\n\nregisterEnumType(ActivityStartingType, {\n  name: 'ActivityStartingType',\n  description: 'whether the purpose of starting the activity is to issue or post'\n})\n\nexport enum ActivityType {\n  Task = 'task',\n  Service = 'service',\n  Send = 'send',\n  Receive = 'receive',\n  User = 'user',\n  Manual = 'manual',\n  BusinessRule = 'business-rule',\n  Script = 'script',\n  Subprocess = 'sub-process',\n  Call = 'call'\n}\n\nregisterEnumType(ActivityType, {\n  name: 'ActivityType',\n  description: 'type enumeration of a activity based on BPMN 2.0'\n})\n\nexport enum MultipleInstanceType {\n  Single = 'single',\n  Parallel = 'parallel',\n  Sequential = 'sequential'\n}\n\nregisterEnumType(MultipleInstanceType, {\n  name: 'MultipleInstanceType',\n  description: 'type enumeration of a multiple instance property based on BPMN 2.0'\n})\n\nexport enum ActivityUIType {\n  Generated = 'generated',\n  Template = 'template',\n  Board = 'board',\n  CustomElement = 'custom-element',\n  Page = 'page',\n  External = 'external'\n}\n\nregisterEnumType(ActivityUIType, {\n  name: 'ActivityUIType',\n  description: 'user-interface type enumeration of a activity'\n})\n\n@ObjectType()\nexport class AssigneeItem {\n  @Field(type => OrgMemberTargetType, { nullable: true })\n  type?: OrgMemberTargetType\n\n  @Field({ nullable: true })\n  value?: string\n\n  @Field(type => OrgMemberTarget, { nullable: true })\n  assignee?: OrgMemberTarget\n}\n\n@Entity()\n@Index('ix_activity_0', (activity: Activity) => [activity.domain, activity.name], { unique: true })\n@Index('ix_activity_1', (activity: Activity) => [activity.domain, activity.state, activity.priority], { unique: false })\n@ObjectType({ description: 'Entity for Activity' })\nexport class Activity {\n  @PrimaryGeneratedColumn('uuid')\n  @Field(type => ID)\n  readonly id: string\n\n  @VersionColumn({ default: 1 })\n  @Field({ nullable: true })\n  version?: number = 1\n\n  @ManyToOne(type => Domain)\n  @Field(type => Domain, { nullable: true })\n  domain?: Domain\n\n  @RelationId((activity: Activity) => activity.domain)\n  domainId?: string\n\n  @Column()\n  @Field({ nullable: true })\n  name?: string\n\n  /**\n   * The display name a person reads. `name` is the callback key and renaming it breaks callbacks.\n   *\n   * ── Why this is a column ──────────────────────────────────────────────────\n   * It was declared on InstallableActivity only, and installActivity spread the template onto this\n   * row, so a field with no column here was dropped and the save reported success. The result was\n   * that 「부적합 처분 승인」 reached exactly one screen — the catalog, which reads the template\n   * registry directly — while every screen that reads this row showed the instance name and the\n   * instance description instead. The activity's own name appeared nowhere on the approval screen.\n   */\n  @Column({ nullable: true })\n  @Field({ nullable: true, description: 'Display name for a person. `name` is the callback key.' })\n  label?: string\n\n  @Column({ nullable: true })\n  @Field({ nullable: true })\n  description?: string\n\n  @Column({ nullable: true })\n  @Field({ nullable: true, description: 'BPMN 2.0 task type' })\n  activityType?: ActivityType\n\n  @Column({ nullable: true })\n  @Field({ nullable: true })\n  state?: ActivityStatus\n\n  @Column('simple-json', { nullable: true })\n  @Field(type => [ActivitySearchKeyItem], { nullable: true })\n  searchKeys?: ActivitySearchKeyItem[]\n\n  /**\n   * What an approver reads, and the part each value plays.\n   *\n   * The approval screen has one frame for every activity — ribbon, content, timeline, comment — and\n   * the content is drawn by whichever of the six ui types the activity names. Five of the six point\n   * at something built by hand; the sixth, `generated`, draws the model as a list of name and value\n   * pairs. A list of pairs answers \"what are the values\" and not \"what happens if I approve\", which\n   * is the only question this screen exists for, so every activity that needed the second answer\n   * left `generated` and shipped a custom element. plant wrote four of them and all four laid out\n   * the same five slots in the same order.\n   *\n   * Declaring the slots lets `generated` draw a decision. It also reaches the activity with no\n   * screen at all: the twin actuation approval, whose ten values arrive as a flat list today and\n   * whose approval is the one that actually moves equipment.\n   *\n   * Empty means nobody has declared it, and `generated` falls back to the model as before.\n   */\n  @Column('simple-json', { nullable: true })\n  @Field(type => [ActivityDecisionKeyItem], {\n    nullable: true,\n    description: 'Which input values an approver judges by, and the part each one plays'\n  })\n  decisionKeys?: ActivityDecisionKeyItem[]\n\n  @Column('simple-json', { nullable: true })\n  @Field(type => [ActivityModelItem], { nullable: true })\n  model?: ActivityModelItem[]\n\n  @Column({ nullable: true, default: 1 })\n  @Field({ nullable: true })\n  priority?: number = 1\n\n  @Column({ nullable: true })\n  @Field({ nullable: true, description: 'Whether the purpose of starting the activity is to issue or post' })\n  startingType?: ActivityStartingType\n\n  @Column({ nullable: true })\n  @Field({\n    nullable: true,\n    description:\n      'Parallel or sequential are properties as a multi-instance activity, otherwise it means a single instance.'\n  })\n  multiple?: MultipleInstanceType\n\n  @Column({ nullable: true })\n  @Field({ nullable: true, description: 'Autostart schedule in crontab format' })\n  schedule?: string\n\n  @Column({ nullable: true })\n  @Field({ nullable: true, description: 'ID of the autostart schedule registered in the schedule service' })\n  scheduleId?: string\n\n  @Column({ nullable: true })\n  @Field({ nullable: true, description: 'Time zone to which automatic scheduling is applied' })\n  timezone?: string\n\n  @Column({ nullable: true })\n  @Field({ nullable: true, description: 'Standard time for this activity to be performed' })\n  standardTime?: number\n\n  @ManyToOne(type => Role, { nullable: true })\n  @Field(type => Role, { nullable: true })\n  issuerRole?: Role\n\n  @RelationId((activity: Activity) => activity.issuerRole)\n  issuerRoleId?: string\n\n  /*\n   * The pool: anyone holding any one of these roles may pick a case of this activity (ADR-0091 decision 9,\n   * user 2026-10-20 - one task can be done from several roles). Empty is no pool.\n   */\n  @ManyToMany(type => Role)\n  @JoinTable({\n    name: 'activities_assignee_roles',\n    joinColumn: { name: 'activities_id', referencedColumnName: 'id' },\n    inverseJoinColumn: { name: 'roles_id', referencedColumnName: 'id' }\n  })\n  @Field(type => [Role], {\n    nullable: true,\n    description: 'Roles whose holders may pick up a case of this activity - anyone holding any one of them.'\n  })\n  assigneeRoles?: Role[]\n\n  @RelationId((activity: Activity) => activity.assigneeRoles)\n  assigneeRoleIds?: string[]\n\n  @ManyToOne(type => Role, { nullable: true })\n  @Field(type => Role, { nullable: true, description: 'The final authority on a given activity.' })\n  supervisoryRole?: Role\n\n  @RelationId((activity: Activity) => activity.supervisoryRole)\n  supervisoryRoleId?: string\n\n  @Column('simple-json', { nullable: true })\n  @Field(type => [AssigneeItem], { nullable: true, description: 'Who to resolve for the activity.' })\n  assignees?: AssigneeItem[]\n\n  @Column('simple-json', { nullable: true })\n  @Field(type => [ApprovalLineItem], {\n    nullable: true,\n    description: 'Approval line for handling the activity.'\n  })\n  approvalLine?: ApprovalLineItem[]\n\n  /**\n   * **반려하면 끝인가.**\n   *\n   * ── 왜 이 축이 필요한가 ──────────────────────────────────────────────────\n   * 반려된 스레드는 `restartActivityThread` 로 되살릴 수 있고, 그러면 다음 차수의 결재가 새로 선다.\n   * 휴가 신청처럼 **고쳐서 다시 내는** 업무에는 그것이 맞다.\n   *\n   * 그런데 되돌릴 수 없는 판정을 다루는 업무가 있다 — 부적합 처분, 트윈 조치. 그런 것은 반려되는\n   * 순간 대상이 닫힌다. 그 뒤에 결재를 되살리면 **사람은 승인할 것이 있다고 보는데 승인에 효력이\n   * 없다.** 승인해도 아무 일이 일어나지 않고 오류도 안 난다.\n   *\n   * 참이면 되살리지 못한다. 다시 하려면 새로 낸다.\n   *\n   * ── 기본값은 거짓이다 ────────────────────────────────────────────────────\n   * 지금 있는 업무들은 되살릴 수 있는 것을 전제로 만들어졌다. 기본을 참으로 두면 그 업무들의 거동이\n   * 말없이 바뀐다.\n   */\n  @Column({ type: 'boolean', nullable: true, default: false })\n  @Field({ nullable: true, description: 'true when a rejection closes the case for good — it cannot be restarted' })\n  rejectionIsFinal?: boolean\n\n  @Column({ nullable: true })\n  @Field({ nullable: true, description: 'The type of UI to be shown when a task is performed' })\n  uiType?: ActivityUIType\n\n  @Column({ nullable: true })\n  @Field({ nullable: true })\n  uiSource?: string\n\n  @Column({ nullable: true })\n  @Field({ nullable: true, description: 'The type of view to be shown when a task is approved' })\n  viewType?: ActivityUIType\n\n  @Column({ nullable: true })\n  @Field({ nullable: true })\n  viewSource?: string\n\n  @Column({ nullable: true })\n  @Field({ nullable: true, description: 'The type of report to be shown when a task is approved' })\n  reportType?: ActivityUIType\n\n  @Column({ nullable: true })\n  @Field({ nullable: true })\n  reportSource?: string\n\n  @CreateDateColumn()\n  @Field({ nullable: true })\n  createdAt?: Date\n\n  @UpdateDateColumn()\n  @Field({ nullable: true })\n  updatedAt?: Date\n\n  @ManyToOne(type => User, { nullable: true })\n  @Field(type => User, { nullable: true, description: 'User assigned to the client application' })\n  client?: User\n\n  @RelationId((activity: Activity) => activity.client)\n  clientId?: string\n\n  @ManyToOne(type => User, { nullable: true })\n  @Field(type => User, { nullable: true })\n  creator?: User\n\n  @RelationId((activity: Activity) => activity.creator)\n  creatorId?: string\n\n  @ManyToOne(type => User, { nullable: true })\n  @Field(type => User, { nullable: true })\n  updater?: User\n\n  @RelationId((activity: Activity) => activity.updater)\n  updaterId?: string\n\n  @Field(type => String, { nullable: true })\n  thumbnail?: string\n}\n"]}

package/dist-server/service/activity/approval-line-seats.d.ts

@@ -1,12 +0,0 @@
-import { User } from '@things-factory/auth-base';
-import { Domain } from '@things-factory/shell';
-import { ApprovalLineItem } from '@things-factory/organization';
-/**
- * A stored approval line as the API sends it: each seat with the one who sits in it, read in this domain.
- *
- * One reading for every type that carries a line. The activity and the activity instance each had
- * their own copy of this loop, and the activity's copy dropped `participation` and `notifyAfter` —
- * the instance's copy had been fixed for the same loss and the activity's had not. The work-door
- * status reads lines too; a third copy would have been a third chance to lose them again.
- */
-export declare function approvalLineSeats(approvalLine: unknown, domain: Domain, user?: User): Promise<ApprovalLineItem[] | null>;

package/dist-server/service/activity/approval-line-seats.js

@@ -1,68 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.approvalLineSeats = approvalLineSeats;
-const shell_1 = require("@things-factory/shell");
-/**
- * A stored approval line as the API sends it: each seat with the one who sits in it, read in this domain.
- *
- * One reading for every type that carries a line. The activity and the activity instance each had
- * their own copy of this loop, and the activity's copy dropped `participation` and `notifyAfter` —
- * the instance's copy had been fixed for the same loss and the activity's had not. The work-door
- * status reads lines too; a third copy would have been a third chance to lose them again.
- */
-async function approvalLineSeats(approvalLine, domain, user) {
-    if (!approvalLine || !(approvalLine instanceof Array)) {
-        return null;
-    }
-    const seats = [];
-    for (let item of approvalLine) {
-        // "value" deprecated. to be removed
-        var { type, approver, value, participation, notifyAfter } = item;
-        var id = approver?.id || value;
-        approver = null;
-        switch (type) {
-            case 'Employee':
-                approver = id && (await (0, shell_1.getRepository)('Employee').findOneBy({ domain: { id: domain.id }, id }));
-                break;
-            case 'Department':
-                approver = id && (await (0, shell_1.getRepository)('Department').findOneBy({ domain: { id: domain.id }, id }));
-                break;
-            case 'Role':
-                approver = id && (await (0, shell_1.getRepository)('Role').findOneBy({ domain: { id: domain.id }, id }));
-                break;
-            case 'Myself':
-                approver = user;
-                break;
-            case 'MyDepartment':
-            case 'MySupervisor':
-                break;
-            default:
-        }
-        /*
-         * What the seat is, not only who sits in it.
-         *
-         * This rebuilt each item as { type, approver } and dropped everything else, so `participation`
-         * never left the server. The screen asked for it, the query carried it, and the resolver took
-         * it out in the middle — the approval screen could not tell a reference seat from an approver
-         * and drew approve and reject for both. organization's approval-line-brief lost the same field
-         * and drew a reference with a turn number it does not have.
-         *
-         * The server guard was unaffected, which is why this stayed hidden: approve() and reject()
-         * read the entity through TypeORM, not through GraphQL, so they refused correctly while the
-         * screen showed buttons that would be refused. Measured 2026-09-11 on a reference row whose
-         * stored line said "participation":"reference" and whose GraphQL answer said nothing.
-         *
-         * `value` stays out — it is the deprecated half of the pair that `approver` replaced.
-         */
-        const seat = id ? { type, approver } : { type };
-        if (participation !== undefined) {
-            seat.participation = participation;
-        }
-        if (notifyAfter !== undefined) {
-            seat.notifyAfter = notifyAfter;
-        }
-        seats.push(seat);
-    }
-    return seats;
-}
-//# sourceMappingURL=approval-line-seats.js.map

package/dist-server/service/activity/approval-line-seats.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"approval-line-seats.js","sourceRoot":"","sources":["../../../server/service/activity/approval-line-seats.ts"],"names":[],"mappings":";;AAYA,8CAkEC;AA7ED,iDAA6D;AAG7D;;;;;;;GAOG;AACI,KAAK,UAAU,iBAAiB,CACrC,YAAqB,EACrB,MAAc,EACd,IAAW;IAEX,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,YAAY,YAAY,KAAK,CAAC,EAAE,CAAC;QACtD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,KAAK,GAAuB,EAAE,CAAA;IAEpC,KAAK,IAAI,IAAI,IAAI,YAAY,EAAE,CAAC;QAC9B,oCAAoC;QACpC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,IAAW,CAAA;QACvE,IAAI,EAAE,GAAG,QAAQ,EAAE,EAAE,IAAI,KAAK,CAAA;QAC9B,QAAQ,GAAG,IAAI,CAAA;QAEf,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,UAAU;gBACb,QAAQ,GAAG,EAAE,IAAI,CAAC,MAAM,IAAA,qBAAa,EAAC,UAAU,CAAC,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;gBAC/F,MAAK;YACP,KAAK,YAAY;gBACf,QAAQ,GAAG,EAAE,IAAI,CAAC,MAAM,IAAA,qBAAa,EAAC,YAAY,CAAC,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;gBACjG,MAAK;YACP,KAAK,MAAM;gBACT,QAAQ,GAAG,EAAE,IAAI,CAAC,MAAM,IAAA,qBAAa,EAAC,MAAM,CAAC,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;gBAC3F,MAAK;YACP,KAAK,QAAQ;gBACX,QAAQ,GAAG,IAAI,CAAA;gBACf,MAAK;YACP,KAAK,cAAc,CAAC;YACpB,KAAK,cAAc;gBACjB,MAAK;YACP,QAAQ;QACV,CAAC;QAED;;;;;;;;;;;;;;;WAeG;QACH,MAAM,IAAI,GAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAA;QAEpD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,IAAI,CAAC,aAAa,GAAG,aAAa,CAAA;QACpC,CAAC;QAED,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAA;QAChC,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAClB,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC","sourcesContent":["import { User } from '@things-factory/auth-base'\nimport { Domain, getRepository } from '@things-factory/shell'\nimport { ApprovalLineItem } from '@things-factory/organization'\n\n/**\n * A stored approval line as the API sends it: each seat with the one who sits in it, read in this domain.\n *\n * One reading for every type that carries a line. The activity and the activity instance each had\n * their own copy of this loop, and the activity's copy dropped `participation` and `notifyAfter` —\n * the instance's copy had been fixed for the same loss and the activity's had not. The work-door\n * status reads lines too; a third copy would have been a third chance to lose them again.\n */\nexport async function approvalLineSeats(\n  approvalLine: unknown,\n  domain: Domain,\n  user?: User\n): Promise<ApprovalLineItem[] | null> {\n  if (!approvalLine || !(approvalLine instanceof Array)) {\n    return null\n  }\n\n  const seats: ApprovalLineItem[] = []\n\n  for (let item of approvalLine) {\n    // \"value\" deprecated. to be removed\n    var { type, approver, value, participation, notifyAfter } = item as any\n    var id = approver?.id || value\n    approver = null\n\n    switch (type) {\n      case 'Employee':\n        approver = id && (await getRepository('Employee').findOneBy({ domain: { id: domain.id }, id }))\n        break\n      case 'Department':\n        approver = id && (await getRepository('Department').findOneBy({ domain: { id: domain.id }, id }))\n        break\n      case 'Role':\n        approver = id && (await getRepository('Role').findOneBy({ domain: { id: domain.id }, id }))\n        break\n      case 'Myself':\n        approver = user\n        break\n      case 'MyDepartment':\n      case 'MySupervisor':\n        break\n      default:\n    }\n\n    /*\n     * What the seat is, not only who sits in it.\n     *\n     * This rebuilt each item as { type, approver } and dropped everything else, so `participation`\n     * never left the server. The screen asked for it, the query carried it, and the resolver took\n     * it out in the middle — the approval screen could not tell a reference seat from an approver\n     * and drew approve and reject for both. organization's approval-line-brief lost the same field\n     * and drew a reference with a turn number it does not have.\n     *\n     * The server guard was unaffected, which is why this stayed hidden: approve() and reject()\n     * read the entity through TypeORM, not through GraphQL, so they refused correctly while the\n     * screen showed buttons that would be refused. Measured 2026-09-11 on a reference row whose\n     * stored line said \"participation\":\"reference\" and whose GraphQL answer said nothing.\n     *\n     * `value` stays out — it is the deprecated half of the pair that `approver` replaced.\n     */\n    const seat: any = id ? { type, approver } : { type }\n\n    if (participation !== undefined) {\n      seat.participation = participation\n    }\n\n    if (notifyAfter !== undefined) {\n      seat.notifyAfter = notifyAfter\n    }\n\n    seats.push(seat)\n  }\n\n  return seats\n}\n"]}

package/dist-server/service/activity/credential-field.d.ts

@@ -1,35 +0,0 @@
-/**
- * **This framework cannot hold a credential yet, so it refuses to be handed one.**
- *
- * An activity's model decides what goes into `ActivityInstance.input`, and that column is
- * `simple-json` in the clear. There is no way to mark a field as secret, nothing masks it on the
- * approval screen, the payload copy button copies whatever is there, and the two history entities
- * keep their own copy of the same value. A token entered today would be readable in four places.
- *
- * Nothing declares one right now — every registered activity across both repos was checked and
- * none has a credential-shaped field. So this is a door being closed while it costs nothing, not
- * a leak being patched.
- *
- * ── Why refuse instead of building the sealing (2026-09-09) ───────────────
- * The architect lane ruled the shape: a `secret?: boolean` flag on the model item (not a new
- * ActivityModelItemType — "how is this typed in" and "is this a secret" are different axes, and a
- * renderer missing the new case would fall through `default` and print the value), sealing at the
- * value level rather than the column (the column is filtered on, and sealing it whole would kill
- * that), and the stored shape travelling outward unchanged so there is nothing left to mask.
- *
- * Built now, that machinery would harden with no one using it. Built at first real use, all three
- * parts land together. Until then this refusal keeps the gap from being walked into.
- *
- * It has to run at save time, not in a test: models are authored on screen, so no test sees them.
- */
-/** Does this field name say it holds a credential? */
-export declare function looksLikeCredential(name: string): boolean;
-/**
- * Refuse a model that declares a credential field, and say what to do about it.
- *
- * The message names the field, because a model can carry many and "one of them" would send the
- * author looking.
- */
-export declare function assertNoCredentialField(model: {
-    name?: string;
-}[] | undefined, activityName?: string): void;

package/dist-server/service/activity/credential-field.js

@@ -1,89 +0,0 @@
-"use strict";
-/**
- * **This framework cannot hold a credential yet, so it refuses to be handed one.**
- *
- * An activity's model decides what goes into `ActivityInstance.input`, and that column is
- * `simple-json` in the clear. There is no way to mark a field as secret, nothing masks it on the
- * approval screen, the payload copy button copies whatever is there, and the two history entities
- * keep their own copy of the same value. A token entered today would be readable in four places.
- *
- * Nothing declares one right now — every registered activity across both repos was checked and
- * none has a credential-shaped field. So this is a door being closed while it costs nothing, not
- * a leak being patched.
- *
- * ── Why refuse instead of building the sealing (2026-09-09) ───────────────
- * The architect lane ruled the shape: a `secret?: boolean` flag on the model item (not a new
- * ActivityModelItemType — "how is this typed in" and "is this a secret" are different axes, and a
- * renderer missing the new case would fall through `default` and print the value), sealing at the
- * value level rather than the column (the column is filtered on, and sealing it whole would kill
- * that), and the stored shape travelling outward unchanged so there is nothing left to mask.
- *
- * Built now, that machinery would harden with no one using it. Built at first real use, all three
- * parts land together. Until then this refusal keeps the gap from being walked into.
- *
- * It has to run at save time, not in a test: models are authored on screen, so no test sees them.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.looksLikeCredential = looksLikeCredential;
-exports.assertNoCredentialField = assertNoCredentialField;
-/**
- * The noun a credential field ends with.
- *
- * **The last word, not any word.** `apiToken` is a token; `tokenCount` is a number of them and
- * `tokenizer` is neither. Matching anywhere in the name refuses all three, and refusing a
- * legitimate field is not free — the author is blocked with nowhere to go.
- */
-const CREDENTIAL_NOUNS = ['secret', 'token', 'password', 'passwd', 'credential', 'passphrase'];
-/**
- * Two words that only mean a credential together.
- *
- * `key` alone is far too common (`orderKey`, `groupKey`), so it is only read as a secret when the
- * word before it says which kind.
- */
-const CREDENTIAL_PAIRS = ['apikey', 'accesskey', 'privatekey', 'secretkey', 'sshkey', 'signingkey'];
-/**
- * Split a field name into lowercase words, across camelCase, snake_case, kebab and dots.
- *
- * Segments rather than substrings, so the rule can look at where the word sits rather than merely
- * whether it appears.
- */
-function wordsOf(name) {
-    return String(name || '')
-        .replace(/([a-z0-9])([A-Z])/g, '$1 $2')
-        .split(/[^a-zA-Z0-9]+/)
-        .map(word => word.toLowerCase())
-        .filter(Boolean);
-}
-/** Does this field name say it holds a credential? */
-function looksLikeCredential(name) {
-    const words = wordsOf(name);
-    if (!words.length) {
-        return false;
-    }
-    const last = words[words.length - 1];
-    if (CREDENTIAL_NOUNS.includes(last)) {
-        return true;
-    }
-    const pair = words.length > 1 ? words[words.length - 2] + last : '';
-    return CREDENTIAL_PAIRS.includes(pair);
-}
-/**
- * Refuse a model that declares a credential field, and say what to do about it.
- *
- * The message names the field, because a model can carry many and "one of them" would send the
- * author looking.
- */
-function assertNoCredentialField(model, activityName) {
-    const offenders = (model || []).map(item => item?.name).filter(name => name && looksLikeCredential(name));
-    if (!offenders.length) {
-        return;
-    }
-    throw new Error(`[activity] ${activityName ? `"${activityName}" ` : ''}declares ${offenders.length > 1 ? 'fields' : 'a field'} ` +
-        `that would hold a credential: ${offenders.join(', ')}. ` +
-        'Worklist stores an activity input as plain JSON, shows it on the approval screen, lets it be ' +
-        'copied, and keeps a copy in two history tables — a secret put there is readable in four ' +
-        'places. Sealing secret values is designed but not built (secret flag + value-level sealing + ' +
-        'display, to land together at first real use). Raise it to the architect lane rather than ' +
-        'working around this.');
-}
-//# sourceMappingURL=credential-field.js.map

package/dist-server/service/activity/credential-field.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"credential-field.js","sourceRoot":"","sources":["../../../server/service/activity/credential-field.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;;AAkCH,kDAgBC;AAQD,0DAgBC;AAxED;;;;;;GAMG;AACH,MAAM,gBAAgB,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,CAAC,CAAA;AAE9F;;;;;GAKG;AACH,MAAM,gBAAgB,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAA;AAEnG;;;;;GAKG;AACH,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;SACtB,OAAO,CAAC,oBAAoB,EAAE,OAAO,CAAC;SACtC,KAAK,CAAC,eAAe,CAAC;SACtB,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;SAC/B,MAAM,CAAC,OAAO,CAAC,CAAA;AACpB,CAAC;AAED,sDAAsD;AACtD,SAAgB,mBAAmB,CAAC,IAAY;IAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE3B,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,KAAK,CAAA;IACd,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAEpC,IAAI,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;IAEnE,OAAO,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;AACxC,CAAC;AAED;;;;;GAKG;AACH,SAAgB,uBAAuB,CAAC,KAAsC,EAAE,YAAqB;IACnG,MAAM,SAAS,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAA;IAEzG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;QACtB,OAAM;IACR,CAAC;IAED,MAAM,IAAI,KAAK,CACb,cAAc,YAAY,CAAC,CAAC,CAAC,IAAI,YAAY,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,GAAG;QAC9G,iCAAiC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;QACzD,+FAA+F;QAC/F,0FAA0F;QAC1F,+FAA+F;QAC/F,2FAA2F;QAC3F,sBAAsB,CACzB,CAAA;AACH,CAAC","sourcesContent":["/**\n * **This framework cannot hold a credential yet, so it refuses to be handed one.**\n *\n * An activity's model decides what goes into `ActivityInstance.input`, and that column is\n * `simple-json` in the clear. There is no way to mark a field as secret, nothing masks it on the\n * approval screen, the payload copy button copies whatever is there, and the two history entities\n * keep their own copy of the same value. A token entered today would be readable in four places.\n *\n * Nothing declares one right now — every registered activity across both repos was checked and\n * none has a credential-shaped field. So this is a door being closed while it costs nothing, not\n * a leak being patched.\n *\n * ── Why refuse instead of building the sealing (2026-09-09) ───────────────\n * The architect lane ruled the shape: a `secret?: boolean` flag on the model item (not a new\n * ActivityModelItemType — \"how is this typed in\" and \"is this a secret\" are different axes, and a\n * renderer missing the new case would fall through `default` and print the value), sealing at the\n * value level rather than the column (the column is filtered on, and sealing it whole would kill\n * that), and the stored shape travelling outward unchanged so there is nothing left to mask.\n *\n * Built now, that machinery would harden with no one using it. Built at first real use, all three\n * parts land together. Until then this refusal keeps the gap from being walked into.\n *\n * It has to run at save time, not in a test: models are authored on screen, so no test sees them.\n */\n\n/**\n * The noun a credential field ends with.\n *\n * **The last word, not any word.** `apiToken` is a token; `tokenCount` is a number of them and\n * `tokenizer` is neither. Matching anywhere in the name refuses all three, and refusing a\n * legitimate field is not free — the author is blocked with nowhere to go.\n */\nconst CREDENTIAL_NOUNS = ['secret', 'token', 'password', 'passwd', 'credential', 'passphrase']\n\n/**\n * Two words that only mean a credential together.\n *\n * `key` alone is far too common (`orderKey`, `groupKey`), so it is only read as a secret when the\n * word before it says which kind.\n */\nconst CREDENTIAL_PAIRS = ['apikey', 'accesskey', 'privatekey', 'secretkey', 'sshkey', 'signingkey']\n\n/**\n * Split a field name into lowercase words, across camelCase, snake_case, kebab and dots.\n *\n * Segments rather than substrings, so the rule can look at where the word sits rather than merely\n * whether it appears.\n */\nfunction wordsOf(name: string): string[] {\n  return String(name || '')\n    .replace(/([a-z0-9])([A-Z])/g, '$1 $2')\n    .split(/[^a-zA-Z0-9]+/)\n    .map(word => word.toLowerCase())\n    .filter(Boolean)\n}\n\n/** Does this field name say it holds a credential? */\nexport function looksLikeCredential(name: string): boolean {\n  const words = wordsOf(name)\n\n  if (!words.length) {\n    return false\n  }\n\n  const last = words[words.length - 1]\n\n  if (CREDENTIAL_NOUNS.includes(last)) {\n    return true\n  }\n\n  const pair = words.length > 1 ? words[words.length - 2] + last : ''\n\n  return CREDENTIAL_PAIRS.includes(pair)\n}\n\n/**\n * Refuse a model that declares a credential field, and say what to do about it.\n *\n * The message names the field, because a model can carry many and \"one of them\" would send the\n * author looking.\n */\nexport function assertNoCredentialField(model: { name?: string }[] | undefined, activityName?: string): void {\n  const offenders = (model || []).map(item => item?.name).filter(name => name && looksLikeCredential(name))\n\n  if (!offenders.length) {\n    return\n  }\n\n  throw new Error(\n    `[activity] ${activityName ? `\"${activityName}\" ` : ''}declares ${offenders.length > 1 ? 'fields' : 'a field'} ` +\n      `that would hold a credential: ${offenders.join(', ')}. ` +\n      'Worklist stores an activity input as plain JSON, shows it on the approval screen, lets it be ' +\n      'copied, and keeps a copy in two history tables — a secret put there is readable in four ' +\n      'places. Sealing secret values is designed but not built (secret flag + value-level sealing + ' +\n      'display, to land together at first real use). Raise it to the architect lane rather than ' +\n      'working around this.'\n  )\n}\n"]}