@webiny/api-workflows 0.0.0-unstable.a4f3e4ea8b → 0.0.0-unstable.a85ef555b2

package/domain/workflow/WorkflowValidator.js

@@ -0,0 +1,65 @@
+import { Result } from "@webiny/feature/api";
+import { WorkflowValidationError } from "./errors.js";
+const fail = (message, where = {})=>Result.fail(new WorkflowValidationError(message, where));
+class WorkflowValidator {
+    static validate(values, validateStep, isKnownModel) {
+        if (!values.id) return fail("Workflow ID is required.");
+        if (!values.name || !values.name.trim()) return fail("Workflow name is required.", {
+            field: "name"
+        });
+        if (1 !== values.models.length || !values.models[0]) return fail("A workflow must be bound to exactly one model.", {
+            field: "models"
+        });
+        const [model] = values.models;
+        if (!isKnownModel(model)) return fail(`Model "${model}" is not supported.`, {
+            field: "models"
+        });
+        if (0 === values.steps.length) return fail("Add at least one step.", {
+            field: "steps"
+        });
+        const stepIds = new Set();
+        const steps = [];
+        for (const step of values.steps){
+            const result = WorkflowValidator.validateStep(step, stepIds, validateStep);
+            if (result.isFail()) return Result.fail(result.error);
+            steps.push(result.value);
+        }
+        return Result.ok({
+            id: values.id,
+            name: values.name.trim(),
+            models: [
+                ...values.models
+            ],
+            steps
+        });
+    }
+    static validateStep(step, stepIds, validateStep) {
+        if (!step.id) return fail("Every step needs an ID.", {
+            field: "steps"
+        });
+        if (stepIds.has(step.id)) return fail(`Step ID "${step.id}" is used more than once.`, {
+            stepId: step.id,
+            field: "id"
+        });
+        stepIds.add(step.id);
+        if (!step.title || !step.title.trim()) return fail(`Step "${step.id}" needs a title.`, {
+            stepId: step.id,
+            field: "title"
+        });
+        const validated = validateStep(step);
+        if (validated.isFail()) return Result.fail(validated.error);
+        const { description, ...rest } = validated.value;
+        const trimmedDescription = description?.trim();
+        return Result.ok({
+            ...rest,
+            color: validated.value.color ?? "",
+            ...trimmedDescription ? {
+                description: trimmedDescription
+            } : {},
+            notifications: validated.value.notifications ?? []
+        });
+    }
+}
+export { WorkflowValidator };
+
+//# sourceMappingURL=WorkflowValidator.js.map

package/domain/workflow/WorkflowValidator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain/workflow/WorkflowValidator.js","sources":["../../../src/domain/workflow/WorkflowValidator.ts"],"sourcesContent":["import { Result } from \"@webiny/feature/api\";\nimport { WorkflowValidationError } from \"./errors.js\";\nimport type { WorkflowValidationErrorData } from \"./errors.js\";\nimport type { WorkflowStep, WorkflowValues } from \"./types.js\";\n\n/**\n * Whether an app knows the model: `WorkflowModelParserService` parses it (each app adapter\n * registers its parser). Whether the model exists and is publishable is checked by the app's\n * workflows package on `WorkflowBeforeCreate|Update`.\n */\nexport type WorkflowModelCheck = (model: string) => boolean;\n\n/**\n * Validates one step's type and config: the step type registry's `validate` (R131). Returns the\n * step with its normalised `config`.\n */\nexport type WorkflowStepValidator = (\n    step: WorkflowStep\n) => Result<WorkflowStep, WorkflowValidationError>;\n\nconst fail = (message: string, where: Partial<WorkflowValidationErrorData> = {}) => {\n    return Result.fail(new WorkflowValidationError(message, where));\n};\n\n/**\n * Validates a workflow on create and update (one path, spec 4.1, D41, D108). It checks the\n * structure (id, name, one model an app knows, steps, step ids and titles) and normalises each step; the step\n * type and its config are checked by `validateStep`, which `StoreWorkflowUseCase` builds from the\n * step type registry. Checks that need storage (model already bound to another workflow) live in\n * `StoreWorkflowUseCase`; the \"model is publishable\" check is a `WorkflowBeforeCreate` /\n * `WorkflowBeforeUpdate` handler in the CMS workflows package.\n */\nexport class WorkflowValidator {\n    public static validate(\n        values: WorkflowValues,\n        validateStep: WorkflowStepValidator,\n        isKnownModel: WorkflowModelCheck\n    ): Result<WorkflowValues, WorkflowValidationError> {\n        if (!values.id) {\n            return fail(\"Workflow ID is required.\");\n        }\n        if (!values.name || !values.name.trim()) {\n            return fail(\"Workflow name is required.\", { field: \"name\" });\n        }\n        if (values.models.length !== 1 || !values.models[0]) {\n            return fail(\"A workflow must be bound to exactly one model.\", { field: \"models\" });\n        }\n        const [model] = values.models;\n        if (!isKnownModel(model)) {\n            return fail(`Model \"${model}\" is not supported.`, { field: \"models\" });\n        }\n        if (values.steps.length === 0) {\n            return fail(\"Add at least one step.\", { field: \"steps\" });\n        }\n\n        const stepIds = new Set<string>();\n        const steps: WorkflowStep[] = [];\n        for (const step of values.steps) {\n            const result = WorkflowValidator.validateStep(step, stepIds, validateStep);\n            if (result.isFail()) {\n                return Result.fail(result.error);\n            }\n            steps.push(result.value);\n        }\n\n        return Result.ok({\n            id: values.id,\n            name: values.name.trim(),\n            models: [...values.models],\n            steps\n        });\n    }\n\n    private static validateStep(\n        step: WorkflowStep,\n        stepIds: Set<string>,\n        validateStep: WorkflowStepValidator\n    ): Result<WorkflowStep, WorkflowValidationError> {\n        if (!step.id) {\n            return fail(\"Every step needs an ID.\", { field: \"steps\" });\n        }\n        if (stepIds.has(step.id)) {\n            return fail(`Step ID \"${step.id}\" is used more than once.`, {\n                stepId: step.id,\n                field: \"id\"\n            });\n        }\n        stepIds.add(step.id);\n\n        if (!step.title || !step.title.trim()) {\n            return fail(`Step \"${step.id}\" needs a title.`, { stepId: step.id, field: \"title\" });\n        }\n\n        const validated = validateStep(step);\n        if (validated.isFail()) {\n            return Result.fail(validated.error);\n        }\n\n        // Normalise to what the mapper returns on read, so stored values equal returned values.\n        const { description, ...rest } = validated.value;\n        const trimmedDescription = description?.trim();\n        return Result.ok({\n            ...rest,\n            color: validated.value.color ?? \"\",\n            ...(trimmedDescription ? { description: trimmedDescription } : {}),\n            notifications: validated.value.notifications ?? []\n        });\n    }\n}\n"],"names":["fail","message","where","Result","WorkflowValidationError","WorkflowValidator","values","validateStep","isKnownModel","model","stepIds","Set","steps","step","result","validated","description","rest","trimmedDescription"],"mappings":";;AAoBA,MAAMA,OAAO,CAACC,SAAiBC,QAA8C,CAAC,CAAC,GACpEC,OAAO,IAAI,CAAC,IAAIC,wBAAwBH,SAASC;AAWrD,MAAMG;IACT,OAAc,SACVC,MAAsB,EACtBC,YAAmC,EACnCC,YAAgC,EACe;QAC/C,IAAI,CAACF,OAAO,EAAE,EACV,OAAON,KAAK;QAEhB,IAAI,CAACM,OAAO,IAAI,IAAI,CAACA,OAAO,IAAI,CAAC,IAAI,IACjC,OAAON,KAAK,8BAA8B;YAAE,OAAO;QAAO;QAE9D,IAAIM,AAAyB,MAAzBA,OAAO,MAAM,CAAC,MAAM,IAAU,CAACA,OAAO,MAAM,CAAC,EAAE,EAC/C,OAAON,KAAK,kDAAkD;YAAE,OAAO;QAAS;QAEpF,MAAM,CAACS,MAAM,GAAGH,OAAO,MAAM;QAC7B,IAAI,CAACE,aAAaC,QACd,OAAOT,KAAK,CAAC,OAAO,EAAES,MAAM,mBAAmB,CAAC,EAAE;YAAE,OAAO;QAAS;QAExE,IAAIH,AAAwB,MAAxBA,OAAO,KAAK,CAAC,MAAM,EACnB,OAAON,KAAK,0BAA0B;YAAE,OAAO;QAAQ;QAG3D,MAAMU,UAAU,IAAIC;QACpB,MAAMC,QAAwB,EAAE;QAChC,KAAK,MAAMC,QAAQP,OAAO,KAAK,CAAE;YAC7B,MAAMQ,SAAST,kBAAkB,YAAY,CAACQ,MAAMH,SAASH;YAC7D,IAAIO,OAAO,MAAM,IACb,OAAOX,OAAO,IAAI,CAACW,OAAO,KAAK;YAEnCF,MAAM,IAAI,CAACE,OAAO,KAAK;QAC3B;QAEA,OAAOX,OAAO,EAAE,CAAC;YACb,IAAIG,OAAO,EAAE;YACb,MAAMA,OAAO,IAAI,CAAC,IAAI;YACtB,QAAQ;mBAAIA,OAAO,MAAM;aAAC;YAC1BM;QACJ;IACJ;IAEA,OAAe,aACXC,IAAkB,EAClBH,OAAoB,EACpBH,YAAmC,EACU;QAC7C,IAAI,CAACM,KAAK,EAAE,EACR,OAAOb,KAAK,2BAA2B;YAAE,OAAO;QAAQ;QAE5D,IAAIU,QAAQ,GAAG,CAACG,KAAK,EAAE,GACnB,OAAOb,KAAK,CAAC,SAAS,EAAEa,KAAK,EAAE,CAAC,yBAAyB,CAAC,EAAE;YACxD,QAAQA,KAAK,EAAE;YACf,OAAO;QACX;QAEJH,QAAQ,GAAG,CAACG,KAAK,EAAE;QAEnB,IAAI,CAACA,KAAK,KAAK,IAAI,CAACA,KAAK,KAAK,CAAC,IAAI,IAC/B,OAAOb,KAAK,CAAC,MAAM,EAAEa,KAAK,EAAE,CAAC,gBAAgB,CAAC,EAAE;YAAE,QAAQA,KAAK,EAAE;YAAE,OAAO;QAAQ;QAGtF,MAAME,YAAYR,aAAaM;QAC/B,IAAIE,UAAU,MAAM,IAChB,OAAOZ,OAAO,IAAI,CAACY,UAAU,KAAK;QAItC,MAAM,EAAEC,WAAW,EAAE,GAAGC,MAAM,GAAGF,UAAU,KAAK;QAChD,MAAMG,qBAAqBF,aAAa;QACxC,OAAOb,OAAO,EAAE,CAAC;YACb,GAAGc,IAAI;YACP,OAAOF,UAAU,KAAK,CAAC,KAAK,IAAI;YAChC,GAAIG,qBAAqB;gBAAE,aAAaA;YAAmB,IAAI,CAAC,CAAC;YACjE,eAAeH,UAAU,KAAK,CAAC,aAAa,IAAI,EAAE;QACtD;IACJ;AACJ"}

package/domain/workflow/abstractions/WorkflowModelProvider.d.ts

@@ -0,0 +1,12 @@
+import type { CmsModel } from "@webiny/api-headless-cms/types/index.js";
+export interface IWorkflowModelProvider {
+    get(): Promise<CmsModel>;
+}
+/**
+ * Provides the tenant's `wbyWorkflow` model. A provider rather than the model itself: fetching a
+ * model is asynchronous and tenant-dependent, while DI resolution is synchronous.
+ */
+export declare const WorkflowModelProvider: import("@webiny/di").Abstraction<IWorkflowModelProvider>;
+export declare namespace WorkflowModelProvider {
+    type Interface = IWorkflowModelProvider;
+}

package/domain/workflow/abstractions/WorkflowModelProvider.js

@@ -0,0 +1,5 @@
+import { createAbstraction } from "@webiny/feature/api";
+const WorkflowModelProvider = createAbstraction("WorkflowModelProvider");
+export { WorkflowModelProvider };
+
+//# sourceMappingURL=WorkflowModelProvider.js.map

package/domain/workflow/abstractions/WorkflowModelProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain/workflow/abstractions/WorkflowModelProvider.js","sources":["../../../../src/domain/workflow/abstractions/WorkflowModelProvider.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { CmsModel } from \"@webiny/api-headless-cms/types/index.js\";\n\nexport interface IWorkflowModelProvider {\n    get(): Promise<CmsModel>;\n}\n\n/**\n * Provides the tenant's `wbyWorkflow` model. A provider rather than the model itself: fetching a\n * model is asynchronous and tenant-dependent, while DI resolution is synchronous.\n */\nexport const WorkflowModelProvider =\n    createAbstraction<IWorkflowModelProvider>(\"WorkflowModelProvider\");\n\nexport namespace WorkflowModelProvider {\n    export type Interface = IWorkflowModelProvider;\n}\n"],"names":["WorkflowModelProvider","createAbstraction"],"mappings":";AAWO,MAAMA,wBACTC,kBAA0C"}

package/domain/workflow/abstractions/WorkflowRepository.d.ts

@@ -0,0 +1,32 @@
+import { type Result } from "@webiny/feature/api";
+import type { CmsEntryMeta } from "@webiny/api-headless-cms/types/index.js";
+import type { Workflow, WorkflowValues } from "../types.js";
+import type { WorkflowNotFoundError, WorkflowPersistenceError } from "../errors.js";
+export interface WorkflowRepositoryListWhere {
+    /** Workflows bound to any of these namespace ids. */
+    models_in?: string[];
+}
+export interface WorkflowRepositoryListParams {
+    where?: WorkflowRepositoryListWhere;
+    limit?: number;
+    after?: string | null;
+}
+export interface WorkflowRepositoryListResult {
+    items: Workflow[];
+    meta: CmsEntryMeta;
+}
+export interface IWorkflowRepository {
+    get(id: string): Promise<Result<Workflow, WorkflowNotFoundError | WorkflowPersistenceError>>;
+    list(params: WorkflowRepositoryListParams): Promise<Result<WorkflowRepositoryListResult, WorkflowPersistenceError>>;
+    create(values: WorkflowValues): Promise<Result<Workflow, WorkflowPersistenceError>>;
+    update(values: WorkflowValues): Promise<Result<Workflow, WorkflowNotFoundError | WorkflowPersistenceError>>;
+    delete(id: string): Promise<Result<void, WorkflowNotFoundError | WorkflowPersistenceError>>;
+}
+/** Reads and writes workflows (entries of the private `wbyWorkflow` model, always revision 1). */
+export declare const WorkflowRepository: import("@webiny/di").Abstraction<IWorkflowRepository>;
+export declare namespace WorkflowRepository {
+    type Interface = IWorkflowRepository;
+    type ListParams = WorkflowRepositoryListParams;
+    type ListWhere = WorkflowRepositoryListWhere;
+    type ListResult = WorkflowRepositoryListResult;
+}

package/domain/workflow/abstractions/WorkflowRepository.js

@@ -0,0 +1,5 @@
+import { createAbstraction } from "@webiny/feature/api";
+const WorkflowRepository = createAbstraction("WorkflowRepository");
+export { WorkflowRepository };
+
+//# sourceMappingURL=WorkflowRepository.js.map

package/domain/workflow/abstractions/WorkflowRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain/workflow/abstractions/WorkflowRepository.js","sources":["../../../../src/domain/workflow/abstractions/WorkflowRepository.ts"],"sourcesContent":["import { createAbstraction, type Result } from \"@webiny/feature/api\";\nimport type { CmsEntryMeta } from \"@webiny/api-headless-cms/types/index.js\";\nimport type { Workflow, WorkflowValues } from \"../types.js\";\nimport type { WorkflowNotFoundError, WorkflowPersistenceError } from \"../errors.js\";\n\nexport interface WorkflowRepositoryListWhere {\n    /** Workflows bound to any of these namespace ids. */\n    models_in?: string[];\n}\n\nexport interface WorkflowRepositoryListParams {\n    where?: WorkflowRepositoryListWhere;\n    limit?: number;\n    after?: string | null;\n}\n\nexport interface WorkflowRepositoryListResult {\n    items: Workflow[];\n    meta: CmsEntryMeta;\n}\n\nexport interface IWorkflowRepository {\n    get(id: string): Promise<Result<Workflow, WorkflowNotFoundError | WorkflowPersistenceError>>;\n    list(\n        params: WorkflowRepositoryListParams\n    ): Promise<Result<WorkflowRepositoryListResult, WorkflowPersistenceError>>;\n    create(values: WorkflowValues): Promise<Result<Workflow, WorkflowPersistenceError>>;\n    update(\n        values: WorkflowValues\n    ): Promise<Result<Workflow, WorkflowNotFoundError | WorkflowPersistenceError>>;\n    delete(id: string): Promise<Result<void, WorkflowNotFoundError | WorkflowPersistenceError>>;\n}\n\n/** Reads and writes workflows (entries of the private `wbyWorkflow` model, always revision 1). */\nexport const WorkflowRepository = createAbstraction<IWorkflowRepository>(\"WorkflowRepository\");\n\nexport namespace WorkflowRepository {\n    export type Interface = IWorkflowRepository;\n    export type ListParams = WorkflowRepositoryListParams;\n    export type ListWhere = WorkflowRepositoryListWhere;\n    export type ListResult = WorkflowRepositoryListResult;\n}\n"],"names":["WorkflowRepository","createAbstraction"],"mappings":";AAkCO,MAAMA,qBAAqBC,kBAAuC"}

package/domain/workflow/canPickReviewer.d.ts

@@ -0,0 +1,8 @@
+import type { WorkflowStep } from "./types.js";
+/**
+ * `canPick` for one step at submit (spec 5.3, D22): a review step whose config allows a manual
+ * pick. Computed from the workflow alone. The request-time conditions (write access to the
+ * target, D77; which users may be picked, D33/D61) belong to the app wrappers (request) and to
+ * routing, which validates the pick when the step is reached (R112).
+ */
+export declare const canPickReviewer: (step: WorkflowStep) => boolean;

package/domain/workflow/canPickReviewer.js

@@ -0,0 +1,10 @@
+import { parseReviewStepConfig } from "./reviewStepConfigSchema.js";
+import { REVIEW_STEP_TYPE } from "./stepTypes.js";
+const canPickReviewer = (step)=>{
+    if (step.type !== REVIEW_STEP_TYPE) return false;
+    const config = parseReviewStepConfig(step.config);
+    return config?.assignment.allowManualPick === true;
+};
+export { canPickReviewer };
+
+//# sourceMappingURL=canPickReviewer.js.map

package/domain/workflow/canPickReviewer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain/workflow/canPickReviewer.js","sources":["../../../src/domain/workflow/canPickReviewer.ts"],"sourcesContent":["import type { WorkflowStep } from \"./types.js\";\nimport { parseReviewStepConfig } from \"./reviewStepConfigSchema.js\";\nimport { REVIEW_STEP_TYPE } from \"./stepTypes.js\";\n\n/**\n * `canPick` for one step at submit (spec 5.3, D22): a review step whose config allows a manual\n * pick. Computed from the workflow alone. The request-time conditions (write access to the\n * target, D77; which users may be picked, D33/D61) belong to the app wrappers (request) and to\n * routing, which validates the pick when the step is reached (R112).\n */\nexport const canPickReviewer = (step: WorkflowStep): boolean => {\n    if (step.type !== REVIEW_STEP_TYPE) {\n        return false;\n    }\n    const config = parseReviewStepConfig(step.config);\n    return config?.assignment.allowManualPick === true;\n};\n"],"names":["canPickReviewer","step","REVIEW_STEP_TYPE","config","parseReviewStepConfig"],"mappings":";;AAUO,MAAMA,kBAAkB,CAACC;IAC5B,IAAIA,KAAK,IAAI,KAAKC,kBACd,OAAO;IAEX,MAAMC,SAASC,sBAAsBH,KAAK,MAAM;IAChD,OAAOE,QAAQ,WAAW,oBAAoB;AAClD"}

package/domain/workflow/errors.d.ts

@@ -1,23 +1,61 @@
 import { BaseError } from "@webiny/feature/api";
-export declare class WorkflowNotFoundError extends BaseError<{
+import type { PersistenceErrorSource } from "../PersistenceErrorSource.js";
+import { PersistenceError } from "../../domain/PersistenceError.js";
+import type { WorkflowBlockingReview, WorkflowIdentity } from "./types.js";
+export interface WorkflowNotFoundErrorData {
     id: string;
-    app: string;
-}> {
+}
+export declare class WorkflowNotFoundError extends BaseError<WorkflowNotFoundErrorData> {
     readonly code: "Workflows/Workflow/NotFound";
-    constructor(data: {
-        id: string;
-        app: string;
-    });
+    constructor(data: WorkflowNotFoundErrorData);
 }
-export declare class WorkflowNotAuthorizedError extends BaseError {
-    readonly code: "Workflows/Workflow/NotAuthorized";
-    constructor(message?: string);
+export interface WorkflowConflictErrorData {
+    savedOn: string;
+    savedBy: WorkflowIdentity;
 }
-export declare class WorkflowPersistenceError extends BaseError {
-    readonly code: "Workflows/Workflow/Persistence";
-    constructor(error: Error);
+/** The stored workflow changed after the caller loaded it (D131). */
+export declare class WorkflowConflictError extends BaseError<WorkflowConflictErrorData> {
+    readonly code: "Workflows/Workflow/Conflict";
+    constructor(data: WorkflowConflictErrorData);
 }
-export declare class WorkflowValidationError extends BaseError {
+/**
+ * Where a validation problem is (R267, R288). `stepId` is null for a problem of the whole
+ * workflow; `field` is null when no field can be named; `workflowId` is the other workflow of the
+ * duplicate-model error; `ruleId` is the routing rule of a rule-level failure, null otherwise.
+ */
+export interface WorkflowValidationErrorData {
+    stepId: string | null;
+    field: string | null;
+    workflowId: string | null;
+    ruleId: string | null;
+}
+export declare class WorkflowValidationError extends BaseError<WorkflowValidationErrorData> {
     readonly code: "Workflows/Workflow/Validation";
-    constructor(message: string);
+    constructor(message: string, where?: Partial<WorkflowValidationErrorData>);
+}
+/** Duck-typed so errors thrown by handlers in other packages are recognised. */
+export declare const isWorkflowValidationError: (error: unknown) => error is WorkflowValidationError;
+export declare class WorkflowPersistenceError extends PersistenceError {
+    readonly code: "Workflows/Workflow/Persistence";
+    constructor(error: PersistenceErrorSource);
+}
+/**
+ * A lookup the workflow editor needs failed: the user directory, the teams, the notification
+ * transports or the viewer's permissions. Not the workflow storage, so the client is not told
+ * that the workflow could not be read or saved; the raw cause stays on `source` (R146).
+ */
+export declare class WorkflowLookupError extends PersistenceError {
+    readonly code: "Workflows/Workflow/Lookup";
+    constructor(error: PersistenceErrorSource);
+}
+export interface WorkflowHasActiveReviewsErrorData {
+    /** Exact number of in-progress reviews, regardless of what the caller can read (D115). */
+    count: number;
+    /** The engine returns every blocking review; app wrappers keep the first 5 readable (R57). */
+    reviews: WorkflowBlockingReview[];
+}
+/** D81, D115. */
+export declare class WorkflowHasActiveReviewsError extends BaseError<WorkflowHasActiveReviewsErrorData> {
+    readonly code: "Workflows/Workflow/HasActiveReviews";
+    constructor(data: WorkflowHasActiveReviewsErrorData);
 }

package/domain/workflow/errors.js

@@ -1,33 +1,53 @@
 import { BaseError } from "@webiny/feature/api";
+import { PersistenceError } from "../PersistenceError.js";
 class WorkflowNotFoundError extends BaseError {
     constructor(data){
         super({
-            message: `Workflow in app "${data.app}" with id "${data.id}" was not found!`,
+            message: `Workflow "${data.id}" was not found.`,
             data
         }), this.code = "Workflows/Workflow/NotFound";
     }
 }
-class WorkflowNotAuthorizedError extends BaseError {
-    constructor(message){
+class WorkflowConflictError extends BaseError {
+    constructor(data){
         super({
-            message: message || "Not authorized to access workflow"
-        }), this.code = "Workflows/Workflow/NotAuthorized";
+            message: `The workflow was changed by ${data.savedBy.displayName} on ${data.savedOn}. Reload it to see the latest version.`,
+            data
+        }), this.code = "Workflows/Workflow/Conflict";
     }
 }
-class WorkflowPersistenceError extends BaseError {
-    constructor(error){
+class WorkflowValidationError extends BaseError {
+    constructor(message, where = {}){
         super({
-            message: error.message
-        }), this.code = "Workflows/Workflow/Persistence";
+            message,
+            data: {
+                stepId: where.stepId ?? null,
+                field: where.field ?? null,
+                workflowId: where.workflowId ?? null,
+                ruleId: where.ruleId ?? null
+            }
+        }), this.code = "Workflows/Workflow/Validation";
     }
 }
-class WorkflowValidationError extends BaseError {
-    constructor(message){
+const isWorkflowValidationError = (error)=>error instanceof Error && "Workflows/Workflow/Validation" === error.code;
+class WorkflowPersistenceError extends PersistenceError {
+    constructor(error){
+        super("The workflow could not be read or saved.", error), this.code = "Workflows/Workflow/Persistence";
+    }
+}
+class WorkflowLookupError extends PersistenceError {
+    constructor(error){
+        super("A lookup the workflow editor needs failed.", error), this.code = "Workflows/Workflow/Lookup";
+    }
+}
+class WorkflowHasActiveReviewsError extends BaseError {
+    constructor(data){
         super({
-            message
-        }), this.code = "Workflows/Workflow/Validation";
+            message: `The workflow cannot be deleted while ${data.count} review(s) are in progress.`,
+            data
+        }), this.code = "Workflows/Workflow/HasActiveReviews";
     }
 }
-export { WorkflowNotAuthorizedError, WorkflowNotFoundError, WorkflowPersistenceError, WorkflowValidationError };
+export { WorkflowConflictError, WorkflowHasActiveReviewsError, WorkflowLookupError, WorkflowNotFoundError, WorkflowPersistenceError, WorkflowValidationError, isWorkflowValidationError };
 
 //# sourceMappingURL=errors.js.map

package/domain/workflow/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"domain/workflow/errors.js","sources":["../../../src/domain/workflow/errors.ts"],"sourcesContent":["import { BaseError } from \"@webiny/feature/api\";\n\nexport class WorkflowNotFoundError extends BaseError<{ id: string; app: string }> {\n    override readonly code = \"Workflows/Workflow/NotFound\" as const;\n\n    constructor(data: { id: string; app: string }) {\n        super({\n            message: `Workflow in app \"${data.app}\" with id \"${data.id}\" was not found!`,\n            data\n        });\n    }\n}\n\nexport class WorkflowNotAuthorizedError extends BaseError {\n    override readonly code = \"Workflows/Workflow/NotAuthorized\" as const;\n\n    constructor(message?: string) {\n        super({\n            message: message || \"Not authorized to access workflow\"\n        });\n    }\n}\n\nexport class WorkflowPersistenceError extends BaseError {\n    override readonly code = \"Workflows/Workflow/Persistence\" as const;\n\n    constructor(error: Error) {\n        super({\n            message: error.message\n        });\n    }\n}\n\nexport class WorkflowValidationError extends BaseError {\n    override readonly code = \"Workflows/Workflow/Validation\" as const;\n\n    constructor(message: string) {\n        super({\n            message\n        });\n    }\n}\n"],"names":["WorkflowNotFoundError","BaseError","data","WorkflowNotAuthorizedError","message","WorkflowPersistenceError","error","WorkflowValidationError"],"mappings":";AAEO,MAAMA,8BAA8BC;IAGvC,YAAYC,IAAiC,CAAE;QAC3C,KAAK,CAAC;YACF,SAAS,CAAC,iBAAiB,EAAEA,KAAK,GAAG,CAAC,WAAW,EAAEA,KAAK,EAAE,CAAC,gBAAgB,CAAC;YAC5EA;QACJ,SANc,IAAI,GAAG;IAOzB;AACJ;AAEO,MAAMC,mCAAmCF;IAG5C,YAAYG,OAAgB,CAAE;QAC1B,KAAK,CAAC;YACF,SAASA,WAAW;QACxB,SALc,IAAI,GAAG;IAMzB;AACJ;AAEO,MAAMC,iCAAiCJ;IAG1C,YAAYK,KAAY,CAAE;QACtB,KAAK,CAAC;YACF,SAASA,MAAM,OAAO;QAC1B,SALc,IAAI,GAAG;IAMzB;AACJ;AAEO,MAAMC,gCAAgCN;IAGzC,YAAYG,OAAe,CAAE;QACzB,KAAK,CAAC;YACFA;QACJ,SALc,IAAI,GAAG;IAMzB;AACJ"}
+{"version":3,"file":"domain/workflow/errors.js","sources":["../../../src/domain/workflow/errors.ts"],"sourcesContent":["import { BaseError } from \"@webiny/feature/api\";\nimport type { PersistenceErrorSource } from \"../PersistenceErrorSource.js\";\nimport { PersistenceError } from \"~/domain/PersistenceError.js\";\nimport type { WorkflowBlockingReview, WorkflowIdentity } from \"./types.js\";\n\nexport interface WorkflowNotFoundErrorData {\n    id: string;\n}\n\nexport class WorkflowNotFoundError extends BaseError<WorkflowNotFoundErrorData> {\n    override readonly code = \"Workflows/Workflow/NotFound\" as const;\n\n    constructor(data: WorkflowNotFoundErrorData) {\n        super({\n            message: `Workflow \"${data.id}\" was not found.`,\n            data\n        });\n    }\n}\n\nexport interface WorkflowConflictErrorData {\n    savedOn: string;\n    savedBy: WorkflowIdentity;\n}\n\n/** The stored workflow changed after the caller loaded it (D131). */\nexport class WorkflowConflictError extends BaseError<WorkflowConflictErrorData> {\n    override readonly code = \"Workflows/Workflow/Conflict\" as const;\n\n    constructor(data: WorkflowConflictErrorData) {\n        super({\n            message: `The workflow was changed by ${data.savedBy.displayName} on ${data.savedOn}. Reload it to see the latest version.`,\n            data\n        });\n    }\n}\n\n/**\n * Where a validation problem is (R267, R288). `stepId` is null for a problem of the whole\n * workflow; `field` is null when no field can be named; `workflowId` is the other workflow of the\n * duplicate-model error; `ruleId` is the routing rule of a rule-level failure, null otherwise.\n */\nexport interface WorkflowValidationErrorData {\n    stepId: string | null;\n    field: string | null;\n    workflowId: string | null;\n    ruleId: string | null;\n}\n\nexport class WorkflowValidationError extends BaseError<WorkflowValidationErrorData> {\n    override readonly code = \"Workflows/Workflow/Validation\" as const;\n\n    constructor(message: string, where: Partial<WorkflowValidationErrorData> = {}) {\n        super({\n            message,\n            data: {\n                stepId: where.stepId ?? null,\n                field: where.field ?? null,\n                workflowId: where.workflowId ?? null,\n                ruleId: where.ruleId ?? null\n            }\n        });\n    }\n}\n\n/** Duck-typed so errors thrown by handlers in other packages are recognised. */\nexport const isWorkflowValidationError = (error: unknown): error is WorkflowValidationError => {\n    return (\n        error instanceof Error &&\n        (error as Partial<WorkflowValidationError>).code === \"Workflows/Workflow/Validation\"\n    );\n};\n\nexport class WorkflowPersistenceError extends PersistenceError {\n    override readonly code = \"Workflows/Workflow/Persistence\" as const;\n\n    constructor(error: PersistenceErrorSource) {\n        super(\"The workflow could not be read or saved.\", error);\n    }\n}\n\n/**\n * A lookup the workflow editor needs failed: the user directory, the teams, the notification\n * transports or the viewer's permissions. Not the workflow storage, so the client is not told\n * that the workflow could not be read or saved; the raw cause stays on `source` (R146).\n */\nexport class WorkflowLookupError extends PersistenceError {\n    override readonly code = \"Workflows/Workflow/Lookup\" as const;\n\n    constructor(error: PersistenceErrorSource) {\n        super(\"A lookup the workflow editor needs failed.\", error);\n    }\n}\n\nexport interface WorkflowHasActiveReviewsErrorData {\n    /** Exact number of in-progress reviews, regardless of what the caller can read (D115). */\n    count: number;\n    /** The engine returns every blocking review; app wrappers keep the first 5 readable (R57). */\n    reviews: WorkflowBlockingReview[];\n}\n\n/** D81, D115. */\nexport class WorkflowHasActiveReviewsError extends BaseError<WorkflowHasActiveReviewsErrorData> {\n    override readonly code = \"Workflows/Workflow/HasActiveReviews\" as const;\n\n    constructor(data: WorkflowHasActiveReviewsErrorData) {\n        super({\n            message: `The workflow cannot be deleted while ${data.count} review(s) are in progress.`,\n            data\n        });\n    }\n}\n"],"names":["WorkflowNotFoundError","BaseError","data","WorkflowConflictError","WorkflowValidationError","message","where","isWorkflowValidationError","error","Error","WorkflowPersistenceError","PersistenceError","WorkflowLookupError","WorkflowHasActiveReviewsError"],"mappings":";;AASO,MAAMA,8BAA8BC;IAGvC,YAAYC,IAA+B,CAAE;QACzC,KAAK,CAAC;YACF,SAAS,CAAC,UAAU,EAAEA,KAAK,EAAE,CAAC,gBAAgB,CAAC;YAC/CA;QACJ,SANc,IAAI,GAAG;IAOzB;AACJ;AAQO,MAAMC,8BAA8BF;IAGvC,YAAYC,IAA+B,CAAE;QACzC,KAAK,CAAC;YACF,SAAS,CAAC,4BAA4B,EAAEA,KAAK,OAAO,CAAC,WAAW,CAAC,IAAI,EAAEA,KAAK,OAAO,CAAC,sCAAsC,CAAC;YAC3HA;QACJ,SANc,IAAI,GAAG;IAOzB;AACJ;AAcO,MAAME,gCAAgCH;IAGzC,YAAYI,OAAe,EAAEC,QAA8C,CAAC,CAAC,CAAE;QAC3E,KAAK,CAAC;YACFD;YACA,MAAM;gBACF,QAAQC,MAAM,MAAM,IAAI;gBACxB,OAAOA,MAAM,KAAK,IAAI;gBACtB,YAAYA,MAAM,UAAU,IAAI;gBAChC,QAAQA,MAAM,MAAM,IAAI;YAC5B;QACJ,SAXc,IAAI,GAAG;IAYzB;AACJ;AAGO,MAAMC,4BAA4B,CAACC,QAElCA,iBAAiBC,SAChBD,AAAoD,oCAApDA,MAA2C,IAAI;AAIjD,MAAME,iCAAiCC;IAG1C,YAAYH,KAA6B,CAAE;QACvC,KAAK,CAAC,4CAA4CA,QAAAA,IAAAA,CAHpC,IAAI,GAAG;IAIzB;AACJ;AAOO,MAAMI,4BAA4BD;IAGrC,YAAYH,KAA6B,CAAE;QACvC,KAAK,CAAC,8CAA8CA,QAAAA,IAAAA,CAHtC,IAAI,GAAG;IAIzB;AACJ;AAUO,MAAMK,sCAAsCZ;IAG/C,YAAYC,IAAuC,CAAE;QACjD,KAAK,CAAC;YACF,SAAS,CAAC,qCAAqC,EAAEA,KAAK,KAAK,CAAC,2BAA2B,CAAC;YACxFA;QACJ,SANc,IAAI,GAAG;IAOzB;AACJ"}

package/domain/workflow/findReviewStepConfigProblem.d.ts

@@ -0,0 +1,8 @@
+import type { ReviewStepConfig, ReviewStepConfigProblem } from "./types.js";
+/**
+ * The first problem of a parsed review step config, or null when it is valid: no teams, two rules
+ * with the same id, or a rule whose team target is not one of the step's teams (spec 4.1, 6). Shared by save
+ * (`WorkflowValidator`) and the inspector (R121). User targets need a lookup, so
+ * `StoreWorkflowUseCase` checks them (R122).
+ */
+export declare const findReviewStepConfigProblem: (config: ReviewStepConfig) => ReviewStepConfigProblem | null;

package/domain/workflow/findReviewStepConfigProblem.js

@@ -0,0 +1,21 @@
+const findReviewStepConfigProblem = (config)=>{
+    if (0 === config.teams.length) return {
+        type: "noTeams"
+    };
+    const ruleIds = new Set();
+    for (const rule of config.assignment.rules){
+        if (ruleIds.has(rule.id)) return {
+            type: "duplicateRuleId",
+            ruleId: rule.id
+        };
+        ruleIds.add(rule.id);
+    }
+    for (const rule of config.assignment.rules)if ("team" === rule.target.type && !config.teams.includes(rule.target.id)) return {
+        type: "teamTargetOutsideTeams",
+        ruleId: rule.id
+    };
+    return null;
+};
+export { findReviewStepConfigProblem };
+
+//# sourceMappingURL=findReviewStepConfigProblem.js.map

package/domain/workflow/findReviewStepConfigProblem.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain/workflow/findReviewStepConfigProblem.js","sources":["../../../src/domain/workflow/findReviewStepConfigProblem.ts"],"sourcesContent":["import type { ReviewStepConfig, ReviewStepConfigProblem } from \"./types.js\";\n\n/**\n * The first problem of a parsed review step config, or null when it is valid: no teams, two rules\n * with the same id, or a rule whose team target is not one of the step's teams (spec 4.1, 6). Shared by save\n * (`WorkflowValidator`) and the inspector (R121). User targets need a lookup, so\n * `StoreWorkflowUseCase` checks them (R122).\n */\nexport const findReviewStepConfigProblem = (\n    config: ReviewStepConfig\n): ReviewStepConfigProblem | null => {\n    if (config.teams.length === 0) {\n        return { type: \"noTeams\" };\n    }\n    const ruleIds = new Set<string>();\n    for (const rule of config.assignment.rules) {\n        if (ruleIds.has(rule.id)) {\n            return { type: \"duplicateRuleId\", ruleId: rule.id };\n        }\n        ruleIds.add(rule.id);\n    }\n    for (const rule of config.assignment.rules) {\n        if (rule.target.type === \"team\" && !config.teams.includes(rule.target.id)) {\n            return { type: \"teamTargetOutsideTeams\", ruleId: rule.id };\n        }\n    }\n    return null;\n};\n"],"names":["findReviewStepConfigProblem","config","ruleIds","Set","rule"],"mappings":"AAQO,MAAMA,8BAA8B,CACvCC;IAEA,IAAIA,AAAwB,MAAxBA,OAAO,KAAK,CAAC,MAAM,EACnB,OAAO;QAAE,MAAM;IAAU;IAE7B,MAAMC,UAAU,IAAIC;IACpB,KAAK,MAAMC,QAAQH,OAAO,UAAU,CAAC,KAAK,CAAE;QACxC,IAAIC,QAAQ,GAAG,CAACE,KAAK,EAAE,GACnB,OAAO;YAAE,MAAM;YAAmB,QAAQA,KAAK,EAAE;QAAC;QAEtDF,QAAQ,GAAG,CAACE,KAAK,EAAE;IACvB;IACA,KAAK,MAAMA,QAAQH,OAAO,UAAU,CAAC,KAAK,CACtC,IAAIG,AAAqB,WAArBA,KAAK,MAAM,CAAC,IAAI,IAAe,CAACH,OAAO,KAAK,CAAC,QAAQ,CAACG,KAAK,MAAM,CAAC,EAAE,GACpE,OAAO;QAAE,MAAM;QAA0B,QAAQA,KAAK,EAAE;IAAC;IAGjE,OAAO;AACX"}

package/domain/workflow/findRuleWithoutTarget.d.ts

@@ -0,0 +1,10 @@
+export interface RuleWithoutTarget {
+    /** The rule's id; null when the rule has none. */
+    ruleId: string | null;
+}
+/**
+ * The first routing rule of a raw review step config that is an object without an object
+ * `target` (R288). Runs on the config as received, before the schema, because the schema reports
+ * the same rule by index and without its id. A rule that is not an object is left to the schema.
+ */
+export declare const findRuleWithoutTarget: (config: unknown) => RuleWithoutTarget | null;

package/domain/workflow/findRuleWithoutTarget.js

@@ -0,0 +1,15 @@
+const isRecord = (value)=>"object" == typeof value && null !== value && !Array.isArray(value);
+const findRuleWithoutTarget = (config)=>{
+    if (!isRecord(config) || !isRecord(config.assignment)) return null;
+    const rules = Array.isArray(config.assignment.rules) ? config.assignment.rules : [];
+    for (const rule of rules)if (isRecord(rule) && !isRecord(rule.target)) {
+        const ruleId = "string" == typeof rule.id && "" !== rule.id ? rule.id : null;
+        return {
+            ruleId
+        };
+    }
+    return null;
+};
+export { findRuleWithoutTarget };
+
+//# sourceMappingURL=findRuleWithoutTarget.js.map

package/domain/workflow/findRuleWithoutTarget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain/workflow/findRuleWithoutTarget.js","sources":["../../../src/domain/workflow/findRuleWithoutTarget.ts"],"sourcesContent":["export interface RuleWithoutTarget {\n    /** The rule's id; null when the rule has none. */\n    ruleId: string | null;\n}\n\ntype UnknownRecord = Record<string, unknown>;\n\nconst isRecord = (value: unknown): value is UnknownRecord => {\n    return typeof value === \"object\" && value !== null && !Array.isArray(value);\n};\n\n/**\n * The first routing rule of a raw review step config that is an object without an object\n * `target` (R288). Runs on the config as received, before the schema, because the schema reports\n * the same rule by index and without its id. A rule that is not an object is left to the schema.\n */\nexport const findRuleWithoutTarget = (config: unknown): RuleWithoutTarget | null => {\n    if (!isRecord(config) || !isRecord(config.assignment)) {\n        return null;\n    }\n    const rules = Array.isArray(config.assignment.rules) ? config.assignment.rules : [];\n    for (const rule of rules) {\n        if (isRecord(rule) && !isRecord(rule.target)) {\n            const ruleId = typeof rule.id === \"string\" && rule.id !== \"\" ? rule.id : null;\n            return { ruleId };\n        }\n    }\n    return null;\n};\n"],"names":["isRecord","value","Array","findRuleWithoutTarget","config","rules","rule","ruleId"],"mappings":"AAOA,MAAMA,WAAW,CAACC,QACP,AAAiB,YAAjB,OAAOA,SAAsBA,AAAU,SAAVA,SAAkB,CAACC,MAAM,OAAO,CAACD;AAQlE,MAAME,wBAAwB,CAACC;IAClC,IAAI,CAACJ,SAASI,WAAW,CAACJ,SAASI,OAAO,UAAU,GAChD,OAAO;IAEX,MAAMC,QAAQH,MAAM,OAAO,CAACE,OAAO,UAAU,CAAC,KAAK,IAAIA,OAAO,UAAU,CAAC,KAAK,GAAG,EAAE;IACnF,KAAK,MAAME,QAAQD,MACf,IAAIL,SAASM,SAAS,CAACN,SAASM,KAAK,MAAM,GAAG;QAC1C,MAAMC,SAAS,AAAmB,YAAnB,OAAOD,KAAK,EAAE,IAAiBA,AAAY,OAAZA,KAAK,EAAE,GAAUA,KAAK,EAAE,GAAG;QACzE,OAAO;YAAEC;QAAO;IACpB;IAEJ,OAAO;AACX"}

package/domain/workflow/getConfigIssueField.d.ts

@@ -0,0 +1,6 @@
+/**
+ * The error field of a step config problem that a schema found (R267): `config.<path>` with the
+ * zod issue path joined by dots (array indexes are path parts), or `config` when the issue has no
+ * path.
+ */
+export declare const getConfigIssueField: (path: readonly PropertyKey[]) => string;

package/domain/workflow/getConfigIssueField.js

@@ -0,0 +1,7 @@
+const getConfigIssueField = (path)=>{
+    if (0 === path.length) return "config";
+    return `config.${path.map(String).join(".")}`;
+};
+export { getConfigIssueField };
+
+//# sourceMappingURL=getConfigIssueField.js.map

package/domain/workflow/getConfigIssueField.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain/workflow/getConfigIssueField.js","sources":["../../../src/domain/workflow/getConfigIssueField.ts"],"sourcesContent":["/**\n * The error field of a step config problem that a schema found (R267): `config.<path>` with the\n * zod issue path joined by dots (array indexes are path parts), or `config` when the issue has no\n * path.\n */\nexport const getConfigIssueField = (path: readonly PropertyKey[]): string => {\n    if (path.length === 0) {\n        return \"config\";\n    }\n    return `config.${path.map(String).join(\".\")}`;\n};\n"],"names":["getConfigIssueField","path","String"],"mappings":"AAKO,MAAMA,sBAAsB,CAACC;IAChC,IAAIA,AAAgB,MAAhBA,KAAK,MAAM,EACX,OAAO;IAEX,OAAO,CAAC,OAAO,EAAEA,KAAK,GAAG,CAACC,QAAQ,IAAI,CAAC,MAAM;AACjD"}

package/domain/workflow/isAppWorkflow.d.ts

@@ -0,0 +1,7 @@
+import type { WorkflowValues } from "./types.js";
+/** Whether a namespace id belongs to the app, e.g. `cms.<modelId>` or `wb.page`. */
+export type AppNamespacePredicate = (model: string) => boolean;
+/** Every model is one of the app's namespaces; an empty list is left to the engine's validation. */
+export declare const belongsToApp: (models: string[], isAppNamespace: AppNamespacePredicate) => boolean;
+/** A stored workflow of the app (R46): bound to at least one model, all of them the app's. */
+export declare const isAppWorkflow: (workflow: WorkflowValues, isAppNamespace: AppNamespacePredicate) => boolean;

package/domain/workflow/isAppWorkflow.js

@@ -0,0 +1,5 @@
+const belongsToApp = (models, isAppNamespace)=>models.every(isAppNamespace);
+const isAppWorkflow = (workflow, isAppNamespace)=>workflow.models.length > 0 && belongsToApp(workflow.models, isAppNamespace);
+export { belongsToApp, isAppWorkflow };
+
+//# sourceMappingURL=isAppWorkflow.js.map

package/domain/workflow/isAppWorkflow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain/workflow/isAppWorkflow.js","sources":["../../../src/domain/workflow/isAppWorkflow.ts"],"sourcesContent":["import type { WorkflowValues } from \"./types.js\";\n\n/** Whether a namespace id belongs to the app, e.g. `cms.<modelId>` or `wb.page`. */\nexport type AppNamespacePredicate = (model: string) => boolean;\n\n/** Every model is one of the app's namespaces; an empty list is left to the engine's validation. */\nexport const belongsToApp = (models: string[], isAppNamespace: AppNamespacePredicate): boolean => {\n    return models.every(isAppNamespace);\n};\n\n/** A stored workflow of the app (R46): bound to at least one model, all of them the app's. */\nexport const isAppWorkflow = (\n    workflow: WorkflowValues,\n    isAppNamespace: AppNamespacePredicate\n): boolean => {\n    return workflow.models.length > 0 && belongsToApp(workflow.models, isAppNamespace);\n};\n"],"names":["belongsToApp","models","isAppNamespace","isAppWorkflow","workflow"],"mappings":"AAMO,MAAMA,eAAe,CAACC,QAAkBC,iBACpCD,OAAO,KAAK,CAACC;AAIjB,MAAMC,gBAAgB,CACzBC,UACAF,iBAEOE,SAAS,MAAM,CAAC,MAAM,GAAG,KAAKJ,aAAaI,SAAS,MAAM,EAAEF"}

package/domain/workflow/reviewStepConfigSchema.d.ts

@@ -0,0 +1,39 @@
+import zod from "zod";
+import type { ReviewStepConfig } from "./types.js";
+/**
+ * Config of a "review" step (spec 4.1): the `configSchema` of the built-in `ReviewStepType`
+ * (R131). Stored as JSON on the workflow and review models.
+ */
+export declare const reviewStepConfigSchema: zod.ZodObject<{
+    teams: zod.ZodArray<zod.ZodString>;
+    assignment: zod.ZodObject<{
+        strategy: zod.ZodEnum<{
+            leastLoaded: "leastLoaded";
+            none: "none";
+            roundRobin: "roundRobin";
+        }>;
+        allowManualPick: zod.ZodBoolean;
+        rules: zod.ZodArray<zod.ZodObject<{
+            id: zod.ZodString;
+            conditions: zod.ZodObject<{
+                requesterUserId: zod.ZodOptional<zod.ZodString>;
+                requesterTeamId: zod.ZodOptional<zod.ZodString>;
+                folder: zod.ZodOptional<zod.ZodObject<{
+                    id: zod.ZodString;
+                    type: zod.ZodString;
+                    includeDescendants: zod.ZodBoolean;
+                }, zod.core.$strip>>;
+                modelId: zod.ZodOptional<zod.ZodString>;
+            }, zod.core.$strip>;
+            target: zod.ZodObject<{
+                type: zod.ZodEnum<{
+                    team: "team";
+                    user: "user";
+                }>;
+                id: zod.ZodString;
+            }, zod.core.$strip>;
+        }, zod.core.$strip>>;
+    }, zod.core.$strip>;
+}, zod.core.$strip>;
+/** Parses a stored review step config; `null` when it does not match the schema. */
+export declare const parseReviewStepConfig: (config: unknown) => ReviewStepConfig | null;

package/domain/workflow/reviewStepConfigSchema.js

@@ -0,0 +1,41 @@
+import zod from "zod";
+const routingRuleFolderConditionSchema = zod.object({
+    id: zod.string().min(1, "Folder ID is required."),
+    type: zod.string().min(1, "Folder type is required."),
+    includeDescendants: zod.boolean()
+});
+const routingRuleSchema = zod.object({
+    id: zod.string().min(1, "Rule ID is required."),
+    conditions: zod.object({
+        requesterUserId: zod.string().min(1).optional(),
+        requesterTeamId: zod.string().min(1).optional(),
+        folder: routingRuleFolderConditionSchema.optional(),
+        modelId: zod.string().min(1).optional()
+    }),
+    target: zod.object({
+        type: zod["enum"]([
+            "user",
+            "team"
+        ]),
+        id: zod.string().min(1, "Rule target ID is required.")
+    })
+});
+const reviewStepConfigSchema = zod.object({
+    teams: zod.array(zod.string().min(1, "Team ID is required.")),
+    assignment: zod.object({
+        strategy: zod["enum"]([
+            "none",
+            "roundRobin",
+            "leastLoaded"
+        ]),
+        allowManualPick: zod.boolean(),
+        rules: zod.array(routingRuleSchema)
+    })
+});
+const parseReviewStepConfig = (config)=>{
+    const result = reviewStepConfigSchema.safeParse(config);
+    return result.success ? result.data : null;
+};
+export { parseReviewStepConfig, reviewStepConfigSchema };
+
+//# sourceMappingURL=reviewStepConfigSchema.js.map

package/domain/workflow/reviewStepConfigSchema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain/workflow/reviewStepConfigSchema.js","sources":["../../../src/domain/workflow/reviewStepConfigSchema.ts"],"sourcesContent":["import zod from \"zod\";\nimport type { ReviewStepConfig } from \"./types.js\";\n\nconst routingRuleFolderConditionSchema = zod.object({\n    id: zod.string().min(1, \"Folder ID is required.\"),\n    type: zod.string().min(1, \"Folder type is required.\"),\n    includeDescendants: zod.boolean()\n});\n\nconst routingRuleSchema = zod.object({\n    id: zod.string().min(1, \"Rule ID is required.\"),\n    conditions: zod.object({\n        requesterUserId: zod.string().min(1).optional(),\n        requesterTeamId: zod.string().min(1).optional(),\n        folder: routingRuleFolderConditionSchema.optional(),\n        modelId: zod.string().min(1).optional()\n    }),\n    target: zod.object({\n        type: zod.enum([\"user\", \"team\"]),\n        id: zod.string().min(1, \"Rule target ID is required.\")\n    })\n});\n\n/**\n * Config of a \"review\" step (spec 4.1): the `configSchema` of the built-in `ReviewStepType`\n * (R131). Stored as JSON on the workflow and review models.\n */\nexport const reviewStepConfigSchema = zod.object({\n    teams: zod.array(zod.string().min(1, \"Team ID is required.\")),\n    assignment: zod.object({\n        strategy: zod.enum([\"none\", \"roundRobin\", \"leastLoaded\"]),\n        allowManualPick: zod.boolean(),\n        rules: zod.array(routingRuleSchema)\n    })\n});\n\n/** Parses a stored review step config; `null` when it does not match the schema. */\nexport const parseReviewStepConfig = (config: unknown): ReviewStepConfig | null => {\n    const result = reviewStepConfigSchema.safeParse(config);\n    return result.success ? result.data : null;\n};\n"],"names":["routingRuleFolderConditionSchema","zod","routingRuleSchema","reviewStepConfigSchema","parseReviewStepConfig","config","result"],"mappings":";AAGA,MAAMA,mCAAmCC,IAAI,MAAM,CAAC;IAChD,IAAIA,IAAI,MAAM,GAAG,GAAG,CAAC,GAAG;IACxB,MAAMA,IAAI,MAAM,GAAG,GAAG,CAAC,GAAG;IAC1B,oBAAoBA,IAAI,OAAO;AACnC;AAEA,MAAMC,oBAAoBD,IAAI,MAAM,CAAC;IACjC,IAAIA,IAAI,MAAM,GAAG,GAAG,CAAC,GAAG;IACxB,YAAYA,IAAI,MAAM,CAAC;QACnB,iBAAiBA,IAAI,MAAM,GAAG,GAAG,CAAC,GAAG,QAAQ;QAC7C,iBAAiBA,IAAI,MAAM,GAAG,GAAG,CAAC,GAAG,QAAQ;QAC7C,QAAQD,iCAAiC,QAAQ;QACjD,SAASC,IAAI,MAAM,GAAG,GAAG,CAAC,GAAG,QAAQ;IACzC;IACA,QAAQA,IAAI,MAAM,CAAC;QACf,MAAMA,GAAG,CAAHA,OAAQ,CAAC;YAAC;YAAQ;SAAO;QAC/B,IAAIA,IAAI,MAAM,GAAG,GAAG,CAAC,GAAG;IAC5B;AACJ;AAMO,MAAME,yBAAyBF,IAAI,MAAM,CAAC;IAC7C,OAAOA,IAAI,KAAK,CAACA,IAAI,MAAM,GAAG,GAAG,CAAC,GAAG;IACrC,YAAYA,IAAI,MAAM,CAAC;QACnB,UAAUA,GAAG,CAAHA,OAAQ,CAAC;YAAC;YAAQ;YAAc;SAAc;QACxD,iBAAiBA,IAAI,OAAO;QAC5B,OAAOA,IAAI,KAAK,CAACC;IACrB;AACJ;AAGO,MAAME,wBAAwB,CAACC;IAClC,MAAMC,SAASH,uBAAuB,SAAS,CAACE;IAChD,OAAOC,OAAO,OAAO,GAAGA,OAAO,IAAI,GAAG;AAC1C"}

package/domain/workflow/ruleErrorMessages.d.ts

@@ -0,0 +1,26 @@
+/**
+ * The field of every rule-level failure (R288): the rule is named by `ruleId` in the error data,
+ * not by an index, so the editor finds it again after a reorder.
+ */
+export declare const RULE_TARGET_FIELD = "config.assignment.rules.target";
+/**
+ * The field of a step whose rules share an id. The error names no `ruleId`: the id does not pick
+ * out one rule.
+ */
+export declare const RULES_FIELD = "config.assignment.rules";
+/**
+ * Two rules of a step share an id. Save names the step; the inspector has only the config and no
+ * step title, so it passes `null`.
+ */
+export declare const getRuleIdDuplicateMessage: (stepTitle: string | null, ruleId: string) => string;
+/** A user target who is not a member of the step's teams; checked on save (R122, Q51). */
+export declare const RULE_TARGET_USER_NOT_MEMBER_MESSAGE = "The target user is not a member of the step's teams.";
+/** A team target whose team no longer exists; checked on save while teams are on (D174). */
+export declare const RULE_TARGET_TEAM_DELETED_MESSAGE = "The team was deleted.";
+/** A team target outside the step's teams; checked on save and by the inspector (Q52). */
+export declare const RULE_TARGET_TEAM_OUTSIDE_TEAMS_MESSAGE = "The target team is not one of the step's reviewing teams.";
+/**
+ * A rule without a target. Save names the step; the inspector has only the config and no step
+ * title, so it passes `null`.
+ */
+export declare const getRuleTargetMissingMessage: (stepTitle: string | null) => string;

package/domain/workflow/ruleErrorMessages.js

@@ -0,0 +1,16 @@
+const RULE_TARGET_FIELD = "config.assignment.rules.target";
+const RULES_FIELD = "config.assignment.rules";
+const getRuleIdDuplicateMessage = (stepTitle, ruleId)=>{
+    if (null === stepTitle) return `Two routing rules have the same ID "${ruleId}".`;
+    return `Two routing rules in step "${stepTitle}" have the same ID "${ruleId}".`;
+};
+const RULE_TARGET_USER_NOT_MEMBER_MESSAGE = "The target user is not a member of the step's teams.";
+const RULE_TARGET_TEAM_DELETED_MESSAGE = "The team was deleted.";
+const RULE_TARGET_TEAM_OUTSIDE_TEAMS_MESSAGE = "The target team is not one of the step's reviewing teams.";
+const getRuleTargetMissingMessage = (stepTitle)=>{
+    if (null === stepTitle) return "Every routing rule needs a target.";
+    return `Every routing rule in step "${stepTitle}" needs a target.`;
+};
+export { RULES_FIELD, RULE_TARGET_FIELD, RULE_TARGET_TEAM_DELETED_MESSAGE, RULE_TARGET_TEAM_OUTSIDE_TEAMS_MESSAGE, RULE_TARGET_USER_NOT_MEMBER_MESSAGE, getRuleIdDuplicateMessage, getRuleTargetMissingMessage };
+
+//# sourceMappingURL=ruleErrorMessages.js.map

package/domain/workflow/ruleErrorMessages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain/workflow/ruleErrorMessages.js","sources":["../../../src/domain/workflow/ruleErrorMessages.ts"],"sourcesContent":["/**\n * The field of every rule-level failure (R288): the rule is named by `ruleId` in the error data,\n * not by an index, so the editor finds it again after a reorder.\n */\nexport const RULE_TARGET_FIELD = \"config.assignment.rules.target\";\n\n/**\n * The field of a step whose rules share an id. The error names no `ruleId`: the id does not pick\n * out one rule.\n */\nexport const RULES_FIELD = \"config.assignment.rules\";\n\n/**\n * Two rules of a step share an id. Save names the step; the inspector has only the config and no\n * step title, so it passes `null`.\n */\nexport const getRuleIdDuplicateMessage = (stepTitle: string | null, ruleId: string): string => {\n    if (stepTitle === null) {\n        return `Two routing rules have the same ID \"${ruleId}\".`;\n    }\n    return `Two routing rules in step \"${stepTitle}\" have the same ID \"${ruleId}\".`;\n};\n\n/** A user target who is not a member of the step's teams; checked on save (R122, Q51). */\nexport const RULE_TARGET_USER_NOT_MEMBER_MESSAGE =\n    \"The target user is not a member of the step's teams.\";\n\n/** A team target whose team no longer exists; checked on save while teams are on (D174). */\nexport const RULE_TARGET_TEAM_DELETED_MESSAGE = \"The team was deleted.\";\n\n/** A team target outside the step's teams; checked on save and by the inspector (Q52). */\nexport const RULE_TARGET_TEAM_OUTSIDE_TEAMS_MESSAGE =\n    \"The target team is not one of the step's reviewing teams.\";\n\n/**\n * A rule without a target. Save names the step; the inspector has only the config and no step\n * title, so it passes `null`.\n */\nexport const getRuleTargetMissingMessage = (stepTitle: string | null): string => {\n    if (stepTitle === null) {\n        return \"Every routing rule needs a target.\";\n    }\n    return `Every routing rule in step \"${stepTitle}\" needs a target.`;\n};\n"],"names":["RULE_TARGET_FIELD","RULES_FIELD","getRuleIdDuplicateMessage","stepTitle","ruleId","RULE_TARGET_USER_NOT_MEMBER_MESSAGE","RULE_TARGET_TEAM_DELETED_MESSAGE","RULE_TARGET_TEAM_OUTSIDE_TEAMS_MESSAGE","getRuleTargetMissingMessage"],"mappings":"AAIO,MAAMA,oBAAoB;AAM1B,MAAMC,cAAc;AAMpB,MAAMC,4BAA4B,CAACC,WAA0BC;IAChE,IAAID,AAAc,SAAdA,WACA,OAAO,CAAC,oCAAoC,EAAEC,OAAO,EAAE,CAAC;IAE5D,OAAO,CAAC,2BAA2B,EAAED,UAAU,oBAAoB,EAAEC,OAAO,EAAE,CAAC;AACnF;AAGO,MAAMC,sCACT;AAGG,MAAMC,mCAAmC;AAGzC,MAAMC,yCACT;AAMG,MAAMC,8BAA8B,CAACL;IACxC,IAAIA,AAAc,SAAdA,WACA,OAAO;IAEX,OAAO,CAAC,4BAA4B,EAAEA,UAAU,iBAAiB,CAAC;AACtE"}