@webiny/api-workflows 0.0.0-unstable.b9b64acb6d → 0.0.0-unstable.d0f34a8194

package/domain/review/getReviewViewerFlags.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain/review/getReviewViewerFlags.js","sources":["../../../src/domain/review/getReviewViewerFlags.ts"],"sourcesContent":["import { Review, type ReviewActorCheckParams } from \"./Review.js\";\nimport { canCancelByPermission } from \"./canCancelByPermission.js\";\nimport { canReassignByPermission } from \"./canReassignByPermission.js\";\nimport { canRestartByPermission } from \"./canRestartByPermission.js\";\nimport type { ReviewData, ReviewViewer, ReviewViewerFlags } from \"./types.js\";\n\n/**\n * Viewer flags for one review and one reading user (spec 5.3, D5, D54). Pure.\n *\n * Start, take over, approve, reject, the reassign step rule and the restart step rule ask the\n * aggregate's own checks (R31), so a flag is true exactly when the transition would pass its\n * domain rules. Cancel, reassign and restart add the permission-only predicates (R41) the app\n * wrappers also authorize with, so the flag and the wrapper's check cannot drift. The wrappers\n * AND their target read access into every flag (R33, D133 point 7), through `applyTargetAccess`.\n *\n * `canRestart` is \"the current step failed, and requester or `reassign`\" (D34, R153): a rejected\n * step is final (D10) and `checkRestart` refuses it.\n */\nexport const getReviewViewerFlags = (data: ReviewData, viewer: ReviewViewer): ReviewViewerFlags => {\n    const review = Review.fromData(data);\n    const canCancel = review.checkCancel().isOk() && canCancelByPermission(data, viewer);\n\n    const stepId = review.actionableStepId;\n    if (!stepId) {\n        // Every step is approved: nothing is left to act on.\n        return {\n            canStart: false,\n            canTakeOver: false,\n            canApprove: false,\n            canReject: false,\n            canCancel,\n            canReassign: false,\n            canRestart: false\n        };\n    }\n\n    const params: ReviewActorCheckParams = {\n        stepId,\n        actor: viewer.actor,\n        actorTeamIds: viewer.teamIds\n    };\n    return {\n        canStart: review.checkStart(params).isOk(),\n        canTakeOver: review.checkTakeOver(params).isOk(),\n        canApprove: review.checkApprove(params).isOk(),\n        canReject: review.checkReject(params).isOk(),\n        canCancel,\n        canReassign: canReassignByPermission(viewer) && review.checkReassign({ stepId }).isOk(),\n        canRestart: canRestartByPermission(data, viewer) && review.checkRestart({ stepId }).isOk()\n    };\n};\n"],"names":["getReviewViewerFlags","data","viewer","review","Review","canCancel","canCancelByPermission","stepId","params","canReassignByPermission","canRestartByPermission"],"mappings":";;;;AAkBO,MAAMA,uBAAuB,CAACC,MAAkBC;IACnD,MAAMC,SAASC,OAAO,QAAQ,CAACH;IAC/B,MAAMI,YAAYF,OAAO,WAAW,GAAG,IAAI,MAAMG,sBAAsBL,MAAMC;IAE7E,MAAMK,SAASJ,OAAO,gBAAgB;IACtC,IAAI,CAACI,QAED,OAAO;QACH,UAAU;QACV,aAAa;QACb,YAAY;QACZ,WAAW;QACXF;QACA,aAAa;QACb,YAAY;IAChB;IAGJ,MAAMG,SAAiC;QACnCD;QACA,OAAOL,OAAO,KAAK;QACnB,cAAcA,OAAO,OAAO;IAChC;IACA,OAAO;QACH,UAAUC,OAAO,UAAU,CAACK,QAAQ,IAAI;QACxC,aAAaL,OAAO,aAAa,CAACK,QAAQ,IAAI;QAC9C,YAAYL,OAAO,YAAY,CAACK,QAAQ,IAAI;QAC5C,WAAWL,OAAO,WAAW,CAACK,QAAQ,IAAI;QAC1CH;QACA,aAAaI,wBAAwBP,WAAWC,OAAO,aAAa,CAAC;YAAEI;QAAO,GAAG,IAAI;QACrF,YAAYG,uBAAuBT,MAAMC,WAAWC,OAAO,YAAY,CAAC;YAAEI;QAAO,GAAG,IAAI;IAC5F;AACJ"}

package/domain/review/getStaleStepRunReason.d.ts

@@ -0,0 +1,17 @@
+import type { ReviewData } from "./types.js";
+export interface StepRunTaskIdentity {
+    id: string;
+    /** The id of the identity that created the task. */
+    createdById: string;
+}
+/**
+ * Why a step run task must not write to the review, or `null` when it may (D7, D27, R144). The
+ * run handler, every failure hook and stuck detection call it with the task's own id and creator,
+ * never with values read from the task input (R148).
+ *
+ * A task is current only when the review is active and in progress, the step is the current step
+ * and is in review, the step carries this task's id (a restarted step carries a new one, a
+ * forged or foreign task carries none) and the task was created by the review's requester (the
+ * automation reach triggers as the requester, R149).
+ */
+export declare const getStaleStepRunReason: (review: ReviewData, stepId: string, task: StepRunTaskIdentity) => string | null;

package/domain/review/getStaleStepRunReason.js

@@ -0,0 +1,13 @@
+const getStaleStepRunReason = (review, stepId, task)=>{
+    if (!review.isActive) return "The review is not active.";
+    if ("inProgress" !== review.state) return "The review is not in progress.";
+    if (review.currentStepId !== stepId) return "The step is not the current step.";
+    const step = review.steps.find((item)=>item.id === stepId);
+    if (!step || "inReview" !== step.state) return "The step is not in review.";
+    if (step.taskId !== task.id) return "The step does not belong to this task.";
+    if (task.createdById !== review.createdBy.id) return "The task was not created by the requester.";
+    return null;
+};
+export { getStaleStepRunReason };
+
+//# sourceMappingURL=getStaleStepRunReason.js.map

package/domain/review/getStaleStepRunReason.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain/review/getStaleStepRunReason.js","sources":["../../../src/domain/review/getStaleStepRunReason.ts"],"sourcesContent":["import type { ReviewData } from \"./types.js\";\n\nexport interface StepRunTaskIdentity {\n    id: string;\n    /** The id of the identity that created the task. */\n    createdById: string;\n}\n\n/**\n * Why a step run task must not write to the review, or `null` when it may (D7, D27, R144). The\n * run handler, every failure hook and stuck detection call it with the task's own id and creator,\n * never with values read from the task input (R148).\n *\n * A task is current only when the review is active and in progress, the step is the current step\n * and is in review, the step carries this task's id (a restarted step carries a new one, a\n * forged or foreign task carries none) and the task was created by the review's requester (the\n * automation reach triggers as the requester, R149).\n */\nexport const getStaleStepRunReason = (\n    review: ReviewData,\n    stepId: string,\n    task: StepRunTaskIdentity\n): string | null => {\n    if (!review.isActive) {\n        return \"The review is not active.\";\n    }\n    if (review.state !== \"inProgress\") {\n        return \"The review is not in progress.\";\n    }\n    if (review.currentStepId !== stepId) {\n        return \"The step is not the current step.\";\n    }\n    const step = review.steps.find(item => item.id === stepId);\n    if (!step || step.state !== \"inReview\") {\n        return \"The step is not in review.\";\n    }\n    if (step.taskId !== task.id) {\n        return \"The step does not belong to this task.\";\n    }\n    // Contract: a task's `createdBy` is the identity active when it was triggered.\n    // `AutomationStepType.reach` triggers inside `withIdentity(requester)`, so for a genuine step\n    // run task it is the review's requester. Pinned by background-tasks `crud/trigger.test.ts`.\n    if (task.createdById !== review.createdBy.id) {\n        return \"The task was not created by the requester.\";\n    }\n    return null;\n};\n"],"names":["getStaleStepRunReason","review","stepId","task","step","item"],"mappings":"AAkBO,MAAMA,wBAAwB,CACjCC,QACAC,QACAC;IAEA,IAAI,CAACF,OAAO,QAAQ,EAChB,OAAO;IAEX,IAAIA,AAAiB,iBAAjBA,OAAO,KAAK,EACZ,OAAO;IAEX,IAAIA,OAAO,aAAa,KAAKC,QACzB,OAAO;IAEX,MAAME,OAAOH,OAAO,KAAK,CAAC,IAAI,CAACI,CAAAA,OAAQA,KAAK,EAAE,KAAKH;IACnD,IAAI,CAACE,QAAQA,AAAe,eAAfA,KAAK,KAAK,EACnB,OAAO;IAEX,IAAIA,KAAK,MAAM,KAAKD,KAAK,EAAE,EACvB,OAAO;IAKX,IAAIA,KAAK,WAAW,KAAKF,OAAO,SAAS,CAAC,EAAE,EACxC,OAAO;IAEX,OAAO;AACX"}

package/domain/review/matchesReviewList.d.ts

@@ -0,0 +1,17 @@
+import type { ReviewData, ReviewListKind, ReviewListWhere } from "./types.js";
+/** Current step types the failed steps list shows (D112). */
+export declare const FAILED_STEP_LIST_TYPES: readonly string[];
+export interface ReviewListMatchParams {
+    list: ReviewListKind;
+    viewerUserId: string;
+    viewerTeamIds: string[];
+    /** Namespace ids the app lists. */
+    models: string[];
+    where: ReviewListWhere;
+}
+/**
+ * Whether a review belongs to a list for one viewer (spec 11, R91). Pure. Run on the
+ * primary-storage row of every listed hit: the storage pre-filter can be stale (R18) or, on a
+ * storage that cannot express a condition, missing (A40).
+ */
+export declare const matchesReviewList: (review: ReviewData, params: ReviewListMatchParams) => boolean;

package/domain/review/matchesReviewList.js

@@ -0,0 +1,27 @@
+import { AI_STEP_TYPE, AUTOMATION_STEP_TYPE } from "../workflow/stepTypes.js";
+const FAILED_STEP_LIST_TYPES = [
+    AI_STEP_TYPE,
+    AUTOMATION_STEP_TYPE
+];
+const sharesTeam = (review, teamIds)=>review.currentCandidateTeamIds.some((teamId)=>teamIds.includes(teamId));
+const matchesReviewList = (review, params)=>{
+    if (!review.isActive || !params.models.includes(review.model)) return false;
+    const titleWords = (params.where.titleContains ?? "").toLowerCase().split(/\s+/).filter(Boolean);
+    const title = review.title.toLowerCase();
+    if (titleWords.length && !titleWords.every((word)=>title.includes(word))) return false;
+    switch(params.list){
+        case "assignedToMe":
+            return "inReview" === review.currentStepState && review.currentOwnerId === params.viewerUserId;
+        case "pool":
+            return "awaiting" === review.currentStepState && sharesTeam(review, params.viewerTeamIds) && review.createdBy.id !== params.viewerUserId;
+        case "teamInReview":
+            return "inReview" === review.currentStepState && review.currentOwnerId !== params.viewerUserId && sharesTeam(review, params.viewerTeamIds);
+        case "myRequests":
+            return review.createdBy.id === params.viewerUserId && (!params.where.reviewState || review.state === params.where.reviewState) && (!params.where.stepState || review.currentStepState === params.where.stepState);
+        case "failedSteps":
+            return "failed" === review.currentStepState && null !== review.currentStepType && FAILED_STEP_LIST_TYPES.includes(review.currentStepType);
+    }
+};
+export { FAILED_STEP_LIST_TYPES, matchesReviewList };
+
+//# sourceMappingURL=matchesReviewList.js.map

package/domain/review/matchesReviewList.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain/review/matchesReviewList.js","sources":["../../../src/domain/review/matchesReviewList.ts"],"sourcesContent":["import { AI_STEP_TYPE, AUTOMATION_STEP_TYPE } from \"~/domain/workflow/stepTypes.js\";\nimport type { ReviewData, ReviewListKind, ReviewListWhere } from \"./types.js\";\n\n/** Current step types the failed steps list shows (D112). */\nexport const FAILED_STEP_LIST_TYPES: readonly string[] = [AI_STEP_TYPE, AUTOMATION_STEP_TYPE];\n\nexport interface ReviewListMatchParams {\n    list: ReviewListKind;\n    viewerUserId: string;\n    viewerTeamIds: string[];\n    /** Namespace ids the app lists. */\n    models: string[];\n    where: ReviewListWhere;\n}\n\nconst sharesTeam = (review: ReviewData, teamIds: string[]): boolean => {\n    return review.currentCandidateTeamIds.some(teamId => teamIds.includes(teamId));\n};\n\n/**\n * Whether a review belongs to a list for one viewer (spec 11, R91). Pure. Run on the\n * primary-storage row of every listed hit: the storage pre-filter can be stale (R18) or, on a\n * storage that cannot express a condition, missing (A40).\n */\nexport const matchesReviewList = (review: ReviewData, params: ReviewListMatchParams): boolean => {\n    if (!review.isActive || !params.models.includes(review.model)) {\n        return false;\n    }\n    // Storage `title_contains` matches each word anywhere (case-insensitive), so code does too.\n    const titleWords = (params.where.titleContains ?? \"\")\n        .toLowerCase()\n        .split(/\\s+/)\n        .filter(Boolean);\n    const title = review.title.toLowerCase();\n    if (titleWords.length && !titleWords.every(word => title.includes(word))) {\n        return false;\n    }\n\n    switch (params.list) {\n        case \"assignedToMe\":\n            return (\n                review.currentStepState === \"inReview\" &&\n                review.currentOwnerId === params.viewerUserId\n            );\n        case \"pool\":\n            return (\n                review.currentStepState === \"awaiting\" &&\n                sharesTeam(review, params.viewerTeamIds) &&\n                review.createdBy.id !== params.viewerUserId\n            );\n        case \"teamInReview\":\n            return (\n                review.currentStepState === \"inReview\" &&\n                review.currentOwnerId !== params.viewerUserId &&\n                sharesTeam(review, params.viewerTeamIds)\n            );\n        case \"myRequests\":\n            return (\n                review.createdBy.id === params.viewerUserId &&\n                (!params.where.reviewState || review.state === params.where.reviewState) &&\n                (!params.where.stepState || review.currentStepState === params.where.stepState)\n            );\n        case \"failedSteps\":\n            return (\n                review.currentStepState === \"failed\" &&\n                review.currentStepType !== null &&\n                FAILED_STEP_LIST_TYPES.includes(review.currentStepType)\n            );\n    }\n};\n"],"names":["FAILED_STEP_LIST_TYPES","AI_STEP_TYPE","AUTOMATION_STEP_TYPE","sharesTeam","review","teamIds","teamId","matchesReviewList","params","titleWords","Boolean","title","word"],"mappings":";AAIO,MAAMA,yBAA4C;IAACC;IAAcC;CAAqB;AAW7F,MAAMC,aAAa,CAACC,QAAoBC,UAC7BD,OAAO,uBAAuB,CAAC,IAAI,CAACE,CAAAA,SAAUD,QAAQ,QAAQ,CAACC;AAQnE,MAAMC,oBAAoB,CAACH,QAAoBI;IAClD,IAAI,CAACJ,OAAO,QAAQ,IAAI,CAACI,OAAO,MAAM,CAAC,QAAQ,CAACJ,OAAO,KAAK,GACxD,OAAO;IAGX,MAAMK,aAAcD,AAAAA,CAAAA,OAAO,KAAK,CAAC,aAAa,IAAI,EAAC,EAC9C,WAAW,GACX,KAAK,CAAC,OACN,MAAM,CAACE;IACZ,MAAMC,QAAQP,OAAO,KAAK,CAAC,WAAW;IACtC,IAAIK,WAAW,MAAM,IAAI,CAACA,WAAW,KAAK,CAACG,CAAAA,OAAQD,MAAM,QAAQ,CAACC,QAC9D,OAAO;IAGX,OAAQJ,OAAO,IAAI;QACf,KAAK;YACD,OACIJ,AAA4B,eAA5BA,OAAO,gBAAgB,IACvBA,OAAO,cAAc,KAAKI,OAAO,YAAY;QAErD,KAAK;YACD,OACIJ,AAA4B,eAA5BA,OAAO,gBAAgB,IACvBD,WAAWC,QAAQI,OAAO,aAAa,KACvCJ,OAAO,SAAS,CAAC,EAAE,KAAKI,OAAO,YAAY;QAEnD,KAAK;YACD,OACIJ,AAA4B,eAA5BA,OAAO,gBAAgB,IACvBA,OAAO,cAAc,KAAKI,OAAO,YAAY,IAC7CL,WAAWC,QAAQI,OAAO,aAAa;QAE/C,KAAK;YACD,OACIJ,OAAO,SAAS,CAAC,EAAE,KAAKI,OAAO,YAAY,IAC1C,EAACA,OAAO,KAAK,CAAC,WAAW,IAAIJ,OAAO,KAAK,KAAKI,OAAO,KAAK,CAAC,WAAU,KACrE,EAACA,OAAO,KAAK,CAAC,SAAS,IAAIJ,OAAO,gBAAgB,KAAKI,OAAO,KAAK,CAAC,SAAQ;QAErF,KAAK;YACD,OACIJ,AAA4B,aAA5BA,OAAO,gBAAgB,IACvBA,AAA2B,SAA3BA,OAAO,eAAe,IACtBJ,uBAAuB,QAAQ,CAACI,OAAO,eAAe;IAElE;AACJ"}

package/domain/review/matchesReviewReadFilter.d.ts

@@ -0,0 +1,6 @@
+import type { ReviewData, ReviewListReadFilter } from "./types.js";
+/**
+ * Whether a viewer may read a review in a list (Q77). Pure. The repository applies the same
+ * conditions in the query; this runs again on the primary row, as every list condition does (R18).
+ */
+export declare const matchesReviewReadFilter: (review: ReviewData, filter: ReviewListReadFilter) => boolean;

package/domain/review/matchesReviewReadFilter.js

@@ -0,0 +1,9 @@
+const matchesReviewReadFilter = (review, filter)=>{
+    const folderId = review.targetContext.folder?.id;
+    if (folderId && filter.deniedFolderIds.includes(folderId)) return false;
+    if (filter.models.includes(review.model)) return true;
+    return filter.ownOnlyModels.includes(review.model) && review.targetContext.author.id === filter.authorId;
+};
+export { matchesReviewReadFilter };
+
+//# sourceMappingURL=matchesReviewReadFilter.js.map

package/domain/review/matchesReviewReadFilter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain/review/matchesReviewReadFilter.js","sources":["../../../src/domain/review/matchesReviewReadFilter.ts"],"sourcesContent":["import type { ReviewData, ReviewListReadFilter } from \"./types.js\";\n\n/**\n * Whether a viewer may read a review in a list (Q77). Pure. The repository applies the same\n * conditions in the query; this runs again on the primary row, as every list condition does (R18).\n */\nexport const matchesReviewReadFilter = (\n    review: ReviewData,\n    filter: ReviewListReadFilter\n): boolean => {\n    // The folder captured when the review was requested; it is never updated. A target can move\n    // once its review is approved, rejected or cancelled (D84), so for such a review this may be\n    // the old folder. Only `myRequests` lists those reviews, and only to their requester; opening\n    // one checks read access to the target as it is now. Accepted (second review of #6042).\n    const folderId = review.targetContext.folder?.id;\n    if (folderId && filter.deniedFolderIds.includes(folderId)) {\n        return false;\n    }\n    if (filter.models.includes(review.model)) {\n        return true;\n    }\n    return (\n        filter.ownOnlyModels.includes(review.model) &&\n        review.targetContext.author.id === filter.authorId\n    );\n};\n"],"names":["matchesReviewReadFilter","review","filter","folderId"],"mappings":"AAMO,MAAMA,0BAA0B,CACnCC,QACAC;IAMA,MAAMC,WAAWF,OAAO,aAAa,CAAC,MAAM,EAAE;IAC9C,IAAIE,YAAYD,OAAO,eAAe,CAAC,QAAQ,CAACC,WAC5C,OAAO;IAEX,IAAID,OAAO,MAAM,CAAC,QAAQ,CAACD,OAAO,KAAK,GACnC,OAAO;IAEX,OACIC,OAAO,aAAa,CAAC,QAAQ,CAACD,OAAO,KAAK,KAC1CA,OAAO,aAAa,CAAC,MAAM,CAAC,EAAE,KAAKC,OAAO,QAAQ;AAE1D"}

package/domain/review/review.model.d.ts

@@ -0,0 +1,14 @@
+import { ModelFactory } from "@webiny/api-headless-cms/features/modelBuilder/index.js";
+/**
+ * Private model for reviews (spec 4.2). Current-step fields are top-level so lists and least-loaded
+ * can query them (D19); `targetContext` is an object field so it stays filterable (the lists
+ * hide unreadable targets with the app's read predicate, R94).
+ * The requester is stored as `requester` because `createdBy` is a reserved CMS field id.
+ */
+declare class ReviewModelImpl implements ModelFactory.Interface {
+    execute(builder: ModelFactory.Builder): Promise<import("@webiny/api-headless-cms/features/modelBuilder/index.js").PrivateModelBuilder[]>;
+}
+export declare const ReviewModel: typeof ReviewModelImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/api-headless-cms/features/modelBuilder/abstractions").IModelFactory>;
+};
+export {};

package/domain/review/review.model.js

@@ -0,0 +1,112 @@
+import { ModelFactory } from "@webiny/api-headless-cms/features/modelBuilder/index.js";
+import { REVIEW_MODEL_ID } from "../../constants.js";
+class ReviewModelImpl {
+    async execute(builder) {
+        return [
+            builder.private({
+                modelId: REVIEW_MODEL_ID,
+                name: "Workflow Review",
+                lifecycleEvents: false
+            }).fields((fields)=>({
+                    workflowId: fields.text().label("Workflow ID"),
+                    model: fields.text().label("Model"),
+                    targetId: fields.text().label("Target ID"),
+                    targetRevisionId: fields.text().label("Target revision ID"),
+                    title: fields.text().label("Title"),
+                    isActive: fields.boolean().label("Is active"),
+                    state: fields.text().label("State"),
+                    currentStepId: fields.text().label("Current step ID"),
+                    currentStepState: fields.text().label("Current step state"),
+                    currentStepType: fields.text().label("Current step type"),
+                    currentOwnerId: fields.text().label("Current owner ID"),
+                    currentCandidateTeamIds: fields.text().label("Current candidate team IDs").list(),
+                    targetContext: fields.object().label("Target context").fields((contextFields)=>({
+                            folder: contextFields.object().label("Folder").fields((folderFields)=>({
+                                    id: folderFields.text().label("ID"),
+                                    type: folderFields.text().label("Type")
+                                })),
+                            modelId: contextFields.text().label("Model ID"),
+                            title: contextFields.text().label("Title"),
+                            author: contextFields.object().label("Author").fields((authorFields)=>({
+                                    id: authorFields.text().label("ID"),
+                                    displayName: authorFields.text().label("Display name")
+                                }))
+                        })),
+                    workflow: fields.object().label("Workflow").fields((workflowFields)=>({
+                            name: workflowFields.text().label("Name"),
+                            models: workflowFields.text().label("Models").list()
+                        })),
+                    steps: fields.object().label("Steps").list().fields((stepFields)=>({
+                            id: stepFields.text().label("ID"),
+                            title: stepFields.text().label("Title"),
+                            color: stepFields.text().label("Color"),
+                            description: stepFields.longText().label("Description"),
+                            type: stepFields.text().label("Type"),
+                            notifications: stepFields.object().label("Notifications").list().fields((notificationFields)=>({
+                                    id: notificationFields.text().label("ID")
+                                })),
+                            config: stepFields.json().label("Config"),
+                            state: stepFields.text().label("State"),
+                            owner: stepFields.object().label("Owner").fields((ownerFields)=>({
+                                    type: ownerFields.text().label("Type"),
+                                    id: ownerFields.text().label("ID"),
+                                    displayName: ownerFields.text().label("Display name"),
+                                    identityType: ownerFields.text().label("Identity type")
+                                })),
+                            comment: stepFields.longText().label("Comment"),
+                            pickedUserId: stepFields.text().label("Picked user ID"),
+                            candidateTeamIds: stepFields.text().label("Candidate team IDs").list(),
+                            assignmentSource: stepFields.text().label("Assignment source"),
+                            assignment: stepFields.object().label("Assignment").fields((assignmentFields)=>({
+                                    source: assignmentFields.text().label("Source"),
+                                    ruleId: assignmentFields.text().label("Rule ID"),
+                                    reason: assignmentFields.longText().label("Reason"),
+                                    by: assignmentFields.object().label("By").fields((byFields)=>({
+                                            type: byFields.text().label("Type"),
+                                            id: byFields.text().label("ID"),
+                                            displayName: byFields.text().label("Display name"),
+                                            identityType: byFields.text().label("Identity type")
+                                        }))
+                                })),
+                            reachedOn: stepFields.datetime().label("Reached on").withoutTimezone(),
+                            startedOn: stepFields.datetime().label("Started on").withoutTimezone(),
+                            finishedOn: stepFields.datetime().label("Finished on").withoutTimezone(),
+                            taskId: stepFields.text().label("Task ID"),
+                            runs: stepFields.object().label("Runs").list().fields((runFields)=>({
+                                    taskId: runFields.text().label("Task ID"),
+                                    startedOn: runFields.datetime().label("Started on").withoutTimezone(),
+                                    finishedOn: runFields.datetime().label("Finished on").withoutTimezone(),
+                                    outcome: runFields.text().label("Outcome"),
+                                    reason: runFields.longText().label("Reason")
+                                })),
+                            issues: stepFields.object().label("Issues").list().fields((issueFields)=>({
+                                    fieldPath: issueFields.text().label("Field path"),
+                                    severity: issueFields.text().label("Severity"),
+                                    message: issueFields.longText().label("Message"),
+                                    suggestion: issueFields.longText().label("Suggestion")
+                                }))
+                        })),
+                    requester: fields.object().label("Requester").fields((requesterFields)=>({
+                            type: requesterFields.text().label("Type"),
+                            id: requesterFields.text().label("ID"),
+                            displayName: requesterFields.text().label("Display name"),
+                            identityType: requesterFields.text().label("Identity type")
+                        })),
+                    cancelledBy: fields.object().label("Cancelled by").fields((cancelledByFields)=>({
+                            type: cancelledByFields.text().label("Type"),
+                            id: cancelledByFields.text().label("ID"),
+                            displayName: cancelledByFields.text().label("Display name"),
+                            identityType: cancelledByFields.text().label("Identity type")
+                        })),
+                    lastChangedOn: fields.datetime().label("Last changed on").withoutTimezone()
+                }))
+        ];
+    }
+}
+const ReviewModel = ModelFactory.createImplementation({
+    implementation: ReviewModelImpl,
+    dependencies: []
+});
+export { ReviewModel };
+
+//# sourceMappingURL=review.model.js.map

package/domain/review/review.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain/review/review.model.js","sources":["../../../src/domain/review/review.model.ts"],"sourcesContent":["import { ModelFactory } from \"@webiny/api-headless-cms/features/modelBuilder/index.js\";\nimport { REVIEW_MODEL_ID } from \"~/constants.js\";\n\n/**\n * Private model for reviews (spec 4.2). Current-step fields are top-level so lists and least-loaded\n * can query them (D19); `targetContext` is an object field so it stays filterable (the lists\n * hide unreadable targets with the app's read predicate, R94).\n * The requester is stored as `requester` because `createdBy` is a reserved CMS field id.\n */\nclass ReviewModelImpl implements ModelFactory.Interface {\n    public async execute(builder: ModelFactory.Builder) {\n        return [\n            builder\n                .private({\n                    modelId: REVIEW_MODEL_ID,\n                    name: \"Workflow Review\",\n                    lifecycleEvents: false\n                })\n                .fields(fields => ({\n                    workflowId: fields.text().label(\"Workflow ID\"),\n                    model: fields.text().label(\"Model\"),\n                    targetId: fields.text().label(\"Target ID\"),\n                    targetRevisionId: fields.text().label(\"Target revision ID\"),\n                    title: fields.text().label(\"Title\"),\n                    isActive: fields.boolean().label(\"Is active\"),\n                    state: fields.text().label(\"State\"),\n                    currentStepId: fields.text().label(\"Current step ID\"),\n                    currentStepState: fields.text().label(\"Current step state\"),\n                    currentStepType: fields.text().label(\"Current step type\"),\n                    currentOwnerId: fields.text().label(\"Current owner ID\"),\n                    currentCandidateTeamIds: fields\n                        .text()\n                        .label(\"Current candidate team IDs\")\n                        .list(),\n                    targetContext: fields\n                        .object()\n                        .label(\"Target context\")\n                        .fields(contextFields => ({\n                            folder: contextFields\n                                .object()\n                                .label(\"Folder\")\n                                .fields(folderFields => ({\n                                    id: folderFields.text().label(\"ID\"),\n                                    type: folderFields.text().label(\"Type\")\n                                })),\n                            modelId: contextFields.text().label(\"Model ID\"),\n                            title: contextFields.text().label(\"Title\"),\n                            author: contextFields\n                                .object()\n                                .label(\"Author\")\n                                .fields(authorFields => ({\n                                    id: authorFields.text().label(\"ID\"),\n                                    displayName: authorFields.text().label(\"Display name\")\n                                }))\n                        })),\n                    workflow: fields\n                        .object()\n                        .label(\"Workflow\")\n                        .fields(workflowFields => ({\n                            name: workflowFields.text().label(\"Name\"),\n                            models: workflowFields.text().label(\"Models\").list()\n                        })),\n                    steps: fields\n                        .object()\n                        .label(\"Steps\")\n                        .list()\n                        .fields(stepFields => ({\n                            id: stepFields.text().label(\"ID\"),\n                            title: stepFields.text().label(\"Title\"),\n                            color: stepFields.text().label(\"Color\"),\n                            description: stepFields.longText().label(\"Description\"),\n                            type: stepFields.text().label(\"Type\"),\n                            notifications: stepFields\n                                .object()\n                                .label(\"Notifications\")\n                                .list()\n                                .fields(notificationFields => ({\n                                    id: notificationFields.text().label(\"ID\")\n                                })),\n                            config: stepFields.json().label(\"Config\"),\n                            state: stepFields.text().label(\"State\"),\n                            owner: stepFields\n                                .object()\n                                .label(\"Owner\")\n                                .fields(ownerFields => ({\n                                    type: ownerFields.text().label(\"Type\"),\n                                    id: ownerFields.text().label(\"ID\"),\n                                    displayName: ownerFields.text().label(\"Display name\"),\n                                    identityType: ownerFields.text().label(\"Identity type\")\n                                })),\n                            comment: stepFields.longText().label(\"Comment\"),\n                            pickedUserId: stepFields.text().label(\"Picked user ID\"),\n                            candidateTeamIds: stepFields.text().label(\"Candidate team IDs\").list(),\n                            assignmentSource: stepFields.text().label(\"Assignment source\"),\n                            assignment: stepFields\n                                .object()\n                                .label(\"Assignment\")\n                                .fields(assignmentFields => ({\n                                    source: assignmentFields.text().label(\"Source\"),\n                                    ruleId: assignmentFields.text().label(\"Rule ID\"),\n                                    reason: assignmentFields.longText().label(\"Reason\"),\n                                    by: assignmentFields\n                                        .object()\n                                        .label(\"By\")\n                                        .fields(byFields => ({\n                                            type: byFields.text().label(\"Type\"),\n                                            id: byFields.text().label(\"ID\"),\n                                            displayName: byFields.text().label(\"Display name\"),\n                                            identityType: byFields.text().label(\"Identity type\")\n                                        }))\n                                })),\n                            reachedOn: stepFields.datetime().label(\"Reached on\").withoutTimezone(),\n                            startedOn: stepFields.datetime().label(\"Started on\").withoutTimezone(),\n                            finishedOn: stepFields\n                                .datetime()\n                                .label(\"Finished on\")\n                                .withoutTimezone(),\n                            taskId: stepFields.text().label(\"Task ID\"),\n                            runs: stepFields\n                                .object()\n                                .label(\"Runs\")\n                                .list()\n                                .fields(runFields => ({\n                                    taskId: runFields.text().label(\"Task ID\"),\n                                    startedOn: runFields\n                                        .datetime()\n                                        .label(\"Started on\")\n                                        .withoutTimezone(),\n                                    finishedOn: runFields\n                                        .datetime()\n                                        .label(\"Finished on\")\n                                        .withoutTimezone(),\n                                    outcome: runFields.text().label(\"Outcome\"),\n                                    reason: runFields.longText().label(\"Reason\")\n                                })),\n                            issues: stepFields\n                                .object()\n                                .label(\"Issues\")\n                                .list()\n                                .fields(issueFields => ({\n                                    fieldPath: issueFields.text().label(\"Field path\"),\n                                    severity: issueFields.text().label(\"Severity\"),\n                                    message: issueFields.longText().label(\"Message\"),\n                                    suggestion: issueFields.longText().label(\"Suggestion\")\n                                }))\n                        })),\n                    requester: fields\n                        .object()\n                        .label(\"Requester\")\n                        .fields(requesterFields => ({\n                            type: requesterFields.text().label(\"Type\"),\n                            id: requesterFields.text().label(\"ID\"),\n                            displayName: requesterFields.text().label(\"Display name\"),\n                            identityType: requesterFields.text().label(\"Identity type\")\n                        })),\n                    cancelledBy: fields\n                        .object()\n                        .label(\"Cancelled by\")\n                        .fields(cancelledByFields => ({\n                            type: cancelledByFields.text().label(\"Type\"),\n                            id: cancelledByFields.text().label(\"ID\"),\n                            displayName: cancelledByFields.text().label(\"Display name\"),\n                            identityType: cancelledByFields.text().label(\"Identity type\")\n                        })),\n                    lastChangedOn: fields.datetime().label(\"Last changed on\").withoutTimezone()\n                }))\n        ];\n    }\n}\n\nexport const ReviewModel = ModelFactory.createImplementation({\n    implementation: ReviewModelImpl,\n    dependencies: []\n});\n"],"names":["ReviewModelImpl","builder","REVIEW_MODEL_ID","fields","contextFields","folderFields","authorFields","workflowFields","stepFields","notificationFields","ownerFields","assignmentFields","byFields","runFields","issueFields","requesterFields","cancelledByFields","ReviewModel","ModelFactory"],"mappings":";;AASA,MAAMA;IACF,MAAa,QAAQC,OAA6B,EAAE;QAChD,OAAO;YACHA,QACK,OAAO,CAAC;gBACL,SAASC;gBACT,MAAM;gBACN,iBAAiB;YACrB,GACC,MAAM,CAACC,CAAAA,SAAW;oBACf,YAAYA,OAAO,IAAI,GAAG,KAAK,CAAC;oBAChC,OAAOA,OAAO,IAAI,GAAG,KAAK,CAAC;oBAC3B,UAAUA,OAAO,IAAI,GAAG,KAAK,CAAC;oBAC9B,kBAAkBA,OAAO,IAAI,GAAG,KAAK,CAAC;oBACtC,OAAOA,OAAO,IAAI,GAAG,KAAK,CAAC;oBAC3B,UAAUA,OAAO,OAAO,GAAG,KAAK,CAAC;oBACjC,OAAOA,OAAO,IAAI,GAAG,KAAK,CAAC;oBAC3B,eAAeA,OAAO,IAAI,GAAG,KAAK,CAAC;oBACnC,kBAAkBA,OAAO,IAAI,GAAG,KAAK,CAAC;oBACtC,iBAAiBA,OAAO,IAAI,GAAG,KAAK,CAAC;oBACrC,gBAAgBA,OAAO,IAAI,GAAG,KAAK,CAAC;oBACpC,yBAAyBA,OACpB,IAAI,GACJ,KAAK,CAAC,8BACN,IAAI;oBACT,eAAeA,OACV,MAAM,GACN,KAAK,CAAC,kBACN,MAAM,CAACC,CAAAA,gBAAkB;4BACtB,QAAQA,cACH,MAAM,GACN,KAAK,CAAC,UACN,MAAM,CAACC,CAAAA,eAAiB;oCACrB,IAAIA,aAAa,IAAI,GAAG,KAAK,CAAC;oCAC9B,MAAMA,aAAa,IAAI,GAAG,KAAK,CAAC;gCACpC;4BACJ,SAASD,cAAc,IAAI,GAAG,KAAK,CAAC;4BACpC,OAAOA,cAAc,IAAI,GAAG,KAAK,CAAC;4BAClC,QAAQA,cACH,MAAM,GACN,KAAK,CAAC,UACN,MAAM,CAACE,CAAAA,eAAiB;oCACrB,IAAIA,aAAa,IAAI,GAAG,KAAK,CAAC;oCAC9B,aAAaA,aAAa,IAAI,GAAG,KAAK,CAAC;gCAC3C;wBACR;oBACJ,UAAUH,OACL,MAAM,GACN,KAAK,CAAC,YACN,MAAM,CAACI,CAAAA,iBAAmB;4BACvB,MAAMA,eAAe,IAAI,GAAG,KAAK,CAAC;4BAClC,QAAQA,eAAe,IAAI,GAAG,KAAK,CAAC,UAAU,IAAI;wBACtD;oBACJ,OAAOJ,OACF,MAAM,GACN,KAAK,CAAC,SACN,IAAI,GACJ,MAAM,CAACK,CAAAA,aAAe;4BACnB,IAAIA,WAAW,IAAI,GAAG,KAAK,CAAC;4BAC5B,OAAOA,WAAW,IAAI,GAAG,KAAK,CAAC;4BAC/B,OAAOA,WAAW,IAAI,GAAG,KAAK,CAAC;4BAC/B,aAAaA,WAAW,QAAQ,GAAG,KAAK,CAAC;4BACzC,MAAMA,WAAW,IAAI,GAAG,KAAK,CAAC;4BAC9B,eAAeA,WACV,MAAM,GACN,KAAK,CAAC,iBACN,IAAI,GACJ,MAAM,CAACC,CAAAA,qBAAuB;oCAC3B,IAAIA,mBAAmB,IAAI,GAAG,KAAK,CAAC;gCACxC;4BACJ,QAAQD,WAAW,IAAI,GAAG,KAAK,CAAC;4BAChC,OAAOA,WAAW,IAAI,GAAG,KAAK,CAAC;4BAC/B,OAAOA,WACF,MAAM,GACN,KAAK,CAAC,SACN,MAAM,CAACE,CAAAA,cAAgB;oCACpB,MAAMA,YAAY,IAAI,GAAG,KAAK,CAAC;oCAC/B,IAAIA,YAAY,IAAI,GAAG,KAAK,CAAC;oCAC7B,aAAaA,YAAY,IAAI,GAAG,KAAK,CAAC;oCACtC,cAAcA,YAAY,IAAI,GAAG,KAAK,CAAC;gCAC3C;4BACJ,SAASF,WAAW,QAAQ,GAAG,KAAK,CAAC;4BACrC,cAAcA,WAAW,IAAI,GAAG,KAAK,CAAC;4BACtC,kBAAkBA,WAAW,IAAI,GAAG,KAAK,CAAC,sBAAsB,IAAI;4BACpE,kBAAkBA,WAAW,IAAI,GAAG,KAAK,CAAC;4BAC1C,YAAYA,WACP,MAAM,GACN,KAAK,CAAC,cACN,MAAM,CAACG,CAAAA,mBAAqB;oCACzB,QAAQA,iBAAiB,IAAI,GAAG,KAAK,CAAC;oCACtC,QAAQA,iBAAiB,IAAI,GAAG,KAAK,CAAC;oCACtC,QAAQA,iBAAiB,QAAQ,GAAG,KAAK,CAAC;oCAC1C,IAAIA,iBACC,MAAM,GACN,KAAK,CAAC,MACN,MAAM,CAACC,CAAAA,WAAa;4CACjB,MAAMA,SAAS,IAAI,GAAG,KAAK,CAAC;4CAC5B,IAAIA,SAAS,IAAI,GAAG,KAAK,CAAC;4CAC1B,aAAaA,SAAS,IAAI,GAAG,KAAK,CAAC;4CACnC,cAAcA,SAAS,IAAI,GAAG,KAAK,CAAC;wCACxC;gCACR;4BACJ,WAAWJ,WAAW,QAAQ,GAAG,KAAK,CAAC,cAAc,eAAe;4BACpE,WAAWA,WAAW,QAAQ,GAAG,KAAK,CAAC,cAAc,eAAe;4BACpE,YAAYA,WACP,QAAQ,GACR,KAAK,CAAC,eACN,eAAe;4BACpB,QAAQA,WAAW,IAAI,GAAG,KAAK,CAAC;4BAChC,MAAMA,WACD,MAAM,GACN,KAAK,CAAC,QACN,IAAI,GACJ,MAAM,CAACK,CAAAA,YAAc;oCAClB,QAAQA,UAAU,IAAI,GAAG,KAAK,CAAC;oCAC/B,WAAWA,UACN,QAAQ,GACR,KAAK,CAAC,cACN,eAAe;oCACpB,YAAYA,UACP,QAAQ,GACR,KAAK,CAAC,eACN,eAAe;oCACpB,SAASA,UAAU,IAAI,GAAG,KAAK,CAAC;oCAChC,QAAQA,UAAU,QAAQ,GAAG,KAAK,CAAC;gCACvC;4BACJ,QAAQL,WACH,MAAM,GACN,KAAK,CAAC,UACN,IAAI,GACJ,MAAM,CAACM,CAAAA,cAAgB;oCACpB,WAAWA,YAAY,IAAI,GAAG,KAAK,CAAC;oCACpC,UAAUA,YAAY,IAAI,GAAG,KAAK,CAAC;oCACnC,SAASA,YAAY,QAAQ,GAAG,KAAK,CAAC;oCACtC,YAAYA,YAAY,QAAQ,GAAG,KAAK,CAAC;gCAC7C;wBACR;oBACJ,WAAWX,OACN,MAAM,GACN,KAAK,CAAC,aACN,MAAM,CAACY,CAAAA,kBAAoB;4BACxB,MAAMA,gBAAgB,IAAI,GAAG,KAAK,CAAC;4BACnC,IAAIA,gBAAgB,IAAI,GAAG,KAAK,CAAC;4BACjC,aAAaA,gBAAgB,IAAI,GAAG,KAAK,CAAC;4BAC1C,cAAcA,gBAAgB,IAAI,GAAG,KAAK,CAAC;wBAC/C;oBACJ,aAAaZ,OACR,MAAM,GACN,KAAK,CAAC,gBACN,MAAM,CAACa,CAAAA,oBAAsB;4BAC1B,MAAMA,kBAAkB,IAAI,GAAG,KAAK,CAAC;4BACrC,IAAIA,kBAAkB,IAAI,GAAG,KAAK,CAAC;4BACnC,aAAaA,kBAAkB,IAAI,GAAG,KAAK,CAAC;4BAC5C,cAAcA,kBAAkB,IAAI,GAAG,KAAK,CAAC;wBACjD;oBACJ,eAAeb,OAAO,QAAQ,GAAG,KAAK,CAAC,mBAAmB,eAAe;gBAC7E;SACP;IACL;AACJ;AAEO,MAAMc,cAAcC,aAAa,oBAAoB,CAAC;IACzD,gBAAgBlB;IAChB,cAAc,EAAE;AACpB"}

package/domain/review/toBlockingReview.d.ts

@@ -0,0 +1,7 @@
+import type { WorkflowBlockingReview } from "../../domain/workflow/types.js";
+import type { ReviewData } from "./types.js";
+/**
+ * Where an in-progress review stands, for the delete-blocked error (D115). An in-progress review
+ * always has a current step; the first step is the fallback for corrupt data. Pure.
+ */
+export declare const toBlockingReview: (review: ReviewData) => WorkflowBlockingReview;

package/domain/review/toBlockingReview.js

@@ -0,0 +1,18 @@
+const toBlockingReview = (review)=>{
+    const index = review.steps.findIndex((step)=>step.id === review.currentStepId);
+    const position = -1 === index ? 1 : index + 1;
+    const step = review.steps[position - 1];
+    return {
+        reviewId: review.id,
+        model: review.model,
+        targetId: review.targetId,
+        targetRevisionId: review.targetRevisionId,
+        title: review.title,
+        stepPosition: position,
+        stepCount: review.steps.length,
+        stepName: step?.title ?? ""
+    };
+};
+export { toBlockingReview };
+
+//# sourceMappingURL=toBlockingReview.js.map

package/domain/review/toBlockingReview.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain/review/toBlockingReview.js","sources":["../../../src/domain/review/toBlockingReview.ts"],"sourcesContent":["import type { WorkflowBlockingReview } from \"~/domain/workflow/types.js\";\nimport type { ReviewData } from \"./types.js\";\n\n/**\n * Where an in-progress review stands, for the delete-blocked error (D115). An in-progress review\n * always has a current step; the first step is the fallback for corrupt data. Pure.\n */\nexport const toBlockingReview = (review: ReviewData): WorkflowBlockingReview => {\n    const index = review.steps.findIndex(step => step.id === review.currentStepId);\n    const position = index === -1 ? 1 : index + 1;\n    const step = review.steps[position - 1];\n    return {\n        reviewId: review.id,\n        model: review.model,\n        targetId: review.targetId,\n        targetRevisionId: review.targetRevisionId,\n        title: review.title,\n        stepPosition: position,\n        stepCount: review.steps.length,\n        stepName: step?.title ?? \"\"\n    };\n};\n"],"names":["toBlockingReview","review","index","step","position"],"mappings":"AAOO,MAAMA,mBAAmB,CAACC;IAC7B,MAAMC,QAAQD,OAAO,KAAK,CAAC,SAAS,CAACE,CAAAA,OAAQA,KAAK,EAAE,KAAKF,OAAO,aAAa;IAC7E,MAAMG,WAAWF,AAAU,OAAVA,QAAe,IAAIA,QAAQ;IAC5C,MAAMC,OAAOF,OAAO,KAAK,CAACG,WAAW,EAAE;IACvC,OAAO;QACH,UAAUH,OAAO,EAAE;QACnB,OAAOA,OAAO,KAAK;QACnB,UAAUA,OAAO,QAAQ;QACzB,kBAAkBA,OAAO,gBAAgB;QACzC,OAAOA,OAAO,KAAK;QACnB,cAAcG;QACd,WAAWH,OAAO,KAAK,CAAC,MAAM;QAC9B,UAAUE,MAAM,SAAS;IAC7B;AACJ"}

package/domain/review/types.d.ts

@@ -0,0 +1,211 @@
+import type { WorkflowsPermissionSet } from "../../domain/permissions/types.js";
+import type { WorkflowStep } from "../../domain/workflow/types.js";
+import type { AssignmentDecision, AssignmentSource } from "../../domain/assignment/types.js";
+export type ReviewState = "inProgress" | "approved" | "rejected" | "cancelled";
+export type StepState = "pending" | "awaiting" | "inReview" | "approved" | "rejected" | "failed";
+export type ActorType = "user" | "ai" | "automation";
+/** Who acted or holds a step (D3, D30). For AI and automation, `id` is the requester's id (D58). */
+export interface Actor {
+    type: ActorType;
+    id: string;
+    displayName: string;
+    identityType?: string;
+}
+/** "Why this owner" (D127, R109). `ruleId`: the rule that decided, also for a team target. */
+export interface ReviewStepAssignment {
+    source: AssignmentSource;
+    ruleId?: string;
+    reason?: string;
+    by?: Actor;
+}
+/** How an earlier attempt of a step ended (D82). */
+export type StepRunOutcome = "approved" | "rejected" | "failed";
+/**
+ * One earlier attempt of a step (D82, R139): the history `Review.restart` appends the failed
+ * attempt to. `taskId` is `null` when the reach failed before a task started.
+ */
+export interface ReviewStepRun {
+    taskId: string | null;
+    startedOn: string;
+    finishedOn: string | null;
+    outcome: StepRunOutcome | null;
+    reason: string | null;
+}
+export type AiIssueSeverity = "error" | "warning" | "info";
+/**
+ * One finding of an AI decision (D39, R171). `fieldPath` is a dotted path into the target
+ * (`null` when the finding is about the whole target); `suggestion` is an optional fix.
+ */
+export interface AiIssue {
+    fieldPath: string | null;
+    severity: AiIssueSeverity;
+    message: string;
+    suggestion: string | null;
+}
+export interface ReviewStep extends WorkflowStep {
+    state: StepState;
+    owner: Actor | null;
+    comment: string | null;
+    pickedUserId: string | null;
+    candidateTeamIds: string[];
+    assignmentSource: AssignmentSource | null;
+    assignment: ReviewStepAssignment | null;
+    reachedOn: string | null;
+    startedOn: string | null;
+    finishedOn: string | null;
+    /** The current attempt's background task id, also the run id (D57, R139). */
+    taskId: string | null;
+    /** Earlier attempts, oldest first (D82, R139). */
+    runs: ReviewStepRun[];
+    /** The findings of an AI decision; empty for every other step and before a decision (R171). */
+    issues: AiIssue[];
+}
+export interface ReviewWorkflowSnapshot {
+    name: string;
+    models: string[];
+}
+export interface TargetContextFolder {
+    id: string;
+    type: string;
+}
+export interface TargetContextAuthor {
+    id: string;
+    displayName: string;
+}
+/** Produced by the target adapter (`ReviewTargetLoader`, spec 9.3). */
+export interface TargetContext {
+    folder: TargetContextFolder | null;
+    modelId: string;
+    title: string;
+    author: TargetContextAuthor;
+}
+export interface ReviewData {
+    id: string;
+    workflowId: string;
+    /** Namespace id, e.g. "cms.article" (D41). */
+    model: string;
+    targetId: string;
+    targetRevisionId: string;
+    title: string;
+    /** Current review of the revision; false only after cancel (D23). */
+    isActive: boolean;
+    state: ReviewState;
+    currentStepId: string | null;
+    currentStepState: StepState | null;
+    /**
+     * Type of the current step, e.g. "review", "ai" or "automation" (D112): the failed steps list
+     * filters on it. `null` when there is no current step (before the first save, after cancel).
+     */
+    currentStepType: string | null;
+    /** Only for `user` owners (D74). */
+    currentOwnerId: string | null;
+    currentCandidateTeamIds: string[];
+    targetContext: TargetContext;
+    workflow: ReviewWorkflowSnapshot;
+    steps: ReviewStep[];
+    /** The requester. */
+    createdBy: Actor;
+    cancelledBy?: Actor | null;
+    createdOn: string;
+    savedOn: string;
+    /** Changes on every review event; list sort key (D119). */
+    lastChangedOn: string;
+}
+export interface ReviewPick {
+    stepId: string;
+    userId: string;
+}
+/** Result of assignment resolution on step reached (spec 5.2, 6). */
+export interface StepAssignmentResolution {
+    owner: Actor | null;
+    candidateTeamIds: string[];
+    assignment: ReviewStepAssignment;
+    /**
+     * The assignment-log records of this decision, in order: skips first, then one outcome
+     * (R117). Written by `ReviewSaver` after the review is saved.
+     */
+    records: AssignmentDecision[];
+}
+/** The value of `system.workflow` on the target revision (spec 4.5). */
+export interface ReviewSystemWorkflow {
+    workflowId: string;
+    reviewState: ReviewState;
+    stepId: string;
+    stepName: string;
+    stepState: StepState;
+}
+/**
+ * The permission side of a reading user (spec 8): who acts and what the `workflows` permission
+ * grants. Enough for the permission-only predicates (R41); no team lookup needed.
+ */
+export interface ReviewPermissionViewer {
+    actor: Actor;
+    permissions: WorkflowsPermissionSet;
+}
+/**
+ * The reading user (spec 5.3). Built by the app wrapper from the identity (D132), e.g. through
+ * `CurrentReviewViewer`; AI and automation callers never need one.
+ */
+export interface ReviewViewer extends ReviewPermissionViewer {
+    teamIds: string[];
+}
+/**
+ * Per-viewer flags for one review (spec 5.3, D5, D54). Domain rules and workflows permissions
+ * only: the app wrapper ANDs its target read access into every flag (start, take over, approve,
+ * reject, cancel, reassign, restart; spec 5.1, D133 point 7) before showing or allowing an action
+ * (R33). Request and `canPick` need write access instead; they are not flags here.
+ */
+export interface ReviewViewerFlags {
+    canStart: boolean;
+    canTakeOver: boolean;
+    canApprove: boolean;
+    canReject: boolean;
+    canCancel: boolean;
+    canReassign: boolean;
+    /** The current step failed, and the viewer is the requester or holds `reassign` (D34, R153). */
+    canRestart: boolean;
+}
+/** What the app wrapper knows about the reading user's access to the review's target. */
+export interface ReviewTargetAccess {
+    canRead: boolean;
+}
+/** A review read by an app wrapper for one viewer (spec 5.3, R62). */
+export interface ReviewWithViewerFlags {
+    review: ReviewData;
+    flags: ReviewViewerFlags;
+}
+/** The review lists of every app (spec 11, D47, D94, D112). */
+export type ReviewListKind = "assignedToMe" | "pool" | "teamInReview" | "myRequests" | "failedSteps";
+/** Lists sort by the last review event (D119). */
+export type ReviewListSort = "lastChangedOn_ASC" | "lastChangedOn_DESC";
+/** List filters. The namespace filter is the app wrapper's `models` input (R91, R94). */
+export interface ReviewListWhere {
+    /** Every word of it appears in the title, case-insensitive. */
+    titleContains?: string | null;
+    /** Only `myRequests` (D94); other lists fail with `ReviewValidationError`. */
+    reviewState?: ReviewState | null;
+    /** Only `myRequests` (D94); other lists fail with `ReviewValidationError`. */
+    stepState?: StepState | null;
+}
+/**
+ * What a viewer may read in a review list (Q77), built once per call by the app wrapper from the
+ * viewer's permissions. A review is listed exactly when its target would be listed by the app: its
+ * namespace is readable, or readable for own targets and the viewer created the target, and its
+ * target's folder is not denied. The review row stores everything this needs (`model`,
+ * `targetContext.author.id`, `targetContext.folder.id`), so lists filter in the query.
+ */
+export interface ReviewListReadFilter {
+    /** Namespaces whose targets the viewer reads, all of them. */
+    models: string[];
+    /** Namespaces whose targets the viewer reads only when they created them. */
+    ownOnlyModels: string[];
+    /** Compared with `targetContext.author.id` for `ownOnlyModels`: the viewer's identity id. */
+    authorId: string;
+    /** Folders whose content the viewer cannot read. The root folder is always readable. */
+    deniedFolderIds: string[];
+}
+/** No `totalCount`: rows the viewer cannot read are skipped, so no exact count exists (D76). */
+export interface ReviewListMeta {
+    cursor: string | null;
+    hasMoreItems: boolean;
+}

package/domain/routing/createRoutingFailedResolution.d.ts

@@ -0,0 +1,8 @@
+import type { StepAssignmentResolution } from "../../domain/review/types.js";
+import type { RoutingDecidedSoFar } from "./errors.js";
+/**
+ * The pool after a routing failure (spec 6, R116 refined): the step still reaches, keeping what
+ * was decided before the failure (the candidate teams, a team-target rule and the skips gathered),
+ * and the log says why nobody was chosen. Pure.
+ */
+export declare const createRoutingFailedResolution: (decided: RoutingDecidedSoFar) => StepAssignmentResolution;

package/domain/routing/createRoutingFailedResolution.js

@@ -0,0 +1,30 @@
+import { ROUTING_FAILED_REASON } from "./reasons.js";
+const createRoutingFailedResolution = (decided)=>({
+        owner: null,
+        candidateTeamIds: [
+            ...decided.candidateTeamIds
+        ],
+        assignment: {
+            source: "pool",
+            ...decided.ruleId ? {
+                ruleId: decided.ruleId
+            } : {},
+            reason: ROUTING_FAILED_REASON
+        },
+        records: [
+            ...decided.skips.map((skip)=>({
+                    ...skip
+                })),
+            {
+                kind: "outcome",
+                userId: null,
+                source: "pool",
+                ruleId: decided.ruleId,
+                by: null,
+                reason: ROUTING_FAILED_REASON
+            }
+        ]
+    });
+export { createRoutingFailedResolution };
+
+//# sourceMappingURL=createRoutingFailedResolution.js.map

package/domain/routing/createRoutingFailedResolution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain/routing/createRoutingFailedResolution.js","sources":["../../../src/domain/routing/createRoutingFailedResolution.ts"],"sourcesContent":["import type { StepAssignmentResolution } from \"~/domain/review/types.js\";\nimport type { RoutingDecidedSoFar } from \"./errors.js\";\nimport { ROUTING_FAILED_REASON } from \"./reasons.js\";\n\n/**\n * The pool after a routing failure (spec 6, R116 refined): the step still reaches, keeping what\n * was decided before the failure (the candidate teams, a team-target rule and the skips gathered),\n * and the log says why nobody was chosen. Pure.\n */\nexport const createRoutingFailedResolution = (\n    decided: RoutingDecidedSoFar\n): StepAssignmentResolution => {\n    return {\n        owner: null,\n        candidateTeamIds: [...decided.candidateTeamIds],\n        assignment: {\n            source: \"pool\",\n            ...(decided.ruleId ? { ruleId: decided.ruleId } : {}),\n            reason: ROUTING_FAILED_REASON\n        },\n        records: [\n            ...decided.skips.map(skip => ({ ...skip })),\n            {\n                kind: \"outcome\",\n                userId: null,\n                source: \"pool\",\n                ruleId: decided.ruleId,\n                by: null,\n                reason: ROUTING_FAILED_REASON\n            }\n        ]\n    };\n};\n"],"names":["createRoutingFailedResolution","decided","ROUTING_FAILED_REASON","skip"],"mappings":";AASO,MAAMA,gCAAgC,CACzCC,UAEO;QACH,OAAO;QACP,kBAAkB;eAAIA,QAAQ,gBAAgB;SAAC;QAC/C,YAAY;YACR,QAAQ;YACR,GAAIA,QAAQ,MAAM,GAAG;gBAAE,QAAQA,QAAQ,MAAM;YAAC,IAAI,CAAC,CAAC;YACpD,QAAQC;QACZ;QACA,SAAS;eACFD,QAAQ,KAAK,CAAC,GAAG,CAACE,CAAAA,OAAS;oBAAE,GAAGA,IAAI;gBAAC;YACxC;gBACI,MAAM;gBACN,QAAQ;gBACR,QAAQ;gBACR,QAAQF,QAAQ,MAAM;gBACtB,IAAI;gBACJ,QAAQC;YACZ;SACH;IACL"}

package/domain/routing/errors.d.ts

@@ -0,0 +1,25 @@
+import type { AssignmentDecision } from "../../domain/assignment/types.js";
+import type { PersistenceErrorSource } from "../../domain/PersistenceErrorSource.js";
+import { PersistenceError } from "../../domain/PersistenceError.js";
+/**
+ * What step-reach evaluation had decided when a lookup failed (R116 refined): the candidate
+ * teams (narrowed when a team-target rule matched, else the step's teams), that rule, and the
+ * skip records gathered so far, in decision order. The resolver's pool keeps them.
+ */
+export interface RoutingDecidedSoFar {
+    candidateTeamIds: string[];
+    ruleId: string | null;
+    skips: AssignmentDecision[];
+}
+/**
+ * A lookup routing needs failed: users, settings, the folder chain or a strategy's history
+ * (R116). The resolver turns it into the pool; the inspector and candidate lists report it.
+ * `decided` is set by step-reach evaluation and is not part of `data`: skip records never travel
+ * on an error payload.
+ */
+export declare class RoutingDependencyError extends PersistenceError {
+    readonly code: "Workflows/Routing/Dependency";
+    readonly decided: RoutingDecidedSoFar | null;
+    /** Pass another `RoutingDependencyError` to keep its cause and add what was decided. */
+    constructor(error: PersistenceErrorSource | RoutingDependencyError, decided?: RoutingDecidedSoFar | null);
+}