@yss123/cage-approval 0.2.0 → 0.3.1

package/dist/route.js

@@ -1,7 +1,16 @@
-// 代码内封闭路由：一小组固定的组合子（step、when、gt、approver.*），和范围组合子一样只能从里面选，
-// 所以抽取器能读懂：改 amount 的口径时，影响分析会把这条路由列出来。
-import { ROUTE, SYSTEM_DDL, declError } from '@yss123/cage-kernel';
+/**
+ * 代码内封闭审批声明：组合子保存条件、选人、分配与任务政策，由注册表/CLI 抽取、引擎创建实例。
+ * 字段选人与条件进入 fieldsUsed 依赖；运行实例保存步骤快照，后来改代码不会改写在途规则。
+ * 这里不授予业务权限或执行任意脚本；新结构只追加迁移，历史 FLOW_DDL 内容保持不变。
+ */
+import { ROUTE, SYSTEM_DDL, MIGRATIONS, declError, stableStringify } from '@yss123/cage-kernel';
+import { createHash } from 'node:crypto';
+import { compileSteps, inspectRoute } from './execution.js';
 import { InCodeEngine } from './engine.js';
+import { APPROVAL_AI_MIGRATION } from './ai.js';
+import { APPROVAL_TASK_ACTIONS_MIGRATION } from './task-actions.js';
+import { APPROVAL_TASK_STAGES_MIGRATION } from './task-stages.js';
+import { APPROVAL_DEADLINES_MIGRATION, approvalSla, approvalReminderPolicy } from './deadlines.js';
 /** 审批人组合子 */
 export const approver = {
     /** 单据某个部门字段对应部门的负责人 */
@@ -10,7 +19,10 @@ export const approver = {
     role: (code) => ({ kind: 'role', code }),
     /** 指定用户 */
     user: (userId) => ({ kind: 'user', userId }),
+    /** 从 routable 单据字段读取 UUID 或 UUID 数组；值随实例冻结，仍须业务授权，不接受任意 JS。 */
+    field: (field) => ({ kind: 'field', field }),
 };
+/** 数值比较组合子将业务字段和阈值保留在声明中，金额字符串在 evalCondition 中转换比较。 */
 export const gt = (field, value) => ({ op: 'gt', field, value });
 export const gte = (field, value) => ({ op: 'gte', field, value });
 export const lt = (field, value) => ({ op: 'lt', field, value });
@@ -18,12 +30,33 @@ export const lte = (field, value) => ({ op: 'lte', field, value });
 export const eq = (field, value) => ({ op: 'eq', field, value });
 export const ne = (field, value) => ({ op: 'ne', field, value });
 export const isIn = (field, value) => ({ op: 'in', field, value });
+/** 创建具名分支，内部可顺序执行多步；只保存声明，结构预算在 route 构建时统一验证。 */
+export function branch(title, ...nodes) { return { kind: 'branch', title, nodes }; }
+/** 声明 AND 分支与汇合；一条分支拒绝/退回时结束整轮，全部通过才继续，选人不授予权限。 */
+export function parallel(title, ...branches) { return { kind: 'parallel', title, branches }; }
 export function step(title, who, opts = {}) {
-    return { kind: 'step', title, approver: who, mode: opts.mode ?? 'any' };
+    if (who.kind === 'ai') {
+        if (!who.model?.trim() || !who.instructions?.trim() || !who.handoff || !who.context?.fields.length)
+            throw declError('CAGE-APPR-006', 'AI 步骤需要模型、审核要求、上下文字段和接管规则');
+        for (const value of Object.values(who.limits ?? {}))
+            if (!Number.isSafeInteger(value) || value <= 0)
+                throw declError('CAGE-APPR-006', 'AI 步骤运行预算必须是正整数');
+        return Object.freeze({ ...who, title, context: { fields: [...who.context.fields], queries: [...(who.context.queries ?? [])] } });
+    }
+    if (opts.actions && Object.entries(opts.actions).some(([name, value]) => !['transfer', 'delegate', 'addSign'].includes(name) || typeof value !== 'boolean'))
+        throw declError('CAGE-APPR-006', '人工步骤的 actions 只接受 transfer/delegate/addSign 布尔值');
+    if ((opts.assignment !== undefined && !['direct', 'candidate'].includes(opts.assignment)) || (opts.assignment === 'candidate' && opts.mode === 'all'))
+        throw declError('CAGE-APPR-006', '候选领取只支持 any；逐人会签请使用默认 direct');
+    return { kind: 'step', title, approver: who, mode: opts.mode ?? 'any', ...(opts.assignment ? { assignment: opts.assignment } : {}),
+        ...(opts.sla ? { sla: approvalSla(opts.sla) } : {}),
+        ...(opts.actions?.addSign ? { signPositions: Object.freeze(['parallel', 'before', 'after']) } : {}),
+        ...(opts.actions ? { actions: Object.freeze({ ...opts.actions }) } : {}) };
 }
+/** 将一组顺序步骤置于同一个条件下，条件求值发生在实例创建时。 */
 export function when(cond, ...steps) {
     return { kind: 'when', cond, steps };
 }
+/** 使用封闭运算符求值，不执行任意表达式；比较转换规则固定，业务阈值边界应另有回归用例。 */
 export function evalCondition(c, vars) {
     const v = vars[c.field];
     switch (c.op) {
@@ -37,36 +70,46 @@ export function evalCondition(c, vars) {
         default: return false;
     }
 }
-/** 按流程变量展开出实际要走的步骤 */
+/** 按提交变量展开节点并携带冻结的依赖；返回顺序是节点索引顺序，实际执行以 execution.dependsOn 为准。 */
 export function resolveSteps(nodes, vars) {
-    const out = [];
-    for (const n of nodes) {
-        if (n.kind === 'step')
-            out.push(n);
-        else if (evalCondition(n.cond, vars))
-            out.push(...n.steps);
-    }
-    return out;
+    inspectRoute(nodes);
+    return compileSteps(nodes, vars, createHash('sha256').update(stableStringify(nodes)).digest('hex'));
 }
 const engines = new WeakMap();
-export function route(process, nodes) {
+/**
+ * 构造流程声明并收集条件/部门选人字段，用于图谱依赖检查；按 kernel 与 process 缓存引擎实例。
+ * 注册表完成后 validate 继续核对 AI 运行时、自动角色、退回命令和取证字段/查询，尽早暴露缺失声明。
+ * nodes 保存原有步骤顺序，业务实例创建时会冻结展开后的步骤，后续不会随代码分支重新求值。
+ */
+export function route(process, nodes, options = {}) {
     if (!/^[a-z][a-z0-9-]*$/.test(process))
         throw declError('CAGE-APPR-005', `流程名 ${process} 必须是小写短横线`);
     if (nodes.length === 0)
         throw declError('CAGE-APPR-006', `流程 ${process} 至少需要一个步骤`);
-    const fields = new Set();
-    for (const n of nodes) {
-        const steps = n.kind === 'step' ? [n] : n.steps;
-        if (n.kind === 'when')
-            fields.add(n.cond.field);
-        for (const s of steps)
-            if (s.approver.kind === 'deptLeader')
-                fields.add(s.approver.field);
+    const inspection = inspectRoute(nodes);
+    const fields = new Set(inspection.fields);
+    const reminders = options.reminders === undefined ? undefined : approvalReminderPolicy(options.reminders);
+    if (reminders)
+        fields.add(reminders.requesterField);
+    for (const s of inspection.steps) {
+        const selector = s.kind === 'ai' ? s.handoff : s.approver;
+        if (selector.kind === 'deptLeader' || selector.kind === 'field')
+            fields.add(selector.field);
     }
+    // 声明必须与指纹同时冻结；拷贝调用者的对象，避免其后修改数组让注册表与实例版本不一致。
+    const frozenNodes = JSON.parse(JSON.stringify(nodes));
+    const freeze = (value) => { if (value && typeof value === 'object') {
+        Object.values(value).forEach(freeze);
+        Object.freeze(value);
+    } };
+    freeze(frozenNodes);
+    const definitionVersion = createHash('sha256').update(stableStringify({ schema: 1, process, nodes: frozenNodes, reminders })).digest('hex');
     const r = Object.freeze({
         [ROUTE]: true,
         process,
-        nodes: Object.freeze([...nodes]),
+        nodes: frozenNodes,
+        definitionVersion,
+        ...(reminders ? { reminders } : {}),
         fieldsUsed: Object.freeze([...fields]),
         engine: (k) => {
             let m = engines.get(k);
@@ -78,10 +121,44 @@ export function route(process, nodes) {
             return e;
         },
         [SYSTEM_DDL]: () => FLOW_DDL,
+        [MIGRATIONS]: () => [APPROVAL_AI_MIGRATION, APPROVAL_TASK_ACTIONS_MIGRATION, APPROVAL_TASK_STAGES_MIGRATION, APPROVAL_DEADLINES_MIGRATION],
+        validate: (registry) => {
+            const routeBinding = registry.approvalByProcess(process)?.a;
+            // 时限和申请人催办都依赖独立后台运行时，声明遗漏必须在构建阶段报错，不能部署后悄悄无提醒。
+            const declaredSteps = inspectRoute(frozenNodes).steps;
+            const hasSla = declaredSteps.some(node => node.kind !== 'ai' && node.sla);
+            if ((reminders || hasSla) && !registry.extensions.some(ext => ext.kind === 'RUNTIME' && ext.value.name === 'approval-operations'))
+                throw declError('CAGE-APPR-006', '审批 SLA 或 reminders 必须显式导出 approvalOperations()');
+            if (reminders && (!routeBinding?.routable.includes(reminders.requesterField) || !routeBinding.agg.fields[reminders.requesterField] || routeBinding.agg.fields[reminders.requesterField].isHidden))
+                throw declError('CAGE-APPR-001', `申请人字段 ${reminders.requesterField} 必须存在、可公开且进入 routable`);
+            for (const node of declaredSteps) {
+                const selector = node.kind === 'ai' ? node.handoff : node.approver;
+                // 新字段选择器必须能从 routable 快照取值；不追溯改变历史部门选人的声明校验行为。
+                if (selector.kind === 'field' && (!routeBinding?.routable.includes(selector.field) || !routeBinding.agg.fields[selector.field] || routeBinding.agg.fields[selector.field].isHidden))
+                    throw declError('CAGE-APPR-001', `审批人员字段 ${selector.field} 必须存在、可公开且进入 routable`);
+            }
+            const aiSteps = declaredSteps.filter((s) => s.kind === 'ai');
+            if (!aiSteps.length)
+                return;
+            if (!registry.extensions.some(e => e.kind === 'RUNTIME' && e.value.name === 'ai'))
+                throw declError('CAGE-APPR-006', 'AI 审批必须启用 cage-ai 运行时');
+            const binding = registry.approvalByProcess(process)?.a;
+            if (!binding?.onReturned || !binding.automatedBy)
+                throw declError('CAGE-APPR-006', `AI 审批 ${process} 必须绑定 onReturned 和 automatedBy`);
+            for (const s of aiSteps) {
+                for (const field of s.context.fields)
+                    if (!binding.agg.fields[field] || binding.agg.fields[field].isHidden)
+                        throw declError('CAGE-APPR-001', `AI 上下文字段 ${field} 不存在或不可公开`);
+                for (const query of s.context.queries ?? [])
+                    if (!registry.queries.some(q => q.name === query))
+                        throw declError('CAGE-REG-001', `AI 步骤引用的查询 ${query} 未导出`);
+            }
+        },
     });
     return r;
 }
 /** 代码内引擎自己的表，放在 flow 模式；引擎没有业务表的写权限 */
+/** 此 SQL 是已发布扩展 DDL 的内容摘要来源；新增字段通过独立 MIGRATIONS 追加，不能改写历史字符串。 */
 export const FLOW_DDL = `
 CREATE TABLE IF NOT EXISTS flow.approval_instance (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),

package/dist/route.js.map

@@ -1 +1 @@
-{"version":3,"file":"route.js","sourceRoot":"","sources":["../src/route.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,wCAAwC;AACxC,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAe,MAAM,qBAAqB,CAAC;AAChF,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAO3C,aAAa;AACb,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,uBAAuB;IACvB,UAAU,EAAE,CAAC,KAAa,EAAY,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;IACxE,iBAAiB;IACjB,IAAI,EAAE,CAAC,IAAY,EAAY,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC1D,WAAW;IACX,IAAI,EAAE,CAAC,MAAc,EAAY,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;CAC/D,CAAC;AAOF,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,KAAa,EAAE,KAAa,EAAa,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AAC5F,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,KAAa,EAAa,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AAC9F,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,KAAa,EAAE,KAAa,EAAa,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AAC5F,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,KAAa,EAAa,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AAC9F,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,KAAa,EAAE,KAAgC,EAAa,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AAC/G,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,KAAa,EAAE,KAAgC,EAAa,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AAC/G,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,KAA0B,EAAa,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AAkB3G,MAAM,UAAU,IAAI,CAAC,KAAa,EAAE,GAAa,EAAE,OAAiC,EAAE;IACpF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,IAAe,EAAE,GAAG,KAAa;IACpD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,CAAY,EAAE,IAA6B;IACvE,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACxB,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC;QACb,KAAK,IAAI,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;QACtC,KAAK,KAAK,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC;QACxC,KAAK,IAAI,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;QACtC,KAAK,KAAK,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC;QACxC,KAAK,IAAI,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAChD,KAAK,IAAI,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAChD,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,OAAO,CAAC,CAAC,OAAO,KAAK,CAAC;IACxB,CAAC;AACH,CAAC;AAED,sBAAsB;AACtB,MAAM,UAAU,YAAY,CAAC,KAA2B,EAAE,IAA6B;IACrF,MAAM,GAAG,GAAW,EAAE,CAAC;IACvB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;aAC9B,IAAI,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAaD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAqC,CAAC;AAEjE,MAAM,UAAU,KAAK,CAAC,OAAe,EAAE,KAAkB;IACvD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,MAAM,SAAS,CAAC,eAAe,EAAE,OAAO,OAAO,WAAW,CAAC,CAAC;IACpG,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,SAAS,CAAC,eAAe,EAAE,MAAM,OAAO,WAAW,CAAC,CAAC;IACnF,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAChD,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;YAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,YAAY;gBAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,CAAC,GAAU,MAAM,CAAC,MAAM,CAAC;QAC7B,CAAC,KAAK,CAAC,EAAE,IAAa;QACtB,OAAO;QACP,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;QAChC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;QACtC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YACpB,IAAI,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACvB,IAAI,CAAC,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;YACxC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACvB,IAAI,CAAC,CAAC;gBAAE,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACrD,OAAO,CAAC,CAAC;QACX,CAAC;QACD,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,CAAC,QAAQ;KAC7B,CAAC,CAAC;IACH,OAAO,CAAC,CAAC;AACX,CAAC;AAED,uCAAuC;AACvC,MAAM,CAAC,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8BvB,CAAC"}
+{"version":3,"file":"route.js","sourceRoot":"","sources":["../src/route.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,EAA8B,MAAM,qBAAqB,CAAC;AAC5H,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAuB,MAAM,gBAAgB,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAmC,MAAM,SAAS,CAAC;AACjF,OAAO,EAAE,+BAA+B,EAAyB,MAAM,mBAAmB,CAAC;AAC3F,OAAO,EAAE,8BAA8B,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,4BAA4B,EAAE,WAAW,EAAE,sBAAsB,EAAiD,MAAM,gBAAgB,CAAC;AASlJ,aAAa;AACb,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,uBAAuB;IACvB,UAAU,EAAE,CAAC,KAAa,EAAY,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;IACxE,iBAAiB;IACjB,IAAI,EAAE,CAAC,IAAY,EAAY,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC1D,WAAW;IACX,IAAI,EAAE,CAAC,MAAc,EAAY,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC9D,+DAA+D;IAC/D,KAAK,EAAE,CAAC,KAAa,EAAY,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;CAC/D,CAAC;AAQF,wDAAwD;AACxD,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,KAAa,EAAE,KAAa,EAAa,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AAC5F,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,KAAa,EAAa,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AAC9F,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,KAAa,EAAE,KAAa,EAAa,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AAC5F,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,KAAa,EAAa,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AAC9F,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,KAAa,EAAE,KAAgC,EAAa,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AAC/G,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,KAAa,EAAE,KAAgC,EAAa,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AAC/G,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,KAA0B,EAAa,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AA+C3G,kDAAkD;AAClD,MAAM,UAAU,MAAM,CAAC,KAAa,EAAE,GAAG,KAAkB,IAAY,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AAEjH,mDAAmD;AACnD,MAAM,UAAU,QAAQ,CAAC,KAAa,EAAE,GAAG,QAAkB,IAAc,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;AAQ1H,MAAM,UAAU,IAAI,CAAC,KAAa,EAAE,GAA6B,EAAE,OAAqH,EAAE;IACxL,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM;YAChG,MAAM,SAAS,CAAC,eAAe,EAAE,2BAA2B,CAAC,CAAC;QAChE,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;YAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAM,IAAI,CAAC;gBAClG,MAAM,SAAS,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;QACtD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACnI,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,KAAK,KAAK,SAAS,CAAC;QACzJ,MAAM,SAAS,CAAC,eAAe,EAAE,iDAAiD,CAAC,CAAC;IACtF,IAAI,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,KAAK,WAAW,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC;QACnJ,MAAM,SAAS,CAAC,eAAe,EAAE,8BAA8B,CAAC,CAAC;IACnE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5G,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC/E,CAAC;AAED,oCAAoC;AACpC,MAAM,UAAU,IAAI,CAAC,IAAe,EAAE,GAAG,KAAkB;IACzD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACvC,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,aAAa,CAAC,CAAY,EAAE,IAA6B;IACvE,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACxB,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC;QACb,KAAK,IAAI,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;QACtC,KAAK,KAAK,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC;QACxC,KAAK,IAAI,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;QACtC,KAAK,KAAK,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC;QACxC,KAAK,IAAI,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAChD,KAAK,IAAI,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAChD,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,OAAO,CAAC,CAAC,OAAO,KAAK,CAAC;IACxB,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,YAAY,CAAC,KAA2B,EAAE,IAA6B;IACrF,YAAY,CAAC,KAAK,CAAC,CAAC;IACpB,OAAO,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACtG,CAAC;AAoBD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAqC,CAAC;AAEjE;;;;GAIG;AACH,MAAM,UAAU,KAAK,CAAC,OAAe,EAAE,KAAkB,EAAE,UAAkD,EAAE;IAC7G,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,MAAM,SAAS,CAAC,eAAe,EAAE,OAAO,OAAO,WAAW,CAAC,CAAC;IACpG,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,SAAS,CAAC,eAAe,EAAE,MAAM,OAAO,WAAW,CAAC,CAAC;IACnF,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAS,UAAU,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC1G,IAAI,SAAS;QAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IACpD,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC1D,IAAI,QAAQ,CAAC,IAAI,KAAK,YAAY,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO;YAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChG,CAAC;IACD,6CAA6C;IAC7C,MAAM,WAAW,GAAgB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,CAAC,KAAU,EAAQ,EAAE,GAAG,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC,CAAC,CAAC,CAAC;IACjJ,MAAM,CAAC,WAAW,CAAC,CAAC;IACpB,MAAM,iBAAiB,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5I,MAAM,CAAC,GAAU,MAAM,CAAC,MAAM,CAAC;QAC7B,CAAC,KAAK,CAAC,EAAE,IAAa;QACtB,OAAO;QACP,KAAK,EAAE,WAAW;QAClB,iBAAiB;QACjB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;QACtC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YACpB,IAAI,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACvB,IAAI,CAAC,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;YACxC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACvB,IAAI,CAAC,CAAC;gBAAE,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACrD,OAAO,CAAC,CAAC;QACX,CAAC;QACD,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,CAAC,QAAQ;QAC5B,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,qBAAqB,EAAE,+BAA+B,EAAE,8BAA8B,EAAE,4BAA4B,CAAC;QAC1I,QAAQ,EAAE,CAAC,QAAkB,EAAE,EAAE;YAC/B,MAAM,YAAY,GAAG,QAAQ,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC5D,+CAA+C;YAC/C,MAAM,aAAa,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC;YACtD,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1E,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,qBAAqB,CAAC;gBAC/H,MAAM,SAAS,CAAC,eAAe,EAAE,gDAAgD,CAAC,CAAC;YACrF,IAAI,SAAS,IAAI,CAAC,CAAC,YAAY,EAAE,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC;gBAC/L,MAAM,SAAS,CAAC,eAAe,EAAE,SAAS,SAAS,CAAC,cAAc,uBAAuB,CAAC,CAAC;YAC7F,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;gBACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;gBACnE,+CAA+C;gBAC/C,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,YAAY,EAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC;oBACjL,MAAM,SAAS,CAAC,eAAe,EAAE,UAAU,QAAQ,CAAC,KAAK,uBAAuB,CAAC,CAAC;YACtF,CAAC;YACD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;YAC1E,IAAI,CAAC,OAAO,CAAC,MAAM;gBAAE,OAAO;YAC5B,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;gBAAE,MAAM,SAAS,CAAC,eAAe,EAAE,uBAAuB,CAAC,CAAC;YAC7I,MAAM,OAAO,GAAG,QAAQ,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACvD,IAAI,CAAC,OAAO,EAAE,UAAU,IAAI,CAAC,OAAO,CAAC,WAAW;gBAAE,MAAM,SAAS,CAAC,eAAe,EAAE,SAAS,OAAO,gCAAgC,CAAC,CAAC;YACrI,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM;oBAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ;wBACxG,MAAM,SAAS,CAAC,eAAe,EAAE,YAAY,KAAK,WAAW,CAAC,CAAC;gBACjE,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE;oBAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC;wBAC5F,MAAM,SAAS,CAAC,cAAc,EAAE,cAAc,KAAK,MAAM,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IACH,OAAO,CAAC,CAAC;AACX,CAAC;AAED,uCAAuC;AACvC,iEAAiE;AACjE,MAAM,CAAC,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8BvB,CAAC"}

package/dist/selectors.d.ts

@@ -0,0 +1,8 @@
+import { type Kysely } from 'kysely';
+import type { Approver } from './route.js';
+/**
+ * 解析单人、角色、部门负责人或单据人员字段；支持普通连接及已持锁事务，避免再次占用写连接池。
+ * 字段值允许单个 UUID 或 1–200 个 UUID，重复人员归并；null/缺失返回空，非法类型明确拒绝。
+ * 空候选由开启节点时报告配置错误；列表/领取时代表当前无人符合，不扩大候选范围。
+ */
+export declare function resolveApprovers(db: Kysely<any>, selector: Approver, vars: Record<string, unknown>, tenantId: string): Promise<string[]>;

package/dist/selectors.js

@@ -0,0 +1,53 @@
+/**
+ * 封闭审批选人规则的数据库解析，由节点开启与候选任务查询/领取共同调用。
+ * 组织规则每次按当前租户数据解析，字段规则只读取实例保存的 routable 变量；本文件不授予能力，也不写任务。
+ * 领取仍需另查 active、业务批准能力和安全视图范围，选人成功不能替代最终领域命令约束。
+ */
+import { cageError } from '@yss123/cage-kernel';
+import { sql } from 'kysely';
+import { z } from 'zod';
+/**
+ * 解析单人、角色、部门负责人或单据人员字段；支持普通连接及已持锁事务，避免再次占用写连接池。
+ * 字段值允许单个 UUID 或 1–200 个 UUID，重复人员归并；null/缺失返回空，非法类型明确拒绝。
+ * 空候选由开启节点时报告配置错误；列表/领取时代表当前无人符合，不扩大候选范围。
+ */
+export async function resolveApprovers(db, selector, vars, tenantId) {
+    switch (selector.kind) {
+        case 'user': return [selector.userId];
+        case 'field': {
+            const value = vars[selector.field];
+            if (value == null)
+                return [];
+            const parsed = z.array(z.uuid()).min(1).max(200).safeParse(typeof value === 'string' ? [value] : value);
+            if (!parsed.success)
+                throw cageError('INVALID_INPUT', { reason: '审批人员字段须为 UUID 或 1–200 个 UUID 的数组' });
+            return [...new Set(parsed.data)];
+        }
+        case 'deptLeader': {
+            const deptId = vars[selector.field];
+            if (typeof deptId !== 'string')
+                return [];
+            const dept = await db.selectFrom('sys.dept').select(['leader_id', 'ancestors']).where('id', '=', deptId).where('tenant_id', '=', tenantId).executeTakeFirst();
+            if (!dept)
+                return [];
+            if (dept.leader_id)
+                return [dept.leader_id];
+            // 无直属负责人时从最近祖先开始查找，每次查询仍限同一租户。
+            for (const id of String(dept.ancestors).split('/').filter(Boolean).reverse()) {
+                const parent = await db.selectFrom('sys.dept').select('leader_id').where('id', '=', id).where('tenant_id', '=', tenantId).executeTakeFirst();
+                if (parent?.leader_id)
+                    return [parent.leader_id];
+            }
+            return [];
+        }
+        case 'role': {
+            const role = await db.selectFrom('sys.role').select('id').where('code', '=', selector.code).where('tenant_id', '=', tenantId).where('status', '=', 'active').executeTakeFirst();
+            if (!role)
+                return [];
+            const users = await db.selectFrom('sys.user').select('id').where('tenant_id', '=', tenantId).where('status', '=', 'active')
+                .where(sql `role_ids @> ${JSON.stringify([role.id])}::jsonb`).execute();
+            return users.map(user => user.id);
+        }
+    }
+}
+//# sourceMappingURL=selectors.js.map

package/dist/selectors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"selectors.js","sourceRoot":"","sources":["../src/selectors.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,GAAG,EAAe,MAAM,QAAQ,CAAC;AAC1C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EAAe,EAAE,QAAkB,EAAE,IAA6B,EAAE,QAAgB;IACzH,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtB,KAAK,MAAM,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACtC,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACnC,IAAI,KAAK,IAAI,IAAI;gBAAE,OAAO,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACxG,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,SAAS,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC,CAAC;YACtG,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACnC,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACpC,IAAI,OAAO,MAAM,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,gBAAgB,EAAE,CAAC;YAC9J,IAAI,CAAC,IAAI;gBAAE,OAAO,EAAE,CAAC;YACrB,IAAI,IAAI,CAAC,SAAS;gBAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC5C,+BAA+B;YAC/B,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC7E,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,gBAAgB,EAAE,CAAC;gBAC7I,IAAI,MAAM,EAAE,SAAS;oBAAE,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACnD,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,gBAAgB,EAAE,CAAC;YAChL,IAAI,CAAC,IAAI;gBAAE,OAAO,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC;iBACxH,KAAK,CAAC,GAAG,CAAS,eAAe,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;YAClF,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/task-actions.d.ts

@@ -0,0 +1,94 @@
+/**
+ * 人工待办的领取/释放、转办、委派归还与前后/并行加签，由 InCodeEngine 和 HTTP 调用。
+ * 操作先锁实例再锁任务，重新核验归属、提交版本、权限与节点快照政策；任务修改和不可覆盖的操作记录共同提交。
+ * 本模块只维护 flow 数据，不执行最终业务结论；委派不等于批准，加签不创建新的审批节点或授予能力。
+ */
+import { type Kernel, type Ctx } from '@yss123/cage-kernel';
+import { type Transaction } from 'kysely';
+import { z } from 'zod';
+/** 人工节点显式开放的任务操作；缺省均关闭，已运行实例使用保存的政策而非最新代码。 */
+export interface TaskActionPolicy {
+    /** 允许当前审批人将责任转给另一位已有审批权限的用户。 */
+    transfer?: boolean;
+    /** 允许委派处理后归还原审批人；受托人不能直接作出审批结论。 */
+    delegate?: boolean;
+    /** 允许原始待办添加当前节点的前签、后签或并行必签人；加签待办本身不能继续加签。 */
+    addSign?: boolean;
+}
+/** HTTP 与直接引擎调用共用的严格输入协议，拒绝未知字段；revision 是任务版本，不是业务对象版本。 */
+export declare const taskActionSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    targetUserId: z.ZodUUID;
+    expectedRevision: z.ZodNumber;
+    reason: z.ZodString;
+    action: z.ZodLiteral<"transfer">;
+}, z.core.$strict>, z.ZodObject<{
+    targetUserId: z.ZodUUID;
+    expectedRevision: z.ZodNumber;
+    reason: z.ZodString;
+    action: z.ZodLiteral<"delegate">;
+}, z.core.$strict>, z.ZodObject<{
+    expectedRevision: z.ZodNumber;
+    reason: z.ZodString;
+    action: z.ZodLiteral<"resolve">;
+}, z.core.$strict>, z.ZodObject<{
+    expectedRevision: z.ZodNumber;
+    reason: z.ZodString;
+    action: z.ZodLiteral<"claim">;
+}, z.core.$strict>, z.ZodObject<{
+    expectedRevision: z.ZodNumber;
+    reason: z.ZodString;
+    action: z.ZodLiteral<"unclaim">;
+}, z.core.$strict>, z.ZodObject<{
+    userIds: z.ZodArray<z.ZodUUID>;
+    placement: z.ZodOptional<z.ZodEnum<{
+        parallel: "parallel";
+        before: "before";
+        after: "after";
+    }>>;
+    expectedRevision: z.ZodNumber;
+    reason: z.ZodString;
+    action: z.ZodLiteral<"addSign">;
+}, z.core.$strict>], "action">;
+/** action 区分领取/释放、转办、委派、归还和加签；placement 缺省并行，reason 必须说明原因，目标 ID 不授予权限。 */
+export type TaskActionInput = z.infer<typeof taskActionSchema>;
+/** 已提交的任务变更回执；新加签待办各从 revision=0 开始，原任务版本始终递增。 */
+export interface TaskActionResult {
+    /** 被操作的原任务 ID。 */
+    taskId: string;
+    /** 变更后的原任务版本，重复提交旧版本会返回冲突而不会再次变更。 */
+    revision: number;
+    /** 本次加签新建的待办 ID，其他操作为空数组。 */
+    createdTaskIds: string[];
+}
+/**
+ * 按租户与当前受托人找到任务，再以实例→任务的固定顺序加锁。
+ * 锁后再次核对归属与当前步骤，防止转办和决定竞争时使用锁前的旧身份；找不到或不归本人统一 404。
+ * unassigned 仅供领取使用，只接受无人持有的 candidate；候选身份由调用方在同一锁内另查。
+ */
+export declare function lockOwnedTask(k: Kernel, tx: Transaction<any>, process: string, taskId: string, userId: string, tenantId: string, unassigned?: boolean): Promise<{
+    inst: {
+        [x: string]: any;
+    };
+    task: {
+        [x: string]: any;
+    };
+    binding: import("@yss123/cage-kernel").Approval<import("@yss123/cage-kernel").AnyAggregate>;
+}>;
+/** 选人和决定都实时检查 active 用户、指定结论能力及单据 read/范围；此检查不替代最终命令中的硬约束。 */
+export declare function authorizedTaskActor(k: Kernel, tx: Transaction<any>, inst: any, userId: string, outcome?: 'approved' | 'rejected' | 'returned'): Promise<Ctx>;
+/**
+ * 仅追加审批动作，不覆盖原决定 comment；调用方的事务失败会连同记录一起回滚。
+ * 表对应用账号只开放 SELECT/INSERT；reason 是人工意见，调用人不得在其中放凭据或无权共享的内容。
+ */
+export declare function recordTaskAction(tx: Transaction<any>, inst: any, taskId: string | null, actorId: string | null, action: string, reason: string | null, details?: Record<string, unknown>): Promise<void>;
+/**
+ * 执行一个任务管理动作；领取/释放由 assignment 声明开放，其余由 actions 开放，AI 接管待办保持原有语义。
+ * 目标不得是本人、原委派人或该节点已承担/已完成审批的人，防止会签转办变相减少独立审批人数。
+ * 同节点最多追加 20 位必签人；重复网络提交凭旧 revision 拒绝，不提供成功回执缓存或自动重试。
+ */
+export declare function executeTaskAction(k: Kernel, process: string, taskId: string, userId: string, tenantId: string, input: TaskActionInput): Promise<TaskActionResult>;
+/** 前向迁移：旧待办保持 original/revision=0，既有实例无 actions 因而不会自动开放管理操作。 */
+export declare const APPROVAL_TASK_ACTIONS_MIGRATION: {
+    name: string;
+    sql: string;
+};

package/dist/task-actions.js

@@ -0,0 +1,198 @@
+/**
+ * 人工待办的领取/释放、转办、委派归还与前后/并行加签，由 InCodeEngine 和 HTTP 调用。
+ * 操作先锁实例再锁任务，重新核验归属、提交版本、权限与节点快照政策；任务修改和不可覆盖的操作记录共同提交。
+ * 本模块只维护 flow 数据，不执行最终业务结论；委派不等于批准，加签不创建新的审批节点或授予能力。
+ */
+import { cageError, loadUserGrants, userCtx } from '@yss123/cage-kernel';
+import { sql } from 'kysely';
+import { z } from 'zod';
+import { resolveApprovers } from './selectors.js';
+const common = { expectedRevision: z.number().int().min(0).max(Number.MAX_SAFE_INTEGER), reason: z.string().trim().min(1).max(1000) };
+/** HTTP 与直接引擎调用共用的严格输入协议，拒绝未知字段；revision 是任务版本，不是业务对象版本。 */
+export const taskActionSchema = z.discriminatedUnion('action', [
+    z.strictObject({ action: z.literal('transfer'), ...common, targetUserId: z.uuid() }),
+    z.strictObject({ action: z.literal('delegate'), ...common, targetUserId: z.uuid() }),
+    z.strictObject({ action: z.literal('resolve'), ...common }),
+    z.strictObject({ action: z.literal('claim'), ...common }),
+    z.strictObject({ action: z.literal('unclaim'), ...common }),
+    z.strictObject({ action: z.literal('addSign'), ...common, userIds: z.array(z.uuid()).min(1).max(20), placement: z.enum(['parallel', 'before', 'after']).optional() }),
+]);
+/**
+ * 按租户与当前受托人找到任务，再以实例→任务的固定顺序加锁。
+ * 锁后再次核对归属与当前步骤，防止转办和决定竞争时使用锁前的旧身份；找不到或不归本人统一 404。
+ * unassigned 仅供领取使用，只接受无人持有的 candidate；候选身份由调用方在同一锁内另查。
+ */
+export async function lockOwnedTask(k, tx, process, taskId, userId, tenantId, unassigned = false) {
+    if (!z.uuid().safeParse(taskId).success)
+        throw cageError('NOT_FOUND');
+    const candidate = await tx.selectFrom('flow.approval_task').select('instance_id')
+        .where('id', '=', taskId).where('tenant_id', '=', tenantId)
+        .$if(!unassigned, query => query.where('assignee', '=', userId))
+        .$if(unassigned, query => query.where('assignment', '=', 'candidate').where('assignee', 'is', null)).executeTakeFirst();
+    if (!candidate)
+        throw cageError('NOT_FOUND');
+    const inst = await tx.selectFrom('flow.approval_instance').selectAll().where('id', '=', candidate.instance_id)
+        .where('tenant_id', '=', tenantId).where('process', '=', process).forUpdate().executeTakeFirst();
+    if (!inst)
+        throw cageError('NOT_FOUND');
+    const task = await tx.selectFrom('flow.approval_task').selectAll().where('id', '=', taskId).where('tenant_id', '=', tenantId).forUpdate().executeTakeFirst();
+    if (!task || (unassigned ? task.assignment !== 'candidate' || task.assignee !== null : task.assignee !== userId))
+        throw cageError('NOT_FOUND');
+    // 并行分支各自拥有活跃节点，不能用实例兼容摘要 current_step 排除其他分支的合法待办。
+    const activeStep = await tx.selectFrom('flow.approval_step').select('status').where('instance_id', '=', inst.id).where('step', '=', task.step).executeTakeFirst();
+    if (inst.status !== 'running' || task.status !== 'pending' || !activeStep || !['running', 'waiting_manual'].includes(activeStep.status))
+        throw cageError('INVALID_TRANSITION');
+    const binding = k.registry.approvalByProcess(process).a;
+    const subject = await tx.selectFrom(`${binding.agg.table.schema}.${binding.agg.table.name}`).select('version')
+        .where('id', '=', inst.business_key).where('tenant_id', '=', tenantId).executeTakeFirst();
+    if (!subject || (inst.subject_version !== null && subject.version !== inst.subject_version))
+        throw cageError('CONFLICT', { reason: '审批所针对的业务版本已变化' });
+    return { inst, task, binding };
+}
+/** 选人和决定都实时检查 active 用户、指定结论能力及单据 read/范围；此检查不替代最终命令中的硬约束。 */
+export async function authorizedTaskActor(k, tx, inst, userId, outcome = 'approved') {
+    const binding = k.registry.approvalByProcess(inst.process).a;
+    const command = outcome === 'approved' ? binding.onApproved : outcome === 'rejected' ? binding.onRejected : binding.onReturned;
+    // 复用持有实例锁的连接加载授权；若另从 app 池取连接，排队操作占满池时会阻塞锁持有者。
+    const grants = await loadUserGrants(tx, userId, inst.tenant_id);
+    const actor = grants ? userCtx(grants) : null;
+    if (!actor || !command || !actor.capabilities.has(k.registry.capabilityOf(command)) || !actor.capabilities.has(`${binding.agg.name}.read`))
+        throw cageError('FORBIDDEN');
+    // 只查安全视图中的存在性，不读取明文字段或制造不必要的明文读取审计；范围仍由读账号落实。
+    const visible = await k.read.tx(actor, read => read.selectFrom(`safe.${binding.agg.table.name}`).select('id').where('id', '=', inst.business_key).executeTakeFirst());
+    if (!visible)
+        throw cageError('NOT_FOUND');
+    return actor;
+}
+/**
+ * 仅追加审批动作，不覆盖原决定 comment；调用方的事务失败会连同记录一起回滚。
+ * 表对应用账号只开放 SELECT/INSERT；reason 是人工意见，调用人不得在其中放凭据或无权共享的内容。
+ */
+export async function recordTaskAction(tx, inst, taskId, actorId, action, reason, details = {}) {
+    await tx.insertInto('flow.approval_task_action').values({ tenant_id: inst.tenant_id, instance_id: inst.id,
+        task_id: taskId, actor_id: actorId, action, reason, details: JSON.stringify(details) }).execute();
+}
+/**
+ * 执行一个任务管理动作；领取/释放由 assignment 声明开放，其余由 actions 开放，AI 接管待办保持原有语义。
+ * 目标不得是本人、原委派人或该节点已承担/已完成审批的人，防止会签转办变相减少独立审批人数。
+ * 同节点最多追加 20 位必签人；重复网络提交凭旧 revision 拒绝，不提供成功回执缓存或自动重试。
+ */
+export async function executeTaskAction(k, process, taskId, userId, tenantId, input) {
+    const parsed = taskActionSchema.safeParse(input);
+    if (!parsed.success)
+        throw cageError('INVALID_INPUT');
+    const data = parsed.data;
+    return k.app.transaction().execute(async (tx) => {
+        const { inst, task } = await lockOwnedTask(k, tx, process, taskId, userId, tenantId, data.action === 'claim');
+        if (task.revision !== data.expectedRevision)
+            throw cageError('CONFLICT');
+        await authorizedTaskActor(k, tx, inst, userId);
+        const node = inst.steps[task.step];
+        if (data.action === 'claim' || data.action === 'unclaim') {
+            if (node.kind === 'ai' || node.assignment !== 'candidate' || task.assignment !== 'candidate')
+                throw cageError('FORBIDDEN');
+            if (task.delegation === 'pending')
+                throw cageError('INVALID_TRANSITION');
+            if (data.action === 'claim') {
+                if (!(await resolveApprovers(tx, node.approver, inst.vars, tenantId)).includes(userId))
+                    throw cageError('FORBIDDEN');
+                // 候选身份不允许一人领取同节点第二票；已完成票和委派 owner 也算已承担责任。
+                const peer = await tx.selectFrom('flow.approval_task').select('id').where('instance_id', '=', inst.id).where('step', '=', task.step)
+                    .where('id', '!=', task.id).where(q => q.or([q('assignee', '=', userId), q('owner_id', '=', userId)])).executeTakeFirst();
+                if (peer)
+                    throw cageError('CONFLICT', { reason: '领取人已参与当前节点' });
+            }
+            else {
+                // 不能用释放候选任务绕过已提出的必签责任；完成后可释放，父子关联仍保留。
+                const child = await tx.selectFrom('flow.approval_task').select('id').where('parent_task_id', '=', task.id)
+                    .where('status', 'in', ['pending', 'waiting']).executeTakeFirst();
+                if (child)
+                    throw cageError('INVALID_TRANSITION', { reason: '存在未完成加签，不能释放任务' });
+            }
+            const assignee = data.action === 'claim' ? userId : null;
+            await tx.updateTable('flow.approval_task').set({ assignee, owner_id: null, delegation: null, revision: task.revision + 1 }).where('id', '=', taskId).execute();
+            await tx.updateTable('flow.approval_instance').set({ updated_at: sql `now()` }).where('id', '=', inst.id).execute();
+            await recordTaskAction(tx, inst, taskId, userId, data.action, data.reason, { from: task.assignee, to: assignee, revision: task.revision + 1 });
+            return { taskId, revision: task.revision + 1, createdTaskIds: [] };
+        }
+        const permission = data.action === 'resolve' ? 'delegate' : data.action;
+        if (node.kind === 'ai' || !node.actions?.[permission])
+            throw cageError('FORBIDDEN', { reason: '该节点未开放此任务操作' });
+        const pendingDelegation = task.delegation === 'pending';
+        if ((data.action === 'resolve') !== pendingDelegation)
+            throw cageError('INVALID_TRANSITION');
+        const createdTaskIds = [];
+        let assignee = task.assignee, owner = task.owner_id, delegation = task.delegation;
+        if (data.action === 'resolve') {
+            // 归还只能回到服务端保留的原审批人；停用或撤权后不能假装归还成功。
+            await authorizedTaskActor(k, tx, inst, task.owner_id);
+            assignee = task.owner_id;
+            delegation = 'resolved';
+        }
+        else {
+            const targets = data.action === 'addSign' ? data.userIds : [data.targetUserId];
+            if (new Set(targets).size !== targets.length || targets.includes(userId))
+                throw cageError('INVALID_INPUT');
+            const peers = await tx.selectFrom('flow.approval_task').select(['assignee', 'owner_id', 'task_kind'])
+                .where('instance_id', '=', inst.id).where('step', '=', task.step).execute();
+            if (targets.some(id => peers.some(p => p.assignee === id || p.owner_id === id)))
+                throw cageError('CONFLICT', { reason: '接收人已参与当前节点' });
+            for (const target of targets)
+                await authorizedTaskActor(k, tx, inst, target);
+            if (data.action === 'addSign') {
+                // 第一批在途快照只有 addSign 布尔值，仍限原来的并行加签；新实例显式保存位置集合。
+                if (!(node.signPositions ?? ['parallel']).includes(data.placement ?? 'parallel'))
+                    throw cageError('FORBIDDEN', { reason: '该实例未开放此加签位置' });
+                if (task.task_kind !== 'original')
+                    throw cageError('FORBIDDEN', { reason: '加签待办不能再次加签' });
+                if (peers.filter(p => p.task_kind === 'additional').length + targets.length > 20)
+                    throw cageError('INVALID_INPUT', { reason: '节点加签总人数最多为 20' });
+                for (const target of targets) {
+                    const added = await tx.insertInto('flow.approval_task').values({ tenant_id: tenantId, instance_id: inst.id,
+                        step: task.step, title: task.title, assignee: target, task_kind: 'additional', parent_task_id: task.id,
+                        sign_position: data.placement ?? 'parallel', status: data.placement === 'after' ? 'waiting' : 'pending' }).returning('id').executeTakeFirstOrThrow();
+                    createdTaskIds.push(added.id);
+                }
+            }
+            else {
+                assignee = data.targetUserId;
+                owner = data.action === 'delegate' ? userId : null;
+                delegation = data.action === 'delegate' ? 'pending' : null;
+            }
+        }
+        // 前签先挂起父任务，只有全部前签批准才能由引擎唤醒；waiting 任务不能操作或决定。
+        await tx.updateTable('flow.approval_task').set({ assignee, owner_id: owner, delegation, revision: task.revision + 1,
+            status: data.action === 'addSign' && data.placement === 'before' ? 'waiting' : 'pending' }).where('id', '=', taskId).execute();
+        await tx.updateTable('flow.approval_instance').set({ updated_at: sql `now()` }).where('id', '=', inst.id).execute();
+        await recordTaskAction(tx, inst, taskId, userId, data.action, data.reason, { from: task.assignee, to: assignee,
+            revision: task.revision + 1, ...(data.action === 'addSign' ? { userIds: data.userIds, taskIds: createdTaskIds, placement: data.placement ?? 'parallel' } : {}) });
+        return { taskId, revision: task.revision + 1, createdTaskIds };
+    });
+}
+/** 前向迁移：旧待办保持 original/revision=0，既有实例无 actions 因而不会自动开放管理操作。 */
+export const APPROVAL_TASK_ACTIONS_MIGRATION = {
+    name: 'cage:approval_task_actions_001',
+    sql: `
+ALTER TABLE flow.approval_task ADD COLUMN revision integer NOT NULL DEFAULT 0 CHECK (revision >= 0);
+ALTER TABLE flow.approval_task ADD COLUMN owner_id uuid;
+ALTER TABLE flow.approval_task ADD COLUMN delegation text CHECK (delegation IN ('pending','resolved'));
+ALTER TABLE flow.approval_task ADD COLUMN task_kind text NOT NULL DEFAULT 'original' CHECK (task_kind IN ('original','additional'));
+ALTER TABLE flow.approval_task ADD CONSTRAINT approval_task_delegation_owner CHECK (delegation IS NULL OR owner_id IS NOT NULL);
+CREATE TABLE flow.approval_task_action (
+  id bigint GENERATED ALWAYS AS IDENTITY PRIMARY KEY,
+  tenant_id uuid NOT NULL,
+  instance_id uuid NOT NULL REFERENCES flow.approval_instance(id),
+  task_id uuid REFERENCES flow.approval_task(id),
+  actor_id uuid,
+  action text NOT NULL,
+  reason text,
+  details jsonb NOT NULL,
+  created_at timestamptz NOT NULL DEFAULT now()
+);
+CREATE INDEX approval_task_action_instance_idx ON flow.approval_task_action(tenant_id, instance_id, id);
+REVOKE ALL ON flow.approval_task_action FROM cage_app;
+GRANT SELECT, INSERT ON flow.approval_task_action TO cage_app;
+GRANT USAGE, SELECT ON SEQUENCE flow.approval_task_action_id_seq TO cage_app;
+`,
+};
+//# sourceMappingURL=task-actions.js.map

package/dist/task-actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-actions.js","sourceRoot":"","sources":["../src/task-actions.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAyB,MAAM,qBAAqB,CAAC;AAChG,OAAO,EAAE,GAAG,EAAoB,MAAM,QAAQ,CAAC;AAC/C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAYlD,MAAM,MAAM,GAAG,EAAE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;AACtI,4DAA4D;AAC5D,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE;IAC7D,CAAC,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,GAAG,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IACpF,CAAC,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,GAAG,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IACpF,CAAC,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC;IAC3D,CAAC,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC;IACzD,CAAC,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC;IAC3D,CAAC,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;CACtK,CAAC,CAAC;AAaH;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,CAAS,EAAE,EAAoB,EAAE,OAAe,EAAE,MAAc,EAAE,MAAc,EAAE,QAAgB,EAAE,UAAU,GAAG,KAAK;IACxJ,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO;QAAE,MAAM,SAAS,CAAC,WAAW,CAAC,CAAC;IACtE,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;SAC9E,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,QAAQ,CAAC;SAC1D,GAAG,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;SAC/D,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAC1H,IAAI,CAAC,SAAS;QAAE,MAAM,SAAS,CAAC,WAAW,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,CAAC,WAAW,CAAC;SAC3G,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,SAAS,EAAE,CAAC,gBAAgB,EAAE,CAAC;IACnG,IAAI,CAAC,IAAI;QAAE,MAAM,SAAS,CAAC,WAAW,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,SAAS,EAAE,CAAC,gBAAgB,EAAE,CAAC;IAC7J,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,KAAK,WAAW,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,MAAM,CAAC;QAAE,MAAM,SAAS,CAAC,WAAW,CAAC,CAAC;IAC/I,mDAAmD;IACnD,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAClK,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,MAAM,SAAS,CAAC,oBAAoB,CAAC,CAAC;IAC/K,MAAM,OAAO,GAAG,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC,OAAO,CAAE,CAAC,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;SAC3G,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAC5F,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,KAAK,IAAI,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC,eAAe,CAAC;QAAE,MAAM,SAAS,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;IACtJ,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACjC,CAAC;AAED,8DAA8D;AAC9D,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,CAAS,EAAE,EAAoB,EAAE,IAAS,EAAE,MAAc,EAAE,UAAgD,UAAU;IAC9J,MAAM,OAAO,GAAG,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAE,CAAC,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IAC/H,+CAA+C;IAC/C,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9C,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC;QAAE,MAAM,SAAS,CAAC,WAAW,CAAC,CAAC;IACzK,8CAA8C;IAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACtK,IAAI,CAAC,OAAO;QAAE,MAAM,SAAS,CAAC,WAAW,CAAC,CAAC;IAC3C,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EAAoB,EAAE,IAAS,EAAE,MAAqB,EAAE,OAAsB,EAAE,MAAc,EAAE,MAAqB,EAAE,UAAmC,EAAE;IACjM,MAAM,EAAE,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE;QACvG,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;AACtG,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,CAAS,EAAE,OAAe,EAAE,MAAc,EAAE,MAAc,EAAE,QAAgB,EAAE,KAAsB;IAC1I,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,SAAS,CAAC,eAAe,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACzB,OAAO,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAC,EAAE,EAAC,EAAE;QAC5C,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,aAAa,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;QAC9G,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,gBAAgB;YAAE,MAAM,SAAS,CAAC,UAAU,CAAC,CAAC;QACzE,MAAM,mBAAmB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAI,IAAI,CAAC,KAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACzD,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,WAAW,IAAI,IAAI,CAAC,UAAU,KAAK,WAAW;gBAAE,MAAM,SAAS,CAAC,WAAW,CAAC,CAAC;YAC3H,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;gBAAE,MAAM,SAAS,CAAC,oBAAoB,CAAC,CAAC;YACzE,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC5B,IAAI,CAAC,CAAC,MAAM,gBAAgB,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAAE,MAAM,SAAS,CAAC,WAAW,CAAC,CAAC;gBACrH,2CAA2C;gBAC3C,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC;qBACjI,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC;gBAC5H,IAAI,IAAI;oBAAE,MAAM,SAAS,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;YAClE,CAAC;iBAAM,CAAC;gBACN,sCAAsC;gBACtC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,gBAAgB,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;qBACvG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC;gBACpE,IAAI,KAAK;oBAAE,MAAM,SAAS,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;YACjF,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;YACzD,MAAM,EAAE,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;YAC/J,MAAM,EAAE,CAAC,WAAW,CAAC,wBAAwB,CAAC,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,GAAG,CAAA,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;YACnH,MAAM,gBAAgB,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC,CAAC;YAC/I,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,GAAG,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;QACrE,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QACxE,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC;YAAE,MAAM,SAAS,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;QAC/G,MAAM,iBAAiB,GAAG,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC;QACxD,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,KAAK,iBAAiB;YAAE,MAAM,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAC7F,MAAM,cAAc,GAAa,EAAE,CAAC;QACpC,IAAI,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClF,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9B,mCAAmC;YACnC,MAAM,mBAAmB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YACtD,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;YACzB,UAAU,GAAG,UAAU,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC/E,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,MAAM,SAAS,CAAC,eAAe,CAAC,CAAC;YAC3G,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;iBAClG,KAAK,CAAC,aAAa,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YAC9E,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAC;gBAAE,MAAM,SAAS,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;YACvI,KAAK,MAAM,MAAM,IAAI,OAAO;gBAAE,MAAM,mBAAmB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC7E,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC9B,+CAA+C;gBAC/C,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC;oBAAE,MAAM,SAAS,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;gBAC1I,IAAI,IAAI,CAAC,SAAS,KAAK,UAAU;oBAAE,MAAM,SAAS,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;gBAC1F,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,YAAY,CAAC,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,EAAE;oBAAE,MAAM,SAAS,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;gBAChJ,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;oBAC7B,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE;wBACxG,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,IAAI,CAAC,EAAE;wBACtG,aAAa,EAAE,IAAI,CAAC,SAAS,IAAI,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,uBAAuB,EAAE,CAAC;oBACvJ,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC;gBAC7B,KAAK,GAAG,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;gBACnD,UAAU,GAAG,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;YAC7D,CAAC;QACH,CAAC;QACD,8CAA8C;QAC9C,MAAM,EAAE,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,GAAG,CAAC;YACjH,MAAM,EAAE,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;QACjI,MAAM,EAAE,CAAC,WAAW,CAAC,wBAAwB,CAAC,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,GAAG,CAAA,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QACnH,MAAM,gBAAgB,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,QAAQ;YAC5G,QAAQ,EAAE,IAAI,CAAC,QAAQ,GAAG,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACpK,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,GAAG,CAAC,EAAE,cAAc,EAAE,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,iEAAiE;AACjE,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,IAAI,EAAE,gCAAgC;IACtC,GAAG,EAAE;;;;;;;;;;;;;;;;;;;;;CAqBN;CACA,CAAC"}