create-safest-tools 0.6.1 → 0.7.0

package/template/console/reports/controller.ts

@@ -1,14 +1,18 @@
-import { errorMessage, requestJson } from "../lib/http";
+import { clearPrivateDrafts, removePrivateDraft } from "./private-drafts";
+import { loadInbox } from "./load-inbox";
+import { priorityName } from "../lib/priority";
+import { ApiRequestError, errorMessage, requestJson } from "../lib/http";
 import { readable } from "../lib/format";
 import { getQueueWorkspaceSnapshot, subscribeToQueueWorkspace } from "../queues/store";
 import type { QueueRecord } from "../queues/types";
 import { getShellSnapshot, setShellSnapshot, subscribeToShell } from "../shell/store";
-import { reportEvents } from "./events";
+import { isReportSection, reportEvents } from "./events";
 import { getReportWorkspaceSnapshot, setReportWorkspaceSnapshot } from "./store";
 import type {
   HumanDecisionInput,
   PresenceAnalyst,
   ReportDetailRecord,
+  ReportSection,
   ReportFilters,
   ReporterMessageInput,
   ReportSummary,
@@ -18,6 +22,7 @@ import type {
 } from "./types";
 
 interface RawReport {
+  assignment?: RawReport["claim"];
   id: string;
   reference: string;
   targetType: string;
@@ -43,7 +48,6 @@ interface RawPresenceAnalyst {
   activeReportId?: string | null;
 }
 
-interface ReportsResponse { reports?: RawReport[] }
 interface ReportResponse { report: ReportDetailRecord }
 interface TimelineResponse { events?: ReportDetailRecord["timeline"] }
 interface WorkflowRunsResponse { runs?: WorkflowRunRecord[] }
@@ -51,7 +55,7 @@ interface WorkflowActionsResponse { actions?: WorkflowActionRecord[] }
 interface FindingsResponse { findings?: ReportDetailRecord["findings"] }
 interface PresenceResponse { analysts?: RawPresenceAnalyst[] }
 
-const defaultFilters = (): ReportFilters => ({ search: "", queueId: "", priority: "", age: "", state: "", sort: "oldest" });
+const defaultFilters = (): ReportFilters => ({ search: "", queueId: "", priority: "", age: "", state: "needs_review", sort: "priority" });
 const initialSnapshot = (): ReportWorkspaceSnapshot => ({
   loading: true,
   refreshing: false,
@@ -63,7 +67,7 @@ const initialSnapshot = (): ReportWorkspaceSnapshot => ({
   reports: [],
   presence: [],
   actionCodes: [],
-  permissions: { claimReports: false, messageReporters: false, decideReports: false, readRuns: false, readEvidence: false },
+  permissions: { reassignReports: false, manageConfiguration: false, claimReports: false, messageReporters: false, decideReports: false, readRuns: false, readEvidence: false },
   detail: { reportId: null, loading: false, error: "", statusMessage: "", pendingAction: null, messageMutationVersion: 0, report: null },
 });
 
@@ -71,6 +75,7 @@ let actorId = "";
 let rawReports: RawReport[] = [];
 let rawPresence: RawPresenceAnalyst[] = [];
 let detailRequestVersion = 0;
+let listRequestVersion = 0;
 let presenceSessionId = crypto.randomUUID();
 let presenceSocket: WebSocket | null = null;
 let presenceReconnectTimer: ReturnType<typeof setTimeout> | null = null;
@@ -80,11 +85,12 @@ let realtimeRefreshTimer: ReturnType<typeof setTimeout> | null = null;
 let presenceReconnectAttempts = 0;
 let presenceRunning = false;
 let started = false;
-
-function priorityName(priority: number): "high" | "medium" | "low" {
-  if (priority >= 70) return "high";
-  if (priority >= 40) return "medium";
-  return "low";
+const caseMutationKeys = new Map<string, { fingerprint: string; key: string }>();
+function caseMutationKey(kind: string, reportId: string, input: unknown): string {
+  const fingerprint = JSON.stringify([getShellSnapshot().session?.actor.id, reportId, input]);
+  const previous = caseMutationKeys.get(kind);
+  if (previous?.fingerprint === fingerprint) return previous.key;
+  const key = crypto.randomUUID(); caseMutationKeys.set(kind, { fingerprint, key }); return key;
 }
 
 function queues(): QueueRecord[] {
@@ -95,6 +101,10 @@ function visibleReports(filters: ReportFilters): RawReport[] {
   const query = filters.search.trim().toLowerCase();
   const now = Date.now();
   return rawReports.filter((report) => {
+    if (filters.state === "needs_review" && !["human_review", "human_review_requested"].includes(report.state)) return false;
+    const claimed = Boolean(report.assignment);
+    if (filters.ownership === "unassigned" && claimed) return false;
+    if (filters.ownership === "mine" && (!claimed || report.assignment?.reviewerId !== actorId)) return false;
     if (filters.priority && priorityName(report.priority) !== filters.priority) return false;
     const milliseconds = now - Date.parse(report.receivedAt);
     if (filters.age === "hour" && milliseconds > 3_600_000) return false;
@@ -124,12 +134,12 @@ function reportSummaries(filters: ReportFilters): ReportSummary[] {
     state: report.state,
     priority: Number(report.priority || 0),
     receivedAt: report.receivedAt,
-    owner: report.claim ? {
-      reviewerId: report.claim.reviewerId,
-      mine: report.claim.reviewerId === session?.actor.id,
-      displayName: report.claim.analyst?.displayName || "Unknown analyst",
-      avatarUrl: report.claim.analyst?.avatarUrl || null,
-      avatarColor: report.claim.analyst?.avatarColor || "#315d4d",
+    owner: report.assignment ? {
+      reviewerId: report.assignment.reviewerId,
+      mine: report.assignment.reviewerId === session?.actor.id,
+      displayName: report.assignment.analyst?.displayName || "Unknown analyst",
+      avatarUrl: report.assignment.analyst?.avatarUrl || null,
+      avatarColor: report.assignment.analyst?.avatarColor || "#315d4d",
     } : null,
   }));
 }
@@ -175,6 +185,8 @@ function publish(next?: Partial<ReportWorkspaceSnapshot>): void {
       ? configuration.allowed_action_codes
       : [],
     permissions: {
+      reassignReports: shell.session?.permissions.reassignReports === true,
+      manageConfiguration: shell.session?.permissions.manageConfiguration === true,
       claimReports: shell.session?.permissions.claimReports === true,
       messageReporters: shell.session?.permissions.messageReporters === true,
       decideReports: shell.session?.permissions.decideReports === true,
@@ -185,6 +197,7 @@ function publish(next?: Partial<ReportWorkspaceSnapshot>): void {
 }
 
 async function loadReports(): Promise<void> {
+  const version = ++listRequestVersion;
   const session = getShellSnapshot().session;
   if (!session?.permissions.readReports) {
     rawReports = [];
@@ -196,29 +209,33 @@ async function loadReports(): Promise<void> {
   publish({ error: "", refreshing: !snapshot.loading });
   const params = new URLSearchParams({ limit: "100" });
   if (snapshot.filters.queueId) params.set("queue_id", snapshot.filters.queueId);
-  if (snapshot.filters.state) params.set("state", snapshot.filters.state);
+  if (snapshot.filters.state && snapshot.filters.state !== "needs_review") params.set("state", snapshot.filters.state);
   try {
-    const response = await requestJson<ReportsResponse>(`/v1/admin/reports?${params}`);
-    rawReports = response.reports || [];
+    const reports = await loadInbox<RawReport>(params);
+    if (version !== listRequestVersion) return;
+    rawReports = reports;
     setShellSnapshot((shell) => ({
       ...shell,
       reportCount: rawReports.filter((report) => !["resolved_by_human", "resolved_by_ai", "closed"].includes(report.state)).length,
     }));
   } catch (cause) {
-    publish({ error: errorMessage(cause, "Reports could not be loaded.") });
+    if (version === listRequestVersion) publish({ error: errorMessage(cause, "Reports could not be loaded.") });
   } finally {
-    publish({ loading: false, refreshing: false });
+    if (version === listRequestVersion) publish({ loading: false, refreshing: false });
   }
 }
 
-async function openReport(reportId: string): Promise<void> {
-  const version = ++detailRequestVersion;
+async function openReport(reportId: string, review = false, destination?: { section: ReportSection; taskId?: string }): Promise<void> {
   const snapshot = getReportWorkspaceSnapshot();
+  if (snapshot.detail.reportId && snapshot.detail.reportId !== reportId && !window.dispatchEvent(new Event(reportEvents.beforeClose, { cancelable: true }))) return;
+  const version = ++detailRequestVersion;
   document.body.classList.add("report-open");
   publish({
     detail: {
       ...snapshot.detail,
       reportId,
+      reviewRequest: review ? (snapshot.detail.reviewRequest || 0) + 1 : snapshot.detail.reportId === reportId ? snapshot.detail.reviewRequest : 0,
+      destination: destination ? { ...destination, request: version } : snapshot.detail.reportId === reportId ? snapshot.detail.destination : undefined,
       loading: true,
       error: "",
       statusMessage: snapshot.detail.reportId === reportId ? snapshot.detail.statusMessage : "",
@@ -229,12 +246,16 @@ async function openReport(reportId: string): Promise<void> {
     const encodedId = encodeURIComponent(reportId);
     const canReadRuns = getShellSnapshot().session?.permissions.readRuns === true;
     const canReadEvidence = getShellSnapshot().session?.permissions.readEvidence === true;
+    const prior = snapshot.detail.report?.id === reportId ? snapshot.detail.report : null;
+    const partialLoadErrors: string[] = [];
+    const unavailable = <T>(label: string, fallback: T) => () => { partialLoadErrors.push(label); return fallback; };
+    const readOptions = () => ({ signal: AbortSignal.timeout(15_000) });
     const [reportResponse, timelineResponse, runsResponse, actionsResponse, findingsResponse] = await Promise.all([
-      requestJson<ReportResponse>(`/v1/admin/reports/${encodedId}`),
-      requestJson<TimelineResponse>(`/v1/admin/reports/${encodedId}/timeline?limit=50`).catch(() => ({ events: [] })),
-      canReadRuns ? requestJson<WorkflowRunsResponse>(`/v1/admin/reports/${encodedId}/workflow-runs`).catch(() => ({ runs: [] })) : Promise.resolve({ runs: [] }),
-      requestJson<WorkflowActionsResponse>(`/v1/admin/reports/${encodedId}/actions`).catch(() => ({ actions: [] })),
-      canReadEvidence ? requestJson<FindingsResponse>(`/v1/admin/reports/${encodedId}/findings`).catch(() => ({ findings: [] })) : Promise.resolve({ findings: [] }),
+      requestJson<ReportResponse>(`/v1/admin/reports/${encodedId}`, readOptions()),
+      requestJson<TimelineResponse>(`/v1/admin/reports/${encodedId}/timeline?limit=50`, readOptions()).catch(unavailable("activity", { events: prior?.timeline || [] })),
+      canReadRuns ? requestJson<WorkflowRunsResponse>(`/v1/admin/reports/${encodedId}/workflow-runs`, readOptions()).catch(unavailable("playbook progress", { runs: prior?.workflowRuns || [] })) : Promise.resolve({ runs: [] }),
+      requestJson<WorkflowActionsResponse>(`/v1/admin/reports/${encodedId}/actions`, readOptions()).catch(unavailable("customer action states", { actions: prior?.workflowActions || [] })),
+      canReadEvidence ? requestJson<FindingsResponse>(`/v1/admin/reports/${encodedId}/findings`, readOptions()).catch(unavailable("retrieved evidence", { findings: prior?.findings || [] })) : Promise.resolve({ findings: [] }),
     ]);
     if (version !== detailRequestVersion || getReportWorkspaceSnapshot().detail.reportId !== reportId) return;
     publish({
@@ -242,6 +263,7 @@ async function openReport(reportId: string): Promise<void> {
         ...getReportWorkspaceSnapshot().detail,
         report: {
           ...reportResponse.report,
+          partialLoadErrors: partialLoadErrors.sort(),
           timeline: timelineResponse.events || [],
           workflowRuns: runsResponse.runs || [],
           workflowActions: actionsResponse.actions || [],
@@ -252,7 +274,7 @@ async function openReport(reportId: string): Promise<void> {
     sendPresenceActivity();
   } catch (cause) {
     if (version !== detailRequestVersion || getReportWorkspaceSnapshot().detail.reportId !== reportId) return;
-    publish({ detail: { ...getReportWorkspaceSnapshot().detail, report: null, error: errorMessage(cause, "The report could not be opened.") } });
+    publish({ detail: { ...getReportWorkspaceSnapshot().detail, ...(cause instanceof ApiRequestError && [401, 403, 404].includes(cause.status) ? { report: null } : {}), error: errorMessage(cause, "The case could not refresh. Use Refresh case to retry.") } });
   } finally {
     if (version === detailRequestVersion && getReportWorkspaceSnapshot().detail.reportId === reportId) {
       publish({ detail: { ...getReportWorkspaceSnapshot().detail, loading: false } });
@@ -260,7 +282,8 @@ async function openReport(reportId: string): Promise<void> {
   }
 }
 
-function closeReport(): void {
+function closeReport(committed = false): void {
+  if (!committed && !window.dispatchEvent(new Event(reportEvents.beforeClose, { cancelable: true }))) return;
   detailRequestVersion += 1;
   const messageMutationVersion = getReportWorkspaceSnapshot().detail.messageMutationVersion;
   document.body.classList.remove("report-open");
@@ -274,25 +297,39 @@ async function claimReport(): Promise<void> {
   if (!reportId || !snapshot.permissions.claimReports || snapshot.detail.pendingAction) return;
   publish({ detail: { ...snapshot.detail, error: "", pendingAction: "claim" } });
   try {
-    await requestJson(`/v1/admin/reports/${encodeURIComponent(reportId)}/claim`, { method: "POST" });
-    await Promise.all([openReport(reportId), loadReports()]);
+    const result = await requestJson<{ claim: NonNullable<ReportDetailRecord["claim"]> }>(`/v1/admin/reports/${encodeURIComponent(reportId)}/claim`, { method: "POST" });
+    const detail = getReportWorkspaceSnapshot().detail;
+    const analyst = { displayName: getShellSnapshot().session?.displayName || "You" };
+    const claim = { ...result.claim, analyst };
+    publish({ detail: { ...detail, report: detail.report ? { ...detail.report, claim, assignment: claim } : null,
+      reviewRequest: (detail.reviewRequest || 0) + 1, statusMessage: "" } });
+    void Promise.all([openReport(reportId), loadReports()]);
   } catch (cause) {
-    publish({ detail: { ...getReportWorkspaceSnapshot().detail, error: errorMessage(cause, "The report could not be claimed.") } });
+    await openReport(reportId);
+    publish({ detail: { ...getReportWorkspaceSnapshot().detail, error: errorMessage(cause, "Review could not be started. Your private draft is unchanged.") } });
+
   } finally {
     publish({ detail: { ...getReportWorkspaceSnapshot().detail, pendingAction: null } });
   }
 }
 
-async function releaseReport(): Promise<void> {
+export async function changeCaseOwner(input: { reviewerId: string | null; displayName?: string; version: number; note: string }): Promise<boolean> {
   const snapshot = getReportWorkspaceSnapshot();
   const reportId = snapshot.detail.report?.id;
-  if (!reportId || !snapshot.permissions.claimReports || snapshot.detail.pendingAction) return;
-  publish({ detail: { ...snapshot.detail, error: "", pendingAction: "release" } });
+  if (!reportId || !snapshot.permissions.reassignReports || snapshot.detail.pendingAction) return false;
+  publish({ detail: { ...snapshot.detail, error: "", statusMessage: "", pendingAction: input.reviewerId ? "transfer" : "release" } });
   try {
-    await requestJson(`/v1/admin/reports/${encodeURIComponent(reportId)}/claim`, { method: "DELETE" });
-    await Promise.all([openReport(reportId), loadReports()]);
+    await requestJson(`/v1/admin/reports/${encodeURIComponent(reportId)}/ownership`, { method: "PATCH", headers: { "content-type": "application/json" }, body: JSON.stringify({ reviewer_id: input.reviewerId, version: input.version, note: input.note }) });
+    const detail = getReportWorkspaceSnapshot().detail;
+    const assignment = input.reviewerId ? { reviewerId: input.reviewerId, version: input.version + 1, expiresAt: "1970-01-01T00:00:00.000Z", analyst: { displayName: input.displayName || "Assigned reviewer" } } : null;
+    publish({ detail: { ...detail, report: detail.report ? { ...detail.report, assignment, claim: null } : null,
+      statusMessage: `${input.reviewerId ? "Case transferred" : "Case returned to the queue"}. Handoff note shared; your drafts remain private.` } });
+    void Promise.all([openReport(reportId), loadReports()]);
+    return true;
   } catch (cause) {
-    publish({ detail: { ...getReportWorkspaceSnapshot().detail, error: errorMessage(cause, "The claim could not be released.") } });
+    await openReport(reportId);
+    publish({ detail: { ...getReportWorkspaceSnapshot().detail, error: errorMessage(cause, "Ownership could not be changed. Your note and private draft are unchanged.") } });
+    return false;
   } finally {
     publish({ detail: { ...getReportWorkspaceSnapshot().detail, pendingAction: null } });
   }
@@ -302,7 +339,7 @@ async function sendMessage(input: ReporterMessageInput): Promise<void> {
   const snapshot = getReportWorkspaceSnapshot();
   const reportId = snapshot.detail.report?.id;
   if (!reportId || !snapshot.permissions.messageReporters || snapshot.detail.pendingAction) return;
-  const idempotencyKey = crypto.randomUUID();
+  const idempotencyKey = caseMutationKey("message", reportId, input);
   publish({ detail: { ...snapshot.detail, error: "", statusMessage: "", pendingAction: "message" } });
   try {
     const response = await requestJson<{ delivery_state?: string; delivery_channel?: string | null }>(`/v1/admin/reports/${encodeURIComponent(reportId)}/messages`, {
@@ -310,6 +347,7 @@ async function sendMessage(input: ReporterMessageInput): Promise<void> {
       headers: { "content-type": "application/json", "idempotency-key": idempotencyKey },
       body: JSON.stringify({ idempotency_key: idempotencyKey, body: input.body, await_reporter: input.awaitReporter }),
     });
+    caseMutationKeys.delete("message");
     const version = getReportWorkspaceSnapshot().detail.messageMutationVersion + 1;
     const statusMessage = response.delivery_state === "queued"
       ? response.delivery_channel === "email"
@@ -317,7 +355,8 @@ async function sendMessage(input: ReporterMessageInput): Promise<void> {
         : "Participant update queued for the configured customer notification channel."
       : "The update was saved but not sent because this report has no available participant delivery channel.";
     publish({ detail: { ...getReportWorkspaceSnapshot().detail, messageMutationVersion: version, statusMessage } });
-    await Promise.all([openReport(reportId), loadReports()]);
+    // The mutation is acknowledged. Background refresh must not keep unrelated actions locked.
+    void Promise.all([openReport(reportId), loadReports()]);
   } catch (cause) {
     publish({ detail: { ...getReportWorkspaceSnapshot().detail, error: errorMessage(cause, "The message could not be created.") } });
   } finally {
@@ -329,7 +368,7 @@ async function recordDecision(input: HumanDecisionInput): Promise<void> {
   const snapshot = getReportWorkspaceSnapshot();
   const reportId = snapshot.detail.report?.id;
   if (!reportId || !snapshot.permissions.decideReports || snapshot.detail.pendingAction) return;
-  const idempotencyKey = crypto.randomUUID();
+  const idempotencyKey = caseMutationKey("decision", reportId, input);
   publish({ detail: { ...snapshot.detail, error: "", pendingAction: "decision" } });
   try {
     await requestJson(`/v1/admin/reports/${encodeURIComponent(reportId)}/decisions`, {
@@ -346,8 +385,10 @@ async function recordDecision(input: HumanDecisionInput): Promise<void> {
         ...(input.actionCode ? { action_code: input.actionCode } : {}),
       }),
     });
-    closeReport();
-    await loadReports();
+    caseMutationKeys.delete("decision");
+    removePrivateDraft(getShellSnapshot().session?.actor.id || "", reportId);
+    closeReport(true);
+    void loadReports();
   } catch (cause) {
     publish({ detail: { ...getReportWorkspaceSnapshot().detail, error: errorMessage(cause, "The decision could not be recorded.") } });
   } finally {
@@ -505,9 +546,10 @@ function validFilters(value: unknown): value is ReportFilters {
   const filters = value as Partial<ReportFilters>;
   return typeof filters.search === "string"
     && typeof filters.queueId === "string"
-    && ["", "high", "medium", "low"].includes(filters.priority ?? "invalid")
+    && ["", "urgent", "high", "medium", "low"].includes(filters.priority ?? "invalid")
     && ["", "hour", "day", "older"].includes(filters.age ?? "invalid")
     && typeof filters.state === "string"
+    && [undefined, "", "unassigned", "mine"].includes(filters.ownership)
     && ["oldest", "newest", "priority"].includes(filters.sort ?? "invalid");
 }
 
@@ -521,6 +563,7 @@ export function startReportController(): void {
       publish();
       return;
     }
+    if (actorId && actorId !== nextActorId) clearPrivateDrafts();
     actorId = nextActorId;
     detailRequestVersion += 1;
     stopPresence();
@@ -535,9 +578,14 @@ export function startReportController(): void {
   });
   subscribeToQueueWorkspace(() => publish());
   window.addEventListener(reportEvents.open, (event) => {
-    if (event instanceof CustomEvent && typeof event.detail?.reportId === "string") void openReport(event.detail.reportId);
+    if (!(event instanceof CustomEvent) || typeof event.detail?.reportId !== "string") return;
+    const destination = isReportSection(event.detail.section) ? {
+      section: event.detail.section,
+      ...(typeof event.detail.taskId === "string" && event.detail.taskId.length <= 100 ? { taskId: event.detail.taskId } : {}),
+    } : undefined;
+    void openReport(event.detail.reportId, event.detail.review === true, destination);
   });
-  window.addEventListener(reportEvents.close, closeReport);
+  window.addEventListener(reportEvents.close, () => closeReport());
   window.addEventListener(reportEvents.refresh, () => { void loadReports(); });
   window.addEventListener(reportEvents.filters, (event) => {
     if (!(event instanceof CustomEvent) || !validFilters(event.detail?.filters)) return;
@@ -547,7 +595,6 @@ export function startReportController(): void {
     if (filters.queueId !== previous.queueId || filters.state !== previous.state) void loadReports();
   });
   window.addEventListener(reportEvents.claim, () => { void claimReport(); });
-  window.addEventListener(reportEvents.release, () => { void releaseReport(); });
   window.addEventListener(reportEvents.message, (event) => {
     if (!(event instanceof CustomEvent) || typeof event.detail?.body !== "string" || typeof event.detail?.awaitReporter !== "boolean") return;
     void sendMessage(event.detail as ReporterMessageInput);
@@ -557,7 +604,7 @@ export function startReportController(): void {
     void recordDecision(event.detail as HumanDecisionInput);
   });
   window.addEventListener("keydown", (event) => {
-    if (event.key === "Escape" && getReportWorkspaceSnapshot().detail.reportId) closeReport();
+    if (event.key === "Escape" && !event.defaultPrevented && !document.querySelector(".case-handoff-dialog[open]") && getReportWorkspaceSnapshot().detail.reportId) closeReport();
   });
   window.addEventListener("focus", () => {
     scheduleRealtimeRefresh(null, true);

package/template/console/reports/events.ts

@@ -1,4 +1,4 @@
-import type { HumanDecisionInput, ReportFilters, ReporterMessageInput, ReportWorkspaceSnapshot } from "./types";
+import type { HumanDecisionInput, ReportFilters, ReporterMessageInput, ReportWorkspaceSnapshot, ReportSection } from "./types";
 
 export const reportEvents = {
   state: "safest:reports:state",
@@ -6,6 +6,7 @@ export const reportEvents = {
   filters: "safest:reports:filters",
   open: "safest:reports:open",
   close: "safest:reports:close",
+  beforeClose: "safest:reports:before-close",
   claim: "safest:reports:claim",
   release: "safest:reports:release",
   message: "safest:reports:message",
@@ -18,7 +19,13 @@ function dispatch<TDetail>(type: string, detail?: TDetail): void {
 
 export function dispatchReportRefresh(): void { dispatch(reportEvents.refresh); }
 export function dispatchReportFilters(filters: ReportFilters): void { dispatch(reportEvents.filters, { filters }); }
-export function dispatchOpenReport(reportId: string): void { dispatch(reportEvents.open, { reportId }); }
+export function dispatchOpenReport(reportId: string, review = false): void { dispatch(reportEvents.open, { reportId, review }); }
+export function dispatchOpenReportSection(reportId: string, section: ReportSection, taskId?: string): void {
+  dispatch(reportEvents.open, { reportId, section, taskId });
+}
+export function isReportSection(value: unknown): value is ReportSection {
+  return typeof value === "string" && ["overview", "evidence", "review", "messages", "outcome", "activity"].includes(value);
+}
 export function dispatchCloseReport(): void { dispatch(reportEvents.close); }
 export function dispatchClaimReport(): void { dispatch(reportEvents.claim); }
 export function dispatchReleaseReport(): void { dispatch(reportEvents.release); }

package/template/console/reports/load-inbox.ts

@@ -0,0 +1,17 @@
+import { requestJson } from "../lib/http";
+
+// The API returns at most 100 reports. Follow its opaque cursor so search,
+// sorting, and summary counts include the entire authorized result set.
+export async function loadInbox<T>(query = new URLSearchParams()): Promise<T[]> {
+  const params = new URLSearchParams(query);
+  params.set("limit", "100");
+  const reports: T[] = [];
+  let cursor: string | null = null;
+  do {
+    if (cursor) params.set("cursor", cursor);
+    const page = await requestJson<{ reports?: T[]; next_cursor?: string | null }>(`/v1/admin/reports?${params}`);
+    reports.push(...(page.reports || []));
+    cursor = page.next_cursor || null;
+  } while (cursor);
+  return reports;
+}

package/template/console/reports/private-drafts.ts

@@ -0,0 +1,32 @@
+const prefix = "safest:private-case-draft:";
+export interface PrivateCaseDraft {
+  message: string; awaitReporter: boolean; decisionCode: string; policyCode: string;
+  rationale: string; reporterNotice: string; affectedNotice: string; actionCode: string; evidence: string[];
+  taskDecision?: string; findings?: string[];
+}
+const memory = new Map<string, PrivateCaseDraft>();
+const key = (actorId: string, reportId: string) => `${prefix}${encodeURIComponent(actorId)}:${encodeURIComponent(reportId)}`;
+export function readPrivateDraft(actorId: string, reportId: string): PrivateCaseDraft | null {
+  const id = key(actorId, reportId);
+  if (memory.has(id)) return memory.get(id)!;
+  try {
+    const stored = JSON.parse(sessionStorage.getItem(id) || "null");
+    if (stored && Date.now() - stored.savedAt < 86_400_000 && typeof stored.draft?.message === "string" && Array.isArray(stored.draft.evidence)) return stored.draft;
+    sessionStorage.removeItem(id);
+  } catch { /* A browser can deny storage; in-memory drafts still work. */ }
+  return null;
+}
+export function savePrivateDraft(actorId: string, reportId: string, draft: PrivateCaseDraft): void {
+  const id = key(actorId, reportId);
+  if (![draft.message,draft.rationale,draft.reporterNotice,draft.affectedNotice,draft.actionCode,draft.taskDecision].some(Boolean)) { removePrivateDraft(actorId,reportId); return; }
+  memory.set(id,draft);
+  try { sessionStorage.setItem(id,JSON.stringify({ savedAt:Date.now(),draft })); } catch { /* Keep the in-memory copy. */ }
+}
+export function removePrivateDraft(actorId: string, reportId: string): void {
+  const id = key(actorId,reportId); memory.delete(id);
+  try { sessionStorage.removeItem(id); } catch { /* Storage may be unavailable. */ }
+}
+export function clearPrivateDrafts(): void {
+  memory.clear();
+  try { Object.keys(sessionStorage).filter(id => id.startsWith(prefix)).forEach(id => sessionStorage.removeItem(id)); } catch { /* Storage may be unavailable. */ }
+}

package/template/console/reports/store.ts

@@ -9,12 +9,12 @@ let snapshot: ReportWorkspaceSnapshot = {
   error: "",
   generatedAt: new Date().toISOString(),
   actorId: "",
-  filters: { search: "", queueId: "", priority: "", age: "", state: "", sort: "oldest" },
+  filters: { search: "", queueId: "", priority: "", age: "", state: "needs_review", sort: "priority" },
   queues: [],
   reports: [],
   presence: [],
   actionCodes: [],
-  permissions: { claimReports: false, messageReporters: false, decideReports: false, readRuns: false, readEvidence: false },
+  permissions: { reassignReports: false, manageConfiguration: false, claimReports: false, messageReporters: false, decideReports: false, readRuns: false, readEvidence: false },
   detail: { reportId: null, loading: false, error: "", statusMessage: "", pendingAction: null, messageMutationVersion: 0, report: null },
 };
 

package/template/console/reports/types.ts

@@ -1,6 +1,6 @@
 import type { AnalystIdentityData } from "../components/AnalystIdentity";
 
-export type ReportPriorityFilter = "" | "high" | "medium" | "low";
+export type ReportPriorityFilter = "" | "urgent" | "high" | "medium" | "low";
 export type ReportAgeFilter = "" | "hour" | "day" | "older";
 export type ReportSort = "oldest" | "newest" | "priority";
 
@@ -11,6 +11,7 @@ export interface ReportFilters {
   age: ReportAgeFilter;
   state: string;
   sort: ReportSort;
+  ownership?: "" | "unassigned" | "mine";
 }
 
 export interface ReportQueueOption {
@@ -51,6 +52,7 @@ export interface EvidenceReference {
 }
 
 export interface CaseMessage {
+  audience?: "reporter" | "affected_user" | "internal";
   id?: string;
   direction: string;
   body: string;
@@ -81,6 +83,7 @@ export interface TimelineEvent {
 }
 
 export interface FindingRecord {
+  runId?: string | null;
   id?: string;
   findingType: string;
   summary: string;
@@ -117,13 +120,29 @@ export interface DeliveryAction {
 }
 
 export interface DeliveryNotice {
+  purpose?: "appeal" | "case";
   id?: string;
+  messageId?: string;
+  decisionId?: string | null;
+  channel?: string | null;
+  attemptCount?: number;
+  errorCode?: string | null;
   audience: string;
   deliveryState: string;
   updatedAt: string;
 }
 
 export interface WorkflowActionRecord {
+  runId?: string;
+  payloadDigest?: string;
+  terminal?: boolean;
+  retryable?: boolean;
+  acceptedAt?: string | null;
+  confirmedAt?: string | null;
+  confirmationDeadlineAt?: string | null;
+  deliveryCycle?: number;
+  confirmationState?: string;
+  capabilityName?: string;
   id?: string;
   recordKind: string;
   actionCode: string;
@@ -154,6 +173,7 @@ export interface PolicyRule {
 }
 
 export interface ReportClaim {
+  version: number;
   reviewerId: string;
   expiresAt: string;
   analyst?: AnalystIdentityData;
@@ -175,6 +195,11 @@ export interface ReportAnswer {
 }
 
 export interface ReportDetailRecord {
+  relatedReports?: Array<{id:string;reference:string;state:string;reasonCode:string;submittedAt:string;queueName:string|null}>;
+  appeals?: Array<{id:string;audience:string;state:string;submittedAt:string;completionState:string|null;correctionRequired:number;correctionConfirmedAt:string|null;noticeState:string|null}>;
+  partialLoadErrors?: string[];
+  customerFacts?: Record<string, unknown>;
+  playbookManaged?: boolean;
   id: string;
   reference: string;
   state: string;
@@ -212,11 +237,23 @@ export interface ReportDetailRecord {
   workflowActions?: WorkflowActionRecord[];
   aiRuns?: AiRunRecord[];
   claim?: ReportClaim | null;
+  assignment?: ReportClaim | null;
+  handoffs?: Array<{ id: string; fromReviewerId: string; toReviewerId: string | null; note: string; authorName: string; createdAt: string }>;
 }
 
-export type ReportPendingAction = "claim" | "release" | "message" | "decision" | null;
+export type ReportPendingAction = "claim" | "release" | "transfer" | "message" | "decision" | null;
+
+export type ReportSection = "overview" | "evidence" | "review" | "messages" | "outcome" | "activity";
+
+export interface ReportDestination {
+  section: ReportSection;
+  taskId?: string;
+  request: number;
+}
 
 export interface ReportDetailSnapshot {
+  reviewRequest?: number;
+  destination?: ReportDestination;
   reportId: string | null;
   loading: boolean;
   error: string;
@@ -227,6 +264,8 @@ export interface ReportDetailSnapshot {
 }
 
 export interface ReportPermissions {
+  reassignReports: boolean;
+  manageConfiguration: boolean;
   claimReports: boolean;
   messageReporters: boolean;
   decideReports: boolean;

package/template/console/reports/use-editing-access.ts

@@ -0,0 +1,13 @@
+import { useEffect, useState } from "react";
+
+// Expiry must disable inputs even when offline and no presence update arrives.
+export function useEditingAccess(expiresAt?: string | null): boolean {
+  const [, tick] = useState(0);
+  const expiry = Date.parse(expiresAt || "");
+  useEffect(() => {
+    if (!Number.isFinite(expiry) || expiry <= Date.now()) return;
+    const timer = setTimeout(() => tick(value => value + 1), Math.min(2_147_483_647,expiry - Date.now() + 10));
+    return () => clearTimeout(timer);
+  }, [expiry]);
+  return Number.isFinite(expiry) && expiry > Date.now();
+}

package/template/console/settings/SettingsWorkspace.tsx

@@ -144,7 +144,7 @@ export function SettingsWorkspace() {
             const isOptional = optional.has(feature.featureKey);
             return <article className="setup-row" key={feature.featureKey}><span className={`setup-state${ready ? "" : " warning"}`}>{ready ? "✓" : "!"}</span><div><strong>{featureName(feature.featureKey)}</strong><small>{feature.message || feature.detail || (ready ? "Verified in this deployment" : isOptional ? "Optional setup" : "Verification required")}</small></div>{ready ? <span className="badge">Ready</span> : <button className="secondary compact-button" type="button" disabled={Boolean(verifying)} onClick={() => void verify(feature.featureKey)}>{verifying === feature.featureKey ? "Checking…" : isOptional ? "Check optional" : "Verify"}</button>}</article>;
           }) : <div className="settings-empty-row"><strong>No setup items</strong><small>There is nothing to verify for this deployment.</small></div>}</div>}</section>
-          <section className="surface settings-card" aria-labelledby="workspace-details-title"><div className="surface-head"><h2 id="workspace-details-title">Workspace details</h2></div>{loading && !installation ? <SettingsLoading /> : installation ? <dl className="settings-facts">{installationFacts(installation).map(([label, value]) => <span className="settings-fact" key={label}><dt>{label}</dt><dd>{value}</dd></span>)}</dl> : <div className="settings-empty-row">Workspace details are unavailable.</div>}</section>
+          <section className="surface settings-card" aria-labelledby="workspace-details-title"><div className="surface-head"><h2 id="workspace-details-title">Workspace details</h2></div>{loading && !installation ? <SettingsLoading /> : installation ? <dl className="settings-facts">{installationFacts(installation).map(([label, value]) => <div className="settings-fact" key={label}><dt>{label}</dt><dd>{value}</dd></div>)}</dl> : <div className="settings-empty-row">Workspace details are unavailable.</div>}</section>
         </> : null}
         {canManageConfiguration ? <BrandEditor brand={brand} displayName={installation?.displayName ?? "Safest Resolve"} loading={loading && !brand} onSaved={setBrand} /> : null}
         {canManageIntegrations ? <section className="surface settings-card settings-wide" aria-labelledby="reporting-channels-title"><div className="surface-head"><div><h2 id="reporting-channels-title">Reporting channels</h2><p>Choose where people open the form and what context can be trusted.</p></div><button className="primary" type="button" onClick={openChannelDialog}>Add channel</button></div>{loading && !channels.length && !integrations.length ? <SettingsLoading /> : <div className="integration-list">{channels.map((channel) => <ChannelRow channel={channel} key={channel.id} />)}{integrations.map((integration) => <IntegrationRow integration={integration} key={integration.id} />)}{!channels.length && !integrations.length ? <div className="settings-empty-row"><strong>No reporting channels yet</strong><small>Add a hosted form or connect the widget to your application.</small></div> : null}</div>}</section> : null}