filegrc 0.15.1 → 0.15.2

package/src/retention.js

@@ -10,18 +10,26 @@ export async function assessRetentionReadiness(loaded, program, options = {}) {
   if (!loaded.model.resources["retention-schedule-item"]) return [];
   const byId = new Map(loaded.resources.map((record) => [record.id, record]));
   const rules = loaded.resources.filter((record) => (
-    record.type === "retention-schedule-item" && record.status === "active"
+    record.type === "retention-schedule-item"
+    && !["retired", "superseded"].includes(record.status)
   ));
-  const revisions = await resourceReviewRevisions(loaded, rules.flatMap((rule) => retentionReviewResourceIds(rule, loaded)));
-  const usableRules = rules.filter((rule) => retentionRuleIsCurrent(rule, revisions, byId, loaded));
+  const activeRules = rules.filter(({ status }) => status === "active");
+  const revisions = await resourceReviewRevisions(loaded, activeRules.flatMap((rule) => retentionReviewResourceIds(rule, loaded)));
+  const usableRules = activeRules.filter((rule) => retentionRuleIsCurrent(rule, revisions, byId, loaded));
+  const proposedRules = rules.filter(retentionRuleHasCoverageProposal);
   const uses = retentionUses(loaded, program);
-  const items = rules.filter((rule) => !usableRules.includes(rule)).map((rule) => readinessItem(
+  const items = rules.map((rule) => readinessItem(
     `retention-rule-${rule.id}`,
-    "action",
-    `Review ${rule.title}`,
-    "This active retention schedule item is incomplete or is not bound to every current source revision. Review it before relying on its period or disposition behavior.",
+    usableRules.includes(rule) ? "complete" : "action",
+    usableRules.includes(rule) ? `${rule.title} proposal is ready` : `Finish ${rule.title}`,
+    usableRules.includes(rule)
+      ? "The owner completed this row and bound it to its current source revisions. It will become part of the authoritative schedule only when the complete schedule is approved."
+      : rule.status === "planned"
+        ? "Finish the type, scope, cutoff, period, disposition, sources, and owner review for this proposed row before requesting schedule approval."
+        : "This row is incomplete or is not bound to every current source revision. Review it before requesting schedule approval.",
     rule,
     {
+      coverageState: usableRules.includes(rule) ? "proposed" : "incomplete",
       sourceResourceIds: retentionReviewResourceIds(rule, loaded),
       commands: [
         `npx filegrc get ${rule.id} --mutation`,
@@ -39,31 +47,41 @@ export async function assessRetentionReadiness(loaded, program, options = {}) {
     usesByInformationType.set(use.informationTypeId, grouped);
   }
   items.push(...[...usesByInformationType].map(([informationTypeId, informationTypeUses]) => {
-    const uncoveredUses = informationTypeUses.filter((use) => (
+    const absentUses = informationTypeUses.filter((use) => (
+      !proposedRules.some((rule) => ruleCoversUse(rule, use, program))
+    ));
+    const pendingUses = informationTypeUses.filter((use) => (
       !usableRules.some((rule) => ruleCoversUse(rule, use, program))
     ));
+    const approvalPending = !options.scheduleApproved;
     const matches = usableRules.filter((rule) => (
       informationTypeUses.some((use) => ruleCoversUse(rule, use, program))
     ));
     const informationTypeTitle = byId.get(informationTypeId)?.title || informationTypeId;
-    const affectedTitles = uncoveredUses.map(({ resource }) => resource.title);
+    const affectedTitles = absentUses.map(({ resource }) => resource.title);
     const affectedSummary = affectedTitles.length > 3
       ? `${affectedTitles.slice(0, 3).join(", ")}, and ${affectedTitles.length - 3} more`
       : affectedTitles.join(", ");
     return readinessItem(
       `retention-use-${informationTypeId}`,
-      uncoveredUses.length ? "action" : "complete",
+      absentUses.length ? "action" : pendingUses.length || approvalPending ? "info" : "complete",
       `Decide retention for ${informationTypeTitle}`,
-      uncoveredUses.length
+      absentUses.length
         ? `${affectedTitles.length} in-scope ${affectedTitles.length === 1 ? "resource uses" : "resources use"} this Information Type without an active, current retention decision, including ${affectedSummary}. Management must choose the cutoff, period, disposition, and whether one program-wide rule or separate scoped rules apply.`
-        : `All ${informationTypeUses.length} in-scope ${informationTypeUses.length === 1 ? "use is" : "uses are"} covered by ${matches.map(({ title }) => title).join(", ")}.`,
+        : pendingUses.length
+          ? `Proposed rows cover every in-scope type-and-scope pair. Finish the row review, then approve the complete schedule once instead of approving these coverage checks separately.`
+          : approvalPending
+            ? "Completed row proposals cover every in-scope type-and-scope pair. Approve the complete schedule once; these derived checks are not separate approval work."
+          : `The approved schedule covers all ${informationTypeUses.length} in-scope ${informationTypeUses.length === 1 ? "use" : "uses"}.`,
       { type: "retention-schedule-item" },
       {
+        progressUnit: false,
+        coverageState: absentUses.length ? "absent" : pendingUses.length || approvalPending ? "proposed" : "approved",
         informationTypeId,
-        affectedResourceIds: uncoveredUses.map(({ resource }) => resource.id),
-        retentionScopeResourceIds: uncoveredUses.length === informationTypeUses.length
+        affectedResourceIds: absentUses.map(({ resource }) => resource.id),
+        retentionScopeResourceIds: absentUses.length === informationTypeUses.length
           ? [program.id]
-          : uncoveredUses.map(({ resource }) => resource.id),
+          : absentUses.map(({ resource }) => resource.id),
         retentionScheduleItemIds: matches.map(({ id }) => id),
         commands: [
           "npx filegrc guide retention-schedule-item --json",
@@ -75,6 +93,11 @@ export async function assessRetentionReadiness(loaded, program, options = {}) {
 
   for (const coverage of loaded.resources.filter((record) => record.type === "source-coverage" && record.status === "active")) {
     const linked = (coverage.retentionScheduleItemIds || []).map((id) => byId.get(id)).filter(Boolean);
+    const proposed = linked.filter((rule) => (
+      rule.type === "retention-schedule-item"
+      && proposedRules.includes(rule)
+      && (rule.scopeResourceIds || []).includes(coverage.id)
+    ));
     const matching = linked.filter((rule) => (
       rule.type === "retention-schedule-item"
       && rule.status === "active"
@@ -83,13 +106,17 @@ export async function assessRetentionReadiness(loaded, program, options = {}) {
     ));
     items.push(readinessItem(
       `retention-source-coverage-${coverage.id}`,
-      matching.length ? "complete" : "action",
+      matching.length && options.scheduleApproved ? "complete" : proposed.length ? "info" : "action",
       `Confirm retained evidence for ${coverage.title}`,
-      matching.length
+      matching.length && options.scheduleApproved
         ? `The source-coverage record references a current schedule item scoped to this population.`
-        : `The source-coverage record must reference an active, current schedule item whose scope includes ${coverage.id}. A draft schedule or unrelated rule does not satisfy this check.`,
+        : proposed.length
+          ? "A proposed schedule row covers this evidence source. Finish that row and approve the complete schedule before relying on it."
+          : `No proposed schedule row covers ${coverage.id}. Add the genuine type-and-scope decision before schedule approval.`,
       coverage,
       {
+        progressUnit: false,
+        coverageState: matching.length && options.scheduleApproved ? "approved" : proposed.length ? "proposed" : "absent",
         retentionScheduleItemIds: matching.map(({ id }) => id),
         commands: [
           `npx filegrc get ${coverage.id} --mutation`,
@@ -218,8 +245,11 @@ function reviewSource(loaded, entry) {
     && entry.record.workflowScope === "program"
   ) {
     const approved = structuredClone(entry.record);
-    if (approved.status === "active") approved.status = "approved";
     for (const field of [
+      "status",
+      "approverIds",
+      "approvedOn",
+      "approvedContentRevisions",
       "activationBasis",
       "activatedByIds",
       "activatedOn",
@@ -252,6 +282,14 @@ function ruleCoversUse(rule, use, program) {
   return scope.has(use.resource.id) || scope.has(program.id);
 }
 
+function retentionRuleHasCoverageProposal(rule) {
+  return Boolean(
+    (rule.informationTypeIds || []).length
+    && (rule.scopeResourceIds || []).length
+    && rule.scheduleDocumentId
+  );
+}
+
 export function retentionReviewResourceIds(rule, loaded) {
   const programUseIds = [];
   if (loaded) {
@@ -279,7 +317,7 @@ export function retentionRuleIsCurrent(rule, revisions, byId = new Map(), loaded
   if (!(rule.informationTypeIds || []).length || !(rule.scopeResourceIds || []).length || !rule.scheduleDocumentId) return false;
   const schedule = byId.get(rule.scheduleDocumentId);
   if (schedule?.type !== "document" || schedule.documentKind !== "schedule" || schedule.workflowScope !== "program" || ["superseded", "retired"].includes(schedule.status)) return false;
-  if (!(rule.ownerIds || []).length || !(rule.approvedByIds || []).length || !rule.approvedOn) return false;
+  if (!(rule.ownerIds || []).length) return false;
   if (!rule.reviewedSourceRevisions || typeof rule.reviewedSourceRevisions !== "object") return false;
   if (!retentionCutoffIsComplete(rule.cutoff) || !retentionPeriodIsComplete(rule.retentionPeriod)) return false;
   if (!["delete", "destroy", "erase", "anonymize", "transfer", "retain-permanently"].includes(rule.dispositionAction)) return false;

package/src/server.js

@@ -33,6 +33,7 @@ import {
   pushWorkspace,
   retryBrowserSync,
   runBrowserMutation,
+  synchronizeBrowserStartup,
   withGitCommandCache,
   withGitCommandDeadline
 } from "./git.js";
@@ -777,6 +778,18 @@ export async function serveWorkspace(input = process.cwd(), options = {}) {
   if (!Number.isInteger(port) || port < 0 || port > 65_535) {
     throw new Error("The server port must be an integer from 0 through 65535.");
   }
+  let startupSynchronization;
+  try {
+    startupSynchronization = await synchronizeBrowserStartup(input, {
+      allowNonAuthoritativeWrites: options.allowNonAuthoritativeWrites === true
+    });
+  } catch (error) {
+    startupSynchronization = {
+      status: "failed",
+      updated: false,
+      message: error.message
+    };
+  }
   const loaded = await loadWorkspace(input);
   getResourceDefinition(loaded.model, "workspace");
   const server = createFilegrcServer(loaded.root, {
@@ -806,7 +819,8 @@ export async function serveWorkspace(input = process.cwd(), options = {}) {
     address: server.address(),
     url: `http://${urlHost(host)}:${server.address().port}`,
     requestedPort: port,
-    usedFallbackPort
+    usedFallbackPort,
+    startupSynchronization
   };
 }
 

package/src/source-coverage.js

@@ -1,4 +1,7 @@
 import { resourceReviewRevisions, retentionReviewResourceIds, retentionRuleIsCurrent } from "./retention.js";
+import { retentionScheduleIsAuthoritative } from "./collection-review.js";
+import { modelSupports } from "../model/index.js";
+import { resolveProgram } from "./program.js";
 
 export async function sourceCoverageComplete(record, loaded, program = loaded.workspace) {
   const structuredRetention = loaded.model.resources["retention-schedule-item"];
@@ -6,6 +9,10 @@ export async function sourceCoverageComplete(record, loaded, program = loaded.wo
     return false;
   }
   if (structuredRetention) {
+    const retentionProgram = modelSupports(loaded.model, "program-scope")
+      ? resolveProgram(loaded, program?.type === "program" ? program.id : undefined)
+      : program;
+    if (!retentionScheduleIsAuthoritative(loaded, retentionProgram)) return false;
     const linkedRules = (record.retentionScheduleItemIds || []).map((id) => (
       loaded.resources.find((resource) => resource.id === id && resource.type === "retention-schedule-item")
     ));

package/src/state.js

@@ -347,6 +347,8 @@ function serializeCollectionReviewAssessment(assessment) {
     status: assessment.status,
     complete: assessment.complete,
     message: assessment.message,
+    ...(assessment.recordProposals ? { recordProposals: assessment.recordProposals } : {}),
+    ...(assessment.incompleteRecordProposals ? { incompleteRecordProposals: assessment.incompleteRecordProposals } : {}),
     ...(assessment.eligibleReviewerIds ? { eligibleReviewerIds: assessment.eligibleReviewerIds } : {}),
     ...(assessment.reviewerConflictIds ? { reviewerConflictIds: assessment.reviewerConflictIds } : {}),
     ...(assessment.approvalIssues ? { approvalIssues: assessment.approvalIssues } : {})

package/src/validate.js

@@ -3,7 +3,7 @@ import { createReadStream } from "node:fs";
 import { readFile, stat } from "node:fs/promises";
 import { performance } from "node:perf_hooks";
 import { getResourceDefinition, modelSupports } from "../model/index.js";
-import { scopedCollectionRecords, selectScopedCollectionRecords } from "./collection-scope.js";
+import { collectionRecordProposals, retentionScheduleReviewScope, scopedCollectionRecords, selectScopedCollectionRecords } from "./collection-scope.js";
 import {
   collectionRevision,
   collectionRevisionMatches
@@ -1224,6 +1224,10 @@ function sameRouteProposal(proposal, finalized) {
   return [...keys].every((key) => allowed.has(key) || JSON.stringify(proposal[key]) === JSON.stringify(finalized[key]));
 }
 
+function sameStringIds(left = [], right = []) {
+  return JSON.stringify([...left].sort()) === JSON.stringify([...right].sort());
+}
+
 function validateTimestampTimezone(value, timezone, path, diagnostics, label) {
   if (!value || !timezone) return;
   const source = String(value);
@@ -1252,10 +1256,19 @@ function validateCollectionReview(record, loaded, byId, path, diagnostics) {
   const program = modelSupports(model, "program-scope")
     ? (record.scopeResourceIds || []).map((id) => byId.get(id)).find(({ type } = {}) => type === "program")
     : null;
+  const workspaceWideRetentionReview = record.resourceType === "retention-schedule-item"
+    && modelSupports(model, "retention-schedule-approval");
+  const retentionScope = workspaceWideRetentionReview ? retentionScheduleReviewScope(loaded) : null;
   const recordCount = scopedCollectionRecords(loaded, record.resourceType, program).length;
   const currentPopulationIds = scopedCollectionRecords(loaded, record.resourceType, program)
     .map(({ id }) => id)
     .sort();
+  const incompleteProposals = collectionRecordProposals(
+    loaded,
+    record.resourceType,
+    scopedCollectionRecords(loaded, record.resourceType, program),
+    program
+  ).filter(({ complete }) => !complete);
   const currentRevision = collectionRevision(loaded, record.resourceType, {
     program,
     authoritativeSourceId: record.decision === "externally-managed"
@@ -1274,6 +1287,20 @@ function validateCollectionReview(record, loaded, byId, path, diagnostics) {
       currentRevision
     }
   );
+  if (current && workspaceWideRetentionReview && !sameStringIds(record.scopeResourceIds, retentionScope.programIds)) {
+    diagnostics.push(error(
+      "invalid-retention-schedule-review-scope",
+      path,
+      "The current Data Retention Schedule review must cover every active Program as one workspace-wide approval."
+    ));
+  }
+  if (current && incompleteProposals.length) {
+    diagnostics.push(error(
+      "incomplete-collection-review-proposals",
+      path,
+      `Complete every ${configuration.title.toLowerCase()} record proposal before the collection review. Remaining: ${incompleteProposals.map(({ title }) => title).join(", ")}.`
+    ));
+  }
   if (current && record.resourceType === "control") {
     const controls = scopedCollectionRecords(loaded, "control", program);
     const controlIds = new Set(controls.map(({ id }) => id));
@@ -1299,8 +1326,11 @@ function validateCollectionReview(record, loaded, byId, path, diagnostics) {
   }
   if (current && record.resourceType === "retention-schedule-item" && modelSupports(model, "retention-schedule-approval")) {
     const rows = scopedCollectionRecords(loaded, record.resourceType, program);
-    for (const issue of retentionScheduleApprovalIssues(loaded, program || {}, rows, {
-      informationTypesReviewed: collectionReviewIsCurrent(loaded, "information-type", program)
+    for (const issue of retentionScheduleApprovalIssues(loaded, retentionScope, rows, {
+      informationTypesReviewed: retentionScope.programIds.every((id) => (
+        collectionReviewIsCurrent(loaded, "information-type", byId.get(id))
+      )),
+      approvalReview: record
     })) {
       diagnostics.push(error(issue.code, path, issue.message));
     }

package/src/web.js

@@ -639,7 +639,11 @@ function renderRetentionSchedulePage(main, params = new URLSearchParams()) {
   const documentEntry = documentEntries.length === 1 ? documentEntries[0] : null;
   const rows = resourcesOfType("retention-schedule-item")
     .sort((left, right) => left.record.title.localeCompare(right.record.title));
-  const activeRows = rows.filter(({ record }) => record.status === "active").length;
+  const completedProposalIds = new Set(state.programReadiness?.stages
+    ?.find(({ id }) => id === "policies")
+    ?.items.filter(({ id, status }) => id.startsWith("retention-rule-") && status === "complete")
+    .map(({ id }) => id.slice("retention-rule-".length)) || []);
+  const proposedRows = rows.filter(({ record }) => completedProposalIds.has(record.id)).length;
   const documentReadiness = documentEntry ? retentionScheduleDocumentReadiness(documentEntry.record.id) : null;
   const documentReady = documentEntries.length === 1 && documentReadiness?.status === "complete";
   const documentAction = documentEntry
@@ -656,7 +660,10 @@ function renderRetentionSchedulePage(main, params = new URLSearchParams()) {
         const cutoff = retentionCutoffLabel(record.cutoff);
         const period = retentionPeriodLabel(record.retentionPeriod);
         const action = record.dispositionAction ? properCase(record.dispositionAction) : "Not selected";
-        return '<tr data-retention-row data-history="' + (["superseded", "retired"].includes(record.status) ? "true" : "false") + '"><td data-label="Rule" data-primary-field><a class="record-title" href="#/resource/retention-schedule-item/' + encodeURIComponent(record.id) + '?stage=policies">' + esc(record.title) + '</a><small>' + esc(record.description || record.id) + '</small></td><td data-label="Information types">' + esc(informationTypes) + '</td><td data-label="Scope">' + esc(scope) + '</td><td data-label="Retention"><strong>' + esc(period) + '</strong><small>From ' + esc(cutoff) + '</small></td><td data-label="Disposition">' + esc(action) + '</td><td data-label="Status">' + formatValue(displayStatus(record), "status", record.type, true) + '</td><td data-label="Next action">' + recordWorkflowCell("retention-schedule-item", entry, "?stage=policies") + '</td></tr>';
+        const status = record.status === "active" && state.collectionReviews?.["retention-schedule-item"]?.status !== "current"
+          ? "proposed"
+          : displayStatus(record);
+        return '<tr data-retention-row data-history="' + (["superseded", "retired"].includes(record.status) ? "true" : "false") + '"><td data-label="Rule" data-primary-field><a class="record-title" href="#/resource/retention-schedule-item/' + encodeURIComponent(record.id) + '?stage=policies">' + esc(record.title) + '</a><small>' + esc(record.description || record.id) + '</small></td><td data-label="Information types">' + esc(informationTypes) + '</td><td data-label="Scope">' + esc(scope) + '</td><td data-label="Retention"><strong>' + esc(period) + '</strong><small>From ' + esc(cutoff) + '</small></td><td data-label="Disposition">' + esc(action) + '</td><td data-label="Status">' + formatValue(status, "status", record.type, true) + '</td><td data-label="Next action">' + recordWorkflowCell("retention-schedule-item", entry, "?stage=policies") + '</td></tr>';
       }).join("")
     : '<tr><td colspan="7">' + empty("No retention rules are needed until an actual information use requires one.") + '</td></tr>';
   const add = state.readOnly ? "" : '<button class="button primary" type="button" data-add-retention-row>Add schedule row</button>';
@@ -665,12 +672,12 @@ function renderRetentionSchedulePage(main, params = new URLSearchParams()) {
   const showHistory = params.get("history") === "1";
   const tableTools = '<div class="retention-table-tools"><label><span class="sr-only">Filter schedule rows</span><input type="search" data-retention-search placeholder="Filter schedule rows" value="' + esc(initialFilter) + '"></label><label class="history-toggle"><input type="checkbox" data-retention-history ' + (showHistory ? "checked" : "") + '> Show retired</label></div>';
   main.innerHTML = '<div class="page retention-schedule-page"><nav class="breadcrumbs"><a href="#/stage/policies">Step 2</a><span>/</span><span>Data Retention Schedule</span></nav>' +
-    '<div class="page-intro"><div><p class="kicker">Step 2</p><div class="page-title-line"><h2>Data Retention Schedule</h2>' + guideTrigger + '</div><p>Define the retention rules management has approved. Step 3 checks whether implemented systems and evidence sources follow them.</p></div><div class="actions">' + documentAction + add + '</div></div>' + resourceGuide("retention-schedule-item") +
-    '<div class="retention-summary"><div><span class="retention-summary-label">Governing document</span>' + documentSummary + '</div><div><span class="retention-summary-label">Schedule revision</span><span><strong>' + activeRows + ' active ' + pluralize("row", activeRows) + '</strong><small>Document and rows are approved together</small></span><span class="badge ' + (state.collectionReviews?.["retention-schedule-item"]?.status === "current" ? "good" : "warn") + '">' + (state.collectionReviews?.["retention-schedule-item"]?.status === "current" ? "Approved" : "Approval needed") + '</span></div></div>' +
-    '<section class="retention-rows"><div class="section-head"><div><p class="kicker">Structured schedule</p><h2>Schedule rows</h2><p>Add a row when an Information Type and its operational scope need a distinct cutoff, period, or disposition rule.</p></div>' + tableTools + '</div><div class="record-table-wrap"><table class="record-table"><thead><tr><th>Rule</th><th>Information types</th><th>Scope</th><th>Retention</th><th>Disposition</th><th>Status</th><th>Next action</th></tr></thead><tbody>' + rowHtml + '</tbody></table></div><p class="retention-filter-empty" data-retention-empty hidden>No schedule rows match this filter.</p><p class="retention-row-count" data-retention-count aria-live="polite"></p></section>' +
+    '<div class="page-intro"><div><p class="kicker">Step 2</p><div class="page-title-line"><h2>Data Retention Schedule</h2>' + guideTrigger + '</div><p>Owners finish each proposed retention row first. A separate reviewer then approves the complete document and all proposed rows once.</p></div><div class="actions">' + documentAction + add + '</div></div>' + resourceGuide("retention-schedule-item") +
+    '<div class="retention-summary"><div><span class="retention-summary-label">Governing document</span>' + documentSummary + '</div><div><span class="retention-summary-label">Schedule revision</span><span><strong>' + proposedRows + ' completed ' + pluralize("proposal", proposedRows) + '</strong><small>Final approval follows every row proposal</small></span><span class="badge ' + (state.collectionReviews?.["retention-schedule-item"]?.status === "current" ? "good" : "warn") + '">' + (state.collectionReviews?.["retention-schedule-item"]?.status === "current" ? "Approved" : "Approval needed") + '</span></div></div>' +
+    '<section class="retention-rows"><div class="section-head"><div><p class="kicker">Structured schedule</p><h2>Schedule rows</h2><p>Add a row when an Information Type and its operational scope need a distinct cutoff, period, or disposition rule.</p></div>' + tableTools + '</div><div class="record-table-wrap"><table class="record-table"><thead><tr><th>Rule</th><th>Information types</th><th>Scope</th><th>Retention</th><th>Disposition</th><th>Status</th><th>Next action</th></tr></thead><tbody>' + rowHtml + '</tbody></table></div><p class="retention-filter-empty" data-retention-empty hidden>No schedule rows match this filter.</p><p class="retention-row-count" data-retention-count aria-live="polite"></p><nav class="pagination retention-pagination" aria-label="Data Retention Schedule pages" hidden><button class="button" type="button" data-retention-page="previous">Previous</button><span class="page-status" aria-live="polite"></span><button class="button" type="button" data-retention-page="next">Next</button></nav></section>' +
     renderRetentionScheduleIssues() + collectionReviewPanel("retention-schedule-item", true) + '</div>';
   resourceGuideCleanup = setupResourceGuide(main);
-  wireRetentionScheduleTable(rows.length);
+  wireRetentionScheduleTable(rows.length, Number(params.get("page")) || 1);
   main.querySelector("[data-review-collection]")?.addEventListener("click", () => openCollectionReviewDialog("retention-schedule-item"));
   main.querySelector("[data-add-retention-document]")?.addEventListener("click", () => openEditor("document", null, {
     seed: {
@@ -708,38 +715,54 @@ function openRetentionScheduleItemEditor(seed = {}) {
       ...(scheduleDocuments.length === 1 ? { scheduleDocumentId: scheduleDocuments[0].record.id } : {}),
       ...seed
     },
-    description: "Define one retention decision. Keep it planned until its scope, cutoff, period, disposition, sources, and approval are complete.",
+    description: "Define one retention decision. Keep it planned until its scope, cutoff, period, disposition, sources, owner review, and current revision bindings are complete.",
     saveLabel: "Save schedule row"
   });
 }
 
-function wireRetentionScheduleTable(total) {
+function wireRetentionScheduleTable(total, initialPage = 1) {
   const table = root.querySelector(".retention-rows");
   if (!table) return;
   const search = table.querySelector("[data-retention-search]");
   const historyToggle = table.querySelector("[data-retention-history]");
   const count = table.querySelector("[data-retention-count]");
   const noResults = table.querySelector("[data-retention-empty]");
+  const pagination = table.querySelector(".retention-pagination");
+  const pageStatus = pagination.querySelector(".page-status");
+  const previous = pagination.querySelector('[data-retention-page="previous"]');
+  const next = pagination.querySelector('[data-retention-page="next"]');
+  let pageNumber = Number.isInteger(initialPage) && initialPage > 0 ? initialPage : 1;
   const filter = () => {
     const query = search.value.trim().toLowerCase();
-    let visible = 0;
-    table.querySelectorAll("[data-retention-row]").forEach((row) => {
-      const show = (historyToggle.checked || row.dataset.history !== "true")
-        && (!query || row.textContent.toLowerCase().includes(query));
-      row.hidden = !show;
-      if (show) visible += 1;
-    });
-    noResults.hidden = visible !== 0 || total === 0;
-    count.textContent = visible + " of " + total + " " + pluralize("row", total);
+    const filtered = [...table.querySelectorAll("[data-retention-row]")].filter((row) => (
+      (historyToggle.checked || row.dataset.history !== "true")
+        && (!query || row.textContent.toLowerCase().includes(query))
+    ));
+    const totalPages = Math.max(1, Math.ceil(filtered.length / LIST_PAGE_SIZE));
+    pageNumber = Math.min(pageNumber, totalPages);
+    const start = (pageNumber - 1) * LIST_PAGE_SIZE;
+    const visible = new Set(filtered.slice(start, start + LIST_PAGE_SIZE));
+    table.querySelectorAll("[data-retention-row]").forEach((row) => { row.hidden = !visible.has(row); });
+    noResults.hidden = filtered.length !== 0 || total === 0;
+    const firstVisible = filtered.length ? start + 1 : 0;
+    const lastVisible = Math.min(start + LIST_PAGE_SIZE, filtered.length);
+    count.textContent = firstVisible + "–" + lastVisible + " of " + filtered.length + " " + pluralize("row", filtered.length) + (filtered.length === total ? "" : " · " + total + " total");
+    pagination.hidden = totalPages === 1;
+    pageStatus.textContent = "Page " + pageNumber + " of " + totalPages;
+    previous.disabled = pageNumber === 1;
+    next.disabled = pageNumber === totalPages;
   };
   const updateLocation = () => {
     const params = new URLSearchParams();
     if (search.value.trim()) params.set("q", search.value.trim());
     if (historyToggle.checked) params.set("history", "1");
+    if (pageNumber > 1) params.set("page", String(pageNumber));
     history.replaceState(null, "", "#/retention-schedule" + (params.size ? "?" + params : ""));
   };
-  search.addEventListener("input", () => { filter(); updateLocation(); });
-  historyToggle.addEventListener("change", () => { filter(); updateLocation(); });
+  search.addEventListener("input", () => { pageNumber = 1; filter(); updateLocation(); });
+  historyToggle.addEventListener("change", () => { pageNumber = 1; filter(); updateLocation(); });
+  previous.addEventListener("click", () => { pageNumber -= 1; filter(); updateLocation(); });
+  next.addEventListener("click", () => { pageNumber += 1; filter(); updateLocation(); });
   filter();
 }
 
@@ -759,9 +782,16 @@ function renderRetentionScheduleIssues() {
 }
 
 function retentionScheduleDocumentReadiness(documentId) {
-  return state.programReadiness?.stages
-    ?.find(({ id }) => id === "policies")
-    ?.items.find(({ id }) => id === "document-approval-" + documentId) || null;
+  const documentIssueCodes = new Set([
+    "missing-retention-schedule-document",
+    "multiple-retention-schedule-documents",
+    "incomplete-retention-schedule-document"
+  ]);
+  const issue = state.collectionReviews?.["retention-schedule-item"]?.approvalIssues
+    ?.find(({ code }) => documentIssueCodes.has(code));
+  return issue
+    ? { status: "action", message: issue.message }
+    : { status: "complete", message: "The document proposal is complete. Final approval follows all completed row proposals." };
 }
 
 function referenceTitle(id) {
@@ -1162,27 +1192,34 @@ function collectionReviewPanel(type, force = false) {
   const current = assessment.status === "current";
   const scheduleReview = type === "retention-schedule-item" && modelSupports("retention-schedule-approval");
   const scheduleBlocker = scheduleReview ? retentionScheduleApprovalBlocker() : null;
+  const proposalBlocker = assessment.incompleteRecordProposals?.length
+    ? "Complete " + assessment.incompleteRecordProposals.length + " record " + (assessment.incompleteRecordProposals.length === 1 ? "proposal" : "proposals") + " before the collection review."
+    : null;
+  const reviewBlocker = scheduleBlocker || proposalBlocker;
   const needsFirstRecord = collectionNeedsFirstRecord(type);
   const reviewerNames = (assessment.review?.reviewedByIds || [])
     .map((id) => state.resources.find(({ record }) => record.id === id)?.record.title || id);
   const reviewNote = assessment.review?.rationale
     ? " Note: " + esc(assessment.review.rationale)
     : "";
-  const reviewSummary = current && !scheduleBlocker
+  const reviewSummary = current && !reviewBlocker
     ? '<p class="collection-review-result"><strong>' + esc(properCase(assessment.review.decision)) + '</strong><span>Reviewed ' + esc(formatCalendarDate(assessment.review.reviewedOn)) + (reviewerNames.length ? " by " + esc(reviewerNames.join(", ")) : "") + "." + reviewNote + '</span></p>'
-    : '<p class="collection-review-result"><strong>' + (scheduleBlocker ? "Complete schedule first" : needsFirstRecord ? "Records required" : assessment.status === "stale" ? "Review again" : "Review required") + '</strong><span>' + esc(scheduleBlocker || assessment.message) + '</span></p>';
-  const compactReviewSummary = current && !scheduleBlocker
+    : '<p class="collection-review-result"><strong>' + (scheduleBlocker ? "Complete schedule first" : proposalBlocker ? "Complete proposals first" : needsFirstRecord ? "Records required" : assessment.status === "stale" ? "Review again" : "Review required") + '</strong><span>' + esc(reviewBlocker || assessment.message) + '</span></p>';
+  const compactReviewSummary = current && !reviewBlocker
     ? '<p class="collection-review-result"><strong>' + esc(properCase(assessment.review.decision)) + '</strong><span>Reviewed ' + esc(formatCalendarDate(assessment.review.reviewedOn)) + (reviewerNames.length ? " by " + esc(reviewerNames.join(", ")) : "") + ".</span></p>"
     : reviewSummary;
   const action = state.readOnly
     ? ""
-    : scheduleBlocker
-      ? '<button class="button" type="button" disabled title="' + esc(scheduleBlocker) + '">Review and approve schedule</button>'
+    : reviewBlocker
+      ? '<button class="button" type="button" disabled title="' + esc(reviewBlocker) + '">' + (scheduleReview ? "Review and approve schedule" : "Review and confirm") + '</button>'
     : needsFirstRecord
       ? '<a class="button primary" href="#/resources/' + encodeURIComponent(type) + '?new=1">Add first ' + esc(state.model.resources[type].title.toLowerCase()) + '</a>'
       : '<button class="button ' + (current ? "" : "primary") + '" type="button" data-review-collection="' + esc(type) + '">' + (current ? scheduleReview ? "Approve a new revision" : "Review again" : scheduleReview ? "Review and approve schedule" : "Review and confirm") + '</button>';
-  const status = scheduleBlocker ? "Not ready" : current ? "Reviewed" : needsFirstRecord ? "Records required" : assessment.status === "stale" ? "Stale" : "Review required";
-  const details = '<details ' + (current ? 'class="collection-review-details"' : "open") + '><summary>' + (current ? scheduleReview ? "Show approved revision" : "Show scope confirmation" : "What to review") + '</summary><div class="collection-review-detail-content"><div class="collection-review-head"><div><p class="kicker">' + (scheduleReview ? "Schedule approval" : "Scope confirmation") + '</p><h3>' + esc(configuration.title) + '</h3><p>' + esc(configuration.description) + '</p></div><span class="badge ' + (current ? "good" : "warn") + '">' + status + '</span></div><ul>' + configuration.reviewPoints.map((point) => '<li>' + esc(point) + '</li>').join("") + '</ul>' + (current ? reviewSummary : "") + '</div></details>';
+  const status = reviewBlocker ? "Not ready" : current ? "Reviewed" : needsFirstRecord ? "Records required" : assessment.status === "stale" ? "Stale" : "Review required";
+  const proposalSummary = assessment.recordProposals?.length
+    ? '<p class="collection-review-proposal-summary"><strong>' + assessment.recordProposals.filter(({ complete }) => complete).length + ' of ' + assessment.recordProposals.length + ' record proposals complete.</strong> The collection review follows every proposal.</p>'
+    : "";
+  const details = '<details ' + (current ? 'class="collection-review-details"' : "open") + '><summary>' + (current ? scheduleReview ? "Show approved revision" : "Show scope confirmation" : "What to review") + '</summary><div class="collection-review-detail-content"><div class="collection-review-head"><div><p class="kicker">' + (scheduleReview ? "Schedule approval" : "Scope confirmation") + '</p><h3>' + esc(configuration.title) + '</h3><p>' + esc(configuration.description) + '</p></div><span class="badge ' + (current ? "good" : "warn") + '">' + status + '</span></div>' + proposalSummary + '<ul>' + configuration.reviewPoints.map((point) => '<li>' + esc(point) + '</li>').join("") + '</ul>' + (current ? reviewSummary : "") + '</div></details>';
   const summary = current
     ? '<div class="collection-review-current-row"><div class="collection-review-complete-summary"><span class="kicker">' + (scheduleReview ? "Approved schedule" : "Scope confirmation") + '</span>' + compactReviewSummary + '</div>' + details + action + '</div>'
     : details;
@@ -1201,15 +1238,8 @@ function retentionScheduleApprovalBlocker() {
   const document = documents.length === 1 ? documents[0] : null;
   if (documents.length > 1) return "Keep exactly one current program Data Retention Schedule document before approval.";
   if (!document) return "Add the governing Data Retention Schedule document first.";
-  if (!["approved", "active"].includes(document.status) || !document.approvedOn || !document.approvedContentRevisions) {
-    return "Approve the governing document and bind its exact Markdown revision first.";
-  }
-  const documentReadiness = retentionScheduleDocumentReadiness(document.id);
-  if (documentReadiness?.status !== "complete") {
-    return documentReadiness?.message || "Complete the governing document before approving the schedule.";
-  }
-  const planned = resourcesOfType("retention-schedule-item").find(({ record }) => record.status === "planned")?.record;
-  if (planned) return "Complete or retire the planned row: " + planned.title + ".";
+  const approvalIssue = state.collectionReviews?.["retention-schedule-item"]?.approvalIssues?.[0];
+  if (approvalIssue) return approvalIssue.message;
   const incomplete = retentionReviewItems("policies", false).find((item) => (
     item.status === "action" && item.id !== "collection-review-retention-schedule-item"
   ));
@@ -4752,6 +4782,9 @@ function openEditor(type, entry = null, options = {}) {
     Array.isArray(group) ? { fields: group } : group
   ));
   const oneOf = new Set(oneOfGroups.flatMap((group) => group.fields || []).filter((name) => !name.startsWith("$markdown:")));
+  const hiddenFields = type === "retention-schedule-item" && modelSupports("retention-schedule-approval")
+    ? new Set(["approvedByIds", "approvedOn"])
+    : new Set();
   const activeOneOf = new Set(oneOfGroups
     .filter((group) => !group.when || conditionMatches(record, group.when))
     .flatMap((group) => group.fields || []));
@@ -4765,6 +4798,7 @@ function openEditor(type, entry = null, options = {}) {
     ...oneOf
   ])].filter((name) => (
     !["id", "type"].includes(name)
+    && !hiddenFields.has(name)
     && fields[name]
     && !(options.occurrenceReview && ["members", "expectedCount", "completedCount", "conclusion"].includes(name))
   ));

package/src/workflow.js

@@ -3,6 +3,7 @@ import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { modelSupports } from "../model/index.js";
 import { applicabilityReviewIsCurrent } from "./applicability-scope.js";
+import { retentionScheduleIsAuthoritative } from "./collection-review.js";
 import { assessRequiredAppointments } from "./appointments.js";
 import { assessSourceCoverageReadiness } from "./source-coverage.js";
 import { coverageEnd, coverageStart } from "./coverage.js";
@@ -918,6 +919,7 @@ async function auditLifecycleFindings(loaded, audits, program) {
   const byId = new Map(loaded.resources.map((record) => [record.id, record]));
   const retentionRules = loaded.resources.filter((record) => record.type === "retention-schedule-item");
   const retentionRevisions = await resourceReviewRevisions(loaded, retentionRules.flatMap((rule) => retentionReviewResourceIds(rule, loaded)));
+  const retentionScheduleApproved = retentionScheduleIsAuthoritative(loaded, target);
   const findings = [];
   for (const audit of audits) {
     if (!(audit.controlIds || []).length) {
@@ -1045,7 +1047,7 @@ async function auditLifecycleFindings(loaded, audits, program) {
         `${records.length} ${noun} remain open, so this engagement cannot be treated as closed.`
       ));
     }
-    const linkedRetentionCurrent = (audit.retentionScheduleItemIds || []).some((id) => {
+    const linkedRetentionCurrent = retentionScheduleApproved && (audit.retentionScheduleItemIds || []).some((id) => {
       const rule = byId.get(id);
       return rule?.type === "retention-schedule-item"
         && rule.status === "active"