openxiangda-contracts 2.47.0 → 2.69.1

package/dist/types.d.ts

@@ -1,14 +1,14 @@
-import { PLATFORM_CAPABILITY_CONTRACT_VERSIONS } from "./native-version.js";
-export { OPENXIANGDA_COMPILER_CONTRACT_VERSION, PLATFORM_CAPABILITY_CONTRACT_VERSIONS } from "./native-version.js";
-import type { DataResourceSurface } from "./surface.js";
+import { PLATFORM_CAPABILITY_CONTRACT_VERSIONS, OPENXIANGDA_CONTRACT_VERSION } from "./native-version.js";
+export { OPENXIANGDA_COMPILER_CONTRACT_VERSION, PLATFORM_CAPABILITY_CONTRACT_VERSIONS, OPENXIANGDA_CONTRACT_VERSION } from "./native-version.js";
+import type { DataFieldSurface, DataResourceSurface } from "./surface.js";
 import type { CascadePathValue, DataFieldOption, DateRangeValue, DepartmentReferenceValue, LabeledValue, ManagedImageValue, ResourceReferenceValue, StableAddressValue, StableLocationValue, StableSignatureValue, UserReferenceValue } from "./field-values.js";
+import type { DataFieldUserCandidates } from './native-compiler/user-candidates.js';
 import type { DataFieldResourceSource } from "./references.js";
 import type { WorkflowBusinessData } from "./workflow-summary.js";
 import type { WorkflowBusinessDetail } from "./workflow-detail.js";
 import type { WorkflowBusinessStepNode, WorkflowBusinessStepResult } from './native-compiler/workflow-business-step.js';
 import type { AppWorkflowLaunchContextDeclaration, AppWorkflowLaunchInputBindingDeclaration, AppWorkflowNamedOperationOutputDeclaration } from "./native.js";
 import { type CliProtocolCapabilities } from "./cli.js";
-export declare const OPENXIANGDA_CONTRACT_VERSION: "2.0.0-alpha.5";
 export declare const SCHEMA_VERSIONS: {
     readonly cliEvent: "openxiangda.cli-event/v1";
     readonly workspaceTemplateBinding: "openxiangda.workspace-template-binding/v1";
@@ -53,7 +53,10 @@ export declare const SCHEMA_VERSIONS: {
     readonly nativeScopeValueResolveRequest: "openxiangda.native-scope-value-resolve-request/v2";
     readonly nativeScopeValuePage: "openxiangda.native-scope-value-page/v2";
     readonly dataFieldSourceQuery: "openxiangda.data-field-source-query/v2";
+    readonly workflowTaskFieldSourceQuery: "openxiangda.workflow-task-field-source-query/v2";
     readonly dataFieldSourcePage: "openxiangda.data-field-source-page/v2";
+    readonly userCandidatesQuery: "openxiangda.user-candidates-query/v2";
+    readonly userCandidatesPage: "openxiangda.user-candidates-page/v2";
     readonly dataRef: "openxiangda.data-ref/v2";
     readonly dataResource: "openxiangda.data-resource/v2";
     readonly dataQuery: "openxiangda.data-query/v2";
@@ -106,6 +109,7 @@ export declare const SCHEMA_VERSIONS: {
     readonly workflowAssigneeRequest: "openxiangda.workflow-assignee-request/v2.1";
     readonly workflowAssigneeResponse: "openxiangda.workflow-assignee-response/v2";
     readonly businessProcessCommit: "openxiangda.business-process.commit/v2";
+    readonly businessProcessCommandWithData: "openxiangda.business-process-command-with-data/v2";
     readonly standardProcessCommit: "openxiangda.standard-process.commit/v2";
     readonly businessProcessCommand: "openxiangda.business-process.command/v2";
     readonly businessProcessReceipt: "openxiangda.business-process-receipt/v2";
@@ -324,6 +328,8 @@ export interface CurrentInitiatorDirectorySnapshot {
     userId: string;
     displayName?: string;
     employeeNumber?: string | null;
+    /** Only present when a verified current-initiator operation declares phone. */
+    phone?: string | null;
     primaryDepartment?: {
         value: string;
         label: string;
@@ -335,7 +341,7 @@ export interface CurrentInitiatorDirectorySnapshot {
     snapshotRevision: Sha256Digest;
     resolvedAt: IsoDateTime;
 }
-export interface SelectedUserDirectorySnapshot extends Omit<CurrentInitiatorDirectorySnapshot, "schemaVersion"> {
+export interface SelectedUserDirectorySnapshot extends Omit<CurrentInitiatorDirectorySnapshot, "schemaVersion" | "phone"> {
     schemaVersion: "openxiangda.selected-user-directory-snapshot/v2";
 }
 /** Query hints only; revalidate the selected member in the committing transaction. */
@@ -422,6 +428,16 @@ export interface NativeScopeDimensionApplicability {
     roleCodes: string[];
     unrestrictedRoleCodes: string[];
     rules: NativeScopeDimensionApplicabilityRule[];
+    /** Scoped candidate fields are independent of CRUD policy applicability. */
+    candidateFields?: Array<{
+        dataLogicalRevisionId: string;
+        resourceCode: string;
+        fieldCode: string;
+        roleCode: string;
+        operation: string;
+    }>;
+    /** Effective scoped workflow duties; does not grant ordinary data access. */
+    workflowBindings?: Array<Pick<WorkflowRoleReference, 'workflowCode' | 'nodeId' | 'roleCode' | 'definitionVersion' | 'bindingVersion' | 'configurationRevision' | 'source' | 'contexts'>>;
 }
 export interface NativeAuthorizationManagementScopeDimension {
     code: string;
@@ -1006,6 +1022,13 @@ export interface NativeScopeValuePage {
 export interface DataFieldSourceLaunchBinding {
     workflowCode: string;
     operationCode: string;
+    /** Named create's owned root subtable; host resource is its child. */
+    subtableFieldCode?: string;
+}
+export interface DataRecordEditInput {
+    operationCode: string;
+    recordId: string;
+    expectedRevision: number;
 }
 export interface DataFieldSourceQuery {
     schemaVersion: typeof SCHEMA_VERSIONS.dataFieldSourceQuery;
@@ -1016,6 +1039,34 @@ export interface DataFieldSourceQuery {
     bindings?: Record<string, unknown>;
     /** 正式流程发起意图；平台核验字段绑定和动作能力，目标仍按当前用户读取。 */
     launch?: DataFieldSourceLaunchBinding;
+    action?: DataRecordEditInput;
+}
+/** 当前任务表单的资源引用输入上下文，不授予普通 CRUD 写入权限。 */
+export interface WorkflowTaskSourceBinding {
+    taskId: string;
+    expectedRevision: number;
+    expectedTaskVersion: number;
+    subtable?: WorkflowTaskFieldSourceQuery['subtable'];
+}
+export interface WorkflowTaskFieldSourceQuery {
+    schemaVersion: typeof SCHEMA_VERSIONS.workflowTaskFieldSourceQuery;
+    expectedRevision: number;
+    expectedTaskVersion: number;
+    keyword?: string;
+    cursor?: string;
+    bindings?: Record<string, unknown>;
+    /** Current owned row, qualified by the fixed task page; never child CRUD. */
+    subtable?: {
+        fieldCode: string;
+        row: {
+            kind: 'persisted';
+            id: string;
+            expectedRevision: number;
+        } | {
+            kind: 'new';
+            key: string;
+        };
+    };
 }
 export interface DataFieldSourcePage {
     schemaVersion: typeof SCHEMA_VERSIONS.dataFieldSourcePage;
@@ -1027,6 +1078,52 @@ export interface DataFieldSourcePage {
     items: ResourceReferenceValue[];
     nextCursor: string | null;
 }
+/** Candidate scope is owned by the field declaration and saved record/task. */
+export interface UserCandidateSearch {
+    schemaVersion: typeof SCHEMA_VERSIONS.userCandidatesQuery;
+    keyword?: string;
+    cursor?: string;
+    selectedIds?: string[];
+}
+export type DataFieldUserCandidateQuery = UserCandidateSearch & {
+    launch?: DataFieldSourceLaunchBinding;
+    action?: DataRecordEditInput;
+} & ({
+    operation: 'create';
+    recordId?: never;
+    expectedRevision?: never;
+    scopeValue?: string;
+} | {
+    operation: 'update';
+    recordId: string;
+    expectedRevision: number;
+    scopeValue?: never;
+});
+export interface WorkflowTaskUserCandidateQuery extends UserCandidateSearch {
+    expectedRevision: number;
+    expectedTaskVersion: number;
+}
+export interface UserCandidatePage {
+    schemaVersion: typeof SCHEMA_VERSIONS.userCandidatesPage;
+    resourceCode: string;
+    fieldCode: string;
+    environmentHeadRevision: number;
+    recordRevision?: number;
+    evaluatedAt: IsoDateTime;
+    items: Array<{
+        value: string;
+        label: string;
+    }>;
+    selected: Array<{
+        value: string;
+        label: string;
+        status: 'valid';
+    } | {
+        value: string;
+        status: 'invalid';
+    }>;
+    nextCursor: string | null;
+}
 export interface DataRef {
     schemaVersion: typeof SCHEMA_VERSIONS.dataRef;
     appCode: string;
@@ -1047,6 +1144,8 @@ export interface DataFieldDefinition {
     options?: DataFieldOption[];
     /** Dynamic same-application source for resource-reference fields. */
     source?: DataFieldResourceSource;
+    /** Authoritative role membership constraint for user references. */
+    userCandidates?: DataFieldUserCandidates;
     maxLength?: number;
     precision?: number;
     scale?: number;
@@ -1072,6 +1171,7 @@ export interface DataFieldDefinition {
         resourceCode: string;
         foreignKey: string;
         orderField: string;
+        minRows?: number;
         maxRows?: number;
     };
 }
@@ -1121,6 +1221,10 @@ export type DataUniqueKeyCondition = {
     fieldCode: string;
     operator: 'in' | 'notIn';
     values: string[];
+} | {
+    fieldCode: string;
+    operator: 'eq' | 'ne';
+    value: boolean;
 };
 export interface DataUniqueKey {
     code: string;
@@ -1143,6 +1247,23 @@ export interface DataResource {
     invariants?: DataResourceInvariant[];
     decimalReservationLifecycle?: DataDecimalReservationLifecycle;
     uniqueKeys?: DataUniqueKey[];
+    /** Explicit business-viewer history policy; absence and empty read disable it. */
+    workflowHistory?: {
+        read: string[];
+    };
+    /** Independent same-membership record printing policy; omission disables it. */
+    recordPrint?: {
+        read: string[];
+    };
+    /** Independent same-membership collaboration; omission disables comments. */
+    recordComments?: {
+        read: string[];
+        create: string[];
+    };
+    /** Explicit same-membership authority to delete a record and its workflow. */
+    recordDeletion?: {
+        delete: string[];
+    };
     /** Default UI metadata projected with the authoritative Data Resource. */
     surface?: DataResourceSurface;
     capabilities: {
@@ -1158,6 +1279,74 @@ export interface DataResource {
     createdAt?: IsoDateTime;
     updatedAt?: IsoDateTime;
 }
+/** Platform-owned append-only comment, independent of business edits and workflow opinions. */
+/** Explicit record permission; opaque previews never expose another instance or its participants. */
+export interface DataRecordDeletionPreview {
+    schemaVersion: 'openxiangda.data-record-deletion-preview/v1';
+    resourceCode: string;
+    resourceName: string;
+    recordId: string;
+    appVersionId: string;
+    environmentHeadRevision: number;
+    recordRevision: number;
+    affectedRecords: number;
+    workflowCount: number;
+    pendingLaunchCount: number;
+    cancelledTaskCount: number;
+    canCommit: boolean;
+    blocker?: 'pending_launch' | 'multiple_workflows' | 'owned_workflow';
+    receiptOwner?: 'native-transaction' | 'workflow-command';
+    previewToken?: string;
+    expiresAt?: IsoDateTime;
+}
+export interface DataRecordDeletionMutation {
+    schemaVersion: 'openxiangda.data-record-deletion-request/v1';
+    previewToken: string;
+    idempotencyKey: string;
+    reason: string;
+}
+/** Projection over an existing Native transaction or Workflow command receipt. */
+export interface DataRecordDeletionReceipt {
+    schemaVersion: 'openxiangda.data-record-deletion-receipt/v1';
+    resourceCode: string;
+    recordId: string;
+    idempotencyKey: string;
+    receiptOwner: 'native-transaction' | 'workflow-command';
+    receiptId: string;
+    deleted: boolean;
+    replayed: boolean;
+    errorCode?: string;
+}
+export interface DataRecordComment {
+    id: string;
+    body: string;
+    authorUserId: string;
+    isOwn: boolean;
+    createdAt: IsoDateTime;
+    appVersionId: string;
+    environmentHeadRevision: number;
+}
+export interface DataRecordCommentPage {
+    schemaVersion: 'openxiangda.data-record-comments/v1';
+    resourceCode: string;
+    recordId: string;
+    items: DataRecordComment[];
+    nextCursor: string | null;
+    limit: number;
+}
+export interface DataRecordCommentMutation {
+    schemaVersion: 'openxiangda.data-record-comment-create/v1';
+    body: string;
+    idempotencyKey: string;
+}
+export interface DataRecordCommentReceipt {
+    schemaVersion: 'openxiangda.data-record-comment-receipt/v1';
+    resourceCode: string;
+    recordId: string;
+    idempotencyKey: string;
+    comment: DataRecordComment;
+    replayed: boolean;
+}
 export type DataQueryOperator = "eq" | "neq" | "gt" | "gte" | "lt" | "lte" | "contains" | "startsWith" | "endsWith" | "in" | "between" | "has" | "hasAny" | "hasAll" | "overlaps" | "containedBy" | "jsonContains" | "isEmpty" | "isNotEmpty";
 export type DataWhere = {
     and: DataWhere[];
@@ -1231,6 +1420,22 @@ export interface DataBatchQueryResult<T extends Record<string, unknown> = Record
     schemaVersion: typeof SCHEMA_VERSIONS.dataBatchQueryResult;
     results: DataBatchQueryItemResult<T>[];
 }
+/** A bounded current-user print projection, without commands or permission metadata. */
+export interface DataRecordPrint {
+    schemaVersion: "openxiangda.data-record-print/v1";
+    resourceCode: string;
+    resourceName: string;
+    recordId: string;
+    viewCode?: string;
+    viewName?: string;
+    appVersionId: string;
+    environmentHeadRevision: number;
+    preparedAt: IsoDateTime;
+    fields: Array<Pick<DataFieldSurface, "label" | "type" | "widget" | "section" | "options" | "rangeBoundary" | "timePrecision"> & {
+        code: string;
+    }>;
+    data: Record<string, unknown>;
+}
 export interface DataRecord<T extends Record<string, unknown> = Record<string, unknown>> {
     schemaVersion: typeof SCHEMA_VERSIONS.dataRecord;
     resourceCode: string;
@@ -1450,7 +1655,33 @@ export type DataTransactionRecordAssertion = {
     field: string;
     operator: "eq" | "neq" | "gt" | "gte" | "lt" | "lte";
 };
-export type DataTransactionGuard = {
+export interface DataActorAuthorityRequirement {
+    roleCode: string;
+    scope?: {
+        dimensionCode: string;
+        value: string;
+        operation: string;
+    };
+}
+export interface DataTransactionActorAuthorityGuard {
+    /** Current actor and required capability come only from the verified named action. */
+    kind: 'actor-authority';
+    anyOf: DataActorAuthorityRequirement[];
+    allowAppSuperAdmin?: boolean;
+    errorCode: string;
+}
+export interface DataTransactionRecordSetMatchGuard {
+    /** Verify every readable record and its explicit revision in one bounded set. */
+    kind: 'record-set-match';
+    resourceCode: string;
+    errorCode: string;
+    records: {
+        id: string;
+        expectedRevision: number;
+    }[];
+    where?: DataWhere;
+}
+export type DataTransactionGuard = DataTransactionActorAuthorityGuard | DataTransactionRecordSetMatchGuard | {
     /** Compare an actual create/update datetime with database acceptance time plus offset. */
     kind: "operation-time";
     operationIndex: number;
@@ -1541,7 +1772,7 @@ export interface CloudEvent<TData extends Record<string, unknown> = Record<strin
 }
 export declare const DATA_EVENT_TYPES_V2: readonly ["openxiangda.data.record.created.v2", "openxiangda.data.record.updated.v2", "openxiangda.data.record.deleted.v2"];
 export type DataEventTypeV2 = (typeof DATA_EVENT_TYPES_V2)[number];
-export declare const WORKFLOW_EVENT_TYPES_V2: readonly ["openxiangda.workflow.step.requested.v2", "openxiangda.workflow.step.result_received.v2", "openxiangda.workflow.step.completed.v2", "openxiangda.workflow.step.continuation_failed.v2", "openxiangda.workflow.instance.started.v2", "openxiangda.workflow.instance.completed.v2", "openxiangda.workflow.instance.rejected.v2", "openxiangda.workflow.instance.returned.v2", "openxiangda.workflow.instance.resumed.v2", "openxiangda.workflow.instance.withdrawn.v2", "openxiangda.workflow.instance.terminated.v2", "openxiangda.workflow.instance.cc_added.v2", "openxiangda.workflow.task.created.v2", "openxiangda.workflow.task.assigned.v2", "openxiangda.workflow.task.assignment_pending.v2", "openxiangda.workflow.task.assignment_resolution_failed.v2", "openxiangda.workflow.task.approved.v2", "openxiangda.workflow.task.completed.v2", "openxiangda.workflow.task.rejected.v2", "openxiangda.workflow.task.returned.v2", "openxiangda.workflow.task.resubmitted.v2", "openxiangda.workflow.task.transferred.v2", "openxiangda.workflow.task.reassigned.v2", "openxiangda.workflow.task.delegated.v2", "openxiangda.workflow.task.assignee_added.v2", "openxiangda.workflow.task.cancelled.v2", "openxiangda.workflow.participant.activated.v2", "openxiangda.workflow.participant.completed.v2", "openxiangda.workflow.participant.rejected.v2", "openxiangda.workflow.participant.returned.v2", "openxiangda.workflow.participant.transferred.v2", "openxiangda.workflow.participant.reassigned.v2", "openxiangda.workflow.participant.delegated.v2", "openxiangda.workflow.participant.added.v2", "openxiangda.workflow.participant.suspended.v2", "openxiangda.workflow.participant.resumed.v2", "openxiangda.workflow.participant.cancelled.v2"];
+export declare const WORKFLOW_EVENT_TYPES_V2: readonly ["openxiangda.workflow.node.skipped.v2", "openxiangda.workflow.step.requested.v2", "openxiangda.workflow.step.result_received.v2", "openxiangda.workflow.step.completed.v2", "openxiangda.workflow.step.continuation_failed.v2", "openxiangda.workflow.instance.started.v2", "openxiangda.workflow.instance.completed.v2", "openxiangda.workflow.instance.rejected.v2", "openxiangda.workflow.instance.returned.v2", "openxiangda.workflow.instance.resumed.v2", "openxiangda.workflow.instance.withdrawn.v2", "openxiangda.workflow.instance.terminated.v2", "openxiangda.workflow.instance.cc_added.v2", "openxiangda.workflow.task.created.v2", "openxiangda.workflow.task.assigned.v2", "openxiangda.workflow.task.assignment_pending.v2", "openxiangda.workflow.task.assignment_resolution_failed.v2", "openxiangda.workflow.task.approved.v2", "openxiangda.workflow.task.completed.v2", "openxiangda.workflow.task.rejected.v2", "openxiangda.workflow.task.returned.v2", "openxiangda.workflow.task.resubmitted.v2", "openxiangda.workflow.task.transferred.v2", "openxiangda.workflow.task.reassigned.v2", "openxiangda.workflow.task.delegated.v2", "openxiangda.workflow.task.assignee_added.v2", "openxiangda.workflow.task.cancelled.v2", "openxiangda.workflow.participant.activated.v2", "openxiangda.workflow.participant.completed.v2", "openxiangda.workflow.participant.rejected.v2", "openxiangda.workflow.participant.returned.v2", "openxiangda.workflow.participant.transferred.v2", "openxiangda.workflow.participant.reassigned.v2", "openxiangda.workflow.participant.delegated.v2", "openxiangda.workflow.participant.added.v2", "openxiangda.workflow.participant.suspended.v2", "openxiangda.workflow.participant.resumed.v2", "openxiangda.workflow.participant.cancelled.v2"];
 export type WorkflowEventTypeV2 = (typeof WORKFLOW_EVENT_TYPES_V2)[number];
 export type EventProducerKind = "data" | "app" | "workflow" | "timer" | "date" | "system";
 export interface EventCatalogEntry {
@@ -1839,6 +2070,12 @@ export interface WorkflowApprovalNode {
     title: string;
     binding: string;
     mode: WorkflowApprovalMode;
+    /** Code-owned. Omitted means block; skip requires a verified empty supported source. */
+    emptyPolicy?: "block" | "skip";
+    /** Code-owned. Only a direct active initiator seat can be automatically approved. */
+    initiatorApprovalPolicy?: "manual" | "auto_approve";
+    /** Code-owned deadline for whole-node completion; optional inputs only. */
+    completionDeadline?: import('./native-compiler/workflow-completion-deadline.js').WorkflowCompletionDeadline;
     onApprove: string;
     onReject: string;
     allowedOperations?: WorkflowCommand[];
@@ -1858,8 +2095,10 @@ export type WorkflowConfigurableOperation = 'approve' | 'reject' | 'return' | 't
 export type WorkflowConfigurableAssigneeProvider = 'fixed_users' | 'app_role' | 'app_role_in_scope';
 export interface WorkflowNodeOperationPolicy {
     label?: string;
-    /** Only approve/reject have comments; existing required reasons stay required. */
+    /** Approve defaults to false, reject to true; explicit false is code-owned. */
     commentRequired?: boolean;
+    /** Transfer/delegate/add_assignee/return default to true; administrators cannot loosen the code baseline. */
+    reasonRequired?: boolean;
 }
 export interface WorkflowApprovalAdministration {
     modes?: WorkflowApprovalMode[];
@@ -1897,14 +2136,20 @@ export interface WorkflowCcNode {
     notify?: boolean;
     administration?: WorkflowCcAdministration;
 }
-export type WorkflowNode = WorkflowApprovalNode | WorkflowConditionNode | WorkflowEndNode | WorkflowCcNode | WorkflowBusinessStepNode;
+export type WorkflowNode = WorkflowApprovalNode | WorkflowConditionNode | WorkflowEndNode | WorkflowCcNode | import('./native-compiler/workflow-correction.js').WorkflowCorrectionNode | WorkflowBusinessStepNode;
 export interface WorkflowDefinition {
     schemaVersion: typeof SCHEMA_VERSIONS.workflowDefinition;
     code: string;
     title: string;
     acceptedCommandDeactivationPolicy: "finish-pinned" | "cancel-on-deactivate";
     subject: WorkflowSubjectDefinition;
+    commandHandlers?: import('./native-compiler/workflow-business-command.js').WorkflowCommandHandlers;
+    launchPreflight?: import('./native-compiler/workflow-launch-preflight.js').WorkflowLaunchPreflight;
+    /** Atomic approval effect; requires current-cycle direct human confirmation. */
+    approvedDelegation?: import('./native-compiler/workflow-approved-delegation.js').WorkflowApprovedDelegationPolicy;
     instanceCommands?: WorkflowInstanceCommandPolicies;
+    /** Code-owned, frozen at rejection using the subject's last successful business writer. */
+    rejectionNotification?: import('./native-compiler/workflow-rejection-notification.js').WorkflowRejectionNotification;
     startAt: string;
     inputSchema: Record<string, unknown> & {
         type: "object";
@@ -1928,7 +2173,8 @@ export interface WorkflowDefinition {
 }
 export interface WorkflowInstanceCommandPolicies {
     withdraw?: {
-        beforeFact: string;
+        beforeFact?: string;
+        reasonRequired?: boolean;
     };
     terminate?: {
         capability: string;
@@ -1944,6 +2190,8 @@ export interface WorkflowSubjectDefinition {
 export type WorkflowBindingProvider = "fixed_users" | "initiator" | "input_users" | "form_field_users" | "department_supervisor" | "app_role" | "app_role_in_scope" | "business_relation" | "previous_node_actor" | "initiator_select" | "application_provider";
 export interface WorkflowBindingEntry {
     provider: WorkflowBindingProvider;
+    /** Reference to the constrained subject field; role/scope remain declared once. */
+    candidateField?: string;
     users?: string[];
     inputPath?: string;
     departmentIdFrom?: string;
@@ -1955,6 +2203,8 @@ export interface WorkflowBindingEntry {
         valueFrom?: string;
         value?: string;
     };
+    /** 2–8 ordered roles, exclusive with roleCode. Overlapping users occupy one seat. */
+    roleCodes?: string[];
     relationCode?: string;
     resourceCode?: string;
     resourceIdFrom?: string;
@@ -2045,9 +2295,11 @@ export interface WorkflowRoleReference {
     configurationRevision: number;
     contexts: Array<'active' | 'in_flight'>;
     source: 'default_binding' | 'node_override' | 'routing_source';
-    provider: 'app_role' | 'app_role_in_scope';
+    provider: 'app_role' | 'app_role_in_scope' | 'form_field_users';
     routingSourceCode?: string;
     scopeDimensionCode?: string;
+    candidateField?: string;
+    dataLogicalRevisionId?: string;
 }
 export interface WorkflowRoleReferencePage {
     schemaVersion: typeof SCHEMA_VERSIONS.workflowRoleReferencePage;
@@ -2106,6 +2358,11 @@ export interface WorkflowNodeConfigurationPatch {
     } | {
         provider: "app_role" | "app_role_in_scope";
         roleCode: string;
+        roleCodes?: never;
+    } | {
+        provider: "app_role" | "app_role_in_scope";
+        roleCodes: string[];
+        roleCode?: never;
     };
 }
 export interface WorkflowNodeConfigurationState {
@@ -2127,6 +2384,9 @@ export interface WorkflowNodeConfigurations {
             title: string;
             binding?: WorkflowBindingEntry;
             mode?: WorkflowApprovalMode;
+            emptyPolicy?: "block" | "skip";
+            initiatorApprovalPolicy?: "manual" | "auto_approve";
+            completionDeadline?: import('./native-compiler/workflow-completion-deadline.js').WorkflowCompletionDeadline;
             allowedOperations?: WorkflowCommand[];
             operationPolicy?: Partial<Record<WorkflowConfigurableOperation, WorkflowNodeOperationPolicy>>;
             fieldPolicy?: WorkflowApprovalNode['fieldPolicy'];
@@ -2140,6 +2400,9 @@ export interface WorkflowNodeConfigurations {
             binding?: WorkflowBindingEntry;
             bindingDigest?: string;
             mode?: WorkflowApprovalMode;
+            emptyPolicy?: "block" | "skip";
+            initiatorApprovalPolicy?: "manual" | "auto_approve";
+            completionDeadline?: import('./native-compiler/workflow-completion-deadline.js').WorkflowCompletionDeadline;
             allowedOperations?: WorkflowCommand[];
             operationPolicy?: Partial<Record<WorkflowConfigurableOperation, WorkflowNodeOperationPolicy>>;
             fieldPolicy?: WorkflowApprovalNode['fieldPolicy'];
@@ -2554,6 +2817,7 @@ export interface WorkflowTask {
     dataRef: Record<string, unknown>;
     createdAt: IsoDateTime;
     updatedAt: IsoDateTime;
+    completionDeadline?: import('./native-compiler/workflow-completion-deadline.js').WorkflowCompletionDeadlineState;
 }
 export interface WorkflowDetailNavigation {
     custom: boolean;
@@ -2621,6 +2885,8 @@ export interface WorkflowOperationSurface {
         method: "POST";
         href: string;
         idempotencyRequired: boolean;
+        /** Fixed Workflow handler; shared client uses the current immutable app operation surface. */
+        operationCode?: string;
     };
     refresh: string[];
 }
@@ -2679,6 +2945,38 @@ export interface WorkflowCommandInput {
     idempotencyKey: string;
     input?: Record<string, unknown>;
 }
+/** Original Workflow authority and exact subject CAS from the shared Surface client. */
+export interface WorkflowBusinessCommandInvocation extends WorkflowCommandInput {
+    workflowCode: string;
+    target: {
+        kind: 'task';
+        id: string;
+        command: 'approve' | 'reject' | 'resubmit';
+    } | {
+        kind: 'instance';
+        id: string;
+        command: 'withdraw';
+    };
+    recordId: string;
+    expectedRevision: number;
+}
+/** A verified Named Action combines business effects with the original Workflow decision. */
+export interface BusinessProcessCommandWithData {
+    schemaVersion: typeof SCHEMA_VERSIONS.businessProcessCommandWithData;
+    environmentKey: DeploymentEnvironment;
+    workflow: WorkflowBusinessCommandInvocation;
+    subject: {
+        fromOperation: string;
+    };
+    data: BusinessProcessCommit['data'];
+    expectedTransition: {
+        status: 'running' | 'approved' | 'rejected' | 'withdrawn';
+        outcome: string | null;
+        currentNodeId: string | null;
+    } | {
+        kind: 'correction-replay';
+    };
+}
 /**
  * Result returned by a task or instance Workflow command.
  *
@@ -2744,6 +3042,8 @@ export interface WorkflowLaunchSurface {
     };
 }
 export interface WorkflowNamedOperationLaunchIntent {
+    /** Projected from the sealed operation, never editable launch input. */
+    ownedSubject?: import('./native-compiler/workflow-owned-subject.js').WorkflowOwnedSubjectCreate;
     operationCode: string;
     method: "POST";
     href: string;
@@ -2758,7 +3058,7 @@ export interface WorkflowTimelineFlowItem {
     nodeId: string | null;
     kind: "start" | WorkflowNode["kind"];
     title: string;
-    status: "completed" | "active" | "waiting" | "returned" | "cancelled" | "error";
+    status: "completed" | "skipped" | "active" | "waiting" | "returned" | "cancelled" | "error";
     startedAt: IsoDateTime | null;
     completedAt: IsoDateTime | null;
     assignees: Array<{
@@ -2788,7 +3088,7 @@ export interface WorkflowTimelineItem {
     severity: "normal" | "admin" | "security";
     createdAt: IsoDateTime;
 }
-export type WorkflowTimelineDisplayStatus = "completed" | "active" | "waiting" | "returned" | "rejected" | "withdrawn" | "terminated" | "cancelled" | "error";
+export type WorkflowTimelineDisplayStatus = "completed" | "skipped" | "active" | "waiting" | "returned" | "rejected" | "withdrawn" | "terminated" | "cancelled" | "error";
 export interface WorkflowTimelineDisplayOperation {
     id: string;
     operation: string;
@@ -2817,6 +3117,62 @@ export interface WorkflowTimelineDisplayEntry {
 export interface WorkflowTimelineDisplay {
     entries: WorkflowTimelineDisplayEntry[];
 }
+/** Read-only business history. No facts, raw log detail, tokens or role seats. */
+export interface WorkflowRecordHistoryPerson {
+    userId: string;
+    displayName: string;
+    status: string;
+    outcome: string | null;
+    comment: string | null;
+    completedAt: IsoDateTime | null;
+}
+export interface WorkflowRecordHistoryVisit {
+    id: string;
+    nodeId: string;
+    nodeKind: string;
+    title: string;
+    status: string;
+    enteredAt: IsoDateTime | null;
+    completedAt: IsoDateTime | null;
+    people: WorkflowRecordHistoryPerson[];
+}
+export interface WorkflowRecordHistoryOperation {
+    id: string;
+    nodeVisitId: string | null;
+    operation: string;
+    operationLabel: string;
+    actor: {
+        userId: string;
+        displayName: string;
+    };
+    actingForUserId: string | null;
+    reason: string | null;
+    occurredAt: IsoDateTime | null;
+}
+export interface WorkflowRecordHistory {
+    schemaVersion: 'openxiangda.workflow-record-history/v1';
+    resourceCode: string;
+    recordId: string;
+    recordRevision: number;
+    environmentKey: 'preproduction' | 'production';
+    instance: {
+        id: string;
+        workflowCode: string;
+        version: number;
+        definitionVersionId: string;
+        definitionDigest: string;
+        status: string;
+        eventSequence: number;
+        startedAt: IsoDateTime | null;
+        completedAt: IsoDateTime | null;
+    };
+    visits: WorkflowRecordHistoryVisit[];
+    items: WorkflowRecordHistoryOperation[];
+    total: number;
+    limit: number;
+    offset: number;
+    hasMore: boolean;
+}
 export interface WorkflowTimeline {
     engineVersion: "2.0";
     instanceId: string;
@@ -2859,6 +3215,8 @@ export interface WorkflowDelegation {
     appCode: string;
     environmentKey: string;
     workflowCode: string | null;
+    /** Omitted/null covers all applicable approval nodes in the workflow scope. */
+    nodeId?: string | null;
     delegatorUserId: string;
     delegateUserId: string;
     delegatorRoleSubjectKey: string;