Release: merge development into beta

DEVELOPMENT.md

@@ -31,6 +31,57 @@ npm run dev          # Development build (watch mode)
 npm run build        # Production build
 ```
 
+## Demo data
+
+The dashboard widgets, the Tasks page and My Work all filter on the current
+user, so a fresh instance shows empty panels even when the register imported
+cleanly. Seed a working caseload:
+
+```bash
+occ dossiq:demo:seed              # 18 cases across the four case types, 32 tasks
+occ dossiq:demo:seed --verify-only # report the buckets without creating anything
+```
+
+Safe to re-run. A case whose title is already present is skipped, and its tasks
+with it.
+
+The dates in `lib/Settings/demo_caseload_seed_data.json` are relative day
+offsets, resolved when the seed runs, so the overdue and at-risk buckets stay
+correct however long the file sits in the repo. Give a case either
+`deadlineInDays` or `startInDays`, never both: `deadline` is a materialised
+calculation over `startDate` plus the case type's `processingDeadline`, so the
+seed reaches a deadline by backdating the start date.
+
+`--verify-only` counts what the dashboard will read by querying the register
+back, not by counting the seed file. A count taken from the input agrees with
+the input whatever the materialiser did.
+
+## Demo email
+
+The Nextcloud dashboard's mail widget needs a mail server and an account. The
+shared dev environment ships both.
+
+```bash
+docker compose -f .github/docker-compose.yml --profile mail up -d greenmail
+bash .github/docker/mail/seed-mail.sh localhost 3025
+
+occ app:enable mail
+occ mail:account:create admin "Gemeente Demo" admin@test.local \
+    conduction-greenmail 3143 none admin@test.local admin@test.local \
+    conduction-greenmail 3025 none admin@test.local admin@test.local
+occ mail:account:sync 1
+```
+
+Then put the widgets on the dashboard:
+
+```bash
+occ user:setting admin dashboard layout \
+  "procest_my_tasks_widget,procest_task_reminders_widget,mail-unread,procest_overdue_cases_widget,procest_deadline_alerts_widget,procest_cases_overview_widget"
+```
+
+The widget ids still carry the `procest_` prefix. Renaming them would drop the
+widget out of every layout that already names it, so they stay.
+
 ## Code Quality
 
 ```bash

appinfo/info.xml

@@ -48,7 +48,7 @@ Vrij en open source onder de EUPL-1.2-licentie.
 
 **Ondersteuning:** Voor ondersteuning, neem contact op via support@conduction.nl. Voor een Service Level Agreement (SLA), neem contact op via sales@conduction.nl.
     ]]></description>
-    <version>0.3.8-unstable.20260831052324</version>
+    <version>0.3.11-unstable.20260901211251</version>
     <licence>EUPL-1.2</licence>
     <author mail="info@conduction.nl" homepage="https://www.conduction.nl/">Conduction</author>
     <namespace>Dossiq</namespace>
@@ -128,12 +128,23 @@ Vrij en open source onder de EUPL-1.2-licentie.
 
     <background-jobs>
         <job>OCA\Dossiq\BackgroundJob\AdviceDeadlineJob</job>
-        <job>OCA\Dossiq\BackgroundJob\VergaderingDeadlineJob</job>
+        <!--
+            VergaderingDeadlineJob is RETIRED as dead machinery: it scanned
+            for cases with a literal status 'planned', which case.status
+            (a statusType reference) can never hold, and the only writer of
+            such cases was removed earlier. Nothing migrated to a timer.
+            See openspec/changes/case-status-onto-engine-lifecycle.
+        -->
         <job>OCA\Dossiq\BackgroundJob\WOODeadlineCheckJob</job>
         <job>OCA\Dossiq\BackgroundJob\BezwaarTermijnJob</job>
         <job>OCA\Dossiq\BackgroundJob\DsoDeadlineJob</job>
         <job>OCA\Dossiq\BackgroundJob\ResetMonthlyQuotasJob</job>
-        <job>OCA\Dossiq\BackgroundJob\DailyDeadlineScanJob</job>
+        <!--
+            The daily termijn scan (DailyDeadlineScanJob) is RETIRED: the
+            OpenRegister FlowTimerWorker sweep fires the armed termijn
+            timers, and TermijnTimerFiredListener does the domain side.
+            See openspec/changes/termijnbewaking-op-engine-timers.
+        -->
         <job>OCA\Dossiq\BackgroundJob\InboundEmailJob</job>
         <job>OCA\Dossiq\BackgroundJob\EmailPdfRetryJob</job>
         <job>OCA\Dossiq\BackgroundJob\SentimentAnalysisJob</job>
@@ -270,6 +281,21 @@ Vrij en open source onder de EUPL-1.2-licentie.
                 an install without it keeps working on its local routes.
             -->
             <step>OCA\Dossiq\Repair\MigrateParafeerroutesToDecidiq</step>
+            <!--
+                Re-raises every voorstel still in parafering (in_parafering /
+                ter_accordering) in the decision app, so the engine that now
+                owns the runtime has a chain to finish. Runs AFTER
+                MigrateParafeerroutesToDecidiq: a subject can only travel a
+                route the decision app already holds. post-migration ONLY —
+                a fresh install has no in-flight voorstellen. Idempotent (the
+                decision app leaves a subject that already has stages alone),
+                and it FAILS rather than no-ops when it can establish no
+                system identity. The chain resumes from the start there: a
+                partial local history the retired runtime never sent cannot be
+                imported, which is the honest cost of moving the runtime after
+                voorstellen were already travelling.
+            -->
+            <step>OCA\Dossiq\Repair\RaiseInFlightParaferingenInDecidiq</step>
             <!--
                 Raises each local bezwaaradviescommissie as a GovernanceBody in
                 the decision app and notes the id back on the local row.
@@ -305,6 +331,16 @@ Vrij en open source onder de EUPL-1.2-licentie.
             -->
             <step>OCA\Dossiq\Repair\RenameDutchDirectionValues</step>
             <step>OCA\Dossiq\Repair\MigrateArchivalToOpenRegister</step>
+            <!--
+                A ketenpartner is an organisation, and OpenRegister owns
+                Organisation. This moves the rows BEFORE the Partners settings
+                page that used to write them is gone, which is why it is a
+                repair step and not the occ command it also ships as: an
+                administrator who never ran the command would be left with rows
+                behind a surface that no longer exists. Idempotent by the
+                partner's own uuid, so re-running an upgrade adds nothing.
+            -->
+            <step>OCA\Dossiq\Repair\MigratePartnersToOrganisations</step>
             <step>OCA\Dossiq\Repair\SeedKccWerkplekData</step>
             <step>OCA\Dossiq\Repair\BackfillInformatieobjectMetadata</step>
             <step>OCA\Dossiq\Repair\LinkInFlightContractDecisionsRepair</step>
@@ -333,6 +369,24 @@ Vrij en open source onder de EUPL-1.2-licentie.
                 exists to perform.
             -->
             <step>OCA\Dossiq\Repair\RenameDutchValues</step>
+            <!--
+                dossiq#1596, and it runs immediately AFTER the rename above
+                because that is the step whose output it repairs.
+
+                RenameDutchValues translated ONE member of the LHS actorType
+                axis (overheid -> government). It could not reach the matrix
+                cells, which live inside a JSON column rather than a column of
+                their own, so the vocabulary split down the middle: the
+                recommendation schema offered `government` while every cell
+                said `overheid`. A quarter of the national enforcement strategy
+                became unreachable, and it presented as "Geen LHS-cel gevonden"
+                — which reads like bad input rather than a broken axis.
+
+                The mapping is removed at source, so a fresh instance cannot
+                acquire this. This step is for the instances that already ran
+                it, and it is idempotent: a repaired row no longer matches.
+            -->
+            <step>OCA\Dossiq\Repair\RealignLhsActorTypeVocabulary</step>
             <!--
                 Hermiq owns the EU AI Act Art. 14 oversight record now, and
                 dossiq's own oversight page is retired. This replays the
@@ -355,6 +409,17 @@ Vrij en open source onder de EUPL-1.2-licentie.
                 already have `bezwaar` are skipped) and non-fatal.
             -->
             <step>OCA\Dossiq\Repair\BackfillAdviceRequestObjection</step>
+            <!--
+                One clock: arms an OpenRegister FlowTimer for every in-flight
+                TermijnInstance that does not carry one yet (engineTimerId),
+                suspending the timer for paused rows. Idempotent, skips
+                terminal rows, and never throws — an unreachable engine is a
+                warning plus a failed count, not a broken upgrade. Catch-up
+                rung fires after migration are absorbed by the
+                notificatiesVerstuurd dedup in TermijnTimerFiredListener.
+                POST-MIGRATION only: a fresh install has no instances to arm.
+            -->
+            <step>OCA\Dossiq\Repair\ArmTermijnEngineTimers</step>
         </post-migration>
         <!--
             FRESH INSTALL. Nextcloud does NOT run post-migration on a first install:
@@ -445,8 +510,11 @@ Vrij en open source onder de EUPL-1.2-licentie.
         <command>OCA\Dossiq\Command\BackfillLegalHoldsCommand</command>
         <command>OCA\Dossiq\Command\MigrateAutomaticActionsToFlowsCommand</command>
         <command>OCA\Dossiq\Command\MigrateWorkflowDefinitionsToFlowsCommand</command>
+        <command>OCA\Dossiq\Command\MigrateLhsToDecisionTablesCommand</command>
         <command>OCA\Dossiq\Command\MigrateTenantsCommand</command>
+        <command>OCA\Dossiq\Command\MigratePartnersCommand</command>
         <command>OCA\Dossiq\Command\SeedBezwaarBeroepCommand</command>
+        <command>OCA\Dossiq\Command\SeedDemoCaseloadCommand</command>
     </commands>
 
     <settings>

appinfo/routes.php

@@ -68,9 +68,12 @@
     ['name' => 'assistant#availability', 'url' => '/api/assistant/availability', 'verb' => 'GET'],
     ['name' => 'assistant#converse',     'url' => '/api/assistant/converse',     'verb' => 'POST'],
 
-        // Parafering Actions (must precede any wildcard routes).
-    ['name' => 'parafeerActie#create', 'url' => '/api/parafeer-actie', 'verb' => 'POST'],
-    ['name' => 'parafeerActie#index',  'url' => '/api/parafeer-actie', 'verb' => 'GET'],
+        // Parafering actions RETIRED with the local runtime. An approver no
+        // longer signs through a dossiq endpoint that records-and-advances a
+        // local chain: the decision app runs the chain (parafering moved there
+        // the way decisions did), and dossiq records the outcome from the
+        // conclusion event. The parafeeractie objects the case keeps are
+        // read through OpenRegister's auto-exposed object API for display.
 
         // KCC Klantcontact (kcc-klantcontact-integratie).
         // Static/verb routes precede the {id} wildcard routes.
@@ -596,6 +599,7 @@
 
         // ── Milestone tracking ───────────────────────────────────────────
     ['name' => 'milestone#progress', 'url' => '/api/cases/{caseId}/milestones/progress/{caseTypeId}', 'verb' => 'GET'],
+    ['name' => 'milestone#caseProgress', 'url' => '/api/cases/{caseId}/milestones/progress', 'verb' => 'GET'],
     ['name' => 'milestone#mark',     'url' => '/api/cases/{caseId}/milestones/{milestoneId}/mark',    'verb' => 'POST'],
     ['name' => 'milestone#reverse',  'url' => '/api/cases/{caseId}/milestones/{milestoneId}/reverse', 'verb' => 'POST'],
 
@@ -715,6 +719,7 @@
     ['name' => 'substitution#revoke',          'url' => '/api/substitutions/{id}/revoke',     'verb' => 'POST'],
     ['name' => 'caseReassignment#reassignPreview', 'url' => '/api/reassignments/preview',      'verb' => 'POST'],
     ['name' => 'caseReassignment#reassignExecute', 'url' => '/api/reassignments/execute',      'verb' => 'POST'],
+    ['name' => 'caseReassignment#reassignSelection', 'url' => '/api/reassignments/selection',  'verb' => 'POST'],
 
         // ── Termijnbewaking + dwangsom engine (AWB 4:13/4:14/4:17) ─────────
         // Public webhook for openconnector/ERP payment confirmation callbacks.
@@ -780,6 +785,15 @@
         // from a different app is worse than one that stops, because a
         // subscriber cannot tell it has moved.
 
+        // Case-configuration store (ADR-080). Consume-only: dossiq browses a
+        // remote OpenRegister registry through AppHost's GenericStoreService and
+        // installs locally. It never publishes, and it builds no registry URL of
+        // its own — discovery belongs to the engine.
+    ['name' => 'store#search',       'url' => '/api/store/items',                 'verb' => 'GET'],
+    ['name' => 'store#install',      'url' => '/api/store/items/{slug}/install',  'verb' => 'POST', 'requirements' => ['slug' => '[a-z0-9][a-z0-9-]*[a-z0-9]']],
+    ['name' => 'store#getSettings',  'url' => '/api/store/settings',              'verb' => 'GET'],
+    ['name' => 'store#saveSettings', 'url' => '/api/store/settings',              'verb' => 'PUT'],
+
         // NOTE: dashboard#page (`/`) and the SPA catch-all (`/{path}`,
         // dashboard#catchAll) are supplied by Routes::standard(); both resolve to
         // dossiq's DashboardController, which implements them locally.

composer.json

@@ -16,7 +16,8 @@
     },
     "autoload-dev": {
         "psr-4": {
-            "OCA\\OpenRegister\\": "tests/Stubs/"
+            "OCA\\OpenRegister\\": "tests/Stubs/",
+            "OCA\\Dossiq\\Tests\\": "tests/"
         }
     },
     "require": {
@@ -25,7 +26,7 @@
     },
     "require-dev": {
         "conduction/coding-standard": "^1.0",
-        "conduction/hydra-gates": "^1.8.2",
+        "conduction/hydra-gates": "^1.11.0",
         "cyclonedx/cyclonedx-php-composer": "^6.2",
         "edgedesign/phpqa": "^1.27",
         "nextcloud/ocp": "^34.0",
@@ -93,7 +94,8 @@
         "optimize-autoloader": true,
         "sort-packages": true,
         "platform": {
-            "php": "8.3"
+            "php": "8.3",
+            "ext-xsl": "1"
         }
     }
 }