24 KiB
Tasks: ADR-021 Integrated Workflow Context & Step-specific Attachments
Input: Design documents from specs/08-Tasks/ADR-021-workflow-context/
ADR: specs/06-Decision-Records/ADR-021-integrated-workflow-context.md .md
Branch: feat/adr-021-integrated-workflow-context
Version: 1.8.6 | Date: 2026-04-12 | Amended: 2026-04-19 (Clarify Q1-Q5)
Prerequisites: plan.md ✅ | research.md ✅ | data-model.md ✅ | contracts/ ✅ | quickstart.md ✅
Format: [ID] [P?] [Story?] Description
- [P]: Can run in parallel (different files, no shared dependencies)
- [US#]: User Story this task belongs to
- All paths are absolute from monorepo root
User Story Map
| Story | Priority | Description | REQ |
|---|---|---|---|
| US1 | P1 🎯 MVP | Integrated Banner — single-row metadata + status + actions | REQ-01 |
| US2 | P1 🎯 MVP | Workflow Lifecycle Visualization — vertical timeline + active step | REQ-02, REQ-03 |
| US3 | P2 | Step-specific Attachments — drag & drop upload linked to workflow step (PENDING_REVIEW/PENDING_APPROVAL only) | REQ-04 |
| US4 | P2 | Internal File Preview — PDF/Image modal without tab switch | REQ-05 |
| US5 | P3 | i18n Support — all UI text via i18n keys | REQ-06 |
Module Scope (v1.8.6): RFA, Transmittal, Circulation, Correspondence (4 modules — Clarify Q3 v2 2026-04-19 Revised: re-included Correspondence)
Phase 1: Setup /ไม่ทำ T001
Purpose: Branch and project initialization
- T001 Create feature branch
feat/adr-021-integrated-workflow-contextfrommain - T002 [P] Verify MariaDB, Redis, and ClamAV are accessible in dev environment (per quickstart.md Step 1 prerequisites)
- T003 [P] Create frontend component directory
frontend/components/workflow/(for IntegratedBanner and WorkflowLifecycle)
Phase 2: Foundation — Backend DB & Entities (🔴 CRITICAL — Blocks US3, US4)
Purpose: Schema change + entity wiring that must complete before any step-attachment work. US1 and US2 (pure frontend) can proceed in parallel.
⚠️ CRITICAL: T004 must complete before T005–T009. T005–T007 must complete before Phase 5 (US3).
- T004 Apply SQL delta — create
specs/03-Data-and-Storage/deltas/04-add-workflow-history-id-to-attachments.sqland run against dev DB per quickstart.md Step 1 - T005 [P] Update
backend/src/common/file-storage/entities/attachment.entity.ts— addworkflowHistoryId?: stringcolumn + lazy@ManyToOne(() => WorkflowHistory)relation (data-model.md §2.1) - T006 [P] Update
backend/src/modules/workflow-engine/entities/workflow-history.entity.ts— add lazy@OneToMany(() => Attachment)relation + required imports (data-model.md §2.2) - T007 Update
backend/src/modules/workflow-engine/dto/workflow-transition.dto.ts— addattachmentPublicIds?: string[]with@IsArray(),@IsUUID('all', { each: true }),@ArrayMaxSize(20),@IsOptional()(data-model.md §3.1) - T008 Create
backend/src/modules/workflow-engine/guards/workflow-transition.guard.ts— implement 4-Level RBAC: Superadmin (system.manage_all) → Org Admin → Assigned Handler → Forbidden (quickstart.md Step 4; contracts/workflow-transition.yaml §403) - T009 Register
WorkflowTransitionGuardas provider inbackend/src/modules/workflow-engine/workflow-engine.module.ts
Checkpoint: Foundation complete — pnpm tsc --noEmit in backend must pass before proceeding to Phase 5.
Phase 3: User Story 1 — Integrated Banner (Priority: P1) 🎯 MVP
Goal: Reviewer/Approver sees Doc No, Subject, Status, Priority badge, and Approve/Reject/Return buttons in a single sticky header bar — without scrolling or switching screens.
Independent Test:
# Render IntegratedBanner with mock data, verify:
# 1. Priority URGENT shows red pulse badge
# 2. Approve/Reject buttons present and call onAction
# 3. Status badge matches workflowState
cd frontend && pnpm test --run --reporter=verbose components/workflow/integrated-banner
Implementation for User Story 1
- T010 [P] [US1] Add
WorkflowPriorityenum andWorkflowHistoryIteminterface tofrontend/types/workflow.ts(data-model.md §5.1) - T011 [P] [US1] Add
WorkflowTransitionWithAttachmentsDtointerface tofrontend/types/dto/workflow-engine/workflow-engine.dto.ts(data-model.md §5.2) - T012 [US1] Create
frontend/components/workflow/integrated-banner.tsx— props:{ documentNo, subject, status, priority?, currentState, availableActions, onAction, isLoading? }, render Priority badge with Tailwind color map from research.md §8 (URGENT=red, HIGH=orange, MEDIUM=yellow, LOW=green), renderWorkflowActionButtonsperavailableActionsarray - T013 [US1] Update
frontend/app/(dashboard)/rfas/[uuid]/page.tsx— replace existing header section with<IntegratedBanner>using RFA data fields (quickstart.md Step 10) - T014 [US1] Update
frontend/app/(dashboard)/correspondences/[uuid]/page.tsx— same integration as T013 using Correspondence data fields (Re-included via Clarify v2 2026-04-19) - T015 [US1] Update
frontend/app/(dashboard)/transmittals/[uuid]/page.tsx— same integration as T013 using Transmittal data fields - T016 [US1] Update
frontend/app/(dashboard)/circulation/[uuid]/page.tsx— same integration as T013 using Circulation data fields
Checkpoint: IntegratedBanner renders correctly on RFA, Transmittal, Circulation, and Correspondence detail pages. Priority badge and action buttons visible. Buttons disabled when currentState ∈ {APPROVED, REJECTED, CLOSED}. pnpm tsc --noEmit passes.
Phase 4: User Story 2 — Workflow Lifecycle Visualization (Priority: P1) 🎯 MVP
Goal: User sees a vertical timeline of ALL workflow steps. Current step highlighted with Indigo (#6366f1) + pulse animation. Completed steps show actor name, date, and comment. Pending steps are visually distinct (muted).
Independent Test:
# Render WorkflowLifecycle with mock 4-step history (1 completed, 1 current, 2 pending)
# Verify: current step has 'bg-indigo-500' + 'animate-pulse' class
# Verify: completed steps show actor name and date
# Verify: pending steps are muted (opacity-50 or gray)
cd frontend && pnpm test --run components/workflow/workflow-lifecycle
Implementation for User Story 2
- T017 [P] [US2] Create
frontend/components/workflow/workflow-lifecycle.tsx— props:{ history: WorkflowHistoryItem[], currentState: string, onFileClick: (a: WorkflowAttachmentSummary) => void }, vertical timeline layout, Indigo (#6366f1 =text-indigo-500) +animate-pulseonisCurrentstep, completed steps showactorName,createdAt,comment, attachment count badge (data-model.md §5.1) - T018 [P] [US2] Add
workflowHistoryquery to relevant hooks — updatefrontend/hooks/use-rfa.ts,frontend/hooks/use-correspondence.ts,frontend/hooks/use-transmittal.ts, andfrontend/hooks/use-circulation.tsto fetchGET /workflow-engine/instances/:id/historyusing TanStack Query key['workflow-history', instanceId] - T019 [US2] Add
WorkflowLifecycletab tofrontend/app/(dashboard)/rfas/[uuid]/page.tsxinside existing<Tabs>(or add Tabs if missing) — passrfa.workflowHistoryandcurrentStateprops - T020 [US2] Add
WorkflowLifecycletab tofrontend/app/(dashboard)/correspondences/[uuid]/page.tsx— same as T019 (Re-included via Clarify v2 2026-04-19) - T021 [US2] Add
WorkflowLifecycletab tofrontend/app/(dashboard)/transmittals/[uuid]/page.tsx— same as T019 - T022 [US2] Add
WorkflowLifecycletab tofrontend/app/(dashboard)/circulation/[uuid]/page.tsx— same as T019
Checkpoint: Workflow tab visible on RFA, Transmittal, Circulation, Correspondence pages. Current step Indigo+pulse. Completed steps show actor/date. No TypeScript errors. pnpm lint passes.
Phase 5: User Story 3 — Step-specific Attachments (Priority: P2)
Goal: Assigned Handler (or Superadmin/Org Admin on behalf) can drag-and-drop evidence files when submitting an Approve/Reject/Return action. Files are linked exclusively to that workflow history record. Concurrent transitions are serialized via Redis Redlock. Duplicate submissions detected via Idempotency-Key.
Dependencies: Phase 2 (Foundation) must be ✅ complete before starting.
Independent Test:
# Backend: POST /workflow-engine/instances/:id/transition
# with Idempotency-Key header + attachmentPublicIds
# Verify: 200 success, history record created, attachment.workflow_history_id set
cd backend && pnpm test --testPathPattern=workflow-engine.service
cd backend && pnpm test --testPathPattern=workflow-transition.guard
# Frontend: use-workflow-action hook mock test
cd frontend && pnpm test --run hooks/use-workflow-action
Implementation for User Story 3
- T023 [US3] Extend
backend/src/modules/workflow-engine/workflow-engine.service.ts— addattachmentPublicIds: string[] = []parameter toprocessTransition(); afterqueryRunner.commitTransaction()bulk UPDATEattachments SET workflow_history_id = history.idWHEREuuid IN (:publicIds) AND is_temporary = false(quickstart.md Step 5; data-model.md §6) - T023a [US3] Add server-side upload state check at top of
processTransition()(before Redlock acquire) — ifcurrentState ∈ {APPROVED, REJECTED, CLOSED}andattachmentPublicIds.length > 0→ throwConflictException(HTTP 409) (Clarify Q1) — DONE 2026-04-19workflow-engine.service.ts:338-362(+UPLOAD_ALLOWED_STATESstatic) - T023b [US3] Add Redis Redlock retry logic in
processTransition()— Retry 3x (500ms backoff + 100ms jitter); if all retries fail → throwServiceUnavailableException(HTTP 503 Fail-closed) (Clarify Q2) — DONE 2026-04-19workflow-engine.service.ts:57,80-88,364-380,527-535+@InjectRedis() - T023c [US3] BONUS (C2) Add attachment ownership + temp + relink guards to bulk UPDATE:
isTemporary=false AND uploadedByUserId=userId AND workflowHistoryId IS NULL; rollback ifaffected !== expected— DONE 2026-04-19workflow-engine.service.ts:452-484 - T024 [US3] Add
getHistoryWithAttachments(instanceId: string)method tobackend/src/modules/workflow-engine/workflow-engine.service.ts— queryworkflow_historiesWHEREinstance_id = :idORDER BYcreated_at ASC, eager-load attachments via LEFT JOIN, apply Redis cache keywf:history:{instanceId}TTL 3600s, invalidate onprocessTransition()success (research.md §6; contracts/workflow-transition.yaml) - T025 [US3] Update
backend/src/modules/workflow-engine/workflow-engine.controller.ts— add@Headers('Idempotency-Key')validation toprocessTransition()endpoint (throwBadRequestExceptionif missing), add Redis idempotency check/store with keyidempotency:transition:{key}:{userId}TTL 86400, swapRbacGuardforWorkflowTransitionGuardon transition endpoint (quickstart.md Step 6) - T026 [US3] Add
GET /instances/:id/historyendpoint tobackend/src/modules/workflow-engine/workflow-engine.controller.ts— decorated with@RequirePermission('document.view'), callsworkflowService.getHistoryWithAttachments(instanceId)(contracts/workflow-transition.yaml §/instances/{instanceId}/history) - T027 [P] [US3] Create
frontend/hooks/use-workflow-action.ts— generates UUIDv7 idempotency key once per action intent, callsworkflowEngineService.transition()withIdempotency-Keyheader, on success invalidates TanStack Query keys; client-side guard: checkcurrentState ∈ {PENDING_REVIEW, PENDING_APPROVAL}before API call (Clarify Q1) - T027a [P] [US3] Update
frontend/hooks/use-workflow-action.ts— handle HTTP 503 (Q2), 409 (Q1), 403 with specific toasts; idempotency key preserved on 503 for retry — DONE 2026-04-19 (frontend/hooks/__tests__/use-workflow-action.test.ts: 5/5 tests passing) - T028 [P] [US3] Add drag-and-drop file upload zone to
frontend/components/workflow/workflow-lifecycle.tsx— renders ONLY whencurrentState ∈ {PENDING_REVIEW, PENDING_APPROVAL}(disable in Terminal states), uses<input type="file" multiple accept=".pdf,.docx,.xlsx,.dwg,.zip">+ drag events, calls Two-Phase upload service on drop (Clarify Q1) - T029 [US3] Wire
useWorkflowActionintoIntegratedBanneraction buttons infrontend/components/workflow/integrated-banner.tsx—onActioncallback receives(action, comment, attachmentPublicIds[])and delegates to hook'sexecute()method; show loading spinner duringisPending - T030 [US3] Add
WorkflowTransitionGuardunit tests inbackend/src/modules/workflow-engine/guards/workflow-transition.guard.spec.ts— test all RBAC levels: (1) Superadmin pass, (2) Org Admin same-org pass, (3) Level 2.5 contract membership — user org in same contract pass / cross-contract org → ForbiddenException, (4) Assigned Handler pass, (5) unauthorized user → ForbiddenException - T031 [US3] Add extended
processTransition()unit tests inbackend/src/modules/workflow-engine/workflow-engine.service.spec.ts— test: attachments linked to correct historyId, non-committed attachment rejected, idempotent replay returns cached result - T031a [US3] Add new unit tests in
workflow-engine.service.spec.ts— 6 test cases — DONE 2026-04-19 (15/15 tests passing):- C3: upload in
APPROVEDstate →ConflictException409 - C3: upload in
REJECTEDstate →ConflictException409 - C3: skip state check when no attachments (backward compat)
- C1: Redlock acquire fail →
ServiceUnavailableException503 (ไม่ใช่ 409) - C2:
affected < expected→WorkflowException+ rollback + Redlock release - C1: Redlock release สำเร็จแม้ transition ไม่โยนค่า
- C3: upload in
Checkpoint: ✅ VERIFIED 2026-04-19 — POST transition with attachmentPublicIds สำเร็จ; attachment.workflow_history_id ถูก set; duplicate Idempotency-Key → cached response; unauthorized user → 403; Upload in Terminal state → 409 (C3); Redis failure → 503 fail-closed (C1); temp/foreign attachment → rollback (C2). workflow-engine.service.spec.ts: 15/15 tests passing.
Phase 6: User Story 4 — Internal File Preview (Priority: P2)
Goal: User clicks any attachment in the Workflow Lifecycle timeline and a modal opens showing the file inline (PDF in <iframe>, images in <img>). No new browser tab opened.
Dependencies: Phase 5 (US3) attachments must exist to preview. Phase 4 (US2) timeline must be rendered.
Independent Test:
# Render FilePreviewModal with mock PDF attachment (mimeType: application/pdf)
# Verify: <iframe> rendered with correct /api/files/preview/:publicId src
# Render with mock image (mimeType: image/png)
# Verify: <img> rendered (no iframe)
# Verify: onClose called when Escape key pressed or X button clicked
cd frontend && pnpm test --run components/common/file-preview-modal
Implementation for User Story 4
- T032 [P] [US4] Verify
backend/src/common/file-storage/file-storage.controller.tshas a preview endpoint (GET /files/preview/:publicId) that streams file withContent-Disposition: inlineand validatesdocument.viewpermission — if missing, add it tofile-storage.controller.tsandfile-storage.service.ts - T033 [P] [US4] Create
frontend/components/common/file-preview-modal.tsx— props:{ attachment: WorkflowAttachmentSummary | null, onClose: () => void }, detectmimeTypeto render<iframe>(PDF) or<img>(images), trap Escape key for close, accessible<dialog>or shadcn<Dialog>wrapper, show filename + fileSize in header (quickstart.md Step 9FilePreviewModal Props) - T034 [US4] Wire
FilePreviewModalintofrontend/app/(dashboard)/rfas/[uuid]/page.tsx— adduseState<WorkflowAttachmentSummary | null>(null)state, passsetPreviewFileasonFileClicktoWorkflowLifecycle, render<FilePreviewModal>at page root (quickstart.md Step 10) - T035 [US4] Wire
FilePreviewModalintofrontend/app/(dashboard)/correspondences/[uuid]/page.tsx— same pattern as T034 (Re-included via Clarify v2 2026-04-19)
Checkpoint: Clicking attachment chip in WorkflowLifecycle opens FilePreviewModal. PDF renders inline. Image renders inline. Modal closes on X or Escape. No TypeScript errors.
Phase 7: User Story 5 — i18n Support (Priority: P3)
Goal: All new UI strings introduced by US1–US4 use i18n keys (no hardcoded Thai or English text in component JSX).
Dependencies: US1–US4 must be complete to know all string keys.
Independent Test:
# grep for hardcoded Thai text in new components
grep -rn "[ก-๙]" frontend/components/workflow/ frontend/components/common/file-preview-modal.tsx
# Should return 0 results in JSX/TSX (comments excluded)
Implementation for User Story 5
- T036 [P] [US5] Add i18n keys for
IntegratedBannerstrings tofrontend/public/locales/th/common.jsonandfrontend/public/locales/en/common.json— keys:workflow.priority.*,workflow.action.*,workflow.status.*(05-08-i18n-guidelines.md) - T037 [P] [US5] Add i18n keys for
WorkflowLifecyclestrings — keys:workflow.timeline.step.*,workflow.timeline.noHistory,workflow.timeline.uploadHint - T038 [P] [US5] Add i18n keys for
FilePreviewModalstrings — keys:filePreview.title,filePreview.unavailable,filePreview.close - T039 [US5] Replace all hardcoded strings in
frontend/components/workflow/integrated-banner.tsx,frontend/components/workflow/workflow-lifecycle.tsx, andfrontend/components/common/file-preview-modal.tsxwitht('key')calls using the project's i18n hook
Checkpoint: No hardcoded Thai text in new component JSX. Switching locale changes all new UI strings. pnpm lint and pnpm tsc --noEmit pass.
Phase 8: Polish & Cross-Cutting Concerns
Purpose: Documentation, edge case hardening, full regression verification.
- T040 [P] Update
specs/03-Data-and-Storage/03-01-data-dictionary.md— add entry forattachments.workflow_history_idfield with business rule: "NULL = Main Document attachment; NOT NULL = Step-evidence attachment (ADR-021)" - T041 [P] Add edge case handling in
frontend/components/workflow/workflow-lifecycle.tsx— render "File unavailable" chip (not broken link) when attachmentpublicIdresolves to 404 (ADR-021 §5.2 — "ไฟล์ถูกลบจาก Storage หลัง Attach") - T042 [P] Add
WorkflowErrorBoundarywrapper aroundWorkflowLifecycleandFilePreviewModalin detail pages to prevent whole-page crashes on unexpected errors - T043 [P] Verify Redis cache invalidation works: after
processTransition(), callGET /instances/:id/historytwice — first call should be cached, second should return fresh data after cache invalidation - T044 Run full backend test suite and confirm coverage ≥70% overall, ≥80% for
workflow-engine.service.tsnew code paths:cd backend && pnpm test --coverage - T045 Run full frontend type check and lint:
cd frontend && pnpm tsc --noEmit && pnpm lint— zero errors - T046 Run E2E smoke test per quickstart.md verification section — submit RFA approval with 1 attachment, verify DB state
- T048 [P] Verify
POST /instances/:id/transition(with 5MB PDF attachment) responds within P95 ≤ 5 seconds end-to-end (ClamAV + Redlock + DB) — SCRIPT READY 2026-04-19:scripts/perf/workflow-transition.k6.js(k6 smoke test, 1 VU × 10 iter, thresholdp(95)<5000) +scripts/perf/README.md(setup + manual curl fallback) — ต้องรันกับ staging environment เพื่อ sign-off (Clarify Q4) - T047 Update
CHANGELOG.md— add entry for v1.8.8: "feat(workflow): ADR-021 Integrated Workflow Context & Step-specific Attachments"
Dependencies & Execution Order
Phase Dependencies
Phase 1 (Setup)
└─► Phase 2 (Foundation) ◄─────────────── BLOCKS Phase 5, 6
├─► Phase 3 (US1 — Banner) [CAN START SAME TIME AS PHASE 2]
├─► Phase 4 (US2 — Timeline) [CAN START SAME TIME AS PHASE 2]
└─► Phase 5 (US3 — Attachments) [NEEDS PHASE 2 COMPLETE]
└─► Phase 6 (US4 — Preview) [NEEDS PHASE 5 DATA]
└─► Phase 7 (US5 — i18n) [NEEDS US1-US4 COMPLETE]
└─► Phase 8 (Polish) [NEEDS ALL STORIES]
User Story Dependencies
| Story | Depends On | Can Parallel With |
|---|---|---|
| US1 | Phase 1 only | US2, Phase 2 |
| US2 | Phase 1 only | US1, Phase 2 |
| US3 | Phase 2 ✅ | — |
| US4 | US3 (attachment data) | — |
| US5 | US1, US2, US3, US4 | Phase 8 polish tasks |
Within Each Phase (Task Order)
- Phase 2: T004 → (T005, T006 in parallel) → T007 → T008 → T009
- Phase 3: T010, T011 (parallel) → T012 → T013, T014, T015, T016 (parallel)
- Phase 4: T017, T018 (parallel) → T019, T020, T021, T022 (parallel)
- Phase 5: T023 → (T023a, T023b parallel) → T024 → T025 → T026 → (T027, T028 parallel) → T027a → T029 → (T030, T031 parallel) → T031a
- Phase 6: T032 → T033 → T034, T035 (parallel)
- Phase 7: T036, T037, T038 (parallel) → T039
- Phase 8: T040–T042 (parallel) → T043 → T044 → T045 → T046 → T048 → T047
Parallel Execution Examples
Backend Foundation (Phase 2, after T004)
[T005] attachment.entity.ts — add workflowHistoryId + ManyToOne
[T006] workflow-history.entity.ts — add OneToMany attachments
← Run simultaneously (different files, no conflict)
Frontend US1 + US2 + Backend Foundation (After Phase 1)
[Phase 2] Backend DB + Entities
[Phase 3] Frontend IntegratedBanner
[Phase 4] Frontend WorkflowLifecycle Timeline
← All three can proceed simultaneously
Within US3 Implementation
[T027] use-workflow-action.ts hook
[T028] Drag-and-drop upload zone in workflow-lifecycle.tsx
← Run simultaneously (different files)
Implementation Strategy
MVP First (US1 + US2 — Frontend only, no backend changes)
- Complete Phase 1 (Setup)
- Complete Phase 3 (US1 — IntegratedBanner) — pure frontend
- Complete Phase 4 (US2 — WorkflowLifecycle) — pure frontend, reads existing history API
- STOP and VALIDATE: RFA and Correspondence pages show new banner and timeline
- Demo/review with stakeholders before building the attachment feature
Full Feature Delivery
- Setup + Foundation (Phase 1 + 2)
- US1 + US2 in parallel with Foundation (Phase 3 + 4)
- US3 — Step-specific Attachments backend + frontend (Phase 5)
- US4 — File Preview (Phase 6)
- US5 — i18n (Phase 7)
- Polish + QA (Phase 8)
Parallel Team Strategy
With 2 developers:
- Dev A: Phase 2 (Backend Foundation) → Phase 5 (US3 backend) → Phase 6 (US4 backend)
- Dev B: Phase 3 (US1 Banner) → Phase 4 (US2 Timeline) → Phase 5 (US3 frontend) → Phase 6 (US4 frontend)
Summary
| Metric | Count |
|---|---|
| Total Tasks | 53 (+6 Clarify amendments incl. C2) |
| Phase 1 (Setup) | 3 |
| Phase 2 (Foundation) | 6 |
| Phase 3 (US1 — Banner) | 7 (incl. T014 Correspondence) |
| Phase 4 (US2 — Timeline) | 6 (incl. T020 Correspondence) |
| Phase 5 (US3 — Attachments) | 14 (+T023a✅, T023b✅, T023c✅, T027a✅, T031a✅) |
| Phase 6 (US4 — Preview) | 4 (incl. T035 Correspondence) |
| Phase 7 (US5 — i18n) | 4 |
| Phase 8 (Polish) | 9 (incl. T048 perf SLA✅) |
| Parallelizable [P] tasks | 24 |
| MVP scope (US1+US2) | 19 tasks (all 4 modules) |
| ✅ Clarify Remediation (C1+C2+C3) | 4/4 CRITICAL resolved on 2026-04-19 |
| ✅ Clarify v2 Revision | 2026-04-19 — re-included Correspondence (I1 resolved) |
Commit Message Convention
feat(workflow): T004 apply ADR-021 schema delta — workflow_history_id on attachments
feat(workflow): T012 add IntegratedBanner component (US1)
feat(workflow): T017 add WorkflowLifecycle vertical timeline (US2)
feat(workflow): T023 extend processTransition with attachmentPublicIds (US3)
feat(workflow): T033 add FilePreviewModal for inline PDF/image (US4)
feat(i18n): T036-T039 add i18n keys for ADR-021 UI strings (US5)