fix: five live defects that stopped the seeded case flow

[rubenvdlinde]

What broke

Running the seeded "Case behandeling" flow for real on a clean instance (dossiq 0.3.11-unstable, openregister 2.0.13-unstable) surfaced five defects. Together they meant the flow could not move a single case under the worker. Each fix ships with a regression test that goes red when the fix is reverted (verified by mutation).

The five defects

1. Handlers ignored the run's acting identity

SetStatusHandler, DossiqAskPersonNode and DossiqRequestDecisionNode did their storage work bare. Under FlowRunWorker the session carries nobody, so openregister refused every write as User 'Anonymous' does not have permission. The run context carried runAs: admin the whole time.

A new FlowRunAsScope resolves the context's runAs to a real, enabled account and hands the work to ObjectService::runAs(). That is the same seam openregister's own object-write and object-read nodes use. It narrows, never grants. An unresolvable or disabled identity refuses loudly. A context naming nobody runs bare, so the interactive transition path is unchanged.

Tests: testTheWriteRunsAsTheRunsActingIdentity, testTheTaskIsWrittenAsTheRunsActingIdentity, testTheDecisionIsRaisedAsTheRunsActingIdentity, plus refusal tests for unresolvable identities.

2. persistTask() misread the save result

It accepted only an array, while ObjectService::saveObject() returns an ObjectEntity. Every successful save was followed by "could not identify the task it created": the run stopped instead of suspending, the resume slot was never written, the task sat orphaned. The node now reads the entity's uuid. The unit fake now returns an ObjectEntity like production, because the old fake agreed with the caller and could not fail.

Test: testTheSavedTaskIsIdentifiedByItsEntityUuid.

3. The assignee template was never rendered

ask-indiener declares assignee: "{{ case.assignee }}". The engine templates only inside its own nodes, so the literal was stored and FlowRunAssignee refused every real user. The node now renders the value through FlowValueTemplate against the case, stores the rendered name in the resume slot, and refuses loudly when the template resolves to nothing. An empty assignee would make the task answerable by anyone.

Tests: testATemplatedAssigneeIsRenderedAgainstTheCase, testAnAssigneeTemplateThatResolvesToNothingRefuses.

4. Conditions sat on edges, where the engine never looks

FlowTokenRouter reads conditions from a node's exits[], matched by the edge's fromExit. The declaration put them on the edges (e-compleet, e-onvolledig), so the engine saw an unconditioned split and took the first enabled transition: a complete case went to "Wacht op aanvulling". The completeness check now declares its three exits (with the unconditional gestrand else) and the edges reference them by fromExit. CaseFlowDeclarationTest and the e2e both asserted the wrong shape and now assert the engine's contract.

Tests: testNoShippedFlowPutsAConditionOnAnEdge scans every flow declaration in lib/Settings (register.d included) and fails on any edge-level condition, so the shape cannot come back anywhere. testEveryExitAndEveryBranchingEdgePairUp pins the pairing.

5. Deep links landed on the dashboard

A hard load of /apps/dossiq/cases/<id> answered 200 from the server and was rewritten client-side to /apps/dossiq/. The router based itself on generateUrl(), which returns only one of the two URL forms Nextcloud serves the app under. The other form fell outside the base and the catch-all redirect ate the deep link. routerBase() now derives the base from the document's own pathname, with generateUrl() as fallback.

Tests: routerBase.spec.js (vitest, both URL forms plus prefix-collision and fallback), and the e2e a deep link to a case survives a hard reload, under both URL forms. The reload of a deep link is the test.

Checks

• composer lint, phpcs, phpmd (per subdirectory, both rulesets), psalm, phpstan: 0 errors
• phpunit: 2725 tests, 0 failures (3 pre-existing environment skips)
• eslint + prettier on touched files: clean (887 pre-existing warnings elsewhere, 0 errors)
• vitest: 360 tests pass; npm build passes and the base derivation is present in the built bundle
• hydra gates --scope-to-diff --base origin/development: all 40 applicable gates pass against the current canonical gate inputs

Known CI caveat, not caused by this change

Gate-53 will FAIL on this PR under hydra-gates v1.10.0. The tag's vendored manifest schema predates the reports and flow page types (taught upstream in ConductionNL/.github 9d853e8f, 2026-09-01) and its FLEET_APP_IDS predates the iq renames (decidiq missing; also fixed on main). Any dossiq PR touching a manifest input fails the same way. With both files at their current upstream state the gates pass 40/40 here. The fix is a hydra-gates release, not a dossiq change.

[github-actions]

Quality Report — ConductionNL/dossiq @ e6c06be

Check	PHP	Vue	Security	License	Tests
lint	⏭️
phpcs	⏭️
phpmd	❌
psalm	⏭️
phpstan	⏭️
phpmetrics	✅
eslint		⏭️
stylelint		⏭️
build		⏭️
format		✅
composer			⏭️	⏭️
npm			⏭️	✅ 540/540
app:check-code	⏭️
info.xml	⏭️
REUSE	⏭️
PHPUnit					❌
Newman					❌
Playwright					❌
Hydra gates					❌

---

Quality workflow — 2026-09-01 13:19 UTC

Download the full PDF report from the workflow artifacts.

[github-actions]

Quality Report — ConductionNL/dossiq @ 75e8938

Check	PHP	Vue	Security	License	Tests
lint	✅
phpcs	✅
phpmd	✅
psalm	✅
phpstan	✅
phpmetrics	✅
eslint		✅
stylelint		✅
build		✅
check-manifest		✅
check-vue3-compile		✅
test-l10n		✅
format		✅
check-schema-l10n		✅
check-l10n-js		✅
composer			✅	✅ 106/106
npm			✅	✅ 540/540
app:check-code	⏭️
info.xml	✅
REUSE	❌
PHPUnit					❌
Newman					⏭️
Playwright					⏭️ deferred — runs on the promotion into beta/main, not on a pull request into development
Hydra gates					✅

---

Quality workflow — 2026-09-01 13:28 UTC

Download the full PDF report from the workflow artifacts.

[github-actions]

Quality Report — ConductionNL/dossiq @ e233418

Check	PHP	Vue	Security	License	Tests
lint	✅
phpcs	✅
phpmd	✅
psalm	✅
phpstan	✅
phpmetrics	✅
eslint		✅
stylelint		✅
build		✅
check-manifest		✅
check-vue3-compile		✅
test-l10n		✅
format		✅
check-schema-l10n		✅
check-l10n-js		✅
composer			✅	✅ 106/106
npm			✅	✅ 540/540
app:check-code	⏭️
info.xml	✅
REUSE	❌
PHPUnit					✅
Newman					⏭️
Playwright					⏭️ deferred — runs on the promotion into beta/main, not on a pull request into development
Hydra gates					✅

---

Quality workflow — 2026-09-01 13:40 UTC

Download the full PDF report from the workflow artifacts.