Phase 14 · Lesson 03

Task Status Workflow and Derived State

≈ 2 min core reading · 309 source/companion words
Learning contract

What you should be able to do after this

  • Explain Task Status Workflow and Derived State without relying on framework buzzwords.
  • Connect the lesson to the phase outcome: Move orchestration and business invariants into cohesive services/policies so transport and persistence details do not become the domain model.
  • Reproduce the relevant behavior and verify it with evidence.
  • Diagnose at least one representative failure instead of guessing.
Figure 14.3 — TaskFlow boundary map
validated request
service use case
policy/invariant
repository/Prisma
result/error
This lesson belongs to Phase 14. Keep the full request/data path visible even when today's code changes only one box.
Instructor workflow: predict first → implement the smallest slice → run it → inspect evidence → break one assumption → diagnose → explain it back. Do not copy the whole code block before understanding the first failing boundary.

Task Status Workflow & Derived State Explicit transitions, completedAt consistency, and operations with business meaning

Phase 14 - Service & Business Logic Architecture Volume 04 - Professional Backend

Architecture milestone

Current Task status

v

Transition policy

v

Derived state

v

Persist

Phase 14 turns CRUD-oriented service methods into explicit application rules and workflows while keeping infrastructure simple.

Model Task status as a workflow, not a free-form field Zod can prove that a status value is one of TODO, IN_PROGRESS, DONE, or CANCELED. It cannot decide whether a specific transition is allowed from the current persisted state. That requires reading the Task and applying workflow policy.

const ALLOWED_STATUS_TRANSITIONS = { TODO: [IN_PROGRESS, CANCELED], IN_PROGRESS: [TODO, DONE, CANCELED], DONE: [IN_PROGRESS], CANCELED: [TODO], };

From Allowed next states

TODO IN_PROGRESS, CANCELED

IN_PROGRESS TODO, DONE, CANCELED

DONE IN_PROGRESS

CANCELED TODO

Figure 1 - Status transition reasoning

Read current status

v

Requested status differs?

v

Check transition policy

v

Reject invalid transition with 409

v

Apply derived side effects

v

Persist valid update

The update becomes an application operation, not an arbitrary column assignment.

Derived state: completedAt When Task status changes to DONE, TaskFlow records completedAt. When a DONE Task is reopened, completedAt is cleared. That makes status and completion timestamp internally consistent.

if (to === TaskStatus.DONE) return new Date(); if (from === TaskStatus.DONE) return null;

Why not let the frontend set completedAt?

The client may request a business action such as completing a Task, but the server owns the authoritative timestamp and invariant. Otherwise clients can create contradictory states such as status=TODO with completedAt populated.

CRUD field update vs business operation PATCH remains a valid transport for this phase, but TasksService interprets status as a workflow change rather than blindly forwarding it. In larger domains, an explicit operation such as POST /purchase-orders/:id/approve can be clearer than a generic field patch because approval has business meaning and side effects.

Executable lesson studio · ci

Now turn the explanation into engineering skill.

CI turns repository rules into automated gates. A useful pipeline must be understandable, reproducible locally, secure, and able to fail for the right reasons.

By the end, you should be able to

  • Explain Task Status Workflow and Derived State in terms of concrete inputs, ownership, outputs, and evidence.
  • Implement or reproduce the smallest TaskFlow slice that demonstrates this ci concept.
  • Diagnose one representative ci failure using observable evidence instead of trial-and-error.
Figure 14.3B — Mental model
git event
runner
install
quality gates
artifact/deploy decision
Read left-to-right while implementing. When debugging, walk right-to-left until the first observed fact differs from your prediction.
Code-along sequence

One coherent change at a time

  1. 01

    Restate the goal of “Task Status Workflow and Derived State” as one observable behavior. Write the success signal before touching code.

  2. 02

    Trace the boundary map: git event → runner → install → quality gates → artifact/deploy decision. Mark the one boundary this lesson changes.

  3. 03

    Inspect the current repository state and record the exact files, route, table, or runtime involved. Avoid creating an abstraction before you can name the existing owner.

  4. 04

    Implement the smallest vertical slice. Add one coherent change, run the narrowest verification command, and read the output before continuing.

  5. 05

    Connect the slice to TaskFlow’s phase artifact: Refactored task service with explicit policies/invariants and thin controllers.. Verify behavior from the outside as a user or API client would.

  6. 06

    Create one controlled failure that is safe to reproduce. Predict the symptom first, capture evidence, locate the earliest broken boundary, then fix only that cause.

  7. 07

    Close the reference and rebuild or explain the core change from memory. Record what you would monitor or test before trusting the same change in production.

yamlBuild the quality gate one step at a time
name: CI
on: [pull_request]

jobs:
  verify:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - run: corepack enable
      - run: pnpm install --frozen-lockfile
      - run: pnpm lint && pnpm typecheck && pnpm test && pnpm build

Do not copy this as a finished answer. Predict what each boundary does, type the smallest useful slice, run it, then compare the result with your prediction.

Verification

Prove the happy path

  1. Run the narrowest relevant command or request and require a clean exit/status.
  2. Inspect the boundary-specific evidence: terminal output, Network panel, database row/query plan, test report, container health, or deployment logs.
  3. Repeat the behavior once after the change so a one-off cached or stale result cannot masquerade as success.
Break it on purpose

Build debugging memory

  1. Repository abstraction added before there is a boundary to protect
  2. Change one assumption in the ci example—identity, input, configuration, ordering, connectivity, or state—and predict the exact symptom before running it.
SymptomInvestigation path
Works locally, fails in CI

Compare Node/pnpm versions, lockfile state, environment variables, OS assumptions, and generated artifacts.

Workflow has excessive privileges

Set least-privilege permissions at workflow/job level and isolate untrusted pull-request code from secrets.

Closed-reference challenge

Can you transfer the idea?

Without copying the final source, create a second small scenario that applies “Task Status Workflow and Derived State” to a different TaskFlow resource or input. Write the acceptance criteria first, implement it, and provide the evidence that each criterion is satisfied.

Explain-back

Answer these without reopening the solution

  1. What problem does Task Status Workflow and Derived State solve in TaskFlow, and what would be observably wrong without it?
  2. Which part of the ci boundary owns the decision, and which neighboring layer must not own it?
  3. What evidence proves the happy path instead of merely suggesting it worked?
  4. Name one realistic failure or abuse case and the first place you would inspect.
  5. If requirements doubled tomorrow, which part of this design should stay stable and which part is allowed to change?
Lesson studio

Turn the reading into skill

01

Do it

Express one business rule with a name that describes the rule, not the framework.

Use the smallest change that demonstrates this lesson. Stop after it works and capture evidence.
02

Break it safely

Repository abstraction added before there is a boundary to protect

Predict the symptom before causing the failure. Then locate the earliest boundary where reality diverges from expectation.
03

Explain it back

Why does this responsibility live here, what input does it trust, what output proves success, and what would go wrong if another layer owned it?

If your explanation is vague, repeat the boundary trace before moving on.
Exit ticket

Before marking complete

Close the reference. Reproduce the core idea from memory or explain the exact request/data flow aloud. Then check your diff or notes for accidental shortcuts that bypass validation, authorization, error handling, or verification earned in earlier phases.