@open-mercato/core 0.6.2-develop.3400.1.d948268f50 → 0.6.2-develop.3406.1.2b403f40da

package/dist/modules/sales/workflows.js

@@ -0,0 +1,180 @@
+import { defineWorkflow, createWorkflowsModuleConfig } from "@open-mercato/shared/modules/workflows";
+const orderApproval = defineWorkflow({
+  workflowId: "sales.order-approval",
+  workflowName: "Sales Order Approval Workflow",
+  description: "Approval workflow for sales orders requiring authorization before processing",
+  metadata: { category: "Sales", tags: ["sales", "approval", "order"], icon: "check-circle" },
+  steps: [
+    { stepId: "start", stepName: "Start", stepType: "START", description: "Initialize order approval workflow" },
+    {
+      stepId: "pending_approval",
+      stepName: "Pending Approval",
+      stepType: "USER_TASK",
+      description: "Order awaiting approval decision",
+      userTaskConfig: {
+        formSchema: {
+          type: "object",
+          required: ["decision"],
+          properties: {
+            comments: { type: "string", title: "Comments", description: "Optional comments for the decision" },
+            decision: { enum: ["approve", "reject"], type: "string", title: "Decision", description: "Approve or reject the order" }
+          }
+        },
+        slaDuration: "PT24H"
+      }
+    },
+    { stepId: "approved", stepName: "Approved", stepType: "AUTOMATED", description: "Order has been approved" },
+    { stepId: "rejected", stepName: "Rejected", stepType: "AUTOMATED", description: "Order has been rejected" },
+    { stepId: "end", stepName: "Complete", stepType: "END", description: "Workflow complete" }
+  ],
+  transitions: [
+    {
+      transitionId: "start_to_pending",
+      transitionName: "Submit for Approval",
+      fromStepId: "start",
+      toStepId: "pending_approval",
+      trigger: "auto",
+      priority: 100,
+      continueOnActivityFailure: true,
+      activities: [
+        {
+          activityId: "set_pending_status",
+          activityName: "Set Order to Pending Approval",
+          activityType: "UPDATE_ENTITY",
+          async: false,
+          config: {
+            commandId: "sales.orders.update",
+            statusDictionary: "sales.order_status",
+            input: { id: "{{context.id}}", statusValue: "pending_approval" }
+          },
+          retryPolicy: { maxAttempts: 3, initialIntervalMs: 1e3, backoffCoefficient: 2, maxIntervalMs: 1e4 }
+        },
+        {
+          activityId: "emit_approval_requested",
+          activityName: "Emit Approval Requested Event",
+          activityType: "EMIT_EVENT",
+          async: true,
+          config: {
+            eventName: "sales.order.approval.requested",
+            payload: { orderId: "{{context.id}}", workflowInstanceId: "{{workflow.instanceId}}" }
+          }
+        }
+      ]
+    },
+    {
+      transitionId: "pending_approval_to_approved",
+      transitionName: "Approve Order",
+      fromStepId: "pending_approval",
+      toStepId: "approved",
+      trigger: "auto",
+      priority: 100,
+      preConditions: [{ ruleId: "workflow_order_approval_check_approved", required: true }],
+      continueOnActivityFailure: true,
+      activities: [
+        {
+          activityId: "set_approved_status",
+          activityName: "Set Order to Approved",
+          activityType: "UPDATE_ENTITY",
+          async: false,
+          config: {
+            commandId: "sales.orders.update",
+            statusDictionary: "sales.order_status",
+            input: { id: "{{context.id}}", statusValue: "approved" }
+          },
+          retryPolicy: { maxAttempts: 3, initialIntervalMs: 1e3, backoffCoefficient: 2, maxIntervalMs: 1e4 }
+        },
+        {
+          activityId: "emit_order_approved",
+          activityName: "Emit Order Approved Event",
+          activityType: "EMIT_EVENT",
+          async: true,
+          config: {
+            eventName: "sales.order.approval.approved",
+            payload: {
+              orderId: "{{context.id}}",
+              workflowInstanceId: "{{workflow.instanceId}}",
+              approvedBy: "{{context.completedBy}}",
+              comments: "{{context.comments}}"
+            }
+          }
+        }
+      ]
+    },
+    {
+      transitionId: "pending_approval_to_rejected",
+      transitionName: "Reject Order",
+      fromStepId: "pending_approval",
+      toStepId: "rejected",
+      trigger: "auto",
+      priority: 90,
+      preConditions: [{ ruleId: "workflow_order_approval_check_rejected", required: true }],
+      continueOnActivityFailure: true,
+      activities: [
+        {
+          activityId: "set_rejected_status",
+          activityName: "Set Order to Rejected",
+          activityType: "UPDATE_ENTITY",
+          async: false,
+          config: {
+            commandId: "sales.orders.update",
+            statusDictionary: "sales.order_status",
+            input: { id: "{{context.id}}", statusValue: "rejected" }
+          },
+          retryPolicy: { maxAttempts: 3, initialIntervalMs: 1e3, backoffCoefficient: 2, maxIntervalMs: 1e4 }
+        },
+        {
+          activityId: "emit_order_rejected",
+          activityName: "Emit Order Rejected Event",
+          activityType: "EMIT_EVENT",
+          async: true,
+          config: {
+            eventName: "sales.order.approval.rejected",
+            payload: {
+              orderId: "{{context.id}}",
+              workflowInstanceId: "{{workflow.instanceId}}",
+              rejectedBy: "{{context.completedBy}}",
+              comments: "{{context.comments}}"
+            }
+          }
+        }
+      ]
+    },
+    {
+      transitionId: "approved_to_end",
+      transitionName: "Complete After Approval",
+      fromStepId: "approved",
+      toStepId: "end",
+      trigger: "auto",
+      priority: 100,
+      continueOnActivityFailure: true
+    },
+    {
+      transitionId: "rejected_to_end",
+      transitionName: "Complete After Rejection",
+      fromStepId: "rejected",
+      toStepId: "end",
+      trigger: "auto",
+      priority: 100,
+      continueOnActivityFailure: true
+    }
+  ],
+  triggers: [{
+    triggerId: "order_approval_trigger",
+    name: "Order Approval Trigger",
+    description: "Triggers when a new sales order is created",
+    eventPattern: "sales.orders.created",
+    config: { entityType: "SalesOrder" },
+    enabled: true,
+    priority: 0
+  }]
+});
+const workflowsConfig = createWorkflowsModuleConfig({
+  moduleId: "sales",
+  workflows: [orderApproval]
+});
+var workflows_default = workflowsConfig;
+export {
+  workflows_default as default,
+  workflowsConfig
+};
+//# sourceMappingURL=workflows.js.map

package/dist/modules/sales/workflows.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/sales/workflows.ts"],
+  "sourcesContent": ["/**\n * Sales Module \u2014 Code-Based Workflow Definitions\n *\n * Order approval workflow shipped with the sales module.\n */\n\nimport { defineWorkflow, createWorkflowsModuleConfig } from '@open-mercato/shared/modules/workflows'\n\nconst orderApproval = defineWorkflow({\n  workflowId: 'sales.order-approval',\n  workflowName: 'Sales Order Approval Workflow',\n  description: 'Approval workflow for sales orders requiring authorization before processing',\n  metadata: { category: 'Sales', tags: ['sales', 'approval', 'order'], icon: 'check-circle' },\n  steps: [\n    { stepId: 'start', stepName: 'Start', stepType: 'START', description: 'Initialize order approval workflow' },\n    {\n      stepId: 'pending_approval',\n      stepName: 'Pending Approval',\n      stepType: 'USER_TASK',\n      description: 'Order awaiting approval decision',\n      userTaskConfig: {\n        formSchema: {\n          type: 'object',\n          required: ['decision'],\n          properties: {\n            comments: { type: 'string', title: 'Comments', description: 'Optional comments for the decision' },\n            decision: { enum: ['approve', 'reject'], type: 'string', title: 'Decision', description: 'Approve or reject the order' },\n          },\n        },\n        slaDuration: 'PT24H',\n      },\n    },\n    { stepId: 'approved', stepName: 'Approved', stepType: 'AUTOMATED', description: 'Order has been approved' },\n    { stepId: 'rejected', stepName: 'Rejected', stepType: 'AUTOMATED', description: 'Order has been rejected' },\n    { stepId: 'end', stepName: 'Complete', stepType: 'END', description: 'Workflow complete' },\n  ] as const,\n  transitions: [\n    {\n      transitionId: 'start_to_pending',\n      transitionName: 'Submit for Approval',\n      fromStepId: 'start',\n      toStepId: 'pending_approval',\n      trigger: 'auto',\n      priority: 100,\n      continueOnActivityFailure: true,\n      activities: [\n        {\n          activityId: 'set_pending_status',\n          activityName: 'Set Order to Pending Approval',\n          activityType: 'UPDATE_ENTITY',\n          async: false,\n          config: {\n            commandId: 'sales.orders.update',\n            statusDictionary: 'sales.order_status',\n            input: { id: '{{context.id}}', statusValue: 'pending_approval' },\n          },\n          retryPolicy: { maxAttempts: 3, initialIntervalMs: 1000, backoffCoefficient: 2, maxIntervalMs: 10000 },\n        },\n        {\n          activityId: 'emit_approval_requested',\n          activityName: 'Emit Approval Requested Event',\n          activityType: 'EMIT_EVENT',\n          async: true,\n          config: {\n            eventName: 'sales.order.approval.requested',\n            payload: { orderId: '{{context.id}}', workflowInstanceId: '{{workflow.instanceId}}' },\n          },\n        },\n      ],\n    },\n    {\n      transitionId: 'pending_approval_to_approved',\n      transitionName: 'Approve Order',\n      fromStepId: 'pending_approval',\n      toStepId: 'approved',\n      trigger: 'auto',\n      priority: 100,\n      preConditions: [{ ruleId: 'workflow_order_approval_check_approved', required: true }],\n      continueOnActivityFailure: true,\n      activities: [\n        {\n          activityId: 'set_approved_status',\n          activityName: 'Set Order to Approved',\n          activityType: 'UPDATE_ENTITY',\n          async: false,\n          config: {\n            commandId: 'sales.orders.update',\n            statusDictionary: 'sales.order_status',\n            input: { id: '{{context.id}}', statusValue: 'approved' },\n          },\n          retryPolicy: { maxAttempts: 3, initialIntervalMs: 1000, backoffCoefficient: 2, maxIntervalMs: 10000 },\n        },\n        {\n          activityId: 'emit_order_approved',\n          activityName: 'Emit Order Approved Event',\n          activityType: 'EMIT_EVENT',\n          async: true,\n          config: {\n            eventName: 'sales.order.approval.approved',\n            payload: {\n              orderId: '{{context.id}}',\n              workflowInstanceId: '{{workflow.instanceId}}',\n              approvedBy: '{{context.completedBy}}',\n              comments: '{{context.comments}}',\n            },\n          },\n        },\n      ],\n    },\n    {\n      transitionId: 'pending_approval_to_rejected',\n      transitionName: 'Reject Order',\n      fromStepId: 'pending_approval',\n      toStepId: 'rejected',\n      trigger: 'auto',\n      priority: 90,\n      preConditions: [{ ruleId: 'workflow_order_approval_check_rejected', required: true }],\n      continueOnActivityFailure: true,\n      activities: [\n        {\n          activityId: 'set_rejected_status',\n          activityName: 'Set Order to Rejected',\n          activityType: 'UPDATE_ENTITY',\n          async: false,\n          config: {\n            commandId: 'sales.orders.update',\n            statusDictionary: 'sales.order_status',\n            input: { id: '{{context.id}}', statusValue: 'rejected' },\n          },\n          retryPolicy: { maxAttempts: 3, initialIntervalMs: 1000, backoffCoefficient: 2, maxIntervalMs: 10000 },\n        },\n        {\n          activityId: 'emit_order_rejected',\n          activityName: 'Emit Order Rejected Event',\n          activityType: 'EMIT_EVENT',\n          async: true,\n          config: {\n            eventName: 'sales.order.approval.rejected',\n            payload: {\n              orderId: '{{context.id}}',\n              workflowInstanceId: '{{workflow.instanceId}}',\n              rejectedBy: '{{context.completedBy}}',\n              comments: '{{context.comments}}',\n            },\n          },\n        },\n      ],\n    },\n    {\n      transitionId: 'approved_to_end',\n      transitionName: 'Complete After Approval',\n      fromStepId: 'approved',\n      toStepId: 'end',\n      trigger: 'auto',\n      priority: 100,\n      continueOnActivityFailure: true,\n    },\n    {\n      transitionId: 'rejected_to_end',\n      transitionName: 'Complete After Rejection',\n      fromStepId: 'rejected',\n      toStepId: 'end',\n      trigger: 'auto',\n      priority: 100,\n      continueOnActivityFailure: true,\n    },\n  ],\n  triggers: [{\n    triggerId: 'order_approval_trigger',\n    name: 'Order Approval Trigger',\n    description: 'Triggers when a new sales order is created',\n    eventPattern: 'sales.orders.created',\n    config: { entityType: 'SalesOrder' },\n    enabled: true,\n    priority: 0,\n  }],\n})\n\nexport const workflowsConfig = createWorkflowsModuleConfig({\n  moduleId: 'sales',\n  workflows: [orderApproval],\n})\n\nexport default workflowsConfig\n"],
+  "mappings": "AAMA,SAAS,gBAAgB,mCAAmC;AAE5D,MAAM,gBAAgB,eAAe;AAAA,EACnC,YAAY;AAAA,EACZ,cAAc;AAAA,EACd,aAAa;AAAA,EACb,UAAU,EAAE,UAAU,SAAS,MAAM,CAAC,SAAS,YAAY,OAAO,GAAG,MAAM,eAAe;AAAA,EAC1F,OAAO;AAAA,IACL,EAAE,QAAQ,SAAS,UAAU,SAAS,UAAU,SAAS,aAAa,qCAAqC;AAAA,IAC3G;AAAA,MACE,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,gBAAgB;AAAA,QACd,YAAY;AAAA,UACV,MAAM;AAAA,UACN,UAAU,CAAC,UAAU;AAAA,UACrB,YAAY;AAAA,YACV,UAAU,EAAE,MAAM,UAAU,OAAO,YAAY,aAAa,qCAAqC;AAAA,YACjG,UAAU,EAAE,MAAM,CAAC,WAAW,QAAQ,GAAG,MAAM,UAAU,OAAO,YAAY,aAAa,8BAA8B;AAAA,UACzH;AAAA,QACF;AAAA,QACA,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,EAAE,QAAQ,YAAY,UAAU,YAAY,UAAU,aAAa,aAAa,0BAA0B;AAAA,IAC1G,EAAE,QAAQ,YAAY,UAAU,YAAY,UAAU,aAAa,aAAa,0BAA0B;AAAA,IAC1G,EAAE,QAAQ,OAAO,UAAU,YAAY,UAAU,OAAO,aAAa,oBAAoB;AAAA,EAC3F;AAAA,EACA,aAAa;AAAA,IACX;AAAA,MACE,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,SAAS;AAAA,MACT,UAAU;AAAA,MACV,2BAA2B;AAAA,MAC3B,YAAY;AAAA,QACV;AAAA,UACE,YAAY;AAAA,UACZ,cAAc;AAAA,UACd,cAAc;AAAA,UACd,OAAO;AAAA,UACP,QAAQ;AAAA,YACN,WAAW;AAAA,YACX,kBAAkB;AAAA,YAClB,OAAO,EAAE,IAAI,kBAAkB,aAAa,mBAAmB;AAAA,UACjE;AAAA,UACA,aAAa,EAAE,aAAa,GAAG,mBAAmB,KAAM,oBAAoB,GAAG,eAAe,IAAM;AAAA,QACtG;AAAA,QACA;AAAA,UACE,YAAY;AAAA,UACZ,cAAc;AAAA,UACd,cAAc;AAAA,UACd,OAAO;AAAA,UACP,QAAQ;AAAA,YACN,WAAW;AAAA,YACX,SAAS,EAAE,SAAS,kBAAkB,oBAAoB,0BAA0B;AAAA,UACtF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,SAAS;AAAA,MACT,UAAU;AAAA,MACV,eAAe,CAAC,EAAE,QAAQ,0CAA0C,UAAU,KAAK,CAAC;AAAA,MACpF,2BAA2B;AAAA,MAC3B,YAAY;AAAA,QACV;AAAA,UACE,YAAY;AAAA,UACZ,cAAc;AAAA,UACd,cAAc;AAAA,UACd,OAAO;AAAA,UACP,QAAQ;AAAA,YACN,WAAW;AAAA,YACX,kBAAkB;AAAA,YAClB,OAAO,EAAE,IAAI,kBAAkB,aAAa,WAAW;AAAA,UACzD;AAAA,UACA,aAAa,EAAE,aAAa,GAAG,mBAAmB,KAAM,oBAAoB,GAAG,eAAe,IAAM;AAAA,QACtG;AAAA,QACA;AAAA,UACE,YAAY;AAAA,UACZ,cAAc;AAAA,UACd,cAAc;AAAA,UACd,OAAO;AAAA,UACP,QAAQ;AAAA,YACN,WAAW;AAAA,YACX,SAAS;AAAA,cACP,SAAS;AAAA,cACT,oBAAoB;AAAA,cACpB,YAAY;AAAA,cACZ,UAAU;AAAA,YACZ;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,SAAS;AAAA,MACT,UAAU;AAAA,MACV,eAAe,CAAC,EAAE,QAAQ,0CAA0C,UAAU,KAAK,CAAC;AAAA,MACpF,2BAA2B;AAAA,MAC3B,YAAY;AAAA,QACV;AAAA,UACE,YAAY;AAAA,UACZ,cAAc;AAAA,UACd,cAAc;AAAA,UACd,OAAO;AAAA,UACP,QAAQ;AAAA,YACN,WAAW;AAAA,YACX,kBAAkB;AAAA,YAClB,OAAO,EAAE,IAAI,kBAAkB,aAAa,WAAW;AAAA,UACzD;AAAA,UACA,aAAa,EAAE,aAAa,GAAG,mBAAmB,KAAM,oBAAoB,GAAG,eAAe,IAAM;AAAA,QACtG;AAAA,QACA;AAAA,UACE,YAAY;AAAA,UACZ,cAAc;AAAA,UACd,cAAc;AAAA,UACd,OAAO;AAAA,UACP,QAAQ;AAAA,YACN,WAAW;AAAA,YACX,SAAS;AAAA,cACP,SAAS;AAAA,cACT,oBAAoB;AAAA,cACpB,YAAY;AAAA,cACZ,UAAU;AAAA,YACZ;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,SAAS;AAAA,MACT,UAAU;AAAA,MACV,2BAA2B;AAAA,IAC7B;AAAA,IACA;AAAA,MACE,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,SAAS;AAAA,MACT,UAAU;AAAA,MACV,2BAA2B;AAAA,IAC7B;AAAA,EACF;AAAA,EACA,UAAU,CAAC;AAAA,IACT,WAAW;AAAA,IACX,MAAM;AAAA,IACN,aAAa;AAAA,IACb,cAAc;AAAA,IACd,QAAQ,EAAE,YAAY,aAAa;AAAA,IACnC,SAAS;AAAA,IACT,UAAU;AAAA,EACZ,CAAC;AACH,CAAC;AAEM,MAAM,kBAAkB,4BAA4B;AAAA,EACzD,UAAU;AAAA,EACV,WAAW,CAAC,aAAa;AAC3B,CAAC;AAED,IAAO,oBAAQ;",
+  "names": []
+}

package/dist/modules/workflows/api/definitions/[id]/customize/route.js

@@ -0,0 +1,172 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { validateCrudMutationGuard, runCrudMutationGuardAfterSuccess } from "@open-mercato/shared/lib/crud/mutation-guard";
+import { WorkflowDefinition } from "../../../../data/entities.js";
+import { serializeWorkflowDefinition } from "../../serialize.js";
+import { getCodeWorkflow } from "../../../../lib/code-registry.js";
+const metadata = {
+  requireAuth: true,
+  requireFeatures: ["workflows.definitions.edit"]
+};
+async function POST(request, context) {
+  try {
+    const params = await context.params;
+    const container = await createRequestContainer();
+    const em = container.resolve("em");
+    const auth = await getAuthFromRequest(request);
+    if (!auth) {
+      return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    }
+    const scope = await resolveOrganizationScopeForRequest({ container, auth, request });
+    const tenantId = auth.tenantId;
+    const organizationId = scope?.selectedId ?? auth.orgId;
+    if (!params.id.startsWith("code:")) {
+      return NextResponse.json(
+        { error: "Customize is only supported for code-based workflow definitions" },
+        { status: 400 }
+      );
+    }
+    const workflowId = params.id.slice(5);
+    const codeDef = getCodeWorkflow(workflowId);
+    if (!codeDef) {
+      return NextResponse.json({ error: "Workflow definition not found" }, { status: 404 });
+    }
+    const guardResult = await validateCrudMutationGuard(container, {
+      tenantId: tenantId ?? "",
+      organizationId: organizationId ?? null,
+      userId: auth.sub ?? "",
+      resourceKind: "workflows.definition",
+      resourceId: params.id,
+      operation: "custom",
+      requestMethod: "POST",
+      requestHeaders: request.headers
+    });
+    if (guardResult && !guardResult.ok) {
+      return NextResponse.json(guardResult.body, { status: guardResult.status });
+    }
+    const existingOverride = await em.findOne(WorkflowDefinition, {
+      workflowId: codeDef.workflowId,
+      tenantId
+    });
+    let saved;
+    if (existingOverride) {
+      existingOverride.deletedAt = null;
+      existingOverride.workflowName = codeDef.workflowName;
+      existingOverride.description = codeDef.description;
+      existingOverride.version = codeDef.version;
+      existingOverride.definition = codeDef.definition;
+      existingOverride.metadata = codeDef.metadata ?? null;
+      existingOverride.enabled = codeDef.enabled;
+      existingOverride.codeWorkflowId = codeDef.workflowId;
+      existingOverride.updatedBy = auth.sub;
+      existingOverride.updatedAt = /* @__PURE__ */ new Date();
+      await em.flush();
+      saved = existingOverride;
+    } else {
+      const override = em.create(WorkflowDefinition, {
+        workflowId: codeDef.workflowId,
+        workflowName: codeDef.workflowName,
+        description: codeDef.description,
+        version: codeDef.version,
+        definition: codeDef.definition,
+        metadata: codeDef.metadata,
+        enabled: codeDef.enabled,
+        codeWorkflowId: codeDef.workflowId,
+        tenantId,
+        organizationId,
+        createdBy: auth.sub,
+        updatedBy: auth.sub,
+        createdAt: /* @__PURE__ */ new Date(),
+        updatedAt: /* @__PURE__ */ new Date()
+      });
+      em.persist(override);
+      await em.flush();
+      saved = override;
+    }
+    if (guardResult?.shouldRunAfterSuccess) {
+      await runCrudMutationGuardAfterSuccess(container, {
+        tenantId: tenantId ?? "",
+        organizationId: organizationId ?? null,
+        userId: auth.sub ?? "",
+        resourceKind: "workflows.definition",
+        resourceId: String(saved.id),
+        operation: "custom",
+        requestMethod: "POST",
+        requestHeaders: request.headers,
+        metadata: guardResult.metadata
+      });
+    }
+    try {
+      const eventBus = container.resolve("eventBus");
+      if (eventBus && typeof eventBus.emitEvent === "function") {
+        await eventBus.emitEvent(
+          "workflows.definition.customized",
+          {
+            id: saved.id,
+            workflowId: saved.workflowId,
+            codeWorkflowId: saved.codeWorkflowId ?? null,
+            tenantId: saved.tenantId,
+            organizationId: saved.organizationId,
+            userId: auth.sub ?? null
+          },
+          { tenantId: saved.tenantId, organizationId: saved.organizationId, persistent: true }
+        );
+      }
+    } catch (eventError) {
+      console.error("Failed to emit workflows.definition.customized event:", eventError);
+    }
+    return NextResponse.json({
+      data: serializeWorkflowDefinition(saved),
+      message: "Workflow definition customized successfully"
+    });
+  } catch (error) {
+    console.error("Error customizing workflow definition:", error);
+    return NextResponse.json({ error: "Failed to customize workflow definition" }, { status: 500 });
+  }
+}
+const openApi = {
+  methods: {
+    POST: {
+      summary: "Customize code-based workflow definition",
+      description: 'Creates a DB override for a code-based workflow definition, seeded from the current code registry values. The id param must be of the form "code:<workflowId>".',
+      tags: ["Workflows"],
+      pathParams: z.object({
+        id: z.string().describe('Must be of the form "code:<workflowId>"')
+      }),
+      responses: [
+        {
+          status: 200,
+          description: "Workflow definition customized successfully",
+          example: {
+            data: {
+              id: "123e4567-e89b-12d3-a456-426614174000",
+              workflowId: "workflows.simple-approval",
+              workflowName: "Simple Approval Workflow",
+              source: "code_override"
+            },
+            message: "Workflow definition customized successfully"
+          }
+        },
+        {
+          status: 400,
+          description: "Not a code-based id",
+          example: { error: "Customize is only supported for code-based workflow definitions" }
+        },
+        {
+          status: 404,
+          description: "Code workflow not found",
+          example: { error: "Workflow definition not found" }
+        }
+      ]
+    }
+  }
+};
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/workflows/api/definitions/[id]/customize/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/workflows/api/definitions/%5Bid%5D/customize/route.ts"],
+  "sourcesContent": ["/**\n * Customize Code-Based Workflow Definition\n *\n * POST /api/workflows/definitions/[id]/customize\n *\n * Creates a DB override row for a code-based workflow definition, seeded from\n * the current code registry values. The id param must be of the form\n * \"code:<workflowId>\".\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { validateCrudMutationGuard, runCrudMutationGuardAfterSuccess } from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { WorkflowDefinition } from '../../../../data/entities'\nimport { serializeWorkflowDefinition } from '../../serialize'\nimport { getCodeWorkflow } from '../../../../lib/code-registry'\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.definitions.edit'],\n}\n\ninterface RouteContext {\n  params: Promise<{\n    id: string\n  }>\n}\n\nexport async function POST(request: NextRequest, context: RouteContext) {\n  try {\n    const params = await context.params\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = scope?.selectedId ?? auth.orgId\n\n    if (!params.id.startsWith('code:')) {\n      return NextResponse.json(\n        { error: 'Customize is only supported for code-based workflow definitions' },\n        { status: 400 },\n      )\n    }\n\n    const workflowId = params.id.slice(5)\n    const codeDef = getCodeWorkflow(workflowId)\n    if (!codeDef) {\n      return NextResponse.json({ error: 'Workflow definition not found' }, { status: 404 })\n    }\n\n    const guardResult = await validateCrudMutationGuard(container, {\n      tenantId: tenantId ?? '',\n      organizationId: organizationId ?? null,\n      userId: auth.sub ?? '',\n      resourceKind: 'workflows.definition',\n      resourceId: params.id,\n      operation: 'custom',\n      requestMethod: 'POST',\n      requestHeaders: request.headers,\n    })\n    if (guardResult && !guardResult.ok) {\n      return NextResponse.json(guardResult.body, { status: guardResult.status })\n    }\n\n    const existingOverride = await em.findOne(WorkflowDefinition, {\n      workflowId: codeDef.workflowId,\n      tenantId,\n    })\n\n    let saved: WorkflowDefinition\n    if (existingOverride) {\n      existingOverride.deletedAt = null\n      existingOverride.workflowName = codeDef.workflowName\n      existingOverride.description = codeDef.description\n      existingOverride.version = codeDef.version\n      existingOverride.definition = codeDef.definition\n      existingOverride.metadata = codeDef.metadata ?? null\n      existingOverride.enabled = codeDef.enabled\n      existingOverride.codeWorkflowId = codeDef.workflowId\n      existingOverride.updatedBy = auth.sub\n      existingOverride.updatedAt = new Date()\n      await em.flush()\n      saved = existingOverride\n    } else {\n      const override = em.create(WorkflowDefinition, {\n        workflowId: codeDef.workflowId,\n        workflowName: codeDef.workflowName,\n        description: codeDef.description,\n        version: codeDef.version,\n        definition: codeDef.definition,\n        metadata: codeDef.metadata,\n        enabled: codeDef.enabled,\n        codeWorkflowId: codeDef.workflowId,\n        tenantId,\n        organizationId,\n        createdBy: auth.sub,\n        updatedBy: auth.sub,\n        createdAt: new Date(),\n        updatedAt: new Date(),\n      })\n      em.persist(override)\n      await em.flush()\n      saved = override\n    }\n\n    if (guardResult?.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: tenantId ?? '',\n        organizationId: organizationId ?? null,\n        userId: auth.sub ?? '',\n        resourceKind: 'workflows.definition',\n        resourceId: String(saved.id),\n        operation: 'custom',\n        requestMethod: 'POST',\n        requestHeaders: request.headers,\n        metadata: guardResult.metadata,\n      })\n    }\n\n    try {\n      const eventBus = container.resolve('eventBus') as\n        | { emitEvent(event: string, payload: unknown, options?: unknown): Promise<void> }\n        | undefined\n      if (eventBus && typeof eventBus.emitEvent === 'function') {\n        await eventBus.emitEvent(\n          'workflows.definition.customized',\n          {\n            id: saved.id,\n            workflowId: saved.workflowId,\n            codeWorkflowId: saved.codeWorkflowId ?? null,\n            tenantId: saved.tenantId,\n            organizationId: saved.organizationId,\n            userId: auth.sub ?? null,\n          },\n          { tenantId: saved.tenantId, organizationId: saved.organizationId, persistent: true },\n        )\n      }\n    } catch (eventError) {\n      console.error('Failed to emit workflows.definition.customized event:', eventError)\n    }\n\n    return NextResponse.json({\n      data: serializeWorkflowDefinition(saved),\n      message: 'Workflow definition customized successfully',\n    })\n  } catch (error) {\n    console.error('Error customizing workflow definition:', error)\n    return NextResponse.json({ error: 'Failed to customize workflow definition' }, { status: 500 })\n  }\n}\n\nexport const openApi = {\n  methods: {\n    POST: {\n      summary: 'Customize code-based workflow definition',\n      description: 'Creates a DB override for a code-based workflow definition, seeded from the current code registry values. The id param must be of the form \"code:<workflowId>\".',\n      tags: ['Workflows'],\n      pathParams: z.object({\n        id: z.string().describe('Must be of the form \"code:<workflowId>\"'),\n      }),\n      responses: [\n        {\n          status: 200,\n          description: 'Workflow definition customized successfully',\n          example: {\n            data: {\n              id: '123e4567-e89b-12d3-a456-426614174000',\n              workflowId: 'workflows.simple-approval',\n              workflowName: 'Simple Approval Workflow',\n              source: 'code_override',\n            },\n            message: 'Workflow definition customized successfully',\n          },\n        },\n        {\n          status: 400,\n          description: 'Not a code-based id',\n          example: { error: 'Customize is only supported for code-based workflow definitions' },\n        },\n        {\n          status: 404,\n          description: 'Code workflow not found',\n          example: { error: 'Workflow definition not found' },\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAUA,SAAsB,oBAAoB;AAC1C,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,2BAA2B,wCAAwC;AAC5E,SAAS,0BAA0B;AACnC,SAAS,mCAAmC;AAC5C,SAAS,uBAAuB;AAEzB,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,4BAA4B;AAChD;AAQA,eAAsB,KAAK,SAAsB,SAAuB;AACtE,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAC7B,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,OAAO,cAAc,KAAK;AAEjD,QAAI,CAAC,OAAO,GAAG,WAAW,OAAO,GAAG;AAClC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,kEAAkE;AAAA,QAC3E,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,aAAa,OAAO,GAAG,MAAM,CAAC;AACpC,UAAM,UAAU,gBAAgB,UAAU;AAC1C,QAAI,CAAC,SAAS;AACZ,aAAO,aAAa,KAAK,EAAE,OAAO,gCAAgC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACtF;AAEA,UAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,MAC7D,UAAU,YAAY;AAAA,MACtB,gBAAgB,kBAAkB;AAAA,MAClC,QAAQ,KAAK,OAAO;AAAA,MACpB,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,WAAW;AAAA,MACX,eAAe;AAAA,MACf,gBAAgB,QAAQ;AAAA,IAC1B,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,IAC3E;AAEA,UAAM,mBAAmB,MAAM,GAAG,QAAQ,oBAAoB;AAAA,MAC5D,YAAY,QAAQ;AAAA,MACpB;AAAA,IACF,CAAC;AAED,QAAI;AACJ,QAAI,kBAAkB;AACpB,uBAAiB,YAAY;AAC7B,uBAAiB,eAAe,QAAQ;AACxC,uBAAiB,cAAc,QAAQ;AACvC,uBAAiB,UAAU,QAAQ;AACnC,uBAAiB,aAAa,QAAQ;AACtC,uBAAiB,WAAW,QAAQ,YAAY;AAChD,uBAAiB,UAAU,QAAQ;AACnC,uBAAiB,iBAAiB,QAAQ;AAC1C,uBAAiB,YAAY,KAAK;AAClC,uBAAiB,YAAY,oBAAI,KAAK;AACtC,YAAM,GAAG,MAAM;AACf,cAAQ;AAAA,IACV,OAAO;AACL,YAAM,WAAW,GAAG,OAAO,oBAAoB;AAAA,QAC7C,YAAY,QAAQ;AAAA,QACpB,cAAc,QAAQ;AAAA,QACtB,aAAa,QAAQ;AAAA,QACrB,SAAS,QAAQ;AAAA,QACjB,YAAY,QAAQ;AAAA,QACpB,UAAU,QAAQ;AAAA,QAClB,SAAS,QAAQ;AAAA,QACjB,gBAAgB,QAAQ;AAAA,QACxB;AAAA,QACA;AAAA,QACA,WAAW,KAAK;AAAA,QAChB,WAAW,KAAK;AAAA,QAChB,WAAW,oBAAI,KAAK;AAAA,QACpB,WAAW,oBAAI,KAAK;AAAA,MACtB,CAAC;AACD,SAAG,QAAQ,QAAQ;AACnB,YAAM,GAAG,MAAM;AACf,cAAQ;AAAA,IACV;AAEA,QAAI,aAAa,uBAAuB;AACtC,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,YAAY;AAAA,QACtB,gBAAgB,kBAAkB;AAAA,QAClC,QAAQ,KAAK,OAAO;AAAA,QACpB,cAAc;AAAA,QACd,YAAY,OAAO,MAAM,EAAE;AAAA,QAC3B,WAAW;AAAA,QACX,eAAe;AAAA,QACf,gBAAgB,QAAQ;AAAA,QACxB,UAAU,YAAY;AAAA,MACxB,CAAC;AAAA,IACH;AAEA,QAAI;AACF,YAAM,WAAW,UAAU,QAAQ,UAAU;AAG7C,UAAI,YAAY,OAAO,SAAS,cAAc,YAAY;AACxD,cAAM,SAAS;AAAA,UACb;AAAA,UACA;AAAA,YACE,IAAI,MAAM;AAAA,YACV,YAAY,MAAM;AAAA,YAClB,gBAAgB,MAAM,kBAAkB;AAAA,YACxC,UAAU,MAAM;AAAA,YAChB,gBAAgB,MAAM;AAAA,YACtB,QAAQ,KAAK,OAAO;AAAA,UACtB;AAAA,UACA,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,gBAAgB,YAAY,KAAK;AAAA,QACrF;AAAA,MACF;AAAA,IACF,SAAS,YAAY;AACnB,cAAQ,MAAM,yDAAyD,UAAU;AAAA,IACnF;AAEA,WAAO,aAAa,KAAK;AAAA,MACvB,MAAM,4BAA4B,KAAK;AAAA,MACvC,SAAS;AAAA,IACX,CAAC;AAAA,EACH,SAAS,OAAO;AACd,YAAQ,MAAM,0CAA0C,KAAK;AAC7D,WAAO,aAAa,KAAK,EAAE,OAAO,0CAA0C,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAChG;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,MAAM,CAAC,WAAW;AAAA,MAClB,YAAY,EAAE,OAAO;AAAA,QACnB,IAAI,EAAE,OAAO,EAAE,SAAS,yCAAyC;AAAA,MACnE,CAAC;AAAA,MACD,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,SAAS;AAAA,YACP,MAAM;AAAA,cACJ,IAAI;AAAA,cACJ,YAAY;AAAA,cACZ,cAAc;AAAA,cACd,QAAQ;AAAA,YACV;AAAA,YACA,SAAS;AAAA,UACX;AAAA,QACF;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,SAAS,EAAE,OAAO,kEAAkE;AAAA,QACtF;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,SAAS,EAAE,OAAO,gCAAgC;AAAA,QACpD;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/workflows/api/definitions/[id]/reset-to-code/route.js

@@ -0,0 +1,205 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { validateCrudMutationGuard, runCrudMutationGuardAfterSuccess } from "@open-mercato/shared/lib/crud/mutation-guard";
+import { WorkflowDefinition, WorkflowInstance } from "../../../../data/entities.js";
+import { serializeCodeWorkflowDefinition } from "../../serialize.js";
+import { getCodeWorkflow } from "../../../../lib/code-registry.js";
+const metadata = {
+  requireAuth: true,
+  requireFeatures: ["workflows.definitions.edit"]
+};
+async function POST(request, context) {
+  try {
+    const params = await context.params;
+    const container = await createRequestContainer();
+    const em = container.resolve("em");
+    const auth = await getAuthFromRequest(request);
+    if (!auth) {
+      return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    }
+    const scope = await resolveOrganizationScopeForRequest({ container, auth, request });
+    const tenantId = auth.tenantId;
+    const organizationId = scope?.selectedId ?? auth.orgId;
+    const rbacService = container.resolve("rbacService");
+    const hasPermission = await rbacService.userHasAllFeatures(
+      auth.sub,
+      ["workflows.definitions.edit"],
+      {
+        tenantId,
+        organizationId
+      }
+    );
+    if (!hasPermission) {
+      return NextResponse.json(
+        { error: "Insufficient permissions" },
+        { status: 403 }
+      );
+    }
+    const definition = await em.findOne(WorkflowDefinition, {
+      id: params.id,
+      tenantId,
+      organizationId,
+      deletedAt: null
+    });
+    if (!definition) {
+      return NextResponse.json(
+        { error: "Workflow definition not found" },
+        { status: 404 }
+      );
+    }
+    if (!definition.codeWorkflowId) {
+      return NextResponse.json(
+        { error: "This workflow definition is not a code-based override and cannot be reset" },
+        { status: 400 }
+      );
+    }
+    const activeInstances = await em.count(WorkflowInstance, {
+      definitionId: definition.id,
+      status: { $in: ["RUNNING", "WAITING"] }
+    });
+    if (activeInstances > 0) {
+      return NextResponse.json(
+        {
+          error: `Cannot reset workflow definition with ${activeInstances} active instance(s)`
+        },
+        { status: 409 }
+      );
+    }
+    const guardResult = await validateCrudMutationGuard(container, {
+      tenantId: tenantId ?? "",
+      organizationId: organizationId ?? null,
+      userId: auth.sub ?? "",
+      resourceKind: "workflows.definition",
+      resourceId: String(definition.id),
+      operation: "custom",
+      requestMethod: "POST",
+      requestHeaders: request.headers
+    });
+    if (guardResult && !guardResult.ok) {
+      return NextResponse.json(guardResult.body, { status: guardResult.status });
+    }
+    const codeDef = getCodeWorkflow(definition.codeWorkflowId);
+    const removedSnapshot = {
+      id: String(definition.id),
+      workflowId: definition.workflowId,
+      codeWorkflowId: definition.codeWorkflowId,
+      tenantId: definition.tenantId,
+      organizationId: definition.organizationId
+    };
+    em.remove(definition);
+    await em.flush();
+    if (guardResult?.shouldRunAfterSuccess) {
+      await runCrudMutationGuardAfterSuccess(container, {
+        tenantId: tenantId ?? "",
+        organizationId: organizationId ?? null,
+        userId: auth.sub ?? "",
+        resourceKind: "workflows.definition",
+        resourceId: removedSnapshot.id,
+        operation: "custom",
+        requestMethod: "POST",
+        requestHeaders: request.headers,
+        metadata: guardResult.metadata
+      });
+    }
+    try {
+      const eventBus = container.resolve("eventBus");
+      if (eventBus && typeof eventBus.emitEvent === "function") {
+        await eventBus.emitEvent(
+          "workflows.definition.reset_to_code",
+          {
+            id: removedSnapshot.id,
+            workflowId: removedSnapshot.workflowId,
+            codeWorkflowId: removedSnapshot.codeWorkflowId,
+            tenantId: removedSnapshot.tenantId,
+            organizationId: removedSnapshot.organizationId,
+            userId: auth.sub ?? null
+          },
+          {
+            tenantId: removedSnapshot.tenantId,
+            organizationId: removedSnapshot.organizationId,
+            persistent: true
+          }
+        );
+      }
+    } catch (eventError) {
+      console.error("Failed to emit workflows.definition.reset_to_code event:", eventError);
+    }
+    if (!codeDef) {
+      return NextResponse.json({
+        message: "Workflow definition reset to code version (code definition no longer registered)",
+        data: null
+      });
+    }
+    const syntheticId = `code:${codeDef.workflowId}`;
+    return NextResponse.json({
+      data: serializeCodeWorkflowDefinition(codeDef, syntheticId),
+      message: "Workflow definition reset to code version"
+    });
+  } catch (error) {
+    console.error("Error resetting workflow definition to code:", error);
+    return NextResponse.json(
+      { error: "Failed to reset workflow definition to code" },
+      { status: 500 }
+    );
+  }
+}
+const openApi = {
+  methods: {
+    POST: {
+      summary: "Reset workflow definition to code version",
+      description: "Deletes the DB override for a code-based workflow definition, reverting it to the original code registry version. Cannot be reset if there are active instances.",
+      tags: ["Workflows"],
+      pathParams: z.object({
+        id: z.string().uuid()
+      }),
+      responses: [
+        {
+          status: 200,
+          description: "Workflow definition reset to code version",
+          example: {
+            data: {
+              id: "code:checkout-flow",
+              workflowId: "checkout-flow",
+              workflowName: "Checkout Flow",
+              description: "Code-defined checkout workflow",
+              version: 1,
+              source: "code",
+              isCodeBased: true
+            },
+            message: "Workflow definition reset to code version"
+          }
+        },
+        {
+          status: 400,
+          description: "Definition is not a code-based override",
+          example: {
+            error: "This workflow definition is not a code-based override and cannot be reset"
+          }
+        },
+        {
+          status: 404,
+          description: "Workflow definition not found",
+          example: {
+            error: "Workflow definition not found"
+          }
+        },
+        {
+          status: 409,
+          description: "Cannot reset - active workflow instances exist",
+          example: {
+            error: "Cannot reset workflow definition with 3 active instance(s)"
+          }
+        }
+      ]
+    }
+  }
+};
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/workflows/api/definitions/[id]/reset-to-code/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/workflows/api/definitions/%5Bid%5D/reset-to-code/route.ts"],
+  "sourcesContent": ["/**\n * Reset Customized Workflow Definition to Code\n *\n * POST /api/workflows/definitions/[id]/reset-to-code\n *\n * Deletes the DB override row for a code-based workflow definition,\n * reverting it back to the original code registry version.\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { validateCrudMutationGuard, runCrudMutationGuardAfterSuccess } from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { WorkflowDefinition, WorkflowInstance } from '../../../../data/entities'\nimport { serializeCodeWorkflowDefinition } from '../../serialize'\nimport { getCodeWorkflow } from '../../../../lib/code-registry'\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.definitions.edit'],\n}\n\ninterface RouteContext {\n  params: Promise<{\n    id: string\n  }>\n}\n\n/**\n * POST /api/workflows/definitions/[id]/reset-to-code\n *\n * Reset a customized code workflow definition back to its original code version.\n */\nexport async function POST(\n  request: NextRequest,\n  context: RouteContext\n) {\n  try {\n    const params = await context.params\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = scope?.selectedId ?? auth.orgId\n\n    // Check edit permission\n    const rbacService = container.resolve('rbacService')\n    const hasPermission = await rbacService.userHasAllFeatures(\n      auth.sub,\n      ['workflows.definitions.edit'],\n      {\n        tenantId,\n        organizationId,\n      }\n    )\n\n    if (!hasPermission) {\n      return NextResponse.json(\n        { error: 'Insufficient permissions' },\n        { status: 403 }\n      )\n    }\n\n    // Find existing definition\n    const definition = await em.findOne(WorkflowDefinition, {\n      id: params.id,\n      tenantId,\n      organizationId,\n      deletedAt: null,\n    })\n\n    if (!definition) {\n      return NextResponse.json(\n        { error: 'Workflow definition not found' },\n        { status: 404 }\n      )\n    }\n\n    // Verify this is a code-based override\n    if (!definition.codeWorkflowId) {\n      return NextResponse.json(\n        { error: 'This workflow definition is not a code-based override and cannot be reset' },\n        { status: 400 }\n      )\n    }\n\n    // Check if there are active workflow instances using this definition\n    const activeInstances = await em.count(WorkflowInstance, {\n      definitionId: definition.id,\n      status: { $in: ['RUNNING', 'WAITING'] },\n    })\n\n    if (activeInstances > 0) {\n      return NextResponse.json(\n        {\n          error: `Cannot reset workflow definition with ${activeInstances} active instance(s)`,\n        },\n        { status: 409 }\n      )\n    }\n\n    const guardResult = await validateCrudMutationGuard(container, {\n      tenantId: tenantId ?? '',\n      organizationId: organizationId ?? null,\n      userId: auth.sub ?? '',\n      resourceKind: 'workflows.definition',\n      resourceId: String(definition.id),\n      operation: 'custom',\n      requestMethod: 'POST',\n      requestHeaders: request.headers,\n    })\n    if (guardResult && !guardResult.ok) {\n      return NextResponse.json(guardResult.body, { status: guardResult.status })\n    }\n\n    // Look up the original code definition before deleting\n    const codeDef = getCodeWorkflow(definition.codeWorkflowId)\n\n    // Snapshot identifying fields before remove() detaches the entity\n    const removedSnapshot = {\n      id: String(definition.id),\n      workflowId: definition.workflowId,\n      codeWorkflowId: definition.codeWorkflowId,\n      tenantId: definition.tenantId,\n      organizationId: definition.organizationId,\n    }\n\n    // Hard-delete the DB override row\n    em.remove(definition)\n    await em.flush()\n\n    if (guardResult?.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: tenantId ?? '',\n        organizationId: organizationId ?? null,\n        userId: auth.sub ?? '',\n        resourceKind: 'workflows.definition',\n        resourceId: removedSnapshot.id,\n        operation: 'custom',\n        requestMethod: 'POST',\n        requestHeaders: request.headers,\n        metadata: guardResult.metadata,\n      })\n    }\n\n    try {\n      const eventBus = container.resolve('eventBus') as\n        | { emitEvent(event: string, payload: unknown, options?: unknown): Promise<void> }\n        | undefined\n      if (eventBus && typeof eventBus.emitEvent === 'function') {\n        await eventBus.emitEvent(\n          'workflows.definition.reset_to_code',\n          {\n            id: removedSnapshot.id,\n            workflowId: removedSnapshot.workflowId,\n            codeWorkflowId: removedSnapshot.codeWorkflowId,\n            tenantId: removedSnapshot.tenantId,\n            organizationId: removedSnapshot.organizationId,\n            userId: auth.sub ?? null,\n          },\n          {\n            tenantId: removedSnapshot.tenantId,\n            organizationId: removedSnapshot.organizationId,\n            persistent: true,\n          },\n        )\n      }\n    } catch (eventError) {\n      console.error('Failed to emit workflows.definition.reset_to_code event:', eventError)\n    }\n\n    if (!codeDef) {\n      return NextResponse.json({\n        message: 'Workflow definition reset to code version (code definition no longer registered)',\n        data: null,\n      })\n    }\n\n    const syntheticId = `code:${codeDef.workflowId}`\n\n    return NextResponse.json({\n      data: serializeCodeWorkflowDefinition(codeDef, syntheticId),\n      message: 'Workflow definition reset to code version',\n    })\n  } catch (error) {\n    console.error('Error resetting workflow definition to code:', error)\n    return NextResponse.json(\n      { error: 'Failed to reset workflow definition to code' },\n      { status: 500 }\n    )\n  }\n}\n\nexport const openApi = {\n  methods: {\n    POST: {\n      summary: 'Reset workflow definition to code version',\n      description: 'Deletes the DB override for a code-based workflow definition, reverting it to the original code registry version. Cannot be reset if there are active instances.',\n      tags: ['Workflows'],\n      pathParams: z.object({\n        id: z.string().uuid(),\n      }),\n      responses: [\n        {\n          status: 200,\n          description: 'Workflow definition reset to code version',\n          example: {\n            data: {\n              id: 'code:checkout-flow',\n              workflowId: 'checkout-flow',\n              workflowName: 'Checkout Flow',\n              description: 'Code-defined checkout workflow',\n              version: 1,\n              source: 'code',\n              isCodeBased: true,\n            },\n            message: 'Workflow definition reset to code version',\n          },\n        },\n        {\n          status: 400,\n          description: 'Definition is not a code-based override',\n          example: {\n            error: 'This workflow definition is not a code-based override and cannot be reset',\n          },\n        },\n        {\n          status: 404,\n          description: 'Workflow definition not found',\n          example: {\n            error: 'Workflow definition not found',\n          },\n        },\n        {\n          status: 409,\n          description: 'Cannot reset - active workflow instances exist',\n          example: {\n            error: 'Cannot reset workflow definition with 3 active instance(s)',\n          },\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AASA,SAAsB,oBAAoB;AAC1C,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,2BAA2B,wCAAwC;AAC5E,SAAS,oBAAoB,wBAAwB;AACrD,SAAS,uCAAuC;AAChD,SAAS,uBAAuB;AAEzB,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,4BAA4B;AAChD;AAaA,eAAsB,KACpB,SACA,SACA;AACA,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAC7B,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,OAAO,cAAc,KAAK;AAGjD,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,gBAAgB,MAAM,YAAY;AAAA,MACtC,KAAK;AAAA,MACL,CAAC,4BAA4B;AAAA,MAC7B;AAAA,QACE;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,eAAe;AAClB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,2BAA2B;AAAA,QACpC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,aAAa,MAAM,GAAG,QAAQ,oBAAoB;AAAA,MACtD,IAAI,OAAO;AAAA,MACX;AAAA,MACA;AAAA,MACA,WAAW;AAAA,IACb,CAAC;AAED,QAAI,CAAC,YAAY;AACf,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,gCAAgC;AAAA,QACzC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,QAAI,CAAC,WAAW,gBAAgB;AAC9B,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,4EAA4E;AAAA,QACrF,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,kBAAkB,MAAM,GAAG,MAAM,kBAAkB;AAAA,MACvD,cAAc,WAAW;AAAA,MACzB,QAAQ,EAAE,KAAK,CAAC,WAAW,SAAS,EAAE;AAAA,IACxC,CAAC;AAED,QAAI,kBAAkB,GAAG;AACvB,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO,yCAAyC,eAAe;AAAA,QACjE;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,MAC7D,UAAU,YAAY;AAAA,MACtB,gBAAgB,kBAAkB;AAAA,MAClC,QAAQ,KAAK,OAAO;AAAA,MACpB,cAAc;AAAA,MACd,YAAY,OAAO,WAAW,EAAE;AAAA,MAChC,WAAW;AAAA,MACX,eAAe;AAAA,MACf,gBAAgB,QAAQ;AAAA,IAC1B,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,IAC3E;AAGA,UAAM,UAAU,gBAAgB,WAAW,cAAc;AAGzD,UAAM,kBAAkB;AAAA,MACtB,IAAI,OAAO,WAAW,EAAE;AAAA,MACxB,YAAY,WAAW;AAAA,MACvB,gBAAgB,WAAW;AAAA,MAC3B,UAAU,WAAW;AAAA,MACrB,gBAAgB,WAAW;AAAA,IAC7B;AAGA,OAAG,OAAO,UAAU;AACpB,UAAM,GAAG,MAAM;AAEf,QAAI,aAAa,uBAAuB;AACtC,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,YAAY;AAAA,QACtB,gBAAgB,kBAAkB;AAAA,QAClC,QAAQ,KAAK,OAAO;AAAA,QACpB,cAAc;AAAA,QACd,YAAY,gBAAgB;AAAA,QAC5B,WAAW;AAAA,QACX,eAAe;AAAA,QACf,gBAAgB,QAAQ;AAAA,QACxB,UAAU,YAAY;AAAA,MACxB,CAAC;AAAA,IACH;AAEA,QAAI;AACF,YAAM,WAAW,UAAU,QAAQ,UAAU;AAG7C,UAAI,YAAY,OAAO,SAAS,cAAc,YAAY;AACxD,cAAM,SAAS;AAAA,UACb;AAAA,UACA;AAAA,YACE,IAAI,gBAAgB;AAAA,YACpB,YAAY,gBAAgB;AAAA,YAC5B,gBAAgB,gBAAgB;AAAA,YAChC,UAAU,gBAAgB;AAAA,YAC1B,gBAAgB,gBAAgB;AAAA,YAChC,QAAQ,KAAK,OAAO;AAAA,UACtB;AAAA,UACA;AAAA,YACE,UAAU,gBAAgB;AAAA,YAC1B,gBAAgB,gBAAgB;AAAA,YAChC,YAAY;AAAA,UACd;AAAA,QACF;AAAA,MACF;AAAA,IACF,SAAS,YAAY;AACnB,cAAQ,MAAM,4DAA4D,UAAU;AAAA,IACtF;AAEA,QAAI,CAAC,SAAS;AACZ,aAAO,aAAa,KAAK;AAAA,QACvB,SAAS;AAAA,QACT,MAAM;AAAA,MACR,CAAC;AAAA,IACH;AAEA,UAAM,cAAc,QAAQ,QAAQ,UAAU;AAE9C,WAAO,aAAa,KAAK;AAAA,MACvB,MAAM,gCAAgC,SAAS,WAAW;AAAA,MAC1D,SAAS;AAAA,IACX,CAAC;AAAA,EACH,SAAS,OAAO;AACd,YAAQ,MAAM,gDAAgD,KAAK;AACnE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,8CAA8C;AAAA,MACvD,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,MAAM,CAAC,WAAW;AAAA,MAClB,YAAY,EAAE,OAAO;AAAA,QACnB,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,MACtB,CAAC;AAAA,MACD,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,SAAS;AAAA,YACP,MAAM;AAAA,cACJ,IAAI;AAAA,cACJ,YAAY;AAAA,cACZ,cAAc;AAAA,cACd,aAAa;AAAA,cACb,SAAS;AAAA,cACT,QAAQ;AAAA,cACR,aAAa;AAAA,YACf;AAAA,YACA,SAAS;AAAA,UACX;AAAA,QACF;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,SAAS;AAAA,YACP,OAAO;AAAA,UACT;AAAA,QACF;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,SAAS;AAAA,YACP,OAAO;AAAA,UACT;AAAA,QACF;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,SAAS;AAAA,YACP,OAAO;AAAA,UACT;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}