@open-mercato/core 0.6.6-develop.6465.1.019f0fb26f → 0.6.6-develop.6471.1.9ab5bdd79a

package/dist/modules/workflows/api/instances/[id]/advance/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/workflows/api/instances/%5Bid%5D/advance/route.ts"],
-  "sourcesContent": ["/**\n * POST /api/workflows/instances/:id/advance\n *\n * Manually advance a workflow instance to the next step\n * Useful for:\n * - Manual workflow progression in demos\n * - Step-by-step testing\n * - User-triggered transitions\n * - Manual approval flows\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { WorkflowInstance } from '../../../../data/entities'\nimport * as workflowExecutor from '../../../../lib/workflow-executor'\nimport * as stepHandler from '../../../../lib/step-handler'\nimport * as transitionHandler from '../../../../lib/transition-handler'\nimport { z } from 'zod'\nimport {\n  workflowsTag,\n  advanceWorkflowRequestSchema,\n  advanceWorkflowResponseSchema,\n  workflowErrorSchema,\n} from '../../../openapi'\n\n// Validation schema\nconst advanceWorkflowSchema = z.object({\n  toStepId: z.string().optional(), // Optional - will auto-select if not provided\n  triggerData: z.record(z.string(), z.any()).optional(), // Optional trigger data\n  contextUpdates: z.record(z.string(), z.any()).optional(), // Optional context updates\n})\n\ntype AdvanceWorkflowInput = z.infer<typeof advanceWorkflowSchema>\n\ninterface RouteContext {\n  params: Promise<{\n    id: string\n  }>\n}\n\n/**\n * POST /api/workflows/instances/:id/advance\n *\n * Advance workflow to next step\n */\nexport async function POST(request: NextRequest, context: RouteContext) {\n  try {\n    const container = await createRequestContainer()\n    const em = container.resolve<EntityManager>('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = scope?.selectedId ?? auth.orgId\n\n    if (!tenantId || !organizationId) {\n      return NextResponse.json(\n        { error: 'Missing tenant or organization context' },\n        { status: 400 }\n      )\n    }\n\n    // Get instance ID from params\n    const params = await context.params\n    const instanceId = params.id\n\n    // Load and verify instance\n    const instance = await em.findOne(WorkflowInstance, {\n      id: instanceId,\n      tenantId,\n      organizationId,\n    })\n\n    if (!instance) {\n      return NextResponse.json(\n        { error: 'Workflow instance not found' },\n        { status: 404 }\n      )\n    }\n\n    // Check permission\n    const rbacService = container.resolve('rbacService')\n    const hasPermission = await rbacService.userHasAllFeatures(\n      auth.sub,\n      ['workflows.instances.create'], // Using create permission for advancing\n      { tenantId, organizationId }\n    )\n\n    if (!hasPermission) {\n      return NextResponse.json(\n        { error: 'Insufficient permissions' },\n        { status: 403 }\n      )\n    }\n\n    // Parse request body\n    const body = await request.json().catch(() => ({}))\n    const validation = advanceWorkflowSchema.safeParse(body)\n\n    if (!validation.success) {\n      return NextResponse.json(\n        {\n          error: 'Validation failed',\n          details: validation.error.issues,\n        },\n        { status: 400 }\n      )\n    }\n\n    const input: AdvanceWorkflowInput = validation.data\n\n    // Check workflow status\n    if (instance.status === 'COMPLETED') {\n      return NextResponse.json(\n        { error: 'Workflow already completed' },\n        { status: 400 }\n      )\n    }\n\n    if (instance.status === 'CANCELLED') {\n      return NextResponse.json(\n        { error: 'Workflow is cancelled' },\n        { status: 400 }\n      )\n    }\n\n    if (instance.status === 'FAILED') {\n      return NextResponse.json(\n        { error: 'Workflow has failed. Use retry endpoint to retry.' },\n        { status: 400 }\n      )\n    }\n\n    // Apply context updates if provided\n    if (input.contextUpdates) {\n      await workflowExecutor.updateWorkflowContext(\n        em,\n        instanceId,\n        input.contextUpdates\n      )\n      await em.flush()\n    }\n\n    // Build evaluation context\n    const evalContext: transitionHandler.TransitionEvaluationContext = {\n      workflowContext: instance.context,\n      userId: auth.sub,\n      triggerData: input.triggerData,\n    }\n\n    // Find valid transitions from current step\n    const validTransitions = await transitionHandler.findValidTransitions(\n      em,\n      instance,\n      instance.currentStepId!,\n      evalContext\n    )\n\n    const validTransitionsList = validTransitions.filter((t) => t.isValid)\n\n    if (validTransitionsList.length === 0) {\n      return NextResponse.json(\n        {\n          error: 'No valid transitions available',\n          currentStepId: instance.currentStepId,\n          reason: 'All transitions blocked by conditions or business rules',\n        },\n        { status: 400 }\n      )\n    }\n\n    // Select transition\n    let selectedTransition: any\n    if (input.toStepId) {\n      // User specified target step\n      const matchingTransition = validTransitionsList.find(\n        (t) => t.transition?.toStepId === input.toStepId\n      )\n\n      if (!matchingTransition) {\n        return NextResponse.json(\n          {\n            error: `No valid transition to step '${input.toStepId}'`,\n            availableTransitions: validTransitionsList.map((t) => ({\n              toStepId: t.transition?.toStepId,\n              toStepName: t.transition?.toStepName,\n            })),\n          },\n          { status: 400 }\n        )\n      }\n\n      selectedTransition = matchingTransition.transition\n    } else {\n      // Auto-select first valid transition\n      selectedTransition = validTransitionsList[0].transition\n    }\n\n    // Execute transition\n    const execContext: transitionHandler.TransitionExecutionContext = {\n      workflowContext: instance.context,\n      userId: auth.sub,\n      triggerData: input.triggerData,\n    }\n\n    const transitionResult = await transitionHandler.executeTransition(\n      em,\n      container,\n      instance,\n      selectedTransition.fromStepId,\n      selectedTransition.toStepId,\n      execContext\n    )\n\n    if (!transitionResult.success) {\n      return NextResponse.json(\n        {\n          error: 'Transition failed',\n          reason: transitionResult.error || 'Unknown error',\n        },\n        { status: 400 }\n      )\n    }\n\n    // Reload instance to get updated state\n    await em.refresh(instance)\n\n    // Execute workflow to check if we can auto-progress further\n    const executionResult = await workflowExecutor.executeWorkflow(\n      em,\n      container,\n      instanceId,\n      {\n        userId: auth.sub,\n      }\n    )\n\n    return NextResponse.json(\n      {\n        data: {\n          instance: {\n            id: instance.id,\n            status: instance.status,\n            currentStepId: instance.currentStepId,\n            previousStepId: selectedTransition.fromStepId,\n            transitionFired: selectedTransition.transitionId,\n            context: instance.context,\n          },\n          execution: executionResult,\n        },\n        message: 'Workflow advanced successfully',\n      },\n      { status: 200 }\n    )\n  } catch (error) {\n    console.error('Error advancing workflow:', error)\n\n    if (error instanceof Error) {\n      return NextResponse.json(\n        {\n          error: 'Failed to advance workflow',\n          message: error.message,\n        },\n        { status: 500 }\n      )\n    }\n\n    return NextResponse.json(\n      { error: 'Failed to advance workflow' },\n      { status: 500 }\n    )\n  }\n}\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.instances.create'],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: workflowsTag,\n  summary: 'Advance workflow instance',\n  methods: {\n    POST: {\n      summary: 'Manually advance workflow to next step',\n      description: 'Manually advance a workflow instance to the next step. Useful for manual progression, step-by-step testing, user-triggered transitions, and approval flows. Validates transitions and auto-progresses if possible.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: advanceWorkflowRequestSchema,\n      },\n      responses: [\n        { status: 200, description: 'Workflow advanced successfully', schema: advanceWorkflowResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid request, no valid transitions, or workflow already completed/cancelled/failed', schema: workflowErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: workflowErrorSchema },\n        { status: 403, description: 'Insufficient permissions', schema: workflowErrorSchema },\n        { status: 404, description: 'Workflow instance not found', schema: workflowErrorSchema },\n        { status: 500, description: 'Internal server error', schema: workflowErrorSchema },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAWA,SAAsB,oBAAoB;AAE1C,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AAEnD,SAAS,wBAAwB;AACjC,YAAY,sBAAsB;AAElC,YAAY,uBAAuB;AACnC,SAAS,SAAS;AAClB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAC9B,aAAa,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA;AAAA,EACpD,gBAAgB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA;AACzD,CAAC;AAeD,eAAsB,KAAK,SAAsB,SAAuB;AACtE,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAuB,IAAI;AAChD,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,OAAO,cAAc,KAAK;AAEjD,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,yCAAyC;AAAA,QAClD,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,SAAS,MAAM,QAAQ;AAC7B,UAAM,aAAa,OAAO;AAG1B,UAAM,WAAW,MAAM,GAAG,QAAQ,kBAAkB;AAAA,MAClD,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,IACF,CAAC;AAED,QAAI,CAAC,UAAU;AACb,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,8BAA8B;AAAA,QACvC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,gBAAgB,MAAM,YAAY;AAAA,MACtC,KAAK;AAAA,MACL,CAAC,4BAA4B;AAAA;AAAA,MAC7B,EAAE,UAAU,eAAe;AAAA,IAC7B;AAEA,QAAI,CAAC,eAAe;AAClB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,2BAA2B;AAAA,QACpC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,OAAO,MAAM,QAAQ,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAClD,UAAM,aAAa,sBAAsB,UAAU,IAAI;AAEvD,QAAI,CAAC,WAAW,SAAS;AACvB,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO;AAAA,UACP,SAAS,WAAW,MAAM;AAAA,QAC5B;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,QAA8B,WAAW;AAG/C,QAAI,SAAS,WAAW,aAAa;AACnC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,6BAA6B;AAAA,QACtC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,QAAI,SAAS,WAAW,aAAa;AACnC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,wBAAwB;AAAA,QACjC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,QAAI,SAAS,WAAW,UAAU;AAChC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,oDAAoD;AAAA,QAC7D,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,QAAI,MAAM,gBAAgB;AACxB,YAAM,iBAAiB;AAAA,QACrB;AAAA,QACA;AAAA,QACA,MAAM;AAAA,MACR;AACA,YAAM,GAAG,MAAM;AAAA,IACjB;AAGA,UAAM,cAA6D;AAAA,MACjE,iBAAiB,SAAS;AAAA,MAC1B,QAAQ,KAAK;AAAA,MACb,aAAa,MAAM;AAAA,IACrB;AAGA,UAAM,mBAAmB,MAAM,kBAAkB;AAAA,MAC/C;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT;AAAA,IACF;AAEA,UAAM,uBAAuB,iBAAiB,OAAO,CAAC,MAAM,EAAE,OAAO;AAErE,QAAI,qBAAqB,WAAW,GAAG;AACrC,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO;AAAA,UACP,eAAe,SAAS;AAAA,UACxB,QAAQ;AAAA,QACV;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,QAAI;AACJ,QAAI,MAAM,UAAU;AAElB,YAAM,qBAAqB,qBAAqB;AAAA,QAC9C,CAAC,MAAM,EAAE,YAAY,aAAa,MAAM;AAAA,MAC1C;AAEA,UAAI,CAAC,oBAAoB;AACvB,eAAO,aAAa;AAAA,UAClB;AAAA,YACE,OAAO,gCAAgC,MAAM,QAAQ;AAAA,YACrD,sBAAsB,qBAAqB,IAAI,CAAC,OAAO;AAAA,cACrD,UAAU,EAAE,YAAY;AAAA,cACxB,YAAY,EAAE,YAAY;AAAA,YAC5B,EAAE;AAAA,UACJ;AAAA,UACA,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAEA,2BAAqB,mBAAmB;AAAA,IAC1C,OAAO;AAEL,2BAAqB,qBAAqB,CAAC,EAAE;AAAA,IAC/C;AAGA,UAAM,cAA4D;AAAA,MAChE,iBAAiB,SAAS;AAAA,MAC1B,QAAQ,KAAK;AAAA,MACb,aAAa,MAAM;AAAA,IACrB;AAEA,UAAM,mBAAmB,MAAM,kBAAkB;AAAA,MAC/C;AAAA,MACA;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,mBAAmB;AAAA,MACnB;AAAA,IACF;AAEA,QAAI,CAAC,iBAAiB,SAAS;AAC7B,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO;AAAA,UACP,QAAQ,iBAAiB,SAAS;AAAA,QACpC;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,GAAG,QAAQ,QAAQ;AAGzB,UAAM,kBAAkB,MAAM,iBAAiB;AAAA,MAC7C;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,QACE,QAAQ,KAAK;AAAA,MACf;AAAA,IACF;AAEA,WAAO,aAAa;AAAA,MAClB;AAAA,QACE,MAAM;AAAA,UACJ,UAAU;AAAA,YACR,IAAI,SAAS;AAAA,YACb,QAAQ,SAAS;AAAA,YACjB,eAAe,SAAS;AAAA,YACxB,gBAAgB,mBAAmB;AAAA,YACnC,iBAAiB,mBAAmB;AAAA,YACpC,SAAS,SAAS;AAAA,UACpB;AAAA,UACA,WAAW;AAAA,QACb;AAAA,QACA,SAAS;AAAA,MACX;AAAA,MACA,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,6BAA6B,KAAK;AAEhD,QAAI,iBAAiB,OAAO;AAC1B,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO;AAAA,UACP,SAAS,MAAM;AAAA,QACjB;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,6BAA6B;AAAA,MACtC,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,4BAA4B;AAChD;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,kCAAkC,QAAQ,8BAA8B;AAAA,MACtG;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,yFAAyF,QAAQ,oBAAoB;AAAA,QACjJ,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,oBAAoB;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,+BAA+B,QAAQ,oBAAoB;AAAA,QACvF,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,oBAAoB;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["/**\n * POST /api/workflows/instances/:id/advance\n *\n * Manually advance a workflow instance to the next step\n * Useful for:\n * - Manual workflow progression in demos\n * - Step-by-step testing\n * - User-triggered transitions\n * - Manual approval flows\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { WorkflowInstance } from '../../../../data/entities'\nimport * as workflowExecutor from '../../../../lib/workflow-executor'\nimport * as stepHandler from '../../../../lib/step-handler'\nimport * as transitionHandler from '../../../../lib/transition-handler'\nimport { z } from 'zod'\nimport {\n  workflowsTag,\n  advanceWorkflowRequestSchema,\n  advanceWorkflowResponseSchema,\n  workflowErrorSchema,\n} from '../../../openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows')\n\n// Validation schema\nconst advanceWorkflowSchema = z.object({\n  toStepId: z.string().optional(), // Optional - will auto-select if not provided\n  triggerData: z.record(z.string(), z.any()).optional(), // Optional trigger data\n  contextUpdates: z.record(z.string(), z.any()).optional(), // Optional context updates\n})\n\ntype AdvanceWorkflowInput = z.infer<typeof advanceWorkflowSchema>\n\ninterface RouteContext {\n  params: Promise<{\n    id: string\n  }>\n}\n\n/**\n * POST /api/workflows/instances/:id/advance\n *\n * Advance workflow to next step\n */\nexport async function POST(request: NextRequest, context: RouteContext) {\n  try {\n    const container = await createRequestContainer()\n    const em = container.resolve<EntityManager>('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = scope?.selectedId ?? auth.orgId\n\n    if (!tenantId || !organizationId) {\n      return NextResponse.json(\n        { error: 'Missing tenant or organization context' },\n        { status: 400 }\n      )\n    }\n\n    // Get instance ID from params\n    const params = await context.params\n    const instanceId = params.id\n\n    // Load and verify instance\n    const instance = await em.findOne(WorkflowInstance, {\n      id: instanceId,\n      tenantId,\n      organizationId,\n    })\n\n    if (!instance) {\n      return NextResponse.json(\n        { error: 'Workflow instance not found' },\n        { status: 404 }\n      )\n    }\n\n    // Check permission\n    const rbacService = container.resolve('rbacService')\n    const hasPermission = await rbacService.userHasAllFeatures(\n      auth.sub,\n      ['workflows.instances.create'], // Using create permission for advancing\n      { tenantId, organizationId }\n    )\n\n    if (!hasPermission) {\n      return NextResponse.json(\n        { error: 'Insufficient permissions' },\n        { status: 403 }\n      )\n    }\n\n    // Parse request body\n    const body = await request.json().catch(() => ({}))\n    const validation = advanceWorkflowSchema.safeParse(body)\n\n    if (!validation.success) {\n      return NextResponse.json(\n        {\n          error: 'Validation failed',\n          details: validation.error.issues,\n        },\n        { status: 400 }\n      )\n    }\n\n    const input: AdvanceWorkflowInput = validation.data\n\n    // Check workflow status\n    if (instance.status === 'COMPLETED') {\n      return NextResponse.json(\n        { error: 'Workflow already completed' },\n        { status: 400 }\n      )\n    }\n\n    if (instance.status === 'CANCELLED') {\n      return NextResponse.json(\n        { error: 'Workflow is cancelled' },\n        { status: 400 }\n      )\n    }\n\n    if (instance.status === 'FAILED') {\n      return NextResponse.json(\n        { error: 'Workflow has failed. Use retry endpoint to retry.' },\n        { status: 400 }\n      )\n    }\n\n    // Apply context updates if provided\n    if (input.contextUpdates) {\n      await workflowExecutor.updateWorkflowContext(\n        em,\n        instanceId,\n        input.contextUpdates\n      )\n      await em.flush()\n    }\n\n    // Build evaluation context\n    const evalContext: transitionHandler.TransitionEvaluationContext = {\n      workflowContext: instance.context,\n      userId: auth.sub,\n      triggerData: input.triggerData,\n    }\n\n    // Find valid transitions from current step\n    const validTransitions = await transitionHandler.findValidTransitions(\n      em,\n      instance,\n      instance.currentStepId!,\n      evalContext\n    )\n\n    const validTransitionsList = validTransitions.filter((t) => t.isValid)\n\n    if (validTransitionsList.length === 0) {\n      return NextResponse.json(\n        {\n          error: 'No valid transitions available',\n          currentStepId: instance.currentStepId,\n          reason: 'All transitions blocked by conditions or business rules',\n        },\n        { status: 400 }\n      )\n    }\n\n    // Select transition\n    let selectedTransition: any\n    if (input.toStepId) {\n      // User specified target step\n      const matchingTransition = validTransitionsList.find(\n        (t) => t.transition?.toStepId === input.toStepId\n      )\n\n      if (!matchingTransition) {\n        return NextResponse.json(\n          {\n            error: `No valid transition to step '${input.toStepId}'`,\n            availableTransitions: validTransitionsList.map((t) => ({\n              toStepId: t.transition?.toStepId,\n              toStepName: t.transition?.toStepName,\n            })),\n          },\n          { status: 400 }\n        )\n      }\n\n      selectedTransition = matchingTransition.transition\n    } else {\n      // Auto-select first valid transition\n      selectedTransition = validTransitionsList[0].transition\n    }\n\n    // Execute transition\n    const execContext: transitionHandler.TransitionExecutionContext = {\n      workflowContext: instance.context,\n      userId: auth.sub,\n      triggerData: input.triggerData,\n    }\n\n    const transitionResult = await transitionHandler.executeTransition(\n      em,\n      container,\n      instance,\n      selectedTransition.fromStepId,\n      selectedTransition.toStepId,\n      execContext\n    )\n\n    if (!transitionResult.success) {\n      return NextResponse.json(\n        {\n          error: 'Transition failed',\n          reason: transitionResult.error || 'Unknown error',\n        },\n        { status: 400 }\n      )\n    }\n\n    // Reload instance to get updated state\n    await em.refresh(instance)\n\n    // Execute workflow to check if we can auto-progress further\n    const executionResult = await workflowExecutor.executeWorkflow(\n      em,\n      container,\n      instanceId,\n      {\n        userId: auth.sub,\n      }\n    )\n\n    return NextResponse.json(\n      {\n        data: {\n          instance: {\n            id: instance.id,\n            status: instance.status,\n            currentStepId: instance.currentStepId,\n            previousStepId: selectedTransition.fromStepId,\n            transitionFired: selectedTransition.transitionId,\n            context: instance.context,\n          },\n          execution: executionResult,\n        },\n        message: 'Workflow advanced successfully',\n      },\n      { status: 200 }\n    )\n  } catch (error) {\n    logger.error('Error advancing workflow', { err: error })\n\n    if (error instanceof Error) {\n      return NextResponse.json(\n        {\n          error: 'Failed to advance workflow',\n          message: error.message,\n        },\n        { status: 500 }\n      )\n    }\n\n    return NextResponse.json(\n      { error: 'Failed to advance workflow' },\n      { status: 500 }\n    )\n  }\n}\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.instances.create'],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: workflowsTag,\n  summary: 'Advance workflow instance',\n  methods: {\n    POST: {\n      summary: 'Manually advance workflow to next step',\n      description: 'Manually advance a workflow instance to the next step. Useful for manual progression, step-by-step testing, user-triggered transitions, and approval flows. Validates transitions and auto-progresses if possible.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: advanceWorkflowRequestSchema,\n      },\n      responses: [\n        { status: 200, description: 'Workflow advanced successfully', schema: advanceWorkflowResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid request, no valid transitions, or workflow already completed/cancelled/failed', schema: workflowErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: workflowErrorSchema },\n        { status: 403, description: 'Insufficient permissions', schema: workflowErrorSchema },\n        { status: 404, description: 'Workflow instance not found', schema: workflowErrorSchema },\n        { status: 500, description: 'Internal server error', schema: workflowErrorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAWA,SAAsB,oBAAoB;AAE1C,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AAEnD,SAAS,wBAAwB;AACjC,YAAY,sBAAsB;AAElC,YAAY,uBAAuB;AACnC,SAAS,SAAS;AAClB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAGvC,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAC9B,aAAa,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA;AAAA,EACpD,gBAAgB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA;AACzD,CAAC;AAeD,eAAsB,KAAK,SAAsB,SAAuB;AACtE,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAuB,IAAI;AAChD,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,OAAO,cAAc,KAAK;AAEjD,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,yCAAyC;AAAA,QAClD,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,SAAS,MAAM,QAAQ;AAC7B,UAAM,aAAa,OAAO;AAG1B,UAAM,WAAW,MAAM,GAAG,QAAQ,kBAAkB;AAAA,MAClD,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,IACF,CAAC;AAED,QAAI,CAAC,UAAU;AACb,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,8BAA8B;AAAA,QACvC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,gBAAgB,MAAM,YAAY;AAAA,MACtC,KAAK;AAAA,MACL,CAAC,4BAA4B;AAAA;AAAA,MAC7B,EAAE,UAAU,eAAe;AAAA,IAC7B;AAEA,QAAI,CAAC,eAAe;AAClB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,2BAA2B;AAAA,QACpC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,OAAO,MAAM,QAAQ,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAClD,UAAM,aAAa,sBAAsB,UAAU,IAAI;AAEvD,QAAI,CAAC,WAAW,SAAS;AACvB,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO;AAAA,UACP,SAAS,WAAW,MAAM;AAAA,QAC5B;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,QAA8B,WAAW;AAG/C,QAAI,SAAS,WAAW,aAAa;AACnC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,6BAA6B;AAAA,QACtC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,QAAI,SAAS,WAAW,aAAa;AACnC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,wBAAwB;AAAA,QACjC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,QAAI,SAAS,WAAW,UAAU;AAChC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,oDAAoD;AAAA,QAC7D,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,QAAI,MAAM,gBAAgB;AACxB,YAAM,iBAAiB;AAAA,QACrB;AAAA,QACA;AAAA,QACA,MAAM;AAAA,MACR;AACA,YAAM,GAAG,MAAM;AAAA,IACjB;AAGA,UAAM,cAA6D;AAAA,MACjE,iBAAiB,SAAS;AAAA,MAC1B,QAAQ,KAAK;AAAA,MACb,aAAa,MAAM;AAAA,IACrB;AAGA,UAAM,mBAAmB,MAAM,kBAAkB;AAAA,MAC/C;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT;AAAA,IACF;AAEA,UAAM,uBAAuB,iBAAiB,OAAO,CAAC,MAAM,EAAE,OAAO;AAErE,QAAI,qBAAqB,WAAW,GAAG;AACrC,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO;AAAA,UACP,eAAe,SAAS;AAAA,UACxB,QAAQ;AAAA,QACV;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,QAAI;AACJ,QAAI,MAAM,UAAU;AAElB,YAAM,qBAAqB,qBAAqB;AAAA,QAC9C,CAAC,MAAM,EAAE,YAAY,aAAa,MAAM;AAAA,MAC1C;AAEA,UAAI,CAAC,oBAAoB;AACvB,eAAO,aAAa;AAAA,UAClB;AAAA,YACE,OAAO,gCAAgC,MAAM,QAAQ;AAAA,YACrD,sBAAsB,qBAAqB,IAAI,CAAC,OAAO;AAAA,cACrD,UAAU,EAAE,YAAY;AAAA,cACxB,YAAY,EAAE,YAAY;AAAA,YAC5B,EAAE;AAAA,UACJ;AAAA,UACA,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAEA,2BAAqB,mBAAmB;AAAA,IAC1C,OAAO;AAEL,2BAAqB,qBAAqB,CAAC,EAAE;AAAA,IAC/C;AAGA,UAAM,cAA4D;AAAA,MAChE,iBAAiB,SAAS;AAAA,MAC1B,QAAQ,KAAK;AAAA,MACb,aAAa,MAAM;AAAA,IACrB;AAEA,UAAM,mBAAmB,MAAM,kBAAkB;AAAA,MAC/C;AAAA,MACA;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,mBAAmB;AAAA,MACnB;AAAA,IACF;AAEA,QAAI,CAAC,iBAAiB,SAAS;AAC7B,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO;AAAA,UACP,QAAQ,iBAAiB,SAAS;AAAA,QACpC;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,GAAG,QAAQ,QAAQ;AAGzB,UAAM,kBAAkB,MAAM,iBAAiB;AAAA,MAC7C;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,QACE,QAAQ,KAAK;AAAA,MACf;AAAA,IACF;AAEA,WAAO,aAAa;AAAA,MAClB;AAAA,QACE,MAAM;AAAA,UACJ,UAAU;AAAA,YACR,IAAI,SAAS;AAAA,YACb,QAAQ,SAAS;AAAA,YACjB,eAAe,SAAS;AAAA,YACxB,gBAAgB,mBAAmB;AAAA,YACnC,iBAAiB,mBAAmB;AAAA,YACpC,SAAS,SAAS;AAAA,UACpB;AAAA,UACA,WAAW;AAAA,QACb;AAAA,QACA,SAAS;AAAA,MACX;AAAA,MACA,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF,SAAS,OAAO;AACd,WAAO,MAAM,4BAA4B,EAAE,KAAK,MAAM,CAAC;AAEvD,QAAI,iBAAiB,OAAO;AAC1B,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO;AAAA,UACP,SAAS,MAAM;AAAA,QACjB;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,6BAA6B;AAAA,MACtC,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,4BAA4B;AAChD;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,kCAAkC,QAAQ,8BAA8B;AAAA,MACtG;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,yFAAyF,QAAQ,oBAAoB;AAAA,QACjJ,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,oBAAoB;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,+BAA+B,QAAQ,oBAAoB;AAAA,QACvF,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,oBAAoB;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/workflows/api/instances/[id]/cancel/route.js

@@ -6,6 +6,8 @@ import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/d
 import { WorkflowInstance } from "../../../../data/entities.js";
 import * as workflowExecutor from "../../../../lib/workflow-executor.js";
 import { workflowInstanceResponseSchema } from "../../../openapi.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("workflows");
 const metadata = {
   requireAuth: true,
   requireFeatures: ["workflows.instances.cancel"]
@@ -69,7 +71,7 @@ async function POST(request, context) {
       message: "Workflow cancelled successfully"
     });
   } catch (error) {
-    console.error("Error cancelling workflow instance:", error);
+    logger.error("Error cancelling workflow instance", { err: error });
     return NextResponse.json(
       { error: "Failed to cancel workflow instance" },
       { status: 500 }

package/dist/modules/workflows/api/instances/[id]/cancel/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/workflows/api/instances/%5Bid%5D/cancel/route.ts"],
-  "sourcesContent": ["/**\n * Cancel Workflow Instance API\n *\n * Endpoint:\n * - POST /api/workflows/instances/[id]/cancel - Cancel a running workflow instance\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { WorkflowInstance } from '../../../../data/entities'\nimport * as workflowExecutor from '../../../../lib/workflow-executor'\nimport { workflowInstanceResponseSchema } from '../../../openapi'\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.instances.cancel'],\n}\n\ninterface RouteContext {\n  params: Promise<{\n    id: string\n  }>\n}\n\n/**\n * POST /api/workflows/instances/[id]/cancel\n *\n * Cancel a running workflow instance\n */\nexport async function POST(\n  request: NextRequest,\n  context: RouteContext\n) {\n  try {\n    const params = await context.params\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = scope?.selectedId ?? auth.orgId\n\n    if (!tenantId || !organizationId) {\n      return NextResponse.json(\n        { error: 'Missing tenant or organization context' },\n        { status: 400 }\n      )\n    }\n\n    // Check cancel permission\n    const rbacService = container.resolve('rbacService')\n    const hasPermission = await rbacService.userHasAllFeatures(\n      auth.sub,\n      ['workflows.instances.cancel'],\n      {\n        tenantId,\n        organizationId,\n      }\n    )\n\n    if (!hasPermission) {\n      return NextResponse.json(\n        { error: 'Insufficient permissions' },\n        { status: 403 }\n      )\n    }\n\n    const instance = await em.findOne(WorkflowInstance, {\n      id: params.id,\n      tenantId,\n      organizationId,\n    })\n\n    if (!instance) {\n      return NextResponse.json(\n        { error: 'Workflow instance not found' },\n        { status: 404 }\n      )\n    }\n\n    // Check if instance can be cancelled\n    if (instance.status !== 'RUNNING' && instance.status !== 'PAUSED') {\n      return NextResponse.json(\n        {\n          error: `Cannot cancel workflow in ${instance.status} status. Only RUNNING or PAUSED workflows can be cancelled.`,\n        },\n        { status: 400 }\n      )\n    }\n\n    // Cancel the workflow\n    await workflowExecutor.completeWorkflow(em, container, params.id, 'CANCELLED')\n\n    // Reload instance to get updated state\n    await em.refresh(instance)\n\n    return NextResponse.json({\n      data: instance,\n      message: 'Workflow cancelled successfully',\n    })\n  } catch (error) {\n    console.error('Error cancelling workflow instance:', error)\n    return NextResponse.json(\n      { error: 'Failed to cancel workflow instance' },\n      { status: 500 }\n    )\n  }\n}\n\nexport const openApi = {\n  methods: {\n    POST: {\n      summary: 'Cancel workflow instance',\n      description: 'Cancel a running or paused workflow instance. The workflow will be marked as CANCELLED and will not execute further.',\n      tags: ['Workflows'],\n      params: z.object({\n        id: z.string().uuid(),\n      }),\n      responses: [\n        {\n          status: 200,\n          description: 'Workflow cancelled successfully',\n          schema: z.object({\n            data: workflowInstanceResponseSchema,\n            message: z.string(),\n          }),\n        },\n        {\n          status: 400,\n          description: 'Bad request - Workflow cannot be cancelled in current status',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 401,\n          description: 'Unauthorized',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 403,\n          description: 'Forbidden - Insufficient permissions',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 404,\n          description: 'Workflow instance not found',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 500,\n          description: 'Internal server error',\n          schema: z.object({ error: z.string() }),\n        },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAOA,SAAsB,oBAAoB;AAC1C,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,wBAAwB;AACjC,YAAY,sBAAsB;AAClC,SAAS,sCAAsC;AAExC,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,4BAA4B;AAChD;AAaA,eAAsB,KACpB,SACA,SACA;AACA,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAC7B,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,OAAO,cAAc,KAAK;AAEjD,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,yCAAyC;AAAA,QAClD,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,gBAAgB,MAAM,YAAY;AAAA,MACtC,KAAK;AAAA,MACL,CAAC,4BAA4B;AAAA,MAC7B;AAAA,QACE;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,eAAe;AAClB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,2BAA2B;AAAA,QACpC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,GAAG,QAAQ,kBAAkB;AAAA,MAClD,IAAI,OAAO;AAAA,MACX;AAAA,MACA;AAAA,IACF,CAAC;AAED,QAAI,CAAC,UAAU;AACb,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,8BAA8B;AAAA,QACvC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,QAAI,SAAS,WAAW,aAAa,SAAS,WAAW,UAAU;AACjE,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO,6BAA6B,SAAS,MAAM;AAAA,QACrD;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,iBAAiB,iBAAiB,IAAI,WAAW,OAAO,IAAI,WAAW;AAG7E,UAAM,GAAG,QAAQ,QAAQ;AAEzB,WAAO,aAAa,KAAK;AAAA,MACvB,MAAM;AAAA,MACN,SAAS;AAAA,IACX,CAAC;AAAA,EACH,SAAS,OAAO;AACd,YAAQ,MAAM,uCAAuC,KAAK;AAC1D,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,qCAAqC;AAAA,MAC9C,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,MAAM,CAAC,WAAW;AAAA,MAClB,QAAQ,EAAE,OAAO;AAAA,QACf,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,MACtB,CAAC;AAAA,MACD,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,MAAM;AAAA,YACN,SAAS,EAAE,OAAO;AAAA,UACpB,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["/**\n * Cancel Workflow Instance API\n *\n * Endpoint:\n * - POST /api/workflows/instances/[id]/cancel - Cancel a running workflow instance\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { WorkflowInstance } from '../../../../data/entities'\nimport * as workflowExecutor from '../../../../lib/workflow-executor'\nimport { workflowInstanceResponseSchema } from '../../../openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows')\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.instances.cancel'],\n}\n\ninterface RouteContext {\n  params: Promise<{\n    id: string\n  }>\n}\n\n/**\n * POST /api/workflows/instances/[id]/cancel\n *\n * Cancel a running workflow instance\n */\nexport async function POST(\n  request: NextRequest,\n  context: RouteContext\n) {\n  try {\n    const params = await context.params\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = scope?.selectedId ?? auth.orgId\n\n    if (!tenantId || !organizationId) {\n      return NextResponse.json(\n        { error: 'Missing tenant or organization context' },\n        { status: 400 }\n      )\n    }\n\n    // Check cancel permission\n    const rbacService = container.resolve('rbacService')\n    const hasPermission = await rbacService.userHasAllFeatures(\n      auth.sub,\n      ['workflows.instances.cancel'],\n      {\n        tenantId,\n        organizationId,\n      }\n    )\n\n    if (!hasPermission) {\n      return NextResponse.json(\n        { error: 'Insufficient permissions' },\n        { status: 403 }\n      )\n    }\n\n    const instance = await em.findOne(WorkflowInstance, {\n      id: params.id,\n      tenantId,\n      organizationId,\n    })\n\n    if (!instance) {\n      return NextResponse.json(\n        { error: 'Workflow instance not found' },\n        { status: 404 }\n      )\n    }\n\n    // Check if instance can be cancelled\n    if (instance.status !== 'RUNNING' && instance.status !== 'PAUSED') {\n      return NextResponse.json(\n        {\n          error: `Cannot cancel workflow in ${instance.status} status. Only RUNNING or PAUSED workflows can be cancelled.`,\n        },\n        { status: 400 }\n      )\n    }\n\n    // Cancel the workflow\n    await workflowExecutor.completeWorkflow(em, container, params.id, 'CANCELLED')\n\n    // Reload instance to get updated state\n    await em.refresh(instance)\n\n    return NextResponse.json({\n      data: instance,\n      message: 'Workflow cancelled successfully',\n    })\n  } catch (error) {\n    logger.error('Error cancelling workflow instance', { err: error })\n    return NextResponse.json(\n      { error: 'Failed to cancel workflow instance' },\n      { status: 500 }\n    )\n  }\n}\n\nexport const openApi = {\n  methods: {\n    POST: {\n      summary: 'Cancel workflow instance',\n      description: 'Cancel a running or paused workflow instance. The workflow will be marked as CANCELLED and will not execute further.',\n      tags: ['Workflows'],\n      params: z.object({\n        id: z.string().uuid(),\n      }),\n      responses: [\n        {\n          status: 200,\n          description: 'Workflow cancelled successfully',\n          schema: z.object({\n            data: workflowInstanceResponseSchema,\n            message: z.string(),\n          }),\n        },\n        {\n          status: 400,\n          description: 'Bad request - Workflow cannot be cancelled in current status',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 401,\n          description: 'Unauthorized',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 403,\n          description: 'Forbidden - Insufficient permissions',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 404,\n          description: 'Workflow instance not found',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 500,\n          description: 'Internal server error',\n          schema: z.object({ error: z.string() }),\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAOA,SAAsB,oBAAoB;AAC1C,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,wBAAwB;AACjC,YAAY,sBAAsB;AAClC,SAAS,sCAAsC;AAC/C,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,4BAA4B;AAChD;AAaA,eAAsB,KACpB,SACA,SACA;AACA,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAC7B,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,OAAO,cAAc,KAAK;AAEjD,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,yCAAyC;AAAA,QAClD,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,gBAAgB,MAAM,YAAY;AAAA,MACtC,KAAK;AAAA,MACL,CAAC,4BAA4B;AAAA,MAC7B;AAAA,QACE;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,eAAe;AAClB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,2BAA2B;AAAA,QACpC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,GAAG,QAAQ,kBAAkB;AAAA,MAClD,IAAI,OAAO;AAAA,MACX;AAAA,MACA;AAAA,IACF,CAAC;AAED,QAAI,CAAC,UAAU;AACb,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,8BAA8B;AAAA,QACvC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,QAAI,SAAS,WAAW,aAAa,SAAS,WAAW,UAAU;AACjE,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO,6BAA6B,SAAS,MAAM;AAAA,QACrD;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,iBAAiB,iBAAiB,IAAI,WAAW,OAAO,IAAI,WAAW;AAG7E,UAAM,GAAG,QAAQ,QAAQ;AAEzB,WAAO,aAAa,KAAK;AAAA,MACvB,MAAM;AAAA,MACN,SAAS;AAAA,IACX,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,MAAM,sCAAsC,EAAE,KAAK,MAAM,CAAC;AACjE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,qCAAqC;AAAA,MAC9C,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,MAAM,CAAC,WAAW;AAAA,MAClB,QAAQ,EAAE,OAAO;AAAA,QACf,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,MACtB,CAAC;AAAA,MACD,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,MAAM;AAAA,YACN,SAAS,EAAE,OAAO;AAAA,UACpB,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/workflows/api/instances/[id]/events/route.js

@@ -6,6 +6,8 @@ import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/d
 import { resolveOrganizationScopeFilter } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import { WorkflowInstance, WorkflowEvent } from "../../../../data/entities.js";
 import { workflowEventRowSchema, paginationSchema } from "../../../openapi.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("workflows");
 const metadata = {
   requireAuth: true,
   requireFeatures: ["workflows.instances.view"]
@@ -70,7 +72,7 @@ async function GET(request, context) {
       }
     });
   } catch (error) {
-    console.error("Error getting workflow events:", error);
+    logger.error("Error getting workflow events", { err: error });
     return NextResponse.json(
       { error: "Failed to get workflow events" },
       { status: 500 }

package/dist/modules/workflows/api/instances/[id]/events/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/workflows/api/instances/%5Bid%5D/events/route.ts"],
-  "sourcesContent": ["/**\n * Workflow Instance Events API\n *\n * Endpoint:\n * - GET /api/workflows/instances/[id]/events - Get event history for a workflow instance\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { WorkflowInstance, WorkflowEvent } from '../../../../data/entities'\nimport { workflowEventRowSchema, paginationSchema } from '../../../openapi'\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.instances.view'],\n}\n\ninterface RouteContext {\n  params: Promise<{\n    id: string\n  }>\n}\n\n/**\n * GET /api/workflows/instances/[id]/events\n *\n * Get event history for a workflow instance\n */\nexport async function GET(\n  request: NextRequest,\n  context: RouteContext\n) {\n  try {\n    const params = await context.params\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const orgFilter = resolveOrganizationScopeFilter(scope, auth)\n\n    if (!tenantId) {\n      return NextResponse.json(\n        { error: 'Missing tenant context' },\n        { status: 400 }\n      )\n    }\n\n    // Verify instance exists and belongs to tenant\n    const instance = await em.findOne(WorkflowInstance, {\n      id: params.id,\n      tenantId,\n      ...orgFilter.where,\n    })\n\n    if (!instance) {\n      return NextResponse.json(\n        { error: 'Workflow instance not found' },\n        { status: 404 }\n      )\n    }\n\n    const { searchParams } = new URL(request.url)\n    const eventType = searchParams.get('eventType')\n    const limit = parseInt(searchParams.get('limit') || '100')\n    const offset = parseInt(searchParams.get('offset') || '0')\n\n    // Build where clause\n    const where: any = {\n      workflowInstanceId: params.id,\n      tenantId,\n      ...orgFilter.where,\n    }\n\n    if (eventType) {\n      where.eventType = eventType\n    }\n\n    const [events, total] = await em.findAndCount(\n      WorkflowEvent,\n      where,\n      {\n        orderBy: { occurredAt: 'DESC' },\n        limit,\n        offset,\n      }\n    )\n\n    return NextResponse.json({\n      data: events,\n      pagination: {\n        total,\n        limit,\n        offset,\n        hasMore: offset + limit < total,\n      },\n    })\n  } catch (error) {\n    console.error('Error getting workflow events:', error)\n    return NextResponse.json(\n      { error: 'Failed to get workflow events' },\n      { status: 500 }\n    )\n  }\n}\n\nexport const openApi = {\n  methods: {\n    GET: {\n      summary: 'Get workflow instance events',\n      description: 'Get a chronological list of events for a workflow instance. Events track all state changes, transitions, and activities.',\n      tags: ['Workflows'],\n      params: z.object({\n        id: z.string().uuid(),\n      }),\n      query: z.object({\n        eventType: z.string().optional(),\n        limit: z.number().int().positive().default(100).optional(),\n        offset: z.number().int().min(0).default(0).optional(),\n      }),\n      responses: [\n        {\n          status: 200,\n          description: 'List of workflow events',\n          schema: z.object({\n            data: z.array(workflowEventRowSchema),\n            pagination: paginationSchema,\n          }),\n        },\n        {\n          status: 401,\n          description: 'Unauthorized',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 404,\n          description: 'Workflow instance not found',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 500,\n          description: 'Internal server error',\n          schema: z.object({ error: z.string() }),\n        },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAOA,SAAsB,oBAAoB;AAC1C,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,sCAAsC;AAC/C,SAAS,kBAAkB,qBAAqB;AAChD,SAAS,wBAAwB,wBAAwB;AAElD,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,0BAA0B;AAC9C;AAaA,eAAsB,IACpB,SACA,SACA;AACA,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAC7B,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,YAAY,+BAA+B,OAAO,IAAI;AAE5D,QAAI,CAAC,UAAU;AACb,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,yBAAyB;AAAA,QAClC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,WAAW,MAAM,GAAG,QAAQ,kBAAkB;AAAA,MAClD,IAAI,OAAO;AAAA,MACX;AAAA,MACA,GAAG,UAAU;AAAA,IACf,CAAC;AAED,QAAI,CAAC,UAAU;AACb,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,8BAA8B;AAAA,QACvC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,EAAE,aAAa,IAAI,IAAI,IAAI,QAAQ,GAAG;AAC5C,UAAM,YAAY,aAAa,IAAI,WAAW;AAC9C,UAAM,QAAQ,SAAS,aAAa,IAAI,OAAO,KAAK,KAAK;AACzD,UAAM,SAAS,SAAS,aAAa,IAAI,QAAQ,KAAK,GAAG;AAGzD,UAAM,QAAa;AAAA,MACjB,oBAAoB,OAAO;AAAA,MAC3B;AAAA,MACA,GAAG,UAAU;AAAA,IACf;AAEA,QAAI,WAAW;AACb,YAAM,YAAY;AAAA,IACpB;AAEA,UAAM,CAAC,QAAQ,KAAK,IAAI,MAAM,GAAG;AAAA,MAC/B;AAAA,MACA;AAAA,MACA;AAAA,QACE,SAAS,EAAE,YAAY,OAAO;AAAA,QAC9B;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,WAAO,aAAa,KAAK;AAAA,MACvB,MAAM;AAAA,MACN,YAAY;AAAA,QACV;AAAA,QACA;AAAA,QACA;AAAA,QACA,SAAS,SAAS,QAAQ;AAAA,MAC5B;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,YAAQ,MAAM,kCAAkC,KAAK;AACrD,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,gCAAgC;AAAA,MACzC,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,MAAM,CAAC,WAAW;AAAA,MAClB,QAAQ,EAAE,OAAO;AAAA,QACf,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,MACtB,CAAC;AAAA,MACD,OAAO,EAAE,OAAO;AAAA,QACd,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,QAC/B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,GAAG,EAAE,SAAS;AAAA,QACzD,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,MACtD,CAAC;AAAA,MACD,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,MAAM,EAAE,MAAM,sBAAsB;AAAA,YACpC,YAAY;AAAA,UACd,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["/**\n * Workflow Instance Events API\n *\n * Endpoint:\n * - GET /api/workflows/instances/[id]/events - Get event history for a workflow instance\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { WorkflowInstance, WorkflowEvent } from '../../../../data/entities'\nimport { workflowEventRowSchema, paginationSchema } from '../../../openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows')\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.instances.view'],\n}\n\ninterface RouteContext {\n  params: Promise<{\n    id: string\n  }>\n}\n\n/**\n * GET /api/workflows/instances/[id]/events\n *\n * Get event history for a workflow instance\n */\nexport async function GET(\n  request: NextRequest,\n  context: RouteContext\n) {\n  try {\n    const params = await context.params\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const orgFilter = resolveOrganizationScopeFilter(scope, auth)\n\n    if (!tenantId) {\n      return NextResponse.json(\n        { error: 'Missing tenant context' },\n        { status: 400 }\n      )\n    }\n\n    // Verify instance exists and belongs to tenant\n    const instance = await em.findOne(WorkflowInstance, {\n      id: params.id,\n      tenantId,\n      ...orgFilter.where,\n    })\n\n    if (!instance) {\n      return NextResponse.json(\n        { error: 'Workflow instance not found' },\n        { status: 404 }\n      )\n    }\n\n    const { searchParams } = new URL(request.url)\n    const eventType = searchParams.get('eventType')\n    const limit = parseInt(searchParams.get('limit') || '100')\n    const offset = parseInt(searchParams.get('offset') || '0')\n\n    // Build where clause\n    const where: any = {\n      workflowInstanceId: params.id,\n      tenantId,\n      ...orgFilter.where,\n    }\n\n    if (eventType) {\n      where.eventType = eventType\n    }\n\n    const [events, total] = await em.findAndCount(\n      WorkflowEvent,\n      where,\n      {\n        orderBy: { occurredAt: 'DESC' },\n        limit,\n        offset,\n      }\n    )\n\n    return NextResponse.json({\n      data: events,\n      pagination: {\n        total,\n        limit,\n        offset,\n        hasMore: offset + limit < total,\n      },\n    })\n  } catch (error) {\n    logger.error('Error getting workflow events', { err: error })\n    return NextResponse.json(\n      { error: 'Failed to get workflow events' },\n      { status: 500 }\n    )\n  }\n}\n\nexport const openApi = {\n  methods: {\n    GET: {\n      summary: 'Get workflow instance events',\n      description: 'Get a chronological list of events for a workflow instance. Events track all state changes, transitions, and activities.',\n      tags: ['Workflows'],\n      params: z.object({\n        id: z.string().uuid(),\n      }),\n      query: z.object({\n        eventType: z.string().optional(),\n        limit: z.number().int().positive().default(100).optional(),\n        offset: z.number().int().min(0).default(0).optional(),\n      }),\n      responses: [\n        {\n          status: 200,\n          description: 'List of workflow events',\n          schema: z.object({\n            data: z.array(workflowEventRowSchema),\n            pagination: paginationSchema,\n          }),\n        },\n        {\n          status: 401,\n          description: 'Unauthorized',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 404,\n          description: 'Workflow instance not found',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 500,\n          description: 'Internal server error',\n          schema: z.object({ error: z.string() }),\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAOA,SAAsB,oBAAoB;AAC1C,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,sCAAsC;AAC/C,SAAS,kBAAkB,qBAAqB;AAChD,SAAS,wBAAwB,wBAAwB;AACzD,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,0BAA0B;AAC9C;AAaA,eAAsB,IACpB,SACA,SACA;AACA,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAC7B,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,YAAY,+BAA+B,OAAO,IAAI;AAE5D,QAAI,CAAC,UAAU;AACb,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,yBAAyB;AAAA,QAClC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,WAAW,MAAM,GAAG,QAAQ,kBAAkB;AAAA,MAClD,IAAI,OAAO;AAAA,MACX;AAAA,MACA,GAAG,UAAU;AAAA,IACf,CAAC;AAED,QAAI,CAAC,UAAU;AACb,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,8BAA8B;AAAA,QACvC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,EAAE,aAAa,IAAI,IAAI,IAAI,QAAQ,GAAG;AAC5C,UAAM,YAAY,aAAa,IAAI,WAAW;AAC9C,UAAM,QAAQ,SAAS,aAAa,IAAI,OAAO,KAAK,KAAK;AACzD,UAAM,SAAS,SAAS,aAAa,IAAI,QAAQ,KAAK,GAAG;AAGzD,UAAM,QAAa;AAAA,MACjB,oBAAoB,OAAO;AAAA,MAC3B;AAAA,MACA,GAAG,UAAU;AAAA,IACf;AAEA,QAAI,WAAW;AACb,YAAM,YAAY;AAAA,IACpB;AAEA,UAAM,CAAC,QAAQ,KAAK,IAAI,MAAM,GAAG;AAAA,MAC/B;AAAA,MACA;AAAA,MACA;AAAA,QACE,SAAS,EAAE,YAAY,OAAO;AAAA,QAC9B;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,WAAO,aAAa,KAAK;AAAA,MACvB,MAAM;AAAA,MACN,YAAY;AAAA,QACV;AAAA,QACA;AAAA,QACA;AAAA,QACA,SAAS,SAAS,QAAQ;AAAA,MAC5B;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,MAAM,iCAAiC,EAAE,KAAK,MAAM,CAAC;AAC5D,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,gCAAgC;AAAA,MACzC,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,MAAM,CAAC,WAAW;AAAA,MAClB,QAAQ,EAAE,OAAO;AAAA,QACf,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,MACtB,CAAC;AAAA,MACD,OAAO,EAAE,OAAO;AAAA,QACd,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,QAC/B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,GAAG,EAAE,SAAS;AAAA,QACzD,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,MACtD,CAAC;AAAA,MACD,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,MAAM,EAAE,MAAM,sBAAsB;AAAA,YACpC,YAAY;AAAA,UACd,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/workflows/api/instances/[id]/retry/route.js

@@ -7,6 +7,8 @@ import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find"
 import { WorkflowInstance } from "../../../../data/entities.js";
 import * as workflowExecutor from "../../../../lib/workflow-executor.js";
 import { workflowInstanceResponseSchema, workflowExecutionResultSchema } from "../../../openapi.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("workflows");
 const metadata = {
   requireAuth: true,
   requireFeatures: ["workflows.instances.retry"]
@@ -91,7 +93,7 @@ async function POST(request, context) {
       message: "Workflow retry initiated successfully"
     });
   } catch (error) {
-    console.error("Error retrying workflow instance:", error);
+    logger.error("Error retrying workflow instance", { err: error });
     if (error instanceof workflowExecutor.WorkflowExecutionError) {
       return NextResponse.json(
         { error: error.message },

package/dist/modules/workflows/api/instances/[id]/retry/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/workflows/api/instances/%5Bid%5D/retry/route.ts"],
-  "sourcesContent": ["/**\n * Retry Workflow Instance API\n *\n * Endpoint:\n * - POST /api/workflows/instances/[id]/retry - Retry a failed workflow instance\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { WorkflowInstance } from '../../../../data/entities'\nimport * as workflowExecutor from '../../../../lib/workflow-executor'\nimport { workflowInstanceResponseSchema, workflowExecutionResultSchema } from '../../../openapi'\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.instances.retry'],\n}\n\ninterface RouteContext {\n  params: Promise<{\n    id: string\n  }>\n}\n\n/**\n * POST /api/workflows/instances/[id]/retry\n *\n * Retry a failed workflow instance\n */\nexport async function POST(\n  request: NextRequest,\n  context: RouteContext\n) {\n  try {\n    const params = await context.params\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = scope?.selectedId ?? auth.orgId\n\n    if (!tenantId || !organizationId) {\n      return NextResponse.json(\n        { error: 'Missing tenant or organization context' },\n        { status: 400 }\n      )\n    }\n\n    // Check retry permission\n    const rbacService = container.resolve('rbacService')\n    const hasPermission = await rbacService.userHasAllFeatures(\n      auth.sub,\n      ['workflows.instances.retry'],\n      {\n        tenantId,\n        organizationId,\n      }\n    )\n\n    if (!hasPermission) {\n      return NextResponse.json(\n        { error: 'Insufficient permissions' },\n        { status: 403 }\n      )\n    }\n\n    const instance = await findOneWithDecryption(em, WorkflowInstance, {\n      id: params.id,\n      tenantId,\n      organizationId,\n    })\n\n    if (!instance) {\n      return NextResponse.json(\n        { error: 'Workflow instance not found' },\n        { status: 404 }\n      )\n    }\n\n    // Check if instance can be retried\n    if (instance.status !== 'FAILED') {\n      return NextResponse.json(\n        {\n          error: `Cannot retry workflow in ${instance.status} status. Only FAILED workflows can be retried.`,\n        },\n        { status: 400 }\n      )\n    }\n\n    const previousErrorMessage = instance.errorMessage\n    const previousErrorDetails = instance.errorDetails\n\n    instance.status = 'RUNNING'\n    instance.retryCount = (instance.retryCount || 0) + 1\n    instance.errorMessage = null\n    instance.errorDetails = null\n    instance.updatedAt = new Date()\n\n    await em.flush()\n\n    let result\n    try {\n      result = await workflowExecutor.executeWorkflow(em, container, instance.id)\n    } catch (executionError) {\n      instance.status = 'FAILED'\n      instance.errorMessage = previousErrorMessage\n      instance.errorDetails = previousErrorDetails\n      instance.updatedAt = new Date()\n      await em.flush()\n      throw executionError\n    }\n\n    await em.refresh(instance)\n\n    return NextResponse.json({\n      data: {\n        instance,\n        execution: result,\n      },\n      message: 'Workflow retry initiated successfully',\n    })\n  } catch (error) {\n    console.error('Error retrying workflow instance:', error)\n\n    // Handle specific errors\n    if (error instanceof workflowExecutor.WorkflowExecutionError) {\n      return NextResponse.json(\n        { error: error.message },\n        { status: 400 }\n      )\n    }\n\n    return NextResponse.json(\n      { error: 'Failed to retry workflow instance' },\n      { status: 500 }\n    )\n  }\n}\n\nexport const openApi = {\n  methods: {\n    POST: {\n      summary: 'Retry failed workflow instance',\n      description: 'Retry a failed workflow instance from its current step. The workflow will be reset to RUNNING status and execution will continue.',\n      tags: ['Workflows'],\n      params: z.object({\n        id: z.string().uuid(),\n      }),\n      responses: [\n        {\n          status: 200,\n          description: 'Workflow retry initiated successfully',\n          schema: z.object({\n            data: z.object({\n              instance: workflowInstanceResponseSchema,\n              execution: workflowExecutionResultSchema,\n            }),\n            message: z.string(),\n          }),\n        },\n        {\n          status: 400,\n          description: 'Bad request - Workflow cannot be retried in current status or execution error',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 401,\n          description: 'Unauthorized',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 403,\n          description: 'Forbidden - Insufficient permissions',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 404,\n          description: 'Workflow instance not found',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 500,\n          description: 'Internal server error',\n          schema: z.object({ error: z.string() }),\n        },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAOA,SAAsB,oBAAoB;AAC1C,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,6BAA6B;AACtC,SAAS,wBAAwB;AACjC,YAAY,sBAAsB;AAClC,SAAS,gCAAgC,qCAAqC;AAEvE,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,2BAA2B;AAC/C;AAaA,eAAsB,KACpB,SACA,SACA;AACA,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAC7B,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,OAAO,cAAc,KAAK;AAEjD,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,yCAAyC;AAAA,QAClD,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,gBAAgB,MAAM,YAAY;AAAA,MACtC,KAAK;AAAA,MACL,CAAC,2BAA2B;AAAA,MAC5B;AAAA,QACE;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,eAAe;AAClB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,2BAA2B;AAAA,QACpC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,sBAAsB,IAAI,kBAAkB;AAAA,MACjE,IAAI,OAAO;AAAA,MACX;AAAA,MACA;AAAA,IACF,CAAC;AAED,QAAI,CAAC,UAAU;AACb,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,8BAA8B;AAAA,QACvC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,QAAI,SAAS,WAAW,UAAU;AAChC,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO,4BAA4B,SAAS,MAAM;AAAA,QACpD;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,uBAAuB,SAAS;AACtC,UAAM,uBAAuB,SAAS;AAEtC,aAAS,SAAS;AAClB,aAAS,cAAc,SAAS,cAAc,KAAK;AACnD,aAAS,eAAe;AACxB,aAAS,eAAe;AACxB,aAAS,YAAY,oBAAI,KAAK;AAE9B,UAAM,GAAG,MAAM;AAEf,QAAI;AACJ,QAAI;AACF,eAAS,MAAM,iBAAiB,gBAAgB,IAAI,WAAW,SAAS,EAAE;AAAA,IAC5E,SAAS,gBAAgB;AACvB,eAAS,SAAS;AAClB,eAAS,eAAe;AACxB,eAAS,eAAe;AACxB,eAAS,YAAY,oBAAI,KAAK;AAC9B,YAAM,GAAG,MAAM;AACf,YAAM;AAAA,IACR;AAEA,UAAM,GAAG,QAAQ,QAAQ;AAEzB,WAAO,aAAa,KAAK;AAAA,MACvB,MAAM;AAAA,QACJ;AAAA,QACA,WAAW;AAAA,MACb;AAAA,MACA,SAAS;AAAA,IACX,CAAC;AAAA,EACH,SAAS,OAAO;AACd,YAAQ,MAAM,qCAAqC,KAAK;AAGxD,QAAI,iBAAiB,iBAAiB,wBAAwB;AAC5D,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,MAAM,QAAQ;AAAA,QACvB,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,oCAAoC;AAAA,MAC7C,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,MAAM,CAAC,WAAW;AAAA,MAClB,QAAQ,EAAE,OAAO;AAAA,QACf,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,MACtB,CAAC;AAAA,MACD,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,MAAM,EAAE,OAAO;AAAA,cACb,UAAU;AAAA,cACV,WAAW;AAAA,YACb,CAAC;AAAA,YACD,SAAS,EAAE,OAAO;AAAA,UACpB,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["/**\n * Retry Workflow Instance API\n *\n * Endpoint:\n * - POST /api/workflows/instances/[id]/retry - Retry a failed workflow instance\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { WorkflowInstance } from '../../../../data/entities'\nimport * as workflowExecutor from '../../../../lib/workflow-executor'\nimport { workflowInstanceResponseSchema, workflowExecutionResultSchema } from '../../../openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows')\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.instances.retry'],\n}\n\ninterface RouteContext {\n  params: Promise<{\n    id: string\n  }>\n}\n\n/**\n * POST /api/workflows/instances/[id]/retry\n *\n * Retry a failed workflow instance\n */\nexport async function POST(\n  request: NextRequest,\n  context: RouteContext\n) {\n  try {\n    const params = await context.params\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = scope?.selectedId ?? auth.orgId\n\n    if (!tenantId || !organizationId) {\n      return NextResponse.json(\n        { error: 'Missing tenant or organization context' },\n        { status: 400 }\n      )\n    }\n\n    // Check retry permission\n    const rbacService = container.resolve('rbacService')\n    const hasPermission = await rbacService.userHasAllFeatures(\n      auth.sub,\n      ['workflows.instances.retry'],\n      {\n        tenantId,\n        organizationId,\n      }\n    )\n\n    if (!hasPermission) {\n      return NextResponse.json(\n        { error: 'Insufficient permissions' },\n        { status: 403 }\n      )\n    }\n\n    const instance = await findOneWithDecryption(em, WorkflowInstance, {\n      id: params.id,\n      tenantId,\n      organizationId,\n    })\n\n    if (!instance) {\n      return NextResponse.json(\n        { error: 'Workflow instance not found' },\n        { status: 404 }\n      )\n    }\n\n    // Check if instance can be retried\n    if (instance.status !== 'FAILED') {\n      return NextResponse.json(\n        {\n          error: `Cannot retry workflow in ${instance.status} status. Only FAILED workflows can be retried.`,\n        },\n        { status: 400 }\n      )\n    }\n\n    const previousErrorMessage = instance.errorMessage\n    const previousErrorDetails = instance.errorDetails\n\n    instance.status = 'RUNNING'\n    instance.retryCount = (instance.retryCount || 0) + 1\n    instance.errorMessage = null\n    instance.errorDetails = null\n    instance.updatedAt = new Date()\n\n    await em.flush()\n\n    let result\n    try {\n      result = await workflowExecutor.executeWorkflow(em, container, instance.id)\n    } catch (executionError) {\n      instance.status = 'FAILED'\n      instance.errorMessage = previousErrorMessage\n      instance.errorDetails = previousErrorDetails\n      instance.updatedAt = new Date()\n      await em.flush()\n      throw executionError\n    }\n\n    await em.refresh(instance)\n\n    return NextResponse.json({\n      data: {\n        instance,\n        execution: result,\n      },\n      message: 'Workflow retry initiated successfully',\n    })\n  } catch (error) {\n    logger.error('Error retrying workflow instance', { err: error })\n\n    // Handle specific errors\n    if (error instanceof workflowExecutor.WorkflowExecutionError) {\n      return NextResponse.json(\n        { error: error.message },\n        { status: 400 }\n      )\n    }\n\n    return NextResponse.json(\n      { error: 'Failed to retry workflow instance' },\n      { status: 500 }\n    )\n  }\n}\n\nexport const openApi = {\n  methods: {\n    POST: {\n      summary: 'Retry failed workflow instance',\n      description: 'Retry a failed workflow instance from its current step. The workflow will be reset to RUNNING status and execution will continue.',\n      tags: ['Workflows'],\n      params: z.object({\n        id: z.string().uuid(),\n      }),\n      responses: [\n        {\n          status: 200,\n          description: 'Workflow retry initiated successfully',\n          schema: z.object({\n            data: z.object({\n              instance: workflowInstanceResponseSchema,\n              execution: workflowExecutionResultSchema,\n            }),\n            message: z.string(),\n          }),\n        },\n        {\n          status: 400,\n          description: 'Bad request - Workflow cannot be retried in current status or execution error',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 401,\n          description: 'Unauthorized',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 403,\n          description: 'Forbidden - Insufficient permissions',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 404,\n          description: 'Workflow instance not found',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 500,\n          description: 'Internal server error',\n          schema: z.object({ error: z.string() }),\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAOA,SAAsB,oBAAoB;AAC1C,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,6BAA6B;AACtC,SAAS,wBAAwB;AACjC,YAAY,sBAAsB;AAClC,SAAS,gCAAgC,qCAAqC;AAC9E,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,2BAA2B;AAC/C;AAaA,eAAsB,KACpB,SACA,SACA;AACA,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAC7B,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,OAAO,cAAc,KAAK;AAEjD,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,yCAAyC;AAAA,QAClD,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,gBAAgB,MAAM,YAAY;AAAA,MACtC,KAAK;AAAA,MACL,CAAC,2BAA2B;AAAA,MAC5B;AAAA,QACE;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,eAAe;AAClB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,2BAA2B;AAAA,QACpC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,sBAAsB,IAAI,kBAAkB;AAAA,MACjE,IAAI,OAAO;AAAA,MACX;AAAA,MACA;AAAA,IACF,CAAC;AAED,QAAI,CAAC,UAAU;AACb,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,8BAA8B;AAAA,QACvC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,QAAI,SAAS,WAAW,UAAU;AAChC,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO,4BAA4B,SAAS,MAAM;AAAA,QACpD;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,uBAAuB,SAAS;AACtC,UAAM,uBAAuB,SAAS;AAEtC,aAAS,SAAS;AAClB,aAAS,cAAc,SAAS,cAAc,KAAK;AACnD,aAAS,eAAe;AACxB,aAAS,eAAe;AACxB,aAAS,YAAY,oBAAI,KAAK;AAE9B,UAAM,GAAG,MAAM;AAEf,QAAI;AACJ,QAAI;AACF,eAAS,MAAM,iBAAiB,gBAAgB,IAAI,WAAW,SAAS,EAAE;AAAA,IAC5E,SAAS,gBAAgB;AACvB,eAAS,SAAS;AAClB,eAAS,eAAe;AACxB,eAAS,eAAe;AACxB,eAAS,YAAY,oBAAI,KAAK;AAC9B,YAAM,GAAG,MAAM;AACf,YAAM;AAAA,IACR;AAEA,UAAM,GAAG,QAAQ,QAAQ;AAEzB,WAAO,aAAa,KAAK;AAAA,MACvB,MAAM;AAAA,QACJ;AAAA,QACA,WAAW;AAAA,MACb;AAAA,MACA,SAAS;AAAA,IACX,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,MAAM,oCAAoC,EAAE,KAAK,MAAM,CAAC;AAG/D,QAAI,iBAAiB,iBAAiB,wBAAwB;AAC5D,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,MAAM,QAAQ;AAAA,QACvB,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,oCAAoC;AAAA,MAC7C,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,MAAM,CAAC,WAAW;AAAA,MAClB,QAAQ,EAAE,OAAO;AAAA,QACf,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,MACtB,CAAC;AAAA,MACD,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,MAAM,EAAE,OAAO;AAAA,cACb,UAAU;AAAA,cACV,WAAW;AAAA,YACb,CAAC;AAAA,YACD,SAAS,EAAE,OAAO;AAAA,UACpB,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/workflows/api/instances/[id]/route.js

@@ -6,6 +6,8 @@ import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/d
 import { resolveOrganizationScopeFilter } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import { WorkflowInstance } from "../../../data/entities.js";
 import { workflowInstanceResponseSchema } from "../../openapi.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("workflows");
 const metadata = {
   requireAuth: true,
   requireFeatures: ["workflows.instances.view"]
@@ -41,7 +43,7 @@ async function GET(request, context) {
     }
     return NextResponse.json({ data: instance });
   } catch (error) {
-    console.error("Error getting workflow instance:", error);
+    logger.error("Error getting workflow instance", { err: error });
     return NextResponse.json(
       { error: "Failed to get workflow instance" },
       { status: 500 }

package/dist/modules/workflows/api/instances/[id]/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/workflows/api/instances/%5Bid%5D/route.ts"],
-  "sourcesContent": ["/**\n * Workflow Instance Detail API\n *\n * Endpoints:\n * - GET /api/workflows/instances/[id] - Get workflow instance details\n * - POST /api/workflows/instances/[id]/cancel - Cancel running instance\n * - POST /api/workflows/instances/[id]/retry - Retry failed instance\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { WorkflowInstance } from '../../../data/entities'\nimport * as workflowExecutor from '../../../lib/workflow-executor'\nimport { workflowInstanceResponseSchema } from '../../openapi'\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.instances.view'],\n}\n\ninterface RouteContext {\n  params: Promise<{\n    id: string\n  }>\n}\n\n/**\n * GET /api/workflows/instances/[id]\n *\n * Get a single workflow instance by ID\n */\nexport async function GET(\n  request: NextRequest,\n  context: RouteContext\n) {\n  try {\n    const params = await context.params\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const orgFilter = resolveOrganizationScopeFilter(scope, auth)\n\n    if (!tenantId) {\n      return NextResponse.json(\n        { error: 'Missing tenant context' },\n        { status: 400 }\n      )\n    }\n\n    const instance = await em.findOne(WorkflowInstance, {\n      id: params.id,\n      tenantId,\n      ...orgFilter.where,\n    })\n\n    if (!instance) {\n      return NextResponse.json(\n        { error: 'Workflow instance not found' },\n        { status: 404 }\n      )\n    }\n\n    return NextResponse.json({ data: instance })\n  } catch (error) {\n    console.error('Error getting workflow instance:', error)\n    return NextResponse.json(\n      { error: 'Failed to get workflow instance' },\n      { status: 500 }\n    )\n  }\n}\n\nexport const openApi = {\n  methods: {\n    GET: {\n      summary: 'Get workflow instance',\n      description: 'Get detailed information about a specific workflow instance including current state, context, and execution status.',\n      tags: ['Workflows'],\n      params: z.object({\n        id: z.string().uuid(),\n      }),\n      responses: [\n        {\n          status: 200,\n          description: 'Workflow instance details',\n          schema: z.object({\n            data: workflowInstanceResponseSchema,\n          }),\n        },\n        {\n          status: 401,\n          description: 'Unauthorized',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 404,\n          description: 'Workflow instance not found',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 500,\n          description: 'Internal server error',\n          schema: z.object({ error: z.string() }),\n        },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AASA,SAAsB,oBAAoB;AAC1C,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,sCAAsC;AAC/C,SAAS,wBAAwB;AAEjC,SAAS,sCAAsC;AAExC,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,0BAA0B;AAC9C;AAaA,eAAsB,IACpB,SACA,SACA;AACA,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAC7B,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,YAAY,+BAA+B,OAAO,IAAI;AAE5D,QAAI,CAAC,UAAU;AACb,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,yBAAyB;AAAA,QAClC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,GAAG,QAAQ,kBAAkB;AAAA,MAClD,IAAI,OAAO;AAAA,MACX;AAAA,MACA,GAAG,UAAU;AAAA,IACf,CAAC;AAED,QAAI,CAAC,UAAU;AACb,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,8BAA8B;AAAA,QACvC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,WAAO,aAAa,KAAK,EAAE,MAAM,SAAS,CAAC;AAAA,EAC7C,SAAS,OAAO;AACd,YAAQ,MAAM,oCAAoC,KAAK;AACvD,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,kCAAkC;AAAA,MAC3C,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,MAAM,CAAC,WAAW;AAAA,MAClB,QAAQ,EAAE,OAAO;AAAA,QACf,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,MACtB,CAAC;AAAA,MACD,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,MAAM;AAAA,UACR,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["/**\n * Workflow Instance Detail API\n *\n * Endpoints:\n * - GET /api/workflows/instances/[id] - Get workflow instance details\n * - POST /api/workflows/instances/[id]/cancel - Cancel running instance\n * - POST /api/workflows/instances/[id]/retry - Retry failed instance\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { WorkflowInstance } from '../../../data/entities'\nimport * as workflowExecutor from '../../../lib/workflow-executor'\nimport { workflowInstanceResponseSchema } from '../../openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows')\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.instances.view'],\n}\n\ninterface RouteContext {\n  params: Promise<{\n    id: string\n  }>\n}\n\n/**\n * GET /api/workflows/instances/[id]\n *\n * Get a single workflow instance by ID\n */\nexport async function GET(\n  request: NextRequest,\n  context: RouteContext\n) {\n  try {\n    const params = await context.params\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const orgFilter = resolveOrganizationScopeFilter(scope, auth)\n\n    if (!tenantId) {\n      return NextResponse.json(\n        { error: 'Missing tenant context' },\n        { status: 400 }\n      )\n    }\n\n    const instance = await em.findOne(WorkflowInstance, {\n      id: params.id,\n      tenantId,\n      ...orgFilter.where,\n    })\n\n    if (!instance) {\n      return NextResponse.json(\n        { error: 'Workflow instance not found' },\n        { status: 404 }\n      )\n    }\n\n    return NextResponse.json({ data: instance })\n  } catch (error) {\n    logger.error('Error getting workflow instance', { err: error })\n    return NextResponse.json(\n      { error: 'Failed to get workflow instance' },\n      { status: 500 }\n    )\n  }\n}\n\nexport const openApi = {\n  methods: {\n    GET: {\n      summary: 'Get workflow instance',\n      description: 'Get detailed information about a specific workflow instance including current state, context, and execution status.',\n      tags: ['Workflows'],\n      params: z.object({\n        id: z.string().uuid(),\n      }),\n      responses: [\n        {\n          status: 200,\n          description: 'Workflow instance details',\n          schema: z.object({\n            data: workflowInstanceResponseSchema,\n          }),\n        },\n        {\n          status: 401,\n          description: 'Unauthorized',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 404,\n          description: 'Workflow instance not found',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 500,\n          description: 'Internal server error',\n          schema: z.object({ error: z.string() }),\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AASA,SAAsB,oBAAoB;AAC1C,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,sCAAsC;AAC/C,SAAS,wBAAwB;AAEjC,SAAS,sCAAsC;AAC/C,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,0BAA0B;AAC9C;AAaA,eAAsB,IACpB,SACA,SACA;AACA,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAC7B,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,YAAY,+BAA+B,OAAO,IAAI;AAE5D,QAAI,CAAC,UAAU;AACb,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,yBAAyB;AAAA,QAClC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,GAAG,QAAQ,kBAAkB;AAAA,MAClD,IAAI,OAAO;AAAA,MACX;AAAA,MACA,GAAG,UAAU;AAAA,IACf,CAAC;AAED,QAAI,CAAC,UAAU;AACb,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,8BAA8B;AAAA,QACvC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,WAAO,aAAa,KAAK,EAAE,MAAM,SAAS,CAAC;AAAA,EAC7C,SAAS,OAAO;AACd,WAAO,MAAM,mCAAmC,EAAE,KAAK,MAAM,CAAC;AAC9D,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,kCAAkC;AAAA,MAC3C,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,MAAM,CAAC,WAAW;AAAA,MAClB,QAAQ,EAAE,OAAO;AAAA,QACf,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,MACtB,CAAC;AAAA,MACD,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,MAAM;AAAA,UACR,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/workflows/api/instances/[id]/signal/route.js

@@ -10,6 +10,8 @@ import {
   sendSignalResponseSchema,
   workflowErrorSchema
 } from "../../../openapi.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("workflows");
 const metadata = {
   requireAuth: true,
   requireFeatures: ["workflows.instances.signal"]
@@ -36,7 +38,8 @@ async function POST(request, context) {
         { status: 400 }
       );
     }
-    console.log("[Signal API] Auth context:", {
+    logger.debug("Signal auth context resolved", {
+      component: "signal",
       userId: auth.sub,
       tenantId,
       organizationId
@@ -65,12 +68,7 @@ async function POST(request, context) {
       message: "Signal sent successfully"
     });
   } catch (error) {
-    console.error("[Signal API] Error occurred:", {
-      name: error.name,
-      message: error.message,
-      code: error.code,
-      stack: error.stack
-    });
+    logger.error("Signal request failed", { component: "signal", err: error });
     if (error.name === "ZodError") {
       return NextResponse.json(
         { error: "Invalid request body", details: error.errors },

package/dist/modules/workflows/api/instances/[id]/signal/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/workflows/api/instances/%5Bid%5D/signal/route.ts"],
-  "sourcesContent": ["import { NextRequest, NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { z } from 'zod'\nimport { sendSignal } from '../../../../lib/signal-handler'\nimport {\n  workflowsTag,\n  sendSignalRequestSchema,\n  sendSignalResponseSchema,\n  workflowErrorSchema,\n} from '../../../openapi'\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.instances.signal'],\n}\n\nconst sendSignalSchema = z.object({\n  signalName: z.string().min(1, 'Signal name required'),\n  payload: z.record(z.string(), z.any()).optional(),\n})\n\ninterface RouteContext {\n  params: Promise<{\n    id: string\n  }>\n}\n\n/**\n * POST /api/workflows/instances/[id]/signal\n *\n * Send signal to workflow instance\n */\nexport async function POST(request: NextRequest, context: RouteContext) {\n  try {\n    const params = await context.params\n\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = scope?.selectedId ?? auth.orgId\n\n    if (!tenantId || !organizationId) {\n      return NextResponse.json(\n        { error: 'Missing tenant or organization context' },\n        { status: 400 }\n      )\n    }\n\n    console.log('[Signal API] Auth context:', {\n      userId: auth.sub,\n      tenantId,\n      organizationId,\n    })\n\n    // Check permission\n    const rbacService = container.resolve('rbacService')\n    const hasPermission = await rbacService.userHasAllFeatures(\n      auth.sub,\n      ['workflows.instances.signal'],\n      { tenantId, organizationId }\n    )\n\n    if (!hasPermission) {\n      return NextResponse.json({ error: 'Insufficient permissions' }, { status: 403 })\n    }\n\n    const body = await request.json()\n\n    const input = sendSignalSchema.parse(body)\n\n    await sendSignal(em, container, {\n      instanceId: params.id,\n      signalName: input.signalName,\n      payload: input.payload,\n      userId: auth.sub,\n      tenantId,\n      organizationId,\n    })\n\n    return NextResponse.json({\n      success: true,\n      message: 'Signal sent successfully',\n    })\n  } catch (error: any) {\n    console.error('[Signal API] Error occurred:', {\n      name: error.name,\n      message: error.message,\n      code: error.code,\n      stack: error.stack,\n    })\n\n    // Handle Zod validation errors\n    if (error.name === 'ZodError') {\n      return NextResponse.json(\n        { error: 'Invalid request body', details: error.errors },\n        { status: 400 }\n      )\n    }\n\n    // Handle SignalError custom errors\n    if (error.code === 'INSTANCE_NOT_FOUND') {\n      return NextResponse.json({ error: error.message }, { status: 404 })\n    }\n    if (error.code === 'WORKFLOW_NOT_PAUSED' || error.code === 'NOT_WAITING_FOR_SIGNAL') {\n      return NextResponse.json({ error: error.message }, { status: 409 })\n    }\n    if (error.code === 'SIGNAL_NAME_MISMATCH') {\n      return NextResponse.json({ error: error.message }, { status: 400 })\n    }\n    if (error.code === 'DEFINITION_NOT_FOUND') {\n      return NextResponse.json({ error: error.message }, { status: 404 })\n    }\n    if (error.code === 'TRANSITION_FAILED') {\n      return NextResponse.json({ error: error.message }, { status: 500 })\n    }\n\n    // Generic error handler\n    return NextResponse.json(\n      {\n        error: error.message || 'Failed to send signal',\n        details: error.details || undefined,\n      },\n      { status: 500 }\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: workflowsTag,\n  summary: 'Send signal to workflow instance',\n  methods: {\n    POST: {\n      summary: 'Send signal to specific workflow',\n      description: 'Sends a signal to a specific workflow instance waiting for a signal. The workflow must be in PAUSED status and waiting for the specified signal.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: sendSignalRequestSchema,\n      },\n      responses: [\n        { status: 200, description: 'Signal sent successfully', schema: sendSignalResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid request body or signal name mismatch', schema: workflowErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: workflowErrorSchema },\n        { status: 403, description: 'Insufficient permissions', schema: workflowErrorSchema },\n        { status: 404, description: 'Instance or definition not found', schema: workflowErrorSchema },\n        { status: 409, description: 'Workflow not paused or not waiting for signal', schema: workflowErrorSchema },\n        { status: 500, description: 'Internal server error or transition failed', schema: workflowErrorSchema },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAsB,oBAAoB;AAE1C,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,SAAS;AAClB,SAAS,kBAAkB;AAC3B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,4BAA4B;AAChD;AAEA,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,YAAY,EAAE,OAAO,EAAE,IAAI,GAAG,sBAAsB;AAAA,EACpD,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC,EAAE,SAAS;AAClD,CAAC;AAaD,eAAsB,KAAK,SAAsB,SAAuB;AACtE,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAE7B,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,OAAO,cAAc,KAAK;AAEjD,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,yCAAyC;AAAA,QAClD,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,YAAQ,IAAI,8BAA8B;AAAA,MACxC,QAAQ,KAAK;AAAA,MACb;AAAA,MACA;AAAA,IACF,CAAC;AAGD,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,gBAAgB,MAAM,YAAY;AAAA,MACtC,KAAK;AAAA,MACL,CAAC,4BAA4B;AAAA,MAC7B,EAAE,UAAU,eAAe;AAAA,IAC7B;AAEA,QAAI,CAAC,eAAe;AAClB,aAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjF;AAEA,UAAM,OAAO,MAAM,QAAQ,KAAK;AAEhC,UAAM,QAAQ,iBAAiB,MAAM,IAAI;AAEzC,UAAM,WAAW,IAAI,WAAW;AAAA,MAC9B,YAAY,OAAO;AAAA,MACnB,YAAY,MAAM;AAAA,MAClB,SAAS,MAAM;AAAA,MACf,QAAQ,KAAK;AAAA,MACb;AAAA,MACA;AAAA,IACF,CAAC;AAED,WAAO,aAAa,KAAK;AAAA,MACvB,SAAS;AAAA,MACT,SAAS;AAAA,IACX,CAAC;AAAA,EACH,SAAS,OAAY;AACnB,YAAQ,MAAM,gCAAgC;AAAA,MAC5C,MAAM,MAAM;AAAA,MACZ,SAAS,MAAM;AAAA,MACf,MAAM,MAAM;AAAA,MACZ,OAAO,MAAM;AAAA,IACf,CAAC;AAGD,QAAI,MAAM,SAAS,YAAY;AAC7B,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,wBAAwB,SAAS,MAAM,OAAO;AAAA,QACvD,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,QAAI,MAAM,SAAS,sBAAsB;AACvC,aAAO,aAAa,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpE;AACA,QAAI,MAAM,SAAS,yBAAyB,MAAM,SAAS,0BAA0B;AACnF,aAAO,aAAa,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpE;AACA,QAAI,MAAM,SAAS,wBAAwB;AACzC,aAAO,aAAa,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpE;AACA,QAAI,MAAM,SAAS,wBAAwB;AACzC,aAAO,aAAa,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpE;AACA,QAAI,MAAM,SAAS,qBAAqB;AACtC,aAAO,aAAa,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpE;AAGA,WAAO,aAAa;AAAA,MAClB;AAAA,QACE,OAAO,MAAM,WAAW;AAAA,QACxB,SAAS,MAAM,WAAW;AAAA,MAC5B;AAAA,MACA,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,yBAAyB;AAAA,MAC3F;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,gDAAgD,QAAQ,oBAAoB;AAAA,QACxG,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,oBAAoB;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,oCAAoC,QAAQ,oBAAoB;AAAA,QAC5F,EAAE,QAAQ,KAAK,aAAa,iDAAiD,QAAQ,oBAAoB;AAAA,QACzG,EAAE,QAAQ,KAAK,aAAa,8CAA8C,QAAQ,oBAAoB;AAAA,MACxG;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextRequest, NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { z } from 'zod'\nimport { sendSignal } from '../../../../lib/signal-handler'\nimport {\n  workflowsTag,\n  sendSignalRequestSchema,\n  sendSignalResponseSchema,\n  workflowErrorSchema,\n} from '../../../openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows')\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.instances.signal'],\n}\n\nconst sendSignalSchema = z.object({\n  signalName: z.string().min(1, 'Signal name required'),\n  payload: z.record(z.string(), z.any()).optional(),\n})\n\ninterface RouteContext {\n  params: Promise<{\n    id: string\n  }>\n}\n\n/**\n * POST /api/workflows/instances/[id]/signal\n *\n * Send signal to workflow instance\n */\nexport async function POST(request: NextRequest, context: RouteContext) {\n  try {\n    const params = await context.params\n\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = scope?.selectedId ?? auth.orgId\n\n    if (!tenantId || !organizationId) {\n      return NextResponse.json(\n        { error: 'Missing tenant or organization context' },\n        { status: 400 }\n      )\n    }\n\n    logger.debug('Signal auth context resolved', {\n      component: 'signal',\n      userId: auth.sub,\n      tenantId,\n      organizationId,\n    })\n\n    // Check permission\n    const rbacService = container.resolve('rbacService')\n    const hasPermission = await rbacService.userHasAllFeatures(\n      auth.sub,\n      ['workflows.instances.signal'],\n      { tenantId, organizationId }\n    )\n\n    if (!hasPermission) {\n      return NextResponse.json({ error: 'Insufficient permissions' }, { status: 403 })\n    }\n\n    const body = await request.json()\n\n    const input = sendSignalSchema.parse(body)\n\n    await sendSignal(em, container, {\n      instanceId: params.id,\n      signalName: input.signalName,\n      payload: input.payload,\n      userId: auth.sub,\n      tenantId,\n      organizationId,\n    })\n\n    return NextResponse.json({\n      success: true,\n      message: 'Signal sent successfully',\n    })\n  } catch (error: any) {\n    logger.error('Signal request failed', { component: 'signal', err: error })\n\n    // Handle Zod validation errors\n    if (error.name === 'ZodError') {\n      return NextResponse.json(\n        { error: 'Invalid request body', details: error.errors },\n        { status: 400 }\n      )\n    }\n\n    // Handle SignalError custom errors\n    if (error.code === 'INSTANCE_NOT_FOUND') {\n      return NextResponse.json({ error: error.message }, { status: 404 })\n    }\n    if (error.code === 'WORKFLOW_NOT_PAUSED' || error.code === 'NOT_WAITING_FOR_SIGNAL') {\n      return NextResponse.json({ error: error.message }, { status: 409 })\n    }\n    if (error.code === 'SIGNAL_NAME_MISMATCH') {\n      return NextResponse.json({ error: error.message }, { status: 400 })\n    }\n    if (error.code === 'DEFINITION_NOT_FOUND') {\n      return NextResponse.json({ error: error.message }, { status: 404 })\n    }\n    if (error.code === 'TRANSITION_FAILED') {\n      return NextResponse.json({ error: error.message }, { status: 500 })\n    }\n\n    // Generic error handler\n    return NextResponse.json(\n      {\n        error: error.message || 'Failed to send signal',\n        details: error.details || undefined,\n      },\n      { status: 500 }\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: workflowsTag,\n  summary: 'Send signal to workflow instance',\n  methods: {\n    POST: {\n      summary: 'Send signal to specific workflow',\n      description: 'Sends a signal to a specific workflow instance waiting for a signal. The workflow must be in PAUSED status and waiting for the specified signal.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: sendSignalRequestSchema,\n      },\n      responses: [\n        { status: 200, description: 'Signal sent successfully', schema: sendSignalResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid request body or signal name mismatch', schema: workflowErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: workflowErrorSchema },\n        { status: 403, description: 'Insufficient permissions', schema: workflowErrorSchema },\n        { status: 404, description: 'Instance or definition not found', schema: workflowErrorSchema },\n        { status: 409, description: 'Workflow not paused or not waiting for signal', schema: workflowErrorSchema },\n        { status: 500, description: 'Internal server error or transition failed', schema: workflowErrorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAsB,oBAAoB;AAE1C,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,SAAS;AAClB,SAAS,kBAAkB;AAC3B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,4BAA4B;AAChD;AAEA,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,YAAY,EAAE,OAAO,EAAE,IAAI,GAAG,sBAAsB;AAAA,EACpD,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC,EAAE,SAAS;AAClD,CAAC;AAaD,eAAsB,KAAK,SAAsB,SAAuB;AACtE,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAE7B,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,OAAO,cAAc,KAAK;AAEjD,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,yCAAyC;AAAA,QAClD,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,WAAO,MAAM,gCAAgC;AAAA,MAC3C,WAAW;AAAA,MACX,QAAQ,KAAK;AAAA,MACb;AAAA,MACA;AAAA,IACF,CAAC;AAGD,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,gBAAgB,MAAM,YAAY;AAAA,MACtC,KAAK;AAAA,MACL,CAAC,4BAA4B;AAAA,MAC7B,EAAE,UAAU,eAAe;AAAA,IAC7B;AAEA,QAAI,CAAC,eAAe;AAClB,aAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjF;AAEA,UAAM,OAAO,MAAM,QAAQ,KAAK;AAEhC,UAAM,QAAQ,iBAAiB,MAAM,IAAI;AAEzC,UAAM,WAAW,IAAI,WAAW;AAAA,MAC9B,YAAY,OAAO;AAAA,MACnB,YAAY,MAAM;AAAA,MAClB,SAAS,MAAM;AAAA,MACf,QAAQ,KAAK;AAAA,MACb;AAAA,MACA;AAAA,IACF,CAAC;AAED,WAAO,aAAa,KAAK;AAAA,MACvB,SAAS;AAAA,MACT,SAAS;AAAA,IACX,CAAC;AAAA,EACH,SAAS,OAAY;AACnB,WAAO,MAAM,yBAAyB,EAAE,WAAW,UAAU,KAAK,MAAM,CAAC;AAGzE,QAAI,MAAM,SAAS,YAAY;AAC7B,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,wBAAwB,SAAS,MAAM,OAAO;AAAA,QACvD,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,QAAI,MAAM,SAAS,sBAAsB;AACvC,aAAO,aAAa,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpE;AACA,QAAI,MAAM,SAAS,yBAAyB,MAAM,SAAS,0BAA0B;AACnF,aAAO,aAAa,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpE;AACA,QAAI,MAAM,SAAS,wBAAwB;AACzC,aAAO,aAAa,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpE;AACA,QAAI,MAAM,SAAS,wBAAwB;AACzC,aAAO,aAAa,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpE;AACA,QAAI,MAAM,SAAS,qBAAqB;AACtC,aAAO,aAAa,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpE;AAGA,WAAO,aAAa;AAAA,MAClB;AAAA,QACE,OAAO,MAAM,WAAW;AAAA,QACxB,SAAS,MAAM,WAAW;AAAA,MAC5B;AAAA,MACA,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,yBAAyB;AAAA,MAC3F;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,gDAAgD,QAAQ,oBAAoB;AAAA,QACxG,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,oBAAoB;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,oCAAoC,QAAQ,oBAAoB;AAAA,QAC5F,EAAE,QAAQ,KAAK,aAAa,iDAAiD,QAAQ,oBAAoB;AAAA,QACzG,EAAE,QAAQ,KAAK,aAAa,8CAA8C,QAAQ,oBAAoB;AAAA,MACxG;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/workflows/api/instances/route.js

@@ -15,6 +15,8 @@ import {
   paginationSchema
 } from "../openapi.js";
 import * as workflowExecutor from "../../lib/workflow-executor.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("workflows");
 const metadata = {
   requireAuth: true,
   requireFeatures: ["workflows.instances.view"]
@@ -94,7 +96,7 @@ async function GET(request) {
       }
     });
   } catch (error) {
-    console.error("Error listing workflow instances:", error);
+    logger.error("Error listing workflow instances", { err: error });
     return NextResponse.json(
       { error: "Failed to list workflow instances" },
       { status: 500 }
@@ -164,7 +166,7 @@ async function POST(request) {
         const bgEm = bgContainer.resolve("em");
         await workflowExecutor.executeWorkflow(bgEm, bgContainer, instance.id);
       } catch (error) {
-        console.error("Background workflow execution error:", error);
+        logger.error("Background workflow execution error", { err: error });
       }
     });
     return NextResponse.json(
@@ -182,7 +184,7 @@ async function POST(request) {
       { status: 201 }
     );
   } catch (error) {
-    console.error("Error starting workflow:", error);
+    logger.error("Error starting workflow", { err: error });
     if (error instanceof workflowExecutor.WorkflowExecutionError) {
       if (error.code === "DEFINITION_NOT_FOUND") {
         return NextResponse.json(

package/dist/modules/workflows/api/instances/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/workflows/api/instances/route.ts"],
-  "sourcesContent": ["/**\n * Workflow Instances API\n *\n * Endpoints:\n * - GET /api/workflows/instances - List workflow instances\n * - POST /api/workflows/instances - Start a new workflow instance\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { WorkflowInstance } from '../../data/entities'\nimport {\n  startWorkflowInputSchema,\n  type StartWorkflowApiInput,\n  workflowInstanceStatusSchema,\n} from '../../data/validators'\nimport {\n  workflowInstanceResponseSchema,\n  workflowBackgroundStartSchema,\n  paginationSchema,\n} from '../openapi'\nimport * as workflowExecutor from '../../lib/workflow-executor'\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.instances.view'],\n}\n\n/**\n * GET /api/workflows/instances\n *\n * List workflow instances with optional filters\n */\nexport async function GET(request: NextRequest) {\n  try {\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const orgFilter = resolveOrganizationScopeFilter(scope, auth)\n\n    if (!tenantId) {\n      return NextResponse.json(\n        { error: 'Missing tenant context' },\n        { status: 400 }\n      )\n    }\n\n    const { searchParams } = new URL(request.url)\n    const workflowId = searchParams.get('workflowId')\n    const status = searchParams.get('status')\n    const correlationKey = searchParams.get('correlationKey')\n    const entityType = searchParams.get('entityType')\n    const entityId = searchParams.get('entityId')\n    const limit = parseInt(searchParams.get('limit') || '50')\n    const offset = parseInt(searchParams.get('offset') || '0')\n\n    // Build where clause with tenant scoping\n    const where: any = {\n      tenantId,\n      ...orgFilter.where,\n    }\n\n    if (workflowId) {\n      where.workflowId = workflowId\n    }\n\n    if (status) {\n      // Support comma-separated status values (e.g., \"RUNNING,PAUSED,WAITING_FOR_ACTIVITIES\")\n      const statuses = status.split(',').map(s => s.trim()).filter(Boolean)\n      if (statuses.length === 1) {\n        where.status = statuses[0]\n      } else if (statuses.length > 1) {\n        where.status = { $in: statuses }\n      }\n    }\n\n    if (correlationKey) {\n      where.correlationKey = correlationKey\n    }\n\n    // For JSONB metadata filtering, use $contains with explicit key-value pairs\n    // MikroORM's dot notation creates table joins, not JSON access\n    if (entityType || entityId) {\n      where.$and = where.$and || []\n      if (entityType) {\n        where.$and.push({\n          metadata: { $contains: { entityType: entityType } }\n        })\n      }\n      if (entityId) {\n        where.$and.push({\n          metadata: { $contains: { entityId: entityId } }\n        })\n      }\n    }\n\n    const [instances, total] = await em.findAndCount(\n      WorkflowInstance,\n      where,\n      {\n        orderBy: { createdAt: 'DESC' },\n        limit,\n        offset,\n      }\n    )\n\n    return NextResponse.json({\n      data: instances,\n      pagination: {\n        total,\n        limit,\n        offset,\n        hasMore: offset + limit < total,\n      },\n    })\n  } catch (error) {\n    console.error('Error listing workflow instances:', error)\n    return NextResponse.json(\n      { error: 'Failed to list workflow instances' },\n      { status: 500 }\n    )\n  }\n}\n\n/**\n * POST /api/workflows/instances\n *\n * Start a new workflow instance\n */\nexport async function POST(request: NextRequest) {\n  try {\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = scope?.selectedId ?? auth.orgId\n\n    if (!tenantId || !organizationId) {\n      return NextResponse.json(\n        { error: 'Missing tenant or organization context' },\n        { status: 400 }\n      )\n    }\n\n    // Check create permission\n    const rbacService = container.resolve('rbacService')\n    const hasPermission = await rbacService.userHasAllFeatures(\n      auth.sub,\n      ['workflows.instances.create'],\n      {\n        tenantId,\n        organizationId,\n      }\n    )\n\n    if (!hasPermission) {\n      return NextResponse.json(\n        { error: 'Insufficient permissions' },\n        { status: 403 }\n      )\n    }\n\n    const body = await request.json()\n\n    // Validate input\n    const validation = startWorkflowInputSchema.safeParse(body)\n    if (!validation.success) {\n      return NextResponse.json(\n        {\n          error: 'Validation failed',\n          details: validation.error.issues,\n        },\n        { status: 400 }\n      )\n    }\n\n    const input: StartWorkflowApiInput = validation.data\n\n    // User-started instances must always record the authenticated caller.\n    const metadata = {\n      ...input.metadata,\n      initiatedBy: auth.sub,\n    }\n\n    // Start workflow\n    const instance = await workflowExecutor.startWorkflow(em, {\n      workflowId: input.workflowId,\n      version: input.version,\n      initialContext: input.initialContext || {},\n      correlationKey: input.correlationKey,\n      metadata,\n      tenantId,\n      organizationId,\n    })\n\n    // Execute workflow in background (non-blocking for demo visibility)\n    // This allows the frontend to see step-by-step progress via polling\n    setImmediate(async () => {\n      try {\n        // Create new container and EM for background execution\n        const bgContainer = await createRequestContainer()\n        const bgEm = bgContainer.resolve('em')\n        await workflowExecutor.executeWorkflow(bgEm, bgContainer, instance.id)\n      } catch (error) {\n        console.error('Background workflow execution error:', error)\n      }\n    })\n\n    return NextResponse.json(\n      {\n        data: {\n          instance,\n          execution: {\n            status: instance.status,\n            currentStep: instance.currentStepId,\n            message: 'Workflow execution started in background',\n          },\n        },\n        message: 'Workflow started successfully',\n      },\n      { status: 201 }\n    )\n  } catch (error) {\n    console.error('Error starting workflow:', error)\n\n    // Handle specific errors\n    if (error instanceof workflowExecutor.WorkflowExecutionError) {\n      if (error.code === 'DEFINITION_NOT_FOUND') {\n        return NextResponse.json(\n          { error: error.message },\n          { status: 404 }\n        )\n      }\n      if (error.code === 'DEFINITION_DISABLED') {\n        return NextResponse.json(\n          { error: error.message },\n          { status: 400 }\n        )\n      }\n      if (error.code === 'INVALID_DEFINITION') {\n        return NextResponse.json(\n          { error: error.message },\n          { status: 400 }\n        )\n      }\n      if (error.code === 'START_PRE_CONDITIONS_FAILED') {\n        return NextResponse.json(\n          {\n            error: error.message,\n            code: error.code,\n            details: error.details,\n          },\n          { status: 422 }\n        )\n      }\n    }\n\n    return NextResponse.json(\n      { error: 'Failed to start workflow' },\n      { status: 500 }\n    )\n  }\n}\n\nexport const openApi = {\n  methods: {\n    GET: {\n      summary: 'List workflow instances',\n      description: 'Get a list of workflow instances with optional filters. Supports pagination and filtering by status, workflowId, correlationKey, etc.',\n      tags: ['Workflows'],\n      query: z.object({\n        workflowId: z.string().optional(),\n        status: workflowInstanceStatusSchema.optional(),\n        correlationKey: z.string().optional(),\n        entityType: z.string().optional(),\n        entityId: z.string().optional(),\n        limit: z.number().int().positive().default(50).optional(),\n        offset: z.number().int().min(0).default(0).optional(),\n      }),\n      responses: [\n        {\n          status: 200,\n          description: 'List of workflow instances',\n          schema: z.object({\n            data: z.array(workflowInstanceResponseSchema),\n            pagination: paginationSchema,\n          }),\n        },\n        {\n          status: 401,\n          description: 'Unauthorized',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 500,\n          description: 'Internal server error',\n          schema: z.object({ error: z.string() }),\n        },\n      ],\n    },\n    POST: {\n      summary: 'Start workflow instance',\n      description: 'Start a new workflow instance from a workflow definition. The workflow will execute immediately.',\n      tags: ['Workflows'],\n      requestBody: {\n        contentType: 'application/json',\n        schema: startWorkflowInputSchema,\n        description: 'Workflow instance configuration including workflowId, initial context, and metadata.',\n      },\n      responses: [\n        {\n          status: 201,\n          description: 'Workflow started successfully',\n          schema: z.object({\n            data: z.object({\n              instance: workflowInstanceResponseSchema,\n              execution: workflowBackgroundStartSchema,\n            }),\n            message: z.string(),\n          }),\n        },\n        {\n          status: 400,\n          description: 'Bad request - Validation failed or definition disabled/invalid',\n          schema: z.object({\n            error: z.string(),\n            details: z.any().optional(),\n          }),\n        },\n        {\n          status: 401,\n          description: 'Unauthorized',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 403,\n          description: 'Forbidden - Insufficient permissions',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 404,\n          description: 'Workflow definition not found',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 500,\n          description: 'Internal server error',\n          schema: z.object({ error: z.string() }),\n        },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAQA,SAAsB,oBAAoB;AAC1C,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,sCAAsC;AAC/C,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,EAEA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,YAAY,sBAAsB;AAE3B,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,0BAA0B;AAC9C;AAOA,eAAsB,IAAI,SAAsB;AAC9C,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,YAAY,+BAA+B,OAAO,IAAI;AAE5D,QAAI,CAAC,UAAU;AACb,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,yBAAyB;AAAA,QAClC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,EAAE,aAAa,IAAI,IAAI,IAAI,QAAQ,GAAG;AAC5C,UAAM,aAAa,aAAa,IAAI,YAAY;AAChD,UAAM,SAAS,aAAa,IAAI,QAAQ;AACxC,UAAM,iBAAiB,aAAa,IAAI,gBAAgB;AACxD,UAAM,aAAa,aAAa,IAAI,YAAY;AAChD,UAAM,WAAW,aAAa,IAAI,UAAU;AAC5C,UAAM,QAAQ,SAAS,aAAa,IAAI,OAAO,KAAK,IAAI;AACxD,UAAM,SAAS,SAAS,aAAa,IAAI,QAAQ,KAAK,GAAG;AAGzD,UAAM,QAAa;AAAA,MACjB;AAAA,MACA,GAAG,UAAU;AAAA,IACf;AAEA,QAAI,YAAY;AACd,YAAM,aAAa;AAAA,IACrB;AAEA,QAAI,QAAQ;AAEV,YAAM,WAAW,OAAO,MAAM,GAAG,EAAE,IAAI,OAAK,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO;AACpE,UAAI,SAAS,WAAW,GAAG;AACzB,cAAM,SAAS,SAAS,CAAC;AAAA,MAC3B,WAAW,SAAS,SAAS,GAAG;AAC9B,cAAM,SAAS,EAAE,KAAK,SAAS;AAAA,MACjC;AAAA,IACF;AAEA,QAAI,gBAAgB;AAClB,YAAM,iBAAiB;AAAA,IACzB;AAIA,QAAI,cAAc,UAAU;AAC1B,YAAM,OAAO,MAAM,QAAQ,CAAC;AAC5B,UAAI,YAAY;AACd,cAAM,KAAK,KAAK;AAAA,UACd,UAAU,EAAE,WAAW,EAAE,WAAuB,EAAE;AAAA,QACpD,CAAC;AAAA,MACH;AACA,UAAI,UAAU;AACZ,cAAM,KAAK,KAAK;AAAA,UACd,UAAU,EAAE,WAAW,EAAE,SAAmB,EAAE;AAAA,QAChD,CAAC;AAAA,MACH;AAAA,IACF;AAEA,UAAM,CAAC,WAAW,KAAK,IAAI,MAAM,GAAG;AAAA,MAClC;AAAA,MACA;AAAA,MACA;AAAA,QACE,SAAS,EAAE,WAAW,OAAO;AAAA,QAC7B;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,WAAO,aAAa,KAAK;AAAA,MACvB,MAAM;AAAA,MACN,YAAY;AAAA,QACV;AAAA,QACA;AAAA,QACA;AAAA,QACA,SAAS,SAAS,QAAQ;AAAA,MAC5B;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,YAAQ,MAAM,qCAAqC,KAAK;AACxD,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,oCAAoC;AAAA,MAC7C,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAOA,eAAsB,KAAK,SAAsB;AAC/C,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,OAAO,cAAc,KAAK;AAEjD,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,yCAAyC;AAAA,QAClD,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,gBAAgB,MAAM,YAAY;AAAA,MACtC,KAAK;AAAA,MACL,CAAC,4BAA4B;AAAA,MAC7B;AAAA,QACE;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,eAAe;AAClB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,2BAA2B;AAAA,QACpC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,OAAO,MAAM,QAAQ,KAAK;AAGhC,UAAM,aAAa,yBAAyB,UAAU,IAAI;AAC1D,QAAI,CAAC,WAAW,SAAS;AACvB,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO;AAAA,UACP,SAAS,WAAW,MAAM;AAAA,QAC5B;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,QAA+B,WAAW;AAGhD,UAAMA,YAAW;AAAA,MACf,GAAG,MAAM;AAAA,MACT,aAAa,KAAK;AAAA,IACpB;AAGA,UAAM,WAAW,MAAM,iBAAiB,cAAc,IAAI;AAAA,MACxD,YAAY,MAAM;AAAA,MAClB,SAAS,MAAM;AAAA,MACf,gBAAgB,MAAM,kBAAkB,CAAC;AAAA,MACzC,gBAAgB,MAAM;AAAA,MACtB,UAAAA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAID,iBAAa,YAAY;AACvB,UAAI;AAEF,cAAM,cAAc,MAAM,uBAAuB;AACjD,cAAM,OAAO,YAAY,QAAQ,IAAI;AACrC,cAAM,iBAAiB,gBAAgB,MAAM,aAAa,SAAS,EAAE;AAAA,MACvE,SAAS,OAAO;AACd,gBAAQ,MAAM,wCAAwC,KAAK;AAAA,MAC7D;AAAA,IACF,CAAC;AAED,WAAO,aAAa;AAAA,MAClB;AAAA,QACE,MAAM;AAAA,UACJ;AAAA,UACA,WAAW;AAAA,YACT,QAAQ,SAAS;AAAA,YACjB,aAAa,SAAS;AAAA,YACtB,SAAS;AAAA,UACX;AAAA,QACF;AAAA,QACA,SAAS;AAAA,MACX;AAAA,MACA,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,4BAA4B,KAAK;AAG/C,QAAI,iBAAiB,iBAAiB,wBAAwB;AAC5D,UAAI,MAAM,SAAS,wBAAwB;AACzC,eAAO,aAAa;AAAA,UAClB,EAAE,OAAO,MAAM,QAAQ;AAAA,UACvB,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AACA,UAAI,MAAM,SAAS,uBAAuB;AACxC,eAAO,aAAa;AAAA,UAClB,EAAE,OAAO,MAAM,QAAQ;AAAA,UACvB,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AACA,UAAI,MAAM,SAAS,sBAAsB;AACvC,eAAO,aAAa;AAAA,UAClB,EAAE,OAAO,MAAM,QAAQ;AAAA,UACvB,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AACA,UAAI,MAAM,SAAS,+BAA+B;AAChD,eAAO,aAAa;AAAA,UAClB;AAAA,YACE,OAAO,MAAM;AAAA,YACb,MAAM,MAAM;AAAA,YACZ,SAAS,MAAM;AAAA,UACjB;AAAA,UACA,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAAA,IACF;AAEA,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,2BAA2B;AAAA,MACpC,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,MAAM,CAAC,WAAW;AAAA,MAClB,OAAO,EAAE,OAAO;AAAA,QACd,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,QAChC,QAAQ,6BAA6B,SAAS;AAAA,QAC9C,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,QACpC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,QAChC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,QAC9B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,SAAS;AAAA,QACxD,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,MACtD,CAAC;AAAA,MACD,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,MAAM,EAAE,MAAM,8BAA8B;AAAA,YAC5C,YAAY;AAAA,UACd,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,MAAM,CAAC,WAAW;AAAA,MAClB,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,QACR,aAAa;AAAA,MACf;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,MAAM,EAAE,OAAO;AAAA,cACb,UAAU;AAAA,cACV,WAAW;AAAA,YACb,CAAC;AAAA,YACD,SAAS,EAAE,OAAO;AAAA,UACpB,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,OAAO,EAAE,OAAO;AAAA,YAChB,SAAS,EAAE,IAAI,EAAE,SAAS;AAAA,UAC5B,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["/**\n * Workflow Instances API\n *\n * Endpoints:\n * - GET /api/workflows/instances - List workflow instances\n * - POST /api/workflows/instances - Start a new workflow instance\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { WorkflowInstance } from '../../data/entities'\nimport {\n  startWorkflowInputSchema,\n  type StartWorkflowApiInput,\n  workflowInstanceStatusSchema,\n} from '../../data/validators'\nimport {\n  workflowInstanceResponseSchema,\n  workflowBackgroundStartSchema,\n  paginationSchema,\n} from '../openapi'\nimport * as workflowExecutor from '../../lib/workflow-executor'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows')\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.instances.view'],\n}\n\n/**\n * GET /api/workflows/instances\n *\n * List workflow instances with optional filters\n */\nexport async function GET(request: NextRequest) {\n  try {\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const orgFilter = resolveOrganizationScopeFilter(scope, auth)\n\n    if (!tenantId) {\n      return NextResponse.json(\n        { error: 'Missing tenant context' },\n        { status: 400 }\n      )\n    }\n\n    const { searchParams } = new URL(request.url)\n    const workflowId = searchParams.get('workflowId')\n    const status = searchParams.get('status')\n    const correlationKey = searchParams.get('correlationKey')\n    const entityType = searchParams.get('entityType')\n    const entityId = searchParams.get('entityId')\n    const limit = parseInt(searchParams.get('limit') || '50')\n    const offset = parseInt(searchParams.get('offset') || '0')\n\n    // Build where clause with tenant scoping\n    const where: any = {\n      tenantId,\n      ...orgFilter.where,\n    }\n\n    if (workflowId) {\n      where.workflowId = workflowId\n    }\n\n    if (status) {\n      // Support comma-separated status values (e.g., \"RUNNING,PAUSED,WAITING_FOR_ACTIVITIES\")\n      const statuses = status.split(',').map(s => s.trim()).filter(Boolean)\n      if (statuses.length === 1) {\n        where.status = statuses[0]\n      } else if (statuses.length > 1) {\n        where.status = { $in: statuses }\n      }\n    }\n\n    if (correlationKey) {\n      where.correlationKey = correlationKey\n    }\n\n    // For JSONB metadata filtering, use $contains with explicit key-value pairs\n    // MikroORM's dot notation creates table joins, not JSON access\n    if (entityType || entityId) {\n      where.$and = where.$and || []\n      if (entityType) {\n        where.$and.push({\n          metadata: { $contains: { entityType: entityType } }\n        })\n      }\n      if (entityId) {\n        where.$and.push({\n          metadata: { $contains: { entityId: entityId } }\n        })\n      }\n    }\n\n    const [instances, total] = await em.findAndCount(\n      WorkflowInstance,\n      where,\n      {\n        orderBy: { createdAt: 'DESC' },\n        limit,\n        offset,\n      }\n    )\n\n    return NextResponse.json({\n      data: instances,\n      pagination: {\n        total,\n        limit,\n        offset,\n        hasMore: offset + limit < total,\n      },\n    })\n  } catch (error) {\n    logger.error('Error listing workflow instances', { err: error })\n    return NextResponse.json(\n      { error: 'Failed to list workflow instances' },\n      { status: 500 }\n    )\n  }\n}\n\n/**\n * POST /api/workflows/instances\n *\n * Start a new workflow instance\n */\nexport async function POST(request: NextRequest) {\n  try {\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = scope?.selectedId ?? auth.orgId\n\n    if (!tenantId || !organizationId) {\n      return NextResponse.json(\n        { error: 'Missing tenant or organization context' },\n        { status: 400 }\n      )\n    }\n\n    // Check create permission\n    const rbacService = container.resolve('rbacService')\n    const hasPermission = await rbacService.userHasAllFeatures(\n      auth.sub,\n      ['workflows.instances.create'],\n      {\n        tenantId,\n        organizationId,\n      }\n    )\n\n    if (!hasPermission) {\n      return NextResponse.json(\n        { error: 'Insufficient permissions' },\n        { status: 403 }\n      )\n    }\n\n    const body = await request.json()\n\n    // Validate input\n    const validation = startWorkflowInputSchema.safeParse(body)\n    if (!validation.success) {\n      return NextResponse.json(\n        {\n          error: 'Validation failed',\n          details: validation.error.issues,\n        },\n        { status: 400 }\n      )\n    }\n\n    const input: StartWorkflowApiInput = validation.data\n\n    // User-started instances must always record the authenticated caller.\n    const metadata = {\n      ...input.metadata,\n      initiatedBy: auth.sub,\n    }\n\n    // Start workflow\n    const instance = await workflowExecutor.startWorkflow(em, {\n      workflowId: input.workflowId,\n      version: input.version,\n      initialContext: input.initialContext || {},\n      correlationKey: input.correlationKey,\n      metadata,\n      tenantId,\n      organizationId,\n    })\n\n    // Execute workflow in background (non-blocking for demo visibility)\n    // This allows the frontend to see step-by-step progress via polling\n    setImmediate(async () => {\n      try {\n        // Create new container and EM for background execution\n        const bgContainer = await createRequestContainer()\n        const bgEm = bgContainer.resolve('em')\n        await workflowExecutor.executeWorkflow(bgEm, bgContainer, instance.id)\n      } catch (error) {\n        logger.error('Background workflow execution error', { err: error })\n      }\n    })\n\n    return NextResponse.json(\n      {\n        data: {\n          instance,\n          execution: {\n            status: instance.status,\n            currentStep: instance.currentStepId,\n            message: 'Workflow execution started in background',\n          },\n        },\n        message: 'Workflow started successfully',\n      },\n      { status: 201 }\n    )\n  } catch (error) {\n    logger.error('Error starting workflow', { err: error })\n\n    // Handle specific errors\n    if (error instanceof workflowExecutor.WorkflowExecutionError) {\n      if (error.code === 'DEFINITION_NOT_FOUND') {\n        return NextResponse.json(\n          { error: error.message },\n          { status: 404 }\n        )\n      }\n      if (error.code === 'DEFINITION_DISABLED') {\n        return NextResponse.json(\n          { error: error.message },\n          { status: 400 }\n        )\n      }\n      if (error.code === 'INVALID_DEFINITION') {\n        return NextResponse.json(\n          { error: error.message },\n          { status: 400 }\n        )\n      }\n      if (error.code === 'START_PRE_CONDITIONS_FAILED') {\n        return NextResponse.json(\n          {\n            error: error.message,\n            code: error.code,\n            details: error.details,\n          },\n          { status: 422 }\n        )\n      }\n    }\n\n    return NextResponse.json(\n      { error: 'Failed to start workflow' },\n      { status: 500 }\n    )\n  }\n}\n\nexport const openApi = {\n  methods: {\n    GET: {\n      summary: 'List workflow instances',\n      description: 'Get a list of workflow instances with optional filters. Supports pagination and filtering by status, workflowId, correlationKey, etc.',\n      tags: ['Workflows'],\n      query: z.object({\n        workflowId: z.string().optional(),\n        status: workflowInstanceStatusSchema.optional(),\n        correlationKey: z.string().optional(),\n        entityType: z.string().optional(),\n        entityId: z.string().optional(),\n        limit: z.number().int().positive().default(50).optional(),\n        offset: z.number().int().min(0).default(0).optional(),\n      }),\n      responses: [\n        {\n          status: 200,\n          description: 'List of workflow instances',\n          schema: z.object({\n            data: z.array(workflowInstanceResponseSchema),\n            pagination: paginationSchema,\n          }),\n        },\n        {\n          status: 401,\n          description: 'Unauthorized',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 500,\n          description: 'Internal server error',\n          schema: z.object({ error: z.string() }),\n        },\n      ],\n    },\n    POST: {\n      summary: 'Start workflow instance',\n      description: 'Start a new workflow instance from a workflow definition. The workflow will execute immediately.',\n      tags: ['Workflows'],\n      requestBody: {\n        contentType: 'application/json',\n        schema: startWorkflowInputSchema,\n        description: 'Workflow instance configuration including workflowId, initial context, and metadata.',\n      },\n      responses: [\n        {\n          status: 201,\n          description: 'Workflow started successfully',\n          schema: z.object({\n            data: z.object({\n              instance: workflowInstanceResponseSchema,\n              execution: workflowBackgroundStartSchema,\n            }),\n            message: z.string(),\n          }),\n        },\n        {\n          status: 400,\n          description: 'Bad request - Validation failed or definition disabled/invalid',\n          schema: z.object({\n            error: z.string(),\n            details: z.any().optional(),\n          }),\n        },\n        {\n          status: 401,\n          description: 'Unauthorized',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 403,\n          description: 'Forbidden - Insufficient permissions',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 404,\n          description: 'Workflow definition not found',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 500,\n          description: 'Internal server error',\n          schema: z.object({ error: z.string() }),\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAQA,SAAsB,oBAAoB;AAC1C,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,sCAAsC;AAC/C,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,EAEA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,YAAY,sBAAsB;AAClC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,0BAA0B;AAC9C;AAOA,eAAsB,IAAI,SAAsB;AAC9C,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,YAAY,+BAA+B,OAAO,IAAI;AAE5D,QAAI,CAAC,UAAU;AACb,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,yBAAyB;AAAA,QAClC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,EAAE,aAAa,IAAI,IAAI,IAAI,QAAQ,GAAG;AAC5C,UAAM,aAAa,aAAa,IAAI,YAAY;AAChD,UAAM,SAAS,aAAa,IAAI,QAAQ;AACxC,UAAM,iBAAiB,aAAa,IAAI,gBAAgB;AACxD,UAAM,aAAa,aAAa,IAAI,YAAY;AAChD,UAAM,WAAW,aAAa,IAAI,UAAU;AAC5C,UAAM,QAAQ,SAAS,aAAa,IAAI,OAAO,KAAK,IAAI;AACxD,UAAM,SAAS,SAAS,aAAa,IAAI,QAAQ,KAAK,GAAG;AAGzD,UAAM,QAAa;AAAA,MACjB;AAAA,MACA,GAAG,UAAU;AAAA,IACf;AAEA,QAAI,YAAY;AACd,YAAM,aAAa;AAAA,IACrB;AAEA,QAAI,QAAQ;AAEV,YAAM,WAAW,OAAO,MAAM,GAAG,EAAE,IAAI,OAAK,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO;AACpE,UAAI,SAAS,WAAW,GAAG;AACzB,cAAM,SAAS,SAAS,CAAC;AAAA,MAC3B,WAAW,SAAS,SAAS,GAAG;AAC9B,cAAM,SAAS,EAAE,KAAK,SAAS;AAAA,MACjC;AAAA,IACF;AAEA,QAAI,gBAAgB;AAClB,YAAM,iBAAiB;AAAA,IACzB;AAIA,QAAI,cAAc,UAAU;AAC1B,YAAM,OAAO,MAAM,QAAQ,CAAC;AAC5B,UAAI,YAAY;AACd,cAAM,KAAK,KAAK;AAAA,UACd,UAAU,EAAE,WAAW,EAAE,WAAuB,EAAE;AAAA,QACpD,CAAC;AAAA,MACH;AACA,UAAI,UAAU;AACZ,cAAM,KAAK,KAAK;AAAA,UACd,UAAU,EAAE,WAAW,EAAE,SAAmB,EAAE;AAAA,QAChD,CAAC;AAAA,MACH;AAAA,IACF;AAEA,UAAM,CAAC,WAAW,KAAK,IAAI,MAAM,GAAG;AAAA,MAClC;AAAA,MACA;AAAA,MACA;AAAA,QACE,SAAS,EAAE,WAAW,OAAO;AAAA,QAC7B;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,WAAO,aAAa,KAAK;AAAA,MACvB,MAAM;AAAA,MACN,YAAY;AAAA,QACV;AAAA,QACA;AAAA,QACA;AAAA,QACA,SAAS,SAAS,QAAQ;AAAA,MAC5B;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,MAAM,oCAAoC,EAAE,KAAK,MAAM,CAAC;AAC/D,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,oCAAoC;AAAA,MAC7C,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAOA,eAAsB,KAAK,SAAsB;AAC/C,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,OAAO,cAAc,KAAK;AAEjD,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,yCAAyC;AAAA,QAClD,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,gBAAgB,MAAM,YAAY;AAAA,MACtC,KAAK;AAAA,MACL,CAAC,4BAA4B;AAAA,MAC7B;AAAA,QACE;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,eAAe;AAClB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,2BAA2B;AAAA,QACpC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,OAAO,MAAM,QAAQ,KAAK;AAGhC,UAAM,aAAa,yBAAyB,UAAU,IAAI;AAC1D,QAAI,CAAC,WAAW,SAAS;AACvB,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO;AAAA,UACP,SAAS,WAAW,MAAM;AAAA,QAC5B;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,QAA+B,WAAW;AAGhD,UAAMA,YAAW;AAAA,MACf,GAAG,MAAM;AAAA,MACT,aAAa,KAAK;AAAA,IACpB;AAGA,UAAM,WAAW,MAAM,iBAAiB,cAAc,IAAI;AAAA,MACxD,YAAY,MAAM;AAAA,MAClB,SAAS,MAAM;AAAA,MACf,gBAAgB,MAAM,kBAAkB,CAAC;AAAA,MACzC,gBAAgB,MAAM;AAAA,MACtB,UAAAA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAID,iBAAa,YAAY;AACvB,UAAI;AAEF,cAAM,cAAc,MAAM,uBAAuB;AACjD,cAAM,OAAO,YAAY,QAAQ,IAAI;AACrC,cAAM,iBAAiB,gBAAgB,MAAM,aAAa,SAAS,EAAE;AAAA,MACvE,SAAS,OAAO;AACd,eAAO,MAAM,uCAAuC,EAAE,KAAK,MAAM,CAAC;AAAA,MACpE;AAAA,IACF,CAAC;AAED,WAAO,aAAa;AAAA,MAClB;AAAA,QACE,MAAM;AAAA,UACJ;AAAA,UACA,WAAW;AAAA,YACT,QAAQ,SAAS;AAAA,YACjB,aAAa,SAAS;AAAA,YACtB,SAAS;AAAA,UACX;AAAA,QACF;AAAA,QACA,SAAS;AAAA,MACX;AAAA,MACA,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF,SAAS,OAAO;AACd,WAAO,MAAM,2BAA2B,EAAE,KAAK,MAAM,CAAC;AAGtD,QAAI,iBAAiB,iBAAiB,wBAAwB;AAC5D,UAAI,MAAM,SAAS,wBAAwB;AACzC,eAAO,aAAa;AAAA,UAClB,EAAE,OAAO,MAAM,QAAQ;AAAA,UACvB,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AACA,UAAI,MAAM,SAAS,uBAAuB;AACxC,eAAO,aAAa;AAAA,UAClB,EAAE,OAAO,MAAM,QAAQ;AAAA,UACvB,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AACA,UAAI,MAAM,SAAS,sBAAsB;AACvC,eAAO,aAAa;AAAA,UAClB,EAAE,OAAO,MAAM,QAAQ;AAAA,UACvB,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AACA,UAAI,MAAM,SAAS,+BAA+B;AAChD,eAAO,aAAa;AAAA,UAClB;AAAA,YACE,OAAO,MAAM;AAAA,YACb,MAAM,MAAM;AAAA,YACZ,SAAS,MAAM;AAAA,UACjB;AAAA,UACA,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAAA,IACF;AAEA,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,2BAA2B;AAAA,MACpC,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,MAAM,CAAC,WAAW;AAAA,MAClB,OAAO,EAAE,OAAO;AAAA,QACd,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,QAChC,QAAQ,6BAA6B,SAAS;AAAA,QAC9C,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,QACpC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,QAChC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,QAC9B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,SAAS;AAAA,QACxD,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,MACtD,CAAC;AAAA,MACD,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,MAAM,EAAE,MAAM,8BAA8B;AAAA,YAC5C,YAAY;AAAA,UACd,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,MAAM,CAAC,WAAW;AAAA,MAClB,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,QACR,aAAa;AAAA,MACf;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,MAAM,EAAE,OAAO;AAAA,cACb,UAAU;AAAA,cACV,WAAW;AAAA,YACb,CAAC;AAAA,YACD,SAAS,EAAE,OAAO;AAAA,UACpB,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,OAAO,EAAE,OAAO;AAAA,YAChB,SAAS,EAAE,IAAI,EAAE,SAAS;AAAA,UAC5B,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": ["metadata"]
 }

package/dist/modules/workflows/api/instances/validate-start/route.js

@@ -10,6 +10,8 @@ import {
   validateStartResponseSchema,
   workflowErrorSchema
 } from "../../openapi.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("workflows");
 const metadata = {
   requireAuth: true,
   requireFeatures: ["workflows.instances.view"]
@@ -61,7 +63,7 @@ async function POST(request) {
       validatedRules: result.validatedRules.length > 0 ? result.validatedRules : void 0
     });
   } catch (error) {
-    console.error("Error validating workflow start:", error);
+    logger.error("Error validating workflow start", { err: error });
     return NextResponse.json(
       { error: "Failed to validate workflow start" },
       { status: 500 }