@open-mercato/core 0.6.6-develop.6551.1.1511bfa890 → 0.6.7-develop.6552.1.5208a19369

package/dist/modules/workflows/migrations/Migration20260716120000.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/workflows/migrations/Migration20260716120000.ts"],
+  "sourcesContent": ["import { Migration } from '@mikro-orm/migrations'\n\nconst CODE_WORKFLOW_ID = 'workflows.checkout-demo'\n\n/**\n * Retires the persisted checkout-demo seed rows so runtime resolves the\n * maintained CODE definition instead (issue #4211).\n *\n * Background: `workflows.checkout-demo` is now code-defined\n * (`packages/core/src/modules/workflows/workflows.ts`), and only the code\n * definition forwards the cart's line items + shipping/tax adjustments to\n * `POST /api/sales/orders`. But existing tenants still carry a persisted\n * `workflow_definitions` row from the old seed \u2014 originally seeded under ids\n * like `checkout_simple_v1` / names like `Simple Checkout Flow` and later\n * `Checkout with Payment Webhook`, then renamed to `workflows.checkout-demo`\n * by Migration20260428102318. Its `create_order` body never sent `lines`, and\n * because `findWorkflowDefinition` resolves the DB row first, that stale row\n * SHADOWS the code definition \u2014 so orders come out with zero line items and\n * $0.00 totals. Patching the persisted body is unreliable: the seed's name and\n * body shape vary across historical versions, so a fingerprint on either misses\n * whole cohorts of tenants (the defect QA hit).\n *\n * Instead, soft-delete the seeded rows. This is body/name-agnostic, so it fixes\n * every historical seed variant:\n *   - New instances: `findWorkflowDefinition` filters `deleted_at IS NULL`, so\n *     the retired row is skipped and the code definition is used (correct body).\n *   - In-flight instances: `findDefinitionForInstance` loads the definition by\n *     `id` with no soft-delete filter (WorkflowDefinition has no global filter),\n *     so instances that reference the row keep resolving and advancing.\n *\n * Scope is limited to `code_workflow_id IS NULL` rows \u2014 user customizations of\n * the code definition set `code_workflow_id` and MUST NOT be retired. The\n * `deleted_at IS NULL` guard makes the migration idempotent.\n */\nexport function buildRetireSeededCheckoutDemoSql(): string {\n  return `\n    update \"workflow_definitions\" as \"wf\"\n    set \"deleted_at\" = current_timestamp,\n        \"updated_at\" = current_timestamp\n    where \"wf\".\"workflow_id\" = '${CODE_WORKFLOW_ID}'\n      and \"wf\".\"code_workflow_id\" is null\n      and \"wf\".\"deleted_at\" is null;\n  `.trim()\n}\n\nexport class Migration20260716120000 extends Migration {\n  override async up(): Promise<void> {\n    this.addSql(buildRetireSeededCheckoutDemoSql())\n  }\n\n  override async down(): Promise<void> {\n    // Forward-only. Restoring `deleted_at = null` would re-shadow the maintained\n    // code definition with the stale seed body and re-introduce zero-line orders\n    // (#4211). The code definition supersedes the seed, so there is nothing to\n    // restore.\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,iBAAiB;AAE1B,MAAM,mBAAmB;AAgClB,SAAS,mCAA2C;AACzD,SAAO;AAAA;AAAA;AAAA;AAAA,kCAIyB,gBAAgB;AAAA;AAAA;AAAA,IAG9C,KAAK;AACT;AAEO,MAAM,gCAAgC,UAAU;AAAA,EACrD,MAAe,KAAoB;AACjC,SAAK,OAAO,iCAAiC,CAAC;AAAA,EAChD;AAAA,EAEA,MAAe,OAAsB;AAAA,EAKrC;AACF;",
+  "names": []
+}

package/dist/modules/workflows/workflows.js

@@ -222,6 +222,8 @@ const checkoutDemo = defineWorkflow({
               customerEntityId: "{{context.customer.id}}",
               currencyCode: "{{context.cart.currency}}",
               placedAt: "{{now}}",
+              lines: "{{context.cart.orderLines}}",
+              adjustments: "{{context.cart.orderAdjustments}}",
               grandTotalGrossAmount: "{{context.cart.total}}"
             },
             validateTenantMatch: true

package/dist/modules/workflows/workflows.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/workflows/workflows.ts"],
-  "sourcesContent": ["/**\n * Workflows Module \u2014 Code-Based Workflow Definitions\n *\n * Demo workflows shipped with the workflows module.\n * These are auto-discovered by the generator and loaded into the in-memory registry.\n */\n\nimport { defineWorkflow, createWorkflowsModuleConfig } from '@open-mercato/shared/modules/workflows'\n\n// ============================================================================\n// Simple Approval Workflow\n// ============================================================================\n\nconst simpleApproval = defineWorkflow({\n  workflowId: 'workflows.simple-approval',\n  workflowName: 'Simple Approval Workflow',\n  description: 'Basic three-step approval workflow: Start \u2192 Approval \u2192 End',\n  metadata: { category: 'Testing', tags: ['test', 'approval', 'simple'], icon: 'check-circle' },\n  steps: [\n    { stepId: 'start', stepName: 'Start', stepType: 'START', description: 'Initialize workflow' },\n    {\n      stepId: 'approval',\n      stepName: 'Pending Approval',\n      stepType: 'USER_TASK',\n      description: 'Approve or reject request',\n      userTaskConfig: { assignedTo: 'approver', slaDuration: 'PT1H' },\n    },\n    { stepId: 'end', stepName: 'Complete', stepType: 'END', description: 'Workflow complete' },\n  ] as const,\n  transitions: [\n    {\n      transitionId: 'start_to_approval',\n      transitionName: 'Submit for Approval',\n      fromStepId: 'start',\n      toStepId: 'approval',\n      trigger: 'auto',\n      priority: 100,\n      activities: [\n        {\n          activityId: 'notify_approver',\n          activityName: 'Notify Approver',\n          activityType: 'SEND_EMAIL',\n          config: {\n            to: '{{context.approver.email}}',\n            subject: 'Approval Required: {{context.request.title}}',\n            template: 'approval_request',\n            data: {\n              requestId: '{{context.request.id}}',\n              title: '{{context.request.title}}',\n              requester: '{{context.requester.name}}',\n            },\n          },\n          timeout: 'PT10S',\n          async: true,\n          retryPolicy: { maxAttempts: 3, initialIntervalMs: 2000, backoffCoefficient: 2, maxIntervalMs: 20000 },\n        },\n        {\n          activityId: 'emit_approval_requested',\n          activityName: 'Emit Approval Requested Event',\n          activityType: 'EMIT_EVENT',\n          config: {\n            eventType: 'approval.requested',\n            payload: { requestId: '{{context.request.id}}', workflowInstanceId: '{{workflow.instanceId}}' },\n          },\n          async: true,\n        },\n      ],\n    },\n    {\n      transitionId: 'approval_to_end',\n      transitionName: 'Approval Decision',\n      fromStepId: 'approval',\n      toStepId: 'end',\n      trigger: 'manual',\n      priority: 100,\n      activities: [\n        {\n          activityId: 'notify_requester',\n          activityName: 'Notify Requester of Decision',\n          activityType: 'SEND_EMAIL',\n          config: {\n            to: '{{context.requester.email}}',\n            subject: 'Approval Decision: {{context.request.title}}',\n            template: 'approval_decision',\n            data: {\n              requestId: '{{context.request.id}}',\n              title: '{{context.request.title}}',\n              decision: '{{task.result.approved}}',\n              comments: '{{task.result.comments}}',\n              approver: '{{task.completedBy}}',\n            },\n          },\n          timeout: 'PT10S',\n          async: true,\n        },\n        {\n          activityId: 'emit_approval_completed',\n          activityName: 'Emit Approval Completed Event',\n          activityType: 'EMIT_EVENT',\n          config: {\n            eventType: 'approval.completed',\n            payload: {\n              requestId: '{{context.request.id}}',\n              approved: '{{task.result.approved}}',\n              approvedBy: '{{task.completedBy}}',\n              timestamp: '{{now}}',\n            },\n          },\n          async: true,\n        },\n      ],\n    },\n  ],\n})\n\n// ============================================================================\n// Checkout Demo Workflow\n// ============================================================================\n\nconst checkoutDemo = defineWorkflow({\n  workflowId: 'workflows.checkout-demo',\n  workflowName: 'Checkout with Payment Webhook',\n  description: 'Realistic checkout workflow with signal-based payment confirmation',\n  metadata: { category: 'E-commerce', tags: ['checkout', 'demo', 'payments', 'signals'], icon: 'ShoppingCart' },\n  steps: [\n    {\n      stepId: 'start',\n      stepName: 'Start',\n      stepType: 'START',\n      description: 'Checkout process initiated',\n      preConditions: [{\n        ruleId: 'workflow_checkout_cart_not_empty',\n        required: true,\n        validationMessage: {\n          en: 'Your shopping cart is empty. Please add items before starting checkout.',\n          pl: 'Tw\u00F3j koszyk jest pusty. Dodaj produkty przed rozpocz\u0119ciem zakupu.',\n        },\n      }],\n    },\n    { stepId: 'cart_validation', stepName: 'Cart Validation', stepType: 'AUTOMATED', description: 'Validate cart has items and inventory is available', timeout: 'PT10S' },\n    {\n      stepId: 'customer_info',\n      stepName: 'Customer Information',\n      stepType: 'USER_TASK',\n      description: 'Collect customer shipping and contact information',\n      userTaskConfig: {\n        formSchema: {\n          type: 'object',\n          properties: {\n            fullName: { type: 'string', title: 'Full Name', description: \"Customer's full legal name\" },\n            email: { type: 'string', format: 'email', title: 'Email Address', description: 'Email for order confirmation' },\n            phone: { type: 'string', title: 'Phone Number', description: 'Contact number for delivery' },\n            comment: { type: 'string', title: 'Order Comment', maxLength: 500, description: 'Special instructions or notes' },\n          },\n          required: ['fullName', 'email'],\n        },\n        slaDuration: 'PT24H',\n      },\n    },\n    { stepId: 'payment_initiation', stepName: 'Initiate Payment', stepType: 'AUTOMATED', description: 'Send payment request to payment provider', timeout: 'PT10S' },\n    {\n      stepId: 'wait_payment_confirmation',\n      stepName: 'Wait for Payment Confirmation',\n      stepType: 'WAIT_FOR_SIGNAL',\n      description: 'Waiting for payment provider webhook confirmation',\n      signalConfig: { signalName: 'payment_confirmed', timeout: 'PT5M' },\n    },\n    { stepId: 'order_confirmation', stepName: 'Order Confirmation', stepType: 'AUTOMATED', description: 'Create order record and send confirmation', timeout: 'PT15S' },\n    { stepId: 'end', stepName: 'Complete', stepType: 'END', description: 'Checkout completed successfully' },\n  ] as const,\n  transitions: [\n    {\n      transitionId: 'start_to_cart',\n      transitionName: 'Initialize Checkout',\n      fromStepId: 'start',\n      toStepId: 'cart_validation',\n      trigger: 'auto',\n      priority: 100,\n      activities: [{\n        activityId: 'log_checkout_start',\n        activityName: 'Log Checkout Start',\n        activityType: 'EMIT_EVENT',\n        config: {\n          eventName: 'checkout.started',\n          payload: { customerId: '{{context.customerId}}', cartId: '{{context.cartId}}', currency: '{{context.currency}}', timestamp: '{{now}}' },\n        },\n        async: false,\n      }],\n    },\n    {\n      transitionId: 'cart_to_customer_info',\n      transitionName: 'Collect Customer Information',\n      fromStepId: 'cart_validation',\n      toStepId: 'customer_info',\n      trigger: 'auto',\n      priority: 100,\n      preConditions: [{ ruleId: 'workflow_checkout_cart_not_empty', required: true }],\n    },\n    {\n      transitionId: 'customer_info_to_payment',\n      transitionName: 'Initiate Payment',\n      fromStepId: 'customer_info',\n      toStepId: 'payment_initiation',\n      trigger: 'auto',\n      priority: 100,\n    },\n    {\n      transitionId: 'payment_to_wait_confirmation',\n      transitionName: 'Wait for Confirmation',\n      fromStepId: 'payment_initiation',\n      toStepId: 'wait_payment_confirmation',\n      trigger: 'auto',\n      priority: 100,\n    },\n    {\n      transitionId: 'confirmation_to_order',\n      transitionName: 'Payment Confirmed',\n      fromStepId: 'wait_payment_confirmation',\n      toStepId: 'order_confirmation',\n      trigger: 'auto',\n      priority: 100,\n    },\n    {\n      transitionId: 'confirmation_to_end',\n      transitionName: 'Finalize Order',\n      fromStepId: 'order_confirmation',\n      toStepId: 'end',\n      trigger: 'auto',\n      priority: 100,\n      activities: [\n        {\n          activityId: 'create_order',\n          activityName: 'Create Order Record',\n          activityType: 'CALL_API',\n          config: {\n            endpoint: '/api/sales/orders',\n            method: 'POST',\n            body: {\n              customerEntityId: '{{context.customer.id}}',\n              currencyCode: '{{context.cart.currency}}',\n              placedAt: '{{now}}',\n              grandTotalGrossAmount: '{{context.cart.total}}',\n            },\n            validateTenantMatch: true,\n          },\n          timeout: 'PT10S',\n          async: false,\n          retryPolicy: { maxAttempts: 3, initialIntervalMs: 2000, backoffCoefficient: 2, maxIntervalMs: 10000 },\n        },\n        {\n          activityId: 'send_confirmation_email',\n          activityName: 'Send Order Confirmation Email',\n          activityType: 'SEND_EMAIL',\n          config: {\n            to: '{{context.customer.email}}',\n            subject: 'Order Confirmation',\n            template: 'order_confirmation',\n            data: { customerName: '{{context.customer.name}}', total: '{{context.cart.total}}' },\n          },\n          timeout: 'PT15S',\n          async: true,\n          retryPolicy: { maxAttempts: 3, initialIntervalMs: 2000, backoffCoefficient: 2, maxIntervalMs: 20000 },\n        },\n      ],\n    },\n  ],\n})\n\n// ============================================================================\n// Module Export\n// ============================================================================\n\nexport const workflowsConfig = createWorkflowsModuleConfig({\n  moduleId: 'workflows',\n  workflows: [simpleApproval, checkoutDemo],\n})\n\nexport default workflowsConfig\n"],
-  "mappings": "AAOA,SAAS,gBAAgB,mCAAmC;AAM5D,MAAM,iBAAiB,eAAe;AAAA,EACpC,YAAY;AAAA,EACZ,cAAc;AAAA,EACd,aAAa;AAAA,EACb,UAAU,EAAE,UAAU,WAAW,MAAM,CAAC,QAAQ,YAAY,QAAQ,GAAG,MAAM,eAAe;AAAA,EAC5F,OAAO;AAAA,IACL,EAAE,QAAQ,SAAS,UAAU,SAAS,UAAU,SAAS,aAAa,sBAAsB;AAAA,IAC5F;AAAA,MACE,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,gBAAgB,EAAE,YAAY,YAAY,aAAa,OAAO;AAAA,IAChE;AAAA,IACA,EAAE,QAAQ,OAAO,UAAU,YAAY,UAAU,OAAO,aAAa,oBAAoB;AAAA,EAC3F;AAAA,EACA,aAAa;AAAA,IACX;AAAA,MACE,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,SAAS;AAAA,MACT,UAAU;AAAA,MACV,YAAY;AAAA,QACV;AAAA,UACE,YAAY;AAAA,UACZ,cAAc;AAAA,UACd,cAAc;AAAA,UACd,QAAQ;AAAA,YACN,IAAI;AAAA,YACJ,SAAS;AAAA,YACT,UAAU;AAAA,YACV,MAAM;AAAA,cACJ,WAAW;AAAA,cACX,OAAO;AAAA,cACP,WAAW;AAAA,YACb;AAAA,UACF;AAAA,UACA,SAAS;AAAA,UACT,OAAO;AAAA,UACP,aAAa,EAAE,aAAa,GAAG,mBAAmB,KAAM,oBAAoB,GAAG,eAAe,IAAM;AAAA,QACtG;AAAA,QACA;AAAA,UACE,YAAY;AAAA,UACZ,cAAc;AAAA,UACd,cAAc;AAAA,UACd,QAAQ;AAAA,YACN,WAAW;AAAA,YACX,SAAS,EAAE,WAAW,0BAA0B,oBAAoB,0BAA0B;AAAA,UAChG;AAAA,UACA,OAAO;AAAA,QACT;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,SAAS;AAAA,MACT,UAAU;AAAA,MACV,YAAY;AAAA,QACV;AAAA,UACE,YAAY;AAAA,UACZ,cAAc;AAAA,UACd,cAAc;AAAA,UACd,QAAQ;AAAA,YACN,IAAI;AAAA,YACJ,SAAS;AAAA,YACT,UAAU;AAAA,YACV,MAAM;AAAA,cACJ,WAAW;AAAA,cACX,OAAO;AAAA,cACP,UAAU;AAAA,cACV,UAAU;AAAA,cACV,UAAU;AAAA,YACZ;AAAA,UACF;AAAA,UACA,SAAS;AAAA,UACT,OAAO;AAAA,QACT;AAAA,QACA;AAAA,UACE,YAAY;AAAA,UACZ,cAAc;AAAA,UACd,cAAc;AAAA,UACd,QAAQ;AAAA,YACN,WAAW;AAAA,YACX,SAAS;AAAA,cACP,WAAW;AAAA,cACX,UAAU;AAAA,cACV,YAAY;AAAA,cACZ,WAAW;AAAA,YACb;AAAA,UACF;AAAA,UACA,OAAO;AAAA,QACT;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF,CAAC;AAMD,MAAM,eAAe,eAAe;AAAA,EAClC,YAAY;AAAA,EACZ,cAAc;AAAA,EACd,aAAa;AAAA,EACb,UAAU,EAAE,UAAU,cAAc,MAAM,CAAC,YAAY,QAAQ,YAAY,SAAS,GAAG,MAAM,eAAe;AAAA,EAC5G,OAAO;AAAA,IACL;AAAA,MACE,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,eAAe,CAAC;AAAA,QACd,QAAQ;AAAA,QACR,UAAU;AAAA,QACV,mBAAmB;AAAA,UACjB,IAAI;AAAA,UACJ,IAAI;AAAA,QACN;AAAA,MACF,CAAC;AAAA,IACH;AAAA,IACA,EAAE,QAAQ,mBAAmB,UAAU,mBAAmB,UAAU,aAAa,aAAa,sDAAsD,SAAS,QAAQ;AAAA,IACrK;AAAA,MACE,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,gBAAgB;AAAA,QACd,YAAY;AAAA,UACV,MAAM;AAAA,UACN,YAAY;AAAA,YACV,UAAU,EAAE,MAAM,UAAU,OAAO,aAAa,aAAa,6BAA6B;AAAA,YAC1F,OAAO,EAAE,MAAM,UAAU,QAAQ,SAAS,OAAO,iBAAiB,aAAa,+BAA+B;AAAA,YAC9G,OAAO,EAAE,MAAM,UAAU,OAAO,gBAAgB,aAAa,8BAA8B;AAAA,YAC3F,SAAS,EAAE,MAAM,UAAU,OAAO,iBAAiB,WAAW,KAAK,aAAa,gCAAgC;AAAA,UAClH;AAAA,UACA,UAAU,CAAC,YAAY,OAAO;AAAA,QAChC;AAAA,QACA,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,EAAE,QAAQ,sBAAsB,UAAU,oBAAoB,UAAU,aAAa,aAAa,4CAA4C,SAAS,QAAQ;AAAA,IAC/J;AAAA,MACE,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,cAAc,EAAE,YAAY,qBAAqB,SAAS,OAAO;AAAA,IACnE;AAAA,IACA,EAAE,QAAQ,sBAAsB,UAAU,sBAAsB,UAAU,aAAa,aAAa,6CAA6C,SAAS,QAAQ;AAAA,IAClK,EAAE,QAAQ,OAAO,UAAU,YAAY,UAAU,OAAO,aAAa,kCAAkC;AAAA,EACzG;AAAA,EACA,aAAa;AAAA,IACX;AAAA,MACE,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,SAAS;AAAA,MACT,UAAU;AAAA,MACV,YAAY,CAAC;AAAA,QACX,YAAY;AAAA,QACZ,cAAc;AAAA,QACd,cAAc;AAAA,QACd,QAAQ;AAAA,UACN,WAAW;AAAA,UACX,SAAS,EAAE,YAAY,0BAA0B,QAAQ,sBAAsB,UAAU,wBAAwB,WAAW,UAAU;AAAA,QACxI;AAAA,QACA,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AAAA,IACA;AAAA,MACE,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,SAAS;AAAA,MACT,UAAU;AAAA,MACV,eAAe,CAAC,EAAE,QAAQ,oCAAoC,UAAU,KAAK,CAAC;AAAA,IAChF;AAAA,IACA;AAAA,MACE,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,SAAS;AAAA,MACT,UAAU;AAAA,IACZ;AAAA,IACA;AAAA,MACE,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,SAAS;AAAA,MACT,UAAU;AAAA,IACZ;AAAA,IACA;AAAA,MACE,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,SAAS;AAAA,MACT,UAAU;AAAA,IACZ;AAAA,IACA;AAAA,MACE,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,SAAS;AAAA,MACT,UAAU;AAAA,MACV,YAAY;AAAA,QACV;AAAA,UACE,YAAY;AAAA,UACZ,cAAc;AAAA,UACd,cAAc;AAAA,UACd,QAAQ;AAAA,YACN,UAAU;AAAA,YACV,QAAQ;AAAA,YACR,MAAM;AAAA,cACJ,kBAAkB;AAAA,cAClB,cAAc;AAAA,cACd,UAAU;AAAA,cACV,uBAAuB;AAAA,YACzB;AAAA,YACA,qBAAqB;AAAA,UACvB;AAAA,UACA,SAAS;AAAA,UACT,OAAO;AAAA,UACP,aAAa,EAAE,aAAa,GAAG,mBAAmB,KAAM,oBAAoB,GAAG,eAAe,IAAM;AAAA,QACtG;AAAA,QACA;AAAA,UACE,YAAY;AAAA,UACZ,cAAc;AAAA,UACd,cAAc;AAAA,UACd,QAAQ;AAAA,YACN,IAAI;AAAA,YACJ,SAAS;AAAA,YACT,UAAU;AAAA,YACV,MAAM,EAAE,cAAc,6BAA6B,OAAO,yBAAyB;AAAA,UACrF;AAAA,UACA,SAAS;AAAA,UACT,OAAO;AAAA,UACP,aAAa,EAAE,aAAa,GAAG,mBAAmB,KAAM,oBAAoB,GAAG,eAAe,IAAM;AAAA,QACtG;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF,CAAC;AAMM,MAAM,kBAAkB,4BAA4B;AAAA,EACzD,UAAU;AAAA,EACV,WAAW,CAAC,gBAAgB,YAAY;AAC1C,CAAC;AAED,IAAO,oBAAQ;",
+  "sourcesContent": ["/**\n * Workflows Module \u2014 Code-Based Workflow Definitions\n *\n * Demo workflows shipped with the workflows module.\n * These are auto-discovered by the generator and loaded into the in-memory registry.\n */\n\nimport { defineWorkflow, createWorkflowsModuleConfig } from '@open-mercato/shared/modules/workflows'\n\n// ============================================================================\n// Simple Approval Workflow\n// ============================================================================\n\nconst simpleApproval = defineWorkflow({\n  workflowId: 'workflows.simple-approval',\n  workflowName: 'Simple Approval Workflow',\n  description: 'Basic three-step approval workflow: Start \u2192 Approval \u2192 End',\n  metadata: { category: 'Testing', tags: ['test', 'approval', 'simple'], icon: 'check-circle' },\n  steps: [\n    { stepId: 'start', stepName: 'Start', stepType: 'START', description: 'Initialize workflow' },\n    {\n      stepId: 'approval',\n      stepName: 'Pending Approval',\n      stepType: 'USER_TASK',\n      description: 'Approve or reject request',\n      userTaskConfig: { assignedTo: 'approver', slaDuration: 'PT1H' },\n    },\n    { stepId: 'end', stepName: 'Complete', stepType: 'END', description: 'Workflow complete' },\n  ] as const,\n  transitions: [\n    {\n      transitionId: 'start_to_approval',\n      transitionName: 'Submit for Approval',\n      fromStepId: 'start',\n      toStepId: 'approval',\n      trigger: 'auto',\n      priority: 100,\n      activities: [\n        {\n          activityId: 'notify_approver',\n          activityName: 'Notify Approver',\n          activityType: 'SEND_EMAIL',\n          config: {\n            to: '{{context.approver.email}}',\n            subject: 'Approval Required: {{context.request.title}}',\n            template: 'approval_request',\n            data: {\n              requestId: '{{context.request.id}}',\n              title: '{{context.request.title}}',\n              requester: '{{context.requester.name}}',\n            },\n          },\n          timeout: 'PT10S',\n          async: true,\n          retryPolicy: { maxAttempts: 3, initialIntervalMs: 2000, backoffCoefficient: 2, maxIntervalMs: 20000 },\n        },\n        {\n          activityId: 'emit_approval_requested',\n          activityName: 'Emit Approval Requested Event',\n          activityType: 'EMIT_EVENT',\n          config: {\n            eventType: 'approval.requested',\n            payload: { requestId: '{{context.request.id}}', workflowInstanceId: '{{workflow.instanceId}}' },\n          },\n          async: true,\n        },\n      ],\n    },\n    {\n      transitionId: 'approval_to_end',\n      transitionName: 'Approval Decision',\n      fromStepId: 'approval',\n      toStepId: 'end',\n      trigger: 'manual',\n      priority: 100,\n      activities: [\n        {\n          activityId: 'notify_requester',\n          activityName: 'Notify Requester of Decision',\n          activityType: 'SEND_EMAIL',\n          config: {\n            to: '{{context.requester.email}}',\n            subject: 'Approval Decision: {{context.request.title}}',\n            template: 'approval_decision',\n            data: {\n              requestId: '{{context.request.id}}',\n              title: '{{context.request.title}}',\n              decision: '{{task.result.approved}}',\n              comments: '{{task.result.comments}}',\n              approver: '{{task.completedBy}}',\n            },\n          },\n          timeout: 'PT10S',\n          async: true,\n        },\n        {\n          activityId: 'emit_approval_completed',\n          activityName: 'Emit Approval Completed Event',\n          activityType: 'EMIT_EVENT',\n          config: {\n            eventType: 'approval.completed',\n            payload: {\n              requestId: '{{context.request.id}}',\n              approved: '{{task.result.approved}}',\n              approvedBy: '{{task.completedBy}}',\n              timestamp: '{{now}}',\n            },\n          },\n          async: true,\n        },\n      ],\n    },\n  ],\n})\n\n// ============================================================================\n// Checkout Demo Workflow\n// ============================================================================\n\nconst checkoutDemo = defineWorkflow({\n  workflowId: 'workflows.checkout-demo',\n  workflowName: 'Checkout with Payment Webhook',\n  description: 'Realistic checkout workflow with signal-based payment confirmation',\n  metadata: { category: 'E-commerce', tags: ['checkout', 'demo', 'payments', 'signals'], icon: 'ShoppingCart' },\n  steps: [\n    {\n      stepId: 'start',\n      stepName: 'Start',\n      stepType: 'START',\n      description: 'Checkout process initiated',\n      preConditions: [{\n        ruleId: 'workflow_checkout_cart_not_empty',\n        required: true,\n        validationMessage: {\n          en: 'Your shopping cart is empty. Please add items before starting checkout.',\n          pl: 'Tw\u00F3j koszyk jest pusty. Dodaj produkty przed rozpocz\u0119ciem zakupu.',\n        },\n      }],\n    },\n    { stepId: 'cart_validation', stepName: 'Cart Validation', stepType: 'AUTOMATED', description: 'Validate cart has items and inventory is available', timeout: 'PT10S' },\n    {\n      stepId: 'customer_info',\n      stepName: 'Customer Information',\n      stepType: 'USER_TASK',\n      description: 'Collect customer shipping and contact information',\n      userTaskConfig: {\n        formSchema: {\n          type: 'object',\n          properties: {\n            fullName: { type: 'string', title: 'Full Name', description: \"Customer's full legal name\" },\n            email: { type: 'string', format: 'email', title: 'Email Address', description: 'Email for order confirmation' },\n            phone: { type: 'string', title: 'Phone Number', description: 'Contact number for delivery' },\n            comment: { type: 'string', title: 'Order Comment', maxLength: 500, description: 'Special instructions or notes' },\n          },\n          required: ['fullName', 'email'],\n        },\n        slaDuration: 'PT24H',\n      },\n    },\n    { stepId: 'payment_initiation', stepName: 'Initiate Payment', stepType: 'AUTOMATED', description: 'Send payment request to payment provider', timeout: 'PT10S' },\n    {\n      stepId: 'wait_payment_confirmation',\n      stepName: 'Wait for Payment Confirmation',\n      stepType: 'WAIT_FOR_SIGNAL',\n      description: 'Waiting for payment provider webhook confirmation',\n      signalConfig: { signalName: 'payment_confirmed', timeout: 'PT5M' },\n    },\n    { stepId: 'order_confirmation', stepName: 'Order Confirmation', stepType: 'AUTOMATED', description: 'Create order record and send confirmation', timeout: 'PT15S' },\n    { stepId: 'end', stepName: 'Complete', stepType: 'END', description: 'Checkout completed successfully' },\n  ] as const,\n  transitions: [\n    {\n      transitionId: 'start_to_cart',\n      transitionName: 'Initialize Checkout',\n      fromStepId: 'start',\n      toStepId: 'cart_validation',\n      trigger: 'auto',\n      priority: 100,\n      activities: [{\n        activityId: 'log_checkout_start',\n        activityName: 'Log Checkout Start',\n        activityType: 'EMIT_EVENT',\n        config: {\n          eventName: 'checkout.started',\n          payload: { customerId: '{{context.customerId}}', cartId: '{{context.cartId}}', currency: '{{context.currency}}', timestamp: '{{now}}' },\n        },\n        async: false,\n      }],\n    },\n    {\n      transitionId: 'cart_to_customer_info',\n      transitionName: 'Collect Customer Information',\n      fromStepId: 'cart_validation',\n      toStepId: 'customer_info',\n      trigger: 'auto',\n      priority: 100,\n      preConditions: [{ ruleId: 'workflow_checkout_cart_not_empty', required: true }],\n    },\n    {\n      transitionId: 'customer_info_to_payment',\n      transitionName: 'Initiate Payment',\n      fromStepId: 'customer_info',\n      toStepId: 'payment_initiation',\n      trigger: 'auto',\n      priority: 100,\n    },\n    {\n      transitionId: 'payment_to_wait_confirmation',\n      transitionName: 'Wait for Confirmation',\n      fromStepId: 'payment_initiation',\n      toStepId: 'wait_payment_confirmation',\n      trigger: 'auto',\n      priority: 100,\n    },\n    {\n      transitionId: 'confirmation_to_order',\n      transitionName: 'Payment Confirmed',\n      fromStepId: 'wait_payment_confirmation',\n      toStepId: 'order_confirmation',\n      trigger: 'auto',\n      priority: 100,\n    },\n    {\n      transitionId: 'confirmation_to_end',\n      transitionName: 'Finalize Order',\n      fromStepId: 'order_confirmation',\n      toStepId: 'end',\n      trigger: 'auto',\n      priority: 100,\n      activities: [\n        {\n          activityId: 'create_order',\n          activityName: 'Create Order Record',\n          activityType: 'CALL_API',\n          config: {\n            endpoint: '/api/sales/orders',\n            method: 'POST',\n            body: {\n              customerEntityId: '{{context.customer.id}}',\n              currencyCode: '{{context.cart.currency}}',\n              placedAt: '{{now}}',\n              lines: '{{context.cart.orderLines}}',\n              adjustments: '{{context.cart.orderAdjustments}}',\n              grandTotalGrossAmount: '{{context.cart.total}}',\n            },\n            validateTenantMatch: true,\n          },\n          timeout: 'PT10S',\n          async: false,\n          retryPolicy: { maxAttempts: 3, initialIntervalMs: 2000, backoffCoefficient: 2, maxIntervalMs: 10000 },\n        },\n        {\n          activityId: 'send_confirmation_email',\n          activityName: 'Send Order Confirmation Email',\n          activityType: 'SEND_EMAIL',\n          config: {\n            to: '{{context.customer.email}}',\n            subject: 'Order Confirmation',\n            template: 'order_confirmation',\n            data: { customerName: '{{context.customer.name}}', total: '{{context.cart.total}}' },\n          },\n          timeout: 'PT15S',\n          async: true,\n          retryPolicy: { maxAttempts: 3, initialIntervalMs: 2000, backoffCoefficient: 2, maxIntervalMs: 20000 },\n        },\n      ],\n    },\n  ],\n})\n\n// ============================================================================\n// Module Export\n// ============================================================================\n\nexport const workflowsConfig = createWorkflowsModuleConfig({\n  moduleId: 'workflows',\n  workflows: [simpleApproval, checkoutDemo],\n})\n\nexport default workflowsConfig\n"],
+  "mappings": "AAOA,SAAS,gBAAgB,mCAAmC;AAM5D,MAAM,iBAAiB,eAAe;AAAA,EACpC,YAAY;AAAA,EACZ,cAAc;AAAA,EACd,aAAa;AAAA,EACb,UAAU,EAAE,UAAU,WAAW,MAAM,CAAC,QAAQ,YAAY,QAAQ,GAAG,MAAM,eAAe;AAAA,EAC5F,OAAO;AAAA,IACL,EAAE,QAAQ,SAAS,UAAU,SAAS,UAAU,SAAS,aAAa,sBAAsB;AAAA,IAC5F;AAAA,MACE,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,gBAAgB,EAAE,YAAY,YAAY,aAAa,OAAO;AAAA,IAChE;AAAA,IACA,EAAE,QAAQ,OAAO,UAAU,YAAY,UAAU,OAAO,aAAa,oBAAoB;AAAA,EAC3F;AAAA,EACA,aAAa;AAAA,IACX;AAAA,MACE,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,SAAS;AAAA,MACT,UAAU;AAAA,MACV,YAAY;AAAA,QACV;AAAA,UACE,YAAY;AAAA,UACZ,cAAc;AAAA,UACd,cAAc;AAAA,UACd,QAAQ;AAAA,YACN,IAAI;AAAA,YACJ,SAAS;AAAA,YACT,UAAU;AAAA,YACV,MAAM;AAAA,cACJ,WAAW;AAAA,cACX,OAAO;AAAA,cACP,WAAW;AAAA,YACb;AAAA,UACF;AAAA,UACA,SAAS;AAAA,UACT,OAAO;AAAA,UACP,aAAa,EAAE,aAAa,GAAG,mBAAmB,KAAM,oBAAoB,GAAG,eAAe,IAAM;AAAA,QACtG;AAAA,QACA;AAAA,UACE,YAAY;AAAA,UACZ,cAAc;AAAA,UACd,cAAc;AAAA,UACd,QAAQ;AAAA,YACN,WAAW;AAAA,YACX,SAAS,EAAE,WAAW,0BAA0B,oBAAoB,0BAA0B;AAAA,UAChG;AAAA,UACA,OAAO;AAAA,QACT;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,SAAS;AAAA,MACT,UAAU;AAAA,MACV,YAAY;AAAA,QACV;AAAA,UACE,YAAY;AAAA,UACZ,cAAc;AAAA,UACd,cAAc;AAAA,UACd,QAAQ;AAAA,YACN,IAAI;AAAA,YACJ,SAAS;AAAA,YACT,UAAU;AAAA,YACV,MAAM;AAAA,cACJ,WAAW;AAAA,cACX,OAAO;AAAA,cACP,UAAU;AAAA,cACV,UAAU;AAAA,cACV,UAAU;AAAA,YACZ;AAAA,UACF;AAAA,UACA,SAAS;AAAA,UACT,OAAO;AAAA,QACT;AAAA,QACA;AAAA,UACE,YAAY;AAAA,UACZ,cAAc;AAAA,UACd,cAAc;AAAA,UACd,QAAQ;AAAA,YACN,WAAW;AAAA,YACX,SAAS;AAAA,cACP,WAAW;AAAA,cACX,UAAU;AAAA,cACV,YAAY;AAAA,cACZ,WAAW;AAAA,YACb;AAAA,UACF;AAAA,UACA,OAAO;AAAA,QACT;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF,CAAC;AAMD,MAAM,eAAe,eAAe;AAAA,EAClC,YAAY;AAAA,EACZ,cAAc;AAAA,EACd,aAAa;AAAA,EACb,UAAU,EAAE,UAAU,cAAc,MAAM,CAAC,YAAY,QAAQ,YAAY,SAAS,GAAG,MAAM,eAAe;AAAA,EAC5G,OAAO;AAAA,IACL;AAAA,MACE,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,eAAe,CAAC;AAAA,QACd,QAAQ;AAAA,QACR,UAAU;AAAA,QACV,mBAAmB;AAAA,UACjB,IAAI;AAAA,UACJ,IAAI;AAAA,QACN;AAAA,MACF,CAAC;AAAA,IACH;AAAA,IACA,EAAE,QAAQ,mBAAmB,UAAU,mBAAmB,UAAU,aAAa,aAAa,sDAAsD,SAAS,QAAQ;AAAA,IACrK;AAAA,MACE,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,gBAAgB;AAAA,QACd,YAAY;AAAA,UACV,MAAM;AAAA,UACN,YAAY;AAAA,YACV,UAAU,EAAE,MAAM,UAAU,OAAO,aAAa,aAAa,6BAA6B;AAAA,YAC1F,OAAO,EAAE,MAAM,UAAU,QAAQ,SAAS,OAAO,iBAAiB,aAAa,+BAA+B;AAAA,YAC9G,OAAO,EAAE,MAAM,UAAU,OAAO,gBAAgB,aAAa,8BAA8B;AAAA,YAC3F,SAAS,EAAE,MAAM,UAAU,OAAO,iBAAiB,WAAW,KAAK,aAAa,gCAAgC;AAAA,UAClH;AAAA,UACA,UAAU,CAAC,YAAY,OAAO;AAAA,QAChC;AAAA,QACA,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,EAAE,QAAQ,sBAAsB,UAAU,oBAAoB,UAAU,aAAa,aAAa,4CAA4C,SAAS,QAAQ;AAAA,IAC/J;AAAA,MACE,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,cAAc,EAAE,YAAY,qBAAqB,SAAS,OAAO;AAAA,IACnE;AAAA,IACA,EAAE,QAAQ,sBAAsB,UAAU,sBAAsB,UAAU,aAAa,aAAa,6CAA6C,SAAS,QAAQ;AAAA,IAClK,EAAE,QAAQ,OAAO,UAAU,YAAY,UAAU,OAAO,aAAa,kCAAkC;AAAA,EACzG;AAAA,EACA,aAAa;AAAA,IACX;AAAA,MACE,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,SAAS;AAAA,MACT,UAAU;AAAA,MACV,YAAY,CAAC;AAAA,QACX,YAAY;AAAA,QACZ,cAAc;AAAA,QACd,cAAc;AAAA,QACd,QAAQ;AAAA,UACN,WAAW;AAAA,UACX,SAAS,EAAE,YAAY,0BAA0B,QAAQ,sBAAsB,UAAU,wBAAwB,WAAW,UAAU;AAAA,QACxI;AAAA,QACA,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AAAA,IACA;AAAA,MACE,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,SAAS;AAAA,MACT,UAAU;AAAA,MACV,eAAe,CAAC,EAAE,QAAQ,oCAAoC,UAAU,KAAK,CAAC;AAAA,IAChF;AAAA,IACA;AAAA,MACE,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,SAAS;AAAA,MACT,UAAU;AAAA,IACZ;AAAA,IACA;AAAA,MACE,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,SAAS;AAAA,MACT,UAAU;AAAA,IACZ;AAAA,IACA;AAAA,MACE,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,SAAS;AAAA,MACT,UAAU;AAAA,IACZ;AAAA,IACA;AAAA,MACE,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,SAAS;AAAA,MACT,UAAU;AAAA,MACV,YAAY;AAAA,QACV;AAAA,UACE,YAAY;AAAA,UACZ,cAAc;AAAA,UACd,cAAc;AAAA,UACd,QAAQ;AAAA,YACN,UAAU;AAAA,YACV,QAAQ;AAAA,YACR,MAAM;AAAA,cACJ,kBAAkB;AAAA,cAClB,cAAc;AAAA,cACd,UAAU;AAAA,cACV,OAAO;AAAA,cACP,aAAa;AAAA,cACb,uBAAuB;AAAA,YACzB;AAAA,YACA,qBAAqB;AAAA,UACvB;AAAA,UACA,SAAS;AAAA,UACT,OAAO;AAAA,UACP,aAAa,EAAE,aAAa,GAAG,mBAAmB,KAAM,oBAAoB,GAAG,eAAe,IAAM;AAAA,QACtG;AAAA,QACA;AAAA,UACE,YAAY;AAAA,UACZ,cAAc;AAAA,UACd,cAAc;AAAA,UACd,QAAQ;AAAA,YACN,IAAI;AAAA,YACJ,SAAS;AAAA,YACT,UAAU;AAAA,YACV,MAAM,EAAE,cAAc,6BAA6B,OAAO,yBAAyB;AAAA,UACrF;AAAA,UACA,SAAS;AAAA,UACT,OAAO;AAAA,UACP,aAAa,EAAE,aAAa,GAAG,mBAAmB,KAAM,oBAAoB,GAAG,eAAe,IAAM;AAAA,QACtG;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF,CAAC;AAMM,MAAM,kBAAkB,4BAA4B;AAAA,EACzD,UAAU;AAAA,EACV,WAAW,CAAC,gBAAgB,YAAY;AAC1C,CAAC;AAED,IAAO,oBAAQ;",
   "names": []
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/core",
-  "version": "0.6.6-develop.6551.1.1511bfa890",
+  "version": "0.6.7-develop.6552.1.5208a19369",
   "license": "MIT",
   "type": "module",
   "main": "./dist/index.js",
@@ -253,16 +253,16 @@
     "zod": "^4.4.3"
   },
   "peerDependencies": {
-    "@open-mercato/ai-assistant": "0.6.6-develop.6551.1.1511bfa890",
-    "@open-mercato/shared": "0.6.6-develop.6551.1.1511bfa890",
-    "@open-mercato/ui": "0.6.6-develop.6551.1.1511bfa890",
+    "@open-mercato/ai-assistant": "0.6.7-develop.6552.1.5208a19369",
+    "@open-mercato/shared": "0.6.7-develop.6552.1.5208a19369",
+    "@open-mercato/ui": "0.6.7-develop.6552.1.5208a19369",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"
   },
   "devDependencies": {
-    "@open-mercato/ai-assistant": "0.6.6-develop.6551.1.1511bfa890",
-    "@open-mercato/shared": "0.6.6-develop.6551.1.1511bfa890",
-    "@open-mercato/ui": "0.6.6-develop.6551.1.1511bfa890",
+    "@open-mercato/ai-assistant": "0.6.7-develop.6552.1.5208a19369",
+    "@open-mercato/shared": "0.6.7-develop.6552.1.5208a19369",
+    "@open-mercato/ui": "0.6.7-develop.6552.1.5208a19369",
     "@testing-library/dom": "^10.4.1",
     "@testing-library/jest-dom": "^6.9.1",
     "@testing-library/react": "^16.3.1",
@@ -286,5 +286,5 @@
     "url": "https://github.com/open-mercato/open-mercato",
     "directory": "packages/core"
   },
-  "stableVersion": "0.6.5"
+  "stableVersion": "0.6.6"
 }

package/src/modules/workflows/frontend/checkout-demo/page.tsx

@@ -389,9 +389,20 @@ export default function CheckoutDemoPage() {
             currencyCode: selectedCurrency || 'USD', // Ensure currency is always set
             kind: 'product' as const,
             productId: item.id,
-            lineDescription: item.name,
+            name: item.name,
             unitPriceGross: item.price,
           })),
+          // Fold the demo's shipping and tax into order-level adjustments so the
+          // created order's grand total matches the cart total shown to the user
+          // (line items alone only cover the product subtotal).
+          orderAdjustments: [
+            ...(shipping > 0
+              ? [{ kind: 'shipping' as const, label: 'Shipping', currencyCode: selectedCurrency || 'USD', amountGross: shipping }]
+              : []),
+            ...(tax > 0
+              ? [{ kind: 'tax' as const, label: 'Tax', currencyCode: selectedCurrency || 'USD', amountGross: tax }]
+              : []),
+          ],
           itemCount: demoCart.reduce((sum, item) => sum + item.quantity, 0),
           subtotal: subtotal,
           tax: tax,

package/src/modules/workflows/lib/activity-executor.ts

@@ -929,8 +929,28 @@ export async function executeCallApi(
   // 3. Import the one-time API key helper
   const { withOnetimeApiKey } = await import('../../api_keys/services/apiKeyService')
 
-  // 4. Get EntityManager from container (for correct type)
-  const apiKeyEm = container.resolve<PostgreSqlEntityManager>('em')
+  // 4. Create the one-time API key on an EntityManager that is fully detached
+  //    from the surrounding request/transaction context.
+  //
+  //    CALL_API runs inside `workflowExecutor.executeWorkflow()`, which wraps
+  //    the whole execution in `em.transactional(...)`. The request EM is forked
+  //    with `useContext: true`, so while that transaction is open, EVERY
+  //    operation on the container's `em` — including this API key's
+  //    persist/flush — is transparently redirected to the uncommitted
+  //    transaction fork (MikroORM `getContext()` → `TransactionContext`). The
+  //    key would therefore stay invisible until the transaction commits, but
+  //    the commit cannot happen until this activity returns. The outbound
+  //    self-authenticated `fetch` below opens a SEPARATE DB connection that
+  //    cannot see the uncommitted row, so the internal API responds `401` and
+  //    the activity fails (issue #4202).
+  //
+  //    Forking with `useContext: false` (matching the query_index/webhooks
+  //    isolated-EM convention) gives the key its own pooled connection with
+  //    autocommit, so it is committed and visible to the internal request
+  //    immediately.
+  const apiKeyEm = container
+    .resolve<PostgreSqlEntityManager>('em')
+    .fork({ clear: true, freshEventManager: true, useContext: false }) as PostgreSqlEntityManager
 
   // 5. Resolve the roles that the one-time API key will inherit.
   //

package/src/modules/workflows/lib/find-definition.ts

@@ -80,9 +80,17 @@ export async function findWorkflowDefinition(
   // so disabled code workflows aren't silently executable.
   if (version === undefined && !codeDef.enabled) return null
 
+  return buildVirtualCodeDefinition(codeDef, tenantId, organizationId)
+}
+
+function buildVirtualCodeDefinition(
+  codeDef: NonNullable<ReturnType<typeof getCodeWorkflow>>,
+  tenantId: string,
+  organizationId: string,
+): WorkflowDefinition {
   // Construct a virtual WorkflowDefinition object (not persisted)
   const virtual = new WorkflowDefinition()
-  virtual.id = codeWorkflowUuid(workflowId)
+  virtual.id = codeWorkflowUuid(codeDef.workflowId)
   virtual.workflowId = codeDef.workflowId
   virtual.workflowName = codeDef.workflowName
   virtual.description = codeDef.description ?? null
@@ -98,3 +106,47 @@ export async function findWorkflowDefinition(
 
   return virtual
 }
+
+/**
+ * Resolve a virtual code definition for an already-started instance whose
+ * `definitionId` does not exist in the database.
+ *
+ * Instances started from a virtual code definition persist the deterministic
+ * `codeWorkflowUuid(workflowId)` as their `definitionId`. Runtime handlers
+ * (step/transition/signal/timer/task) load definitions by that id, so without
+ * this fallback an unpersisted code workflow starts but can never advance.
+ *
+ * The UUID equality gate ensures the fallback never substitutes the code
+ * definition for a hard-deleted persisted row: those rows have their own
+ * random UUIDs that can never match the deterministic code UUID.
+ */
+export function resolveCodeDefinitionForInstance(instance: {
+  definitionId: string
+  workflowId: string
+  tenantId: string
+  organizationId: string
+}): WorkflowDefinition | null {
+  const codeDef = getCodeWorkflow(instance.workflowId)
+  if (!codeDef) return null
+  if (codeWorkflowUuid(instance.workflowId) !== instance.definitionId) return null
+  return buildVirtualCodeDefinition(codeDef, instance.tenantId, instance.organizationId)
+}
+
+/**
+ * Find the definition backing a workflow instance: database row by id first,
+ * falling back to the in-memory code registry for instances started from an
+ * unpersisted code definition.
+ */
+export async function findDefinitionForInstance(
+  em: EntityManager,
+  instance: {
+    definitionId: string
+    workflowId: string
+    tenantId: string
+    organizationId: string
+  },
+): Promise<WorkflowDefinition | null> {
+  const dbDef = await em.findOne(WorkflowDefinition, { id: instance.definitionId })
+  if (dbDef) return dbDef
+  return resolveCodeDefinitionForInstance(instance)
+}

package/src/modules/workflows/lib/signal-handler.ts

@@ -13,6 +13,7 @@ import type * as eventLoggerModule from './event-logger'
 import type * as stepHandlerModule from './step-handler'
 import type * as transitionHandlerModule from './transition-handler'
 import type * as workflowExecutorModule from './workflow-executor'
+import { resolveCodeDefinitionForInstance } from './find-definition'
 import { createLogger } from '@open-mercato/shared/lib/logger'
 
 const logger = createLogger('workflows')
@@ -95,13 +96,13 @@ export async function sendSignal(
   // Branch-scoped signal: a FORKED instance routes the signal to the branch
   // paused at a matching WAIT_FOR_SIGNAL step.
   if (instance.status === 'FORKED') {
-    const branchDefinition = await findOneWithDecryption(
+    const branchDefinition = (await findOneWithDecryption(
       em as PostgreSqlEntityManager,
       WorkflowDefinition,
       { id: instance.definitionId, tenantId: instance.tenantId, organizationId: instance.organizationId, deletedAt: null },
       undefined,
       { tenantId: instance.tenantId, organizationId: instance.organizationId },
-    )
+    )) ?? resolveCodeDefinitionForInstance(instance)
     if (!branchDefinition) {
       throw new SignalError('Workflow definition not found', 'DEFINITION_NOT_FOUND', { definitionId: instance.definitionId })
     }
@@ -173,7 +174,7 @@ export async function sendSignal(
   }
 
   // Load workflow definition with tenant/org scope to check current step
-  const definition = await findOneWithDecryption(
+  const definition = (await findOneWithDecryption(
     em as PostgreSqlEntityManager,
     WorkflowDefinition,
     {
@@ -184,7 +185,7 @@ export async function sendSignal(
     },
     undefined,
     { tenantId: instance.tenantId, organizationId: instance.organizationId },
-  )
+  )) ?? resolveCodeDefinitionForInstance(instance)
   if (!definition) {
     throw new SignalError(
       'Workflow definition not found',

package/src/modules/workflows/lib/step-handler.ts

@@ -13,7 +13,6 @@ import { EntityManager } from '@mikro-orm/core'
 import {
   WorkflowInstance,
   WorkflowBranchInstance,
-  WorkflowDefinition,
   StepInstance,
   UserTask,
   WorkflowEvent,
@@ -22,6 +21,7 @@ import {
 } from '../data/entities'
 import { parseDuration } from './duration'
 import { logWorkflowEvent } from './event-logger'
+import { findDefinitionForInstance } from './find-definition'
 import { createLogger } from '@open-mercato/shared/lib/logger'
 
 const logger = createLogger('workflows')
@@ -76,9 +76,7 @@ export async function enterStep(
   branch?: WorkflowBranchInstance | null
 ): Promise<StepInstance> {
   // Load workflow definition to get step details
-  const definition = await em.findOne(WorkflowDefinition, {
-    id: instance.definitionId,
-  })
+  const definition = await findDefinitionForInstance(em, instance)
 
   if (!definition) {
     throw new StepExecutionError(
@@ -213,9 +211,7 @@ export async function executeStep(
     const stepInstance = await enterStep(em, instance, stepId, context, branch)
 
     // Load workflow definition to get step configuration
-    const definition = await em.findOne(WorkflowDefinition, {
-      id: instance.definitionId,
-    })
+    const definition = await findDefinitionForInstance(em, instance)
 
     if (!definition) {
       throw new StepExecutionError(
@@ -359,7 +355,7 @@ async function executeStepByType(
           { stepType, stepId: stepDef.stepId }
         )
       }
-      const definition = await em.findOne(WorkflowDefinition, { id: instance.definitionId })
+      const definition = await findDefinitionForInstance(em, instance)
       if (!definition) {
         throw new StepExecutionError(
           `Workflow definition not found: ${instance.definitionId}`,

package/src/modules/workflows/lib/task-handler.ts

@@ -17,9 +17,9 @@ import {
   WorkflowInstance,
   WorkflowEvent,
   StepInstance,
-  WorkflowDefinition,
 } from '../data/entities'
 import { executeWorkflow } from './workflow-executor'
+import { findDefinitionForInstance } from './find-definition'
 import * as stepHandler from './step-handler'
 import * as transitionHandler from './transition-handler'
 import { createLogger } from '@open-mercato/shared/lib/logger'
@@ -191,9 +191,7 @@ export async function completeUserTask(
   const currentStepId = instance.currentStepId
 
   // Load workflow definition to find transitions
-  const definition = await em.findOne(WorkflowDefinition, {
-    id: instance.definitionId,
-  })
+  const definition = await findDefinitionForInstance(em, instance)
 
   if (!definition) {
     throw new UserTaskError(

package/src/modules/workflows/lib/timer-handler.ts

@@ -14,6 +14,7 @@ import type * as eventLoggerModule from './event-logger'
 import type * as stepHandlerModule from './step-handler'
 import type * as transitionHandlerModule from './transition-handler'
 import type * as workflowExecutorModule from './workflow-executor'
+import { resolveCodeDefinitionForInstance } from './find-definition'
 
 export interface FireTimerOptions {
   instanceId: string
@@ -110,7 +111,7 @@ export async function fireTimer(
     )
   }
 
-  const definition = await findOneWithDecryption(
+  const definition = (await findOneWithDecryption(
     em as PostgreSqlEntityManager,
     WorkflowDefinition,
     {
@@ -121,7 +122,7 @@ export async function fireTimer(
     },
     undefined,
     { tenantId: instance.tenantId, organizationId: instance.organizationId },
-  )
+  )) ?? resolveCodeDefinitionForInstance(instance)
   if (!definition) {
     throw new TimerError(
       'Workflow definition not found',

package/src/modules/workflows/lib/transition-handler.ts

@@ -15,7 +15,6 @@ import type { AwilixContainer } from 'awilix'
 import type { EventBus } from '@open-mercato/events'
 import {
   WorkflowInstance,
-  WorkflowDefinition,
   WorkflowEvent,
 } from '../data/entities'
 import * as ruleEvaluator from '../../business_rules/lib/rule-evaluator'
@@ -23,6 +22,7 @@ import * as ruleEngine from '../../business_rules/lib/rule-engine'
 import * as activityExecutor from './activity-executor'
 import type { ActivityDefinition } from './activity-executor'
 import * as stepHandler from './step-handler'
+import { findDefinitionForInstance } from './find-definition'
 import {
   type ExecutionToken,
   rootToken,
@@ -116,9 +116,7 @@ export async function evaluateTransition(
 
   try {
     // Load workflow definition
-    const definition = await em.findOne(WorkflowDefinition, {
-      id: instance.definitionId,
-    })
+    const definition = await findDefinitionForInstance(em, instance)
 
     if (!definition) {
       return {
@@ -227,9 +225,7 @@ export async function findValidTransitions(
 ): Promise<TransitionEvaluationResult[]> {
   try {
     // Load workflow definition
-    const definition = await em.findOne(WorkflowDefinition, {
-      id: instance.definitionId,
-    })
+    const definition = await findDefinitionForInstance(em, instance)
 
     if (!definition) {
       return []
@@ -752,9 +748,7 @@ async function evaluatePreConditions(
 ): Promise<ruleEngine.RuleEngineResult> {
   try {
     // Load workflow definition to get workflow ID
-    const definition = await em.findOne(WorkflowDefinition, {
-      id: instance.definitionId,
-    })
+    const definition = await findDefinitionForInstance(em, instance)
 
     if (!definition) {
       return {
@@ -881,9 +875,7 @@ async function evaluatePostConditions(
 ): Promise<ruleEngine.RuleEngineResult> {
   try {
     // Load workflow definition to get workflow ID
-    const definition = await em.findOne(WorkflowDefinition, {
-      id: instance.definitionId,
-    })
+    const definition = await findDefinitionForInstance(em, instance)
 
     if (!definition) {
       return {

package/src/modules/workflows/lib/workflow-executor.ts

@@ -19,7 +19,7 @@ import {
   type WorkflowInstanceStatus,
 } from '../data/entities'
 import { compensateWorkflow } from './compensation-handler'
-import { findWorkflowDefinition } from './find-definition'
+import { findWorkflowDefinition, findDefinitionForInstance } from './find-definition'
 import { createLogger } from '@open-mercato/shared/lib/logger'
 
 const logger = createLogger('workflows')
@@ -278,9 +278,7 @@ export async function executeWorkflow(
         )
       }
 
-      const definition = await trx.findOne(WorkflowDefinition, {
-        id: instance.definitionId,
-      })
+      const definition = await findDefinitionForInstance(trx, instance)
 
       if (!definition) {
         throw new WorkflowExecutionError(
@@ -614,7 +612,7 @@ export async function completeWorkflow(
 
   // Trigger compensation if workflow failed and has compensatable activities (Phase 8.2)
   if (status === 'FAILED') {
-    const definition = await em.findOne(WorkflowDefinition, { id: instance.definitionId })
+    const definition = await findDefinitionForInstance(em, instance)
 
     if (definition && checkIfCompensationNeeded(definition)) {
       try {
@@ -836,9 +834,14 @@ export async function resumeWorkflowAfterActivities(
       fromStepId: instance.currentStepId,
     })
 
-    const definition = await trx.findOneOrFail(WorkflowDefinition, {
-      id: instance.definitionId,
-    })
+    const definition = await findDefinitionForInstance(trx, instance)
+    if (!definition) {
+      throw new WorkflowExecutionError(
+        `Workflow definition not found: ${instance.definitionId}`,
+        'DEFINITION_NOT_FOUND',
+        { definitionId: instance.definitionId }
+      )
+    }
 
     const step = definition.definition.steps.find(s => s.stepId === pendingTransition.toStepId)
 

package/src/modules/workflows/migrations/Migration20260715120000.ts

@@ -0,0 +1,114 @@
+import { Migration } from '@mikro-orm/migrations'
+
+const LEGACY_WORKFLOW_ID = 'workflows.checkout-demo'
+const LEGACY_WORKFLOW_NAME = 'Checkout with Payment Webhook'
+const LEGACY_ACTIVITY_ID = 'reserve_inventory'
+const LEGACY_ACTIVITY_URL = '{{env.INVENTORY_SERVICE_URL}}/api/inventory/reserve'
+const TRANSITIONS_REPLACED_BY_CODE_DEFINITION = [
+  'cart_to_customer_info',
+  'customer_info_to_payment',
+  'confirmation_to_order',
+] as const
+
+/**
+ * SQL fragment (for the UPDATE `where` clause) that matches ONLY the exact
+ * legacy checkout seed: workflow id, name, version, and the presence of the
+ * obsolete `reserve_inventory` `CALL_WEBHOOK` activity with its exact env-based
+ * URL. The match is intentionally strict so the repair never touches a row that
+ * is not the known-broken seed. A tenant whose persisted row diverges from this
+ * fingerprint (renamed, re-versioned, or a different webhook URL) is left
+ * untouched — the trade-off is safety over coverage for an unknown variant.
+ */
+export function legacyCheckoutPredicate(): string {
+  return `
+    "wf"."workflow_id" = '${LEGACY_WORKFLOW_ID}'
+    and "wf"."workflow_name" = '${LEGACY_WORKFLOW_NAME}'
+    and "wf"."version" = 1
+    and exists (
+      select 1
+      from jsonb_array_elements(coalesce("wf"."definition"->'transitions', '[]'::jsonb)) as "transition"("value")
+      cross join lateral jsonb_array_elements(coalesce("transition"."value"->'activities', '[]'::jsonb)) as "activity"("value")
+      where "activity"."value"->>'activityId' = '${LEGACY_ACTIVITY_ID}'
+        and "activity"."value"->>'activityType' = 'CALL_WEBHOOK'
+        and "activity"."value"#>>'{config,url}' = '${LEGACY_ACTIVITY_URL}'
+    )
+  `.trim()
+}
+
+/**
+ * The exact UPDATE the migration runs. Exported so the DB-level regression test
+ * (`__integration__/TC-WF-031`) executes the identical SQL against Postgres,
+ * making the jsonb transformation itself — not just its rendered string —
+ * the thing under test.
+ *
+ * It rebuilds the `transitions` array in original order, dropping the
+ * `activities` key from exactly the three transitions the maintained code
+ * definition made side-effect-free. All other keys (e.g. `preConditions`) and
+ * all other transitions — including `confirmation_to_end`, whose remaining
+ * activities are internal (`CALL_API`/`SEND_EMAIL`/`EMIT_EVENT`) and never trip
+ * the outbound URL guard — are preserved verbatim.
+ */
+export function buildLegacyCheckoutRepairSql(): string {
+  const strippedTransitionList = TRANSITIONS_REPLACED_BY_CODE_DEFINITION
+    .map((id) => `'${id}'`)
+    .join(', ')
+  return `
+    update "workflow_definitions" as "wf"
+    set "definition" = jsonb_set(
+          "wf"."definition",
+          '{transitions}',
+          coalesce(
+            (
+              select jsonb_agg(
+                case
+                  when "transition"."value"->>'transitionId' in (${strippedTransitionList})
+                    then "transition"."value" - 'activities'
+                  else "transition"."value"
+                end
+                order by "transition"."ordinality"
+              )
+              from jsonb_array_elements(
+                coalesce("wf"."definition"->'transitions', '[]'::jsonb)
+              ) with ordinality as "transition"("value", "ordinality")
+            ),
+            '[]'::jsonb
+          )
+        ),
+        "updated_at" = current_timestamp
+    where "wf"."code_workflow_id" is null
+      and "wf"."deleted_at" is null
+      and ${legacyCheckoutPredicate()};
+  `.trim()
+}
+
+/**
+ * Repairs the former seeded checkout demo after it was renamed to the same ID
+ * as the code-defined workflow. The DB-first lookup shadows the current code
+ * definition, including its obsolete external inventory webhook.
+ *
+ * The persisted row must remain active because historical and in-flight
+ * workflow instances reference it by definition_id — a random UUID the
+ * code-registry fallback in find-definition.ts deliberately never substitutes.
+ * The migration removes the activity arrays from the three transitions that
+ * the maintained code definition intentionally made side-effect-free,
+ * preserving the row and all instance references while keeping the demo
+ * self-contained. (Fresh installs never had this row; they execute the virtual
+ * code definition directly via findDefinitionForInstance.)
+ *
+ * `confirmation_to_end` is deliberately NOT rebuilt: unlike the three stripped
+ * transitions it still holds activities in the maintained code definition, and
+ * its legacy-only extra (`emit_order_completed`, an internal `EMIT_EVENT`) is
+ * harmless — it emits no external request, so leaving it costs nothing and
+ * avoids fragile per-activity surgery that could re-introduce a failure.
+ */
+export class Migration20260715120000 extends Migration {
+  override async up(): Promise<void> {
+    this.addSql(buildLegacyCheckoutRepairSql())
+  }
+
+  override async down(): Promise<void> {
+    // Forward-only data repair. The removed demo-only activity payloads cannot
+    // be reconstructed safely, and restoring obsolete external webhooks would
+    // re-open issue #4179.
+  }
+}