@open-mercato/core 0.6.7-develop.6580.1.39ab1d9e62 → 0.6.7-develop.6582.1.04cac61287

package/dist/modules/workflows/lib/code-registry.js

@@ -1,8 +1,15 @@
+import { registerCodeWorkflowEntries } from "@open-mercato/shared/modules/workflows/code-registry";
 import { workflowDefinitionDataSchema } from "../data/validators.js";
 import { createLogger } from "@open-mercato/shared/lib/logger";
 const logger = createLogger("workflows");
-const codeWorkflowRegistry = /* @__PURE__ */ new Map();
+import {
+  getCodeWorkflow,
+  getAllCodeWorkflows,
+  isCodeWorkflow,
+  clearCodeWorkflowRegistry
+} from "@open-mercato/shared/modules/workflows/code-registry";
 function registerCodeWorkflows(workflows) {
+  const valid = [];
   for (const wf of workflows) {
     const validation = workflowDefinitionDataSchema.safeParse(wf.definition);
     if (!validation.success) {
@@ -12,23 +19,9 @@ function registerCodeWorkflows(workflows) {
       });
       continue;
     }
-    if (codeWorkflowRegistry.has(wf.workflowId)) {
-      logger.warn("Duplicate code workflow ID \u2014 overwriting", { workflowId: wf.workflowId, moduleId: wf.moduleId });
-    }
-    codeWorkflowRegistry.set(wf.workflowId, wf);
+    valid.push(wf);
   }
-}
-function getCodeWorkflow(workflowId) {
-  return codeWorkflowRegistry.get(workflowId);
-}
-function getAllCodeWorkflows() {
-  return Array.from(codeWorkflowRegistry.values());
-}
-function isCodeWorkflow(workflowId) {
-  return codeWorkflowRegistry.has(workflowId);
-}
-function clearCodeWorkflowRegistry() {
-  codeWorkflowRegistry.clear();
+  registerCodeWorkflowEntries(valid);
 }
 export {
   clearCodeWorkflowRegistry,

package/dist/modules/workflows/lib/code-registry.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/workflows/lib/code-registry.ts"],
-  "sourcesContent": ["/**\n * In-Memory Code Workflow Registry\n *\n * Stores code-based workflow definitions populated at bootstrap from\n * the generated workflows.generated.ts. Definitions live purely in memory \u2014\n * no DB row is created until a user customizes the definition.\n */\n\nimport type { CodeWorkflowDefinition } from '@open-mercato/shared/modules/workflows'\nimport { workflowDefinitionDataSchema } from '../data/validators'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows')\n\nconst codeWorkflowRegistry = new Map<string, CodeWorkflowDefinition>()\n\n/**\n * Register code-based workflow definitions at bootstrap time.\n * Validates each definition against the Zod schema and warns on failures.\n */\nexport function registerCodeWorkflows(workflows: CodeWorkflowDefinition[]): void {\n  for (const wf of workflows) {\n    const validation = workflowDefinitionDataSchema.safeParse(wf.definition)\n    if (!validation.success) {\n      logger.warn('Code workflow failed validation', {\n        workflowId: wf.workflowId,\n        issues: validation.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`).join('; '),\n      })\n      continue\n    }\n\n    if (codeWorkflowRegistry.has(wf.workflowId)) {\n      logger.warn('Duplicate code workflow ID \u2014 overwriting', { workflowId: wf.workflowId, moduleId: wf.moduleId })\n    }\n\n    codeWorkflowRegistry.set(wf.workflowId, wf)\n  }\n}\n\n/**\n * Get a single code workflow definition by workflowId.\n */\nexport function getCodeWorkflow(workflowId: string): CodeWorkflowDefinition | undefined {\n  return codeWorkflowRegistry.get(workflowId)\n}\n\n/**\n * Get all registered code workflow definitions.\n */\nexport function getAllCodeWorkflows(): CodeWorkflowDefinition[] {\n  return Array.from(codeWorkflowRegistry.values())\n}\n\n/**\n * Check if a workflowId is a code-based definition.\n */\nexport function isCodeWorkflow(workflowId: string): boolean {\n  return codeWorkflowRegistry.has(workflowId)\n}\n\n/**\n * Clear the registry (for testing).\n */\nexport function clearCodeWorkflowRegistry(): void {\n  codeWorkflowRegistry.clear()\n}\n"],
-  "mappings": "AASA,SAAS,oCAAoC;AAC7C,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEvC,MAAM,uBAAuB,oBAAI,IAAoC;AAM9D,SAAS,sBAAsB,WAA2C;AAC/E,aAAW,MAAM,WAAW;AAC1B,UAAM,aAAa,6BAA6B,UAAU,GAAG,UAAU;AACvE,QAAI,CAAC,WAAW,SAAS;AACvB,aAAO,KAAK,mCAAmC;AAAA,QAC7C,YAAY,GAAG;AAAA,QACf,QAAQ,WAAW,MAAM,OAAO,IAAI,CAAC,MAAM,GAAG,EAAE,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,IAAI;AAAA,MAC3F,CAAC;AACD;AAAA,IACF;AAEA,QAAI,qBAAqB,IAAI,GAAG,UAAU,GAAG;AAC3C,aAAO,KAAK,iDAA4C,EAAE,YAAY,GAAG,YAAY,UAAU,GAAG,SAAS,CAAC;AAAA,IAC9G;AAEA,yBAAqB,IAAI,GAAG,YAAY,EAAE;AAAA,EAC5C;AACF;AAKO,SAAS,gBAAgB,YAAwD;AACtF,SAAO,qBAAqB,IAAI,UAAU;AAC5C;AAKO,SAAS,sBAAgD;AAC9D,SAAO,MAAM,KAAK,qBAAqB,OAAO,CAAC;AACjD;AAKO,SAAS,eAAe,YAA6B;AAC1D,SAAO,qBAAqB,IAAI,UAAU;AAC5C;AAKO,SAAS,4BAAkC;AAChD,uBAAqB,MAAM;AAC7B;",
+  "sourcesContent": ["/**\n * Code Workflow Registry (validating bridge)\n *\n * The registry store itself lives in `@open-mercato/shared` so all bootstrap\n * contexts (Next.js app, CLI, `mercato workers`) share one process-wide map \u2014\n * see `@open-mercato/shared/modules/workflows/code-registry`. This module\n * keeps the workflows engine's import path stable and adds Zod validation on\n * top of the raw registration used by the shared bootstrap factory.\n */\n\nimport type { CodeWorkflowDefinition } from '@open-mercato/shared/modules/workflows'\nimport { registerCodeWorkflowEntries } from '@open-mercato/shared/modules/workflows/code-registry'\nimport { workflowDefinitionDataSchema } from '../data/validators'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows')\n\nexport {\n  getCodeWorkflow,\n  getAllCodeWorkflows,\n  isCodeWorkflow,\n  clearCodeWorkflowRegistry,\n} from '@open-mercato/shared/modules/workflows/code-registry'\n\n/**\n * Register code-based workflow definitions at bootstrap time.\n * Validates each definition against the Zod schema and warns on failures.\n */\nexport function registerCodeWorkflows(workflows: CodeWorkflowDefinition[]): void {\n  const valid: CodeWorkflowDefinition[] = []\n  for (const wf of workflows) {\n    const validation = workflowDefinitionDataSchema.safeParse(wf.definition)\n    if (!validation.success) {\n      logger.warn('Code workflow failed validation', {\n        workflowId: wf.workflowId,\n        issues: validation.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`).join('; '),\n      })\n      continue\n    }\n    valid.push(wf)\n  }\n  registerCodeWorkflowEntries(valid)\n}\n"],
+  "mappings": "AAWA,SAAS,mCAAmC;AAC5C,SAAS,oCAAoC;AAC7C,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEvC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAMA,SAAS,sBAAsB,WAA2C;AAC/E,QAAM,QAAkC,CAAC;AACzC,aAAW,MAAM,WAAW;AAC1B,UAAM,aAAa,6BAA6B,UAAU,GAAG,UAAU;AACvE,QAAI,CAAC,WAAW,SAAS;AACvB,aAAO,KAAK,mCAAmC;AAAA,QAC7C,YAAY,GAAG;AAAA,QACf,QAAQ,WAAW,MAAM,OAAO,IAAI,CAAC,MAAM,GAAG,EAAE,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,IAAI;AAAA,MAC3F,CAAC;AACD;AAAA,IACF;AACA,UAAM,KAAK,EAAE;AAAA,EACf;AACA,8BAA4B,KAAK;AACnC;",
   "names": []
 }

package/dist/modules/workflows/lib/event-trigger-service.js

@@ -10,6 +10,12 @@ import { startWorkflow, executeWorkflow } from "./workflow-executor.js";
 import { createLogger } from "@open-mercato/shared/lib/logger";
 const logger = createLogger("workflows").child({ component: "event-trigger" });
 const TRIGGER_CACHE_TTL = 5 * 60 * 1e3;
+function readEventActorUserId(payload) {
+  const candidate = payload.userId ?? payload.actorUserId;
+  if (typeof candidate !== "string") return null;
+  const trimmed = candidate.trim();
+  return trimmed.length > 0 && !trimmed.startsWith("trigger:") ? trimmed : null;
+}
 const MAX_WORKFLOW_REGEX_PATTERN_LENGTH = 200;
 const MAX_WORKFLOW_REGEX_INPUT_LENGTH = 1e4;
 function getNestedValue(obj, path) {
@@ -345,6 +351,7 @@ async function processEventTriggers(em, container, context) {
       const mappedContext = mapEventToContext(trigger.config?.contextMapping, context.payload);
       const payloadId = context.payload?.id;
       const payloadEntityType = context.payload?.entityType;
+      const actorUserId = readEventActorUserId(context.payload);
       const initialContext = {
         // Include raw event payload fields (e.g., id, organizationId, tenantId)
         ...context.payload,
@@ -364,7 +371,7 @@ async function processEventTriggers(em, container, context) {
         version: trigger.workflowVersion,
         initialContext,
         metadata: {
-          initiatedBy: `trigger:${trigger.id}`,
+          initiatedBy: actorUserId ?? `trigger:${trigger.id}`,
           // Include entityId and entityType for widget discovery
           entityId: payloadId,
           entityType: payloadEntityType || trigger.config?.entityType,
@@ -383,7 +390,12 @@ async function processEventTriggers(em, container, context) {
         triggerId: trigger.id,
         instanceId: instance.id
       });
-      executeWorkflow(em.fork(), container, instance.id).catch((err) => {
+      executeWorkflow(
+        em.fork(),
+        container,
+        instance.id,
+        actorUserId ? { userId: actorUserId } : void 0
+      ).catch((err) => {
         logger.error("Error executing workflow", { instanceId: instance.id, err });
       });
     } catch (error) {

package/dist/modules/workflows/lib/event-trigger-service.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/workflows/lib/event-trigger-service.ts"],
-  "sourcesContent": ["/**\n * Workflows Module - Event Trigger Service\n *\n * Core service for evaluating and processing workflow event triggers.\n * Handles pattern matching, filter evaluation, context mapping, and workflow starting.\n */\n\nimport type { EntityManager } from '@mikro-orm/core'\nimport type { EntityManager as PostgreSqlEntityManager } from '@mikro-orm/postgresql'\nimport type { AwilixContainer } from 'awilix'\nimport type { CacheService } from '@open-mercato/cache'\nimport { matchEventPattern } from '@open-mercato/shared/lib/events/patterns'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { testLinearRegex } from '@open-mercato/shared/lib/regex/linear'\nimport {\n  WorkflowEventTrigger,\n  WorkflowDefinition,\n  WorkflowInstance,\n  type TriggerFilterCondition,\n  type TriggerContextMapping,\n  type WorkflowEventTriggerConfig,\n  type WorkflowDefinitionTrigger,\n} from '../data/entities'\nimport { startWorkflow, executeWorkflow } from './workflow-executor'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows').child({ component: 'event-trigger' })\n\n// ============================================================================\n// Types\n// ============================================================================\n\nexport interface EventTriggerContext {\n  eventName: string\n  payload: Record<string, unknown>\n  tenantId: string\n  organizationId: string\n}\n\nexport interface ProcessTriggersResult {\n  triggered: number\n  skipped: number\n  errors: Array<{ triggerId: string; error: string }>\n  instances: Array<{ triggerId: string; instanceId: string }>\n}\n\n/**\n * Unified trigger interface for both legacy (entity) and embedded (definition) triggers\n */\nexport interface UnifiedTrigger {\n  id: string  // For legacy: entity ID, for embedded: `${definitionId}:${triggerId}`\n  triggerId: string\n  name: string\n  description?: string | null\n  eventPattern: string\n  config: WorkflowEventTriggerConfig | null\n  enabled: boolean\n  priority: number\n  workflowDefinitionId: string\n  workflowId: string\n  workflowVersion: number\n  source: 'legacy' | 'embedded'\n  tenantId: string\n  organizationId: string\n}\n\ninterface CachedTriggers {\n  triggers: UnifiedTrigger[]\n  cachedAt: number\n}\n\n// Cache TTL: 5 minutes\nconst TRIGGER_CACHE_TTL = 5 * 60 * 1000\n\n// ============================================================================\n// Pattern Matching\n// ============================================================================\n\n// ============================================================================\n// Filter Evaluation\n// ============================================================================\n\nconst MAX_WORKFLOW_REGEX_PATTERN_LENGTH = 200\nconst MAX_WORKFLOW_REGEX_INPUT_LENGTH = 10_000\n\n/**\n * Get a nested value from an object using dot notation.\n */\nfunction getNestedValue(obj: unknown, path: string): unknown {\n  if (obj === null || obj === undefined) return undefined\n\n  const parts = path.split('.')\n  let current: unknown = obj\n\n  for (const part of parts) {\n    if (current === null || current === undefined) return undefined\n    if (typeof current !== 'object') return undefined\n    current = (current as Record<string, unknown>)[part]\n  }\n\n  return current\n}\n\nfunction getQuantifierEnd(pattern: string, index: number): number | null {\n  const char = pattern[index]\n  if (char === '*' || char === '+' || char === '?') return index\n  if (char !== '{') return null\n\n  const closeIndex = pattern.indexOf('}', index + 1)\n  if (closeIndex === -1) return null\n\n  const body = pattern.slice(index + 1, closeIndex)\n  return /^[0-9]+(?:,[0-9]*)?$/.test(body) ? closeIndex : null\n}\n\ninterface RegexGroupFrame {\n  hasAlternation: boolean\n  hasQuantifier: boolean\n}\n\nfunction isSafeWorkflowRegexPattern(pattern: string): boolean {\n  if (pattern.length > MAX_WORKFLOW_REGEX_PATTERN_LENGTH) return false\n\n  const groupStack: RegexGroupFrame[] = [{ hasAlternation: false, hasQuantifier: false }]\n  let inCharClass = false\n  let lastClosedGroup: RegexGroupFrame | null = null\n  let lastAtomWasQuantified = false\n\n  // Hand-written single-pass lexer: `index` is intentionally advanced inside the\n  // loop body (escape pairs, `(?:` prefixes, multi-char quantifiers, lazy `?`) on\n  // top of the `index += 1` update clause. Do not \"simplify\" these in-body writes.\n  for (let index = 0; index < pattern.length; index += 1) {\n    const char = pattern[index]\n\n    if (char === '\\\\') {\n      const next = pattern[index + 1]\n      if (!inCharClass && (/[1-9]/.test(next ?? '') || (next === 'k' && pattern[index + 2] === '<'))) {\n        return false\n      }\n      index += 1\n      lastClosedGroup = null\n      lastAtomWasQuantified = false\n      continue\n    }\n\n    if (inCharClass) {\n      if (char === ']') {\n        inCharClass = false\n        lastAtomWasQuantified = false\n      }\n      lastClosedGroup = null\n      continue\n    }\n\n    if (char === '[') {\n      inCharClass = true\n      lastClosedGroup = null\n      lastAtomWasQuantified = false\n      continue\n    }\n\n    if (char === '(') {\n      if (pattern[index + 1] === '?') {\n        if (pattern[index + 2] !== ':') return false\n        index += 2\n      }\n\n      groupStack.push({ hasAlternation: false, hasQuantifier: false })\n      lastClosedGroup = null\n      lastAtomWasQuantified = false\n      continue\n    }\n\n    if (char === ')') {\n      if (groupStack.length === 1) return false\n      lastClosedGroup = groupStack.pop()!\n      lastAtomWasQuantified = false\n      continue\n    }\n\n    if (char === '|') {\n      groupStack[groupStack.length - 1].hasAlternation = true\n      lastClosedGroup = null\n      lastAtomWasQuantified = false\n      continue\n    }\n\n    const quantifierEnd = getQuantifierEnd(pattern, index)\n    if (quantifierEnd !== null) {\n      if (lastAtomWasQuantified) return false\n      if (lastClosedGroup?.hasAlternation || lastClosedGroup?.hasQuantifier) return false\n\n      groupStack[groupStack.length - 1].hasQuantifier = true\n      lastClosedGroup = null\n      lastAtomWasQuantified = true\n      index = quantifierEnd\n\n      if (pattern[index + 1] === '?') {\n        index += 1\n      }\n\n      continue\n    }\n\n    lastClosedGroup = null\n    lastAtomWasQuantified = false\n  }\n\n  return groupStack.length === 1 && !inCharClass\n}\n\n/**\n * Evaluate a single filter condition against the event payload.\n */\nfunction evaluateCondition(condition: TriggerFilterCondition, payload: Record<string, unknown>): boolean {\n  const value = getNestedValue(payload, condition.field)\n  const expected = condition.value\n\n  switch (condition.operator) {\n    case 'eq':\n      return value === expected\n\n    case 'neq':\n      return value !== expected\n\n    case 'gt':\n      return typeof value === 'number' && typeof expected === 'number' && value > expected\n\n    case 'gte':\n      return typeof value === 'number' && typeof expected === 'number' && value >= expected\n\n    case 'lt':\n      return typeof value === 'number' && typeof expected === 'number' && value < expected\n\n    case 'lte':\n      return typeof value === 'number' && typeof expected === 'number' && value <= expected\n\n    case 'contains':\n      if (typeof value === 'string' && typeof expected === 'string') {\n        return value.includes(expected)\n      }\n      if (Array.isArray(value)) {\n        return value.includes(expected)\n      }\n      return false\n\n    case 'startsWith':\n      return typeof value === 'string' && typeof expected === 'string' && value.startsWith(expected)\n\n    case 'endsWith':\n      return typeof value === 'string' && typeof expected === 'string' && value.endsWith(expected)\n\n    case 'in':\n      return Array.isArray(expected) && expected.includes(value)\n\n    case 'notIn':\n      return Array.isArray(expected) && !expected.includes(value)\n\n    case 'exists':\n      return value !== undefined && value !== null\n\n    case 'notExists':\n      return value === undefined || value === null\n\n    case 'regex':\n      if (typeof value !== 'string' || typeof expected !== 'string') return false\n      if (value.length > MAX_WORKFLOW_REGEX_INPUT_LENGTH) return false\n      if (!isSafeWorkflowRegexPattern(expected)) return false\n      {\n        const result = testLinearRegex(expected, value, {\n          maxPatternLength: MAX_WORKFLOW_REGEX_PATTERN_LENGTH,\n          maxInputLength: MAX_WORKFLOW_REGEX_INPUT_LENGTH,\n        })\n        return result.ok ? result.matched : false\n      }\n\n    default:\n      return false\n  }\n}\n\n/**\n * Evaluate all filter conditions against the event payload.\n * All conditions must pass (AND logic).\n */\nexport function evaluateFilterConditions(\n  conditions: TriggerFilterCondition[] | undefined,\n  payload: Record<string, unknown>\n): boolean {\n  if (!conditions || conditions.length === 0) return true\n\n  return conditions.every(condition => evaluateCondition(condition, payload))\n}\n\n// ============================================================================\n// Context Mapping\n// ============================================================================\n\n/**\n * Map event payload to workflow initial context.\n */\nexport function mapEventToContext(\n  mapping: TriggerContextMapping[] | undefined,\n  payload: Record<string, unknown>\n): Record<string, unknown> {\n  const context: Record<string, unknown> = {}\n\n  if (!mapping || mapping.length === 0) return context\n\n  for (const item of mapping) {\n    const value = getNestedValue(payload, item.sourceExpression)\n    context[item.targetKey] = value !== undefined ? value : item.defaultValue\n  }\n\n  return context\n}\n\n// ============================================================================\n// Trigger Loading with Caching\n// ============================================================================\n\n// In-memory cache for triggers (per tenant/org).\n// Park the Map on globalThis so the same compiled module loaded under two\n// paths (a Next.js server chunk vs. a worker resolving the file through a\n// different import root) shares one cache. Without this,\n// `invalidateTriggerCache(...)` called from the PUT /api/workflows/definitions\n// route clears its own copy while the wildcard event-trigger subscriber keeps\n// reading a stale copy populated before the trigger was added \u2014 newly added\n// triggers stay invisible for up to TRIGGER_CACHE_TTL. Mirrors the same\n// workaround used by the modules registry and `getDiRegistrars()`.\nconst GLOBAL_TRIGGER_CACHE_KEY = '__openMercatoWorkflowTriggerCache__'\n\nfunction getTriggerCache(): Map<string, CachedTriggers> {\n  const existing = (globalThis as any)[GLOBAL_TRIGGER_CACHE_KEY] as\n    | Map<string, CachedTriggers>\n    | undefined\n  if (existing) return existing\n  const created = new Map<string, CachedTriggers>()\n  ;(globalThis as any)[GLOBAL_TRIGGER_CACHE_KEY] = created\n  return created\n}\n\nfunction getCacheKey(tenantId: string, organizationId: string): string {\n  return `${tenantId}:${organizationId}`\n}\n\n/**\n * Load legacy triggers from WorkflowEventTrigger entity table.\n * For backward compatibility with existing triggers.\n */\nasync function loadLegacyTriggers(\n  em: EntityManager,\n  tenantId: string,\n  organizationId: string\n): Promise<UnifiedTrigger[]> {\n  const postgresEm = em as unknown as PostgreSqlEntityManager\n  const legacyTriggers = await findWithDecryption(\n    postgresEm,\n    WorkflowEventTrigger,\n    {\n      tenantId,\n      organizationId,\n      enabled: true,\n      deletedAt: null,\n    },\n    {\n      orderBy: { priority: 'DESC', createdAt: 'ASC' },\n    },\n    { tenantId, organizationId },\n  )\n\n  // Get definitions for these triggers to get workflowId\n  const definitionIds = [...new Set(legacyTriggers.map(t => t.workflowDefinitionId))]\n  const definitions = definitionIds.length > 0 ? await findWithDecryption(postgresEm, WorkflowDefinition, {\n    id: { $in: definitionIds },\n    tenantId,\n    organizationId,\n    enabled: true,\n    deletedAt: null,\n  }, {}, { tenantId, organizationId }) : []\n  const definitionMap = new Map(definitions.map(d => [d.id, d]))\n\n  return legacyTriggers\n    .filter(t => definitionMap.has(t.workflowDefinitionId))\n    .map(t => {\n      const def = definitionMap.get(t.workflowDefinitionId)!\n      return {\n        id: t.id,\n        triggerId: t.id,\n        name: t.name,\n        description: t.description,\n        eventPattern: t.eventPattern,\n        config: t.config ?? null,\n        enabled: t.enabled,\n        priority: t.priority,\n        workflowDefinitionId: t.workflowDefinitionId,\n        workflowId: def.workflowId,\n        workflowVersion: def.version,\n        source: 'legacy' as const,\n        tenantId: t.tenantId,\n        organizationId: t.organizationId,\n      }\n    })\n}\n\n/**\n * Load embedded triggers from workflow definitions.\n * New triggers are embedded directly in the definition JSONB.\n */\nasync function loadEmbeddedTriggers(\n  em: EntityManager,\n  tenantId: string,\n  organizationId: string\n): Promise<UnifiedTrigger[]> {\n  const postgresEm = em as unknown as PostgreSqlEntityManager\n  // Load all enabled definitions that may have triggers\n  const definitions = await findWithDecryption(\n    postgresEm,\n    WorkflowDefinition,\n    {\n      tenantId,\n      organizationId,\n      enabled: true,\n      deletedAt: null,\n    },\n    {},\n    { tenantId, organizationId },\n  )\n\n  const triggers: UnifiedTrigger[] = []\n\n  for (const def of definitions) {\n    const embeddedTriggers = def.definition?.triggers as WorkflowDefinitionTrigger[] | undefined\n    if (!embeddedTriggers || embeddedTriggers.length === 0) continue\n\n    for (const trigger of embeddedTriggers) {\n      if (!trigger.enabled) continue\n\n      triggers.push({\n        id: `${def.id}:${trigger.triggerId}`,\n        triggerId: trigger.triggerId,\n        name: trigger.name,\n        description: trigger.description ?? null,\n        eventPattern: trigger.eventPattern,\n        config: trigger.config ?? null,\n        enabled: trigger.enabled,\n        priority: trigger.priority,\n        workflowDefinitionId: def.id,\n        workflowId: def.workflowId,\n        workflowVersion: def.version,\n        source: 'embedded' as const,\n        tenantId,\n        organizationId,\n      })\n    }\n  }\n\n  return triggers\n}\n\n/**\n * Load all enabled triggers for a tenant/organization with caching.\n * Merges both legacy (entity) triggers and embedded (definition) triggers.\n */\nexport async function loadTriggersForTenant(\n  em: EntityManager,\n  tenantId: string,\n  organizationId: string,\n  cacheService?: CacheService\n): Promise<UnifiedTrigger[]> {\n  const cacheKey = getCacheKey(tenantId, organizationId)\n  const cache = getTriggerCache()\n\n  // Check in-memory cache\n  const cached = cache.get(cacheKey)\n  if (cached && Date.now() - cached.cachedAt < TRIGGER_CACHE_TTL) {\n    return cached.triggers\n  }\n\n  // Load from both sources\n  const [legacyTriggers, embeddedTriggers] = await Promise.all([\n    loadLegacyTriggers(em, tenantId, organizationId),\n    loadEmbeddedTriggers(em, tenantId, organizationId),\n  ])\n\n  // Merge and sort by priority (higher first)\n  const allTriggers = [...legacyTriggers, ...embeddedTriggers]\n    .sort((a, b) => b.priority - a.priority)\n\n  // Update cache\n  cache.set(cacheKey, {\n    triggers: allTriggers,\n    cachedAt: Date.now(),\n  })\n\n  return allTriggers\n}\n\n/**\n * Invalidate trigger cache for a tenant/organization.\n * Call this when:\n * - Legacy triggers are created/updated/deleted\n * - Workflow definitions with embedded triggers are created/updated/deleted\n */\nexport function invalidateTriggerCache(tenantId: string, organizationId?: string): void {\n  const cache = getTriggerCache()\n  if (organizationId) {\n    // Invalidate specific org\n    const cacheKey = getCacheKey(tenantId, organizationId)\n    cache.delete(cacheKey)\n  } else {\n    // Invalidate all orgs for tenant\n    for (const key of cache.keys()) {\n      if (key.startsWith(`${tenantId}:`)) {\n        cache.delete(key)\n      }\n    }\n  }\n}\n\n// ============================================================================\n// Trigger Matching\n// ============================================================================\n\n/**\n * Find all triggers that match an event.\n */\nexport async function findMatchingTriggers(\n  em: EntityManager,\n  context: EventTriggerContext\n): Promise<UnifiedTrigger[]> {\n  const triggers = await loadTriggersForTenant(\n    em,\n    context.tenantId,\n    context.organizationId\n  )\n\n  return triggers.filter(trigger => {\n    // Check event pattern\n    if (!matchEventPattern(context.eventName, trigger.eventPattern)) {\n      return false\n    }\n\n    // Check filter conditions\n    if (!evaluateFilterConditions(trigger.config?.filterConditions, context.payload)) {\n      return false\n    }\n\n    return true\n  })\n}\n\n// ============================================================================\n// Trigger Processing\n// ============================================================================\n\n/**\n * Check if max concurrent instances limit is reached.\n */\nasync function checkConcurrencyLimit(\n  em: EntityManager,\n  trigger: UnifiedTrigger\n): Promise<boolean> {\n  const maxInstances = trigger.config?.maxConcurrentInstances\n\n  if (!maxInstances) return true // No limit\n\n  // Count running instances for this trigger's workflow definition\n  const runningCount = await em.count(WorkflowInstance, {\n    definitionId: trigger.workflowDefinitionId,\n    status: { $in: ['RUNNING', 'WAITING_FOR_ACTIVITIES'] },\n    tenantId: trigger.tenantId,\n    organizationId: trigger.organizationId,\n    deletedAt: null,\n  })\n\n  return runningCount < maxInstances\n}\n\n/**\n * Process all matching triggers for an event and start workflows.\n */\nexport async function processEventTriggers(\n  em: EntityManager,\n  container: AwilixContainer,\n  context: EventTriggerContext\n): Promise<ProcessTriggersResult> {\n  const result: ProcessTriggersResult = {\n    triggered: 0,\n    skipped: 0,\n    errors: [],\n    instances: [],\n  }\n\n  // Find matching triggers\n  const triggers = await findMatchingTriggers(em, context)\n\n  if (triggers.length === 0) {\n    return result\n  }\n\n  // Process each trigger (definitions already validated during loading)\n  for (const trigger of triggers) {\n    try {\n      // Check concurrency limit\n      const canStart = await checkConcurrencyLimit(em, trigger)\n      if (!canStart) {\n        logger.debug('Skipping trigger: max concurrent instances reached', { triggerId: trigger.id, triggerName: trigger.name })\n        result.skipped++\n        continue\n      }\n\n      // Map event payload to workflow context\n      const mappedContext = mapEventToContext(trigger.config?.contextMapping, context.payload)\n\n      // Extract entity info from payload for metadata\n      const payloadId = context.payload?.id as string | undefined\n      const payloadEntityType = context.payload?.entityType as string | undefined\n\n      // Include event metadata and payload in context\n      const initialContext = {\n        // Include raw event payload fields (e.g., id, organizationId, tenantId)\n        ...context.payload,\n        // Override with explicit mappings if provided\n        ...mappedContext,\n        __trigger: {\n          triggerId: trigger.id,\n          triggerName: trigger.name,\n          eventName: context.eventName,\n          eventPayload: context.payload,\n          triggeredAt: new Date().toISOString(),\n          source: trigger.source,\n        },\n      }\n\n      // Start workflow\n      const instance = await startWorkflow(em, {\n        workflowId: trigger.workflowId,\n        version: trigger.workflowVersion,\n        initialContext,\n        metadata: {\n          initiatedBy: `trigger:${trigger.id}`,\n          // Include entityId and entityType for widget discovery\n          entityId: payloadId,\n          entityType: payloadEntityType || trigger.config?.entityType,\n          labels: {\n            trigger_id: trigger.id,\n            trigger_name: trigger.name,\n            event_name: context.eventName,\n            trigger_source: trigger.source,\n          },\n        },\n        tenantId: context.tenantId,\n        organizationId: context.organizationId,\n      })\n\n      result.triggered++\n      result.instances.push({\n        triggerId: trigger.id,\n        instanceId: instance.id,\n      })\n\n      // Execute workflow asynchronously (don't wait)\n      executeWorkflow(em.fork(), container, instance.id).catch(err => {\n        logger.error('Error executing workflow', { instanceId: instance.id, err })\n      })\n\n    } catch (error) {\n      const errorMessage = error instanceof Error ? error.message : String(error)\n      logger.error('Error processing trigger', { triggerId: trigger.id, triggerName: trigger.name, err: error })\n      result.errors.push({\n        triggerId: trigger.id,\n        error: errorMessage,\n      })\n    }\n  }\n\n  return result\n}\n"],
-  "mappings": "AAWA,SAAS,yBAAyB;AAClC,SAAS,0BAA0B;AACnC,SAAS,uBAAuB;AAChC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAKK;AACP,SAAS,eAAe,uBAAuB;AAC/C,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,gBAAgB,CAAC;AA8C7E,MAAM,oBAAoB,IAAI,KAAK;AAUnC,MAAM,oCAAoC;AAC1C,MAAM,kCAAkC;AAKxC,SAAS,eAAe,KAAc,MAAuB;AAC3D,MAAI,QAAQ,QAAQ,QAAQ,OAAW,QAAO;AAE9C,QAAM,QAAQ,KAAK,MAAM,GAAG;AAC5B,MAAI,UAAmB;AAEvB,aAAW,QAAQ,OAAO;AACxB,QAAI,YAAY,QAAQ,YAAY,OAAW,QAAO;AACtD,QAAI,OAAO,YAAY,SAAU,QAAO;AACxC,cAAW,QAAoC,IAAI;AAAA,EACrD;AAEA,SAAO;AACT;AAEA,SAAS,iBAAiB,SAAiB,OAA8B;AACvE,QAAM,OAAO,QAAQ,KAAK;AAC1B,MAAI,SAAS,OAAO,SAAS,OAAO,SAAS,IAAK,QAAO;AACzD,MAAI,SAAS,IAAK,QAAO;AAEzB,QAAM,aAAa,QAAQ,QAAQ,KAAK,QAAQ,CAAC;AACjD,MAAI,eAAe,GAAI,QAAO;AAE9B,QAAM,OAAO,QAAQ,MAAM,QAAQ,GAAG,UAAU;AAChD,SAAO,uBAAuB,KAAK,IAAI,IAAI,aAAa;AAC1D;AAOA,SAAS,2BAA2B,SAA0B;AAC5D,MAAI,QAAQ,SAAS,kCAAmC,QAAO;AAE/D,QAAM,aAAgC,CAAC,EAAE,gBAAgB,OAAO,eAAe,MAAM,CAAC;AACtF,MAAI,cAAc;AAClB,MAAI,kBAA0C;AAC9C,MAAI,wBAAwB;AAK5B,WAAS,QAAQ,GAAG,QAAQ,QAAQ,QAAQ,SAAS,GAAG;AACtD,UAAM,OAAO,QAAQ,KAAK;AAE1B,QAAI,SAAS,MAAM;AACjB,YAAM,OAAO,QAAQ,QAAQ,CAAC;AAC9B,UAAI,CAAC,gBAAgB,QAAQ,KAAK,QAAQ,EAAE,KAAM,SAAS,OAAO,QAAQ,QAAQ,CAAC,MAAM,MAAO;AAC9F,eAAO;AAAA,MACT;AACA,eAAS;AACT,wBAAkB;AAClB,8BAAwB;AACxB;AAAA,IACF;AAEA,QAAI,aAAa;AACf,UAAI,SAAS,KAAK;AAChB,sBAAc;AACd,gCAAwB;AAAA,MAC1B;AACA,wBAAkB;AAClB;AAAA,IACF;AAEA,QAAI,SAAS,KAAK;AAChB,oBAAc;AACd,wBAAkB;AAClB,8BAAwB;AACxB;AAAA,IACF;AAEA,QAAI,SAAS,KAAK;AAChB,UAAI,QAAQ,QAAQ,CAAC,MAAM,KAAK;AAC9B,YAAI,QAAQ,QAAQ,CAAC,MAAM,IAAK,QAAO;AACvC,iBAAS;AAAA,MACX;AAEA,iBAAW,KAAK,EAAE,gBAAgB,OAAO,eAAe,MAAM,CAAC;AAC/D,wBAAkB;AAClB,8BAAwB;AACxB;AAAA,IACF;AAEA,QAAI,SAAS,KAAK;AAChB,UAAI,WAAW,WAAW,EAAG,QAAO;AACpC,wBAAkB,WAAW,IAAI;AACjC,8BAAwB;AACxB;AAAA,IACF;AAEA,QAAI,SAAS,KAAK;AAChB,iBAAW,WAAW,SAAS,CAAC,EAAE,iBAAiB;AACnD,wBAAkB;AAClB,8BAAwB;AACxB;AAAA,IACF;AAEA,UAAM,gBAAgB,iBAAiB,SAAS,KAAK;AACrD,QAAI,kBAAkB,MAAM;AAC1B,UAAI,sBAAuB,QAAO;AAClC,UAAI,iBAAiB,kBAAkB,iBAAiB,cAAe,QAAO;AAE9E,iBAAW,WAAW,SAAS,CAAC,EAAE,gBAAgB;AAClD,wBAAkB;AAClB,8BAAwB;AACxB,cAAQ;AAER,UAAI,QAAQ,QAAQ,CAAC,MAAM,KAAK;AAC9B,iBAAS;AAAA,MACX;AAEA;AAAA,IACF;AAEA,sBAAkB;AAClB,4BAAwB;AAAA,EAC1B;AAEA,SAAO,WAAW,WAAW,KAAK,CAAC;AACrC;AAKA,SAAS,kBAAkB,WAAmC,SAA2C;AACvG,QAAM,QAAQ,eAAe,SAAS,UAAU,KAAK;AACrD,QAAM,WAAW,UAAU;AAE3B,UAAQ,UAAU,UAAU;AAAA,IAC1B,KAAK;AACH,aAAO,UAAU;AAAA,IAEnB,KAAK;AACH,aAAO,UAAU;AAAA,IAEnB,KAAK;AACH,aAAO,OAAO,UAAU,YAAY,OAAO,aAAa,YAAY,QAAQ;AAAA,IAE9E,KAAK;AACH,aAAO,OAAO,UAAU,YAAY,OAAO,aAAa,YAAY,SAAS;AAAA,IAE/E,KAAK;AACH,aAAO,OAAO,UAAU,YAAY,OAAO,aAAa,YAAY,QAAQ;AAAA,IAE9E,KAAK;AACH,aAAO,OAAO,UAAU,YAAY,OAAO,aAAa,YAAY,SAAS;AAAA,IAE/E,KAAK;AACH,UAAI,OAAO,UAAU,YAAY,OAAO,aAAa,UAAU;AAC7D,eAAO,MAAM,SAAS,QAAQ;AAAA,MAChC;AACA,UAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,eAAO,MAAM,SAAS,QAAQ;AAAA,MAChC;AACA,aAAO;AAAA,IAET,KAAK;AACH,aAAO,OAAO,UAAU,YAAY,OAAO,aAAa,YAAY,MAAM,WAAW,QAAQ;AAAA,IAE/F,KAAK;AACH,aAAO,OAAO,UAAU,YAAY,OAAO,aAAa,YAAY,MAAM,SAAS,QAAQ;AAAA,IAE7F,KAAK;AACH,aAAO,MAAM,QAAQ,QAAQ,KAAK,SAAS,SAAS,KAAK;AAAA,IAE3D,KAAK;AACH,aAAO,MAAM,QAAQ,QAAQ,KAAK,CAAC,SAAS,SAAS,KAAK;AAAA,IAE5D,KAAK;AACH,aAAO,UAAU,UAAa,UAAU;AAAA,IAE1C,KAAK;AACH,aAAO,UAAU,UAAa,UAAU;AAAA,IAE1C,KAAK;AACH,UAAI,OAAO,UAAU,YAAY,OAAO,aAAa,SAAU,QAAO;AACtE,UAAI,MAAM,SAAS,gCAAiC,QAAO;AAC3D,UAAI,CAAC,2BAA2B,QAAQ,EAAG,QAAO;AAClD;AACE,cAAM,SAAS,gBAAgB,UAAU,OAAO;AAAA,UAC9C,kBAAkB;AAAA,UAClB,gBAAgB;AAAA,QAClB,CAAC;AACD,eAAO,OAAO,KAAK,OAAO,UAAU;AAAA,MACtC;AAAA,IAEF;AACE,aAAO;AAAA,EACX;AACF;AAMO,SAAS,yBACd,YACA,SACS;AACT,MAAI,CAAC,cAAc,WAAW,WAAW,EAAG,QAAO;AAEnD,SAAO,WAAW,MAAM,eAAa,kBAAkB,WAAW,OAAO,CAAC;AAC5E;AASO,SAAS,kBACd,SACA,SACyB;AACzB,QAAM,UAAmC,CAAC;AAE1C,MAAI,CAAC,WAAW,QAAQ,WAAW,EAAG,QAAO;AAE7C,aAAW,QAAQ,SAAS;AAC1B,UAAM,QAAQ,eAAe,SAAS,KAAK,gBAAgB;AAC3D,YAAQ,KAAK,SAAS,IAAI,UAAU,SAAY,QAAQ,KAAK;AAAA,EAC/D;AAEA,SAAO;AACT;AAeA,MAAM,2BAA2B;AAEjC,SAAS,kBAA+C;AACtD,QAAM,WAAY,WAAmB,wBAAwB;AAG7D,MAAI,SAAU,QAAO;AACrB,QAAM,UAAU,oBAAI,IAA4B;AAC/C,EAAC,WAAmB,wBAAwB,IAAI;AACjD,SAAO;AACT;AAEA,SAAS,YAAY,UAAkB,gBAAgC;AACrE,SAAO,GAAG,QAAQ,IAAI,cAAc;AACtC;AAMA,eAAe,mBACb,IACA,UACA,gBAC2B;AAC3B,QAAM,aAAa;AACnB,QAAM,iBAAiB,MAAM;AAAA,IAC3B;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT,WAAW;AAAA,IACb;AAAA,IACA;AAAA,MACE,SAAS,EAAE,UAAU,QAAQ,WAAW,MAAM;AAAA,IAChD;AAAA,IACA,EAAE,UAAU,eAAe;AAAA,EAC7B;AAGA,QAAM,gBAAgB,CAAC,GAAG,IAAI,IAAI,eAAe,IAAI,OAAK,EAAE,oBAAoB,CAAC,CAAC;AAClF,QAAM,cAAc,cAAc,SAAS,IAAI,MAAM,mBAAmB,YAAY,oBAAoB;AAAA,IACtG,IAAI,EAAE,KAAK,cAAc;AAAA,IACzB;AAAA,IACA;AAAA,IACA,SAAS;AAAA,IACT,WAAW;AAAA,EACb,GAAG,CAAC,GAAG,EAAE,UAAU,eAAe,CAAC,IAAI,CAAC;AACxC,QAAM,gBAAgB,IAAI,IAAI,YAAY,IAAI,OAAK,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AAE7D,SAAO,eACJ,OAAO,OAAK,cAAc,IAAI,EAAE,oBAAoB,CAAC,EACrD,IAAI,OAAK;AACR,UAAM,MAAM,cAAc,IAAI,EAAE,oBAAoB;AACpD,WAAO;AAAA,MACL,IAAI,EAAE;AAAA,MACN,WAAW,EAAE;AAAA,MACb,MAAM,EAAE;AAAA,MACR,aAAa,EAAE;AAAA,MACf,cAAc,EAAE;AAAA,MAChB,QAAQ,EAAE,UAAU;AAAA,MACpB,SAAS,EAAE;AAAA,MACX,UAAU,EAAE;AAAA,MACZ,sBAAsB,EAAE;AAAA,MACxB,YAAY,IAAI;AAAA,MAChB,iBAAiB,IAAI;AAAA,MACrB,QAAQ;AAAA,MACR,UAAU,EAAE;AAAA,MACZ,gBAAgB,EAAE;AAAA,IACpB;AAAA,EACF,CAAC;AACL;AAMA,eAAe,qBACb,IACA,UACA,gBAC2B;AAC3B,QAAM,aAAa;AAEnB,QAAM,cAAc,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT,WAAW;AAAA,IACb;AAAA,IACA,CAAC;AAAA,IACD,EAAE,UAAU,eAAe;AAAA,EAC7B;AAEA,QAAM,WAA6B,CAAC;AAEpC,aAAW,OAAO,aAAa;AAC7B,UAAM,mBAAmB,IAAI,YAAY;AACzC,QAAI,CAAC,oBAAoB,iBAAiB,WAAW,EAAG;AAExD,eAAW,WAAW,kBAAkB;AACtC,UAAI,CAAC,QAAQ,QAAS;AAEtB,eAAS,KAAK;AAAA,QACZ,IAAI,GAAG,IAAI,EAAE,IAAI,QAAQ,SAAS;AAAA,QAClC,WAAW,QAAQ;AAAA,QACnB,MAAM,QAAQ;AAAA,QACd,aAAa,QAAQ,eAAe;AAAA,QACpC,cAAc,QAAQ;AAAA,QACtB,QAAQ,QAAQ,UAAU;AAAA,QAC1B,SAAS,QAAQ;AAAA,QACjB,UAAU,QAAQ;AAAA,QAClB,sBAAsB,IAAI;AAAA,QAC1B,YAAY,IAAI;AAAA,QAChB,iBAAiB,IAAI;AAAA,QACrB,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO;AACT;AAMA,eAAsB,sBACpB,IACA,UACA,gBACA,cAC2B;AAC3B,QAAM,WAAW,YAAY,UAAU,cAAc;AACrD,QAAM,QAAQ,gBAAgB;AAG9B,QAAM,SAAS,MAAM,IAAI,QAAQ;AACjC,MAAI,UAAU,KAAK,IAAI,IAAI,OAAO,WAAW,mBAAmB;AAC9D,WAAO,OAAO;AAAA,EAChB;AAGA,QAAM,CAAC,gBAAgB,gBAAgB,IAAI,MAAM,QAAQ,IAAI;AAAA,IAC3D,mBAAmB,IAAI,UAAU,cAAc;AAAA,IAC/C,qBAAqB,IAAI,UAAU,cAAc;AAAA,EACnD,CAAC;AAGD,QAAM,cAAc,CAAC,GAAG,gBAAgB,GAAG,gBAAgB,EACxD,KAAK,CAAC,GAAG,MAAM,EAAE,WAAW,EAAE,QAAQ;AAGzC,QAAM,IAAI,UAAU;AAAA,IAClB,UAAU;AAAA,IACV,UAAU,KAAK,IAAI;AAAA,EACrB,CAAC;AAED,SAAO;AACT;AAQO,SAAS,uBAAuB,UAAkB,gBAA+B;AACtF,QAAM,QAAQ,gBAAgB;AAC9B,MAAI,gBAAgB;AAElB,UAAM,WAAW,YAAY,UAAU,cAAc;AACrD,UAAM,OAAO,QAAQ;AAAA,EACvB,OAAO;AAEL,eAAW,OAAO,MAAM,KAAK,GAAG;AAC9B,UAAI,IAAI,WAAW,GAAG,QAAQ,GAAG,GAAG;AAClC,cAAM,OAAO,GAAG;AAAA,MAClB;AAAA,IACF;AAAA,EACF;AACF;AASA,eAAsB,qBACpB,IACA,SAC2B;AAC3B,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AAEA,SAAO,SAAS,OAAO,aAAW;AAEhC,QAAI,CAAC,kBAAkB,QAAQ,WAAW,QAAQ,YAAY,GAAG;AAC/D,aAAO;AAAA,IACT;AAGA,QAAI,CAAC,yBAAyB,QAAQ,QAAQ,kBAAkB,QAAQ,OAAO,GAAG;AAChF,aAAO;AAAA,IACT;AAEA,WAAO;AAAA,EACT,CAAC;AACH;AASA,eAAe,sBACb,IACA,SACkB;AAClB,QAAM,eAAe,QAAQ,QAAQ;AAErC,MAAI,CAAC,aAAc,QAAO;AAG1B,QAAM,eAAe,MAAM,GAAG,MAAM,kBAAkB;AAAA,IACpD,cAAc,QAAQ;AAAA,IACtB,QAAQ,EAAE,KAAK,CAAC,WAAW,wBAAwB,EAAE;AAAA,IACrD,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ;AAAA,IACxB,WAAW;AAAA,EACb,CAAC;AAED,SAAO,eAAe;AACxB;AAKA,eAAsB,qBACpB,IACA,WACA,SACgC;AAChC,QAAM,SAAgC;AAAA,IACpC,WAAW;AAAA,IACX,SAAS;AAAA,IACT,QAAQ,CAAC;AAAA,IACT,WAAW,CAAC;AAAA,EACd;AAGA,QAAM,WAAW,MAAM,qBAAqB,IAAI,OAAO;AAEvD,MAAI,SAAS,WAAW,GAAG;AACzB,WAAO;AAAA,EACT;AAGA,aAAW,WAAW,UAAU;AAC9B,QAAI;AAEF,YAAM,WAAW,MAAM,sBAAsB,IAAI,OAAO;AACxD,UAAI,CAAC,UAAU;AACb,eAAO,MAAM,sDAAsD,EAAE,WAAW,QAAQ,IAAI,aAAa,QAAQ,KAAK,CAAC;AACvH,eAAO;AACP;AAAA,MACF;AAGA,YAAM,gBAAgB,kBAAkB,QAAQ,QAAQ,gBAAgB,QAAQ,OAAO;AAGvF,YAAM,YAAY,QAAQ,SAAS;AACnC,YAAM,oBAAoB,QAAQ,SAAS;AAG3C,YAAM,iBAAiB;AAAA;AAAA,QAErB,GAAG,QAAQ;AAAA;AAAA,QAEX,GAAG;AAAA,QACH,WAAW;AAAA,UACT,WAAW,QAAQ;AAAA,UACnB,aAAa,QAAQ;AAAA,UACrB,WAAW,QAAQ;AAAA,UACnB,cAAc,QAAQ;AAAA,UACtB,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,UACpC,QAAQ,QAAQ;AAAA,QAClB;AAAA,MACF;AAGA,YAAM,WAAW,MAAM,cAAc,IAAI;AAAA,QACvC,YAAY,QAAQ;AAAA,QACpB,SAAS,QAAQ;AAAA,QACjB;AAAA,QACA,UAAU;AAAA,UACR,aAAa,WAAW,QAAQ,EAAE;AAAA;AAAA,UAElC,UAAU;AAAA,UACV,YAAY,qBAAqB,QAAQ,QAAQ;AAAA,UACjD,QAAQ;AAAA,YACN,YAAY,QAAQ;AAAA,YACpB,cAAc,QAAQ;AAAA,YACtB,YAAY,QAAQ;AAAA,YACpB,gBAAgB,QAAQ;AAAA,UAC1B;AAAA,QACF;AAAA,QACA,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ;AAAA,MAC1B,CAAC;AAED,aAAO;AACP,aAAO,UAAU,KAAK;AAAA,QACpB,WAAW,QAAQ;AAAA,QACnB,YAAY,SAAS;AAAA,MACvB,CAAC;AAGD,sBAAgB,GAAG,KAAK,GAAG,WAAW,SAAS,EAAE,EAAE,MAAM,SAAO;AAC9D,eAAO,MAAM,4BAA4B,EAAE,YAAY,SAAS,IAAI,IAAI,CAAC;AAAA,MAC3E,CAAC;AAAA,IAEH,SAAS,OAAO;AACd,YAAM,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC1E,aAAO,MAAM,4BAA4B,EAAE,WAAW,QAAQ,IAAI,aAAa,QAAQ,MAAM,KAAK,MAAM,CAAC;AACzG,aAAO,OAAO,KAAK;AAAA,QACjB,WAAW,QAAQ;AAAA,QACnB,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO;AACT;",
+  "sourcesContent": ["/**\n * Workflows Module - Event Trigger Service\n *\n * Core service for evaluating and processing workflow event triggers.\n * Handles pattern matching, filter evaluation, context mapping, and workflow starting.\n */\n\nimport type { EntityManager } from '@mikro-orm/core'\nimport type { EntityManager as PostgreSqlEntityManager } from '@mikro-orm/postgresql'\nimport type { AwilixContainer } from 'awilix'\nimport type { CacheService } from '@open-mercato/cache'\nimport { matchEventPattern } from '@open-mercato/shared/lib/events/patterns'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { testLinearRegex } from '@open-mercato/shared/lib/regex/linear'\nimport {\n  WorkflowEventTrigger,\n  WorkflowDefinition,\n  WorkflowInstance,\n  type TriggerFilterCondition,\n  type TriggerContextMapping,\n  type WorkflowEventTriggerConfig,\n  type WorkflowDefinitionTrigger,\n} from '../data/entities'\nimport { startWorkflow, executeWorkflow } from './workflow-executor'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows').child({ component: 'event-trigger' })\n\n// ============================================================================\n// Types\n// ============================================================================\n\nexport interface EventTriggerContext {\n  eventName: string\n  payload: Record<string, unknown>\n  tenantId: string\n  organizationId: string\n}\n\nexport interface ProcessTriggersResult {\n  triggered: number\n  skipped: number\n  errors: Array<{ triggerId: string; error: string }>\n  instances: Array<{ triggerId: string; instanceId: string }>\n}\n\n/**\n * Unified trigger interface for both legacy (entity) and embedded (definition) triggers\n */\nexport interface UnifiedTrigger {\n  id: string  // For legacy: entity ID, for embedded: `${definitionId}:${triggerId}`\n  triggerId: string\n  name: string\n  description?: string | null\n  eventPattern: string\n  config: WorkflowEventTriggerConfig | null\n  enabled: boolean\n  priority: number\n  workflowDefinitionId: string\n  workflowId: string\n  workflowVersion: number\n  source: 'legacy' | 'embedded'\n  tenantId: string\n  organizationId: string\n}\n\ninterface CachedTriggers {\n  triggers: UnifiedTrigger[]\n  cachedAt: number\n}\n\n// Cache TTL: 5 minutes\nconst TRIGGER_CACHE_TTL = 5 * 60 * 1000\n\nfunction readEventActorUserId(payload: Record<string, unknown>): string | null {\n  const candidate = payload.userId ?? payload.actorUserId\n  if (typeof candidate !== 'string') return null\n  const trimmed = candidate.trim()\n  return trimmed.length > 0 && !trimmed.startsWith('trigger:') ? trimmed : null\n}\n\n// ============================================================================\n// Pattern Matching\n// ============================================================================\n\n// ============================================================================\n// Filter Evaluation\n// ============================================================================\n\nconst MAX_WORKFLOW_REGEX_PATTERN_LENGTH = 200\nconst MAX_WORKFLOW_REGEX_INPUT_LENGTH = 10_000\n\n/**\n * Get a nested value from an object using dot notation.\n */\nfunction getNestedValue(obj: unknown, path: string): unknown {\n  if (obj === null || obj === undefined) return undefined\n\n  const parts = path.split('.')\n  let current: unknown = obj\n\n  for (const part of parts) {\n    if (current === null || current === undefined) return undefined\n    if (typeof current !== 'object') return undefined\n    current = (current as Record<string, unknown>)[part]\n  }\n\n  return current\n}\n\nfunction getQuantifierEnd(pattern: string, index: number): number | null {\n  const char = pattern[index]\n  if (char === '*' || char === '+' || char === '?') return index\n  if (char !== '{') return null\n\n  const closeIndex = pattern.indexOf('}', index + 1)\n  if (closeIndex === -1) return null\n\n  const body = pattern.slice(index + 1, closeIndex)\n  return /^[0-9]+(?:,[0-9]*)?$/.test(body) ? closeIndex : null\n}\n\ninterface RegexGroupFrame {\n  hasAlternation: boolean\n  hasQuantifier: boolean\n}\n\nfunction isSafeWorkflowRegexPattern(pattern: string): boolean {\n  if (pattern.length > MAX_WORKFLOW_REGEX_PATTERN_LENGTH) return false\n\n  const groupStack: RegexGroupFrame[] = [{ hasAlternation: false, hasQuantifier: false }]\n  let inCharClass = false\n  let lastClosedGroup: RegexGroupFrame | null = null\n  let lastAtomWasQuantified = false\n\n  // Hand-written single-pass lexer: `index` is intentionally advanced inside the\n  // loop body (escape pairs, `(?:` prefixes, multi-char quantifiers, lazy `?`) on\n  // top of the `index += 1` update clause. Do not \"simplify\" these in-body writes.\n  for (let index = 0; index < pattern.length; index += 1) {\n    const char = pattern[index]\n\n    if (char === '\\\\') {\n      const next = pattern[index + 1]\n      if (!inCharClass && (/[1-9]/.test(next ?? '') || (next === 'k' && pattern[index + 2] === '<'))) {\n        return false\n      }\n      index += 1\n      lastClosedGroup = null\n      lastAtomWasQuantified = false\n      continue\n    }\n\n    if (inCharClass) {\n      if (char === ']') {\n        inCharClass = false\n        lastAtomWasQuantified = false\n      }\n      lastClosedGroup = null\n      continue\n    }\n\n    if (char === '[') {\n      inCharClass = true\n      lastClosedGroup = null\n      lastAtomWasQuantified = false\n      continue\n    }\n\n    if (char === '(') {\n      if (pattern[index + 1] === '?') {\n        if (pattern[index + 2] !== ':') return false\n        index += 2\n      }\n\n      groupStack.push({ hasAlternation: false, hasQuantifier: false })\n      lastClosedGroup = null\n      lastAtomWasQuantified = false\n      continue\n    }\n\n    if (char === ')') {\n      if (groupStack.length === 1) return false\n      lastClosedGroup = groupStack.pop()!\n      lastAtomWasQuantified = false\n      continue\n    }\n\n    if (char === '|') {\n      groupStack[groupStack.length - 1].hasAlternation = true\n      lastClosedGroup = null\n      lastAtomWasQuantified = false\n      continue\n    }\n\n    const quantifierEnd = getQuantifierEnd(pattern, index)\n    if (quantifierEnd !== null) {\n      if (lastAtomWasQuantified) return false\n      if (lastClosedGroup?.hasAlternation || lastClosedGroup?.hasQuantifier) return false\n\n      groupStack[groupStack.length - 1].hasQuantifier = true\n      lastClosedGroup = null\n      lastAtomWasQuantified = true\n      index = quantifierEnd\n\n      if (pattern[index + 1] === '?') {\n        index += 1\n      }\n\n      continue\n    }\n\n    lastClosedGroup = null\n    lastAtomWasQuantified = false\n  }\n\n  return groupStack.length === 1 && !inCharClass\n}\n\n/**\n * Evaluate a single filter condition against the event payload.\n */\nfunction evaluateCondition(condition: TriggerFilterCondition, payload: Record<string, unknown>): boolean {\n  const value = getNestedValue(payload, condition.field)\n  const expected = condition.value\n\n  switch (condition.operator) {\n    case 'eq':\n      return value === expected\n\n    case 'neq':\n      return value !== expected\n\n    case 'gt':\n      return typeof value === 'number' && typeof expected === 'number' && value > expected\n\n    case 'gte':\n      return typeof value === 'number' && typeof expected === 'number' && value >= expected\n\n    case 'lt':\n      return typeof value === 'number' && typeof expected === 'number' && value < expected\n\n    case 'lte':\n      return typeof value === 'number' && typeof expected === 'number' && value <= expected\n\n    case 'contains':\n      if (typeof value === 'string' && typeof expected === 'string') {\n        return value.includes(expected)\n      }\n      if (Array.isArray(value)) {\n        return value.includes(expected)\n      }\n      return false\n\n    case 'startsWith':\n      return typeof value === 'string' && typeof expected === 'string' && value.startsWith(expected)\n\n    case 'endsWith':\n      return typeof value === 'string' && typeof expected === 'string' && value.endsWith(expected)\n\n    case 'in':\n      return Array.isArray(expected) && expected.includes(value)\n\n    case 'notIn':\n      return Array.isArray(expected) && !expected.includes(value)\n\n    case 'exists':\n      return value !== undefined && value !== null\n\n    case 'notExists':\n      return value === undefined || value === null\n\n    case 'regex':\n      if (typeof value !== 'string' || typeof expected !== 'string') return false\n      if (value.length > MAX_WORKFLOW_REGEX_INPUT_LENGTH) return false\n      if (!isSafeWorkflowRegexPattern(expected)) return false\n      {\n        const result = testLinearRegex(expected, value, {\n          maxPatternLength: MAX_WORKFLOW_REGEX_PATTERN_LENGTH,\n          maxInputLength: MAX_WORKFLOW_REGEX_INPUT_LENGTH,\n        })\n        return result.ok ? result.matched : false\n      }\n\n    default:\n      return false\n  }\n}\n\n/**\n * Evaluate all filter conditions against the event payload.\n * All conditions must pass (AND logic).\n */\nexport function evaluateFilterConditions(\n  conditions: TriggerFilterCondition[] | undefined,\n  payload: Record<string, unknown>\n): boolean {\n  if (!conditions || conditions.length === 0) return true\n\n  return conditions.every(condition => evaluateCondition(condition, payload))\n}\n\n// ============================================================================\n// Context Mapping\n// ============================================================================\n\n/**\n * Map event payload to workflow initial context.\n */\nexport function mapEventToContext(\n  mapping: TriggerContextMapping[] | undefined,\n  payload: Record<string, unknown>\n): Record<string, unknown> {\n  const context: Record<string, unknown> = {}\n\n  if (!mapping || mapping.length === 0) return context\n\n  for (const item of mapping) {\n    const value = getNestedValue(payload, item.sourceExpression)\n    context[item.targetKey] = value !== undefined ? value : item.defaultValue\n  }\n\n  return context\n}\n\n// ============================================================================\n// Trigger Loading with Caching\n// ============================================================================\n\n// In-memory cache for triggers (per tenant/org).\n// Park the Map on globalThis so the same compiled module loaded under two\n// paths (a Next.js server chunk vs. a worker resolving the file through a\n// different import root) shares one cache. Without this,\n// `invalidateTriggerCache(...)` called from the PUT /api/workflows/definitions\n// route clears its own copy while the wildcard event-trigger subscriber keeps\n// reading a stale copy populated before the trigger was added \u2014 newly added\n// triggers stay invisible for up to TRIGGER_CACHE_TTL. Mirrors the same\n// workaround used by the modules registry and `getDiRegistrars()`.\nconst GLOBAL_TRIGGER_CACHE_KEY = '__openMercatoWorkflowTriggerCache__'\n\nfunction getTriggerCache(): Map<string, CachedTriggers> {\n  const existing = (globalThis as any)[GLOBAL_TRIGGER_CACHE_KEY] as\n    | Map<string, CachedTriggers>\n    | undefined\n  if (existing) return existing\n  const created = new Map<string, CachedTriggers>()\n  ;(globalThis as any)[GLOBAL_TRIGGER_CACHE_KEY] = created\n  return created\n}\n\nfunction getCacheKey(tenantId: string, organizationId: string): string {\n  return `${tenantId}:${organizationId}`\n}\n\n/**\n * Load legacy triggers from WorkflowEventTrigger entity table.\n * For backward compatibility with existing triggers.\n */\nasync function loadLegacyTriggers(\n  em: EntityManager,\n  tenantId: string,\n  organizationId: string\n): Promise<UnifiedTrigger[]> {\n  const postgresEm = em as unknown as PostgreSqlEntityManager\n  const legacyTriggers = await findWithDecryption(\n    postgresEm,\n    WorkflowEventTrigger,\n    {\n      tenantId,\n      organizationId,\n      enabled: true,\n      deletedAt: null,\n    },\n    {\n      orderBy: { priority: 'DESC', createdAt: 'ASC' },\n    },\n    { tenantId, organizationId },\n  )\n\n  // Get definitions for these triggers to get workflowId\n  const definitionIds = [...new Set(legacyTriggers.map(t => t.workflowDefinitionId))]\n  const definitions = definitionIds.length > 0 ? await findWithDecryption(postgresEm, WorkflowDefinition, {\n    id: { $in: definitionIds },\n    tenantId,\n    organizationId,\n    enabled: true,\n    deletedAt: null,\n  }, {}, { tenantId, organizationId }) : []\n  const definitionMap = new Map(definitions.map(d => [d.id, d]))\n\n  return legacyTriggers\n    .filter(t => definitionMap.has(t.workflowDefinitionId))\n    .map(t => {\n      const def = definitionMap.get(t.workflowDefinitionId)!\n      return {\n        id: t.id,\n        triggerId: t.id,\n        name: t.name,\n        description: t.description,\n        eventPattern: t.eventPattern,\n        config: t.config ?? null,\n        enabled: t.enabled,\n        priority: t.priority,\n        workflowDefinitionId: t.workflowDefinitionId,\n        workflowId: def.workflowId,\n        workflowVersion: def.version,\n        source: 'legacy' as const,\n        tenantId: t.tenantId,\n        organizationId: t.organizationId,\n      }\n    })\n}\n\n/**\n * Load embedded triggers from workflow definitions.\n * New triggers are embedded directly in the definition JSONB.\n */\nasync function loadEmbeddedTriggers(\n  em: EntityManager,\n  tenantId: string,\n  organizationId: string\n): Promise<UnifiedTrigger[]> {\n  const postgresEm = em as unknown as PostgreSqlEntityManager\n  // Load all enabled definitions that may have triggers\n  const definitions = await findWithDecryption(\n    postgresEm,\n    WorkflowDefinition,\n    {\n      tenantId,\n      organizationId,\n      enabled: true,\n      deletedAt: null,\n    },\n    {},\n    { tenantId, organizationId },\n  )\n\n  const triggers: UnifiedTrigger[] = []\n\n  for (const def of definitions) {\n    const embeddedTriggers = def.definition?.triggers as WorkflowDefinitionTrigger[] | undefined\n    if (!embeddedTriggers || embeddedTriggers.length === 0) continue\n\n    for (const trigger of embeddedTriggers) {\n      if (!trigger.enabled) continue\n\n      triggers.push({\n        id: `${def.id}:${trigger.triggerId}`,\n        triggerId: trigger.triggerId,\n        name: trigger.name,\n        description: trigger.description ?? null,\n        eventPattern: trigger.eventPattern,\n        config: trigger.config ?? null,\n        enabled: trigger.enabled,\n        priority: trigger.priority,\n        workflowDefinitionId: def.id,\n        workflowId: def.workflowId,\n        workflowVersion: def.version,\n        source: 'embedded' as const,\n        tenantId,\n        organizationId,\n      })\n    }\n  }\n\n  return triggers\n}\n\n/**\n * Load all enabled triggers for a tenant/organization with caching.\n * Merges both legacy (entity) triggers and embedded (definition) triggers.\n */\nexport async function loadTriggersForTenant(\n  em: EntityManager,\n  tenantId: string,\n  organizationId: string,\n  cacheService?: CacheService\n): Promise<UnifiedTrigger[]> {\n  const cacheKey = getCacheKey(tenantId, organizationId)\n  const cache = getTriggerCache()\n\n  // Check in-memory cache\n  const cached = cache.get(cacheKey)\n  if (cached && Date.now() - cached.cachedAt < TRIGGER_CACHE_TTL) {\n    return cached.triggers\n  }\n\n  // Load from both sources\n  const [legacyTriggers, embeddedTriggers] = await Promise.all([\n    loadLegacyTriggers(em, tenantId, organizationId),\n    loadEmbeddedTriggers(em, tenantId, organizationId),\n  ])\n\n  // Merge and sort by priority (higher first)\n  const allTriggers = [...legacyTriggers, ...embeddedTriggers]\n    .sort((a, b) => b.priority - a.priority)\n\n  // Update cache\n  cache.set(cacheKey, {\n    triggers: allTriggers,\n    cachedAt: Date.now(),\n  })\n\n  return allTriggers\n}\n\n/**\n * Invalidate trigger cache for a tenant/organization.\n * Call this when:\n * - Legacy triggers are created/updated/deleted\n * - Workflow definitions with embedded triggers are created/updated/deleted\n */\nexport function invalidateTriggerCache(tenantId: string, organizationId?: string): void {\n  const cache = getTriggerCache()\n  if (organizationId) {\n    // Invalidate specific org\n    const cacheKey = getCacheKey(tenantId, organizationId)\n    cache.delete(cacheKey)\n  } else {\n    // Invalidate all orgs for tenant\n    for (const key of cache.keys()) {\n      if (key.startsWith(`${tenantId}:`)) {\n        cache.delete(key)\n      }\n    }\n  }\n}\n\n// ============================================================================\n// Trigger Matching\n// ============================================================================\n\n/**\n * Find all triggers that match an event.\n */\nexport async function findMatchingTriggers(\n  em: EntityManager,\n  context: EventTriggerContext\n): Promise<UnifiedTrigger[]> {\n  const triggers = await loadTriggersForTenant(\n    em,\n    context.tenantId,\n    context.organizationId\n  )\n\n  return triggers.filter(trigger => {\n    // Check event pattern\n    if (!matchEventPattern(context.eventName, trigger.eventPattern)) {\n      return false\n    }\n\n    // Check filter conditions\n    if (!evaluateFilterConditions(trigger.config?.filterConditions, context.payload)) {\n      return false\n    }\n\n    return true\n  })\n}\n\n// ============================================================================\n// Trigger Processing\n// ============================================================================\n\n/**\n * Check if max concurrent instances limit is reached.\n */\nasync function checkConcurrencyLimit(\n  em: EntityManager,\n  trigger: UnifiedTrigger\n): Promise<boolean> {\n  const maxInstances = trigger.config?.maxConcurrentInstances\n\n  if (!maxInstances) return true // No limit\n\n  // Count running instances for this trigger's workflow definition\n  const runningCount = await em.count(WorkflowInstance, {\n    definitionId: trigger.workflowDefinitionId,\n    status: { $in: ['RUNNING', 'WAITING_FOR_ACTIVITIES'] },\n    tenantId: trigger.tenantId,\n    organizationId: trigger.organizationId,\n    deletedAt: null,\n  })\n\n  return runningCount < maxInstances\n}\n\n/**\n * Process all matching triggers for an event and start workflows.\n */\nexport async function processEventTriggers(\n  em: EntityManager,\n  container: AwilixContainer,\n  context: EventTriggerContext\n): Promise<ProcessTriggersResult> {\n  const result: ProcessTriggersResult = {\n    triggered: 0,\n    skipped: 0,\n    errors: [],\n    instances: [],\n  }\n\n  // Find matching triggers\n  const triggers = await findMatchingTriggers(em, context)\n\n  if (triggers.length === 0) {\n    return result\n  }\n\n  // Process each trigger (definitions already validated during loading)\n  for (const trigger of triggers) {\n    try {\n      // Check concurrency limit\n      const canStart = await checkConcurrencyLimit(em, trigger)\n      if (!canStart) {\n        logger.debug('Skipping trigger: max concurrent instances reached', { triggerId: trigger.id, triggerName: trigger.name })\n        result.skipped++\n        continue\n      }\n\n      // Map event payload to workflow context\n      const mappedContext = mapEventToContext(trigger.config?.contextMapping, context.payload)\n\n      // Extract entity info from payload for metadata\n      const payloadId = context.payload?.id as string | undefined\n      const payloadEntityType = context.payload?.entityType as string | undefined\n      const actorUserId = readEventActorUserId(context.payload)\n\n      // Include event metadata and payload in context\n      const initialContext = {\n        // Include raw event payload fields (e.g., id, organizationId, tenantId)\n        ...context.payload,\n        // Override with explicit mappings if provided\n        ...mappedContext,\n        __trigger: {\n          triggerId: trigger.id,\n          triggerName: trigger.name,\n          eventName: context.eventName,\n          eventPayload: context.payload,\n          triggeredAt: new Date().toISOString(),\n          source: trigger.source,\n        },\n      }\n\n      // Start workflow\n      const instance = await startWorkflow(em, {\n        workflowId: trigger.workflowId,\n        version: trigger.workflowVersion,\n        initialContext,\n        metadata: {\n          initiatedBy: actorUserId ?? `trigger:${trigger.id}`,\n          // Include entityId and entityType for widget discovery\n          entityId: payloadId,\n          entityType: payloadEntityType || trigger.config?.entityType,\n          labels: {\n            trigger_id: trigger.id,\n            trigger_name: trigger.name,\n            event_name: context.eventName,\n            trigger_source: trigger.source,\n          },\n        },\n        tenantId: context.tenantId,\n        organizationId: context.organizationId,\n      })\n\n      result.triggered++\n      result.instances.push({\n        triggerId: trigger.id,\n        instanceId: instance.id,\n      })\n\n      // Execute workflow asynchronously (don't wait)\n      executeWorkflow(\n        em.fork(),\n        container,\n        instance.id,\n        actorUserId ? { userId: actorUserId } : undefined\n      ).catch(err => {\n        logger.error('Error executing workflow', { instanceId: instance.id, err })\n      })\n\n    } catch (error) {\n      const errorMessage = error instanceof Error ? error.message : String(error)\n      logger.error('Error processing trigger', { triggerId: trigger.id, triggerName: trigger.name, err: error })\n      result.errors.push({\n        triggerId: trigger.id,\n        error: errorMessage,\n      })\n    }\n  }\n\n  return result\n}\n"],
+  "mappings": "AAWA,SAAS,yBAAyB;AAClC,SAAS,0BAA0B;AACnC,SAAS,uBAAuB;AAChC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAKK;AACP,SAAS,eAAe,uBAAuB;AAC/C,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,gBAAgB,CAAC;AA8C7E,MAAM,oBAAoB,IAAI,KAAK;AAEnC,SAAS,qBAAqB,SAAiD;AAC7E,QAAM,YAAY,QAAQ,UAAU,QAAQ;AAC5C,MAAI,OAAO,cAAc,SAAU,QAAO;AAC1C,QAAM,UAAU,UAAU,KAAK;AAC/B,SAAO,QAAQ,SAAS,KAAK,CAAC,QAAQ,WAAW,UAAU,IAAI,UAAU;AAC3E;AAUA,MAAM,oCAAoC;AAC1C,MAAM,kCAAkC;AAKxC,SAAS,eAAe,KAAc,MAAuB;AAC3D,MAAI,QAAQ,QAAQ,QAAQ,OAAW,QAAO;AAE9C,QAAM,QAAQ,KAAK,MAAM,GAAG;AAC5B,MAAI,UAAmB;AAEvB,aAAW,QAAQ,OAAO;AACxB,QAAI,YAAY,QAAQ,YAAY,OAAW,QAAO;AACtD,QAAI,OAAO,YAAY,SAAU,QAAO;AACxC,cAAW,QAAoC,IAAI;AAAA,EACrD;AAEA,SAAO;AACT;AAEA,SAAS,iBAAiB,SAAiB,OAA8B;AACvE,QAAM,OAAO,QAAQ,KAAK;AAC1B,MAAI,SAAS,OAAO,SAAS,OAAO,SAAS,IAAK,QAAO;AACzD,MAAI,SAAS,IAAK,QAAO;AAEzB,QAAM,aAAa,QAAQ,QAAQ,KAAK,QAAQ,CAAC;AACjD,MAAI,eAAe,GAAI,QAAO;AAE9B,QAAM,OAAO,QAAQ,MAAM,QAAQ,GAAG,UAAU;AAChD,SAAO,uBAAuB,KAAK,IAAI,IAAI,aAAa;AAC1D;AAOA,SAAS,2BAA2B,SAA0B;AAC5D,MAAI,QAAQ,SAAS,kCAAmC,QAAO;AAE/D,QAAM,aAAgC,CAAC,EAAE,gBAAgB,OAAO,eAAe,MAAM,CAAC;AACtF,MAAI,cAAc;AAClB,MAAI,kBAA0C;AAC9C,MAAI,wBAAwB;AAK5B,WAAS,QAAQ,GAAG,QAAQ,QAAQ,QAAQ,SAAS,GAAG;AACtD,UAAM,OAAO,QAAQ,KAAK;AAE1B,QAAI,SAAS,MAAM;AACjB,YAAM,OAAO,QAAQ,QAAQ,CAAC;AAC9B,UAAI,CAAC,gBAAgB,QAAQ,KAAK,QAAQ,EAAE,KAAM,SAAS,OAAO,QAAQ,QAAQ,CAAC,MAAM,MAAO;AAC9F,eAAO;AAAA,MACT;AACA,eAAS;AACT,wBAAkB;AAClB,8BAAwB;AACxB;AAAA,IACF;AAEA,QAAI,aAAa;AACf,UAAI,SAAS,KAAK;AAChB,sBAAc;AACd,gCAAwB;AAAA,MAC1B;AACA,wBAAkB;AAClB;AAAA,IACF;AAEA,QAAI,SAAS,KAAK;AAChB,oBAAc;AACd,wBAAkB;AAClB,8BAAwB;AACxB;AAAA,IACF;AAEA,QAAI,SAAS,KAAK;AAChB,UAAI,QAAQ,QAAQ,CAAC,MAAM,KAAK;AAC9B,YAAI,QAAQ,QAAQ,CAAC,MAAM,IAAK,QAAO;AACvC,iBAAS;AAAA,MACX;AAEA,iBAAW,KAAK,EAAE,gBAAgB,OAAO,eAAe,MAAM,CAAC;AAC/D,wBAAkB;AAClB,8BAAwB;AACxB;AAAA,IACF;AAEA,QAAI,SAAS,KAAK;AAChB,UAAI,WAAW,WAAW,EAAG,QAAO;AACpC,wBAAkB,WAAW,IAAI;AACjC,8BAAwB;AACxB;AAAA,IACF;AAEA,QAAI,SAAS,KAAK;AAChB,iBAAW,WAAW,SAAS,CAAC,EAAE,iBAAiB;AACnD,wBAAkB;AAClB,8BAAwB;AACxB;AAAA,IACF;AAEA,UAAM,gBAAgB,iBAAiB,SAAS,KAAK;AACrD,QAAI,kBAAkB,MAAM;AAC1B,UAAI,sBAAuB,QAAO;AAClC,UAAI,iBAAiB,kBAAkB,iBAAiB,cAAe,QAAO;AAE9E,iBAAW,WAAW,SAAS,CAAC,EAAE,gBAAgB;AAClD,wBAAkB;AAClB,8BAAwB;AACxB,cAAQ;AAER,UAAI,QAAQ,QAAQ,CAAC,MAAM,KAAK;AAC9B,iBAAS;AAAA,MACX;AAEA;AAAA,IACF;AAEA,sBAAkB;AAClB,4BAAwB;AAAA,EAC1B;AAEA,SAAO,WAAW,WAAW,KAAK,CAAC;AACrC;AAKA,SAAS,kBAAkB,WAAmC,SAA2C;AACvG,QAAM,QAAQ,eAAe,SAAS,UAAU,KAAK;AACrD,QAAM,WAAW,UAAU;AAE3B,UAAQ,UAAU,UAAU;AAAA,IAC1B,KAAK;AACH,aAAO,UAAU;AAAA,IAEnB,KAAK;AACH,aAAO,UAAU;AAAA,IAEnB,KAAK;AACH,aAAO,OAAO,UAAU,YAAY,OAAO,aAAa,YAAY,QAAQ;AAAA,IAE9E,KAAK;AACH,aAAO,OAAO,UAAU,YAAY,OAAO,aAAa,YAAY,SAAS;AAAA,IAE/E,KAAK;AACH,aAAO,OAAO,UAAU,YAAY,OAAO,aAAa,YAAY,QAAQ;AAAA,IAE9E,KAAK;AACH,aAAO,OAAO,UAAU,YAAY,OAAO,aAAa,YAAY,SAAS;AAAA,IAE/E,KAAK;AACH,UAAI,OAAO,UAAU,YAAY,OAAO,aAAa,UAAU;AAC7D,eAAO,MAAM,SAAS,QAAQ;AAAA,MAChC;AACA,UAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,eAAO,MAAM,SAAS,QAAQ;AAAA,MAChC;AACA,aAAO;AAAA,IAET,KAAK;AACH,aAAO,OAAO,UAAU,YAAY,OAAO,aAAa,YAAY,MAAM,WAAW,QAAQ;AAAA,IAE/F,KAAK;AACH,aAAO,OAAO,UAAU,YAAY,OAAO,aAAa,YAAY,MAAM,SAAS,QAAQ;AAAA,IAE7F,KAAK;AACH,aAAO,MAAM,QAAQ,QAAQ,KAAK,SAAS,SAAS,KAAK;AAAA,IAE3D,KAAK;AACH,aAAO,MAAM,QAAQ,QAAQ,KAAK,CAAC,SAAS,SAAS,KAAK;AAAA,IAE5D,KAAK;AACH,aAAO,UAAU,UAAa,UAAU;AAAA,IAE1C,KAAK;AACH,aAAO,UAAU,UAAa,UAAU;AAAA,IAE1C,KAAK;AACH,UAAI,OAAO,UAAU,YAAY,OAAO,aAAa,SAAU,QAAO;AACtE,UAAI,MAAM,SAAS,gCAAiC,QAAO;AAC3D,UAAI,CAAC,2BAA2B,QAAQ,EAAG,QAAO;AAClD;AACE,cAAM,SAAS,gBAAgB,UAAU,OAAO;AAAA,UAC9C,kBAAkB;AAAA,UAClB,gBAAgB;AAAA,QAClB,CAAC;AACD,eAAO,OAAO,KAAK,OAAO,UAAU;AAAA,MACtC;AAAA,IAEF;AACE,aAAO;AAAA,EACX;AACF;AAMO,SAAS,yBACd,YACA,SACS;AACT,MAAI,CAAC,cAAc,WAAW,WAAW,EAAG,QAAO;AAEnD,SAAO,WAAW,MAAM,eAAa,kBAAkB,WAAW,OAAO,CAAC;AAC5E;AASO,SAAS,kBACd,SACA,SACyB;AACzB,QAAM,UAAmC,CAAC;AAE1C,MAAI,CAAC,WAAW,QAAQ,WAAW,EAAG,QAAO;AAE7C,aAAW,QAAQ,SAAS;AAC1B,UAAM,QAAQ,eAAe,SAAS,KAAK,gBAAgB;AAC3D,YAAQ,KAAK,SAAS,IAAI,UAAU,SAAY,QAAQ,KAAK;AAAA,EAC/D;AAEA,SAAO;AACT;AAeA,MAAM,2BAA2B;AAEjC,SAAS,kBAA+C;AACtD,QAAM,WAAY,WAAmB,wBAAwB;AAG7D,MAAI,SAAU,QAAO;AACrB,QAAM,UAAU,oBAAI,IAA4B;AAC/C,EAAC,WAAmB,wBAAwB,IAAI;AACjD,SAAO;AACT;AAEA,SAAS,YAAY,UAAkB,gBAAgC;AACrE,SAAO,GAAG,QAAQ,IAAI,cAAc;AACtC;AAMA,eAAe,mBACb,IACA,UACA,gBAC2B;AAC3B,QAAM,aAAa;AACnB,QAAM,iBAAiB,MAAM;AAAA,IAC3B;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT,WAAW;AAAA,IACb;AAAA,IACA;AAAA,MACE,SAAS,EAAE,UAAU,QAAQ,WAAW,MAAM;AAAA,IAChD;AAAA,IACA,EAAE,UAAU,eAAe;AAAA,EAC7B;AAGA,QAAM,gBAAgB,CAAC,GAAG,IAAI,IAAI,eAAe,IAAI,OAAK,EAAE,oBAAoB,CAAC,CAAC;AAClF,QAAM,cAAc,cAAc,SAAS,IAAI,MAAM,mBAAmB,YAAY,oBAAoB;AAAA,IACtG,IAAI,EAAE,KAAK,cAAc;AAAA,IACzB;AAAA,IACA;AAAA,IACA,SAAS;AAAA,IACT,WAAW;AAAA,EACb,GAAG,CAAC,GAAG,EAAE,UAAU,eAAe,CAAC,IAAI,CAAC;AACxC,QAAM,gBAAgB,IAAI,IAAI,YAAY,IAAI,OAAK,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AAE7D,SAAO,eACJ,OAAO,OAAK,cAAc,IAAI,EAAE,oBAAoB,CAAC,EACrD,IAAI,OAAK;AACR,UAAM,MAAM,cAAc,IAAI,EAAE,oBAAoB;AACpD,WAAO;AAAA,MACL,IAAI,EAAE;AAAA,MACN,WAAW,EAAE;AAAA,MACb,MAAM,EAAE;AAAA,MACR,aAAa,EAAE;AAAA,MACf,cAAc,EAAE;AAAA,MAChB,QAAQ,EAAE,UAAU;AAAA,MACpB,SAAS,EAAE;AAAA,MACX,UAAU,EAAE;AAAA,MACZ,sBAAsB,EAAE;AAAA,MACxB,YAAY,IAAI;AAAA,MAChB,iBAAiB,IAAI;AAAA,MACrB,QAAQ;AAAA,MACR,UAAU,EAAE;AAAA,MACZ,gBAAgB,EAAE;AAAA,IACpB;AAAA,EACF,CAAC;AACL;AAMA,eAAe,qBACb,IACA,UACA,gBAC2B;AAC3B,QAAM,aAAa;AAEnB,QAAM,cAAc,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT,WAAW;AAAA,IACb;AAAA,IACA,CAAC;AAAA,IACD,EAAE,UAAU,eAAe;AAAA,EAC7B;AAEA,QAAM,WAA6B,CAAC;AAEpC,aAAW,OAAO,aAAa;AAC7B,UAAM,mBAAmB,IAAI,YAAY;AACzC,QAAI,CAAC,oBAAoB,iBAAiB,WAAW,EAAG;AAExD,eAAW,WAAW,kBAAkB;AACtC,UAAI,CAAC,QAAQ,QAAS;AAEtB,eAAS,KAAK;AAAA,QACZ,IAAI,GAAG,IAAI,EAAE,IAAI,QAAQ,SAAS;AAAA,QAClC,WAAW,QAAQ;AAAA,QACnB,MAAM,QAAQ;AAAA,QACd,aAAa,QAAQ,eAAe;AAAA,QACpC,cAAc,QAAQ;AAAA,QACtB,QAAQ,QAAQ,UAAU;AAAA,QAC1B,SAAS,QAAQ;AAAA,QACjB,UAAU,QAAQ;AAAA,QAClB,sBAAsB,IAAI;AAAA,QAC1B,YAAY,IAAI;AAAA,QAChB,iBAAiB,IAAI;AAAA,QACrB,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO;AACT;AAMA,eAAsB,sBACpB,IACA,UACA,gBACA,cAC2B;AAC3B,QAAM,WAAW,YAAY,UAAU,cAAc;AACrD,QAAM,QAAQ,gBAAgB;AAG9B,QAAM,SAAS,MAAM,IAAI,QAAQ;AACjC,MAAI,UAAU,KAAK,IAAI,IAAI,OAAO,WAAW,mBAAmB;AAC9D,WAAO,OAAO;AAAA,EAChB;AAGA,QAAM,CAAC,gBAAgB,gBAAgB,IAAI,MAAM,QAAQ,IAAI;AAAA,IAC3D,mBAAmB,IAAI,UAAU,cAAc;AAAA,IAC/C,qBAAqB,IAAI,UAAU,cAAc;AAAA,EACnD,CAAC;AAGD,QAAM,cAAc,CAAC,GAAG,gBAAgB,GAAG,gBAAgB,EACxD,KAAK,CAAC,GAAG,MAAM,EAAE,WAAW,EAAE,QAAQ;AAGzC,QAAM,IAAI,UAAU;AAAA,IAClB,UAAU;AAAA,IACV,UAAU,KAAK,IAAI;AAAA,EACrB,CAAC;AAED,SAAO;AACT;AAQO,SAAS,uBAAuB,UAAkB,gBAA+B;AACtF,QAAM,QAAQ,gBAAgB;AAC9B,MAAI,gBAAgB;AAElB,UAAM,WAAW,YAAY,UAAU,cAAc;AACrD,UAAM,OAAO,QAAQ;AAAA,EACvB,OAAO;AAEL,eAAW,OAAO,MAAM,KAAK,GAAG;AAC9B,UAAI,IAAI,WAAW,GAAG,QAAQ,GAAG,GAAG;AAClC,cAAM,OAAO,GAAG;AAAA,MAClB;AAAA,IACF;AAAA,EACF;AACF;AASA,eAAsB,qBACpB,IACA,SAC2B;AAC3B,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AAEA,SAAO,SAAS,OAAO,aAAW;AAEhC,QAAI,CAAC,kBAAkB,QAAQ,WAAW,QAAQ,YAAY,GAAG;AAC/D,aAAO;AAAA,IACT;AAGA,QAAI,CAAC,yBAAyB,QAAQ,QAAQ,kBAAkB,QAAQ,OAAO,GAAG;AAChF,aAAO;AAAA,IACT;AAEA,WAAO;AAAA,EACT,CAAC;AACH;AASA,eAAe,sBACb,IACA,SACkB;AAClB,QAAM,eAAe,QAAQ,QAAQ;AAErC,MAAI,CAAC,aAAc,QAAO;AAG1B,QAAM,eAAe,MAAM,GAAG,MAAM,kBAAkB;AAAA,IACpD,cAAc,QAAQ;AAAA,IACtB,QAAQ,EAAE,KAAK,CAAC,WAAW,wBAAwB,EAAE;AAAA,IACrD,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ;AAAA,IACxB,WAAW;AAAA,EACb,CAAC;AAED,SAAO,eAAe;AACxB;AAKA,eAAsB,qBACpB,IACA,WACA,SACgC;AAChC,QAAM,SAAgC;AAAA,IACpC,WAAW;AAAA,IACX,SAAS;AAAA,IACT,QAAQ,CAAC;AAAA,IACT,WAAW,CAAC;AAAA,EACd;AAGA,QAAM,WAAW,MAAM,qBAAqB,IAAI,OAAO;AAEvD,MAAI,SAAS,WAAW,GAAG;AACzB,WAAO;AAAA,EACT;AAGA,aAAW,WAAW,UAAU;AAC9B,QAAI;AAEF,YAAM,WAAW,MAAM,sBAAsB,IAAI,OAAO;AACxD,UAAI,CAAC,UAAU;AACb,eAAO,MAAM,sDAAsD,EAAE,WAAW,QAAQ,IAAI,aAAa,QAAQ,KAAK,CAAC;AACvH,eAAO;AACP;AAAA,MACF;AAGA,YAAM,gBAAgB,kBAAkB,QAAQ,QAAQ,gBAAgB,QAAQ,OAAO;AAGvF,YAAM,YAAY,QAAQ,SAAS;AACnC,YAAM,oBAAoB,QAAQ,SAAS;AAC3C,YAAM,cAAc,qBAAqB,QAAQ,OAAO;AAGxD,YAAM,iBAAiB;AAAA;AAAA,QAErB,GAAG,QAAQ;AAAA;AAAA,QAEX,GAAG;AAAA,QACH,WAAW;AAAA,UACT,WAAW,QAAQ;AAAA,UACnB,aAAa,QAAQ;AAAA,UACrB,WAAW,QAAQ;AAAA,UACnB,cAAc,QAAQ;AAAA,UACtB,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,UACpC,QAAQ,QAAQ;AAAA,QAClB;AAAA,MACF;AAGA,YAAM,WAAW,MAAM,cAAc,IAAI;AAAA,QACvC,YAAY,QAAQ;AAAA,QACpB,SAAS,QAAQ;AAAA,QACjB;AAAA,QACA,UAAU;AAAA,UACR,aAAa,eAAe,WAAW,QAAQ,EAAE;AAAA;AAAA,UAEjD,UAAU;AAAA,UACV,YAAY,qBAAqB,QAAQ,QAAQ;AAAA,UACjD,QAAQ;AAAA,YACN,YAAY,QAAQ;AAAA,YACpB,cAAc,QAAQ;AAAA,YACtB,YAAY,QAAQ;AAAA,YACpB,gBAAgB,QAAQ;AAAA,UAC1B;AAAA,QACF;AAAA,QACA,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ;AAAA,MAC1B,CAAC;AAED,aAAO;AACP,aAAO,UAAU,KAAK;AAAA,QACpB,WAAW,QAAQ;AAAA,QACnB,YAAY,SAAS;AAAA,MACvB,CAAC;AAGD;AAAA,QACE,GAAG,KAAK;AAAA,QACR;AAAA,QACA,SAAS;AAAA,QACT,cAAc,EAAE,QAAQ,YAAY,IAAI;AAAA,MAC1C,EAAE,MAAM,SAAO;AACb,eAAO,MAAM,4BAA4B,EAAE,YAAY,SAAS,IAAI,IAAI,CAAC;AAAA,MAC3E,CAAC;AAAA,IAEH,SAAS,OAAO;AACd,YAAM,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC1E,aAAO,MAAM,4BAA4B,EAAE,WAAW,QAAQ,IAAI,aAAa,QAAQ,MAAM,KAAK,MAAM,CAAC;AACzG,aAAO,OAAO,KAAK;AAAA,QACjB,WAAW,QAAQ;AAAA,QACnB,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO;AACT;",
   "names": []
 }

package/dist/modules/workflows/lib/parallel-handler.js

@@ -40,6 +40,12 @@ async function resumeBranch(em, options) {
   await em.flush();
   return true;
 }
+function normalizeWorkflowUserId(value) {
+  if (typeof value !== "string") return null;
+  const trimmed = value.trim();
+  if (!trimmed || trimmed.startsWith("trigger:")) return null;
+  return trimmed;
+}
 function getNestedValue(obj, path) {
   return path.split(".").reduce((current, key) => current == null ? void 0 : current[key], obj);
 }
@@ -145,7 +151,10 @@ async function resumeBranchAfterActivities(em, container, instanceId, branchInst
         em,
         instance,
         pending.toStepId,
-        { workflowContext: { ...instance.context || {}, ...branch.contextNamespace || {} } },
+        {
+          workflowContext: { ...instance.context || {}, ...branch.contextNamespace || {} },
+          userId: normalizeWorkflowUserId(instance.metadata?.initiatedBy) ?? void 0
+        },
         container,
         branch
       );

package/dist/modules/workflows/lib/parallel-handler.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/workflows/lib/parallel-handler.ts"],
-  "sourcesContent": ["/**\n * Workflows Module - Parallel Fork / Join Handler\n *\n * Implements PARALLEL_FORK / PARALLEL_JOIN execution with a multi-token model:\n *\n *  - `openFork` turns a PARALLEL_FORK step into N persistent branch tokens\n *    (`WorkflowBranchInstance`), one per outgoing `auto` transition, and puts the\n *    instance into the dormant `FORKED` state.\n *  - `advanceBranches` runs the interleaved loop: while the instance is FORKED it\n *    advances each ACTIVE branch one step at a time (BPMN semantics \u2014 single lock,\n *    no thread-level concurrency). A branch pauses independently (USER_TASK /\n *    signal / timer / async activity) without blocking siblings.\n *  - When every branch has reached its JOIN (wait-all), `fireJoin` merges the\n *    branch namespaces back into `instance.context`, applies optional\n *    `outputMapping`, and resumes the root token at the step after the JOIN.\n *  - A failed branch cancels its siblings and fails the whole instance.\n *\n * All work happens under the executor's pessimistic instance lock + transaction,\n * so wait-all counting and JOIN firing are race-free.\n */\n\nimport { EntityManager, LockMode } from '@mikro-orm/core'\nimport type { AwilixContainer } from 'awilix'\nimport {\n  WorkflowInstance,\n  WorkflowBranchInstance,\n  WorkflowDefinition,\n  StepInstance,\n  UserTask,\n  WorkflowEvent,\n} from '../data/entities'\nimport { logWorkflowEvent } from './event-logger'\nimport * as stepHandler from './step-handler'\nimport { branchToken } from './execution-token'\n\nexport interface AdvanceBranchesResult {\n  outcome: 'joined' | 'waiting' | 'failed'\n  error?: string\n}\n\nexport interface ResumeBranchOptions {\n  instanceId: string\n  branchInstanceId: string\n  tenantId: string\n  organizationId: string\n  /** Values merged into the branch's private namespace before resuming (task form data, signal payload, \u2026). */\n  contextMerge?: Record<string, any>\n  /** Step instance to exit (the paused step's instance) before the branch advances past it. */\n  exitStepInstanceId?: string | null\n  exitOutput?: any\n}\n\n/**\n * Resume a single paused/waiting branch: optionally merge data into its\n * namespace, exit its paused step instance, and mark it ACTIVE. The caller then\n * re-enters `executeWorkflow` (FORKED mode) so the interleaved loop advances the\n * branch and, if it is the last to arrive, fires the JOIN.\n *\n * Idempotent: a re-delivered signal/timer/task on an already-ACTIVE or terminal\n * branch is a no-op. Returns false when there is nothing to resume.\n */\nexport async function resumeBranch(\n  em: EntityManager,\n  options: ResumeBranchOptions,\n): Promise<boolean> {\n  const branch = await em.findOne(WorkflowBranchInstance, {\n    id: options.branchInstanceId,\n    workflowInstanceId: options.instanceId,\n    tenantId: options.tenantId,\n    organizationId: options.organizationId,\n  })\n\n  if (!branch) return false\n  if (branch.status !== 'PAUSED' && branch.status !== 'WAITING_FOR_ACTIVITIES') {\n    // Already active or terminal \u2014 re-delivery; nothing to do.\n    return false\n  }\n\n  const now = new Date()\n  if (options.contextMerge) {\n    branch.contextNamespace = { ...(branch.contextNamespace || {}), ...options.contextMerge }\n  }\n\n  if (options.exitStepInstanceId) {\n    const stepInstance = await em.findOne(StepInstance, {\n      id: options.exitStepInstanceId,\n      workflowInstanceId: options.instanceId,\n      status: 'ACTIVE',\n    })\n    if (stepInstance) {\n      await stepHandler.exitStep(em, stepInstance, options.exitOutput)\n    }\n  }\n\n  branch.status = 'ACTIVE'\n  branch.pendingTransition = null\n  branch.updatedAt = now\n  await em.flush()\n\n  return true\n}\n\ninterface ParallelContext {\n  userId?: string\n}\n\nfunction getNestedValue(obj: any, path: string): any {\n  return path.split('.').reduce((current, key) => (current == null ? undefined : current[key]), obj)\n}\n\n/**\n * Open a PARALLEL_FORK: create one ACTIVE branch per outgoing `auto` transition\n * and mark the instance FORKED. Branch tokens start positioned ON the fork step\n * so the interleaved loop runs each branch's fork transition (and its\n * activities) in that branch's own context.\n */\nexport async function openFork(\n  em: EntityManager,\n  instance: WorkflowInstance,\n  definition: WorkflowDefinition,\n  forkStepDef: any,\n): Promise<void> {\n  const forkStepId: string = forkStepDef.stepId\n  const joinStepId: string | undefined = forkStepDef.config?.joinStepId\n  if (!joinStepId) {\n    throw new Error(`[internal] PARALLEL_FORK \"${forkStepId}\" missing config.joinStepId`)\n  }\n\n  const outgoing = (definition.definition.transitions || []).filter(\n    (transition: any) => transition.fromStepId === forkStepId && transition.trigger === 'auto',\n  )\n\n  const now = new Date()\n  const branchKeys: string[] = []\n  for (const transition of outgoing) {\n    branchKeys.push(transition.transitionId)\n    const branch = em.create(WorkflowBranchInstance, {\n      workflowInstanceId: instance.id,\n      forkStepId,\n      joinStepId,\n      branchKey: transition.transitionId,\n      parentBranchId: null,\n      // Start ON the fork; advanceBranches runs the branch_key transition first.\n      currentStepId: forkStepId,\n      status: 'ACTIVE',\n      contextNamespace: {},\n      tenantId: instance.tenantId,\n      organizationId: instance.organizationId,\n      startedAt: now,\n      createdAt: now,\n      updatedAt: now,\n    })\n    em.persist(branch)\n  }\n\n  instance.status = 'FORKED'\n  instance.activeForkStepId = forkStepId\n  instance.updatedAt = now\n  await em.flush()\n\n  await logWorkflowEvent(em, {\n    workflowInstanceId: instance.id,\n    eventType: 'PARALLEL_FORK_OPENED',\n    eventData: { forkStepId, joinStepId, branchKeys },\n    tenantId: instance.tenantId,\n    organizationId: instance.organizationId,\n  })\n}\n\n/**\n * Resume a branch that was WAITING_FOR_ACTIVITIES after its async activities\n * finished. Mirrors the instance-level resume but scoped to the branch:\n * merges completed-activity outputs into the branch namespace, advances the\n * branch's pending transition target, and marks it ACTIVE (or FAILED if any\n * async activity failed). The caller re-enters the interleaved loop.\n */\nexport async function resumeBranchAfterActivities(\n  em: EntityManager,\n  container: AwilixContainer,\n  instanceId: string,\n  branchInstanceId: string,\n): Promise<{ continueExecution: boolean }> {\n  const branch = await em.findOne(\n    WorkflowBranchInstance,\n    { id: branchInstanceId, workflowInstanceId: instanceId },\n    { lockMode: LockMode.PESSIMISTIC_WRITE },\n  )\n  if (!branch) {\n    throw new Error('[internal] Branch not found during async resume')\n  }\n  if (branch.status !== 'WAITING_FOR_ACTIVITIES') {\n    // Re-delivery or already advanced \u2014 nothing to do.\n    return { continueExecution: false }\n  }\n\n  const namespace = branch.contextNamespace || {}\n  const pendingJobIds = (namespace._pendingAsyncActivities as any[]) || []\n\n  const completedEvents = await em.find(WorkflowEvent, {\n    workflowInstanceId: instanceId,\n    branchInstanceId,\n    eventType: 'ACTIVITY_COMPLETED',\n    eventData: { async: true },\n  })\n  const failedCount = await em.count(WorkflowEvent, {\n    workflowInstanceId: instanceId,\n    branchInstanceId,\n    eventType: 'ACTIVITY_FAILED',\n    eventData: { async: true },\n  })\n\n  if (completedEvents.length + failedCount < pendingJobIds.length) {\n    // Still waiting on other branch activities.\n    return { continueExecution: false }\n  }\n\n  const now = new Date()\n  if (failedCount > 0) {\n    branch.status = 'FAILED'\n    branch.errorMessage = `${failedCount} async activities failed in branch \"${branch.branchKey}\"`\n    branch.updatedAt = now\n    await em.flush()\n    // The interleaved loop will observe the FAILED branch and cancel siblings.\n    return { continueExecution: true }\n  }\n\n  const mergedNamespace: Record<string, any> = { ...namespace }\n  for (const event of completedEvents) {\n    if (event.eventData?.output) {\n      mergedNamespace[`${event.eventData.activityId}_result`] = event.eventData.output\n    }\n  }\n  delete mergedNamespace._pendingAsyncActivities\n  branch.contextNamespace = mergedNamespace\n\n  const pending = branch.pendingTransition\n  branch.pendingTransition = null\n  branch.status = 'ACTIVE'\n  branch.updatedAt = now\n  await em.flush()\n\n  // Execute the destination step in branch context (mirrors the instance-level\n  // resume) so the branch cursor lands on an executed step. The step may pause\n  // the branch again (e.g. a following USER_TASK); that is handled by the loop.\n  if (pending) {\n    const instance = await em.findOne(WorkflowInstance, { id: instanceId })\n    if (instance) {\n      branch.currentStepId = pending.toStepId\n      await em.flush()\n      await stepHandler.executeStep(\n        em,\n        instance,\n        pending.toStepId,\n        { workflowContext: { ...(instance.context || {}), ...(branch.contextNamespace || {}) } },\n        container,\n        branch,\n      )\n    }\n  }\n\n  return { continueExecution: true }\n}\n\n/**\n * Interleaved branch execution loop. Advances ACTIVE branches one step at a\n * time until either all branches reach the JOIN (\u2192 fireJoin \u2192 'joined'), a\n * branch fails (\u2192 cancel siblings + 'failed'), or no branch is ACTIVE because\n * they are all waiting on external resume (\u2192 'waiting').\n */\nexport async function advanceBranches(\n  em: EntityManager,\n  container: AwilixContainer,\n  instance: WorkflowInstance,\n  definition: WorkflowDefinition,\n  context: ParallelContext,\n): Promise<AdvanceBranchesResult> {\n  const forkStepId = instance.activeForkStepId\n  if (!forkStepId) {\n    throw new Error('[internal] advanceBranches called but instance has no active fork')\n  }\n\n  // Branch-aware iteration budget: each branch gets the same per-token budget as\n  // the single-token loop, so fan-out alone never trips the guard.\n  const allBranchesForBudget = await em.find(WorkflowBranchInstance, {\n    workflowInstanceId: instance.id,\n    forkStepId,\n  })\n  const maxIterations = Math.max(1, allBranchesForBudget.length) * 100\n  let iterations = 0\n\n  while (iterations < maxIterations) {\n    iterations++\n\n    const branches = await em.find(WorkflowBranchInstance, {\n      workflowInstanceId: instance.id,\n      forkStepId,\n    })\n\n    const active = branches.filter((b) => b.status === 'ACTIVE')\n\n    if (active.length === 0) {\n      const failed = branches.find((b) => b.status === 'FAILED')\n      if (failed) {\n        // A branch failed out-of-band (e.g. async-activity resume marked it\n        // FAILED); cancel any non-terminal siblings before failing the instance.\n        await cancelSiblings(em, instance, failed)\n        return { outcome: 'failed', error: failed.errorMessage || 'Branch failed' }\n      }\n      if (branches.every((b) => b.status === 'COMPLETED')) {\n        await fireJoin(em, instance, definition, branches, forkStepId)\n        return { outcome: 'joined' }\n      }\n      // Some branches paused/waiting for external resume \u2014 instance idles.\n      return { outcome: 'waiting' }\n    }\n\n    for (const branch of active) {\n      const result = await advanceOneBranch(em, container, instance, definition, branch, context)\n      if (result === 'failed') {\n        await cancelSiblings(em, instance, branch)\n        return { outcome: 'failed', error: branch.errorMessage || 'Branch failed' }\n      }\n    }\n  }\n\n  throw new Error('[internal] Maximum branch execution iterations reached - possible infinite loop')\n}\n\n/**\n * Advance a single ACTIVE branch by one step. Returns 'failed' if the branch\n * failed; otherwise mutates branch state (advanced / completed@join / paused).\n */\nasync function advanceOneBranch(\n  em: EntityManager,\n  container: AwilixContainer,\n  instance: WorkflowInstance,\n  definition: WorkflowDefinition,\n  branch: WorkflowBranchInstance,\n  context: ParallelContext,\n): Promise<'advanced' | 'failed'> {\n  // Already at the join \u2192 synchronize (mark completed, do not execute the join).\n  if (branch.currentStepId === branch.joinStepId) {\n    await completeBranchAtJoin(em, instance, branch)\n    return 'advanced'\n  }\n\n  const transitionHandler = await import('./transition-handler')\n\n  const token = branchToken(instance, branch)\n  // Token read context = instance snapshot overlaid with branch namespace.\n  const readContext = { ...(instance.context || {}), ...(branch.contextNamespace || {}) }\n  const evalContext = { workflowContext: readContext, userId: context.userId }\n\n  // Select the transition to take. Branches positioned on the fork follow their\n  // own branch_key transition; otherwise pick the highest-priority valid auto one.\n  let selected: any | null = null\n  if (branch.currentStepId === branch.forkStepId) {\n    selected = (definition.definition.transitions || []).find(\n      (transition: any) => transition.transitionId === branch.branchKey,\n    ) || null\n  } else {\n    const valid = await transitionHandler.findValidTransitions(\n      em,\n      instance,\n      branch.currentStepId,\n      evalContext,\n    )\n    const validAuto = valid.filter((vt) => vt.isValid && vt.transition?.trigger === 'auto')\n    selected = validAuto.length > 0 ? validAuto[0].transition : null\n  }\n\n  if (!selected) {\n    // No outgoing transition and not at the join \u2192 the branch is stuck.\n    await failBranch(em, instance, branch, `Branch \"${branch.branchKey}\" has no valid transition from \"${branch.currentStepId}\"`)\n    return 'failed'\n  }\n\n  try {\n    const transitionResult = await transitionHandler.executeTransitionForToken(\n      em,\n      container,\n      token,\n      selected.fromStepId,\n      selected.toStepId,\n      evalContext,\n    )\n\n    if (!transitionResult.success) {\n      await failBranch(em, instance, branch, transitionResult.error || 'Branch transition failed')\n      return 'failed'\n    }\n\n    // executeTransitionForToken set branch.currentStepId = toStepId. If that is\n    // the join, synchronize now (the join step itself is a no-op).\n    if (branch.currentStepId === branch.joinStepId) {\n      await completeBranchAtJoin(em, instance, branch)\n    }\n    return 'advanced'\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error)\n    await failBranch(em, instance, branch, message)\n    return 'failed'\n  }\n}\n\nasync function completeBranchAtJoin(\n  em: EntityManager,\n  instance: WorkflowInstance,\n  branch: WorkflowBranchInstance,\n): Promise<void> {\n  const now = new Date()\n  branch.status = 'COMPLETED'\n  branch.completedAt = now\n  branch.updatedAt = now\n  await em.flush()\n\n  await logWorkflowEvent(em, {\n    workflowInstanceId: instance.id,\n    branchInstanceId: branch.id,\n    eventType: 'PARALLEL_BRANCH_COMPLETED',\n    eventData: { branchKey: branch.branchKey, joinStepId: branch.joinStepId },\n    tenantId: instance.tenantId,\n    organizationId: instance.organizationId,\n  })\n}\n\nasync function failBranch(\n  em: EntityManager,\n  instance: WorkflowInstance,\n  branch: WorkflowBranchInstance,\n  message: string,\n): Promise<void> {\n  const now = new Date()\n  branch.status = 'FAILED'\n  branch.errorMessage = message\n  branch.updatedAt = now\n  await em.flush()\n\n  await logWorkflowEvent(em, {\n    workflowInstanceId: instance.id,\n    branchInstanceId: branch.id,\n    eventType: 'PARALLEL_BRANCH_FAILED',\n    eventData: { branchKey: branch.branchKey, error: message },\n    tenantId: instance.tenantId,\n    organizationId: instance.organizationId,\n  })\n}\n\n/**\n * Cancel sibling branches of a failed branch (best-effort), cancel their open\n * user tasks, and log a cancellation event per branch.\n */\nasync function cancelSiblings(\n  em: EntityManager,\n  instance: WorkflowInstance,\n  failedBranch: WorkflowBranchInstance,\n): Promise<void> {\n  const siblings = await em.find(WorkflowBranchInstance, {\n    workflowInstanceId: instance.id,\n    forkStepId: failedBranch.forkStepId,\n  })\n\n  const now = new Date()\n  for (const sibling of siblings) {\n    if (sibling.id === failedBranch.id) continue\n    if (sibling.status === 'ACTIVE' || sibling.status === 'PAUSED' || sibling.status === 'WAITING_FOR_ACTIVITIES') {\n      sibling.status = 'CANCELLED'\n      sibling.updatedAt = now\n\n      // Best-effort: cancel the branch's open user tasks.\n      const openTasks = await em.find(UserTask, {\n        workflowInstanceId: instance.id,\n        branchInstanceId: sibling.id,\n        status: 'PENDING',\n      })\n      for (const task of openTasks) {\n        task.status = 'CANCELLED'\n        task.updatedAt = now\n      }\n\n      await em.flush()\n\n      await logWorkflowEvent(em, {\n        workflowInstanceId: instance.id,\n        branchInstanceId: sibling.id,\n        eventType: 'PARALLEL_BRANCH_CANCELLED',\n        eventData: { branchKey: sibling.branchKey, reason: 'sibling-failed' },\n        tenantId: instance.tenantId,\n        organizationId: instance.organizationId,\n      })\n    }\n  }\n\n  await logWorkflowEvent(em, {\n    workflowInstanceId: instance.id,\n    eventType: 'PARALLEL_FORK_FAILED',\n    eventData: { forkStepId: failedBranch.forkStepId, failedBranchKey: failedBranch.branchKey },\n    tenantId: instance.tenantId,\n    organizationId: instance.organizationId,\n  })\n}\n\n/**\n * Fire the JOIN once all branches are COMPLETED: merge each branch namespace\n * under `instance.context.branches[branchKey]`, apply optional outputMapping to\n * lift selected values to the top level, then resume the root token at the step\n * after the JOIN.\n */\nasync function fireJoin(\n  em: EntityManager,\n  instance: WorkflowInstance,\n  definition: WorkflowDefinition,\n  branches: WorkflowBranchInstance[],\n  forkStepId: string,\n): Promise<void> {\n  const joinStepId = branches[0]?.joinStepId\n  if (!joinStepId) {\n    throw new Error('[internal] fireJoin called without a join step id')\n  }\n\n  const joinStep = definition.definition.steps.find((s: any) => s.stepId === joinStepId)\n\n  // Deterministic merge \u2014 no silent collisions: each branch keeps its own slot.\n  const branchesContext: Record<string, any> = { ...(instance.context?.branches || {}) }\n  const mergedBranchKeys: string[] = []\n  for (const branch of branches) {\n    branchesContext[branch.branchKey] = branch.contextNamespace || {}\n    mergedBranchKeys.push(branch.branchKey)\n  }\n\n  let nextContext: Record<string, any> = {\n    ...(instance.context || {}),\n    branches: branchesContext,\n  }\n\n  // Optional outputMapping: topLevelKey -> 'branches.<branchKey>.<path>'. The\n  // reserved `branches` slot map is never overwritten \u2014 guard it explicitly so a\n  // mapping cannot clobber the per-branch namespaces.\n  const outputMapping: Record<string, string> | undefined = joinStep?.config?.outputMapping\n  if (outputMapping) {\n    for (const [topKey, sourcePath] of Object.entries(outputMapping)) {\n      if (topKey === 'branches') continue\n      const value = getNestedValue(nextContext, sourcePath)\n      if (value !== undefined) nextContext[topKey] = value\n    }\n  }\n\n  // Park the root token ON the JOIN step (not its successor) and let the\n  // single-token executor loop run the JOIN's outgoing transition. Jumping\n  // straight to the post-join step would bypass stepHandler.executeStep() for\n  // that step \u2014 so a following USER_TASK / WAIT_FOR_TIMER / WAIT_FOR_SIGNAL would\n  // never have its task created / timer enqueued / signal wait registered (the\n  // instance would hang), and any activities on the JOIN's outgoing transition\n  // would be skipped. The JOIN step itself is a no-op, so the loop simply runs\n  // its outgoing transition through the normal step-entry path.\n  const afterJoinStepId = (definition.definition.transitions || []).find(\n    (transition: any) => transition.fromStepId === joinStepId,\n  )?.toStepId ?? null\n\n  const now = new Date()\n  instance.context = nextContext\n  instance.status = 'RUNNING'\n  instance.activeForkStepId = null\n  instance.currentStepId = joinStepId\n  instance.updatedAt = now\n  await em.flush()\n\n  await logWorkflowEvent(em, {\n    workflowInstanceId: instance.id,\n    eventType: 'PARALLEL_JOIN_COMPLETED',\n    eventData: { forkStepId, joinStepId, mergedBranchKeys, afterJoinStepId },\n    tenantId: instance.tenantId,\n    organizationId: instance.organizationId,\n  })\n}\n"],
-  "mappings": "AAqBA,SAAwB,gBAAgB;AAExC;AAAA,EACE;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,wBAAwB;AACjC,YAAY,iBAAiB;AAC7B,SAAS,mBAAmB;AA4B5B,eAAsB,aACpB,IACA,SACkB;AAClB,QAAM,SAAS,MAAM,GAAG,QAAQ,wBAAwB;AAAA,IACtD,IAAI,QAAQ;AAAA,IACZ,oBAAoB,QAAQ;AAAA,IAC5B,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ;AAAA,EAC1B,CAAC;AAED,MAAI,CAAC,OAAQ,QAAO;AACpB,MAAI,OAAO,WAAW,YAAY,OAAO,WAAW,0BAA0B;AAE5E,WAAO;AAAA,EACT;AAEA,QAAM,MAAM,oBAAI,KAAK;AACrB,MAAI,QAAQ,cAAc;AACxB,WAAO,mBAAmB,EAAE,GAAI,OAAO,oBAAoB,CAAC,GAAI,GAAG,QAAQ,aAAa;AAAA,EAC1F;AAEA,MAAI,QAAQ,oBAAoB;AAC9B,UAAM,eAAe,MAAM,GAAG,QAAQ,cAAc;AAAA,MAClD,IAAI,QAAQ;AAAA,MACZ,oBAAoB,QAAQ;AAAA,MAC5B,QAAQ;AAAA,IACV,CAAC;AACD,QAAI,cAAc;AAChB,YAAM,YAAY,SAAS,IAAI,cAAc,QAAQ,UAAU;AAAA,IACjE;AAAA,EACF;AAEA,SAAO,SAAS;AAChB,SAAO,oBAAoB;AAC3B,SAAO,YAAY;AACnB,QAAM,GAAG,MAAM;AAEf,SAAO;AACT;AAMA,SAAS,eAAe,KAAU,MAAmB;AACnD,SAAO,KAAK,MAAM,GAAG,EAAE,OAAO,CAAC,SAAS,QAAS,WAAW,OAAO,SAAY,QAAQ,GAAG,GAAI,GAAG;AACnG;AAQA,eAAsB,SACpB,IACA,UACA,YACA,aACe;AACf,QAAM,aAAqB,YAAY;AACvC,QAAM,aAAiC,YAAY,QAAQ;AAC3D,MAAI,CAAC,YAAY;AACf,UAAM,IAAI,MAAM,6BAA6B,UAAU,6BAA6B;AAAA,EACtF;AAEA,QAAM,YAAY,WAAW,WAAW,eAAe,CAAC,GAAG;AAAA,IACzD,CAAC,eAAoB,WAAW,eAAe,cAAc,WAAW,YAAY;AAAA,EACtF;AAEA,QAAM,MAAM,oBAAI,KAAK;AACrB,QAAM,aAAuB,CAAC;AAC9B,aAAW,cAAc,UAAU;AACjC,eAAW,KAAK,WAAW,YAAY;AACvC,UAAM,SAAS,GAAG,OAAO,wBAAwB;AAAA,MAC/C,oBAAoB,SAAS;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,WAAW,WAAW;AAAA,MACtB,gBAAgB;AAAA;AAAA,MAEhB,eAAe;AAAA,MACf,QAAQ;AAAA,MACR,kBAAkB,CAAC;AAAA,MACnB,UAAU,SAAS;AAAA,MACnB,gBAAgB,SAAS;AAAA,MACzB,WAAW;AAAA,MACX,WAAW;AAAA,MACX,WAAW;AAAA,IACb,CAAC;AACD,OAAG,QAAQ,MAAM;AAAA,EACnB;AAEA,WAAS,SAAS;AAClB,WAAS,mBAAmB;AAC5B,WAAS,YAAY;AACrB,QAAM,GAAG,MAAM;AAEf,QAAM,iBAAiB,IAAI;AAAA,IACzB,oBAAoB,SAAS;AAAA,IAC7B,WAAW;AAAA,IACX,WAAW,EAAE,YAAY,YAAY,WAAW;AAAA,IAChD,UAAU,SAAS;AAAA,IACnB,gBAAgB,SAAS;AAAA,EAC3B,CAAC;AACH;AASA,eAAsB,4BACpB,IACA,WACA,YACA,kBACyC;AACzC,QAAM,SAAS,MAAM,GAAG;AAAA,IACtB;AAAA,IACA,EAAE,IAAI,kBAAkB,oBAAoB,WAAW;AAAA,IACvD,EAAE,UAAU,SAAS,kBAAkB;AAAA,EACzC;AACA,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,MAAM,iDAAiD;AAAA,EACnE;AACA,MAAI,OAAO,WAAW,0BAA0B;AAE9C,WAAO,EAAE,mBAAmB,MAAM;AAAA,EACpC;AAEA,QAAM,YAAY,OAAO,oBAAoB,CAAC;AAC9C,QAAM,gBAAiB,UAAU,2BAAqC,CAAC;AAEvE,QAAM,kBAAkB,MAAM,GAAG,KAAK,eAAe;AAAA,IACnD,oBAAoB;AAAA,IACpB;AAAA,IACA,WAAW;AAAA,IACX,WAAW,EAAE,OAAO,KAAK;AAAA,EAC3B,CAAC;AACD,QAAM,cAAc,MAAM,GAAG,MAAM,eAAe;AAAA,IAChD,oBAAoB;AAAA,IACpB;AAAA,IACA,WAAW;AAAA,IACX,WAAW,EAAE,OAAO,KAAK;AAAA,EAC3B,CAAC;AAED,MAAI,gBAAgB,SAAS,cAAc,cAAc,QAAQ;AAE/D,WAAO,EAAE,mBAAmB,MAAM;AAAA,EACpC;AAEA,QAAM,MAAM,oBAAI,KAAK;AACrB,MAAI,cAAc,GAAG;AACnB,WAAO,SAAS;AAChB,WAAO,eAAe,GAAG,WAAW,uCAAuC,OAAO,SAAS;AAC3F,WAAO,YAAY;AACnB,UAAM,GAAG,MAAM;AAEf,WAAO,EAAE,mBAAmB,KAAK;AAAA,EACnC;AAEA,QAAM,kBAAuC,EAAE,GAAG,UAAU;AAC5D,aAAW,SAAS,iBAAiB;AACnC,QAAI,MAAM,WAAW,QAAQ;AAC3B,sBAAgB,GAAG,MAAM,UAAU,UAAU,SAAS,IAAI,MAAM,UAAU;AAAA,IAC5E;AAAA,EACF;AACA,SAAO,gBAAgB;AACvB,SAAO,mBAAmB;AAE1B,QAAM,UAAU,OAAO;AACvB,SAAO,oBAAoB;AAC3B,SAAO,SAAS;AAChB,SAAO,YAAY;AACnB,QAAM,GAAG,MAAM;AAKf,MAAI,SAAS;AACX,UAAM,WAAW,MAAM,GAAG,QAAQ,kBAAkB,EAAE,IAAI,WAAW,CAAC;AACtE,QAAI,UAAU;AACZ,aAAO,gBAAgB,QAAQ;AAC/B,YAAM,GAAG,MAAM;AACf,YAAM,YAAY;AAAA,QAChB;AAAA,QACA;AAAA,QACA,QAAQ;AAAA,QACR,EAAE,iBAAiB,EAAE,GAAI,SAAS,WAAW,CAAC,GAAI,GAAI,OAAO,oBAAoB,CAAC,EAAG,EAAE;AAAA,QACvF;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,mBAAmB,KAAK;AACnC;AAQA,eAAsB,gBACpB,IACA,WACA,UACA,YACA,SACgC;AAChC,QAAM,aAAa,SAAS;AAC5B,MAAI,CAAC,YAAY;AACf,UAAM,IAAI,MAAM,mEAAmE;AAAA,EACrF;AAIA,QAAM,uBAAuB,MAAM,GAAG,KAAK,wBAAwB;AAAA,IACjE,oBAAoB,SAAS;AAAA,IAC7B;AAAA,EACF,CAAC;AACD,QAAM,gBAAgB,KAAK,IAAI,GAAG,qBAAqB,MAAM,IAAI;AACjE,MAAI,aAAa;AAEjB,SAAO,aAAa,eAAe;AACjC;AAEA,UAAM,WAAW,MAAM,GAAG,KAAK,wBAAwB;AAAA,MACrD,oBAAoB,SAAS;AAAA,MAC7B;AAAA,IACF,CAAC;AAED,UAAM,SAAS,SAAS,OAAO,CAAC,MAAM,EAAE,WAAW,QAAQ;AAE3D,QAAI,OAAO,WAAW,GAAG;AACvB,YAAM,SAAS,SAAS,KAAK,CAAC,MAAM,EAAE,WAAW,QAAQ;AACzD,UAAI,QAAQ;AAGV,cAAM,eAAe,IAAI,UAAU,MAAM;AACzC,eAAO,EAAE,SAAS,UAAU,OAAO,OAAO,gBAAgB,gBAAgB;AAAA,MAC5E;AACA,UAAI,SAAS,MAAM,CAAC,MAAM,EAAE,WAAW,WAAW,GAAG;AACnD,cAAM,SAAS,IAAI,UAAU,YAAY,UAAU,UAAU;AAC7D,eAAO,EAAE,SAAS,SAAS;AAAA,MAC7B;AAEA,aAAO,EAAE,SAAS,UAAU;AAAA,IAC9B;AAEA,eAAW,UAAU,QAAQ;AAC3B,YAAM,SAAS,MAAM,iBAAiB,IAAI,WAAW,UAAU,YAAY,QAAQ,OAAO;AAC1F,UAAI,WAAW,UAAU;AACvB,cAAM,eAAe,IAAI,UAAU,MAAM;AACzC,eAAO,EAAE,SAAS,UAAU,OAAO,OAAO,gBAAgB,gBAAgB;AAAA,MAC5E;AAAA,IACF;AAAA,EACF;AAEA,QAAM,IAAI,MAAM,iFAAiF;AACnG;AAMA,eAAe,iBACb,IACA,WACA,UACA,YACA,QACA,SACgC;AAEhC,MAAI,OAAO,kBAAkB,OAAO,YAAY;AAC9C,UAAM,qBAAqB,IAAI,UAAU,MAAM;AAC/C,WAAO;AAAA,EACT;AAEA,QAAM,oBAAoB,MAAM,OAAO,sBAAsB;AAE7D,QAAM,QAAQ,YAAY,UAAU,MAAM;AAE1C,QAAM,cAAc,EAAE,GAAI,SAAS,WAAW,CAAC,GAAI,GAAI,OAAO,oBAAoB,CAAC,EAAG;AACtF,QAAM,cAAc,EAAE,iBAAiB,aAAa,QAAQ,QAAQ,OAAO;AAI3E,MAAI,WAAuB;AAC3B,MAAI,OAAO,kBAAkB,OAAO,YAAY;AAC9C,gBAAY,WAAW,WAAW,eAAe,CAAC,GAAG;AAAA,MACnD,CAAC,eAAoB,WAAW,iBAAiB,OAAO;AAAA,IAC1D,KAAK;AAAA,EACP,OAAO;AACL,UAAM,QAAQ,MAAM,kBAAkB;AAAA,MACpC;AAAA,MACA;AAAA,MACA,OAAO;AAAA,MACP;AAAA,IACF;AACA,UAAM,YAAY,MAAM,OAAO,CAAC,OAAO,GAAG,WAAW,GAAG,YAAY,YAAY,MAAM;AACtF,eAAW,UAAU,SAAS,IAAI,UAAU,CAAC,EAAE,aAAa;AAAA,EAC9D;AAEA,MAAI,CAAC,UAAU;AAEb,UAAM,WAAW,IAAI,UAAU,QAAQ,WAAW,OAAO,SAAS,mCAAmC,OAAO,aAAa,GAAG;AAC5H,WAAO;AAAA,EACT;AAEA,MAAI;AACF,UAAM,mBAAmB,MAAM,kBAAkB;AAAA,MAC/C;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT,SAAS;AAAA,MACT;AAAA,IACF;AAEA,QAAI,CAAC,iBAAiB,SAAS;AAC7B,YAAM,WAAW,IAAI,UAAU,QAAQ,iBAAiB,SAAS,0BAA0B;AAC3F,aAAO;AAAA,IACT;AAIA,QAAI,OAAO,kBAAkB,OAAO,YAAY;AAC9C,YAAM,qBAAqB,IAAI,UAAU,MAAM;AAAA,IACjD;AACA,WAAO;AAAA,EACT,SAAS,OAAO;AACd,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,UAAM,WAAW,IAAI,UAAU,QAAQ,OAAO;AAC9C,WAAO;AAAA,EACT;AACF;AAEA,eAAe,qBACb,IACA,UACA,QACe;AACf,QAAM,MAAM,oBAAI,KAAK;AACrB,SAAO,SAAS;AAChB,SAAO,cAAc;AACrB,SAAO,YAAY;AACnB,QAAM,GAAG,MAAM;AAEf,QAAM,iBAAiB,IAAI;AAAA,IACzB,oBAAoB,SAAS;AAAA,IAC7B,kBAAkB,OAAO;AAAA,IACzB,WAAW;AAAA,IACX,WAAW,EAAE,WAAW,OAAO,WAAW,YAAY,OAAO,WAAW;AAAA,IACxE,UAAU,SAAS;AAAA,IACnB,gBAAgB,SAAS;AAAA,EAC3B,CAAC;AACH;AAEA,eAAe,WACb,IACA,UACA,QACA,SACe;AACf,QAAM,MAAM,oBAAI,KAAK;AACrB,SAAO,SAAS;AAChB,SAAO,eAAe;AACtB,SAAO,YAAY;AACnB,QAAM,GAAG,MAAM;AAEf,QAAM,iBAAiB,IAAI;AAAA,IACzB,oBAAoB,SAAS;AAAA,IAC7B,kBAAkB,OAAO;AAAA,IACzB,WAAW;AAAA,IACX,WAAW,EAAE,WAAW,OAAO,WAAW,OAAO,QAAQ;AAAA,IACzD,UAAU,SAAS;AAAA,IACnB,gBAAgB,SAAS;AAAA,EAC3B,CAAC;AACH;AAMA,eAAe,eACb,IACA,UACA,cACe;AACf,QAAM,WAAW,MAAM,GAAG,KAAK,wBAAwB;AAAA,IACrD,oBAAoB,SAAS;AAAA,IAC7B,YAAY,aAAa;AAAA,EAC3B,CAAC;AAED,QAAM,MAAM,oBAAI,KAAK;AACrB,aAAW,WAAW,UAAU;AAC9B,QAAI,QAAQ,OAAO,aAAa,GAAI;AACpC,QAAI,QAAQ,WAAW,YAAY,QAAQ,WAAW,YAAY,QAAQ,WAAW,0BAA0B;AAC7G,cAAQ,SAAS;AACjB,cAAQ,YAAY;AAGpB,YAAM,YAAY,MAAM,GAAG,KAAK,UAAU;AAAA,QACxC,oBAAoB,SAAS;AAAA,QAC7B,kBAAkB,QAAQ;AAAA,QAC1B,QAAQ;AAAA,MACV,CAAC;AACD,iBAAW,QAAQ,WAAW;AAC5B,aAAK,SAAS;AACd,aAAK,YAAY;AAAA,MACnB;AAEA,YAAM,GAAG,MAAM;AAEf,YAAM,iBAAiB,IAAI;AAAA,QACzB,oBAAoB,SAAS;AAAA,QAC7B,kBAAkB,QAAQ;AAAA,QAC1B,WAAW;AAAA,QACX,WAAW,EAAE,WAAW,QAAQ,WAAW,QAAQ,iBAAiB;AAAA,QACpE,UAAU,SAAS;AAAA,QACnB,gBAAgB,SAAS;AAAA,MAC3B,CAAC;AAAA,IACH;AAAA,EACF;AAEA,QAAM,iBAAiB,IAAI;AAAA,IACzB,oBAAoB,SAAS;AAAA,IAC7B,WAAW;AAAA,IACX,WAAW,EAAE,YAAY,aAAa,YAAY,iBAAiB,aAAa,UAAU;AAAA,IAC1F,UAAU,SAAS;AAAA,IACnB,gBAAgB,SAAS;AAAA,EAC3B,CAAC;AACH;AAQA,eAAe,SACb,IACA,UACA,YACA,UACA,YACe;AACf,QAAM,aAAa,SAAS,CAAC,GAAG;AAChC,MAAI,CAAC,YAAY;AACf,UAAM,IAAI,MAAM,mDAAmD;AAAA,EACrE;AAEA,QAAM,WAAW,WAAW,WAAW,MAAM,KAAK,CAAC,MAAW,EAAE,WAAW,UAAU;AAGrF,QAAM,kBAAuC,EAAE,GAAI,SAAS,SAAS,YAAY,CAAC,EAAG;AACrF,QAAM,mBAA6B,CAAC;AACpC,aAAW,UAAU,UAAU;AAC7B,oBAAgB,OAAO,SAAS,IAAI,OAAO,oBAAoB,CAAC;AAChE,qBAAiB,KAAK,OAAO,SAAS;AAAA,EACxC;AAEA,MAAI,cAAmC;AAAA,IACrC,GAAI,SAAS,WAAW,CAAC;AAAA,IACzB,UAAU;AAAA,EACZ;AAKA,QAAM,gBAAoD,UAAU,QAAQ;AAC5E,MAAI,eAAe;AACjB,eAAW,CAAC,QAAQ,UAAU,KAAK,OAAO,QAAQ,aAAa,GAAG;AAChE,UAAI,WAAW,WAAY;AAC3B,YAAM,QAAQ,eAAe,aAAa,UAAU;AACpD,UAAI,UAAU,OAAW,aAAY,MAAM,IAAI;AAAA,IACjD;AAAA,EACF;AAUA,QAAM,mBAAmB,WAAW,WAAW,eAAe,CAAC,GAAG;AAAA,IAChE,CAAC,eAAoB,WAAW,eAAe;AAAA,EACjD,GAAG,YAAY;AAEf,QAAM,MAAM,oBAAI,KAAK;AACrB,WAAS,UAAU;AACnB,WAAS,SAAS;AAClB,WAAS,mBAAmB;AAC5B,WAAS,gBAAgB;AACzB,WAAS,YAAY;AACrB,QAAM,GAAG,MAAM;AAEf,QAAM,iBAAiB,IAAI;AAAA,IACzB,oBAAoB,SAAS;AAAA,IAC7B,WAAW;AAAA,IACX,WAAW,EAAE,YAAY,YAAY,kBAAkB,gBAAgB;AAAA,IACvE,UAAU,SAAS;AAAA,IACnB,gBAAgB,SAAS;AAAA,EAC3B,CAAC;AACH;",
+  "sourcesContent": ["/**\n * Workflows Module - Parallel Fork / Join Handler\n *\n * Implements PARALLEL_FORK / PARALLEL_JOIN execution with a multi-token model:\n *\n *  - `openFork` turns a PARALLEL_FORK step into N persistent branch tokens\n *    (`WorkflowBranchInstance`), one per outgoing `auto` transition, and puts the\n *    instance into the dormant `FORKED` state.\n *  - `advanceBranches` runs the interleaved loop: while the instance is FORKED it\n *    advances each ACTIVE branch one step at a time (BPMN semantics \u2014 single lock,\n *    no thread-level concurrency). A branch pauses independently (USER_TASK /\n *    signal / timer / async activity) without blocking siblings.\n *  - When every branch has reached its JOIN (wait-all), `fireJoin` merges the\n *    branch namespaces back into `instance.context`, applies optional\n *    `outputMapping`, and resumes the root token at the step after the JOIN.\n *  - A failed branch cancels its siblings and fails the whole instance.\n *\n * All work happens under the executor's pessimistic instance lock + transaction,\n * so wait-all counting and JOIN firing are race-free.\n */\n\nimport { EntityManager, LockMode } from '@mikro-orm/core'\nimport type { AwilixContainer } from 'awilix'\nimport {\n  WorkflowInstance,\n  WorkflowBranchInstance,\n  WorkflowDefinition,\n  StepInstance,\n  UserTask,\n  WorkflowEvent,\n} from '../data/entities'\nimport { logWorkflowEvent } from './event-logger'\nimport * as stepHandler from './step-handler'\nimport { branchToken } from './execution-token'\n\nexport interface AdvanceBranchesResult {\n  outcome: 'joined' | 'waiting' | 'failed'\n  error?: string\n}\n\nexport interface ResumeBranchOptions {\n  instanceId: string\n  branchInstanceId: string\n  tenantId: string\n  organizationId: string\n  /** Values merged into the branch's private namespace before resuming (task form data, signal payload, \u2026). */\n  contextMerge?: Record<string, any>\n  /** Step instance to exit (the paused step's instance) before the branch advances past it. */\n  exitStepInstanceId?: string | null\n  exitOutput?: any\n}\n\n/**\n * Resume a single paused/waiting branch: optionally merge data into its\n * namespace, exit its paused step instance, and mark it ACTIVE. The caller then\n * re-enters `executeWorkflow` (FORKED mode) so the interleaved loop advances the\n * branch and, if it is the last to arrive, fires the JOIN.\n *\n * Idempotent: a re-delivered signal/timer/task on an already-ACTIVE or terminal\n * branch is a no-op. Returns false when there is nothing to resume.\n */\nexport async function resumeBranch(\n  em: EntityManager,\n  options: ResumeBranchOptions,\n): Promise<boolean> {\n  const branch = await em.findOne(WorkflowBranchInstance, {\n    id: options.branchInstanceId,\n    workflowInstanceId: options.instanceId,\n    tenantId: options.tenantId,\n    organizationId: options.organizationId,\n  })\n\n  if (!branch) return false\n  if (branch.status !== 'PAUSED' && branch.status !== 'WAITING_FOR_ACTIVITIES') {\n    // Already active or terminal \u2014 re-delivery; nothing to do.\n    return false\n  }\n\n  const now = new Date()\n  if (options.contextMerge) {\n    branch.contextNamespace = { ...(branch.contextNamespace || {}), ...options.contextMerge }\n  }\n\n  if (options.exitStepInstanceId) {\n    const stepInstance = await em.findOne(StepInstance, {\n      id: options.exitStepInstanceId,\n      workflowInstanceId: options.instanceId,\n      status: 'ACTIVE',\n    })\n    if (stepInstance) {\n      await stepHandler.exitStep(em, stepInstance, options.exitOutput)\n    }\n  }\n\n  branch.status = 'ACTIVE'\n  branch.pendingTransition = null\n  branch.updatedAt = now\n  await em.flush()\n\n  return true\n}\n\ninterface ParallelContext {\n  userId?: string\n}\n\nfunction normalizeWorkflowUserId(value: unknown): string | null {\n  if (typeof value !== 'string') return null\n  const trimmed = value.trim()\n  if (!trimmed || trimmed.startsWith('trigger:')) return null\n  return trimmed\n}\n\nfunction getNestedValue(obj: any, path: string): any {\n  return path.split('.').reduce((current, key) => (current == null ? undefined : current[key]), obj)\n}\n\n/**\n * Open a PARALLEL_FORK: create one ACTIVE branch per outgoing `auto` transition\n * and mark the instance FORKED. Branch tokens start positioned ON the fork step\n * so the interleaved loop runs each branch's fork transition (and its\n * activities) in that branch's own context.\n */\nexport async function openFork(\n  em: EntityManager,\n  instance: WorkflowInstance,\n  definition: WorkflowDefinition,\n  forkStepDef: any,\n): Promise<void> {\n  const forkStepId: string = forkStepDef.stepId\n  const joinStepId: string | undefined = forkStepDef.config?.joinStepId\n  if (!joinStepId) {\n    throw new Error(`[internal] PARALLEL_FORK \"${forkStepId}\" missing config.joinStepId`)\n  }\n\n  const outgoing = (definition.definition.transitions || []).filter(\n    (transition: any) => transition.fromStepId === forkStepId && transition.trigger === 'auto',\n  )\n\n  const now = new Date()\n  const branchKeys: string[] = []\n  for (const transition of outgoing) {\n    branchKeys.push(transition.transitionId)\n    const branch = em.create(WorkflowBranchInstance, {\n      workflowInstanceId: instance.id,\n      forkStepId,\n      joinStepId,\n      branchKey: transition.transitionId,\n      parentBranchId: null,\n      // Start ON the fork; advanceBranches runs the branch_key transition first.\n      currentStepId: forkStepId,\n      status: 'ACTIVE',\n      contextNamespace: {},\n      tenantId: instance.tenantId,\n      organizationId: instance.organizationId,\n      startedAt: now,\n      createdAt: now,\n      updatedAt: now,\n    })\n    em.persist(branch)\n  }\n\n  instance.status = 'FORKED'\n  instance.activeForkStepId = forkStepId\n  instance.updatedAt = now\n  await em.flush()\n\n  await logWorkflowEvent(em, {\n    workflowInstanceId: instance.id,\n    eventType: 'PARALLEL_FORK_OPENED',\n    eventData: { forkStepId, joinStepId, branchKeys },\n    tenantId: instance.tenantId,\n    organizationId: instance.organizationId,\n  })\n}\n\n/**\n * Resume a branch that was WAITING_FOR_ACTIVITIES after its async activities\n * finished. Mirrors the instance-level resume but scoped to the branch:\n * merges completed-activity outputs into the branch namespace, advances the\n * branch's pending transition target, and marks it ACTIVE (or FAILED if any\n * async activity failed). The caller re-enters the interleaved loop.\n */\nexport async function resumeBranchAfterActivities(\n  em: EntityManager,\n  container: AwilixContainer,\n  instanceId: string,\n  branchInstanceId: string,\n): Promise<{ continueExecution: boolean }> {\n  const branch = await em.findOne(\n    WorkflowBranchInstance,\n    { id: branchInstanceId, workflowInstanceId: instanceId },\n    { lockMode: LockMode.PESSIMISTIC_WRITE },\n  )\n  if (!branch) {\n    throw new Error('[internal] Branch not found during async resume')\n  }\n  if (branch.status !== 'WAITING_FOR_ACTIVITIES') {\n    // Re-delivery or already advanced \u2014 nothing to do.\n    return { continueExecution: false }\n  }\n\n  const namespace = branch.contextNamespace || {}\n  const pendingJobIds = (namespace._pendingAsyncActivities as any[]) || []\n\n  const completedEvents = await em.find(WorkflowEvent, {\n    workflowInstanceId: instanceId,\n    branchInstanceId,\n    eventType: 'ACTIVITY_COMPLETED',\n    eventData: { async: true },\n  })\n  const failedCount = await em.count(WorkflowEvent, {\n    workflowInstanceId: instanceId,\n    branchInstanceId,\n    eventType: 'ACTIVITY_FAILED',\n    eventData: { async: true },\n  })\n\n  if (completedEvents.length + failedCount < pendingJobIds.length) {\n    // Still waiting on other branch activities.\n    return { continueExecution: false }\n  }\n\n  const now = new Date()\n  if (failedCount > 0) {\n    branch.status = 'FAILED'\n    branch.errorMessage = `${failedCount} async activities failed in branch \"${branch.branchKey}\"`\n    branch.updatedAt = now\n    await em.flush()\n    // The interleaved loop will observe the FAILED branch and cancel siblings.\n    return { continueExecution: true }\n  }\n\n  const mergedNamespace: Record<string, any> = { ...namespace }\n  for (const event of completedEvents) {\n    if (event.eventData?.output) {\n      mergedNamespace[`${event.eventData.activityId}_result`] = event.eventData.output\n    }\n  }\n  delete mergedNamespace._pendingAsyncActivities\n  branch.contextNamespace = mergedNamespace\n\n  const pending = branch.pendingTransition\n  branch.pendingTransition = null\n  branch.status = 'ACTIVE'\n  branch.updatedAt = now\n  await em.flush()\n\n  // Execute the destination step in branch context (mirrors the instance-level\n  // resume) so the branch cursor lands on an executed step. The step may pause\n  // the branch again (e.g. a following USER_TASK); that is handled by the loop.\n  if (pending) {\n    const instance = await em.findOne(WorkflowInstance, { id: instanceId })\n    if (instance) {\n      branch.currentStepId = pending.toStepId\n      await em.flush()\n      await stepHandler.executeStep(\n        em,\n        instance,\n        pending.toStepId,\n        {\n          workflowContext: { ...(instance.context || {}), ...(branch.contextNamespace || {}) },\n          userId: normalizeWorkflowUserId(instance.metadata?.initiatedBy) ?? undefined,\n        },\n        container,\n        branch,\n      )\n    }\n  }\n\n  return { continueExecution: true }\n}\n\n/**\n * Interleaved branch execution loop. Advances ACTIVE branches one step at a\n * time until either all branches reach the JOIN (\u2192 fireJoin \u2192 'joined'), a\n * branch fails (\u2192 cancel siblings + 'failed'), or no branch is ACTIVE because\n * they are all waiting on external resume (\u2192 'waiting').\n */\nexport async function advanceBranches(\n  em: EntityManager,\n  container: AwilixContainer,\n  instance: WorkflowInstance,\n  definition: WorkflowDefinition,\n  context: ParallelContext,\n): Promise<AdvanceBranchesResult> {\n  const forkStepId = instance.activeForkStepId\n  if (!forkStepId) {\n    throw new Error('[internal] advanceBranches called but instance has no active fork')\n  }\n\n  // Branch-aware iteration budget: each branch gets the same per-token budget as\n  // the single-token loop, so fan-out alone never trips the guard.\n  const allBranchesForBudget = await em.find(WorkflowBranchInstance, {\n    workflowInstanceId: instance.id,\n    forkStepId,\n  })\n  const maxIterations = Math.max(1, allBranchesForBudget.length) * 100\n  let iterations = 0\n\n  while (iterations < maxIterations) {\n    iterations++\n\n    const branches = await em.find(WorkflowBranchInstance, {\n      workflowInstanceId: instance.id,\n      forkStepId,\n    })\n\n    const active = branches.filter((b) => b.status === 'ACTIVE')\n\n    if (active.length === 0) {\n      const failed = branches.find((b) => b.status === 'FAILED')\n      if (failed) {\n        // A branch failed out-of-band (e.g. async-activity resume marked it\n        // FAILED); cancel any non-terminal siblings before failing the instance.\n        await cancelSiblings(em, instance, failed)\n        return { outcome: 'failed', error: failed.errorMessage || 'Branch failed' }\n      }\n      if (branches.every((b) => b.status === 'COMPLETED')) {\n        await fireJoin(em, instance, definition, branches, forkStepId)\n        return { outcome: 'joined' }\n      }\n      // Some branches paused/waiting for external resume \u2014 instance idles.\n      return { outcome: 'waiting' }\n    }\n\n    for (const branch of active) {\n      const result = await advanceOneBranch(em, container, instance, definition, branch, context)\n      if (result === 'failed') {\n        await cancelSiblings(em, instance, branch)\n        return { outcome: 'failed', error: branch.errorMessage || 'Branch failed' }\n      }\n    }\n  }\n\n  throw new Error('[internal] Maximum branch execution iterations reached - possible infinite loop')\n}\n\n/**\n * Advance a single ACTIVE branch by one step. Returns 'failed' if the branch\n * failed; otherwise mutates branch state (advanced / completed@join / paused).\n */\nasync function advanceOneBranch(\n  em: EntityManager,\n  container: AwilixContainer,\n  instance: WorkflowInstance,\n  definition: WorkflowDefinition,\n  branch: WorkflowBranchInstance,\n  context: ParallelContext,\n): Promise<'advanced' | 'failed'> {\n  // Already at the join \u2192 synchronize (mark completed, do not execute the join).\n  if (branch.currentStepId === branch.joinStepId) {\n    await completeBranchAtJoin(em, instance, branch)\n    return 'advanced'\n  }\n\n  const transitionHandler = await import('./transition-handler')\n\n  const token = branchToken(instance, branch)\n  // Token read context = instance snapshot overlaid with branch namespace.\n  const readContext = { ...(instance.context || {}), ...(branch.contextNamespace || {}) }\n  const evalContext = { workflowContext: readContext, userId: context.userId }\n\n  // Select the transition to take. Branches positioned on the fork follow their\n  // own branch_key transition; otherwise pick the highest-priority valid auto one.\n  let selected: any | null = null\n  if (branch.currentStepId === branch.forkStepId) {\n    selected = (definition.definition.transitions || []).find(\n      (transition: any) => transition.transitionId === branch.branchKey,\n    ) || null\n  } else {\n    const valid = await transitionHandler.findValidTransitions(\n      em,\n      instance,\n      branch.currentStepId,\n      evalContext,\n    )\n    const validAuto = valid.filter((vt) => vt.isValid && vt.transition?.trigger === 'auto')\n    selected = validAuto.length > 0 ? validAuto[0].transition : null\n  }\n\n  if (!selected) {\n    // No outgoing transition and not at the join \u2192 the branch is stuck.\n    await failBranch(em, instance, branch, `Branch \"${branch.branchKey}\" has no valid transition from \"${branch.currentStepId}\"`)\n    return 'failed'\n  }\n\n  try {\n    const transitionResult = await transitionHandler.executeTransitionForToken(\n      em,\n      container,\n      token,\n      selected.fromStepId,\n      selected.toStepId,\n      evalContext,\n    )\n\n    if (!transitionResult.success) {\n      await failBranch(em, instance, branch, transitionResult.error || 'Branch transition failed')\n      return 'failed'\n    }\n\n    // executeTransitionForToken set branch.currentStepId = toStepId. If that is\n    // the join, synchronize now (the join step itself is a no-op).\n    if (branch.currentStepId === branch.joinStepId) {\n      await completeBranchAtJoin(em, instance, branch)\n    }\n    return 'advanced'\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error)\n    await failBranch(em, instance, branch, message)\n    return 'failed'\n  }\n}\n\nasync function completeBranchAtJoin(\n  em: EntityManager,\n  instance: WorkflowInstance,\n  branch: WorkflowBranchInstance,\n): Promise<void> {\n  const now = new Date()\n  branch.status = 'COMPLETED'\n  branch.completedAt = now\n  branch.updatedAt = now\n  await em.flush()\n\n  await logWorkflowEvent(em, {\n    workflowInstanceId: instance.id,\n    branchInstanceId: branch.id,\n    eventType: 'PARALLEL_BRANCH_COMPLETED',\n    eventData: { branchKey: branch.branchKey, joinStepId: branch.joinStepId },\n    tenantId: instance.tenantId,\n    organizationId: instance.organizationId,\n  })\n}\n\nasync function failBranch(\n  em: EntityManager,\n  instance: WorkflowInstance,\n  branch: WorkflowBranchInstance,\n  message: string,\n): Promise<void> {\n  const now = new Date()\n  branch.status = 'FAILED'\n  branch.errorMessage = message\n  branch.updatedAt = now\n  await em.flush()\n\n  await logWorkflowEvent(em, {\n    workflowInstanceId: instance.id,\n    branchInstanceId: branch.id,\n    eventType: 'PARALLEL_BRANCH_FAILED',\n    eventData: { branchKey: branch.branchKey, error: message },\n    tenantId: instance.tenantId,\n    organizationId: instance.organizationId,\n  })\n}\n\n/**\n * Cancel sibling branches of a failed branch (best-effort), cancel their open\n * user tasks, and log a cancellation event per branch.\n */\nasync function cancelSiblings(\n  em: EntityManager,\n  instance: WorkflowInstance,\n  failedBranch: WorkflowBranchInstance,\n): Promise<void> {\n  const siblings = await em.find(WorkflowBranchInstance, {\n    workflowInstanceId: instance.id,\n    forkStepId: failedBranch.forkStepId,\n  })\n\n  const now = new Date()\n  for (const sibling of siblings) {\n    if (sibling.id === failedBranch.id) continue\n    if (sibling.status === 'ACTIVE' || sibling.status === 'PAUSED' || sibling.status === 'WAITING_FOR_ACTIVITIES') {\n      sibling.status = 'CANCELLED'\n      sibling.updatedAt = now\n\n      // Best-effort: cancel the branch's open user tasks.\n      const openTasks = await em.find(UserTask, {\n        workflowInstanceId: instance.id,\n        branchInstanceId: sibling.id,\n        status: 'PENDING',\n      })\n      for (const task of openTasks) {\n        task.status = 'CANCELLED'\n        task.updatedAt = now\n      }\n\n      await em.flush()\n\n      await logWorkflowEvent(em, {\n        workflowInstanceId: instance.id,\n        branchInstanceId: sibling.id,\n        eventType: 'PARALLEL_BRANCH_CANCELLED',\n        eventData: { branchKey: sibling.branchKey, reason: 'sibling-failed' },\n        tenantId: instance.tenantId,\n        organizationId: instance.organizationId,\n      })\n    }\n  }\n\n  await logWorkflowEvent(em, {\n    workflowInstanceId: instance.id,\n    eventType: 'PARALLEL_FORK_FAILED',\n    eventData: { forkStepId: failedBranch.forkStepId, failedBranchKey: failedBranch.branchKey },\n    tenantId: instance.tenantId,\n    organizationId: instance.organizationId,\n  })\n}\n\n/**\n * Fire the JOIN once all branches are COMPLETED: merge each branch namespace\n * under `instance.context.branches[branchKey]`, apply optional outputMapping to\n * lift selected values to the top level, then resume the root token at the step\n * after the JOIN.\n */\nasync function fireJoin(\n  em: EntityManager,\n  instance: WorkflowInstance,\n  definition: WorkflowDefinition,\n  branches: WorkflowBranchInstance[],\n  forkStepId: string,\n): Promise<void> {\n  const joinStepId = branches[0]?.joinStepId\n  if (!joinStepId) {\n    throw new Error('[internal] fireJoin called without a join step id')\n  }\n\n  const joinStep = definition.definition.steps.find((s: any) => s.stepId === joinStepId)\n\n  // Deterministic merge \u2014 no silent collisions: each branch keeps its own slot.\n  const branchesContext: Record<string, any> = { ...(instance.context?.branches || {}) }\n  const mergedBranchKeys: string[] = []\n  for (const branch of branches) {\n    branchesContext[branch.branchKey] = branch.contextNamespace || {}\n    mergedBranchKeys.push(branch.branchKey)\n  }\n\n  let nextContext: Record<string, any> = {\n    ...(instance.context || {}),\n    branches: branchesContext,\n  }\n\n  // Optional outputMapping: topLevelKey -> 'branches.<branchKey>.<path>'. The\n  // reserved `branches` slot map is never overwritten \u2014 guard it explicitly so a\n  // mapping cannot clobber the per-branch namespaces.\n  const outputMapping: Record<string, string> | undefined = joinStep?.config?.outputMapping\n  if (outputMapping) {\n    for (const [topKey, sourcePath] of Object.entries(outputMapping)) {\n      if (topKey === 'branches') continue\n      const value = getNestedValue(nextContext, sourcePath)\n      if (value !== undefined) nextContext[topKey] = value\n    }\n  }\n\n  // Park the root token ON the JOIN step (not its successor) and let the\n  // single-token executor loop run the JOIN's outgoing transition. Jumping\n  // straight to the post-join step would bypass stepHandler.executeStep() for\n  // that step \u2014 so a following USER_TASK / WAIT_FOR_TIMER / WAIT_FOR_SIGNAL would\n  // never have its task created / timer enqueued / signal wait registered (the\n  // instance would hang), and any activities on the JOIN's outgoing transition\n  // would be skipped. The JOIN step itself is a no-op, so the loop simply runs\n  // its outgoing transition through the normal step-entry path.\n  const afterJoinStepId = (definition.definition.transitions || []).find(\n    (transition: any) => transition.fromStepId === joinStepId,\n  )?.toStepId ?? null\n\n  const now = new Date()\n  instance.context = nextContext\n  instance.status = 'RUNNING'\n  instance.activeForkStepId = null\n  instance.currentStepId = joinStepId\n  instance.updatedAt = now\n  await em.flush()\n\n  await logWorkflowEvent(em, {\n    workflowInstanceId: instance.id,\n    eventType: 'PARALLEL_JOIN_COMPLETED',\n    eventData: { forkStepId, joinStepId, mergedBranchKeys, afterJoinStepId },\n    tenantId: instance.tenantId,\n    organizationId: instance.organizationId,\n  })\n}\n"],
+  "mappings": "AAqBA,SAAwB,gBAAgB;AAExC;AAAA,EACE;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,wBAAwB;AACjC,YAAY,iBAAiB;AAC7B,SAAS,mBAAmB;AA4B5B,eAAsB,aACpB,IACA,SACkB;AAClB,QAAM,SAAS,MAAM,GAAG,QAAQ,wBAAwB;AAAA,IACtD,IAAI,QAAQ;AAAA,IACZ,oBAAoB,QAAQ;AAAA,IAC5B,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ;AAAA,EAC1B,CAAC;AAED,MAAI,CAAC,OAAQ,QAAO;AACpB,MAAI,OAAO,WAAW,YAAY,OAAO,WAAW,0BAA0B;AAE5E,WAAO;AAAA,EACT;AAEA,QAAM,MAAM,oBAAI,KAAK;AACrB,MAAI,QAAQ,cAAc;AACxB,WAAO,mBAAmB,EAAE,GAAI,OAAO,oBAAoB,CAAC,GAAI,GAAG,QAAQ,aAAa;AAAA,EAC1F;AAEA,MAAI,QAAQ,oBAAoB;AAC9B,UAAM,eAAe,MAAM,GAAG,QAAQ,cAAc;AAAA,MAClD,IAAI,QAAQ;AAAA,MACZ,oBAAoB,QAAQ;AAAA,MAC5B,QAAQ;AAAA,IACV,CAAC;AACD,QAAI,cAAc;AAChB,YAAM,YAAY,SAAS,IAAI,cAAc,QAAQ,UAAU;AAAA,IACjE;AAAA,EACF;AAEA,SAAO,SAAS;AAChB,SAAO,oBAAoB;AAC3B,SAAO,YAAY;AACnB,QAAM,GAAG,MAAM;AAEf,SAAO;AACT;AAMA,SAAS,wBAAwB,OAA+B;AAC9D,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,CAAC,WAAW,QAAQ,WAAW,UAAU,EAAG,QAAO;AACvD,SAAO;AACT;AAEA,SAAS,eAAe,KAAU,MAAmB;AACnD,SAAO,KAAK,MAAM,GAAG,EAAE,OAAO,CAAC,SAAS,QAAS,WAAW,OAAO,SAAY,QAAQ,GAAG,GAAI,GAAG;AACnG;AAQA,eAAsB,SACpB,IACA,UACA,YACA,aACe;AACf,QAAM,aAAqB,YAAY;AACvC,QAAM,aAAiC,YAAY,QAAQ;AAC3D,MAAI,CAAC,YAAY;AACf,UAAM,IAAI,MAAM,6BAA6B,UAAU,6BAA6B;AAAA,EACtF;AAEA,QAAM,YAAY,WAAW,WAAW,eAAe,CAAC,GAAG;AAAA,IACzD,CAAC,eAAoB,WAAW,eAAe,cAAc,WAAW,YAAY;AAAA,EACtF;AAEA,QAAM,MAAM,oBAAI,KAAK;AACrB,QAAM,aAAuB,CAAC;AAC9B,aAAW,cAAc,UAAU;AACjC,eAAW,KAAK,WAAW,YAAY;AACvC,UAAM,SAAS,GAAG,OAAO,wBAAwB;AAAA,MAC/C,oBAAoB,SAAS;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,WAAW,WAAW;AAAA,MACtB,gBAAgB;AAAA;AAAA,MAEhB,eAAe;AAAA,MACf,QAAQ;AAAA,MACR,kBAAkB,CAAC;AAAA,MACnB,UAAU,SAAS;AAAA,MACnB,gBAAgB,SAAS;AAAA,MACzB,WAAW;AAAA,MACX,WAAW;AAAA,MACX,WAAW;AAAA,IACb,CAAC;AACD,OAAG,QAAQ,MAAM;AAAA,EACnB;AAEA,WAAS,SAAS;AAClB,WAAS,mBAAmB;AAC5B,WAAS,YAAY;AACrB,QAAM,GAAG,MAAM;AAEf,QAAM,iBAAiB,IAAI;AAAA,IACzB,oBAAoB,SAAS;AAAA,IAC7B,WAAW;AAAA,IACX,WAAW,EAAE,YAAY,YAAY,WAAW;AAAA,IAChD,UAAU,SAAS;AAAA,IACnB,gBAAgB,SAAS;AAAA,EAC3B,CAAC;AACH;AASA,eAAsB,4BACpB,IACA,WACA,YACA,kBACyC;AACzC,QAAM,SAAS,MAAM,GAAG;AAAA,IACtB;AAAA,IACA,EAAE,IAAI,kBAAkB,oBAAoB,WAAW;AAAA,IACvD,EAAE,UAAU,SAAS,kBAAkB;AAAA,EACzC;AACA,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,MAAM,iDAAiD;AAAA,EACnE;AACA,MAAI,OAAO,WAAW,0BAA0B;AAE9C,WAAO,EAAE,mBAAmB,MAAM;AAAA,EACpC;AAEA,QAAM,YAAY,OAAO,oBAAoB,CAAC;AAC9C,QAAM,gBAAiB,UAAU,2BAAqC,CAAC;AAEvE,QAAM,kBAAkB,MAAM,GAAG,KAAK,eAAe;AAAA,IACnD,oBAAoB;AAAA,IACpB;AAAA,IACA,WAAW;AAAA,IACX,WAAW,EAAE,OAAO,KAAK;AAAA,EAC3B,CAAC;AACD,QAAM,cAAc,MAAM,GAAG,MAAM,eAAe;AAAA,IAChD,oBAAoB;AAAA,IACpB;AAAA,IACA,WAAW;AAAA,IACX,WAAW,EAAE,OAAO,KAAK;AAAA,EAC3B,CAAC;AAED,MAAI,gBAAgB,SAAS,cAAc,cAAc,QAAQ;AAE/D,WAAO,EAAE,mBAAmB,MAAM;AAAA,EACpC;AAEA,QAAM,MAAM,oBAAI,KAAK;AACrB,MAAI,cAAc,GAAG;AACnB,WAAO,SAAS;AAChB,WAAO,eAAe,GAAG,WAAW,uCAAuC,OAAO,SAAS;AAC3F,WAAO,YAAY;AACnB,UAAM,GAAG,MAAM;AAEf,WAAO,EAAE,mBAAmB,KAAK;AAAA,EACnC;AAEA,QAAM,kBAAuC,EAAE,GAAG,UAAU;AAC5D,aAAW,SAAS,iBAAiB;AACnC,QAAI,MAAM,WAAW,QAAQ;AAC3B,sBAAgB,GAAG,MAAM,UAAU,UAAU,SAAS,IAAI,MAAM,UAAU;AAAA,IAC5E;AAAA,EACF;AACA,SAAO,gBAAgB;AACvB,SAAO,mBAAmB;AAE1B,QAAM,UAAU,OAAO;AACvB,SAAO,oBAAoB;AAC3B,SAAO,SAAS;AAChB,SAAO,YAAY;AACnB,QAAM,GAAG,MAAM;AAKf,MAAI,SAAS;AACX,UAAM,WAAW,MAAM,GAAG,QAAQ,kBAAkB,EAAE,IAAI,WAAW,CAAC;AACtE,QAAI,UAAU;AACZ,aAAO,gBAAgB,QAAQ;AAC/B,YAAM,GAAG,MAAM;AACf,YAAM,YAAY;AAAA,QAChB;AAAA,QACA;AAAA,QACA,QAAQ;AAAA,QACR;AAAA,UACE,iBAAiB,EAAE,GAAI,SAAS,WAAW,CAAC,GAAI,GAAI,OAAO,oBAAoB,CAAC,EAAG;AAAA,UACnF,QAAQ,wBAAwB,SAAS,UAAU,WAAW,KAAK;AAAA,QACrE;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,mBAAmB,KAAK;AACnC;AAQA,eAAsB,gBACpB,IACA,WACA,UACA,YACA,SACgC;AAChC,QAAM,aAAa,SAAS;AAC5B,MAAI,CAAC,YAAY;AACf,UAAM,IAAI,MAAM,mEAAmE;AAAA,EACrF;AAIA,QAAM,uBAAuB,MAAM,GAAG,KAAK,wBAAwB;AAAA,IACjE,oBAAoB,SAAS;AAAA,IAC7B;AAAA,EACF,CAAC;AACD,QAAM,gBAAgB,KAAK,IAAI,GAAG,qBAAqB,MAAM,IAAI;AACjE,MAAI,aAAa;AAEjB,SAAO,aAAa,eAAe;AACjC;AAEA,UAAM,WAAW,MAAM,GAAG,KAAK,wBAAwB;AAAA,MACrD,oBAAoB,SAAS;AAAA,MAC7B;AAAA,IACF,CAAC;AAED,UAAM,SAAS,SAAS,OAAO,CAAC,MAAM,EAAE,WAAW,QAAQ;AAE3D,QAAI,OAAO,WAAW,GAAG;AACvB,YAAM,SAAS,SAAS,KAAK,CAAC,MAAM,EAAE,WAAW,QAAQ;AACzD,UAAI,QAAQ;AAGV,cAAM,eAAe,IAAI,UAAU,MAAM;AACzC,eAAO,EAAE,SAAS,UAAU,OAAO,OAAO,gBAAgB,gBAAgB;AAAA,MAC5E;AACA,UAAI,SAAS,MAAM,CAAC,MAAM,EAAE,WAAW,WAAW,GAAG;AACnD,cAAM,SAAS,IAAI,UAAU,YAAY,UAAU,UAAU;AAC7D,eAAO,EAAE,SAAS,SAAS;AAAA,MAC7B;AAEA,aAAO,EAAE,SAAS,UAAU;AAAA,IAC9B;AAEA,eAAW,UAAU,QAAQ;AAC3B,YAAM,SAAS,MAAM,iBAAiB,IAAI,WAAW,UAAU,YAAY,QAAQ,OAAO;AAC1F,UAAI,WAAW,UAAU;AACvB,cAAM,eAAe,IAAI,UAAU,MAAM;AACzC,eAAO,EAAE,SAAS,UAAU,OAAO,OAAO,gBAAgB,gBAAgB;AAAA,MAC5E;AAAA,IACF;AAAA,EACF;AAEA,QAAM,IAAI,MAAM,iFAAiF;AACnG;AAMA,eAAe,iBACb,IACA,WACA,UACA,YACA,QACA,SACgC;AAEhC,MAAI,OAAO,kBAAkB,OAAO,YAAY;AAC9C,UAAM,qBAAqB,IAAI,UAAU,MAAM;AAC/C,WAAO;AAAA,EACT;AAEA,QAAM,oBAAoB,MAAM,OAAO,sBAAsB;AAE7D,QAAM,QAAQ,YAAY,UAAU,MAAM;AAE1C,QAAM,cAAc,EAAE,GAAI,SAAS,WAAW,CAAC,GAAI,GAAI,OAAO,oBAAoB,CAAC,EAAG;AACtF,QAAM,cAAc,EAAE,iBAAiB,aAAa,QAAQ,QAAQ,OAAO;AAI3E,MAAI,WAAuB;AAC3B,MAAI,OAAO,kBAAkB,OAAO,YAAY;AAC9C,gBAAY,WAAW,WAAW,eAAe,CAAC,GAAG;AAAA,MACnD,CAAC,eAAoB,WAAW,iBAAiB,OAAO;AAAA,IAC1D,KAAK;AAAA,EACP,OAAO;AACL,UAAM,QAAQ,MAAM,kBAAkB;AAAA,MACpC;AAAA,MACA;AAAA,MACA,OAAO;AAAA,MACP;AAAA,IACF;AACA,UAAM,YAAY,MAAM,OAAO,CAAC,OAAO,GAAG,WAAW,GAAG,YAAY,YAAY,MAAM;AACtF,eAAW,UAAU,SAAS,IAAI,UAAU,CAAC,EAAE,aAAa;AAAA,EAC9D;AAEA,MAAI,CAAC,UAAU;AAEb,UAAM,WAAW,IAAI,UAAU,QAAQ,WAAW,OAAO,SAAS,mCAAmC,OAAO,aAAa,GAAG;AAC5H,WAAO;AAAA,EACT;AAEA,MAAI;AACF,UAAM,mBAAmB,MAAM,kBAAkB;AAAA,MAC/C;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT,SAAS;AAAA,MACT;AAAA,IACF;AAEA,QAAI,CAAC,iBAAiB,SAAS;AAC7B,YAAM,WAAW,IAAI,UAAU,QAAQ,iBAAiB,SAAS,0BAA0B;AAC3F,aAAO;AAAA,IACT;AAIA,QAAI,OAAO,kBAAkB,OAAO,YAAY;AAC9C,YAAM,qBAAqB,IAAI,UAAU,MAAM;AAAA,IACjD;AACA,WAAO;AAAA,EACT,SAAS,OAAO;AACd,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,UAAM,WAAW,IAAI,UAAU,QAAQ,OAAO;AAC9C,WAAO;AAAA,EACT;AACF;AAEA,eAAe,qBACb,IACA,UACA,QACe;AACf,QAAM,MAAM,oBAAI,KAAK;AACrB,SAAO,SAAS;AAChB,SAAO,cAAc;AACrB,SAAO,YAAY;AACnB,QAAM,GAAG,MAAM;AAEf,QAAM,iBAAiB,IAAI;AAAA,IACzB,oBAAoB,SAAS;AAAA,IAC7B,kBAAkB,OAAO;AAAA,IACzB,WAAW;AAAA,IACX,WAAW,EAAE,WAAW,OAAO,WAAW,YAAY,OAAO,WAAW;AAAA,IACxE,UAAU,SAAS;AAAA,IACnB,gBAAgB,SAAS;AAAA,EAC3B,CAAC;AACH;AAEA,eAAe,WACb,IACA,UACA,QACA,SACe;AACf,QAAM,MAAM,oBAAI,KAAK;AACrB,SAAO,SAAS;AAChB,SAAO,eAAe;AACtB,SAAO,YAAY;AACnB,QAAM,GAAG,MAAM;AAEf,QAAM,iBAAiB,IAAI;AAAA,IACzB,oBAAoB,SAAS;AAAA,IAC7B,kBAAkB,OAAO;AAAA,IACzB,WAAW;AAAA,IACX,WAAW,EAAE,WAAW,OAAO,WAAW,OAAO,QAAQ;AAAA,IACzD,UAAU,SAAS;AAAA,IACnB,gBAAgB,SAAS;AAAA,EAC3B,CAAC;AACH;AAMA,eAAe,eACb,IACA,UACA,cACe;AACf,QAAM,WAAW,MAAM,GAAG,KAAK,wBAAwB;AAAA,IACrD,oBAAoB,SAAS;AAAA,IAC7B,YAAY,aAAa;AAAA,EAC3B,CAAC;AAED,QAAM,MAAM,oBAAI,KAAK;AACrB,aAAW,WAAW,UAAU;AAC9B,QAAI,QAAQ,OAAO,aAAa,GAAI;AACpC,QAAI,QAAQ,WAAW,YAAY,QAAQ,WAAW,YAAY,QAAQ,WAAW,0BAA0B;AAC7G,cAAQ,SAAS;AACjB,cAAQ,YAAY;AAGpB,YAAM,YAAY,MAAM,GAAG,KAAK,UAAU;AAAA,QACxC,oBAAoB,SAAS;AAAA,QAC7B,kBAAkB,QAAQ;AAAA,QAC1B,QAAQ;AAAA,MACV,CAAC;AACD,iBAAW,QAAQ,WAAW;AAC5B,aAAK,SAAS;AACd,aAAK,YAAY;AAAA,MACnB;AAEA,YAAM,GAAG,MAAM;AAEf,YAAM,iBAAiB,IAAI;AAAA,QACzB,oBAAoB,SAAS;AAAA,QAC7B,kBAAkB,QAAQ;AAAA,QAC1B,WAAW;AAAA,QACX,WAAW,EAAE,WAAW,QAAQ,WAAW,QAAQ,iBAAiB;AAAA,QACpE,UAAU,SAAS;AAAA,QACnB,gBAAgB,SAAS;AAAA,MAC3B,CAAC;AAAA,IACH;AAAA,EACF;AAEA,QAAM,iBAAiB,IAAI;AAAA,IACzB,oBAAoB,SAAS;AAAA,IAC7B,WAAW;AAAA,IACX,WAAW,EAAE,YAAY,aAAa,YAAY,iBAAiB,aAAa,UAAU;AAAA,IAC1F,UAAU,SAAS;AAAA,IACnB,gBAAgB,SAAS;AAAA,EAC3B,CAAC;AACH;AAQA,eAAe,SACb,IACA,UACA,YACA,UACA,YACe;AACf,QAAM,aAAa,SAAS,CAAC,GAAG;AAChC,MAAI,CAAC,YAAY;AACf,UAAM,IAAI,MAAM,mDAAmD;AAAA,EACrE;AAEA,QAAM,WAAW,WAAW,WAAW,MAAM,KAAK,CAAC,MAAW,EAAE,WAAW,UAAU;AAGrF,QAAM,kBAAuC,EAAE,GAAI,SAAS,SAAS,YAAY,CAAC,EAAG;AACrF,QAAM,mBAA6B,CAAC;AACpC,aAAW,UAAU,UAAU;AAC7B,oBAAgB,OAAO,SAAS,IAAI,OAAO,oBAAoB,CAAC;AAChE,qBAAiB,KAAK,OAAO,SAAS;AAAA,EACxC;AAEA,MAAI,cAAmC;AAAA,IACrC,GAAI,SAAS,WAAW,CAAC;AAAA,IACzB,UAAU;AAAA,EACZ;AAKA,QAAM,gBAAoD,UAAU,QAAQ;AAC5E,MAAI,eAAe;AACjB,eAAW,CAAC,QAAQ,UAAU,KAAK,OAAO,QAAQ,aAAa,GAAG;AAChE,UAAI,WAAW,WAAY;AAC3B,YAAM,QAAQ,eAAe,aAAa,UAAU;AACpD,UAAI,UAAU,OAAW,aAAY,MAAM,IAAI;AAAA,IACjD;AAAA,EACF;AAUA,QAAM,mBAAmB,WAAW,WAAW,eAAe,CAAC,GAAG;AAAA,IAChE,CAAC,eAAoB,WAAW,eAAe;AAAA,EACjD,GAAG,YAAY;AAEf,QAAM,MAAM,oBAAI,KAAK;AACrB,WAAS,UAAU;AACnB,WAAS,SAAS;AAClB,WAAS,mBAAmB;AAC5B,WAAS,gBAAgB;AACzB,WAAS,YAAY;AACrB,QAAM,GAAG,MAAM;AAEf,QAAM,iBAAiB,IAAI;AAAA,IACzB,oBAAoB,SAAS;AAAA,IAC7B,WAAW;AAAA,IACX,WAAW,EAAE,YAAY,YAAY,kBAAkB,gBAAgB;AAAA,IACvE,UAAU,SAAS;AAAA,IACnB,gBAAgB,SAAS;AAAA,EAC3B,CAAC;AACH;",
   "names": []
 }

package/dist/modules/workflows/lib/workflow-executor.js

@@ -7,6 +7,15 @@ import { compensateWorkflow } from "./compensation-handler.js";
 import { findWorkflowDefinition, findDefinitionForInstance } from "./find-definition.js";
 import { createLogger } from "@open-mercato/shared/lib/logger";
 const logger = createLogger("workflows");
+function normalizeWorkflowUserId(value) {
+  if (typeof value !== "string") return null;
+  const trimmed = value.trim();
+  if (!trimmed || trimmed.startsWith("trigger:")) return null;
+  return trimmed;
+}
+function resolveWorkflowExecutionUserId(context, instance) {
+  return normalizeWorkflowUserId(context?.userId) ?? normalizeWorkflowUserId(instance.metadata?.initiatedBy) ?? void 0;
+}
 class WorkflowExecutionError extends Error {
   constructor(message, code, details) {
     super(message);
@@ -164,6 +173,7 @@ async function executeWorkflow(em, container, instanceId, context) {
       }
       const maxIterations = 100;
       let iterations = 0;
+      const executionUserId = resolveWorkflowExecutionUserId(context, instance);
       while (iterations < maxIterations) {
         iterations++;
         const currentInstance = await getWorkflowInstanceForExecution(trx, instanceId, { refresh: iterations > 1 });
@@ -177,7 +187,7 @@ async function executeWorkflow(em, container, instanceId, context) {
         if (currentInstance.status === "FORKED") {
           const { advanceBranches } = await import("./parallel-handler.js");
           const branchResult = await advanceBranches(trx, container, currentInstance, definition, {
-            userId: context?.userId
+            userId: executionUserId
           });
           if (branchResult.outcome === "joined") {
             continue;
@@ -245,7 +255,7 @@ async function executeWorkflow(em, container, instanceId, context) {
         const transitionHandler = await import("./transition-handler.js");
         const evalContext = {
           workflowContext: currentInstance.context,
-          userId: context?.userId
+          userId: executionUserId
         };
         const validTransitions = await transitionHandler.findValidTransitions(
           trx,
@@ -622,7 +632,7 @@ async function resumeWorkflowAfterActivities(em, container, instanceId, branchIn
       pendingTransition.toStepId,
       {
         workflowContext: instance.context || {},
-        userId: void 0
+        userId: resolveWorkflowExecutionUserId(void 0, instance)
       },
       container
     );