@open-mercato/core 0.6.7-develop.6606.1.3b1ec9b1ea → 0.6.7-develop.6622.1.4d29ddaca4

package/dist/modules/workflows/api/definitions/[id]/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/workflows/api/definitions/%5Bid%5D/route.ts"],
-  "sourcesContent": ["/**\n * Workflow Definition Detail API\n *\n * Endpoints:\n * - GET /api/workflows/definitions/[id] - Get workflow definition\n * - PUT /api/workflows/definitions/[id] - Update workflow definition\n * - DELETE /api/workflows/definitions/[id] - Delete workflow definition (soft delete)\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { WorkflowDefinition } from '../../../data/entities'\nimport {\n  updateWorkflowDefinitionInputSchema,\n  type UpdateWorkflowDefinitionApiInput,\n} from '../../../data/validators'\nimport { serializeWorkflowDefinition, serializeCodeWorkflowDefinition } from '../serialize'\nimport { invalidateTriggerCache } from '../../../lib/event-trigger-service'\nimport { getCodeWorkflow } from '../../../lib/code-registry'\nimport { createGenericOptimisticLockReader } from '@open-mercato/shared/lib/crud/optimistic-lock'\nimport { registerOptimisticLockReaderIfAbsent } from '@open-mercato/shared/lib/crud/optimistic-lock-store'\nimport { validateCrudMutationGuard, runCrudMutationGuardAfterSuccess } from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { enforceCommandOptimisticLockWithGuards } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows')\n\nregisterOptimisticLockReaderIfAbsent({\n  'workflows.definition': createGenericOptimisticLockReader({\n    entity: WorkflowDefinition,\n    idField: 'id',\n    tenantField: 'tenantId',\n    orgField: 'organizationId',\n    softDeleteField: 'deletedAt',\n  }),\n})\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.definitions.view'],\n}\n\ninterface RouteContext {\n  params: Promise<{\n    id: string\n  }>\n}\n\n/**\n * GET /api/workflows/definitions/[id]\n *\n * Get a single workflow definition by ID\n */\nexport async function GET(\n  request: NextRequest,\n  context: RouteContext\n) {\n  try {\n    const params = await context.params\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const orgFilter = resolveOrganizationScopeFilter(scope, auth)\n\n    // Handle code-based workflow definitions (code:<workflowId>)\n    if (params.id.startsWith('code:')) {\n      const workflowId = params.id.slice(5)\n      const codeDef = getCodeWorkflow(workflowId)\n      if (!codeDef) {\n        return NextResponse.json(\n          { error: 'Workflow definition not found' },\n          { status: 404 }\n        )\n      }\n      return NextResponse.json({\n        data: serializeCodeWorkflowDefinition(codeDef, params.id),\n      })\n    }\n\n    const definition = await em.findOne(WorkflowDefinition, {\n      id: params.id,\n      tenantId,\n      ...orgFilter.where,\n      deletedAt: null,\n    })\n\n    if (!definition) {\n      return NextResponse.json(\n        { error: 'Workflow definition not found' },\n        { status: 404 }\n      )\n    }\n\n    return NextResponse.json({ data: serializeWorkflowDefinition(definition) })\n  } catch (error) {\n    logger.error('Error getting workflow definition', { err: error })\n    return NextResponse.json(\n      { error: 'Failed to get workflow definition' },\n      { status: 500 }\n    )\n  }\n}\n\n/**\n * PUT /api/workflows/definitions/[id]\n *\n * Update a workflow definition\n */\nexport async function PUT(\n  request: NextRequest,\n  context: RouteContext\n) {\n  try {\n    const params = await context.params\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = scope?.selectedId ?? auth.orgId\n\n    // Check edit permission\n    const rbacService = container.resolve('rbacService')\n    const hasPermission = await rbacService.userHasAllFeatures(\n      auth.sub,\n      ['workflows.definitions.edit'],\n      {\n        tenantId,\n        organizationId,\n      }\n    )\n\n    if (!hasPermission) {\n      return NextResponse.json(\n        { error: 'Insufficient permissions' },\n        { status: 403 }\n      )\n    }\n\n    const body = await request.json()\n\n    // Validate input\n    const validation = updateWorkflowDefinitionInputSchema.safeParse(body)\n    if (!validation.success) {\n      return NextResponse.json(\n        {\n          error: 'Validation failed',\n          details: validation.error.issues,\n        },\n        { status: 400 }\n      )\n    }\n\n    const input: UpdateWorkflowDefinitionApiInput = validation.data\n    const guardResult = await validateCrudMutationGuard(container, {\n      tenantId: tenantId ?? '',\n      organizationId: organizationId ?? null,\n      userId: auth.sub ?? '',\n      resourceKind: 'workflows.definition',\n      resourceId: params.id,\n      operation: 'update',\n      requestMethod: 'PUT',\n      requestHeaders: request.headers,\n      mutationPayload: input as Record<string, unknown>,\n    })\n    if (guardResult && !guardResult.ok) {\n      return NextResponse.json(guardResult.body, { status: guardResult.status })\n    }\n\n    // Handle customizing a code-based workflow definition\n    if (params.id.startsWith('code:')) {\n      const workflowId = params.id.slice(5)\n      const codeDef = getCodeWorkflow(workflowId)\n      if (!codeDef) {\n        return NextResponse.json(\n          { error: 'Workflow definition not found' },\n          { status: 404 }\n        )\n      }\n\n      // Check if an override already exists (including soft-deleted, due to unique constraint on workflowId+tenantId)\n      const existingOverride = await em.findOne(WorkflowDefinition, {\n        workflowId: codeDef.workflowId,\n        tenantId,\n      })\n\n      let savedOverride: WorkflowDefinition\n      if (existingOverride) {\n        try {\n          await enforceCommandOptimisticLockWithGuards(container, {\n            resourceKind: 'workflows.definition',\n            resourceId: existingOverride.id,\n            current: existingOverride.updatedAt ?? null,\n            request,\n          })\n        } catch (lockError) {\n          if (isCrudHttpError(lockError)) {\n            return NextResponse.json(lockError.body, { status: lockError.status })\n          }\n          throw lockError\n        }\n        // Revive if soft-deleted, then apply updates\n        existingOverride.deletedAt = null\n        existingOverride.workflowName = codeDef.workflowName\n        existingOverride.description = codeDef.description\n        existingOverride.version = codeDef.version\n        existingOverride.definition = input.definition ?? codeDef.definition\n        existingOverride.metadata = codeDef.metadata ?? null\n        existingOverride.enabled = input.enabled ?? codeDef.enabled\n        existingOverride.codeWorkflowId = codeDef.workflowId\n        existingOverride.updatedBy = auth.sub\n        existingOverride.updatedAt = new Date()\n        await em.flush()\n        savedOverride = existingOverride\n      } else {\n        // Create DB override row from code definition + user changes\n        const override = em.create(WorkflowDefinition, {\n          workflowId: codeDef.workflowId,\n          workflowName: codeDef.workflowName,\n          description: codeDef.description,\n          version: codeDef.version,\n          definition: input.definition ?? codeDef.definition,\n          metadata: codeDef.metadata,\n          enabled: input.enabled ?? codeDef.enabled,\n          codeWorkflowId: codeDef.workflowId,\n          tenantId,\n          organizationId,\n          createdBy: auth.sub,\n          updatedBy: auth.sub,\n          createdAt: new Date(),\n          updatedAt: new Date(),\n        })\n\n        em.persist(override)\n        await em.flush()\n        savedOverride = override\n      }\n\n      try {\n        const eventBus = container.resolve('eventBus') as\n          | { emitEvent(event: string, payload: unknown, options?: unknown): Promise<void> }\n          | undefined\n        if (eventBus && typeof eventBus.emitEvent === 'function') {\n          await eventBus.emitEvent(\n            'workflows.definition.customized',\n            {\n              id: savedOverride.id,\n              workflowId: savedOverride.workflowId,\n              codeWorkflowId: savedOverride.codeWorkflowId ?? null,\n              tenantId: savedOverride.tenantId,\n              organizationId: savedOverride.organizationId,\n              userId: auth.sub ?? null,\n            },\n            { tenantId: savedOverride.tenantId, organizationId: savedOverride.organizationId, persistent: true },\n          )\n        }\n      } catch (eventError) {\n        logger.error('Failed to emit workflows.definition.customized event', { err: eventError })\n      }\n\n      if (guardResult?.shouldRunAfterSuccess) {\n        await runCrudMutationGuardAfterSuccess(container, {\n          tenantId: tenantId ?? '',\n          organizationId: organizationId ?? null,\n          userId: auth.sub ?? '',\n          resourceKind: 'workflows.definition',\n          resourceId: String(savedOverride.id),\n          operation: 'update',\n          requestMethod: 'PUT',\n          requestHeaders: request.headers,\n          metadata: guardResult.metadata,\n        })\n      }\n\n      return NextResponse.json({\n        data: serializeWorkflowDefinition(savedOverride),\n        message: 'Workflow definition customized successfully',\n      })\n    }\n\n    // Find existing definition\n    const definition = await em.findOne(WorkflowDefinition, {\n      id: params.id,\n      tenantId,\n      organizationId,\n      deletedAt: null,\n    })\n\n    if (!definition) {\n      return NextResponse.json(\n        { error: 'Workflow definition not found' },\n        { status: 404 }\n      )\n    }\n\n    try {\n      await enforceCommandOptimisticLockWithGuards(container, {\n        resourceKind: 'workflows.definition',\n        resourceId: definition.id,\n        current: definition.updatedAt ?? null,\n        request,\n      })\n    } catch (lockError) {\n      if (isCrudHttpError(lockError)) {\n        return NextResponse.json(lockError.body, { status: lockError.status })\n      }\n      throw lockError\n    }\n\n    // Update fields. workflowId is intentionally ignored \u2014 it identifies the\n    // row and renaming would break references. Version is user-managed and\n    // applied when supplied so the edit form can bump it explicitly.\n    if (input.workflowName !== undefined) {\n      definition.workflowName = input.workflowName\n    }\n    if (input.description !== undefined) {\n      definition.description = input.description\n    }\n    if (input.version !== undefined) {\n      definition.version = input.version\n    }\n    if (input.definition !== undefined) {\n      definition.definition = input.definition\n    }\n    if (input.metadata !== undefined) {\n      definition.metadata = input.metadata\n    }\n    if (input.enabled !== undefined) {\n      definition.enabled = input.enabled\n    }\n    if (input.effectiveFrom !== undefined) {\n      definition.effectiveFrom = input.effectiveFrom\n    }\n    if (input.effectiveTo !== undefined) {\n      definition.effectiveTo = input.effectiveTo\n    }\n\n    definition.updatedAt = new Date()\n\n    await em.flush()\n\n    if (guardResult?.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: tenantId ?? '',\n        organizationId: organizationId ?? null,\n        userId: auth.sub ?? '',\n        resourceKind: 'workflows.definition',\n        resourceId: String(definition.id),\n        operation: 'update',\n        requestMethod: 'PUT',\n        requestHeaders: request.headers,\n        metadata: guardResult.metadata,\n      })\n    }\n\n    // Embedded triggers may have changed; invalidate the in-memory cache so\n    // the wildcard event subscriber reloads them on the next event.\n    if (tenantId) invalidateTriggerCache(tenantId, organizationId ?? undefined)\n\n    return NextResponse.json({\n      data: serializeWorkflowDefinition(definition),\n      message: 'Workflow definition updated successfully',\n    })\n  } catch (error) {\n    logger.error('Error updating workflow definition', { err: error })\n    return NextResponse.json(\n      { error: 'Failed to update workflow definition' },\n      { status: 500 }\n    )\n  }\n}\n\n/**\n * DELETE /api/workflows/definitions/[id]\n *\n * Soft delete a workflow definition\n */\nexport async function DELETE(\n  request: NextRequest,\n  context: RouteContext\n) {\n  try {\n    const params = await context.params\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = scope?.selectedId ?? auth.orgId\n\n    // Check delete permission\n    const rbacService = container.resolve('rbacService')\n    const hasPermission = await rbacService.userHasAllFeatures(\n      auth.sub,\n      ['workflows.definitions.delete'],\n      {\n        tenantId,\n        organizationId,\n      }\n    )\n\n    if (!hasPermission) {\n      return NextResponse.json(\n        { error: 'Insufficient permissions' },\n        { status: 403 }\n      )\n    }\n\n    // Find existing definition\n    const definition = await em.findOne(WorkflowDefinition, {\n      id: params.id,\n      tenantId,\n      organizationId,\n      deletedAt: null,\n    })\n\n    if (!definition) {\n      return NextResponse.json(\n        { error: 'Workflow definition not found' },\n        { status: 404 }\n      )\n    }\n\n    const guardResult = await validateCrudMutationGuard(container, {\n      tenantId: tenantId ?? '',\n      organizationId: organizationId ?? null,\n      userId: auth.sub ?? '',\n      resourceKind: 'workflows.definition',\n      resourceId: params.id,\n      operation: 'delete',\n      requestMethod: 'DELETE',\n      requestHeaders: request.headers,\n    })\n    if (guardResult && !guardResult.ok) {\n      return NextResponse.json(guardResult.body, { status: guardResult.status })\n    }\n\n    // Check if there are active workflow instances using this definition\n    const { WorkflowInstance } = await import('../../../data/entities')\n    const activeInstances = await em.count(WorkflowInstance, {\n      definitionId: definition.id,\n      status: { $in: ['RUNNING', 'WAITING'] },\n    })\n\n    if (activeInstances > 0) {\n      return NextResponse.json(\n        {\n          error: `Cannot delete workflow definition with ${activeInstances} active instance(s)`,\n        },\n        { status: 409 }\n      )\n    }\n\n    // Soft delete\n    definition.deletedAt = new Date()\n    definition.updatedAt = new Date()\n\n    await em.flush()\n\n    if (guardResult?.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: tenantId ?? '',\n        organizationId: organizationId ?? null,\n        userId: auth.sub ?? '',\n        resourceKind: 'workflows.definition',\n        resourceId: String(definition.id),\n        operation: 'delete',\n        requestMethod: 'DELETE',\n        requestHeaders: request.headers,\n        metadata: guardResult.metadata,\n      })\n    }\n\n    if (tenantId) invalidateTriggerCache(tenantId, organizationId ?? undefined)\n\n    return NextResponse.json({\n      message: 'Workflow definition deleted successfully',\n    })\n  } catch (error) {\n    logger.error('Error deleting workflow definition', { err: error })\n    return NextResponse.json(\n      { error: 'Failed to delete workflow definition' },\n      { status: 500 }\n    )\n  }\n}\n\nexport const openApi = {\n  methods: {\n    GET: {\n      summary: 'Get workflow definition',\n      description: 'Get a single workflow definition by ID. Returns the complete workflow structure including steps and transitions (with embedded activities).',\n      tags: ['Workflows'],\n      pathParams: z.object({\n        id: z.string().describe('UUID for DB definitions, or \"code:<workflowId>\" for code-based definitions'),\n      }),\n      responses: [\n        {\n          status: 200,\n          description: 'Workflow definition found',\n          example: {\n            data: {\n              id: '123e4567-e89b-12d3-a456-426614174000',\n              workflowId: 'checkout-flow',\n              workflowName: 'Checkout Flow',\n              description: 'Complete checkout workflow for processing orders',\n              version: 1,\n              definition: {\n                steps: [\n                  {\n                    stepId: 'start',\n                    stepName: 'Start',\n                    stepType: 'START',\n                  },\n                  {\n                    stepId: 'validate-cart',\n                    stepName: 'Validate Cart',\n                    stepType: 'AUTOMATED',\n                    description: 'Validate cart items and check inventory',\n                  },\n                  {\n                    stepId: 'payment',\n                    stepName: 'Process Payment',\n                    stepType: 'AUTOMATED',\n                    description: 'Charge payment method',\n                    retryPolicy: {\n                      maxAttempts: 3,\n                      backoffMs: 1000,\n                    },\n                  },\n                  {\n                    stepId: 'end',\n                    stepName: 'End',\n                    stepType: 'END',\n                  },\n                ],\n                transitions: [\n                  {\n                    transitionId: 'start-to-validate',\n                    fromStepId: 'start',\n                    toStepId: 'validate-cart',\n                    trigger: 'auto',\n                  },\n                  {\n                    transitionId: 'validate-to-payment',\n                    fromStepId: 'validate-cart',\n                    toStepId: 'payment',\n                    trigger: 'auto',\n                  },\n                  {\n                    transitionId: 'payment-to-end',\n                    fromStepId: 'payment',\n                    toStepId: 'end',\n                    trigger: 'auto',\n                    activities: [\n                      {\n                        activityName: 'Send Order Confirmation',\n                        activityType: 'SEND_EMAIL',\n                        config: {\n                          to: '{{context.customerEmail}}',\n                          subject: 'Order Confirmation #{{context.orderId}}',\n                          template: 'order_confirmation',\n                        },\n                      },\n                    ],\n                  },\n                ],\n              },\n              enabled: true,\n              tenantId: '123e4567-e89b-12d3-a456-426614174001',\n              organizationId: '123e4567-e89b-12d3-a456-426614174002',\n              createdAt: '2025-12-08T10:00:00.000Z',\n              updatedAt: '2025-12-08T10:00:00.000Z',\n            },\n          },\n        },\n        {\n          status: 404,\n          description: 'Workflow definition not found',\n          example: {\n            error: 'Workflow definition not found',\n          },\n        },\n      ],\n    },\n    PUT: {\n      summary: 'Update workflow definition',\n      description: 'Update an existing workflow definition. Supports partial updates - only provided fields will be updated.',\n      tags: ['Workflows'],\n      pathParams: z.object({\n        id: z.string().uuid(),\n      }),\n      requestBody: {\n        schema: updateWorkflowDefinitionInputSchema,\n        example: {\n          definition: {\n            steps: [\n              {\n                stepId: 'start',\n                stepName: 'Start',\n                stepType: 'START',\n              },\n              {\n                stepId: 'validate-cart',\n                stepName: 'Validate Cart',\n                stepType: 'AUTOMATED',\n              },\n              {\n                stepId: 'payment',\n                stepName: 'Process Payment',\n                stepType: 'AUTOMATED',\n              },\n              {\n                stepId: 'confirmation',\n                stepName: 'Order Confirmation',\n                stepType: 'AUTOMATED',\n              },\n              {\n                stepId: 'end',\n                stepName: 'End',\n                stepType: 'END',\n              },\n            ],\n            transitions: [\n              {\n                transitionId: 'start-to-validate',\n                fromStepId: 'start',\n                toStepId: 'validate-cart',\n                trigger: 'auto',\n              },\n              {\n                transitionId: 'validate-to-payment',\n                fromStepId: 'validate-cart',\n                toStepId: 'payment',\n                trigger: 'auto',\n              },\n              {\n                transitionId: 'payment-to-confirmation',\n                fromStepId: 'payment',\n                toStepId: 'confirmation',\n                trigger: 'auto',\n              },\n              {\n                transitionId: 'confirmation-to-end',\n                fromStepId: 'confirmation',\n                toStepId: 'end',\n                trigger: 'auto',\n              },\n            ],\n          },\n          enabled: true,\n        },\n      },\n      responses: [\n        {\n          status: 200,\n          description: 'Workflow definition updated successfully',\n          example: {\n            data: {\n              id: '123e4567-e89b-12d3-a456-426614174000',\n              workflowId: 'checkout-flow',\n              workflowName: 'Checkout Flow',\n              description: 'Complete checkout workflow for processing orders',\n              version: 1,\n              definition: {\n                steps: [\n                  { stepId: 'start', stepName: 'Start', stepType: 'START' },\n                  {\n                    stepId: 'validate-cart',\n                    stepName: 'Validate Cart',\n                    stepType: 'AUTOMATED',\n                  },\n                  {\n                    stepId: 'payment',\n                    stepName: 'Process Payment',\n                    stepType: 'AUTOMATED',\n                  },\n                  {\n                    stepId: 'confirmation',\n                    stepName: 'Order Confirmation',\n                    stepType: 'AUTOMATED',\n                  },\n                  { stepId: 'end', stepName: 'End', stepType: 'END' },\n                ],\n                transitions: [\n                  {\n                    transitionId: 'start-to-validate',\n                    fromStepId: 'start',\n                    toStepId: 'validate-cart',\n                    trigger: 'auto',\n                  },\n                  {\n                    transitionId: 'validate-to-payment',\n                    fromStepId: 'validate-cart',\n                    toStepId: 'payment',\n                    trigger: 'auto',\n                  },\n                  {\n                    transitionId: 'payment-to-confirmation',\n                    fromStepId: 'payment',\n                    toStepId: 'confirmation',\n                    trigger: 'auto',\n                  },\n                  {\n                    transitionId: 'confirmation-to-end',\n                    fromStepId: 'confirmation',\n                    toStepId: 'end',\n                    trigger: 'auto',\n                  },\n                ],\n              },\n              enabled: true,\n              tenantId: '123e4567-e89b-12d3-a456-426614174001',\n              organizationId: '123e4567-e89b-12d3-a456-426614174002',\n              createdAt: '2025-12-08T10:00:00.000Z',\n              updatedAt: '2025-12-08T11:30:00.000Z',\n            },\n            message: 'Workflow definition updated successfully',\n          },\n        },\n        {\n          status: 400,\n          description: 'Validation error',\n          example: {\n            error: 'Validation failed',\n            details: [\n              {\n                code: 'invalid_type',\n                message: 'Expected object, received string',\n                path: ['definition'],\n              },\n            ],\n          },\n        },\n        {\n          status: 404,\n          description: 'Workflow definition not found',\n          example: {\n            error: 'Workflow definition not found',\n          },\n        },\n      ],\n    },\n    DELETE: {\n      summary: 'Delete workflow definition',\n      description: 'Soft delete a workflow definition. Cannot be deleted if there are active workflow instances (RUNNING or WAITING status) using this definition.',\n      tags: ['Workflows'],\n      pathParams: z.object({\n        id: z.string().uuid(),\n      }),\n      responses: [\n        {\n          status: 200,\n          description: 'Workflow definition deleted successfully',\n          example: {\n            message: 'Workflow definition deleted successfully',\n          },\n        },\n        {\n          status: 404,\n          description: 'Workflow definition not found',\n          example: {\n            error: 'Workflow definition not found',\n          },\n        },\n        {\n          status: 409,\n          description: 'Cannot delete - active workflow instances exist',\n          example: {\n            error: 'Cannot delete workflow definition with 3 active instance(s)',\n          },\n        },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AASA,SAAsB,oBAAoB;AAC1C,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,sCAAsC;AAC/C,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,OAEK;AACP,SAAS,6BAA6B,uCAAuC;AAC7E,SAAS,8BAA8B;AACvC,SAAS,uBAAuB;AAChC,SAAS,yCAAyC;AAClD,SAAS,4CAA4C;AACrD,SAAS,2BAA2B,wCAAwC;AAC5E,SAAS,8CAA8C;AACvD,SAAS,uBAAuB;AAChC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEvC,qCAAqC;AAAA,EACnC,wBAAwB,kCAAkC;AAAA,IACxD,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,IACV,iBAAiB;AAAA,EACnB,CAAC;AACH,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,4BAA4B;AAChD;AAaA,eAAsB,IACpB,SACA,SACA;AACA,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAC7B,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,YAAY,+BAA+B,OAAO,IAAI;AAG5D,QAAI,OAAO,GAAG,WAAW,OAAO,GAAG;AACjC,YAAM,aAAa,OAAO,GAAG,MAAM,CAAC;AACpC,YAAM,UAAU,gBAAgB,UAAU;AAC1C,UAAI,CAAC,SAAS;AACZ,eAAO,aAAa;AAAA,UAClB,EAAE,OAAO,gCAAgC;AAAA,UACzC,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AACA,aAAO,aAAa,KAAK;AAAA,QACvB,MAAM,gCAAgC,SAAS,OAAO,EAAE;AAAA,MAC1D,CAAC;AAAA,IACH;AAEA,UAAM,aAAa,MAAM,GAAG,QAAQ,oBAAoB;AAAA,MACtD,IAAI,OAAO;AAAA,MACX;AAAA,MACA,GAAG,UAAU;AAAA,MACb,WAAW;AAAA,IACb,CAAC;AAED,QAAI,CAAC,YAAY;AACf,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,gCAAgC;AAAA,QACzC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,WAAO,aAAa,KAAK,EAAE,MAAM,4BAA4B,UAAU,EAAE,CAAC;AAAA,EAC5E,SAAS,OAAO;AACd,WAAO,MAAM,qCAAqC,EAAE,KAAK,MAAM,CAAC;AAChE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,oCAAoC;AAAA,MAC7C,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAOA,eAAsB,IACpB,SACA,SACA;AACA,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAC7B,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,OAAO,cAAc,KAAK;AAGjD,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,gBAAgB,MAAM,YAAY;AAAA,MACtC,KAAK;AAAA,MACL,CAAC,4BAA4B;AAAA,MAC7B;AAAA,QACE;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,eAAe;AAClB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,2BAA2B;AAAA,QACpC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,OAAO,MAAM,QAAQ,KAAK;AAGhC,UAAM,aAAa,oCAAoC,UAAU,IAAI;AACrE,QAAI,CAAC,WAAW,SAAS;AACvB,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO;AAAA,UACP,SAAS,WAAW,MAAM;AAAA,QAC5B;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,QAA0C,WAAW;AAC3D,UAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,MAC7D,UAAU,YAAY;AAAA,MACtB,gBAAgB,kBAAkB;AAAA,MAClC,QAAQ,KAAK,OAAO;AAAA,MACpB,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,WAAW;AAAA,MACX,eAAe;AAAA,MACf,gBAAgB,QAAQ;AAAA,MACxB,iBAAiB;AAAA,IACnB,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,IAC3E;AAGA,QAAI,OAAO,GAAG,WAAW,OAAO,GAAG;AACjC,YAAM,aAAa,OAAO,GAAG,MAAM,CAAC;AACpC,YAAM,UAAU,gBAAgB,UAAU;AAC1C,UAAI,CAAC,SAAS;AACZ,eAAO,aAAa;AAAA,UAClB,EAAE,OAAO,gCAAgC;AAAA,UACzC,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAGA,YAAM,mBAAmB,MAAM,GAAG,QAAQ,oBAAoB;AAAA,QAC5D,YAAY,QAAQ;AAAA,QACpB;AAAA,MACF,CAAC;AAED,UAAI;AACJ,UAAI,kBAAkB;AACpB,YAAI;AACF,gBAAM,uCAAuC,WAAW;AAAA,YACtD,cAAc;AAAA,YACd,YAAY,iBAAiB;AAAA,YAC7B,SAAS,iBAAiB,aAAa;AAAA,YACvC;AAAA,UACF,CAAC;AAAA,QACH,SAAS,WAAW;AAClB,cAAI,gBAAgB,SAAS,GAAG;AAC9B,mBAAO,aAAa,KAAK,UAAU,MAAM,EAAE,QAAQ,UAAU,OAAO,CAAC;AAAA,UACvE;AACA,gBAAM;AAAA,QACR;AAEA,yBAAiB,YAAY;AAC7B,yBAAiB,eAAe,QAAQ;AACxC,yBAAiB,cAAc,QAAQ;AACvC,yBAAiB,UAAU,QAAQ;AACnC,yBAAiB,aAAa,MAAM,cAAc,QAAQ;AAC1D,yBAAiB,WAAW,QAAQ,YAAY;AAChD,yBAAiB,UAAU,MAAM,WAAW,QAAQ;AACpD,yBAAiB,iBAAiB,QAAQ;AAC1C,yBAAiB,YAAY,KAAK;AAClC,yBAAiB,YAAY,oBAAI,KAAK;AACtC,cAAM,GAAG,MAAM;AACf,wBAAgB;AAAA,MAClB,OAAO;AAEL,cAAM,WAAW,GAAG,OAAO,oBAAoB;AAAA,UAC7C,YAAY,QAAQ;AAAA,UACpB,cAAc,QAAQ;AAAA,UACtB,aAAa,QAAQ;AAAA,UACrB,SAAS,QAAQ;AAAA,UACjB,YAAY,MAAM,cAAc,QAAQ;AAAA,UACxC,UAAU,QAAQ;AAAA,UAClB,SAAS,MAAM,WAAW,QAAQ;AAAA,UAClC,gBAAgB,QAAQ;AAAA,UACxB;AAAA,UACA;AAAA,UACA,WAAW,KAAK;AAAA,UAChB,WAAW,KAAK;AAAA,UAChB,WAAW,oBAAI,KAAK;AAAA,UACpB,WAAW,oBAAI,KAAK;AAAA,QACtB,CAAC;AAED,WAAG,QAAQ,QAAQ;AACnB,cAAM,GAAG,MAAM;AACf,wBAAgB;AAAA,MAClB;AAEA,UAAI;AACF,cAAM,WAAW,UAAU,QAAQ,UAAU;AAG7C,YAAI,YAAY,OAAO,SAAS,cAAc,YAAY;AACxD,gBAAM,SAAS;AAAA,YACb;AAAA,YACA;AAAA,cACE,IAAI,cAAc;AAAA,cAClB,YAAY,cAAc;AAAA,cAC1B,gBAAgB,cAAc,kBAAkB;AAAA,cAChD,UAAU,cAAc;AAAA,cACxB,gBAAgB,cAAc;AAAA,cAC9B,QAAQ,KAAK,OAAO;AAAA,YACtB;AAAA,YACA,EAAE,UAAU,cAAc,UAAU,gBAAgB,cAAc,gBAAgB,YAAY,KAAK;AAAA,UACrG;AAAA,QACF;AAAA,MACF,SAAS,YAAY;AACnB,eAAO,MAAM,wDAAwD,EAAE,KAAK,WAAW,CAAC;AAAA,MAC1F;AAEA,UAAI,aAAa,uBAAuB;AACtC,cAAM,iCAAiC,WAAW;AAAA,UAChD,UAAU,YAAY;AAAA,UACtB,gBAAgB,kBAAkB;AAAA,UAClC,QAAQ,KAAK,OAAO;AAAA,UACpB,cAAc;AAAA,UACd,YAAY,OAAO,cAAc,EAAE;AAAA,UACnC,WAAW;AAAA,UACX,eAAe;AAAA,UACf,gBAAgB,QAAQ;AAAA,UACxB,UAAU,YAAY;AAAA,QACxB,CAAC;AAAA,MACH;AAEA,aAAO,aAAa,KAAK;AAAA,QACvB,MAAM,4BAA4B,aAAa;AAAA,QAC/C,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAGA,UAAM,aAAa,MAAM,GAAG,QAAQ,oBAAoB;AAAA,MACtD,IAAI,OAAO;AAAA,MACX;AAAA,MACA;AAAA,MACA,WAAW;AAAA,IACb,CAAC;AAED,QAAI,CAAC,YAAY;AACf,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,gCAAgC;AAAA,QACzC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,QAAI;AACF,YAAM,uCAAuC,WAAW;AAAA,QACtD,cAAc;AAAA,QACd,YAAY,WAAW;AAAA,QACvB,SAAS,WAAW,aAAa;AAAA,QACjC;AAAA,MACF,CAAC;AAAA,IACH,SAAS,WAAW;AAClB,UAAI,gBAAgB,SAAS,GAAG;AAC9B,eAAO,aAAa,KAAK,UAAU,MAAM,EAAE,QAAQ,UAAU,OAAO,CAAC;AAAA,MACvE;AACA,YAAM;AAAA,IACR;AAKA,QAAI,MAAM,iBAAiB,QAAW;AACpC,iBAAW,eAAe,MAAM;AAAA,IAClC;AACA,QAAI,MAAM,gBAAgB,QAAW;AACnC,iBAAW,cAAc,MAAM;AAAA,IACjC;AACA,QAAI,MAAM,YAAY,QAAW;AAC/B,iBAAW,UAAU,MAAM;AAAA,IAC7B;AACA,QAAI,MAAM,eAAe,QAAW;AAClC,iBAAW,aAAa,MAAM;AAAA,IAChC;AACA,QAAI,MAAM,aAAa,QAAW;AAChC,iBAAW,WAAW,MAAM;AAAA,IAC9B;AACA,QAAI,MAAM,YAAY,QAAW;AAC/B,iBAAW,UAAU,MAAM;AAAA,IAC7B;AACA,QAAI,MAAM,kBAAkB,QAAW;AACrC,iBAAW,gBAAgB,MAAM;AAAA,IACnC;AACA,QAAI,MAAM,gBAAgB,QAAW;AACnC,iBAAW,cAAc,MAAM;AAAA,IACjC;AAEA,eAAW,YAAY,oBAAI,KAAK;AAEhC,UAAM,GAAG,MAAM;AAEf,QAAI,aAAa,uBAAuB;AACtC,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,YAAY;AAAA,QACtB,gBAAgB,kBAAkB;AAAA,QAClC,QAAQ,KAAK,OAAO;AAAA,QACpB,cAAc;AAAA,QACd,YAAY,OAAO,WAAW,EAAE;AAAA,QAChC,WAAW;AAAA,QACX,eAAe;AAAA,QACf,gBAAgB,QAAQ;AAAA,QACxB,UAAU,YAAY;AAAA,MACxB,CAAC;AAAA,IACH;AAIA,QAAI,SAAU,wBAAuB,UAAU,kBAAkB,MAAS;AAE1E,WAAO,aAAa,KAAK;AAAA,MACvB,MAAM,4BAA4B,UAAU;AAAA,MAC5C,SAAS;AAAA,IACX,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,MAAM,sCAAsC,EAAE,KAAK,MAAM,CAAC;AACjE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,uCAAuC;AAAA,MAChD,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAOA,eAAsB,OACpB,SACA,SACA;AACA,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAC7B,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,OAAO,cAAc,KAAK;AAGjD,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,gBAAgB,MAAM,YAAY;AAAA,MACtC,KAAK;AAAA,MACL,CAAC,8BAA8B;AAAA,MAC/B;AAAA,QACE;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,eAAe;AAClB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,2BAA2B;AAAA,QACpC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,aAAa,MAAM,GAAG,QAAQ,oBAAoB;AAAA,MACtD,IAAI,OAAO;AAAA,MACX;AAAA,MACA;AAAA,MACA,WAAW;AAAA,IACb,CAAC;AAED,QAAI,CAAC,YAAY;AACf,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,gCAAgC;AAAA,QACzC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,MAC7D,UAAU,YAAY;AAAA,MACtB,gBAAgB,kBAAkB;AAAA,MAClC,QAAQ,KAAK,OAAO;AAAA,MACpB,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,WAAW;AAAA,MACX,eAAe;AAAA,MACf,gBAAgB,QAAQ;AAAA,IAC1B,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,IAC3E;AAGA,UAAM,EAAE,iBAAiB,IAAI,MAAM,OAAO,wBAAwB;AAClE,UAAM,kBAAkB,MAAM,GAAG,MAAM,kBAAkB;AAAA,MACvD,cAAc,WAAW;AAAA,MACzB,QAAQ,EAAE,KAAK,CAAC,WAAW,SAAS,EAAE;AAAA,IACxC,CAAC;AAED,QAAI,kBAAkB,GAAG;AACvB,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO,0CAA0C,eAAe;AAAA,QAClE;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,eAAW,YAAY,oBAAI,KAAK;AAChC,eAAW,YAAY,oBAAI,KAAK;AAEhC,UAAM,GAAG,MAAM;AAEf,QAAI,aAAa,uBAAuB;AACtC,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,YAAY;AAAA,QACtB,gBAAgB,kBAAkB;AAAA,QAClC,QAAQ,KAAK,OAAO;AAAA,QACpB,cAAc;AAAA,QACd,YAAY,OAAO,WAAW,EAAE;AAAA,QAChC,WAAW;AAAA,QACX,eAAe;AAAA,QACf,gBAAgB,QAAQ;AAAA,QACxB,UAAU,YAAY;AAAA,MACxB,CAAC;AAAA,IACH;AAEA,QAAI,SAAU,wBAAuB,UAAU,kBAAkB,MAAS;AAE1E,WAAO,aAAa,KAAK;AAAA,MACvB,SAAS;AAAA,IACX,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,MAAM,sCAAsC,EAAE,KAAK,MAAM,CAAC;AACjE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,uCAAuC;AAAA,MAChD,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,MAAM,CAAC,WAAW;AAAA,MAClB,YAAY,EAAE,OAAO;AAAA,QACnB,IAAI,EAAE,OAAO,EAAE,SAAS,4EAA4E;AAAA,MACtG,CAAC;AAAA,MACD,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,SAAS;AAAA,YACP,MAAM;AAAA,cACJ,IAAI;AAAA,cACJ,YAAY;AAAA,cACZ,cAAc;AAAA,cACd,aAAa;AAAA,cACb,SAAS;AAAA,cACT,YAAY;AAAA,gBACV,OAAO;AAAA,kBACL;AAAA,oBACE,QAAQ;AAAA,oBACR,UAAU;AAAA,oBACV,UAAU;AAAA,kBACZ;AAAA,kBACA;AAAA,oBACE,QAAQ;AAAA,oBACR,UAAU;AAAA,oBACV,UAAU;AAAA,oBACV,aAAa;AAAA,kBACf;AAAA,kBACA;AAAA,oBACE,QAAQ;AAAA,oBACR,UAAU;AAAA,oBACV,UAAU;AAAA,oBACV,aAAa;AAAA,oBACb,aAAa;AAAA,sBACX,aAAa;AAAA,sBACb,WAAW;AAAA,oBACb;AAAA,kBACF;AAAA,kBACA;AAAA,oBACE,QAAQ;AAAA,oBACR,UAAU;AAAA,oBACV,UAAU;AAAA,kBACZ;AAAA,gBACF;AAAA,gBACA,aAAa;AAAA,kBACX;AAAA,oBACE,cAAc;AAAA,oBACd,YAAY;AAAA,oBACZ,UAAU;AAAA,oBACV,SAAS;AAAA,kBACX;AAAA,kBACA;AAAA,oBACE,cAAc;AAAA,oBACd,YAAY;AAAA,oBACZ,UAAU;AAAA,oBACV,SAAS;AAAA,kBACX;AAAA,kBACA;AAAA,oBACE,cAAc;AAAA,oBACd,YAAY;AAAA,oBACZ,UAAU;AAAA,oBACV,SAAS;AAAA,oBACT,YAAY;AAAA,sBACV;AAAA,wBACE,cAAc;AAAA,wBACd,cAAc;AAAA,wBACd,QAAQ;AAAA,0BACN,IAAI;AAAA,0BACJ,SAAS;AAAA,0BACT,UAAU;AAAA,wBACZ;AAAA,sBACF;AAAA,oBACF;AAAA,kBACF;AAAA,gBACF;AAAA,cACF;AAAA,cACA,SAAS;AAAA,cACT,UAAU;AAAA,cACV,gBAAgB;AAAA,cAChB,WAAW;AAAA,cACX,WAAW;AAAA,YACb;AAAA,UACF;AAAA,QACF;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,SAAS;AAAA,YACP,OAAO;AAAA,UACT;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,MAAM,CAAC,WAAW;AAAA,MAClB,YAAY,EAAE,OAAO;AAAA,QACnB,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,MACtB,CAAC;AAAA,MACD,aAAa;AAAA,QACX,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,YAAY;AAAA,YACV,OAAO;AAAA,cACL;AAAA,gBACE,QAAQ;AAAA,gBACR,UAAU;AAAA,gBACV,UAAU;AAAA,cACZ;AAAA,cACA;AAAA,gBACE,QAAQ;AAAA,gBACR,UAAU;AAAA,gBACV,UAAU;AAAA,cACZ;AAAA,cACA;AAAA,gBACE,QAAQ;AAAA,gBACR,UAAU;AAAA,gBACV,UAAU;AAAA,cACZ;AAAA,cACA;AAAA,gBACE,QAAQ;AAAA,gBACR,UAAU;AAAA,gBACV,UAAU;AAAA,cACZ;AAAA,cACA;AAAA,gBACE,QAAQ;AAAA,gBACR,UAAU;AAAA,gBACV,UAAU;AAAA,cACZ;AAAA,YACF;AAAA,YACA,aAAa;AAAA,cACX;AAAA,gBACE,cAAc;AAAA,gBACd,YAAY;AAAA,gBACZ,UAAU;AAAA,gBACV,SAAS;AAAA,cACX;AAAA,cACA;AAAA,gBACE,cAAc;AAAA,gBACd,YAAY;AAAA,gBACZ,UAAU;AAAA,gBACV,SAAS;AAAA,cACX;AAAA,cACA;AAAA,gBACE,cAAc;AAAA,gBACd,YAAY;AAAA,gBACZ,UAAU;AAAA,gBACV,SAAS;AAAA,cACX;AAAA,cACA;AAAA,gBACE,cAAc;AAAA,gBACd,YAAY;AAAA,gBACZ,UAAU;AAAA,gBACV,SAAS;AAAA,cACX;AAAA,YACF;AAAA,UACF;AAAA,UACA,SAAS;AAAA,QACX;AAAA,MACF;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,SAAS;AAAA,YACP,MAAM;AAAA,cACJ,IAAI;AAAA,cACJ,YAAY;AAAA,cACZ,cAAc;AAAA,cACd,aAAa;AAAA,cACb,SAAS;AAAA,cACT,YAAY;AAAA,gBACV,OAAO;AAAA,kBACL,EAAE,QAAQ,SAAS,UAAU,SAAS,UAAU,QAAQ;AAAA,kBACxD;AAAA,oBACE,QAAQ;AAAA,oBACR,UAAU;AAAA,oBACV,UAAU;AAAA,kBACZ;AAAA,kBACA;AAAA,oBACE,QAAQ;AAAA,oBACR,UAAU;AAAA,oBACV,UAAU;AAAA,kBACZ;AAAA,kBACA;AAAA,oBACE,QAAQ;AAAA,oBACR,UAAU;AAAA,oBACV,UAAU;AAAA,kBACZ;AAAA,kBACA,EAAE,QAAQ,OAAO,UAAU,OAAO,UAAU,MAAM;AAAA,gBACpD;AAAA,gBACA,aAAa;AAAA,kBACX;AAAA,oBACE,cAAc;AAAA,oBACd,YAAY;AAAA,oBACZ,UAAU;AAAA,oBACV,SAAS;AAAA,kBACX;AAAA,kBACA;AAAA,oBACE,cAAc;AAAA,oBACd,YAAY;AAAA,oBACZ,UAAU;AAAA,oBACV,SAAS;AAAA,kBACX;AAAA,kBACA;AAAA,oBACE,cAAc;AAAA,oBACd,YAAY;AAAA,oBACZ,UAAU;AAAA,oBACV,SAAS;AAAA,kBACX;AAAA,kBACA;AAAA,oBACE,cAAc;AAAA,oBACd,YAAY;AAAA,oBACZ,UAAU;AAAA,oBACV,SAAS;AAAA,kBACX;AAAA,gBACF;AAAA,cACF;AAAA,cACA,SAAS;AAAA,cACT,UAAU;AAAA,cACV,gBAAgB;AAAA,cAChB,WAAW;AAAA,cACX,WAAW;AAAA,YACb;AAAA,YACA,SAAS;AAAA,UACX;AAAA,QACF;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,SAAS;AAAA,YACP,OAAO;AAAA,YACP,SAAS;AAAA,cACP;AAAA,gBACE,MAAM;AAAA,gBACN,SAAS;AAAA,gBACT,MAAM,CAAC,YAAY;AAAA,cACrB;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,SAAS;AAAA,YACP,OAAO;AAAA,UACT;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,aAAa;AAAA,MACb,MAAM,CAAC,WAAW;AAAA,MAClB,YAAY,EAAE,OAAO;AAAA,QACnB,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,MACtB,CAAC;AAAA,MACD,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,SAAS;AAAA,YACP,SAAS;AAAA,UACX;AAAA,QACF;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,SAAS;AAAA,YACP,OAAO;AAAA,UACT;AAAA,QACF;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,SAAS;AAAA,YACP,OAAO;AAAA,UACT;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["/**\n * Workflow Definition Detail API\n *\n * Endpoints:\n * - GET /api/workflows/definitions/[id] - Get workflow definition\n * - PUT /api/workflows/definitions/[id] - Update workflow definition\n * - DELETE /api/workflows/definitions/[id] - Delete workflow definition (soft delete)\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { WorkflowDefinition } from '../../../data/entities'\nimport {\n  updateWorkflowDefinitionInputSchema,\n  type UpdateWorkflowDefinitionApiInput,\n} from '../../../data/validators'\nimport { serializeWorkflowDefinition, serializeCodeWorkflowDefinition } from '../serialize'\nimport { invalidateTriggerCache } from '../../../lib/event-trigger-service'\nimport { getCodeWorkflow, getAllCodeWorkflows } from '../../../lib/code-registry'\nimport { codeWorkflowUuid } from '../../../lib/find-definition'\nimport { createGenericOptimisticLockReader } from '@open-mercato/shared/lib/crud/optimistic-lock'\nimport { registerOptimisticLockReaderIfAbsent } from '@open-mercato/shared/lib/crud/optimistic-lock-store'\nimport { validateCrudMutationGuard, runCrudMutationGuardAfterSuccess } from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { enforceCommandOptimisticLockWithGuards } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows')\n\nregisterOptimisticLockReaderIfAbsent({\n  'workflows.definition': createGenericOptimisticLockReader({\n    entity: WorkflowDefinition,\n    idField: 'id',\n    tenantField: 'tenantId',\n    orgField: 'organizationId',\n    softDeleteField: 'deletedAt',\n  }),\n})\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.definitions.view'],\n}\n\ninterface RouteContext {\n  params: Promise<{\n    id: string\n  }>\n}\n\n/**\n * GET /api/workflows/definitions/[id]\n *\n * Get a single workflow definition by ID\n */\nexport async function GET(\n  request: NextRequest,\n  context: RouteContext\n) {\n  try {\n    const params = await context.params\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const orgFilter = resolveOrganizationScopeFilter(scope, auth)\n\n    // Handle code-based workflow definitions (code:<workflowId>)\n    if (params.id.startsWith('code:')) {\n      const workflowId = params.id.slice(5)\n      const codeDef = getCodeWorkflow(workflowId)\n      if (!codeDef) {\n        return NextResponse.json(\n          { error: 'Workflow definition not found' },\n          { status: 404 }\n        )\n      }\n      return NextResponse.json({\n        data: serializeCodeWorkflowDefinition(codeDef, params.id),\n      })\n    }\n\n    const definition = await em.findOne(WorkflowDefinition, {\n      id: params.id,\n      tenantId,\n      ...orgFilter.where,\n      deletedAt: null,\n    })\n\n    if (!definition) {\n      // Instances started from an unpersisted code definition store the\n      // deterministic codeWorkflowUuid(workflowId) as their definitionId\n      // (see lib/find-definition.ts). Resolve that synthetic UUID back to\n      // the code registry so lookups by instance.definitionId succeed.\n      const codeDef = getAllCodeWorkflows().find(\n        (workflow) => codeWorkflowUuid(workflow.workflowId) === params.id\n      )\n      if (codeDef) {\n        return NextResponse.json({\n          data: serializeCodeWorkflowDefinition(codeDef, `code:${codeDef.workflowId}`),\n        })\n      }\n      return NextResponse.json(\n        { error: 'Workflow definition not found' },\n        { status: 404 }\n      )\n    }\n\n    return NextResponse.json({ data: serializeWorkflowDefinition(definition) })\n  } catch (error) {\n    logger.error('Error getting workflow definition', { err: error })\n    return NextResponse.json(\n      { error: 'Failed to get workflow definition' },\n      { status: 500 }\n    )\n  }\n}\n\n/**\n * PUT /api/workflows/definitions/[id]\n *\n * Update a workflow definition\n */\nexport async function PUT(\n  request: NextRequest,\n  context: RouteContext\n) {\n  try {\n    const params = await context.params\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = scope?.selectedId ?? auth.orgId\n\n    // Check edit permission\n    const rbacService = container.resolve('rbacService')\n    const hasPermission = await rbacService.userHasAllFeatures(\n      auth.sub,\n      ['workflows.definitions.edit'],\n      {\n        tenantId,\n        organizationId,\n      }\n    )\n\n    if (!hasPermission) {\n      return NextResponse.json(\n        { error: 'Insufficient permissions' },\n        { status: 403 }\n      )\n    }\n\n    const body = await request.json()\n\n    // Validate input\n    const validation = updateWorkflowDefinitionInputSchema.safeParse(body)\n    if (!validation.success) {\n      return NextResponse.json(\n        {\n          error: 'Validation failed',\n          details: validation.error.issues,\n        },\n        { status: 400 }\n      )\n    }\n\n    const input: UpdateWorkflowDefinitionApiInput = validation.data\n    const guardResult = await validateCrudMutationGuard(container, {\n      tenantId: tenantId ?? '',\n      organizationId: organizationId ?? null,\n      userId: auth.sub ?? '',\n      resourceKind: 'workflows.definition',\n      resourceId: params.id,\n      operation: 'update',\n      requestMethod: 'PUT',\n      requestHeaders: request.headers,\n      mutationPayload: input as Record<string, unknown>,\n    })\n    if (guardResult && !guardResult.ok) {\n      return NextResponse.json(guardResult.body, { status: guardResult.status })\n    }\n\n    // Handle customizing a code-based workflow definition\n    if (params.id.startsWith('code:')) {\n      const workflowId = params.id.slice(5)\n      const codeDef = getCodeWorkflow(workflowId)\n      if (!codeDef) {\n        return NextResponse.json(\n          { error: 'Workflow definition not found' },\n          { status: 404 }\n        )\n      }\n\n      // Check if an override already exists (including soft-deleted, due to unique constraint on workflowId+tenantId)\n      const existingOverride = await em.findOne(WorkflowDefinition, {\n        workflowId: codeDef.workflowId,\n        tenantId,\n      })\n\n      let savedOverride: WorkflowDefinition\n      if (existingOverride) {\n        try {\n          await enforceCommandOptimisticLockWithGuards(container, {\n            resourceKind: 'workflows.definition',\n            resourceId: existingOverride.id,\n            current: existingOverride.updatedAt ?? null,\n            request,\n          })\n        } catch (lockError) {\n          if (isCrudHttpError(lockError)) {\n            return NextResponse.json(lockError.body, { status: lockError.status })\n          }\n          throw lockError\n        }\n        // Revive if soft-deleted, then apply updates\n        existingOverride.deletedAt = null\n        existingOverride.workflowName = codeDef.workflowName\n        existingOverride.description = codeDef.description\n        existingOverride.version = codeDef.version\n        existingOverride.definition = input.definition ?? codeDef.definition\n        existingOverride.metadata = codeDef.metadata ?? null\n        existingOverride.enabled = input.enabled ?? codeDef.enabled\n        existingOverride.codeWorkflowId = codeDef.workflowId\n        existingOverride.updatedBy = auth.sub\n        existingOverride.updatedAt = new Date()\n        await em.flush()\n        savedOverride = existingOverride\n      } else {\n        // Create DB override row from code definition + user changes\n        const override = em.create(WorkflowDefinition, {\n          workflowId: codeDef.workflowId,\n          workflowName: codeDef.workflowName,\n          description: codeDef.description,\n          version: codeDef.version,\n          definition: input.definition ?? codeDef.definition,\n          metadata: codeDef.metadata,\n          enabled: input.enabled ?? codeDef.enabled,\n          codeWorkflowId: codeDef.workflowId,\n          tenantId,\n          organizationId,\n          createdBy: auth.sub,\n          updatedBy: auth.sub,\n          createdAt: new Date(),\n          updatedAt: new Date(),\n        })\n\n        em.persist(override)\n        await em.flush()\n        savedOverride = override\n      }\n\n      try {\n        const eventBus = container.resolve('eventBus') as\n          | { emitEvent(event: string, payload: unknown, options?: unknown): Promise<void> }\n          | undefined\n        if (eventBus && typeof eventBus.emitEvent === 'function') {\n          await eventBus.emitEvent(\n            'workflows.definition.customized',\n            {\n              id: savedOverride.id,\n              workflowId: savedOverride.workflowId,\n              codeWorkflowId: savedOverride.codeWorkflowId ?? null,\n              tenantId: savedOverride.tenantId,\n              organizationId: savedOverride.organizationId,\n              userId: auth.sub ?? null,\n            },\n            { tenantId: savedOverride.tenantId, organizationId: savedOverride.organizationId, persistent: true },\n          )\n        }\n      } catch (eventError) {\n        logger.error('Failed to emit workflows.definition.customized event', { err: eventError })\n      }\n\n      if (guardResult?.shouldRunAfterSuccess) {\n        await runCrudMutationGuardAfterSuccess(container, {\n          tenantId: tenantId ?? '',\n          organizationId: organizationId ?? null,\n          userId: auth.sub ?? '',\n          resourceKind: 'workflows.definition',\n          resourceId: String(savedOverride.id),\n          operation: 'update',\n          requestMethod: 'PUT',\n          requestHeaders: request.headers,\n          metadata: guardResult.metadata,\n        })\n      }\n\n      return NextResponse.json({\n        data: serializeWorkflowDefinition(savedOverride),\n        message: 'Workflow definition customized successfully',\n      })\n    }\n\n    // Find existing definition\n    const definition = await em.findOne(WorkflowDefinition, {\n      id: params.id,\n      tenantId,\n      organizationId,\n      deletedAt: null,\n    })\n\n    if (!definition) {\n      return NextResponse.json(\n        { error: 'Workflow definition not found' },\n        { status: 404 }\n      )\n    }\n\n    try {\n      await enforceCommandOptimisticLockWithGuards(container, {\n        resourceKind: 'workflows.definition',\n        resourceId: definition.id,\n        current: definition.updatedAt ?? null,\n        request,\n      })\n    } catch (lockError) {\n      if (isCrudHttpError(lockError)) {\n        return NextResponse.json(lockError.body, { status: lockError.status })\n      }\n      throw lockError\n    }\n\n    // Update fields. workflowId is intentionally ignored \u2014 it identifies the\n    // row and renaming would break references. Version is user-managed and\n    // applied when supplied so the edit form can bump it explicitly.\n    if (input.workflowName !== undefined) {\n      definition.workflowName = input.workflowName\n    }\n    if (input.description !== undefined) {\n      definition.description = input.description\n    }\n    if (input.version !== undefined) {\n      definition.version = input.version\n    }\n    if (input.definition !== undefined) {\n      definition.definition = input.definition\n    }\n    if (input.metadata !== undefined) {\n      definition.metadata = input.metadata\n    }\n    if (input.enabled !== undefined) {\n      definition.enabled = input.enabled\n    }\n    if (input.effectiveFrom !== undefined) {\n      definition.effectiveFrom = input.effectiveFrom\n    }\n    if (input.effectiveTo !== undefined) {\n      definition.effectiveTo = input.effectiveTo\n    }\n\n    definition.updatedAt = new Date()\n\n    await em.flush()\n\n    if (guardResult?.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: tenantId ?? '',\n        organizationId: organizationId ?? null,\n        userId: auth.sub ?? '',\n        resourceKind: 'workflows.definition',\n        resourceId: String(definition.id),\n        operation: 'update',\n        requestMethod: 'PUT',\n        requestHeaders: request.headers,\n        metadata: guardResult.metadata,\n      })\n    }\n\n    // Embedded triggers may have changed; invalidate the in-memory cache so\n    // the wildcard event subscriber reloads them on the next event.\n    if (tenantId) invalidateTriggerCache(tenantId, organizationId ?? undefined)\n\n    return NextResponse.json({\n      data: serializeWorkflowDefinition(definition),\n      message: 'Workflow definition updated successfully',\n    })\n  } catch (error) {\n    logger.error('Error updating workflow definition', { err: error })\n    return NextResponse.json(\n      { error: 'Failed to update workflow definition' },\n      { status: 500 }\n    )\n  }\n}\n\n/**\n * DELETE /api/workflows/definitions/[id]\n *\n * Soft delete a workflow definition\n */\nexport async function DELETE(\n  request: NextRequest,\n  context: RouteContext\n) {\n  try {\n    const params = await context.params\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = scope?.selectedId ?? auth.orgId\n\n    // Check delete permission\n    const rbacService = container.resolve('rbacService')\n    const hasPermission = await rbacService.userHasAllFeatures(\n      auth.sub,\n      ['workflows.definitions.delete'],\n      {\n        tenantId,\n        organizationId,\n      }\n    )\n\n    if (!hasPermission) {\n      return NextResponse.json(\n        { error: 'Insufficient permissions' },\n        { status: 403 }\n      )\n    }\n\n    // Find existing definition\n    const definition = await em.findOne(WorkflowDefinition, {\n      id: params.id,\n      tenantId,\n      organizationId,\n      deletedAt: null,\n    })\n\n    if (!definition) {\n      return NextResponse.json(\n        { error: 'Workflow definition not found' },\n        { status: 404 }\n      )\n    }\n\n    const guardResult = await validateCrudMutationGuard(container, {\n      tenantId: tenantId ?? '',\n      organizationId: organizationId ?? null,\n      userId: auth.sub ?? '',\n      resourceKind: 'workflows.definition',\n      resourceId: params.id,\n      operation: 'delete',\n      requestMethod: 'DELETE',\n      requestHeaders: request.headers,\n    })\n    if (guardResult && !guardResult.ok) {\n      return NextResponse.json(guardResult.body, { status: guardResult.status })\n    }\n\n    // Check if there are active workflow instances using this definition\n    const { WorkflowInstance } = await import('../../../data/entities')\n    const activeInstances = await em.count(WorkflowInstance, {\n      definitionId: definition.id,\n      status: { $in: ['RUNNING', 'WAITING'] },\n    })\n\n    if (activeInstances > 0) {\n      return NextResponse.json(\n        {\n          error: `Cannot delete workflow definition with ${activeInstances} active instance(s)`,\n        },\n        { status: 409 }\n      )\n    }\n\n    // Soft delete\n    definition.deletedAt = new Date()\n    definition.updatedAt = new Date()\n\n    await em.flush()\n\n    if (guardResult?.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: tenantId ?? '',\n        organizationId: organizationId ?? null,\n        userId: auth.sub ?? '',\n        resourceKind: 'workflows.definition',\n        resourceId: String(definition.id),\n        operation: 'delete',\n        requestMethod: 'DELETE',\n        requestHeaders: request.headers,\n        metadata: guardResult.metadata,\n      })\n    }\n\n    if (tenantId) invalidateTriggerCache(tenantId, organizationId ?? undefined)\n\n    return NextResponse.json({\n      message: 'Workflow definition deleted successfully',\n    })\n  } catch (error) {\n    logger.error('Error deleting workflow definition', { err: error })\n    return NextResponse.json(\n      { error: 'Failed to delete workflow definition' },\n      { status: 500 }\n    )\n  }\n}\n\nexport const openApi = {\n  methods: {\n    GET: {\n      summary: 'Get workflow definition',\n      description: 'Get a single workflow definition by ID. Returns the complete workflow structure including steps and transitions (with embedded activities).',\n      tags: ['Workflows'],\n      pathParams: z.object({\n        id: z.string().describe('UUID for DB definitions, or \"code:<workflowId>\" for code-based definitions'),\n      }),\n      responses: [\n        {\n          status: 200,\n          description: 'Workflow definition found',\n          example: {\n            data: {\n              id: '123e4567-e89b-12d3-a456-426614174000',\n              workflowId: 'checkout-flow',\n              workflowName: 'Checkout Flow',\n              description: 'Complete checkout workflow for processing orders',\n              version: 1,\n              definition: {\n                steps: [\n                  {\n                    stepId: 'start',\n                    stepName: 'Start',\n                    stepType: 'START',\n                  },\n                  {\n                    stepId: 'validate-cart',\n                    stepName: 'Validate Cart',\n                    stepType: 'AUTOMATED',\n                    description: 'Validate cart items and check inventory',\n                  },\n                  {\n                    stepId: 'payment',\n                    stepName: 'Process Payment',\n                    stepType: 'AUTOMATED',\n                    description: 'Charge payment method',\n                    retryPolicy: {\n                      maxAttempts: 3,\n                      backoffMs: 1000,\n                    },\n                  },\n                  {\n                    stepId: 'end',\n                    stepName: 'End',\n                    stepType: 'END',\n                  },\n                ],\n                transitions: [\n                  {\n                    transitionId: 'start-to-validate',\n                    fromStepId: 'start',\n                    toStepId: 'validate-cart',\n                    trigger: 'auto',\n                  },\n                  {\n                    transitionId: 'validate-to-payment',\n                    fromStepId: 'validate-cart',\n                    toStepId: 'payment',\n                    trigger: 'auto',\n                  },\n                  {\n                    transitionId: 'payment-to-end',\n                    fromStepId: 'payment',\n                    toStepId: 'end',\n                    trigger: 'auto',\n                    activities: [\n                      {\n                        activityName: 'Send Order Confirmation',\n                        activityType: 'SEND_EMAIL',\n                        config: {\n                          to: '{{context.customerEmail}}',\n                          subject: 'Order Confirmation #{{context.orderId}}',\n                          template: 'order_confirmation',\n                        },\n                      },\n                    ],\n                  },\n                ],\n              },\n              enabled: true,\n              tenantId: '123e4567-e89b-12d3-a456-426614174001',\n              organizationId: '123e4567-e89b-12d3-a456-426614174002',\n              createdAt: '2025-12-08T10:00:00.000Z',\n              updatedAt: '2025-12-08T10:00:00.000Z',\n            },\n          },\n        },\n        {\n          status: 404,\n          description: 'Workflow definition not found',\n          example: {\n            error: 'Workflow definition not found',\n          },\n        },\n      ],\n    },\n    PUT: {\n      summary: 'Update workflow definition',\n      description: 'Update an existing workflow definition. Supports partial updates - only provided fields will be updated.',\n      tags: ['Workflows'],\n      pathParams: z.object({\n        id: z.string().uuid(),\n      }),\n      requestBody: {\n        schema: updateWorkflowDefinitionInputSchema,\n        example: {\n          definition: {\n            steps: [\n              {\n                stepId: 'start',\n                stepName: 'Start',\n                stepType: 'START',\n              },\n              {\n                stepId: 'validate-cart',\n                stepName: 'Validate Cart',\n                stepType: 'AUTOMATED',\n              },\n              {\n                stepId: 'payment',\n                stepName: 'Process Payment',\n                stepType: 'AUTOMATED',\n              },\n              {\n                stepId: 'confirmation',\n                stepName: 'Order Confirmation',\n                stepType: 'AUTOMATED',\n              },\n              {\n                stepId: 'end',\n                stepName: 'End',\n                stepType: 'END',\n              },\n            ],\n            transitions: [\n              {\n                transitionId: 'start-to-validate',\n                fromStepId: 'start',\n                toStepId: 'validate-cart',\n                trigger: 'auto',\n              },\n              {\n                transitionId: 'validate-to-payment',\n                fromStepId: 'validate-cart',\n                toStepId: 'payment',\n                trigger: 'auto',\n              },\n              {\n                transitionId: 'payment-to-confirmation',\n                fromStepId: 'payment',\n                toStepId: 'confirmation',\n                trigger: 'auto',\n              },\n              {\n                transitionId: 'confirmation-to-end',\n                fromStepId: 'confirmation',\n                toStepId: 'end',\n                trigger: 'auto',\n              },\n            ],\n          },\n          enabled: true,\n        },\n      },\n      responses: [\n        {\n          status: 200,\n          description: 'Workflow definition updated successfully',\n          example: {\n            data: {\n              id: '123e4567-e89b-12d3-a456-426614174000',\n              workflowId: 'checkout-flow',\n              workflowName: 'Checkout Flow',\n              description: 'Complete checkout workflow for processing orders',\n              version: 1,\n              definition: {\n                steps: [\n                  { stepId: 'start', stepName: 'Start', stepType: 'START' },\n                  {\n                    stepId: 'validate-cart',\n                    stepName: 'Validate Cart',\n                    stepType: 'AUTOMATED',\n                  },\n                  {\n                    stepId: 'payment',\n                    stepName: 'Process Payment',\n                    stepType: 'AUTOMATED',\n                  },\n                  {\n                    stepId: 'confirmation',\n                    stepName: 'Order Confirmation',\n                    stepType: 'AUTOMATED',\n                  },\n                  { stepId: 'end', stepName: 'End', stepType: 'END' },\n                ],\n                transitions: [\n                  {\n                    transitionId: 'start-to-validate',\n                    fromStepId: 'start',\n                    toStepId: 'validate-cart',\n                    trigger: 'auto',\n                  },\n                  {\n                    transitionId: 'validate-to-payment',\n                    fromStepId: 'validate-cart',\n                    toStepId: 'payment',\n                    trigger: 'auto',\n                  },\n                  {\n                    transitionId: 'payment-to-confirmation',\n                    fromStepId: 'payment',\n                    toStepId: 'confirmation',\n                    trigger: 'auto',\n                  },\n                  {\n                    transitionId: 'confirmation-to-end',\n                    fromStepId: 'confirmation',\n                    toStepId: 'end',\n                    trigger: 'auto',\n                  },\n                ],\n              },\n              enabled: true,\n              tenantId: '123e4567-e89b-12d3-a456-426614174001',\n              organizationId: '123e4567-e89b-12d3-a456-426614174002',\n              createdAt: '2025-12-08T10:00:00.000Z',\n              updatedAt: '2025-12-08T11:30:00.000Z',\n            },\n            message: 'Workflow definition updated successfully',\n          },\n        },\n        {\n          status: 400,\n          description: 'Validation error',\n          example: {\n            error: 'Validation failed',\n            details: [\n              {\n                code: 'invalid_type',\n                message: 'Expected object, received string',\n                path: ['definition'],\n              },\n            ],\n          },\n        },\n        {\n          status: 404,\n          description: 'Workflow definition not found',\n          example: {\n            error: 'Workflow definition not found',\n          },\n        },\n      ],\n    },\n    DELETE: {\n      summary: 'Delete workflow definition',\n      description: 'Soft delete a workflow definition. Cannot be deleted if there are active workflow instances (RUNNING or WAITING status) using this definition.',\n      tags: ['Workflows'],\n      pathParams: z.object({\n        id: z.string().uuid(),\n      }),\n      responses: [\n        {\n          status: 200,\n          description: 'Workflow definition deleted successfully',\n          example: {\n            message: 'Workflow definition deleted successfully',\n          },\n        },\n        {\n          status: 404,\n          description: 'Workflow definition not found',\n          example: {\n            error: 'Workflow definition not found',\n          },\n        },\n        {\n          status: 409,\n          description: 'Cannot delete - active workflow instances exist',\n          example: {\n            error: 'Cannot delete workflow definition with 3 active instance(s)',\n          },\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AASA,SAAsB,oBAAoB;AAC1C,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,sCAAsC;AAC/C,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,OAEK;AACP,SAAS,6BAA6B,uCAAuC;AAC7E,SAAS,8BAA8B;AACvC,SAAS,iBAAiB,2BAA2B;AACrD,SAAS,wBAAwB;AACjC,SAAS,yCAAyC;AAClD,SAAS,4CAA4C;AACrD,SAAS,2BAA2B,wCAAwC;AAC5E,SAAS,8CAA8C;AACvD,SAAS,uBAAuB;AAChC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEvC,qCAAqC;AAAA,EACnC,wBAAwB,kCAAkC;AAAA,IACxD,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,IACV,iBAAiB;AAAA,EACnB,CAAC;AACH,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,4BAA4B;AAChD;AAaA,eAAsB,IACpB,SACA,SACA;AACA,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAC7B,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,YAAY,+BAA+B,OAAO,IAAI;AAG5D,QAAI,OAAO,GAAG,WAAW,OAAO,GAAG;AACjC,YAAM,aAAa,OAAO,GAAG,MAAM,CAAC;AACpC,YAAM,UAAU,gBAAgB,UAAU;AAC1C,UAAI,CAAC,SAAS;AACZ,eAAO,aAAa;AAAA,UAClB,EAAE,OAAO,gCAAgC;AAAA,UACzC,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AACA,aAAO,aAAa,KAAK;AAAA,QACvB,MAAM,gCAAgC,SAAS,OAAO,EAAE;AAAA,MAC1D,CAAC;AAAA,IACH;AAEA,UAAM,aAAa,MAAM,GAAG,QAAQ,oBAAoB;AAAA,MACtD,IAAI,OAAO;AAAA,MACX;AAAA,MACA,GAAG,UAAU;AAAA,MACb,WAAW;AAAA,IACb,CAAC;AAED,QAAI,CAAC,YAAY;AAKf,YAAM,UAAU,oBAAoB,EAAE;AAAA,QACpC,CAAC,aAAa,iBAAiB,SAAS,UAAU,MAAM,OAAO;AAAA,MACjE;AACA,UAAI,SAAS;AACX,eAAO,aAAa,KAAK;AAAA,UACvB,MAAM,gCAAgC,SAAS,QAAQ,QAAQ,UAAU,EAAE;AAAA,QAC7E,CAAC;AAAA,MACH;AACA,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,gCAAgC;AAAA,QACzC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,WAAO,aAAa,KAAK,EAAE,MAAM,4BAA4B,UAAU,EAAE,CAAC;AAAA,EAC5E,SAAS,OAAO;AACd,WAAO,MAAM,qCAAqC,EAAE,KAAK,MAAM,CAAC;AAChE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,oCAAoC;AAAA,MAC7C,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAOA,eAAsB,IACpB,SACA,SACA;AACA,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAC7B,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,OAAO,cAAc,KAAK;AAGjD,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,gBAAgB,MAAM,YAAY;AAAA,MACtC,KAAK;AAAA,MACL,CAAC,4BAA4B;AAAA,MAC7B;AAAA,QACE;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,eAAe;AAClB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,2BAA2B;AAAA,QACpC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,OAAO,MAAM,QAAQ,KAAK;AAGhC,UAAM,aAAa,oCAAoC,UAAU,IAAI;AACrE,QAAI,CAAC,WAAW,SAAS;AACvB,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO;AAAA,UACP,SAAS,WAAW,MAAM;AAAA,QAC5B;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,QAA0C,WAAW;AAC3D,UAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,MAC7D,UAAU,YAAY;AAAA,MACtB,gBAAgB,kBAAkB;AAAA,MAClC,QAAQ,KAAK,OAAO;AAAA,MACpB,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,WAAW;AAAA,MACX,eAAe;AAAA,MACf,gBAAgB,QAAQ;AAAA,MACxB,iBAAiB;AAAA,IACnB,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,IAC3E;AAGA,QAAI,OAAO,GAAG,WAAW,OAAO,GAAG;AACjC,YAAM,aAAa,OAAO,GAAG,MAAM,CAAC;AACpC,YAAM,UAAU,gBAAgB,UAAU;AAC1C,UAAI,CAAC,SAAS;AACZ,eAAO,aAAa;AAAA,UAClB,EAAE,OAAO,gCAAgC;AAAA,UACzC,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAGA,YAAM,mBAAmB,MAAM,GAAG,QAAQ,oBAAoB;AAAA,QAC5D,YAAY,QAAQ;AAAA,QACpB;AAAA,MACF,CAAC;AAED,UAAI;AACJ,UAAI,kBAAkB;AACpB,YAAI;AACF,gBAAM,uCAAuC,WAAW;AAAA,YACtD,cAAc;AAAA,YACd,YAAY,iBAAiB;AAAA,YAC7B,SAAS,iBAAiB,aAAa;AAAA,YACvC;AAAA,UACF,CAAC;AAAA,QACH,SAAS,WAAW;AAClB,cAAI,gBAAgB,SAAS,GAAG;AAC9B,mBAAO,aAAa,KAAK,UAAU,MAAM,EAAE,QAAQ,UAAU,OAAO,CAAC;AAAA,UACvE;AACA,gBAAM;AAAA,QACR;AAEA,yBAAiB,YAAY;AAC7B,yBAAiB,eAAe,QAAQ;AACxC,yBAAiB,cAAc,QAAQ;AACvC,yBAAiB,UAAU,QAAQ;AACnC,yBAAiB,aAAa,MAAM,cAAc,QAAQ;AAC1D,yBAAiB,WAAW,QAAQ,YAAY;AAChD,yBAAiB,UAAU,MAAM,WAAW,QAAQ;AACpD,yBAAiB,iBAAiB,QAAQ;AAC1C,yBAAiB,YAAY,KAAK;AAClC,yBAAiB,YAAY,oBAAI,KAAK;AACtC,cAAM,GAAG,MAAM;AACf,wBAAgB;AAAA,MAClB,OAAO;AAEL,cAAM,WAAW,GAAG,OAAO,oBAAoB;AAAA,UAC7C,YAAY,QAAQ;AAAA,UACpB,cAAc,QAAQ;AAAA,UACtB,aAAa,QAAQ;AAAA,UACrB,SAAS,QAAQ;AAAA,UACjB,YAAY,MAAM,cAAc,QAAQ;AAAA,UACxC,UAAU,QAAQ;AAAA,UAClB,SAAS,MAAM,WAAW,QAAQ;AAAA,UAClC,gBAAgB,QAAQ;AAAA,UACxB;AAAA,UACA;AAAA,UACA,WAAW,KAAK;AAAA,UAChB,WAAW,KAAK;AAAA,UAChB,WAAW,oBAAI,KAAK;AAAA,UACpB,WAAW,oBAAI,KAAK;AAAA,QACtB,CAAC;AAED,WAAG,QAAQ,QAAQ;AACnB,cAAM,GAAG,MAAM;AACf,wBAAgB;AAAA,MAClB;AAEA,UAAI;AACF,cAAM,WAAW,UAAU,QAAQ,UAAU;AAG7C,YAAI,YAAY,OAAO,SAAS,cAAc,YAAY;AACxD,gBAAM,SAAS;AAAA,YACb;AAAA,YACA;AAAA,cACE,IAAI,cAAc;AAAA,cAClB,YAAY,cAAc;AAAA,cAC1B,gBAAgB,cAAc,kBAAkB;AAAA,cAChD,UAAU,cAAc;AAAA,cACxB,gBAAgB,cAAc;AAAA,cAC9B,QAAQ,KAAK,OAAO;AAAA,YACtB;AAAA,YACA,EAAE,UAAU,cAAc,UAAU,gBAAgB,cAAc,gBAAgB,YAAY,KAAK;AAAA,UACrG;AAAA,QACF;AAAA,MACF,SAAS,YAAY;AACnB,eAAO,MAAM,wDAAwD,EAAE,KAAK,WAAW,CAAC;AAAA,MAC1F;AAEA,UAAI,aAAa,uBAAuB;AACtC,cAAM,iCAAiC,WAAW;AAAA,UAChD,UAAU,YAAY;AAAA,UACtB,gBAAgB,kBAAkB;AAAA,UAClC,QAAQ,KAAK,OAAO;AAAA,UACpB,cAAc;AAAA,UACd,YAAY,OAAO,cAAc,EAAE;AAAA,UACnC,WAAW;AAAA,UACX,eAAe;AAAA,UACf,gBAAgB,QAAQ;AAAA,UACxB,UAAU,YAAY;AAAA,QACxB,CAAC;AAAA,MACH;AAEA,aAAO,aAAa,KAAK;AAAA,QACvB,MAAM,4BAA4B,aAAa;AAAA,QAC/C,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAGA,UAAM,aAAa,MAAM,GAAG,QAAQ,oBAAoB;AAAA,MACtD,IAAI,OAAO;AAAA,MACX;AAAA,MACA;AAAA,MACA,WAAW;AAAA,IACb,CAAC;AAED,QAAI,CAAC,YAAY;AACf,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,gCAAgC;AAAA,QACzC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,QAAI;AACF,YAAM,uCAAuC,WAAW;AAAA,QACtD,cAAc;AAAA,QACd,YAAY,WAAW;AAAA,QACvB,SAAS,WAAW,aAAa;AAAA,QACjC;AAAA,MACF,CAAC;AAAA,IACH,SAAS,WAAW;AAClB,UAAI,gBAAgB,SAAS,GAAG;AAC9B,eAAO,aAAa,KAAK,UAAU,MAAM,EAAE,QAAQ,UAAU,OAAO,CAAC;AAAA,MACvE;AACA,YAAM;AAAA,IACR;AAKA,QAAI,MAAM,iBAAiB,QAAW;AACpC,iBAAW,eAAe,MAAM;AAAA,IAClC;AACA,QAAI,MAAM,gBAAgB,QAAW;AACnC,iBAAW,cAAc,MAAM;AAAA,IACjC;AACA,QAAI,MAAM,YAAY,QAAW;AAC/B,iBAAW,UAAU,MAAM;AAAA,IAC7B;AACA,QAAI,MAAM,eAAe,QAAW;AAClC,iBAAW,aAAa,MAAM;AAAA,IAChC;AACA,QAAI,MAAM,aAAa,QAAW;AAChC,iBAAW,WAAW,MAAM;AAAA,IAC9B;AACA,QAAI,MAAM,YAAY,QAAW;AAC/B,iBAAW,UAAU,MAAM;AAAA,IAC7B;AACA,QAAI,MAAM,kBAAkB,QAAW;AACrC,iBAAW,gBAAgB,MAAM;AAAA,IACnC;AACA,QAAI,MAAM,gBAAgB,QAAW;AACnC,iBAAW,cAAc,MAAM;AAAA,IACjC;AAEA,eAAW,YAAY,oBAAI,KAAK;AAEhC,UAAM,GAAG,MAAM;AAEf,QAAI,aAAa,uBAAuB;AACtC,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,YAAY;AAAA,QACtB,gBAAgB,kBAAkB;AAAA,QAClC,QAAQ,KAAK,OAAO;AAAA,QACpB,cAAc;AAAA,QACd,YAAY,OAAO,WAAW,EAAE;AAAA,QAChC,WAAW;AAAA,QACX,eAAe;AAAA,QACf,gBAAgB,QAAQ;AAAA,QACxB,UAAU,YAAY;AAAA,MACxB,CAAC;AAAA,IACH;AAIA,QAAI,SAAU,wBAAuB,UAAU,kBAAkB,MAAS;AAE1E,WAAO,aAAa,KAAK;AAAA,MACvB,MAAM,4BAA4B,UAAU;AAAA,MAC5C,SAAS;AAAA,IACX,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,MAAM,sCAAsC,EAAE,KAAK,MAAM,CAAC;AACjE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,uCAAuC;AAAA,MAChD,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAOA,eAAsB,OACpB,SACA,SACA;AACA,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAC7B,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,OAAO,cAAc,KAAK;AAGjD,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,gBAAgB,MAAM,YAAY;AAAA,MACtC,KAAK;AAAA,MACL,CAAC,8BAA8B;AAAA,MAC/B;AAAA,QACE;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,eAAe;AAClB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,2BAA2B;AAAA,QACpC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,aAAa,MAAM,GAAG,QAAQ,oBAAoB;AAAA,MACtD,IAAI,OAAO;AAAA,MACX;AAAA,MACA;AAAA,MACA,WAAW;AAAA,IACb,CAAC;AAED,QAAI,CAAC,YAAY;AACf,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,gCAAgC;AAAA,QACzC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,MAC7D,UAAU,YAAY;AAAA,MACtB,gBAAgB,kBAAkB;AAAA,MAClC,QAAQ,KAAK,OAAO;AAAA,MACpB,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,WAAW;AAAA,MACX,eAAe;AAAA,MACf,gBAAgB,QAAQ;AAAA,IAC1B,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,IAC3E;AAGA,UAAM,EAAE,iBAAiB,IAAI,MAAM,OAAO,wBAAwB;AAClE,UAAM,kBAAkB,MAAM,GAAG,MAAM,kBAAkB;AAAA,MACvD,cAAc,WAAW;AAAA,MACzB,QAAQ,EAAE,KAAK,CAAC,WAAW,SAAS,EAAE;AAAA,IACxC,CAAC;AAED,QAAI,kBAAkB,GAAG;AACvB,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO,0CAA0C,eAAe;AAAA,QAClE;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,eAAW,YAAY,oBAAI,KAAK;AAChC,eAAW,YAAY,oBAAI,KAAK;AAEhC,UAAM,GAAG,MAAM;AAEf,QAAI,aAAa,uBAAuB;AACtC,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,YAAY;AAAA,QACtB,gBAAgB,kBAAkB;AAAA,QAClC,QAAQ,KAAK,OAAO;AAAA,QACpB,cAAc;AAAA,QACd,YAAY,OAAO,WAAW,EAAE;AAAA,QAChC,WAAW;AAAA,QACX,eAAe;AAAA,QACf,gBAAgB,QAAQ;AAAA,QACxB,UAAU,YAAY;AAAA,MACxB,CAAC;AAAA,IACH;AAEA,QAAI,SAAU,wBAAuB,UAAU,kBAAkB,MAAS;AAE1E,WAAO,aAAa,KAAK;AAAA,MACvB,SAAS;AAAA,IACX,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,MAAM,sCAAsC,EAAE,KAAK,MAAM,CAAC;AACjE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,uCAAuC;AAAA,MAChD,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,MAAM,CAAC,WAAW;AAAA,MAClB,YAAY,EAAE,OAAO;AAAA,QACnB,IAAI,EAAE,OAAO,EAAE,SAAS,4EAA4E;AAAA,MACtG,CAAC;AAAA,MACD,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,SAAS;AAAA,YACP,MAAM;AAAA,cACJ,IAAI;AAAA,cACJ,YAAY;AAAA,cACZ,cAAc;AAAA,cACd,aAAa;AAAA,cACb,SAAS;AAAA,cACT,YAAY;AAAA,gBACV,OAAO;AAAA,kBACL;AAAA,oBACE,QAAQ;AAAA,oBACR,UAAU;AAAA,oBACV,UAAU;AAAA,kBACZ;AAAA,kBACA;AAAA,oBACE,QAAQ;AAAA,oBACR,UAAU;AAAA,oBACV,UAAU;AAAA,oBACV,aAAa;AAAA,kBACf;AAAA,kBACA;AAAA,oBACE,QAAQ;AAAA,oBACR,UAAU;AAAA,oBACV,UAAU;AAAA,oBACV,aAAa;AAAA,oBACb,aAAa;AAAA,sBACX,aAAa;AAAA,sBACb,WAAW;AAAA,oBACb;AAAA,kBACF;AAAA,kBACA;AAAA,oBACE,QAAQ;AAAA,oBACR,UAAU;AAAA,oBACV,UAAU;AAAA,kBACZ;AAAA,gBACF;AAAA,gBACA,aAAa;AAAA,kBACX;AAAA,oBACE,cAAc;AAAA,oBACd,YAAY;AAAA,oBACZ,UAAU;AAAA,oBACV,SAAS;AAAA,kBACX;AAAA,kBACA;AAAA,oBACE,cAAc;AAAA,oBACd,YAAY;AAAA,oBACZ,UAAU;AAAA,oBACV,SAAS;AAAA,kBACX;AAAA,kBACA;AAAA,oBACE,cAAc;AAAA,oBACd,YAAY;AAAA,oBACZ,UAAU;AAAA,oBACV,SAAS;AAAA,oBACT,YAAY;AAAA,sBACV;AAAA,wBACE,cAAc;AAAA,wBACd,cAAc;AAAA,wBACd,QAAQ;AAAA,0BACN,IAAI;AAAA,0BACJ,SAAS;AAAA,0BACT,UAAU;AAAA,wBACZ;AAAA,sBACF;AAAA,oBACF;AAAA,kBACF;AAAA,gBACF;AAAA,cACF;AAAA,cACA,SAAS;AAAA,cACT,UAAU;AAAA,cACV,gBAAgB;AAAA,cAChB,WAAW;AAAA,cACX,WAAW;AAAA,YACb;AAAA,UACF;AAAA,QACF;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,SAAS;AAAA,YACP,OAAO;AAAA,UACT;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,MAAM,CAAC,WAAW;AAAA,MAClB,YAAY,EAAE,OAAO;AAAA,QACnB,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,MACtB,CAAC;AAAA,MACD,aAAa;AAAA,QACX,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,YAAY;AAAA,YACV,OAAO;AAAA,cACL;AAAA,gBACE,QAAQ;AAAA,gBACR,UAAU;AAAA,gBACV,UAAU;AAAA,cACZ;AAAA,cACA;AAAA,gBACE,QAAQ;AAAA,gBACR,UAAU;AAAA,gBACV,UAAU;AAAA,cACZ;AAAA,cACA;AAAA,gBACE,QAAQ;AAAA,gBACR,UAAU;AAAA,gBACV,UAAU;AAAA,cACZ;AAAA,cACA;AAAA,gBACE,QAAQ;AAAA,gBACR,UAAU;AAAA,gBACV,UAAU;AAAA,cACZ;AAAA,cACA;AAAA,gBACE,QAAQ;AAAA,gBACR,UAAU;AAAA,gBACV,UAAU;AAAA,cACZ;AAAA,YACF;AAAA,YACA,aAAa;AAAA,cACX;AAAA,gBACE,cAAc;AAAA,gBACd,YAAY;AAAA,gBACZ,UAAU;AAAA,gBACV,SAAS;AAAA,cACX;AAAA,cACA;AAAA,gBACE,cAAc;AAAA,gBACd,YAAY;AAAA,gBACZ,UAAU;AAAA,gBACV,SAAS;AAAA,cACX;AAAA,cACA;AAAA,gBACE,cAAc;AAAA,gBACd,YAAY;AAAA,gBACZ,UAAU;AAAA,gBACV,SAAS;AAAA,cACX;AAAA,cACA;AAAA,gBACE,cAAc;AAAA,gBACd,YAAY;AAAA,gBACZ,UAAU;AAAA,gBACV,SAAS;AAAA,cACX;AAAA,YACF;AAAA,UACF;AAAA,UACA,SAAS;AAAA,QACX;AAAA,MACF;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,SAAS;AAAA,YACP,MAAM;AAAA,cACJ,IAAI;AAAA,cACJ,YAAY;AAAA,cACZ,cAAc;AAAA,cACd,aAAa;AAAA,cACb,SAAS;AAAA,cACT,YAAY;AAAA,gBACV,OAAO;AAAA,kBACL,EAAE,QAAQ,SAAS,UAAU,SAAS,UAAU,QAAQ;AAAA,kBACxD;AAAA,oBACE,QAAQ;AAAA,oBACR,UAAU;AAAA,oBACV,UAAU;AAAA,kBACZ;AAAA,kBACA;AAAA,oBACE,QAAQ;AAAA,oBACR,UAAU;AAAA,oBACV,UAAU;AAAA,kBACZ;AAAA,kBACA;AAAA,oBACE,QAAQ;AAAA,oBACR,UAAU;AAAA,oBACV,UAAU;AAAA,kBACZ;AAAA,kBACA,EAAE,QAAQ,OAAO,UAAU,OAAO,UAAU,MAAM;AAAA,gBACpD;AAAA,gBACA,aAAa;AAAA,kBACX;AAAA,oBACE,cAAc;AAAA,oBACd,YAAY;AAAA,oBACZ,UAAU;AAAA,oBACV,SAAS;AAAA,kBACX;AAAA,kBACA;AAAA,oBACE,cAAc;AAAA,oBACd,YAAY;AAAA,oBACZ,UAAU;AAAA,oBACV,SAAS;AAAA,kBACX;AAAA,kBACA;AAAA,oBACE,cAAc;AAAA,oBACd,YAAY;AAAA,oBACZ,UAAU;AAAA,oBACV,SAAS;AAAA,kBACX;AAAA,kBACA;AAAA,oBACE,cAAc;AAAA,oBACd,YAAY;AAAA,oBACZ,UAAU;AAAA,oBACV,SAAS;AAAA,kBACX;AAAA,gBACF;AAAA,cACF;AAAA,cACA,SAAS;AAAA,cACT,UAAU;AAAA,cACV,gBAAgB;AAAA,cAChB,WAAW;AAAA,cACX,WAAW;AAAA,YACb;AAAA,YACA,SAAS;AAAA,UACX;AAAA,QACF;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,SAAS;AAAA,YACP,OAAO;AAAA,YACP,SAAS;AAAA,cACP;AAAA,gBACE,MAAM;AAAA,gBACN,SAAS;AAAA,gBACT,MAAM,CAAC,YAAY;AAAA,cACrB;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,SAAS;AAAA,YACP,OAAO;AAAA,UACT;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,aAAa;AAAA,MACb,MAAM,CAAC,WAAW;AAAA,MAClB,YAAY,EAAE,OAAO;AAAA,QACnB,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,MACtB,CAAC;AAAA,MACD,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,SAAS;AAAA,YACP,SAAS;AAAA,UACX;AAAA,QACF;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,SAAS;AAAA,YACP,OAAO;AAAA,UACT;AAAA,QACF;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,SAAS;AAAA,YACP,OAAO;AAAA,UACT;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/workflows/lib/event-trigger-service.js

@@ -7,6 +7,8 @@ import {
   WorkflowInstance
 } from "../data/entities.js";
 import { startWorkflow, executeWorkflow } from "./workflow-executor.js";
+import { getAllCodeWorkflows } from "./code-registry.js";
+import { codeWorkflowUuid } from "./find-definition.js";
 import { createLogger } from "@open-mercato/shared/lib/logger";
 const logger = createLogger("workflows").child({ component: "event-trigger" });
 const TRIGGER_CACHE_TTL = 5 * 60 * 1e3;
@@ -238,14 +240,16 @@ async function loadEmbeddedTriggers(em, tenantId, organizationId) {
     {
       tenantId,
       organizationId,
-      enabled: true,
       deletedAt: null
     },
     {},
     { tenantId, organizationId }
   );
   const triggers = [];
+  const workflowIds = /* @__PURE__ */ new Set();
   for (const def of definitions) {
+    workflowIds.add(def.workflowId);
+    if (!def.enabled) continue;
     const embeddedTriggers = def.definition?.triggers;
     if (!embeddedTriggers || embeddedTriggers.length === 0) continue;
     for (const trigger of embeddedTriggers) {
@@ -268,6 +272,36 @@ async function loadEmbeddedTriggers(em, tenantId, organizationId) {
       });
     }
   }
+  return { triggers, workflowIds };
+}
+function loadCodeTriggers(tenantId, organizationId, dbBackedWorkflowIds) {
+  const triggers = [];
+  for (const codeDef of getAllCodeWorkflows()) {
+    if (!codeDef.enabled) continue;
+    if (dbBackedWorkflowIds.has(codeDef.workflowId)) continue;
+    const embeddedTriggers = codeDef.definition?.triggers;
+    if (!embeddedTriggers || embeddedTriggers.length === 0) continue;
+    const definitionId = codeWorkflowUuid(codeDef.workflowId);
+    for (const trigger of embeddedTriggers) {
+      if (!trigger.enabled) continue;
+      triggers.push({
+        id: `code:${codeDef.workflowId}:${trigger.triggerId}`,
+        triggerId: trigger.triggerId,
+        name: trigger.name,
+        description: trigger.description ?? null,
+        eventPattern: trigger.eventPattern,
+        config: trigger.config ?? null,
+        enabled: trigger.enabled,
+        priority: trigger.priority,
+        workflowDefinitionId: definitionId,
+        workflowId: codeDef.workflowId,
+        workflowVersion: codeDef.version,
+        source: "code",
+        tenantId,
+        organizationId
+      });
+    }
+  }
   return triggers;
 }
 async function loadTriggersForTenant(em, tenantId, organizationId, cacheService) {
@@ -277,11 +311,17 @@ async function loadTriggersForTenant(em, tenantId, organizationId, cacheService)
   if (cached && Date.now() - cached.cachedAt < TRIGGER_CACHE_TTL) {
     return cached.triggers;
   }
-  const [legacyTriggers, embeddedTriggers] = await Promise.all([
+  const [legacyTriggers, embedded] = await Promise.all([
     loadLegacyTriggers(em, tenantId, organizationId),
     loadEmbeddedTriggers(em, tenantId, organizationId)
   ]);
-  const allTriggers = [...legacyTriggers, ...embeddedTriggers].sort((a, b) => b.priority - a.priority);
+  const embeddedTriggers = embedded.triggers;
+  const dbBackedWorkflowIds = /* @__PURE__ */ new Set([
+    ...embedded.workflowIds,
+    ...legacyTriggers.map((t) => t.workflowId)
+  ]);
+  const codeTriggers = loadCodeTriggers(tenantId, organizationId, dbBackedWorkflowIds);
+  const allTriggers = [...legacyTriggers, ...embeddedTriggers, ...codeTriggers].sort((a, b) => b.priority - a.priority);
   cache.set(cacheKey, {
     triggers: allTriggers,
     cachedAt: Date.now()
@@ -413,6 +453,7 @@ export {
   evaluateFilterConditions,
   findMatchingTriggers,
   invalidateTriggerCache,
+  loadCodeTriggers,
   loadTriggersForTenant,
   mapEventToContext,
   processEventTriggers

package/dist/modules/workflows/lib/event-trigger-service.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/workflows/lib/event-trigger-service.ts"],
-  "sourcesContent": ["/**\n * Workflows Module - Event Trigger Service\n *\n * Core service for evaluating and processing workflow event triggers.\n * Handles pattern matching, filter evaluation, context mapping, and workflow starting.\n */\n\nimport type { EntityManager } from '@mikro-orm/core'\nimport type { EntityManager as PostgreSqlEntityManager } from '@mikro-orm/postgresql'\nimport type { AwilixContainer } from 'awilix'\nimport type { CacheService } from '@open-mercato/cache'\nimport { matchEventPattern } from '@open-mercato/shared/lib/events/patterns'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { testLinearRegex } from '@open-mercato/shared/lib/regex/linear'\nimport {\n  WorkflowEventTrigger,\n  WorkflowDefinition,\n  WorkflowInstance,\n  type TriggerFilterCondition,\n  type TriggerContextMapping,\n  type WorkflowEventTriggerConfig,\n  type WorkflowDefinitionTrigger,\n} from '../data/entities'\nimport { startWorkflow, executeWorkflow } from './workflow-executor'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows').child({ component: 'event-trigger' })\n\n// ============================================================================\n// Types\n// ============================================================================\n\nexport interface EventTriggerContext {\n  eventName: string\n  payload: Record<string, unknown>\n  tenantId: string\n  organizationId: string\n}\n\nexport interface ProcessTriggersResult {\n  triggered: number\n  skipped: number\n  errors: Array<{ triggerId: string; error: string }>\n  instances: Array<{ triggerId: string; instanceId: string }>\n}\n\n/**\n * Unified trigger interface for both legacy (entity) and embedded (definition) triggers\n */\nexport interface UnifiedTrigger {\n  id: string  // For legacy: entity ID, for embedded: `${definitionId}:${triggerId}`\n  triggerId: string\n  name: string\n  description?: string | null\n  eventPattern: string\n  config: WorkflowEventTriggerConfig | null\n  enabled: boolean\n  priority: number\n  workflowDefinitionId: string\n  workflowId: string\n  workflowVersion: number\n  source: 'legacy' | 'embedded'\n  tenantId: string\n  organizationId: string\n}\n\ninterface CachedTriggers {\n  triggers: UnifiedTrigger[]\n  cachedAt: number\n}\n\n// Cache TTL: 5 minutes\nconst TRIGGER_CACHE_TTL = 5 * 60 * 1000\n\nfunction readEventActorUserId(payload: Record<string, unknown>): string | null {\n  const candidate = payload.userId ?? payload.actorUserId\n  if (typeof candidate !== 'string') return null\n  const trimmed = candidate.trim()\n  return trimmed.length > 0 && !trimmed.startsWith('trigger:') ? trimmed : null\n}\n\n// ============================================================================\n// Pattern Matching\n// ============================================================================\n\n// ============================================================================\n// Filter Evaluation\n// ============================================================================\n\nconst MAX_WORKFLOW_REGEX_PATTERN_LENGTH = 200\nconst MAX_WORKFLOW_REGEX_INPUT_LENGTH = 10_000\n\n/**\n * Get a nested value from an object using dot notation.\n */\nfunction getNestedValue(obj: unknown, path: string): unknown {\n  if (obj === null || obj === undefined) return undefined\n\n  const parts = path.split('.')\n  let current: unknown = obj\n\n  for (const part of parts) {\n    if (current === null || current === undefined) return undefined\n    if (typeof current !== 'object') return undefined\n    current = (current as Record<string, unknown>)[part]\n  }\n\n  return current\n}\n\nfunction getQuantifierEnd(pattern: string, index: number): number | null {\n  const char = pattern[index]\n  if (char === '*' || char === '+' || char === '?') return index\n  if (char !== '{') return null\n\n  const closeIndex = pattern.indexOf('}', index + 1)\n  if (closeIndex === -1) return null\n\n  const body = pattern.slice(index + 1, closeIndex)\n  return /^[0-9]+(?:,[0-9]*)?$/.test(body) ? closeIndex : null\n}\n\ninterface RegexGroupFrame {\n  hasAlternation: boolean\n  hasQuantifier: boolean\n}\n\nfunction isSafeWorkflowRegexPattern(pattern: string): boolean {\n  if (pattern.length > MAX_WORKFLOW_REGEX_PATTERN_LENGTH) return false\n\n  const groupStack: RegexGroupFrame[] = [{ hasAlternation: false, hasQuantifier: false }]\n  let inCharClass = false\n  let lastClosedGroup: RegexGroupFrame | null = null\n  let lastAtomWasQuantified = false\n\n  // Hand-written single-pass lexer: `index` is intentionally advanced inside the\n  // loop body (escape pairs, `(?:` prefixes, multi-char quantifiers, lazy `?`) on\n  // top of the `index += 1` update clause. Do not \"simplify\" these in-body writes.\n  for (let index = 0; index < pattern.length; index += 1) {\n    const char = pattern[index]\n\n    if (char === '\\\\') {\n      const next = pattern[index + 1]\n      if (!inCharClass && (/[1-9]/.test(next ?? '') || (next === 'k' && pattern[index + 2] === '<'))) {\n        return false\n      }\n      index += 1\n      lastClosedGroup = null\n      lastAtomWasQuantified = false\n      continue\n    }\n\n    if (inCharClass) {\n      if (char === ']') {\n        inCharClass = false\n        lastAtomWasQuantified = false\n      }\n      lastClosedGroup = null\n      continue\n    }\n\n    if (char === '[') {\n      inCharClass = true\n      lastClosedGroup = null\n      lastAtomWasQuantified = false\n      continue\n    }\n\n    if (char === '(') {\n      if (pattern[index + 1] === '?') {\n        if (pattern[index + 2] !== ':') return false\n        index += 2\n      }\n\n      groupStack.push({ hasAlternation: false, hasQuantifier: false })\n      lastClosedGroup = null\n      lastAtomWasQuantified = false\n      continue\n    }\n\n    if (char === ')') {\n      if (groupStack.length === 1) return false\n      lastClosedGroup = groupStack.pop()!\n      lastAtomWasQuantified = false\n      continue\n    }\n\n    if (char === '|') {\n      groupStack[groupStack.length - 1].hasAlternation = true\n      lastClosedGroup = null\n      lastAtomWasQuantified = false\n      continue\n    }\n\n    const quantifierEnd = getQuantifierEnd(pattern, index)\n    if (quantifierEnd !== null) {\n      if (lastAtomWasQuantified) return false\n      if (lastClosedGroup?.hasAlternation || lastClosedGroup?.hasQuantifier) return false\n\n      groupStack[groupStack.length - 1].hasQuantifier = true\n      lastClosedGroup = null\n      lastAtomWasQuantified = true\n      index = quantifierEnd\n\n      if (pattern[index + 1] === '?') {\n        index += 1\n      }\n\n      continue\n    }\n\n    lastClosedGroup = null\n    lastAtomWasQuantified = false\n  }\n\n  return groupStack.length === 1 && !inCharClass\n}\n\n/**\n * Evaluate a single filter condition against the event payload.\n */\nfunction evaluateCondition(condition: TriggerFilterCondition, payload: Record<string, unknown>): boolean {\n  const value = getNestedValue(payload, condition.field)\n  const expected = condition.value\n\n  switch (condition.operator) {\n    case 'eq':\n      return value === expected\n\n    case 'neq':\n      return value !== expected\n\n    case 'gt':\n      return typeof value === 'number' && typeof expected === 'number' && value > expected\n\n    case 'gte':\n      return typeof value === 'number' && typeof expected === 'number' && value >= expected\n\n    case 'lt':\n      return typeof value === 'number' && typeof expected === 'number' && value < expected\n\n    case 'lte':\n      return typeof value === 'number' && typeof expected === 'number' && value <= expected\n\n    case 'contains':\n      if (typeof value === 'string' && typeof expected === 'string') {\n        return value.includes(expected)\n      }\n      if (Array.isArray(value)) {\n        return value.includes(expected)\n      }\n      return false\n\n    case 'startsWith':\n      return typeof value === 'string' && typeof expected === 'string' && value.startsWith(expected)\n\n    case 'endsWith':\n      return typeof value === 'string' && typeof expected === 'string' && value.endsWith(expected)\n\n    case 'in':\n      return Array.isArray(expected) && expected.includes(value)\n\n    case 'notIn':\n      return Array.isArray(expected) && !expected.includes(value)\n\n    case 'exists':\n      return value !== undefined && value !== null\n\n    case 'notExists':\n      return value === undefined || value === null\n\n    case 'regex':\n      if (typeof value !== 'string' || typeof expected !== 'string') return false\n      if (value.length > MAX_WORKFLOW_REGEX_INPUT_LENGTH) return false\n      if (!isSafeWorkflowRegexPattern(expected)) return false\n      {\n        const result = testLinearRegex(expected, value, {\n          maxPatternLength: MAX_WORKFLOW_REGEX_PATTERN_LENGTH,\n          maxInputLength: MAX_WORKFLOW_REGEX_INPUT_LENGTH,\n        })\n        return result.ok ? result.matched : false\n      }\n\n    default:\n      return false\n  }\n}\n\n/**\n * Evaluate all filter conditions against the event payload.\n * All conditions must pass (AND logic).\n */\nexport function evaluateFilterConditions(\n  conditions: TriggerFilterCondition[] | undefined,\n  payload: Record<string, unknown>\n): boolean {\n  if (!conditions || conditions.length === 0) return true\n\n  return conditions.every(condition => evaluateCondition(condition, payload))\n}\n\n// ============================================================================\n// Context Mapping\n// ============================================================================\n\n/**\n * Map event payload to workflow initial context.\n */\nexport function mapEventToContext(\n  mapping: TriggerContextMapping[] | undefined,\n  payload: Record<string, unknown>\n): Record<string, unknown> {\n  const context: Record<string, unknown> = {}\n\n  if (!mapping || mapping.length === 0) return context\n\n  for (const item of mapping) {\n    const value = getNestedValue(payload, item.sourceExpression)\n    context[item.targetKey] = value !== undefined ? value : item.defaultValue\n  }\n\n  return context\n}\n\n// ============================================================================\n// Trigger Loading with Caching\n// ============================================================================\n\n// In-memory cache for triggers (per tenant/org).\n// Park the Map on globalThis so the same compiled module loaded under two\n// paths (a Next.js server chunk vs. a worker resolving the file through a\n// different import root) shares one cache. Without this,\n// `invalidateTriggerCache(...)` called from the PUT /api/workflows/definitions\n// route clears its own copy while the wildcard event-trigger subscriber keeps\n// reading a stale copy populated before the trigger was added \u2014 newly added\n// triggers stay invisible for up to TRIGGER_CACHE_TTL. Mirrors the same\n// workaround used by the modules registry and `getDiRegistrars()`.\nconst GLOBAL_TRIGGER_CACHE_KEY = '__openMercatoWorkflowTriggerCache__'\n\nfunction getTriggerCache(): Map<string, CachedTriggers> {\n  const existing = (globalThis as any)[GLOBAL_TRIGGER_CACHE_KEY] as\n    | Map<string, CachedTriggers>\n    | undefined\n  if (existing) return existing\n  const created = new Map<string, CachedTriggers>()\n  ;(globalThis as any)[GLOBAL_TRIGGER_CACHE_KEY] = created\n  return created\n}\n\nfunction getCacheKey(tenantId: string, organizationId: string): string {\n  return `${tenantId}:${organizationId}`\n}\n\n/**\n * Load legacy triggers from WorkflowEventTrigger entity table.\n * For backward compatibility with existing triggers.\n */\nasync function loadLegacyTriggers(\n  em: EntityManager,\n  tenantId: string,\n  organizationId: string\n): Promise<UnifiedTrigger[]> {\n  const postgresEm = em as unknown as PostgreSqlEntityManager\n  const legacyTriggers = await findWithDecryption(\n    postgresEm,\n    WorkflowEventTrigger,\n    {\n      tenantId,\n      organizationId,\n      enabled: true,\n      deletedAt: null,\n    },\n    {\n      orderBy: { priority: 'DESC', createdAt: 'ASC' },\n    },\n    { tenantId, organizationId },\n  )\n\n  // Get definitions for these triggers to get workflowId\n  const definitionIds = [...new Set(legacyTriggers.map(t => t.workflowDefinitionId))]\n  const definitions = definitionIds.length > 0 ? await findWithDecryption(postgresEm, WorkflowDefinition, {\n    id: { $in: definitionIds },\n    tenantId,\n    organizationId,\n    enabled: true,\n    deletedAt: null,\n  }, {}, { tenantId, organizationId }) : []\n  const definitionMap = new Map(definitions.map(d => [d.id, d]))\n\n  return legacyTriggers\n    .filter(t => definitionMap.has(t.workflowDefinitionId))\n    .map(t => {\n      const def = definitionMap.get(t.workflowDefinitionId)!\n      return {\n        id: t.id,\n        triggerId: t.id,\n        name: t.name,\n        description: t.description,\n        eventPattern: t.eventPattern,\n        config: t.config ?? null,\n        enabled: t.enabled,\n        priority: t.priority,\n        workflowDefinitionId: t.workflowDefinitionId,\n        workflowId: def.workflowId,\n        workflowVersion: def.version,\n        source: 'legacy' as const,\n        tenantId: t.tenantId,\n        organizationId: t.organizationId,\n      }\n    })\n}\n\n/**\n * Load embedded triggers from workflow definitions.\n * New triggers are embedded directly in the definition JSONB.\n */\nasync function loadEmbeddedTriggers(\n  em: EntityManager,\n  tenantId: string,\n  organizationId: string\n): Promise<UnifiedTrigger[]> {\n  const postgresEm = em as unknown as PostgreSqlEntityManager\n  // Load all enabled definitions that may have triggers\n  const definitions = await findWithDecryption(\n    postgresEm,\n    WorkflowDefinition,\n    {\n      tenantId,\n      organizationId,\n      enabled: true,\n      deletedAt: null,\n    },\n    {},\n    { tenantId, organizationId },\n  )\n\n  const triggers: UnifiedTrigger[] = []\n\n  for (const def of definitions) {\n    const embeddedTriggers = def.definition?.triggers as WorkflowDefinitionTrigger[] | undefined\n    if (!embeddedTriggers || embeddedTriggers.length === 0) continue\n\n    for (const trigger of embeddedTriggers) {\n      if (!trigger.enabled) continue\n\n      triggers.push({\n        id: `${def.id}:${trigger.triggerId}`,\n        triggerId: trigger.triggerId,\n        name: trigger.name,\n        description: trigger.description ?? null,\n        eventPattern: trigger.eventPattern,\n        config: trigger.config ?? null,\n        enabled: trigger.enabled,\n        priority: trigger.priority,\n        workflowDefinitionId: def.id,\n        workflowId: def.workflowId,\n        workflowVersion: def.version,\n        source: 'embedded' as const,\n        tenantId,\n        organizationId,\n      })\n    }\n  }\n\n  return triggers\n}\n\n/**\n * Load all enabled triggers for a tenant/organization with caching.\n * Merges both legacy (entity) triggers and embedded (definition) triggers.\n */\nexport async function loadTriggersForTenant(\n  em: EntityManager,\n  tenantId: string,\n  organizationId: string,\n  cacheService?: CacheService\n): Promise<UnifiedTrigger[]> {\n  const cacheKey = getCacheKey(tenantId, organizationId)\n  const cache = getTriggerCache()\n\n  // Check in-memory cache\n  const cached = cache.get(cacheKey)\n  if (cached && Date.now() - cached.cachedAt < TRIGGER_CACHE_TTL) {\n    return cached.triggers\n  }\n\n  // Load from both sources\n  const [legacyTriggers, embeddedTriggers] = await Promise.all([\n    loadLegacyTriggers(em, tenantId, organizationId),\n    loadEmbeddedTriggers(em, tenantId, organizationId),\n  ])\n\n  // Merge and sort by priority (higher first)\n  const allTriggers = [...legacyTriggers, ...embeddedTriggers]\n    .sort((a, b) => b.priority - a.priority)\n\n  // Update cache\n  cache.set(cacheKey, {\n    triggers: allTriggers,\n    cachedAt: Date.now(),\n  })\n\n  return allTriggers\n}\n\n/**\n * Invalidate trigger cache for a tenant/organization.\n * Call this when:\n * - Legacy triggers are created/updated/deleted\n * - Workflow definitions with embedded triggers are created/updated/deleted\n */\nexport function invalidateTriggerCache(tenantId: string, organizationId?: string): void {\n  const cache = getTriggerCache()\n  if (organizationId) {\n    // Invalidate specific org\n    const cacheKey = getCacheKey(tenantId, organizationId)\n    cache.delete(cacheKey)\n  } else {\n    // Invalidate all orgs for tenant\n    for (const key of cache.keys()) {\n      if (key.startsWith(`${tenantId}:`)) {\n        cache.delete(key)\n      }\n    }\n  }\n}\n\n// ============================================================================\n// Trigger Matching\n// ============================================================================\n\n/**\n * Find all triggers that match an event.\n */\nexport async function findMatchingTriggers(\n  em: EntityManager,\n  context: EventTriggerContext\n): Promise<UnifiedTrigger[]> {\n  const triggers = await loadTriggersForTenant(\n    em,\n    context.tenantId,\n    context.organizationId\n  )\n\n  return triggers.filter(trigger => {\n    // Check event pattern\n    if (!matchEventPattern(context.eventName, trigger.eventPattern)) {\n      return false\n    }\n\n    // Check filter conditions\n    if (!evaluateFilterConditions(trigger.config?.filterConditions, context.payload)) {\n      return false\n    }\n\n    return true\n  })\n}\n\n// ============================================================================\n// Trigger Processing\n// ============================================================================\n\n/**\n * Check if max concurrent instances limit is reached.\n */\nasync function checkConcurrencyLimit(\n  em: EntityManager,\n  trigger: UnifiedTrigger\n): Promise<boolean> {\n  const maxInstances = trigger.config?.maxConcurrentInstances\n\n  if (!maxInstances) return true // No limit\n\n  // Count running instances for this trigger's workflow definition\n  const runningCount = await em.count(WorkflowInstance, {\n    definitionId: trigger.workflowDefinitionId,\n    status: { $in: ['RUNNING', 'WAITING_FOR_ACTIVITIES'] },\n    tenantId: trigger.tenantId,\n    organizationId: trigger.organizationId,\n    deletedAt: null,\n  })\n\n  return runningCount < maxInstances\n}\n\n/**\n * Process all matching triggers for an event and start workflows.\n */\nexport async function processEventTriggers(\n  em: EntityManager,\n  container: AwilixContainer,\n  context: EventTriggerContext\n): Promise<ProcessTriggersResult> {\n  const result: ProcessTriggersResult = {\n    triggered: 0,\n    skipped: 0,\n    errors: [],\n    instances: [],\n  }\n\n  // Find matching triggers\n  const triggers = await findMatchingTriggers(em, context)\n\n  if (triggers.length === 0) {\n    return result\n  }\n\n  // Process each trigger (definitions already validated during loading)\n  for (const trigger of triggers) {\n    try {\n      // Check concurrency limit\n      const canStart = await checkConcurrencyLimit(em, trigger)\n      if (!canStart) {\n        logger.debug('Skipping trigger: max concurrent instances reached', { triggerId: trigger.id, triggerName: trigger.name })\n        result.skipped++\n        continue\n      }\n\n      // Map event payload to workflow context\n      const mappedContext = mapEventToContext(trigger.config?.contextMapping, context.payload)\n\n      // Extract entity info from payload for metadata\n      const payloadId = context.payload?.id as string | undefined\n      const payloadEntityType = context.payload?.entityType as string | undefined\n      const actorUserId = readEventActorUserId(context.payload)\n\n      // Include event metadata and payload in context\n      const initialContext = {\n        // Include raw event payload fields (e.g., id, organizationId, tenantId)\n        ...context.payload,\n        // Override with explicit mappings if provided\n        ...mappedContext,\n        __trigger: {\n          triggerId: trigger.id,\n          triggerName: trigger.name,\n          eventName: context.eventName,\n          eventPayload: context.payload,\n          triggeredAt: new Date().toISOString(),\n          source: trigger.source,\n        },\n      }\n\n      // Start workflow\n      const instance = await startWorkflow(em, {\n        workflowId: trigger.workflowId,\n        version: trigger.workflowVersion,\n        initialContext,\n        metadata: {\n          initiatedBy: actorUserId ?? `trigger:${trigger.id}`,\n          // Include entityId and entityType for widget discovery\n          entityId: payloadId,\n          entityType: payloadEntityType || trigger.config?.entityType,\n          labels: {\n            trigger_id: trigger.id,\n            trigger_name: trigger.name,\n            event_name: context.eventName,\n            trigger_source: trigger.source,\n          },\n        },\n        tenantId: context.tenantId,\n        organizationId: context.organizationId,\n      })\n\n      result.triggered++\n      result.instances.push({\n        triggerId: trigger.id,\n        instanceId: instance.id,\n      })\n\n      // Execute workflow asynchronously (don't wait)\n      executeWorkflow(\n        em.fork(),\n        container,\n        instance.id,\n        actorUserId ? { userId: actorUserId } : undefined\n      ).catch(err => {\n        logger.error('Error executing workflow', { instanceId: instance.id, err })\n      })\n\n    } catch (error) {\n      const errorMessage = error instanceof Error ? error.message : String(error)\n      logger.error('Error processing trigger', { triggerId: trigger.id, triggerName: trigger.name, err: error })\n      result.errors.push({\n        triggerId: trigger.id,\n        error: errorMessage,\n      })\n    }\n  }\n\n  return result\n}\n"],
-  "mappings": "AAWA,SAAS,yBAAyB;AAClC,SAAS,0BAA0B;AACnC,SAAS,uBAAuB;AAChC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAKK;AACP,SAAS,eAAe,uBAAuB;AAC/C,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,gBAAgB,CAAC;AA8C7E,MAAM,oBAAoB,IAAI,KAAK;AAEnC,SAAS,qBAAqB,SAAiD;AAC7E,QAAM,YAAY,QAAQ,UAAU,QAAQ;AAC5C,MAAI,OAAO,cAAc,SAAU,QAAO;AAC1C,QAAM,UAAU,UAAU,KAAK;AAC/B,SAAO,QAAQ,SAAS,KAAK,CAAC,QAAQ,WAAW,UAAU,IAAI,UAAU;AAC3E;AAUA,MAAM,oCAAoC;AAC1C,MAAM,kCAAkC;AAKxC,SAAS,eAAe,KAAc,MAAuB;AAC3D,MAAI,QAAQ,QAAQ,QAAQ,OAAW,QAAO;AAE9C,QAAM,QAAQ,KAAK,MAAM,GAAG;AAC5B,MAAI,UAAmB;AAEvB,aAAW,QAAQ,OAAO;AACxB,QAAI,YAAY,QAAQ,YAAY,OAAW,QAAO;AACtD,QAAI,OAAO,YAAY,SAAU,QAAO;AACxC,cAAW,QAAoC,IAAI;AAAA,EACrD;AAEA,SAAO;AACT;AAEA,SAAS,iBAAiB,SAAiB,OAA8B;AACvE,QAAM,OAAO,QAAQ,KAAK;AAC1B,MAAI,SAAS,OAAO,SAAS,OAAO,SAAS,IAAK,QAAO;AACzD,MAAI,SAAS,IAAK,QAAO;AAEzB,QAAM,aAAa,QAAQ,QAAQ,KAAK,QAAQ,CAAC;AACjD,MAAI,eAAe,GAAI,QAAO;AAE9B,QAAM,OAAO,QAAQ,MAAM,QAAQ,GAAG,UAAU;AAChD,SAAO,uBAAuB,KAAK,IAAI,IAAI,aAAa;AAC1D;AAOA,SAAS,2BAA2B,SAA0B;AAC5D,MAAI,QAAQ,SAAS,kCAAmC,QAAO;AAE/D,QAAM,aAAgC,CAAC,EAAE,gBAAgB,OAAO,eAAe,MAAM,CAAC;AACtF,MAAI,cAAc;AAClB,MAAI,kBAA0C;AAC9C,MAAI,wBAAwB;AAK5B,WAAS,QAAQ,GAAG,QAAQ,QAAQ,QAAQ,SAAS,GAAG;AACtD,UAAM,OAAO,QAAQ,KAAK;AAE1B,QAAI,SAAS,MAAM;AACjB,YAAM,OAAO,QAAQ,QAAQ,CAAC;AAC9B,UAAI,CAAC,gBAAgB,QAAQ,KAAK,QAAQ,EAAE,KAAM,SAAS,OAAO,QAAQ,QAAQ,CAAC,MAAM,MAAO;AAC9F,eAAO;AAAA,MACT;AACA,eAAS;AACT,wBAAkB;AAClB,8BAAwB;AACxB;AAAA,IACF;AAEA,QAAI,aAAa;AACf,UAAI,SAAS,KAAK;AAChB,sBAAc;AACd,gCAAwB;AAAA,MAC1B;AACA,wBAAkB;AAClB;AAAA,IACF;AAEA,QAAI,SAAS,KAAK;AAChB,oBAAc;AACd,wBAAkB;AAClB,8BAAwB;AACxB;AAAA,IACF;AAEA,QAAI,SAAS,KAAK;AAChB,UAAI,QAAQ,QAAQ,CAAC,MAAM,KAAK;AAC9B,YAAI,QAAQ,QAAQ,CAAC,MAAM,IAAK,QAAO;AACvC,iBAAS;AAAA,MACX;AAEA,iBAAW,KAAK,EAAE,gBAAgB,OAAO,eAAe,MAAM,CAAC;AAC/D,wBAAkB;AAClB,8BAAwB;AACxB;AAAA,IACF;AAEA,QAAI,SAAS,KAAK;AAChB,UAAI,WAAW,WAAW,EAAG,QAAO;AACpC,wBAAkB,WAAW,IAAI;AACjC,8BAAwB;AACxB;AAAA,IACF;AAEA,QAAI,SAAS,KAAK;AAChB,iBAAW,WAAW,SAAS,CAAC,EAAE,iBAAiB;AACnD,wBAAkB;AAClB,8BAAwB;AACxB;AAAA,IACF;AAEA,UAAM,gBAAgB,iBAAiB,SAAS,KAAK;AACrD,QAAI,kBAAkB,MAAM;AAC1B,UAAI,sBAAuB,QAAO;AAClC,UAAI,iBAAiB,kBAAkB,iBAAiB,cAAe,QAAO;AAE9E,iBAAW,WAAW,SAAS,CAAC,EAAE,gBAAgB;AAClD,wBAAkB;AAClB,8BAAwB;AACxB,cAAQ;AAER,UAAI,QAAQ,QAAQ,CAAC,MAAM,KAAK;AAC9B,iBAAS;AAAA,MACX;AAEA;AAAA,IACF;AAEA,sBAAkB;AAClB,4BAAwB;AAAA,EAC1B;AAEA,SAAO,WAAW,WAAW,KAAK,CAAC;AACrC;AAKA,SAAS,kBAAkB,WAAmC,SAA2C;AACvG,QAAM,QAAQ,eAAe,SAAS,UAAU,KAAK;AACrD,QAAM,WAAW,UAAU;AAE3B,UAAQ,UAAU,UAAU;AAAA,IAC1B,KAAK;AACH,aAAO,UAAU;AAAA,IAEnB,KAAK;AACH,aAAO,UAAU;AAAA,IAEnB,KAAK;AACH,aAAO,OAAO,UAAU,YAAY,OAAO,aAAa,YAAY,QAAQ;AAAA,IAE9E,KAAK;AACH,aAAO,OAAO,UAAU,YAAY,OAAO,aAAa,YAAY,SAAS;AAAA,IAE/E,KAAK;AACH,aAAO,OAAO,UAAU,YAAY,OAAO,aAAa,YAAY,QAAQ;AAAA,IAE9E,KAAK;AACH,aAAO,OAAO,UAAU,YAAY,OAAO,aAAa,YAAY,SAAS;AAAA,IAE/E,KAAK;AACH,UAAI,OAAO,UAAU,YAAY,OAAO,aAAa,UAAU;AAC7D,eAAO,MAAM,SAAS,QAAQ;AAAA,MAChC;AACA,UAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,eAAO,MAAM,SAAS,QAAQ;AAAA,MAChC;AACA,aAAO;AAAA,IAET,KAAK;AACH,aAAO,OAAO,UAAU,YAAY,OAAO,aAAa,YAAY,MAAM,WAAW,QAAQ;AAAA,IAE/F,KAAK;AACH,aAAO,OAAO,UAAU,YAAY,OAAO,aAAa,YAAY,MAAM,SAAS,QAAQ;AAAA,IAE7F,KAAK;AACH,aAAO,MAAM,QAAQ,QAAQ,KAAK,SAAS,SAAS,KAAK;AAAA,IAE3D,KAAK;AACH,aAAO,MAAM,QAAQ,QAAQ,KAAK,CAAC,SAAS,SAAS,KAAK;AAAA,IAE5D,KAAK;AACH,aAAO,UAAU,UAAa,UAAU;AAAA,IAE1C,KAAK;AACH,aAAO,UAAU,UAAa,UAAU;AAAA,IAE1C,KAAK;AACH,UAAI,OAAO,UAAU,YAAY,OAAO,aAAa,SAAU,QAAO;AACtE,UAAI,MAAM,SAAS,gCAAiC,QAAO;AAC3D,UAAI,CAAC,2BAA2B,QAAQ,EAAG,QAAO;AAClD;AACE,cAAM,SAAS,gBAAgB,UAAU,OAAO;AAAA,UAC9C,kBAAkB;AAAA,UAClB,gBAAgB;AAAA,QAClB,CAAC;AACD,eAAO,OAAO,KAAK,OAAO,UAAU;AAAA,MACtC;AAAA,IAEF;AACE,aAAO;AAAA,EACX;AACF;AAMO,SAAS,yBACd,YACA,SACS;AACT,MAAI,CAAC,cAAc,WAAW,WAAW,EAAG,QAAO;AAEnD,SAAO,WAAW,MAAM,eAAa,kBAAkB,WAAW,OAAO,CAAC;AAC5E;AASO,SAAS,kBACd,SACA,SACyB;AACzB,QAAM,UAAmC,CAAC;AAE1C,MAAI,CAAC,WAAW,QAAQ,WAAW,EAAG,QAAO;AAE7C,aAAW,QAAQ,SAAS;AAC1B,UAAM,QAAQ,eAAe,SAAS,KAAK,gBAAgB;AAC3D,YAAQ,KAAK,SAAS,IAAI,UAAU,SAAY,QAAQ,KAAK;AAAA,EAC/D;AAEA,SAAO;AACT;AAeA,MAAM,2BAA2B;AAEjC,SAAS,kBAA+C;AACtD,QAAM,WAAY,WAAmB,wBAAwB;AAG7D,MAAI,SAAU,QAAO;AACrB,QAAM,UAAU,oBAAI,IAA4B;AAC/C,EAAC,WAAmB,wBAAwB,IAAI;AACjD,SAAO;AACT;AAEA,SAAS,YAAY,UAAkB,gBAAgC;AACrE,SAAO,GAAG,QAAQ,IAAI,cAAc;AACtC;AAMA,eAAe,mBACb,IACA,UACA,gBAC2B;AAC3B,QAAM,aAAa;AACnB,QAAM,iBAAiB,MAAM;AAAA,IAC3B;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT,WAAW;AAAA,IACb;AAAA,IACA;AAAA,MACE,SAAS,EAAE,UAAU,QAAQ,WAAW,MAAM;AAAA,IAChD;AAAA,IACA,EAAE,UAAU,eAAe;AAAA,EAC7B;AAGA,QAAM,gBAAgB,CAAC,GAAG,IAAI,IAAI,eAAe,IAAI,OAAK,EAAE,oBAAoB,CAAC,CAAC;AAClF,QAAM,cAAc,cAAc,SAAS,IAAI,MAAM,mBAAmB,YAAY,oBAAoB;AAAA,IACtG,IAAI,EAAE,KAAK,cAAc;AAAA,IACzB;AAAA,IACA;AAAA,IACA,SAAS;AAAA,IACT,WAAW;AAAA,EACb,GAAG,CAAC,GAAG,EAAE,UAAU,eAAe,CAAC,IAAI,CAAC;AACxC,QAAM,gBAAgB,IAAI,IAAI,YAAY,IAAI,OAAK,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AAE7D,SAAO,eACJ,OAAO,OAAK,cAAc,IAAI,EAAE,oBAAoB,CAAC,EACrD,IAAI,OAAK;AACR,UAAM,MAAM,cAAc,IAAI,EAAE,oBAAoB;AACpD,WAAO;AAAA,MACL,IAAI,EAAE;AAAA,MACN,WAAW,EAAE;AAAA,MACb,MAAM,EAAE;AAAA,MACR,aAAa,EAAE;AAAA,MACf,cAAc,EAAE;AAAA,MAChB,QAAQ,EAAE,UAAU;AAAA,MACpB,SAAS,EAAE;AAAA,MACX,UAAU,EAAE;AAAA,MACZ,sBAAsB,EAAE;AAAA,MACxB,YAAY,IAAI;AAAA,MAChB,iBAAiB,IAAI;AAAA,MACrB,QAAQ;AAAA,MACR,UAAU,EAAE;AAAA,MACZ,gBAAgB,EAAE;AAAA,IACpB;AAAA,EACF,CAAC;AACL;AAMA,eAAe,qBACb,IACA,UACA,gBAC2B;AAC3B,QAAM,aAAa;AAEnB,QAAM,cAAc,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT,WAAW;AAAA,IACb;AAAA,IACA,CAAC;AAAA,IACD,EAAE,UAAU,eAAe;AAAA,EAC7B;AAEA,QAAM,WAA6B,CAAC;AAEpC,aAAW,OAAO,aAAa;AAC7B,UAAM,mBAAmB,IAAI,YAAY;AACzC,QAAI,CAAC,oBAAoB,iBAAiB,WAAW,EAAG;AAExD,eAAW,WAAW,kBAAkB;AACtC,UAAI,CAAC,QAAQ,QAAS;AAEtB,eAAS,KAAK;AAAA,QACZ,IAAI,GAAG,IAAI,EAAE,IAAI,QAAQ,SAAS;AAAA,QAClC,WAAW,QAAQ;AAAA,QACnB,MAAM,QAAQ;AAAA,QACd,aAAa,QAAQ,eAAe;AAAA,QACpC,cAAc,QAAQ;AAAA,QACtB,QAAQ,QAAQ,UAAU;AAAA,QAC1B,SAAS,QAAQ;AAAA,QACjB,UAAU,QAAQ;AAAA,QAClB,sBAAsB,IAAI;AAAA,QAC1B,YAAY,IAAI;AAAA,QAChB,iBAAiB,IAAI;AAAA,QACrB,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO;AACT;AAMA,eAAsB,sBACpB,IACA,UACA,gBACA,cAC2B;AAC3B,QAAM,WAAW,YAAY,UAAU,cAAc;AACrD,QAAM,QAAQ,gBAAgB;AAG9B,QAAM,SAAS,MAAM,IAAI,QAAQ;AACjC,MAAI,UAAU,KAAK,IAAI,IAAI,OAAO,WAAW,mBAAmB;AAC9D,WAAO,OAAO;AAAA,EAChB;AAGA,QAAM,CAAC,gBAAgB,gBAAgB,IAAI,MAAM,QAAQ,IAAI;AAAA,IAC3D,mBAAmB,IAAI,UAAU,cAAc;AAAA,IAC/C,qBAAqB,IAAI,UAAU,cAAc;AAAA,EACnD,CAAC;AAGD,QAAM,cAAc,CAAC,GAAG,gBAAgB,GAAG,gBAAgB,EACxD,KAAK,CAAC,GAAG,MAAM,EAAE,WAAW,EAAE,QAAQ;AAGzC,QAAM,IAAI,UAAU;AAAA,IAClB,UAAU;AAAA,IACV,UAAU,KAAK,IAAI;AAAA,EACrB,CAAC;AAED,SAAO;AACT;AAQO,SAAS,uBAAuB,UAAkB,gBAA+B;AACtF,QAAM,QAAQ,gBAAgB;AAC9B,MAAI,gBAAgB;AAElB,UAAM,WAAW,YAAY,UAAU,cAAc;AACrD,UAAM,OAAO,QAAQ;AAAA,EACvB,OAAO;AAEL,eAAW,OAAO,MAAM,KAAK,GAAG;AAC9B,UAAI,IAAI,WAAW,GAAG,QAAQ,GAAG,GAAG;AAClC,cAAM,OAAO,GAAG;AAAA,MAClB;AAAA,IACF;AAAA,EACF;AACF;AASA,eAAsB,qBACpB,IACA,SAC2B;AAC3B,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AAEA,SAAO,SAAS,OAAO,aAAW;AAEhC,QAAI,CAAC,kBAAkB,QAAQ,WAAW,QAAQ,YAAY,GAAG;AAC/D,aAAO;AAAA,IACT;AAGA,QAAI,CAAC,yBAAyB,QAAQ,QAAQ,kBAAkB,QAAQ,OAAO,GAAG;AAChF,aAAO;AAAA,IACT;AAEA,WAAO;AAAA,EACT,CAAC;AACH;AASA,eAAe,sBACb,IACA,SACkB;AAClB,QAAM,eAAe,QAAQ,QAAQ;AAErC,MAAI,CAAC,aAAc,QAAO;AAG1B,QAAM,eAAe,MAAM,GAAG,MAAM,kBAAkB;AAAA,IACpD,cAAc,QAAQ;AAAA,IACtB,QAAQ,EAAE,KAAK,CAAC,WAAW,wBAAwB,EAAE;AAAA,IACrD,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ;AAAA,IACxB,WAAW;AAAA,EACb,CAAC;AAED,SAAO,eAAe;AACxB;AAKA,eAAsB,qBACpB,IACA,WACA,SACgC;AAChC,QAAM,SAAgC;AAAA,IACpC,WAAW;AAAA,IACX,SAAS;AAAA,IACT,QAAQ,CAAC;AAAA,IACT,WAAW,CAAC;AAAA,EACd;AAGA,QAAM,WAAW,MAAM,qBAAqB,IAAI,OAAO;AAEvD,MAAI,SAAS,WAAW,GAAG;AACzB,WAAO;AAAA,EACT;AAGA,aAAW,WAAW,UAAU;AAC9B,QAAI;AAEF,YAAM,WAAW,MAAM,sBAAsB,IAAI,OAAO;AACxD,UAAI,CAAC,UAAU;AACb,eAAO,MAAM,sDAAsD,EAAE,WAAW,QAAQ,IAAI,aAAa,QAAQ,KAAK,CAAC;AACvH,eAAO;AACP;AAAA,MACF;AAGA,YAAM,gBAAgB,kBAAkB,QAAQ,QAAQ,gBAAgB,QAAQ,OAAO;AAGvF,YAAM,YAAY,QAAQ,SAAS;AACnC,YAAM,oBAAoB,QAAQ,SAAS;AAC3C,YAAM,cAAc,qBAAqB,QAAQ,OAAO;AAGxD,YAAM,iBAAiB;AAAA;AAAA,QAErB,GAAG,QAAQ;AAAA;AAAA,QAEX,GAAG;AAAA,QACH,WAAW;AAAA,UACT,WAAW,QAAQ;AAAA,UACnB,aAAa,QAAQ;AAAA,UACrB,WAAW,QAAQ;AAAA,UACnB,cAAc,QAAQ;AAAA,UACtB,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,UACpC,QAAQ,QAAQ;AAAA,QAClB;AAAA,MACF;AAGA,YAAM,WAAW,MAAM,cAAc,IAAI;AAAA,QACvC,YAAY,QAAQ;AAAA,QACpB,SAAS,QAAQ;AAAA,QACjB;AAAA,QACA,UAAU;AAAA,UACR,aAAa,eAAe,WAAW,QAAQ,EAAE;AAAA;AAAA,UAEjD,UAAU;AAAA,UACV,YAAY,qBAAqB,QAAQ,QAAQ;AAAA,UACjD,QAAQ;AAAA,YACN,YAAY,QAAQ;AAAA,YACpB,cAAc,QAAQ;AAAA,YACtB,YAAY,QAAQ;AAAA,YACpB,gBAAgB,QAAQ;AAAA,UAC1B;AAAA,QACF;AAAA,QACA,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ;AAAA,MAC1B,CAAC;AAED,aAAO;AACP,aAAO,UAAU,KAAK;AAAA,QACpB,WAAW,QAAQ;AAAA,QACnB,YAAY,SAAS;AAAA,MACvB,CAAC;AAGD;AAAA,QACE,GAAG,KAAK;AAAA,QACR;AAAA,QACA,SAAS;AAAA,QACT,cAAc,EAAE,QAAQ,YAAY,IAAI;AAAA,MAC1C,EAAE,MAAM,SAAO;AACb,eAAO,MAAM,4BAA4B,EAAE,YAAY,SAAS,IAAI,IAAI,CAAC;AAAA,MAC3E,CAAC;AAAA,IAEH,SAAS,OAAO;AACd,YAAM,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC1E,aAAO,MAAM,4BAA4B,EAAE,WAAW,QAAQ,IAAI,aAAa,QAAQ,MAAM,KAAK,MAAM,CAAC;AACzG,aAAO,OAAO,KAAK;AAAA,QACjB,WAAW,QAAQ;AAAA,QACnB,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO;AACT;",
+  "sourcesContent": ["/**\n * Workflows Module - Event Trigger Service\n *\n * Core service for evaluating and processing workflow event triggers.\n * Handles pattern matching, filter evaluation, context mapping, and workflow starting.\n */\n\nimport type { EntityManager } from '@mikro-orm/core'\nimport type { EntityManager as PostgreSqlEntityManager } from '@mikro-orm/postgresql'\nimport type { AwilixContainer } from 'awilix'\nimport type { CacheService } from '@open-mercato/cache'\nimport { matchEventPattern } from '@open-mercato/shared/lib/events/patterns'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { testLinearRegex } from '@open-mercato/shared/lib/regex/linear'\nimport {\n  WorkflowEventTrigger,\n  WorkflowDefinition,\n  WorkflowInstance,\n  type TriggerFilterCondition,\n  type TriggerContextMapping,\n  type WorkflowEventTriggerConfig,\n  type WorkflowDefinitionTrigger,\n} from '../data/entities'\nimport { startWorkflow, executeWorkflow } from './workflow-executor'\nimport { getAllCodeWorkflows } from './code-registry'\nimport { codeWorkflowUuid } from './find-definition'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows').child({ component: 'event-trigger' })\n\n// ============================================================================\n// Types\n// ============================================================================\n\nexport interface EventTriggerContext {\n  eventName: string\n  payload: Record<string, unknown>\n  tenantId: string\n  organizationId: string\n}\n\nexport interface ProcessTriggersResult {\n  triggered: number\n  skipped: number\n  errors: Array<{ triggerId: string; error: string }>\n  instances: Array<{ triggerId: string; instanceId: string }>\n}\n\n/**\n * Unified trigger interface for both legacy (entity) and embedded (definition) triggers\n */\nexport interface UnifiedTrigger {\n  id: string  // For legacy: entity ID, for embedded: `${definitionId}:${triggerId}`\n  triggerId: string\n  name: string\n  description?: string | null\n  eventPattern: string\n  config: WorkflowEventTriggerConfig | null\n  enabled: boolean\n  priority: number\n  workflowDefinitionId: string\n  workflowId: string\n  workflowVersion: number\n  source: 'legacy' | 'embedded' | 'code'\n  tenantId: string\n  organizationId: string\n}\n\ninterface CachedTriggers {\n  triggers: UnifiedTrigger[]\n  cachedAt: number\n}\n\n// Cache TTL: 5 minutes\nconst TRIGGER_CACHE_TTL = 5 * 60 * 1000\n\nfunction readEventActorUserId(payload: Record<string, unknown>): string | null {\n  const candidate = payload.userId ?? payload.actorUserId\n  if (typeof candidate !== 'string') return null\n  const trimmed = candidate.trim()\n  return trimmed.length > 0 && !trimmed.startsWith('trigger:') ? trimmed : null\n}\n\n// ============================================================================\n// Pattern Matching\n// ============================================================================\n\n// ============================================================================\n// Filter Evaluation\n// ============================================================================\n\nconst MAX_WORKFLOW_REGEX_PATTERN_LENGTH = 200\nconst MAX_WORKFLOW_REGEX_INPUT_LENGTH = 10_000\n\n/**\n * Get a nested value from an object using dot notation.\n */\nfunction getNestedValue(obj: unknown, path: string): unknown {\n  if (obj === null || obj === undefined) return undefined\n\n  const parts = path.split('.')\n  let current: unknown = obj\n\n  for (const part of parts) {\n    if (current === null || current === undefined) return undefined\n    if (typeof current !== 'object') return undefined\n    current = (current as Record<string, unknown>)[part]\n  }\n\n  return current\n}\n\nfunction getQuantifierEnd(pattern: string, index: number): number | null {\n  const char = pattern[index]\n  if (char === '*' || char === '+' || char === '?') return index\n  if (char !== '{') return null\n\n  const closeIndex = pattern.indexOf('}', index + 1)\n  if (closeIndex === -1) return null\n\n  const body = pattern.slice(index + 1, closeIndex)\n  return /^[0-9]+(?:,[0-9]*)?$/.test(body) ? closeIndex : null\n}\n\ninterface RegexGroupFrame {\n  hasAlternation: boolean\n  hasQuantifier: boolean\n}\n\nfunction isSafeWorkflowRegexPattern(pattern: string): boolean {\n  if (pattern.length > MAX_WORKFLOW_REGEX_PATTERN_LENGTH) return false\n\n  const groupStack: RegexGroupFrame[] = [{ hasAlternation: false, hasQuantifier: false }]\n  let inCharClass = false\n  let lastClosedGroup: RegexGroupFrame | null = null\n  let lastAtomWasQuantified = false\n\n  // Hand-written single-pass lexer: `index` is intentionally advanced inside the\n  // loop body (escape pairs, `(?:` prefixes, multi-char quantifiers, lazy `?`) on\n  // top of the `index += 1` update clause. Do not \"simplify\" these in-body writes.\n  for (let index = 0; index < pattern.length; index += 1) {\n    const char = pattern[index]\n\n    if (char === '\\\\') {\n      const next = pattern[index + 1]\n      if (!inCharClass && (/[1-9]/.test(next ?? '') || (next === 'k' && pattern[index + 2] === '<'))) {\n        return false\n      }\n      index += 1\n      lastClosedGroup = null\n      lastAtomWasQuantified = false\n      continue\n    }\n\n    if (inCharClass) {\n      if (char === ']') {\n        inCharClass = false\n        lastAtomWasQuantified = false\n      }\n      lastClosedGroup = null\n      continue\n    }\n\n    if (char === '[') {\n      inCharClass = true\n      lastClosedGroup = null\n      lastAtomWasQuantified = false\n      continue\n    }\n\n    if (char === '(') {\n      if (pattern[index + 1] === '?') {\n        if (pattern[index + 2] !== ':') return false\n        index += 2\n      }\n\n      groupStack.push({ hasAlternation: false, hasQuantifier: false })\n      lastClosedGroup = null\n      lastAtomWasQuantified = false\n      continue\n    }\n\n    if (char === ')') {\n      if (groupStack.length === 1) return false\n      lastClosedGroup = groupStack.pop()!\n      lastAtomWasQuantified = false\n      continue\n    }\n\n    if (char === '|') {\n      groupStack[groupStack.length - 1].hasAlternation = true\n      lastClosedGroup = null\n      lastAtomWasQuantified = false\n      continue\n    }\n\n    const quantifierEnd = getQuantifierEnd(pattern, index)\n    if (quantifierEnd !== null) {\n      if (lastAtomWasQuantified) return false\n      if (lastClosedGroup?.hasAlternation || lastClosedGroup?.hasQuantifier) return false\n\n      groupStack[groupStack.length - 1].hasQuantifier = true\n      lastClosedGroup = null\n      lastAtomWasQuantified = true\n      index = quantifierEnd\n\n      if (pattern[index + 1] === '?') {\n        index += 1\n      }\n\n      continue\n    }\n\n    lastClosedGroup = null\n    lastAtomWasQuantified = false\n  }\n\n  return groupStack.length === 1 && !inCharClass\n}\n\n/**\n * Evaluate a single filter condition against the event payload.\n */\nfunction evaluateCondition(condition: TriggerFilterCondition, payload: Record<string, unknown>): boolean {\n  const value = getNestedValue(payload, condition.field)\n  const expected = condition.value\n\n  switch (condition.operator) {\n    case 'eq':\n      return value === expected\n\n    case 'neq':\n      return value !== expected\n\n    case 'gt':\n      return typeof value === 'number' && typeof expected === 'number' && value > expected\n\n    case 'gte':\n      return typeof value === 'number' && typeof expected === 'number' && value >= expected\n\n    case 'lt':\n      return typeof value === 'number' && typeof expected === 'number' && value < expected\n\n    case 'lte':\n      return typeof value === 'number' && typeof expected === 'number' && value <= expected\n\n    case 'contains':\n      if (typeof value === 'string' && typeof expected === 'string') {\n        return value.includes(expected)\n      }\n      if (Array.isArray(value)) {\n        return value.includes(expected)\n      }\n      return false\n\n    case 'startsWith':\n      return typeof value === 'string' && typeof expected === 'string' && value.startsWith(expected)\n\n    case 'endsWith':\n      return typeof value === 'string' && typeof expected === 'string' && value.endsWith(expected)\n\n    case 'in':\n      return Array.isArray(expected) && expected.includes(value)\n\n    case 'notIn':\n      return Array.isArray(expected) && !expected.includes(value)\n\n    case 'exists':\n      return value !== undefined && value !== null\n\n    case 'notExists':\n      return value === undefined || value === null\n\n    case 'regex':\n      if (typeof value !== 'string' || typeof expected !== 'string') return false\n      if (value.length > MAX_WORKFLOW_REGEX_INPUT_LENGTH) return false\n      if (!isSafeWorkflowRegexPattern(expected)) return false\n      {\n        const result = testLinearRegex(expected, value, {\n          maxPatternLength: MAX_WORKFLOW_REGEX_PATTERN_LENGTH,\n          maxInputLength: MAX_WORKFLOW_REGEX_INPUT_LENGTH,\n        })\n        return result.ok ? result.matched : false\n      }\n\n    default:\n      return false\n  }\n}\n\n/**\n * Evaluate all filter conditions against the event payload.\n * All conditions must pass (AND logic).\n */\nexport function evaluateFilterConditions(\n  conditions: TriggerFilterCondition[] | undefined,\n  payload: Record<string, unknown>\n): boolean {\n  if (!conditions || conditions.length === 0) return true\n\n  return conditions.every(condition => evaluateCondition(condition, payload))\n}\n\n// ============================================================================\n// Context Mapping\n// ============================================================================\n\n/**\n * Map event payload to workflow initial context.\n */\nexport function mapEventToContext(\n  mapping: TriggerContextMapping[] | undefined,\n  payload: Record<string, unknown>\n): Record<string, unknown> {\n  const context: Record<string, unknown> = {}\n\n  if (!mapping || mapping.length === 0) return context\n\n  for (const item of mapping) {\n    const value = getNestedValue(payload, item.sourceExpression)\n    context[item.targetKey] = value !== undefined ? value : item.defaultValue\n  }\n\n  return context\n}\n\n// ============================================================================\n// Trigger Loading with Caching\n// ============================================================================\n\n// In-memory cache for triggers (per tenant/org).\n// Park the Map on globalThis so the same compiled module loaded under two\n// paths (a Next.js server chunk vs. a worker resolving the file through a\n// different import root) shares one cache. Without this,\n// `invalidateTriggerCache(...)` called from the PUT /api/workflows/definitions\n// route clears its own copy while the wildcard event-trigger subscriber keeps\n// reading a stale copy populated before the trigger was added \u2014 newly added\n// triggers stay invisible for up to TRIGGER_CACHE_TTL. Mirrors the same\n// workaround used by the modules registry and `getDiRegistrars()`.\nconst GLOBAL_TRIGGER_CACHE_KEY = '__openMercatoWorkflowTriggerCache__'\n\nfunction getTriggerCache(): Map<string, CachedTriggers> {\n  const existing = (globalThis as any)[GLOBAL_TRIGGER_CACHE_KEY] as\n    | Map<string, CachedTriggers>\n    | undefined\n  if (existing) return existing\n  const created = new Map<string, CachedTriggers>()\n  ;(globalThis as any)[GLOBAL_TRIGGER_CACHE_KEY] = created\n  return created\n}\n\nfunction getCacheKey(tenantId: string, organizationId: string): string {\n  return `${tenantId}:${organizationId}`\n}\n\n/**\n * Load legacy triggers from WorkflowEventTrigger entity table.\n * For backward compatibility with existing triggers.\n */\nasync function loadLegacyTriggers(\n  em: EntityManager,\n  tenantId: string,\n  organizationId: string\n): Promise<UnifiedTrigger[]> {\n  const postgresEm = em as unknown as PostgreSqlEntityManager\n  const legacyTriggers = await findWithDecryption(\n    postgresEm,\n    WorkflowEventTrigger,\n    {\n      tenantId,\n      organizationId,\n      enabled: true,\n      deletedAt: null,\n    },\n    {\n      orderBy: { priority: 'DESC', createdAt: 'ASC' },\n    },\n    { tenantId, organizationId },\n  )\n\n  // Get definitions for these triggers to get workflowId\n  const definitionIds = [...new Set(legacyTriggers.map(t => t.workflowDefinitionId))]\n  const definitions = definitionIds.length > 0 ? await findWithDecryption(postgresEm, WorkflowDefinition, {\n    id: { $in: definitionIds },\n    tenantId,\n    organizationId,\n    enabled: true,\n    deletedAt: null,\n  }, {}, { tenantId, organizationId }) : []\n  const definitionMap = new Map(definitions.map(d => [d.id, d]))\n\n  return legacyTriggers\n    .filter(t => definitionMap.has(t.workflowDefinitionId))\n    .map(t => {\n      const def = definitionMap.get(t.workflowDefinitionId)!\n      return {\n        id: t.id,\n        triggerId: t.id,\n        name: t.name,\n        description: t.description,\n        eventPattern: t.eventPattern,\n        config: t.config ?? null,\n        enabled: t.enabled,\n        priority: t.priority,\n        workflowDefinitionId: t.workflowDefinitionId,\n        workflowId: def.workflowId,\n        workflowVersion: def.version,\n        source: 'legacy' as const,\n        tenantId: t.tenantId,\n        organizationId: t.organizationId,\n      }\n    })\n}\n\n/**\n * Load embedded triggers from workflow definitions.\n * New triggers are embedded directly in the definition JSONB.\n *\n * Also returns the set of every non-deleted DB definition's `workflowId` \u2014 even\n * those with no triggers \u2014 so the caller can let a materialized (customized)\n * definition suppress its code-registry counterpart regardless of whether the\n * customization kept any triggers (#4425).\n */\nasync function loadEmbeddedTriggers(\n  em: EntityManager,\n  tenantId: string,\n  organizationId: string\n): Promise<{ triggers: UnifiedTrigger[]; workflowIds: Set<string> }> {\n  const postgresEm = em as unknown as PostgreSqlEntityManager\n  // Load all definitions so disabled customizations still shadow their code\n  // counterpart. Only enabled definitions contribute embedded triggers below.\n  const definitions = await findWithDecryption(\n    postgresEm,\n    WorkflowDefinition,\n    {\n      tenantId,\n      organizationId,\n      deletedAt: null,\n    },\n    {},\n    { tenantId, organizationId },\n  )\n\n  const triggers: UnifiedTrigger[] = []\n  const workflowIds = new Set<string>()\n\n  for (const def of definitions) {\n    workflowIds.add(def.workflowId)\n    if (!def.enabled) continue\n\n    const embeddedTriggers = def.definition?.triggers as WorkflowDefinitionTrigger[] | undefined\n    if (!embeddedTriggers || embeddedTriggers.length === 0) continue\n\n    for (const trigger of embeddedTriggers) {\n      if (!trigger.enabled) continue\n\n      triggers.push({\n        id: `${def.id}:${trigger.triggerId}`,\n        triggerId: trigger.triggerId,\n        name: trigger.name,\n        description: trigger.description ?? null,\n        eventPattern: trigger.eventPattern,\n        config: trigger.config ?? null,\n        enabled: trigger.enabled,\n        priority: trigger.priority,\n        workflowDefinitionId: def.id,\n        workflowId: def.workflowId,\n        workflowVersion: def.version,\n        source: 'embedded' as const,\n        tenantId,\n        organizationId,\n      })\n    }\n  }\n\n  return { triggers, workflowIds }\n}\n\n/**\n * Project triggers declared on code-defined workflows into UnifiedTriggers.\n *\n * Code workflows live only in the in-memory registry, so their `triggers`\n * arrays never reached the DB-backed loaders \u2014 a code-declared trigger was inert\n * until an operator ran `POST \u2026/code:<id>/customize` to materialize the\n * definition into a `workflow_definitions` row (#4425). This projects them\n * directly. It is synchronous (no DB) and scoped to the caller's tenant/org via\n * the deterministic virtual definition id, matching what `startWorkflow`\n * persists as the instance's `definitionId` so the concurrency limit counts\n * correctly.\n *\n * `dbBackedWorkflowIds` are workflowIds already contributed by the legacy or\n * embedded (DB) sources; a code workflow whose id appears there is skipped so a\n * customized DB override wins and its trigger is not double-registered.\n */\nexport function loadCodeTriggers(\n  tenantId: string,\n  organizationId: string,\n  dbBackedWorkflowIds: Set<string>,\n): UnifiedTrigger[] {\n  const triggers: UnifiedTrigger[] = []\n\n  for (const codeDef of getAllCodeWorkflows()) {\n    if (!codeDef.enabled) continue\n    if (dbBackedWorkflowIds.has(codeDef.workflowId)) continue\n\n    const embeddedTriggers = codeDef.definition?.triggers\n    if (!embeddedTriggers || embeddedTriggers.length === 0) continue\n\n    const definitionId = codeWorkflowUuid(codeDef.workflowId)\n    for (const trigger of embeddedTriggers) {\n      if (!trigger.enabled) continue\n\n      triggers.push({\n        id: `code:${codeDef.workflowId}:${trigger.triggerId}`,\n        triggerId: trigger.triggerId,\n        name: trigger.name,\n        description: trigger.description ?? null,\n        eventPattern: trigger.eventPattern,\n        config: (trigger.config ?? null) as WorkflowEventTriggerConfig | null,\n        enabled: trigger.enabled,\n        priority: trigger.priority,\n        workflowDefinitionId: definitionId,\n        workflowId: codeDef.workflowId,\n        workflowVersion: codeDef.version,\n        source: 'code' as const,\n        tenantId,\n        organizationId,\n      })\n    }\n  }\n\n  return triggers\n}\n\n/**\n * Load all enabled triggers for a tenant/organization with caching.\n * Merges legacy (entity), embedded (definition), and code-registry triggers;\n * a DB-backed source for a given workflowId takes precedence over its code\n * trigger so `customize` semantics are preserved.\n */\nexport async function loadTriggersForTenant(\n  em: EntityManager,\n  tenantId: string,\n  organizationId: string,\n  cacheService?: CacheService\n): Promise<UnifiedTrigger[]> {\n  const cacheKey = getCacheKey(tenantId, organizationId)\n  const cache = getTriggerCache()\n\n  // Check in-memory cache\n  const cached = cache.get(cacheKey)\n  if (cached && Date.now() - cached.cachedAt < TRIGGER_CACHE_TTL) {\n    return cached.triggers\n  }\n\n  // Load from both DB sources\n  const [legacyTriggers, embedded] = await Promise.all([\n    loadLegacyTriggers(em, tenantId, organizationId),\n    loadEmbeddedTriggers(em, tenantId, organizationId),\n  ])\n  const embeddedTriggers = embedded.triggers\n\n  // Project code-registry triggers, letting any DB-backed definition for the\n  // same workflowId win (preserves `customize` override semantics \u2014 including\n  // a customization that removed its triggers).\n  const dbBackedWorkflowIds = new Set<string>([\n    ...embedded.workflowIds,\n    ...legacyTriggers.map((t) => t.workflowId),\n  ])\n  const codeTriggers = loadCodeTriggers(tenantId, organizationId, dbBackedWorkflowIds)\n\n  // Merge and sort by priority (higher first)\n  const allTriggers = [...legacyTriggers, ...embeddedTriggers, ...codeTriggers]\n    .sort((a, b) => b.priority - a.priority)\n\n  // Update cache\n  cache.set(cacheKey, {\n    triggers: allTriggers,\n    cachedAt: Date.now(),\n  })\n\n  return allTriggers\n}\n\n/**\n * Invalidate trigger cache for a tenant/organization.\n * Call this when:\n * - Legacy triggers are created/updated/deleted\n * - Workflow definitions with embedded triggers are created/updated/deleted\n */\nexport function invalidateTriggerCache(tenantId: string, organizationId?: string): void {\n  const cache = getTriggerCache()\n  if (organizationId) {\n    // Invalidate specific org\n    const cacheKey = getCacheKey(tenantId, organizationId)\n    cache.delete(cacheKey)\n  } else {\n    // Invalidate all orgs for tenant\n    for (const key of cache.keys()) {\n      if (key.startsWith(`${tenantId}:`)) {\n        cache.delete(key)\n      }\n    }\n  }\n}\n\n// ============================================================================\n// Trigger Matching\n// ============================================================================\n\n/**\n * Find all triggers that match an event.\n */\nexport async function findMatchingTriggers(\n  em: EntityManager,\n  context: EventTriggerContext\n): Promise<UnifiedTrigger[]> {\n  const triggers = await loadTriggersForTenant(\n    em,\n    context.tenantId,\n    context.organizationId\n  )\n\n  return triggers.filter(trigger => {\n    // Check event pattern\n    if (!matchEventPattern(context.eventName, trigger.eventPattern)) {\n      return false\n    }\n\n    // Check filter conditions\n    if (!evaluateFilterConditions(trigger.config?.filterConditions, context.payload)) {\n      return false\n    }\n\n    return true\n  })\n}\n\n// ============================================================================\n// Trigger Processing\n// ============================================================================\n\n/**\n * Check if max concurrent instances limit is reached.\n */\nasync function checkConcurrencyLimit(\n  em: EntityManager,\n  trigger: UnifiedTrigger\n): Promise<boolean> {\n  const maxInstances = trigger.config?.maxConcurrentInstances\n\n  if (!maxInstances) return true // No limit\n\n  // Count running instances for this trigger's workflow definition\n  const runningCount = await em.count(WorkflowInstance, {\n    definitionId: trigger.workflowDefinitionId,\n    status: { $in: ['RUNNING', 'WAITING_FOR_ACTIVITIES'] },\n    tenantId: trigger.tenantId,\n    organizationId: trigger.organizationId,\n    deletedAt: null,\n  })\n\n  return runningCount < maxInstances\n}\n\n/**\n * Process all matching triggers for an event and start workflows.\n */\nexport async function processEventTriggers(\n  em: EntityManager,\n  container: AwilixContainer,\n  context: EventTriggerContext\n): Promise<ProcessTriggersResult> {\n  const result: ProcessTriggersResult = {\n    triggered: 0,\n    skipped: 0,\n    errors: [],\n    instances: [],\n  }\n\n  // Find matching triggers\n  const triggers = await findMatchingTriggers(em, context)\n\n  if (triggers.length === 0) {\n    return result\n  }\n\n  // Process each trigger (definitions already validated during loading)\n  for (const trigger of triggers) {\n    try {\n      // Check concurrency limit\n      const canStart = await checkConcurrencyLimit(em, trigger)\n      if (!canStart) {\n        logger.debug('Skipping trigger: max concurrent instances reached', { triggerId: trigger.id, triggerName: trigger.name })\n        result.skipped++\n        continue\n      }\n\n      // Map event payload to workflow context\n      const mappedContext = mapEventToContext(trigger.config?.contextMapping, context.payload)\n\n      // Extract entity info from payload for metadata\n      const payloadId = context.payload?.id as string | undefined\n      const payloadEntityType = context.payload?.entityType as string | undefined\n      const actorUserId = readEventActorUserId(context.payload)\n\n      // Include event metadata and payload in context\n      const initialContext = {\n        // Include raw event payload fields (e.g., id, organizationId, tenantId)\n        ...context.payload,\n        // Override with explicit mappings if provided\n        ...mappedContext,\n        __trigger: {\n          triggerId: trigger.id,\n          triggerName: trigger.name,\n          eventName: context.eventName,\n          eventPayload: context.payload,\n          triggeredAt: new Date().toISOString(),\n          source: trigger.source,\n        },\n      }\n\n      // Start workflow\n      const instance = await startWorkflow(em, {\n        workflowId: trigger.workflowId,\n        version: trigger.workflowVersion,\n        initialContext,\n        metadata: {\n          initiatedBy: actorUserId ?? `trigger:${trigger.id}`,\n          // Include entityId and entityType for widget discovery\n          entityId: payloadId,\n          entityType: payloadEntityType || trigger.config?.entityType,\n          labels: {\n            trigger_id: trigger.id,\n            trigger_name: trigger.name,\n            event_name: context.eventName,\n            trigger_source: trigger.source,\n          },\n        },\n        tenantId: context.tenantId,\n        organizationId: context.organizationId,\n      })\n\n      result.triggered++\n      result.instances.push({\n        triggerId: trigger.id,\n        instanceId: instance.id,\n      })\n\n      // Execute workflow asynchronously (don't wait)\n      executeWorkflow(\n        em.fork(),\n        container,\n        instance.id,\n        actorUserId ? { userId: actorUserId } : undefined\n      ).catch(err => {\n        logger.error('Error executing workflow', { instanceId: instance.id, err })\n      })\n\n    } catch (error) {\n      const errorMessage = error instanceof Error ? error.message : String(error)\n      logger.error('Error processing trigger', { triggerId: trigger.id, triggerName: trigger.name, err: error })\n      result.errors.push({\n        triggerId: trigger.id,\n        error: errorMessage,\n      })\n    }\n  }\n\n  return result\n}\n"],
+  "mappings": "AAWA,SAAS,yBAAyB;AAClC,SAAS,0BAA0B;AACnC,SAAS,uBAAuB;AAChC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAKK;AACP,SAAS,eAAe,uBAAuB;AAC/C,SAAS,2BAA2B;AACpC,SAAS,wBAAwB;AACjC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,gBAAgB,CAAC;AA8C7E,MAAM,oBAAoB,IAAI,KAAK;AAEnC,SAAS,qBAAqB,SAAiD;AAC7E,QAAM,YAAY,QAAQ,UAAU,QAAQ;AAC5C,MAAI,OAAO,cAAc,SAAU,QAAO;AAC1C,QAAM,UAAU,UAAU,KAAK;AAC/B,SAAO,QAAQ,SAAS,KAAK,CAAC,QAAQ,WAAW,UAAU,IAAI,UAAU;AAC3E;AAUA,MAAM,oCAAoC;AAC1C,MAAM,kCAAkC;AAKxC,SAAS,eAAe,KAAc,MAAuB;AAC3D,MAAI,QAAQ,QAAQ,QAAQ,OAAW,QAAO;AAE9C,QAAM,QAAQ,KAAK,MAAM,GAAG;AAC5B,MAAI,UAAmB;AAEvB,aAAW,QAAQ,OAAO;AACxB,QAAI,YAAY,QAAQ,YAAY,OAAW,QAAO;AACtD,QAAI,OAAO,YAAY,SAAU,QAAO;AACxC,cAAW,QAAoC,IAAI;AAAA,EACrD;AAEA,SAAO;AACT;AAEA,SAAS,iBAAiB,SAAiB,OAA8B;AACvE,QAAM,OAAO,QAAQ,KAAK;AAC1B,MAAI,SAAS,OAAO,SAAS,OAAO,SAAS,IAAK,QAAO;AACzD,MAAI,SAAS,IAAK,QAAO;AAEzB,QAAM,aAAa,QAAQ,QAAQ,KAAK,QAAQ,CAAC;AACjD,MAAI,eAAe,GAAI,QAAO;AAE9B,QAAM,OAAO,QAAQ,MAAM,QAAQ,GAAG,UAAU;AAChD,SAAO,uBAAuB,KAAK,IAAI,IAAI,aAAa;AAC1D;AAOA,SAAS,2BAA2B,SAA0B;AAC5D,MAAI,QAAQ,SAAS,kCAAmC,QAAO;AAE/D,QAAM,aAAgC,CAAC,EAAE,gBAAgB,OAAO,eAAe,MAAM,CAAC;AACtF,MAAI,cAAc;AAClB,MAAI,kBAA0C;AAC9C,MAAI,wBAAwB;AAK5B,WAAS,QAAQ,GAAG,QAAQ,QAAQ,QAAQ,SAAS,GAAG;AACtD,UAAM,OAAO,QAAQ,KAAK;AAE1B,QAAI,SAAS,MAAM;AACjB,YAAM,OAAO,QAAQ,QAAQ,CAAC;AAC9B,UAAI,CAAC,gBAAgB,QAAQ,KAAK,QAAQ,EAAE,KAAM,SAAS,OAAO,QAAQ,QAAQ,CAAC,MAAM,MAAO;AAC9F,eAAO;AAAA,MACT;AACA,eAAS;AACT,wBAAkB;AAClB,8BAAwB;AACxB;AAAA,IACF;AAEA,QAAI,aAAa;AACf,UAAI,SAAS,KAAK;AAChB,sBAAc;AACd,gCAAwB;AAAA,MAC1B;AACA,wBAAkB;AAClB;AAAA,IACF;AAEA,QAAI,SAAS,KAAK;AAChB,oBAAc;AACd,wBAAkB;AAClB,8BAAwB;AACxB;AAAA,IACF;AAEA,QAAI,SAAS,KAAK;AAChB,UAAI,QAAQ,QAAQ,CAAC,MAAM,KAAK;AAC9B,YAAI,QAAQ,QAAQ,CAAC,MAAM,IAAK,QAAO;AACvC,iBAAS;AAAA,MACX;AAEA,iBAAW,KAAK,EAAE,gBAAgB,OAAO,eAAe,MAAM,CAAC;AAC/D,wBAAkB;AAClB,8BAAwB;AACxB;AAAA,IACF;AAEA,QAAI,SAAS,KAAK;AAChB,UAAI,WAAW,WAAW,EAAG,QAAO;AACpC,wBAAkB,WAAW,IAAI;AACjC,8BAAwB;AACxB;AAAA,IACF;AAEA,QAAI,SAAS,KAAK;AAChB,iBAAW,WAAW,SAAS,CAAC,EAAE,iBAAiB;AACnD,wBAAkB;AAClB,8BAAwB;AACxB;AAAA,IACF;AAEA,UAAM,gBAAgB,iBAAiB,SAAS,KAAK;AACrD,QAAI,kBAAkB,MAAM;AAC1B,UAAI,sBAAuB,QAAO;AAClC,UAAI,iBAAiB,kBAAkB,iBAAiB,cAAe,QAAO;AAE9E,iBAAW,WAAW,SAAS,CAAC,EAAE,gBAAgB;AAClD,wBAAkB;AAClB,8BAAwB;AACxB,cAAQ;AAER,UAAI,QAAQ,QAAQ,CAAC,MAAM,KAAK;AAC9B,iBAAS;AAAA,MACX;AAEA;AAAA,IACF;AAEA,sBAAkB;AAClB,4BAAwB;AAAA,EAC1B;AAEA,SAAO,WAAW,WAAW,KAAK,CAAC;AACrC;AAKA,SAAS,kBAAkB,WAAmC,SAA2C;AACvG,QAAM,QAAQ,eAAe,SAAS,UAAU,KAAK;AACrD,QAAM,WAAW,UAAU;AAE3B,UAAQ,UAAU,UAAU;AAAA,IAC1B,KAAK;AACH,aAAO,UAAU;AAAA,IAEnB,KAAK;AACH,aAAO,UAAU;AAAA,IAEnB,KAAK;AACH,aAAO,OAAO,UAAU,YAAY,OAAO,aAAa,YAAY,QAAQ;AAAA,IAE9E,KAAK;AACH,aAAO,OAAO,UAAU,YAAY,OAAO,aAAa,YAAY,SAAS;AAAA,IAE/E,KAAK;AACH,aAAO,OAAO,UAAU,YAAY,OAAO,aAAa,YAAY,QAAQ;AAAA,IAE9E,KAAK;AACH,aAAO,OAAO,UAAU,YAAY,OAAO,aAAa,YAAY,SAAS;AAAA,IAE/E,KAAK;AACH,UAAI,OAAO,UAAU,YAAY,OAAO,aAAa,UAAU;AAC7D,eAAO,MAAM,SAAS,QAAQ;AAAA,MAChC;AACA,UAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,eAAO,MAAM,SAAS,QAAQ;AAAA,MAChC;AACA,aAAO;AAAA,IAET,KAAK;AACH,aAAO,OAAO,UAAU,YAAY,OAAO,aAAa,YAAY,MAAM,WAAW,QAAQ;AAAA,IAE/F,KAAK;AACH,aAAO,OAAO,UAAU,YAAY,OAAO,aAAa,YAAY,MAAM,SAAS,QAAQ;AAAA,IAE7F,KAAK;AACH,aAAO,MAAM,QAAQ,QAAQ,KAAK,SAAS,SAAS,KAAK;AAAA,IAE3D,KAAK;AACH,aAAO,MAAM,QAAQ,QAAQ,KAAK,CAAC,SAAS,SAAS,KAAK;AAAA,IAE5D,KAAK;AACH,aAAO,UAAU,UAAa,UAAU;AAAA,IAE1C,KAAK;AACH,aAAO,UAAU,UAAa,UAAU;AAAA,IAE1C,KAAK;AACH,UAAI,OAAO,UAAU,YAAY,OAAO,aAAa,SAAU,QAAO;AACtE,UAAI,MAAM,SAAS,gCAAiC,QAAO;AAC3D,UAAI,CAAC,2BAA2B,QAAQ,EAAG,QAAO;AAClD;AACE,cAAM,SAAS,gBAAgB,UAAU,OAAO;AAAA,UAC9C,kBAAkB;AAAA,UAClB,gBAAgB;AAAA,QAClB,CAAC;AACD,eAAO,OAAO,KAAK,OAAO,UAAU;AAAA,MACtC;AAAA,IAEF;AACE,aAAO;AAAA,EACX;AACF;AAMO,SAAS,yBACd,YACA,SACS;AACT,MAAI,CAAC,cAAc,WAAW,WAAW,EAAG,QAAO;AAEnD,SAAO,WAAW,MAAM,eAAa,kBAAkB,WAAW,OAAO,CAAC;AAC5E;AASO,SAAS,kBACd,SACA,SACyB;AACzB,QAAM,UAAmC,CAAC;AAE1C,MAAI,CAAC,WAAW,QAAQ,WAAW,EAAG,QAAO;AAE7C,aAAW,QAAQ,SAAS;AAC1B,UAAM,QAAQ,eAAe,SAAS,KAAK,gBAAgB;AAC3D,YAAQ,KAAK,SAAS,IAAI,UAAU,SAAY,QAAQ,KAAK;AAAA,EAC/D;AAEA,SAAO;AACT;AAeA,MAAM,2BAA2B;AAEjC,SAAS,kBAA+C;AACtD,QAAM,WAAY,WAAmB,wBAAwB;AAG7D,MAAI,SAAU,QAAO;AACrB,QAAM,UAAU,oBAAI,IAA4B;AAC/C,EAAC,WAAmB,wBAAwB,IAAI;AACjD,SAAO;AACT;AAEA,SAAS,YAAY,UAAkB,gBAAgC;AACrE,SAAO,GAAG,QAAQ,IAAI,cAAc;AACtC;AAMA,eAAe,mBACb,IACA,UACA,gBAC2B;AAC3B,QAAM,aAAa;AACnB,QAAM,iBAAiB,MAAM;AAAA,IAC3B;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT,WAAW;AAAA,IACb;AAAA,IACA;AAAA,MACE,SAAS,EAAE,UAAU,QAAQ,WAAW,MAAM;AAAA,IAChD;AAAA,IACA,EAAE,UAAU,eAAe;AAAA,EAC7B;AAGA,QAAM,gBAAgB,CAAC,GAAG,IAAI,IAAI,eAAe,IAAI,OAAK,EAAE,oBAAoB,CAAC,CAAC;AAClF,QAAM,cAAc,cAAc,SAAS,IAAI,MAAM,mBAAmB,YAAY,oBAAoB;AAAA,IACtG,IAAI,EAAE,KAAK,cAAc;AAAA,IACzB;AAAA,IACA;AAAA,IACA,SAAS;AAAA,IACT,WAAW;AAAA,EACb,GAAG,CAAC,GAAG,EAAE,UAAU,eAAe,CAAC,IAAI,CAAC;AACxC,QAAM,gBAAgB,IAAI,IAAI,YAAY,IAAI,OAAK,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AAE7D,SAAO,eACJ,OAAO,OAAK,cAAc,IAAI,EAAE,oBAAoB,CAAC,EACrD,IAAI,OAAK;AACR,UAAM,MAAM,cAAc,IAAI,EAAE,oBAAoB;AACpD,WAAO;AAAA,MACL,IAAI,EAAE;AAAA,MACN,WAAW,EAAE;AAAA,MACb,MAAM,EAAE;AAAA,MACR,aAAa,EAAE;AAAA,MACf,cAAc,EAAE;AAAA,MAChB,QAAQ,EAAE,UAAU;AAAA,MACpB,SAAS,EAAE;AAAA,MACX,UAAU,EAAE;AAAA,MACZ,sBAAsB,EAAE;AAAA,MACxB,YAAY,IAAI;AAAA,MAChB,iBAAiB,IAAI;AAAA,MACrB,QAAQ;AAAA,MACR,UAAU,EAAE;AAAA,MACZ,gBAAgB,EAAE;AAAA,IACpB;AAAA,EACF,CAAC;AACL;AAWA,eAAe,qBACb,IACA,UACA,gBACmE;AACnE,QAAM,aAAa;AAGnB,QAAM,cAAc,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA;AAAA,MACA,WAAW;AAAA,IACb;AAAA,IACA,CAAC;AAAA,IACD,EAAE,UAAU,eAAe;AAAA,EAC7B;AAEA,QAAM,WAA6B,CAAC;AACpC,QAAM,cAAc,oBAAI,IAAY;AAEpC,aAAW,OAAO,aAAa;AAC7B,gBAAY,IAAI,IAAI,UAAU;AAC9B,QAAI,CAAC,IAAI,QAAS;AAElB,UAAM,mBAAmB,IAAI,YAAY;AACzC,QAAI,CAAC,oBAAoB,iBAAiB,WAAW,EAAG;AAExD,eAAW,WAAW,kBAAkB;AACtC,UAAI,CAAC,QAAQ,QAAS;AAEtB,eAAS,KAAK;AAAA,QACZ,IAAI,GAAG,IAAI,EAAE,IAAI,QAAQ,SAAS;AAAA,QAClC,WAAW,QAAQ;AAAA,QACnB,MAAM,QAAQ;AAAA,QACd,aAAa,QAAQ,eAAe;AAAA,QACpC,cAAc,QAAQ;AAAA,QACtB,QAAQ,QAAQ,UAAU;AAAA,QAC1B,SAAS,QAAQ;AAAA,QACjB,UAAU,QAAQ;AAAA,QAClB,sBAAsB,IAAI;AAAA,QAC1B,YAAY,IAAI;AAAA,QAChB,iBAAiB,IAAI;AAAA,QACrB,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO,EAAE,UAAU,YAAY;AACjC;AAkBO,SAAS,iBACd,UACA,gBACA,qBACkB;AAClB,QAAM,WAA6B,CAAC;AAEpC,aAAW,WAAW,oBAAoB,GAAG;AAC3C,QAAI,CAAC,QAAQ,QAAS;AACtB,QAAI,oBAAoB,IAAI,QAAQ,UAAU,EAAG;AAEjD,UAAM,mBAAmB,QAAQ,YAAY;AAC7C,QAAI,CAAC,oBAAoB,iBAAiB,WAAW,EAAG;AAExD,UAAM,eAAe,iBAAiB,QAAQ,UAAU;AACxD,eAAW,WAAW,kBAAkB;AACtC,UAAI,CAAC,QAAQ,QAAS;AAEtB,eAAS,KAAK;AAAA,QACZ,IAAI,QAAQ,QAAQ,UAAU,IAAI,QAAQ,SAAS;AAAA,QACnD,WAAW,QAAQ;AAAA,QACnB,MAAM,QAAQ;AAAA,QACd,aAAa,QAAQ,eAAe;AAAA,QACpC,cAAc,QAAQ;AAAA,QACtB,QAAS,QAAQ,UAAU;AAAA,QAC3B,SAAS,QAAQ;AAAA,QACjB,UAAU,QAAQ;AAAA,QAClB,sBAAsB;AAAA,QACtB,YAAY,QAAQ;AAAA,QACpB,iBAAiB,QAAQ;AAAA,QACzB,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO;AACT;AAQA,eAAsB,sBACpB,IACA,UACA,gBACA,cAC2B;AAC3B,QAAM,WAAW,YAAY,UAAU,cAAc;AACrD,QAAM,QAAQ,gBAAgB;AAG9B,QAAM,SAAS,MAAM,IAAI,QAAQ;AACjC,MAAI,UAAU,KAAK,IAAI,IAAI,OAAO,WAAW,mBAAmB;AAC9D,WAAO,OAAO;AAAA,EAChB;AAGA,QAAM,CAAC,gBAAgB,QAAQ,IAAI,MAAM,QAAQ,IAAI;AAAA,IACnD,mBAAmB,IAAI,UAAU,cAAc;AAAA,IAC/C,qBAAqB,IAAI,UAAU,cAAc;AAAA,EACnD,CAAC;AACD,QAAM,mBAAmB,SAAS;AAKlC,QAAM,sBAAsB,oBAAI,IAAY;AAAA,IAC1C,GAAG,SAAS;AAAA,IACZ,GAAG,eAAe,IAAI,CAAC,MAAM,EAAE,UAAU;AAAA,EAC3C,CAAC;AACD,QAAM,eAAe,iBAAiB,UAAU,gBAAgB,mBAAmB;AAGnF,QAAM,cAAc,CAAC,GAAG,gBAAgB,GAAG,kBAAkB,GAAG,YAAY,EACzE,KAAK,CAAC,GAAG,MAAM,EAAE,WAAW,EAAE,QAAQ;AAGzC,QAAM,IAAI,UAAU;AAAA,IAClB,UAAU;AAAA,IACV,UAAU,KAAK,IAAI;AAAA,EACrB,CAAC;AAED,SAAO;AACT;AAQO,SAAS,uBAAuB,UAAkB,gBAA+B;AACtF,QAAM,QAAQ,gBAAgB;AAC9B,MAAI,gBAAgB;AAElB,UAAM,WAAW,YAAY,UAAU,cAAc;AACrD,UAAM,OAAO,QAAQ;AAAA,EACvB,OAAO;AAEL,eAAW,OAAO,MAAM,KAAK,GAAG;AAC9B,UAAI,IAAI,WAAW,GAAG,QAAQ,GAAG,GAAG;AAClC,cAAM,OAAO,GAAG;AAAA,MAClB;AAAA,IACF;AAAA,EACF;AACF;AASA,eAAsB,qBACpB,IACA,SAC2B;AAC3B,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AAEA,SAAO,SAAS,OAAO,aAAW;AAEhC,QAAI,CAAC,kBAAkB,QAAQ,WAAW,QAAQ,YAAY,GAAG;AAC/D,aAAO;AAAA,IACT;AAGA,QAAI,CAAC,yBAAyB,QAAQ,QAAQ,kBAAkB,QAAQ,OAAO,GAAG;AAChF,aAAO;AAAA,IACT;AAEA,WAAO;AAAA,EACT,CAAC;AACH;AASA,eAAe,sBACb,IACA,SACkB;AAClB,QAAM,eAAe,QAAQ,QAAQ;AAErC,MAAI,CAAC,aAAc,QAAO;AAG1B,QAAM,eAAe,MAAM,GAAG,MAAM,kBAAkB;AAAA,IACpD,cAAc,QAAQ;AAAA,IACtB,QAAQ,EAAE,KAAK,CAAC,WAAW,wBAAwB,EAAE;AAAA,IACrD,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ;AAAA,IACxB,WAAW;AAAA,EACb,CAAC;AAED,SAAO,eAAe;AACxB;AAKA,eAAsB,qBACpB,IACA,WACA,SACgC;AAChC,QAAM,SAAgC;AAAA,IACpC,WAAW;AAAA,IACX,SAAS;AAAA,IACT,QAAQ,CAAC;AAAA,IACT,WAAW,CAAC;AAAA,EACd;AAGA,QAAM,WAAW,MAAM,qBAAqB,IAAI,OAAO;AAEvD,MAAI,SAAS,WAAW,GAAG;AACzB,WAAO;AAAA,EACT;AAGA,aAAW,WAAW,UAAU;AAC9B,QAAI;AAEF,YAAM,WAAW,MAAM,sBAAsB,IAAI,OAAO;AACxD,UAAI,CAAC,UAAU;AACb,eAAO,MAAM,sDAAsD,EAAE,WAAW,QAAQ,IAAI,aAAa,QAAQ,KAAK,CAAC;AACvH,eAAO;AACP;AAAA,MACF;AAGA,YAAM,gBAAgB,kBAAkB,QAAQ,QAAQ,gBAAgB,QAAQ,OAAO;AAGvF,YAAM,YAAY,QAAQ,SAAS;AACnC,YAAM,oBAAoB,QAAQ,SAAS;AAC3C,YAAM,cAAc,qBAAqB,QAAQ,OAAO;AAGxD,YAAM,iBAAiB;AAAA;AAAA,QAErB,GAAG,QAAQ;AAAA;AAAA,QAEX,GAAG;AAAA,QACH,WAAW;AAAA,UACT,WAAW,QAAQ;AAAA,UACnB,aAAa,QAAQ;AAAA,UACrB,WAAW,QAAQ;AAAA,UACnB,cAAc,QAAQ;AAAA,UACtB,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,UACpC,QAAQ,QAAQ;AAAA,QAClB;AAAA,MACF;AAGA,YAAM,WAAW,MAAM,cAAc,IAAI;AAAA,QACvC,YAAY,QAAQ;AAAA,QACpB,SAAS,QAAQ;AAAA,QACjB;AAAA,QACA,UAAU;AAAA,UACR,aAAa,eAAe,WAAW,QAAQ,EAAE;AAAA;AAAA,UAEjD,UAAU;AAAA,UACV,YAAY,qBAAqB,QAAQ,QAAQ;AAAA,UACjD,QAAQ;AAAA,YACN,YAAY,QAAQ;AAAA,YACpB,cAAc,QAAQ;AAAA,YACtB,YAAY,QAAQ;AAAA,YACpB,gBAAgB,QAAQ;AAAA,UAC1B;AAAA,QACF;AAAA,QACA,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ;AAAA,MAC1B,CAAC;AAED,aAAO;AACP,aAAO,UAAU,KAAK;AAAA,QACpB,WAAW,QAAQ;AAAA,QACnB,YAAY,SAAS;AAAA,MACvB,CAAC;AAGD;AAAA,QACE,GAAG,KAAK;AAAA,QACR;AAAA,QACA,SAAS;AAAA,QACT,cAAc,EAAE,QAAQ,YAAY,IAAI;AAAA,MAC1C,EAAE,MAAM,SAAO;AACb,eAAO,MAAM,4BAA4B,EAAE,YAAY,SAAS,IAAI,IAAI,CAAC;AAAA,MAC3E,CAAC;AAAA,IAEH,SAAS,OAAO;AACd,YAAM,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC1E,aAAO,MAAM,4BAA4B,EAAE,WAAW,QAAQ,IAAI,aAAa,QAAQ,MAAM,KAAK,MAAM,CAAC;AACzG,aAAO,OAAO,KAAK;AAAA,QACjB,WAAW,QAAQ;AAAA,QACnB,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO;AACT;",
   "names": []
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/core",
-  "version": "0.6.7-develop.6606.1.3b1ec9b1ea",
+  "version": "0.6.7-develop.6622.1.4d29ddaca4",
   "license": "MIT",
   "type": "module",
   "main": "./dist/index.js",
@@ -254,16 +254,16 @@
     "zod": "^4.4.3"
   },
   "peerDependencies": {
-    "@open-mercato/ai-assistant": "0.6.7-develop.6606.1.3b1ec9b1ea",
-    "@open-mercato/shared": "0.6.7-develop.6606.1.3b1ec9b1ea",
-    "@open-mercato/ui": "0.6.7-develop.6606.1.3b1ec9b1ea",
+    "@open-mercato/ai-assistant": "0.6.7-develop.6622.1.4d29ddaca4",
+    "@open-mercato/shared": "0.6.7-develop.6622.1.4d29ddaca4",
+    "@open-mercato/ui": "0.6.7-develop.6622.1.4d29ddaca4",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"
   },
   "devDependencies": {
-    "@open-mercato/ai-assistant": "0.6.7-develop.6606.1.3b1ec9b1ea",
-    "@open-mercato/shared": "0.6.7-develop.6606.1.3b1ec9b1ea",
-    "@open-mercato/ui": "0.6.7-develop.6606.1.3b1ec9b1ea",
+    "@open-mercato/ai-assistant": "0.6.7-develop.6622.1.4d29ddaca4",
+    "@open-mercato/shared": "0.6.7-develop.6622.1.4d29ddaca4",
+    "@open-mercato/ui": "0.6.7-develop.6622.1.4d29ddaca4",
     "@testing-library/dom": "^10.4.1",
     "@testing-library/jest-dom": "^6.9.1",
     "@testing-library/react": "^16.3.1",

package/src/modules/auth/api/session/refresh.ts

@@ -25,6 +25,23 @@ function parseCookie(req: Request, name: string): string | null {
   return m ? decodeURIComponent(m[1]) : null
 }
 
+type RefreshedSession = NonNullable<Awaited<ReturnType<AuthService['refreshFromSessionToken']>>>
+
+// Scope claims must stay absent rather than stringified when the user has no tenant/org:
+// `String(null)` yields the literal "null", which is not a UUID, so session-integrity
+// resolution rejects the token it just minted and the caller is stuck in a refresh loop.
+// Mirrors how `api/login.ts` builds the same claims.
+function buildStaffJwtClaims({ user, roles, session }: RefreshedSession) {
+  return {
+    sub: String(user.id),
+    sid: session ? String(session.id) : undefined,
+    tenantId: user.tenantId ? String(user.tenantId) : null,
+    orgId: user.organizationId ? String(user.organizationId) : null,
+    email: user.email,
+    roles,
+  }
+}
+
 function clearStaffAuthCookies(response: NextResponse) {
   response.cookies.set('auth_token', '', {
     httpOnly: true,
@@ -61,8 +78,7 @@ export async function GET(req: Request) {
       buildSafeRedirectResponse(req, '/login?redirect=' + encodeURIComponent(redirectTo))
     )
   }
-  const { user, roles, session } = ctx
-  const jwt = signJwt({ sub: String(user.id), sid: session ? String(session.id) : undefined, tenantId: String(user.tenantId), orgId: String(user.organizationId), email: user.email, roles })
+  const jwt = signJwt(buildStaffJwtClaims(ctx))
   const res = buildSafeRedirectResponse(req, redirectTo)
   res.cookies.set('auth_token', jwt, { httpOnly: true, path: '/', sameSite: 'lax', secure: process.env.NODE_ENV === 'production', maxAge: 60 * 60 * 8 })
   return res
@@ -112,15 +128,7 @@ export async function POST(req: Request) {
     )
   }
 
-  const { user, roles, session } = ctx
-  const jwt = signJwt({
-    sub: String(user.id),
-    sid: session ? String(session.id) : undefined,
-    tenantId: String(user.tenantId),
-    orgId: String(user.organizationId),
-    email: user.email,
-    roles,
-  })
+  const jwt = signJwt(buildStaffJwtClaims(ctx))
 
   const res = NextResponse.json({
     ok: true,

package/src/modules/auth/lib/rateLimitCheck.ts

@@ -1,6 +1,6 @@
 import { NextResponse } from 'next/server'
 import { getCachedRateLimiterService } from '@open-mercato/core/bootstrap'
-import { checkRateLimit, getClientIp, RATE_LIMIT_ERROR_KEY, RATE_LIMIT_ERROR_FALLBACK } from '@open-mercato/shared/lib/ratelimit/helpers'
+import { checkRateLimit, getClientIp, RATE_LIMIT_ERROR_KEY, RATE_LIMIT_ERROR_FALLBACK, RATE_LIMIT_FALLBACK_KEY } from '@open-mercato/shared/lib/ratelimit/helpers'
 import type { RateLimitConfig } from '@open-mercato/shared/lib/ratelimit/types'
 import { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'
 import { computeEmailHash } from '@open-mercato/core/modules/auth/lib/emailHash'
@@ -37,17 +37,17 @@ export async function checkAuthRateLimit(options: CheckAuthRateLimitOptions): Pr
     if (!rateLimiterService) return { error: null, compoundKey: null }
 
     const clientIp = getClientIp(options.req, rateLimiterService.trustProxyDepth)
-    if (!clientIp) return { error: null, compoundKey: null }
+    const clientKey = clientIp ?? RATE_LIMIT_FALLBACK_KEY
 
     const { translate } = await resolveTranslations()
     const errorMessage = translate(RATE_LIMIT_ERROR_KEY, RATE_LIMIT_ERROR_FALLBACK)
 
-    const ipError = await checkRateLimit(rateLimiterService, options.ipConfig, clientIp, errorMessage)
+    const ipError = await checkRateLimit(rateLimiterService, options.ipConfig, clientKey, errorMessage)
     if (ipError) return { error: ipError, compoundKey: null }
 
     if (options.compoundConfig && options.compoundIdentifier) {
       const hash = computeEmailHash(options.compoundIdentifier)
-      const compoundKey = `${clientIp}:${hash}`
+      const compoundKey = `${clientKey}:${hash}`
       const compoundError = await checkRateLimit(rateLimiterService, options.compoundConfig, compoundKey, errorMessage)
       if (compoundError) return { error: compoundError, compoundKey }
       return { error: null, compoundKey }