@open-mercato/core 0.6.7-develop.6842.1.8cd8a8883c → 0.6.7-develop.6859.1.e4727b568a

package/dist/modules/workflows/lib/activity-executor.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/workflows/lib/activity-executor.ts"],
-  "sourcesContent": ["/**\n * Workflows Module - Activity Executor Service\n *\n * Executes workflow activities (send email, call API, emit events, etc.)\n * - Supports multiple activity types\n * - Implements retry logic with exponential backoff\n * - Handles timeouts\n * - Variable interpolation from workflow context\n *\n * Functional API (no classes) following Open Mercato conventions.\n */\n\nimport { EntityManager } from '@mikro-orm/core'\nimport type { EntityManager as PostgreSqlEntityManager } from '@mikro-orm/postgresql'\nimport type { AwilixContainer } from 'awilix'\nimport { WorkflowInstance } from '../data/entities'\nimport { createModuleQueue, Queue } from '@open-mercato/queue'\nimport { getRedisUrl } from '@open-mercato/shared/lib/redis/connection'\nimport {\n  safeOutboundFetch,\n  UnsafeOutboundUrlError,\n  type HostLookup,\n} from '@open-mercato/shared/lib/url-safety'\nimport { parseBooleanWithDefault } from '@open-mercato/shared/lib/boolean'\nimport { callWebhookConfigSchema } from '../data/validators'\nimport { WorkflowActivityJob, WORKFLOW_ACTIVITIES_QUEUE_NAME } from './activity-queue-types'\nimport { logWorkflowEvent } from './event-logger'\nimport { parseDuration } from './duration'\nimport { getWorkflowSafeCommand } from './workflow-safe-commands'\n\nexport { isPrivateUrl } from '@open-mercato/shared/lib/network'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows')\n\nfunction isAllowPrivateWorkflowWebhookUrlsEnabled(): boolean {\n  if (parseBooleanWithDefault(process.env.OM_WORKFLOWS_ALLOW_PRIVATE_URLS, false)) {\n    if (process.env.NODE_ENV === 'production') {\n      logger.warn('OM_WORKFLOWS_ALLOW_PRIVATE_URLS is set but ignored in production. SSRF protection remains enabled.', { component: 'CALL_WEBHOOK' })\n      return false\n    }\n\n    logger.warn('OM_WORKFLOWS_ALLOW_PRIVATE_URLS is enabled. SSRF protection is bypassed for workflow webhooks; use only in development.', { component: 'CALL_WEBHOOK' })\n    return true\n  }\n\n  if (parseBooleanWithDefault(process.env.WORKFLOW_WEBHOOK_ALLOW_PRIVATE_URLS, false)) {\n    if (process.env.NODE_ENV === 'production') {\n      logger.warn('WORKFLOW_WEBHOOK_ALLOW_PRIVATE_URLS is deprecated and ignored in production. Use OM_WORKFLOWS_ALLOW_PRIVATE_URLS for development only. SSRF protection remains enabled.', { component: 'CALL_WEBHOOK' })\n      return false\n    }\n\n    logger.warn('WORKFLOW_WEBHOOK_ALLOW_PRIVATE_URLS is deprecated. Use OM_WORKFLOWS_ALLOW_PRIVATE_URLS instead. SSRF protection is bypassed.', { component: 'CALL_WEBHOOK' })\n    return true\n  }\n\n  return false\n}\n\nconst DEFAULT_WORKFLOW_ENV_INTERPOLATION_ALLOWLIST = new Set(['APP_URL'])\nconst WORKFLOW_ENV_INTERPOLATION_ALLOWLIST_KEY = 'OM_WORKFLOWS_ENV_INTERPOLATION_ALLOWLIST'\n\nfunction getWorkflowEnvInterpolationAllowlist(): Set<string> {\n  const allowlist = new Set(DEFAULT_WORKFLOW_ENV_INTERPOLATION_ALLOWLIST)\n  const configuredKeys = process.env[WORKFLOW_ENV_INTERPOLATION_ALLOWLIST_KEY]\n  if (!configuredKeys) {\n    return allowlist\n  }\n\n  for (const key of configuredKeys.split(',')) {\n    const trimmedKey = key.trim()\n    if (trimmedKey) {\n      allowlist.add(trimmedKey)\n    }\n  }\n\n  return allowlist\n}\n\nfunction resolveWorkflowEnvInterpolation(envKey: string): string {\n  if (!getWorkflowEnvInterpolationAllowlist().has(envKey)) {\n    return ''\n  }\n\n  return process.env[envKey] ?? ''\n}\n\n// ============================================================================\n// Types and Interfaces\n// ============================================================================\n\nexport type ActivityType =\n  | 'SEND_EMAIL'\n  | 'CALL_API'\n  | 'EMIT_EVENT'\n  | 'UPDATE_ENTITY'\n  | 'CALL_WEBHOOK'\n  | 'EXECUTE_FUNCTION'\n  | 'WAIT'\n\nexport interface ActivityDefinition {\n  activityId: string // Unique identifier for activity\n  activityName?: string // Optional, for debugging/logging\n  activityType: ActivityType\n  config: any\n  async?: boolean // Flag to execute activity asynchronously via queue\n  retryPolicy?: RetryPolicy\n  timeoutMs?: number\n  /**\n   * @deprecated Use `timeoutMs`. Legacy ISO 8601 duration string accepted by\n   * the definition schema before #4424; normalized by `resolveActivityTimeoutMs`.\n   */\n  timeout?: string\n  compensate?: boolean // Flag to execute compensation on failure\n}\n\n/**\n * Effective timeout for an activity, in milliseconds.\n *\n * The editor and this executor both speak `timeoutMs`, but the definition\n * schema historically accepted only an ISO 8601 `timeout` string \u2014 so stored\n * definitions can carry either. Prefer `timeoutMs`; fall back to parsing\n * `timeout`, ignoring a malformed value rather than throwing mid-execution\n * (an unparseable timeout must not fail an activity that would otherwise\n * succeed). Returns undefined when no usable timeout is configured (#4424).\n */\nexport function resolveActivityTimeoutMs(activity: {\n  timeoutMs?: number\n  timeout?: string\n}): number | undefined {\n  if (typeof activity.timeoutMs === 'number' && activity.timeoutMs > 0) {\n    return activity.timeoutMs\n  }\n  if (typeof activity.timeout === 'string' && activity.timeout.trim().length > 0) {\n    try {\n      const parsed = parseDuration(activity.timeout.trim())\n      if (Number.isFinite(parsed) && parsed > 0) return parsed\n    } catch {\n      return undefined\n    }\n  }\n  return undefined\n}\n\nexport interface RetryPolicy {\n  maxAttempts: number\n  initialIntervalMs: number\n  backoffCoefficient: number\n  maxIntervalMs: number\n}\n\nexport interface ActivityContext {\n  workflowInstance: WorkflowInstance\n  workflowContext: Record<string, any>\n  stepContext?: Record<string, any>\n  stepInstanceId?: string\n  // Set when the activity runs inside a parallel branch; carried on the queue\n  // payload so async resume targets the branch rather than the instance.\n  branchInstanceId?: string | null\n  transitionId?: string\n  userId?: string\n}\n\ntype RbacFeatureResolver = {\n  userHasAllFeatures: (\n    userId: string,\n    required: string[],\n    opts: { tenantId: string | null; organizationId: string | null }\n  ) => Promise<boolean>\n}\n\nasync function workflowUserHasAllFeatures(\n  container: AwilixContainer,\n  userId: string,\n  required: readonly string[],\n  tenantId: string | null,\n  organizationId: string | null\n): Promise<boolean> {\n  try {\n    const rbac = container.resolve('rbacService') as RbacFeatureResolver | undefined\n    if (rbac?.userHasAllFeatures) {\n      return await rbac.userHasAllFeatures(userId, [...required], { tenantId, organizationId })\n    }\n  } catch {\n    // Fail closed below when the workflow executor cannot prove the actor's grants.\n  }\n  return false\n}\n\nexport interface ActivityExecutionResult {\n  activityId: string\n  activityName?: string\n  activityType: ActivityType\n  success: boolean\n  output?: any\n  error?: string\n  retryCount: number\n  executionTimeMs: number\n  async?: boolean // Marks activity as async (queued)\n  jobId?: string // Queue job ID for async activities\n}\n\nexport class ActivityExecutionError extends Error {\n  constructor(\n    message: string,\n    public activityType: ActivityType,\n    public activityName?: string,\n    public details?: any\n  ) {\n    super(message)\n    this.name = 'ActivityExecutionError'\n  }\n}\n\n// ============================================================================\n// Queue Integration for Async Activities\n// ============================================================================\n\nlet activityQueue: Queue<WorkflowActivityJob> | null = null\n\n/**\n * Get or create the activity queue (lazy initialization)\n */\nfunction getActivityQueue(): Queue<WorkflowActivityJob> {\n  if (!activityQueue) {\n    activityQueue = createModuleQueue<WorkflowActivityJob>(\n      WORKFLOW_ACTIVITIES_QUEUE_NAME,\n      { concurrency: parseInt(process.env.WORKFLOW_WORKER_CONCURRENCY || '5') },\n    )\n  }\n\n  return activityQueue\n}\n\n/**\n * Enqueue an activity for background execution\n *\n * @param em - Entity manager\n * @param activity - Activity definition\n * @param context - Execution context\n * @returns Job ID\n */\nexport async function enqueueActivity(\n  em: EntityManager,\n  activity: ActivityDefinition,\n  context: ActivityContext\n): Promise<string> {\n  const { workflowInstance, workflowContext, stepContext, transitionId, stepInstanceId, branchInstanceId } =\n    context\n\n  // Interpolate config variables NOW (before queuing)\n  const interpolatedConfig = interpolateVariables(activity.config, workflowContext, workflowInstance)\n\n  // Create job payload\n  const job: WorkflowActivityJob = {\n    workflowInstanceId: workflowInstance.id,\n    stepInstanceId,\n    branchInstanceId: branchInstanceId ?? undefined,\n    transitionId,\n    activityId: activity.activityId,\n    activityName: activity.activityName || activity.activityType,\n    activityType: activity.activityType,\n    activityConfig: interpolatedConfig,\n    workflowContext,\n    stepContext,\n    retryPolicy: activity.retryPolicy,\n    timeoutMs: activity.timeoutMs,\n    tenantId: workflowInstance.tenantId,\n    organizationId: workflowInstance.organizationId,\n    userId: context.userId,\n  }\n\n  // Enqueue to queue (WAIT activities use delayMs for the actual delay)\n  const queue = getActivityQueue()\n  const enqueueOptions = activity.activityType === 'WAIT' && (interpolatedConfig.duration || interpolatedConfig.until)\n    ? { delayMs: calculateWaitDelayMs(interpolatedConfig) }\n    : undefined\n  const jobId = await queue.enqueue(job, enqueueOptions)\n\n  // Log event\n  await logWorkflowEvent(em, {\n    workflowInstanceId: workflowInstance.id,\n    stepInstanceId,\n    eventType: 'ACTIVITY_QUEUED',\n    eventData: {\n      activityId: activity.activityId,\n      activityName: activity.activityName,\n      activityType: activity.activityType,\n      async: true,\n      jobId,\n    },\n    tenantId: workflowInstance.tenantId,\n    organizationId: workflowInstance.organizationId,\n  })\n\n  return jobId\n}\n\n/**\n * Enqueue a delayed timer job for a WAIT_FOR_TIMER step.\n *\n * The activity worker handles `kind: 'timer'` jobs by calling\n * `timerHandler.fireTimer`, which resumes the paused workflow instance.\n */\nexport async function enqueueTimerJob(params: {\n  workflowInstanceId: string\n  stepInstanceId: string\n  branchInstanceId?: string | null\n  tenantId: string\n  organizationId: string\n  userId?: string\n  fireAt: string\n  delayMs: number\n}): Promise<string> {\n  const { workflowInstanceId, stepInstanceId, branchInstanceId, tenantId, organizationId, userId, fireAt, delayMs } =\n    params\n\n  const queue = getActivityQueue()\n  const jobId = await queue.enqueue(\n    {\n      kind: 'timer',\n      workflowInstanceId,\n      stepInstanceId,\n      branchInstanceId: branchInstanceId ?? undefined,\n      tenantId,\n      organizationId,\n      userId,\n      fireAt,\n    },\n    { delayMs: delayMs > 0 ? delayMs : undefined }\n  )\n\n  return jobId\n}\n\n// ============================================================================\n// Main Activity Execution Functions\n// ============================================================================\n\n/**\n * Execute a single activity with retry logic and timeout\n *\n * @param em - Entity manager\n * @param container - DI container\n * @param activity - Activity definition\n * @param context - Execution context\n * @returns Execution result\n */\nexport async function executeActivity(\n  em: EntityManager,\n  container: AwilixContainer,\n  activity: ActivityDefinition,\n  context: ActivityContext\n): Promise<ActivityExecutionResult> {\n  const retryPolicy = activity.retryPolicy || {\n    maxAttempts: 1,\n    initialIntervalMs: 0,\n    backoffCoefficient: 1,\n    maxIntervalMs: 0,\n  }\n\n  let lastError: any\n  let retryCount = 0\n\n  for (let attempt = 0; attempt < retryPolicy.maxAttempts; attempt++) {\n    try {\n      const startTime = Date.now()\n\n      // Execute with timeout if specified (timeoutMs, or a legacy ISO 8601\n      // `timeout` string normalized to ms \u2014 see resolveActivityTimeoutMs).\n      const timeoutMs = resolveActivityTimeoutMs(activity)\n      const result = timeoutMs\n        ? await executeWithTimeout(\n            (signal) => executeActivityByType(em, container, activity, context, signal),\n            timeoutMs\n          )\n        : await executeActivityByType(em, container, activity, context)\n\n      const executionTimeMs = Date.now() - startTime\n\n      return {\n        activityId: activity.activityId,\n        activityName: activity.activityName,\n        activityType: activity.activityType,\n        success: true,\n        output: result,\n        retryCount: attempt,\n        executionTimeMs,\n        async: activity.async || false,\n      }\n    } catch (error) {\n      lastError = error\n      retryCount = attempt + 1\n\n      // Log activity retry attempt with context\n      if (attempt < retryPolicy.maxAttempts - 1) {\n        logger.error('Activity failed; will retry', {\n          activityId: activity.activityId,\n          activityType: activity.activityType,\n          attempt: attempt + 1,\n          maxAttempts: retryPolicy.maxAttempts,\n          instanceId: context.workflowInstance.id,\n          err: error,\n        })\n      }\n\n      // If not the last attempt, apply backoff and retry\n      if (attempt < retryPolicy.maxAttempts - 1) {\n        const backoff = calculateBackoff(\n          retryPolicy.initialIntervalMs,\n          retryPolicy.backoffCoefficient,\n          attempt,\n          retryPolicy.maxIntervalMs\n        )\n\n        await sleep(backoff)\n      }\n    }\n  }\n\n  // All retries exhausted\n  const errorMessage = lastError instanceof Error ? lastError.message : String(lastError)\n  logger.error('Activity failed after all attempts', {\n    activityId: activity.activityId,\n    activityType: activity.activityType,\n    attempts: retryCount,\n    instanceId: context.workflowInstance.id,\n    err: lastError,\n  })\n\n  return {\n    activityId: activity.activityId,\n    activityName: activity.activityName,\n    activityType: activity.activityType,\n    success: false,\n    error: `Activity failed after ${retryCount} attempts: ${errorMessage}`,\n    retryCount,\n    executionTimeMs: 0,\n    async: activity.async || false,\n  }\n}\n\n/**\n * Execute multiple activities in sequence\n * Supports both synchronous and asynchronous (queued) execution\n *\n * @param em - Entity manager\n * @param container - DI container\n * @param activities - Array of activity definitions\n * @param context - Execution context\n * @returns Array of execution results\n */\nexport async function executeActivities(\n  em: EntityManager,\n  container: AwilixContainer,\n  activities: ActivityDefinition[],\n  context: ActivityContext\n): Promise<ActivityExecutionResult[]> {\n  const results: ActivityExecutionResult[] = []\n\n  for (let i = 0; i < activities.length; i++) {\n    const activity = activities[i]\n\n    // Check if activity should run async\n    if (activity.async) {\n      // Enqueue for background execution\n      const jobId = await enqueueActivity(em, activity, context)\n\n      results.push({\n        activityId: activity.activityId,\n        activityName: activity.activityName,\n        activityType: activity.activityType,\n        success: true, // Queued successfully\n        async: true,\n        jobId,\n        retryCount: 0,\n        executionTimeMs: 0,\n      })\n    } else {\n      // Execute synchronously (existing logic)\n      const result = await executeActivity(em, container, activity, context)\n      results.push(result)\n\n      // Stop execution if activity fails (fail-fast)\n      if (!result.success) {\n        break\n      }\n\n      // Update workflow context with activity output\n      if (result.output && typeof result.output === 'object') {\n        const key = activity.activityName || activity.activityType\n        context.workflowContext = {\n          ...context.workflowContext,\n          [key]: result.output,\n        }\n      }\n    }\n  }\n\n  return results\n}\n\n// ============================================================================\n// Activity Type Handlers\n// ============================================================================\n\n/**\n * Execute activity based on its type\n */\nasync function executeActivityByType(\n  em: EntityManager,\n  container: AwilixContainer,\n  activity: ActivityDefinition,\n  context: ActivityContext,\n  signal?: AbortSignal\n): Promise<any> {\n  // Interpolate config variables from context (including workflow metadata)\n  const interpolatedConfig = interpolateVariables(activity.config, context.workflowContext, context.workflowInstance)\n\n  switch (activity.activityType) {\n    case 'SEND_EMAIL':\n      return await executeSendEmail(interpolatedConfig, context, container)\n\n    case 'CALL_API':\n      return await executeCallApi(em, interpolatedConfig, context, container, signal)\n\n    case 'EMIT_EVENT':\n      return await executeEmitEvent(interpolatedConfig, context, container)\n\n    case 'UPDATE_ENTITY':\n      return await executeUpdateEntity(em, interpolatedConfig, context, container)\n\n    case 'CALL_WEBHOOK':\n      return await executeCallWebhook(interpolatedConfig, context, { signal })\n\n    case 'EXECUTE_FUNCTION':\n      return await executeFunction(interpolatedConfig, context, container)\n\n    case 'WAIT':\n      return await executeWait(interpolatedConfig)\n\n    default:\n      throw new ActivityExecutionError(\n        `Unknown activity type: ${activity.activityType}`,\n        activity.activityType,\n        activity.activityName\n      )\n  }\n}\n\n/**\n * SEND_EMAIL activity handler\n *\n * For MVP, this logs the email (actual email sending can be added later)\n */\nexport async function executeSendEmail(\n  config: any,\n  context: ActivityContext,\n  container: AwilixContainer\n): Promise<any> {\n  const { to, subject, template, templateData, body } = config\n\n  if (!to || !subject) {\n    throw new Error('SEND_EMAIL requires \"to\" and \"subject\" fields')\n  }\n\n  // For MVP: Log the email (actual email service integration can be added later)\n  logger.info('Send email activity invoked', { component: 'SEND_EMAIL', subject })\n\n  // Check if email service is available in container\n  try {\n    const emailService = container.resolve<{ send: (input: unknown) => Promise<unknown> | unknown }>('emailService')\n    if (emailService && typeof emailService.send === 'function') {\n      await emailService.send({\n        to,\n        subject,\n        template,\n        templateData,\n        body,\n      })\n      return { sent: true, to, subject, via: 'emailService' }\n    }\n  } catch (error) {\n    // Email service not available, just log\n  }\n\n  return { sent: true, to, subject, via: 'console' }\n}\n\n/**\n * EMIT_EVENT activity handler\n *\n * Publishes a domain event to the event bus\n */\nexport async function executeEmitEvent(\n  config: any,\n  context: ActivityContext,\n  container: AwilixContainer\n): Promise<any> {\n  const { eventName, payload } = config\n\n  if (!eventName) {\n    throw new Error('EMIT_EVENT requires \"eventName\" field')\n  }\n\n  // Get event bus from container\n  const eventBus = container.resolve<{ emitEvent: (event: string, payload: unknown, options?: unknown) => Promise<unknown> | unknown }>('eventBus')\n\n  if (!eventBus || typeof eventBus.emitEvent !== 'function') {\n    throw new Error('Event bus not available in container')\n  }\n\n  // Publish event with workflow metadata\n  const enrichedPayload = {\n    ...payload,\n    _workflow: {\n      workflowInstanceId: context.workflowInstance.id,\n      workflowId: context.workflowInstance.workflowId,\n      tenantId: context.workflowInstance.tenantId,\n      organizationId: context.workflowInstance.organizationId,\n    },\n  }\n\n  await eventBus.emitEvent(eventName, enrichedPayload, {\n    tenantId: context.workflowInstance.tenantId,\n    organizationId: context.workflowInstance.organizationId,\n  })\n\n  return { emitted: true, eventName, payload: enrichedPayload }\n}\n\n/**\n * UPDATE_ENTITY activity handler\n *\n * Updates an entity via CommandBus for proper audit logging, undo support, and side effects.\n *\n * Config format:\n * ```json\n * {\n *   \"commandId\": \"sales.documents.update\",\n *   \"input\": {\n *     \"id\": \"{{context.orderId}}\",\n *     \"statusEntryId\": \"{{context.approvedStatusId}}\"\n *   }\n * }\n * ```\n *\n * Alternative format with statusValue (auto-resolves to statusEntryId):\n * ```json\n * {\n *   \"commandId\": \"sales.orders.update\",\n *   \"statusDictionary\": \"sales.order_status\",\n *   \"input\": {\n *     \"id\": \"{{context.id}}\",\n *     \"statusValue\": \"pending_approval\"\n *   }\n * }\n * ```\n */\nexport async function executeUpdateEntity(\n  em: EntityManager,\n  config: any,\n  context: ActivityContext,\n  container: AwilixContainer\n): Promise<any> {\n  const { commandId, input, statusDictionary } = config\n\n  if (!commandId) {\n    throw new Error('UPDATE_ENTITY requires \"commandId\" field (e.g., \"sales.documents.update\")')\n  }\n\n  const workflowSafeCommand = getWorkflowSafeCommand(commandId)\n  if (!workflowSafeCommand) {\n    throw new Error('UPDATE_ENTITY command is not allowed')\n  }\n\n  if (!input || typeof input !== 'object') {\n    throw new Error('UPDATE_ENTITY requires \"input\" object with entity data')\n  }\n\n  const actorUserId = typeof context.userId === 'string' ? context.userId.trim() : ''\n  if (!actorUserId) {\n    throw new Error('UPDATE_ENTITY requires an authenticated workflow user')\n  }\n\n  const authorized = await workflowUserHasAllFeatures(\n    container,\n    actorUserId,\n    workflowSafeCommand.requiredFeatures,\n    context.workflowInstance.tenantId,\n    context.workflowInstance.organizationId\n  )\n  if (!authorized) {\n    throw new Error('UPDATE_ENTITY command is not authorized')\n  }\n\n  // Resolve CommandBus from container\n  const commandBus = container.resolve('commandBus') as any\n\n  if (!commandBus || typeof commandBus.execute !== 'function') {\n    throw new Error('CommandBus not available in container')\n  }\n\n  // Prepare final input, resolving statusValue if provided\n  let finalInput = { ...input }\n\n  // If statusValue is provided with a statusDictionary, resolve it to statusEntryId\n  if (finalInput.statusValue && statusDictionary) {\n    const statusEntryId = await resolveDictionaryEntryId(\n      em,\n      statusDictionary,\n      finalInput.statusValue,\n      context.workflowInstance.tenantId,\n      context.workflowInstance.organizationId\n    )\n    if (statusEntryId) {\n      finalInput.statusEntryId = statusEntryId\n    }\n    delete finalInput.statusValue\n  }\n\n  // Build synthetic CommandRuntimeContext for workflow execution\n  const ctx = {\n    container,\n    auth: {\n      sub: actorUserId,\n      tenantId: context.workflowInstance.tenantId,\n      orgId: context.workflowInstance.organizationId,\n      isSuperAdmin: false,\n    },\n    organizationScope: null,\n    selectedOrganizationId: context.workflowInstance.organizationId,\n    organizationIds: context.workflowInstance.organizationId\n      ? [context.workflowInstance.organizationId]\n      : null,\n  }\n\n  // Execute the command\n  const { result, logEntry } = await commandBus.execute(commandId, {\n    input: finalInput,\n    ctx,\n  })\n\n  return {\n    executed: true,\n    commandId,\n    result,\n    logEntryId: logEntry?.id,\n  }\n}\n\n/**\n * Helper to resolve dictionary entry ID by value\n */\nasync function resolveDictionaryEntryId(\n  em: EntityManager,\n  dictionaryKey: string,\n  value: string,\n  tenantId: string,\n  organizationId: string\n): Promise<string | null> {\n  try {\n    // Import here to avoid circular dependencies\n    const { Dictionary, DictionaryEntry } = await import('@open-mercato/core/modules/dictionaries/data/entities')\n\n    // Find the dictionary\n    const dictionary = await em.findOne(Dictionary, {\n      key: dictionaryKey,\n      tenantId,\n      organizationId,\n      deletedAt: null,\n    })\n\n    if (!dictionary) {\n      logger.warn('Dictionary not found', { component: 'UPDATE_ENTITY', dictionaryKey })\n      return null\n    }\n\n    // Find the entry by normalized value\n    const normalizedValue = value.toLowerCase().trim()\n    const entry = await em.findOne(DictionaryEntry, {\n      dictionary: dictionary.id,\n      tenantId,\n      organizationId,\n      normalizedValue,\n    })\n\n    if (!entry) {\n      logger.warn('Dictionary entry not found', { component: 'UPDATE_ENTITY', dictionaryKey, value })\n      return null\n    }\n\n    return entry.id\n  } catch (error) {\n    logger.error('Error resolving dictionary entry', { component: 'UPDATE_ENTITY', err: error })\n    return null\n  }\n}\n\n/**\n * CALL_WEBHOOK activity handler\n *\n * Makes HTTP request to an external URL. Applies shared SSRF guard\n * (protocol / credentials / blocked host / private IP literal / DNS rebinding)\n * before issuing the request and rejects any 3xx redirect rather than following.\n */\nexport type CallWebhookDeps = {\n  lookupHost?: HostLookup\n  allowPrivate?: boolean\n  fetchImpl?: typeof fetch\n  signal?: AbortSignal\n}\n\nexport async function executeCallWebhook(\n  config: unknown,\n  context: ActivityContext,\n  deps: CallWebhookDeps = {}\n): Promise<any> {\n  const parsed = callWebhookConfigSchema.safeParse(config)\n  if (!parsed.success) {\n    const issues = parsed.error.issues\n      .map((issue) => `${issue.path.join('.') || 'config'}: ${issue.message}`)\n      .join('; ')\n    throw new Error(`CALL_WEBHOOK config invalid: ${issues}`)\n  }\n  const { url, method, headers: rawHeaders, body } = parsed.data\n  const headers = rawHeaders ?? {}\n\n  const allowPrivate = deps.allowPrivate ?? isAllowPrivateWorkflowWebhookUrlsEnabled()\n\n  let response: Response\n  try {\n    response = await safeOutboundFetch(\n      url,\n      {\n        method,\n        headers: {\n          'Content-Type': 'application/json',\n          ...headers,\n        },\n        body: body !== undefined && body !== null ? JSON.stringify(body) : undefined,\n        redirect: 'manual',\n        signal: deps.signal,\n      },\n      {\n        subject: 'Workflow webhook URL',\n        allowPrivate,\n        lookupHost: deps.lookupHost,\n        fetchImpl: deps.fetchImpl,\n      },\n    )\n  } catch (error) {\n    if (error instanceof UnsafeOutboundUrlError) {\n      throw new Error(\n        `CALL_WEBHOOK rejected unsafe URL (reason=${error.reason}): ${error.message}`\n      )\n    }\n    throw error\n  }\n\n  if (response.status >= 300 && response.status < 400) {\n    const location = response.headers.get('location')\n    throw new Error(\n      `CALL_WEBHOOK refused to follow redirect ${response.status} to ${\n        location ?? '(no Location header)'\n      }`\n    )\n  }\n\n  // Parse response\n  let result: any\n  const contentType = response.headers.get('content-type')\n\n  if (contentType && contentType.includes('application/json')) {\n    result = await response.json()\n  } else {\n    result = await response.text()\n  }\n\n  // Check for HTTP errors\n  if (!response.ok) {\n    throw new Error(\n      `Webhook request failed with status ${response.status}: ${JSON.stringify(result)}`\n    )\n  }\n\n  return {\n    status: response.status,\n    statusText: response.statusText,\n    result,\n  }\n}\n\n/**\n * EXECUTE_FUNCTION activity handler\n *\n * Calls a registered function from DI container\n */\nexport async function executeFunction(\n  config: any,\n  context: ActivityContext,\n  container: AwilixContainer\n): Promise<any> {\n  const { functionName, args = {} } = config\n\n  if (!functionName) {\n    throw new Error('EXECUTE_FUNCTION requires \"functionName\" field')\n  }\n\n  // Look up function in container\n  const fnKey = `workflowFunction:${functionName}`\n\n  try {\n    const fn = container.resolve(fnKey)\n\n    if (typeof fn !== 'function') {\n      throw new Error(`Registered workflow function \"${functionName}\" is not a function`)\n    }\n\n    // Call function with args and context\n    const result = await fn(args, context)\n\n    return { executed: true, functionName, result }\n  } catch (error) {\n    if (error instanceof Error && error.message.includes('not registered')) {\n      throw new Error(\n        `Workflow function \"${functionName}\" not registered in DI container (key: ${fnKey})`\n      )\n    }\n    throw error\n  }\n}\n\n/**\n * Calculate delay in milliseconds from a WAIT activity config.\n * Supports either `duration` (relative, e.g. \"PT5M\") or `until` (absolute ISO 8601 datetime).\n */\nfunction calculateWaitDelayMs(config: { duration?: string; until?: string }): number {\n  if (config.until) {\n    const targetDate = new Date(config.until)\n    if (isNaN(targetDate.getTime())) {\n      throw new Error(`WAIT activity: invalid \"until\" datetime: ${config.until}`)\n    }\n    const delayMs = targetDate.getTime() - Date.now()\n    return Math.max(0, delayMs)\n  }\n\n  if (config.duration) {\n    return parseDuration(config.duration)\n  }\n\n  throw new Error('WAIT activity requires \"duration\" (e.g., \"PT5M\", \"1h\") or \"until\" (ISO 8601 datetime)')\n}\n\n/**\n * WAIT activity handler\n *\n * Delays workflow execution for a configured duration or until a specific datetime.\n * - `duration`: relative delay (e.g. \"PT5M\", \"1h\", \"30s\")\n * - `until`: absolute datetime (e.g. \"2026-04-15T10:00:00Z\")\n * - Sync mode: blocks via sleep (suitable for short delays)\n * - Async mode: delay is handled by the queue's delayMs option;\n *   this handler returns immediately when called from the worker\n */\nasync function executeWait(config: any): Promise<any> {\n  const durationMs = calculateWaitDelayMs(config)\n\n  // In sync mode, actually sleep for the duration\n  // In async mode (called from worker), the delay already happened via queue scheduling\n  await sleep(durationMs)\n\n  return { waited: true, durationMs }\n}\n\n/**\n * CALL_API activity handler\n *\n * Makes authenticated HTTP request to internal Open Mercato APIs\n * - Automatically creates one-time API key for authentication\n * - Injects tenant/organization context headers\n * - Validates URL security (SSRF prevention)\n * - Classifies errors (retriable vs non-retriable)\n * - Deletes API key after request (no stored credentials!)\n */\nexport async function executeCallApi(\n  em: EntityManager,\n  config: any,\n  context: ActivityContext,\n  container: AwilixContainer,\n  signal?: AbortSignal\n): Promise<any> {\n  // 1. Interpolate variables in config (including {{workflow.*}}, {{context.*}}, allowlisted {{env.*}}, {{now}})\n  const interpolatedConfig = interpolateVariables(config, context.workflowContext, context.workflowInstance)\n\n  const {\n    endpoint,\n    method = 'GET',\n    headers = {},\n    body,\n    validateTenantMatch = true,\n  } = interpolatedConfig\n\n\n  if (!endpoint) {\n    throw new Error('CALL_API requires \"endpoint\" field')\n  }\n\n  // 2. Build full URL (prepend APP_URL for relative paths)\n  const fullUrl = buildApiUrl(endpoint)\n\n  // 3. Import the one-time API key helper\n  const { withOnetimeApiKey } = await import('../../api_keys/services/apiKeyService')\n\n  // 4. Create the one-time API key on an EntityManager that is fully detached\n  //    from the surrounding request/transaction context.\n  //\n  //    CALL_API runs inside `workflowExecutor.executeWorkflow()`, which wraps\n  //    the whole execution in `em.transactional(...)`. The request EM is forked\n  //    with `useContext: true`, so while that transaction is open, EVERY\n  //    operation on the container's `em` \u2014 including this API key's\n  //    persist/flush \u2014 is transparently redirected to the uncommitted\n  //    transaction fork (MikroORM `getContext()` \u2192 `TransactionContext`). The\n  //    key would therefore stay invisible until the transaction commits, but\n  //    the commit cannot happen until this activity returns. The outbound\n  //    self-authenticated `fetch` below opens a SEPARATE DB connection that\n  //    cannot see the uncommitted row, so the internal API responds `401` and\n  //    the activity fails (issue #4202).\n  //\n  //    Forking with `useContext: false` (matching the query_index/webhooks\n  //    isolated-EM convention) gives the key its own pooled connection with\n  //    autocommit, so it is committed and visible to the internal request\n  //    immediately.\n  const apiKeyEm = container\n    .resolve<PostgreSqlEntityManager>('em')\n    .fork({ clear: true, freshEventManager: true, useContext: false }) as PostgreSqlEntityManager\n\n  // 5. Resolve the roles that the one-time API key will inherit.\n  //\n  // SECURITY: The key must never exceed the permissions of the human who\n  //   triggered (or authored) this workflow. Previously this code looked up\n  //   a role named \"admin\"/\"superadmin\" for the tenant and assigned it to\n  //   the key \u2014 which allowed any non-admin workflow author with\n  //   `workflows.definitions.edit` + `workflows.instances.create` to issue\n  //   arbitrary administrative API calls via a CALL_API activity. See the\n  //   SECURITY.md changelog entry for this fix.\n  //\n  //   The resolution strategy is:\n  //     1. Use the workflow instance's `metadata.initiatedBy` user (whoever\n  //        manually started the instance), when available. Only this user's\n  //        current active roles are used \u2014 we never fall back to the author\n  //        when the initiator is known, because that would escalate the\n  //        initiator's privileges.\n  //     2. Fall back to the workflow definition's `createdBy` (author) only\n  //        when the instance was started by an event trigger with no user.\n  //     3. If no traceable principal exists, the activity refuses to run \u2014\n  //        there is no \"system\" fallback that bypasses RBAC.\n  const resolvedRoleIds = await resolveCallApiRoleIds(apiKeyEm, context.workflowInstance)\n\n  if (resolvedRoleIds.length === 0) {\n    throw new Error(\n      `[CALL_API] Refusing to execute CALL_API for workflow instance ${context.workflowInstance.id}: ` +\n      `no traceable user roles could be resolved from the workflow instance or definition. ` +\n      `CALL_API activities must run under the identity of the user who triggered them.`\n    )\n  }\n\n  // 6. Execute request with one-time API key scoped to the resolved user's roles\n  return await withOnetimeApiKey(\n    apiKeyEm,\n    {\n      name: `__workflow_${context.workflowInstance.id}__`,\n      description: `One-time key for workflow ${context.workflowInstance.workflowId} instance ${context.workflowInstance.id}`,\n      tenantId: context.workflowInstance.tenantId,\n      organizationId: context.workflowInstance.organizationId,\n      roles: resolvedRoleIds,\n      expiresAt: null,\n    },\n    async (apiKeySecret) => {\n      // Build request headers (auth + context + custom)\n      const requestHeaders: Record<string, string> = {\n        'Content-Type': 'application/json',\n        'Authorization': `apikey ${apiKeySecret}`,\n        'X-Tenant-Id': context.workflowInstance.tenantId,\n        'X-Organization-Id': context.workflowInstance.organizationId,\n        'X-Workflow-Instance-Id': context.workflowInstance.id,\n        ...headers,\n      }\n\n      // Make HTTP request\n      const response = await fetch(fullUrl, {\n        method,\n        headers: requestHeaders,\n        body: body ? JSON.stringify(body) : undefined,\n        signal,\n      })\n\n      // Parse response body (JSON-safe)\n      let responseBody: any\n      const contentType = response.headers.get('content-type')\n\n      try {\n        if (contentType && contentType.includes('application/json')) {\n          responseBody = await response.json()\n        } else {\n          responseBody = await response.text()\n        }\n      } catch (error) {\n        responseBody = null\n      }\n\n      // Check for HTTP errors and classify\n      if (!response.ok) {\n        classifyAndThrowError(response.status, responseBody, fullUrl)\n      }\n\n      // Validate tenant match (security check)\n      if (validateTenantMatch && responseBody && typeof responseBody === 'object') {\n        if (responseBody.tenantId && responseBody.tenantId !== context.workflowInstance.tenantId) {\n          throw new Error(\n            `Tenant ID mismatch: workflow expects ${context.workflowInstance.tenantId} but API returned ${responseBody.tenantId}`\n          )\n        }\n      }\n\n      // Return structured result\n      return {\n        status: response.status,\n        statusText: response.statusText,\n        headers: Object.fromEntries(response.headers.entries()),\n        body: responseBody,\n        authenticated: true,\n        tenantId: context.workflowInstance.tenantId,\n        organizationId: context.workflowInstance.organizationId,\n      }\n    }\n  )\n}\n\n// ============================================================================\n// CALL_API Helper Functions\n// ============================================================================\n\nexport type CallApiInstanceLike = {\n  id: string\n  tenantId: string\n  organizationId: string\n  definitionId: string\n  metadata?: { initiatedBy?: string | null } | null\n}\n\nasync function resolveActiveRoleIdsForUser(\n  em: any,\n  userId: string,\n  scope: { tenantId: string; organizationId: string },\n): Promise<string[]> {\n  const { findOneWithDecryption, findWithDecryption } = await import('@open-mercato/shared/lib/encryption/find')\n  const { User, UserRole, Role } = await import('../../auth/data/entities')\n\n  const user = await findOneWithDecryption(em, User, {\n    id: userId,\n    tenantId: scope.tenantId,\n    deletedAt: null,\n  }, {}, scope)\n  if (!user) return []\n\n  const userRoles = await findWithDecryption(\n    em,\n    UserRole,\n    { user: user.id, deletedAt: null },\n    { populate: ['role'] },\n    scope,\n  )\n  const roleIds = userRoles\n    .map((ur: any) => (typeof ur.role === 'string' ? ur.role : ur.role?.id))\n    .filter((id: unknown): id is string => typeof id === 'string' && id.length > 0)\n\n  if (roleIds.length === 0) return []\n\n  const scopedRoles = await findWithDecryption(em, Role, {\n    id: { $in: roleIds },\n    tenantId: scope.tenantId,\n    deletedAt: null,\n  }, {}, scope)\n  return scopedRoles.map((r: any) => r.id as string)\n}\n\nexport async function resolveCallApiRoleIds(\n  em: any,\n  instance: CallApiInstanceLike\n): Promise<string[]> {\n  if (!instance.definitionId) return []\n\n  const { findOneWithDecryption } = await import('@open-mercato/shared/lib/encryption/find')\n  const { WorkflowDefinition } = await import('../data/entities')\n\n  const scope = { tenantId: instance.tenantId, organizationId: instance.organizationId }\n\n  // 1. Prefer the triggering user (whoever manually started this instance).\n  //    WorkflowInstance.metadata.initiatedBy is the canonical record of that\n  //    principal for user-started instances; use their current role set so\n  //    CALL_API never exceeds the initiator's permissions. Refuse if the\n  //    initiator has no active scoped roles \u2014 do not fall back to the\n  //    definition author, which would escalate the initiator's privileges.\n  const initiatorUserId = instance.metadata?.initiatedBy ?? null\n  if (initiatorUserId) {\n    return resolveActiveRoleIdsForUser(em, initiatorUserId, scope)\n  }\n\n  // 2. Event-triggered instance with no human initiator: fall back to the\n  //    definition author. Soft-deleted definitions must not mint keys.\n  const definition = await findOneWithDecryption(em, WorkflowDefinition, {\n    id: instance.definitionId,\n    tenantId: instance.tenantId,\n    deletedAt: null,\n  }, {}, scope)\n  const authorUserId = definition?.createdBy\n  if (!authorUserId) return []\n\n  return resolveActiveRoleIdsForUser(em, authorUserId, scope)\n}\n\n/**\n * Build full API URL from endpoint\n * - Relative paths (/api/...) \u2192 prepend APP_URL\n * - Absolute URLs \u2192 validate domain matches APP_URL (SSRF prevention)\n */\nfunction buildApiUrl(endpoint: string): string {\n  const appUrl = process.env.APP_URL || 'http://localhost:3000'\n\n  // Relative path - prepend APP_URL\n  if (endpoint.startsWith('/')) {\n    // Security: Only allow /api/* paths\n    if (!endpoint.startsWith('/api/')) {\n      throw new Error(`CALL_API only supports /api/* paths, got: ${endpoint}`)\n    }\n    return `${appUrl}${endpoint}`\n  }\n\n  // Absolute URL - validate domain matches APP_URL (SSRF prevention)\n  try {\n    const endpointUrl = new URL(endpoint)\n    const appUrlObj = new URL(appUrl)\n\n    if (endpointUrl.host !== appUrlObj.host) {\n      throw new Error(\n        `SSRF Prevention: CALL_API endpoint domain (${endpointUrl.host}) does not match APP_URL (${appUrlObj.host})`\n      )\n    }\n\n    return endpoint\n  } catch (error) {\n    if (error instanceof TypeError) {\n      throw new Error(`Invalid endpoint URL: ${endpoint}`)\n    }\n    throw error\n  }\n}\n\n/**\n * Classify HTTP error and throw appropriate error\n * - 400-499: Non-retriable (client error - validation/auth)\n * - 500-599: Retriable (server error)\n */\nfunction classifyAndThrowError(status: number, body: any, url: string): never {\n  const bodyStr = typeof body === 'string' ? body : JSON.stringify(body)\n\n  if (status >= 400 && status < 500) {\n    // Client errors - non-retriable\n    throw new Error(\n      `CALL_API request failed with status ${status} (non-retriable): ${bodyStr}`\n    )\n  }\n\n  if (status >= 500) {\n    // Server errors - retriable\n    const error: any = new Error(\n      `CALL_API request failed with status ${status} (retriable): ${bodyStr}`\n    )\n    error.retriable = true\n    throw error\n  }\n\n  // Other errors\n  throw new Error(`CALL_API request failed with status ${status}: ${bodyStr}`)\n}\n\n// ============================================================================\n// Helper Functions\n// ============================================================================\n\n/**\n * Interpolate variables in config from workflow context\n *\n * Supports syntax:\n * - {{context.field}} or {{context.nested.field}} - from workflow context\n * - {{workflow.instanceId}} - workflow instance ID\n * - {{workflow.tenantId}} - tenant ID\n * - {{workflow.organizationId}} - organization ID\n * - {{workflow.currentStepId}} - current step ID\n * - {{env.VAR_NAME}} - server-allowlisted environment variables\n * - {{now}} - current ISO timestamp\n */\nfunction interpolateVariables(\n  config: any,\n  context: Record<string, any>,\n  workflowInstance?: WorkflowInstance\n): any {\n  if (typeof config === 'string') {\n    // Check if this is a single variable reference (e.g., \"{{context.cart.items}}\")\n    // This preserves the original type (array, object, number, boolean)\n    const singleVarMatch = config.match(/^\\{\\{([^}]+)\\}\\}$/)\n\n    if (singleVarMatch) {\n      const trimmedPath = singleVarMatch[1].trim()\n\n      // Handle {{workflow.*}} variables\n      if (trimmedPath.startsWith('workflow.') && workflowInstance) {\n        const workflowKey = trimmedPath.substring('workflow.'.length)\n        switch (workflowKey) {\n          case 'instanceId':\n            return workflowInstance.id\n          case 'tenantId':\n            return workflowInstance.tenantId\n          case 'organizationId':\n            return workflowInstance.organizationId\n          case 'currentStepId':\n            return workflowInstance.currentStepId\n          case 'workflowId':\n            return workflowInstance.workflowId\n          case 'version':\n            return workflowInstance.version // Return as number\n          default:\n            return config // Return original if unknown\n        }\n      }\n\n      // Handle {{env.*}} variables\n      if (trimmedPath.startsWith('env.')) {\n        const envKey = trimmedPath.substring('env.'.length)\n        return resolveWorkflowEnvInterpolation(envKey)\n      }\n\n      // Handle {{now}} - current timestamp\n      if (trimmedPath === 'now') {\n        return new Date().toISOString()\n      }\n\n      // Handle {{context.*}} variables (default behavior)\n      const contextPath = trimmedPath.startsWith('context.')\n        ? trimmedPath.substring('context.'.length)\n        : trimmedPath\n\n      const value = getNestedValue(context, contextPath)\n      return value !== undefined ? value : config // Return raw value to preserve type\n    }\n\n    // Multiple interpolations or mixed text - return string\n    return config.replace(/\\{\\{([^}]+)\\}\\}/g, (match, path) => {\n      const trimmedPath = path.trim()\n\n      // Handle {{workflow.*}} variables\n      if (trimmedPath.startsWith('workflow.') && workflowInstance) {\n        const workflowKey = trimmedPath.substring('workflow.'.length)\n        switch (workflowKey) {\n          case 'instanceId':\n            return workflowInstance.id\n          case 'tenantId':\n            return workflowInstance.tenantId\n          case 'organizationId':\n            return workflowInstance.organizationId\n          case 'currentStepId':\n            return workflowInstance.currentStepId\n          case 'workflowId':\n            return workflowInstance.workflowId\n          case 'version':\n            return String(workflowInstance.version)\n          default:\n            return match // Unknown workflow key\n        }\n      }\n\n      // Handle {{env.*}} variables\n      if (trimmedPath.startsWith('env.')) {\n        const envKey = trimmedPath.substring('env.'.length)\n        return resolveWorkflowEnvInterpolation(envKey)\n      }\n\n      // Handle {{now}} - current timestamp\n      if (trimmedPath === 'now') {\n        return new Date().toISOString()\n      }\n\n      // Handle {{context.*}} variables (default behavior)\n      const contextPath = trimmedPath.startsWith('context.')\n        ? trimmedPath.substring('context.'.length)\n        : trimmedPath\n\n      const value = getNestedValue(context, contextPath)\n      return value !== undefined ? String(value) : match\n    })\n  }\n\n  if (Array.isArray(config)) {\n    return config.map((item) => interpolateVariables(item, context, workflowInstance))\n  }\n\n  if (config && typeof config === 'object') {\n    const result: Record<string, any> = {}\n    for (const [key, value] of Object.entries(config)) {\n      result[key] = interpolateVariables(value, context, workflowInstance)\n    }\n    return result\n  }\n\n  return config\n}\n\n/**\n * Get nested value from object by path (e.g., \"user.email\")\n */\nfunction getNestedValue(obj: any, path: string): any {\n  const parts = path.split('.')\n  let value = obj\n\n  for (const part of parts) {\n    if (value && typeof value === 'object' && part in value) {\n      value = value[part]\n    } else {\n      return undefined\n    }\n  }\n\n  return value\n}\n\n/**\n * Calculate exponential backoff delay\n */\nfunction calculateBackoff(\n  initialIntervalMs: number,\n  backoffCoefficient: number,\n  attempt: number,\n  maxIntervalMs: number\n): number {\n  const backoff = initialIntervalMs * Math.pow(backoffCoefficient, attempt)\n  return Math.min(backoff, maxIntervalMs || Infinity)\n}\n\n/**\n * Sleep for specified milliseconds\n */\nfunction sleep(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms))\n}\n\n/**\n * Execute a promise with timeout\n */\nasync function executeWithTimeout<T>(\n  executor: (signal: AbortSignal) => Promise<T>,\n  timeoutMs: number\n): Promise<T> {\n  let timeoutId: NodeJS.Timeout\n  const abortController = new AbortController()\n\n  const timeoutPromise = new Promise<never>((_, reject) => {\n    timeoutId = setTimeout(() => {\n      abortController.abort()\n      reject(new Error(`Activity execution timeout after ${timeoutMs}ms`))\n    }, timeoutMs)\n  })\n\n  try {\n    return await Promise.race([executor(abortController.signal), timeoutPromise])\n  } finally {\n    clearTimeout(timeoutId!)\n  }\n}\n"],
-  "mappings": "AAgBA,SAAS,yBAAgC;AAEzC;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,SAAS,+BAA+B;AACxC,SAAS,+BAA+B;AACxC,SAA8B,sCAAsC;AACpE,SAAS,wBAAwB;AACjC,SAAS,qBAAqB;AAC9B,SAAS,8BAA8B;AAEvC,SAAS,oBAAoB;AAC7B,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEvC,SAAS,2CAAoD;AAC3D,MAAI,wBAAwB,QAAQ,IAAI,iCAAiC,KAAK,GAAG;AAC/E,QAAI,QAAQ,IAAI,aAAa,cAAc;AACzC,aAAO,KAAK,sGAAsG,EAAE,WAAW,eAAe,CAAC;AAC/I,aAAO;AAAA,IACT;AAEA,WAAO,KAAK,2HAA2H,EAAE,WAAW,eAAe,CAAC;AACpK,WAAO;AAAA,EACT;AAEA,MAAI,wBAAwB,QAAQ,IAAI,qCAAqC,KAAK,GAAG;AACnF,QAAI,QAAQ,IAAI,aAAa,cAAc;AACzC,aAAO,KAAK,2KAA2K,EAAE,WAAW,eAAe,CAAC;AACpN,aAAO;AAAA,IACT;AAEA,WAAO,KAAK,gIAAgI,EAAE,WAAW,eAAe,CAAC;AACzK,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AAEA,MAAM,+CAA+C,oBAAI,IAAI,CAAC,SAAS,CAAC;AACxE,MAAM,2CAA2C;AAEjD,SAAS,uCAAoD;AAC3D,QAAM,YAAY,IAAI,IAAI,4CAA4C;AACtE,QAAM,iBAAiB,QAAQ,IAAI,wCAAwC;AAC3E,MAAI,CAAC,gBAAgB;AACnB,WAAO;AAAA,EACT;AAEA,aAAW,OAAO,eAAe,MAAM,GAAG,GAAG;AAC3C,UAAM,aAAa,IAAI,KAAK;AAC5B,QAAI,YAAY;AACd,gBAAU,IAAI,UAAU;AAAA,IAC1B;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,gCAAgC,QAAwB;AAC/D,MAAI,CAAC,qCAAqC,EAAE,IAAI,MAAM,GAAG;AACvD,WAAO;AAAA,EACT;AAEA,SAAO,QAAQ,IAAI,MAAM,KAAK;AAChC;AAyCO,SAAS,yBAAyB,UAGlB;AACrB,MAAI,OAAO,SAAS,cAAc,YAAY,SAAS,YAAY,GAAG;AACpE,WAAO,SAAS;AAAA,EAClB;AACA,MAAI,OAAO,SAAS,YAAY,YAAY,SAAS,QAAQ,KAAK,EAAE,SAAS,GAAG;AAC9E,QAAI;AACF,YAAM,SAAS,cAAc,SAAS,QAAQ,KAAK,CAAC;AACpD,UAAI,OAAO,SAAS,MAAM,KAAK,SAAS,EAAG,QAAO;AAAA,IACpD,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AA6BA,eAAe,2BACb,WACA,QACA,UACA,UACA,gBACkB;AAClB,MAAI;AACF,UAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,QAAI,MAAM,oBAAoB;AAC5B,aAAO,MAAM,KAAK,mBAAmB,QAAQ,CAAC,GAAG,QAAQ,GAAG,EAAE,UAAU,eAAe,CAAC;AAAA,IAC1F;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO;AACT;AAeO,MAAM,+BAA+B,MAAM;AAAA,EAChD,YACE,SACO,cACA,cACA,SACP;AACA,UAAM,OAAO;AAJN;AACA;AACA;AAGP,SAAK,OAAO;AAAA,EACd;AACF;AAMA,IAAI,gBAAmD;AAKvD,SAAS,mBAA+C;AACtD,MAAI,CAAC,eAAe;AAClB,oBAAgB;AAAA,MACd;AAAA,MACA,EAAE,aAAa,SAAS,QAAQ,IAAI,+BAA+B,GAAG,EAAE;AAAA,IAC1E;AAAA,EACF;AAEA,SAAO;AACT;AAUA,eAAsB,gBACpB,IACA,UACA,SACiB;AACjB,QAAM,EAAE,kBAAkB,iBAAiB,aAAa,cAAc,gBAAgB,iBAAiB,IACrG;AAGF,QAAM,qBAAqB,qBAAqB,SAAS,QAAQ,iBAAiB,gBAAgB;AAGlG,QAAM,MAA2B;AAAA,IAC/B,oBAAoB,iBAAiB;AAAA,IACrC;AAAA,IACA,kBAAkB,oBAAoB;AAAA,IACtC;AAAA,IACA,YAAY,SAAS;AAAA,IACrB,cAAc,SAAS,gBAAgB,SAAS;AAAA,IAChD,cAAc,SAAS;AAAA,IACvB,gBAAgB;AAAA,IAChB;AAAA,IACA;AAAA,IACA,aAAa,SAAS;AAAA,IACtB,WAAW,SAAS;AAAA,IACpB,UAAU,iBAAiB;AAAA,IAC3B,gBAAgB,iBAAiB;AAAA,IACjC,QAAQ,QAAQ;AAAA,EAClB;AAGA,QAAM,QAAQ,iBAAiB;AAC/B,QAAM,iBAAiB,SAAS,iBAAiB,WAAW,mBAAmB,YAAY,mBAAmB,SAC1G,EAAE,SAAS,qBAAqB,kBAAkB,EAAE,IACpD;AACJ,QAAM,QAAQ,MAAM,MAAM,QAAQ,KAAK,cAAc;AAGrD,QAAM,iBAAiB,IAAI;AAAA,IACzB,oBAAoB,iBAAiB;AAAA,IACrC;AAAA,IACA,WAAW;AAAA,IACX,WAAW;AAAA,MACT,YAAY,SAAS;AAAA,MACrB,cAAc,SAAS;AAAA,MACvB,cAAc,SAAS;AAAA,MACvB,OAAO;AAAA,MACP;AAAA,IACF;AAAA,IACA,UAAU,iBAAiB;AAAA,IAC3B,gBAAgB,iBAAiB;AAAA,EACnC,CAAC;AAED,SAAO;AACT;AAQA,eAAsB,gBAAgB,QASlB;AAClB,QAAM,EAAE,oBAAoB,gBAAgB,kBAAkB,UAAU,gBAAgB,QAAQ,QAAQ,QAAQ,IAC9G;AAEF,QAAM,QAAQ,iBAAiB;AAC/B,QAAM,QAAQ,MAAM,MAAM;AAAA,IACxB;AAAA,MACE,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,kBAAkB,oBAAoB;AAAA,MACtC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,EAAE,SAAS,UAAU,IAAI,UAAU,OAAU;AAAA,EAC/C;AAEA,SAAO;AACT;AAeA,eAAsB,gBACpB,IACA,WACA,UACA,SACkC;AAClC,QAAM,cAAc,SAAS,eAAe;AAAA,IAC1C,aAAa;AAAA,IACb,mBAAmB;AAAA,IACnB,oBAAoB;AAAA,IACpB,eAAe;AAAA,EACjB;AAEA,MAAI;AACJ,MAAI,aAAa;AAEjB,WAAS,UAAU,GAAG,UAAU,YAAY,aAAa,WAAW;AAClE,QAAI;AACF,YAAM,YAAY,KAAK,IAAI;AAI3B,YAAM,YAAY,yBAAyB,QAAQ;AACnD,YAAM,SAAS,YACX,MAAM;AAAA,QACJ,CAAC,WAAW,sBAAsB,IAAI,WAAW,UAAU,SAAS,MAAM;AAAA,QAC1E;AAAA,MACF,IACA,MAAM,sBAAsB,IAAI,WAAW,UAAU,OAAO;AAEhE,YAAM,kBAAkB,KAAK,IAAI,IAAI;AAErC,aAAO;AAAA,QACL,YAAY,SAAS;AAAA,QACrB,cAAc,SAAS;AAAA,QACvB,cAAc,SAAS;AAAA,QACvB,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,YAAY;AAAA,QACZ;AAAA,QACA,OAAO,SAAS,SAAS;AAAA,MAC3B;AAAA,IACF,SAAS,OAAO;AACd,kBAAY;AACZ,mBAAa,UAAU;AAGvB,UAAI,UAAU,YAAY,cAAc,GAAG;AACzC,eAAO,MAAM,+BAA+B;AAAA,UAC1C,YAAY,SAAS;AAAA,UACrB,cAAc,SAAS;AAAA,UACvB,SAAS,UAAU;AAAA,UACnB,aAAa,YAAY;AAAA,UACzB,YAAY,QAAQ,iBAAiB;AAAA,UACrC,KAAK;AAAA,QACP,CAAC;AAAA,MACH;AAGA,UAAI,UAAU,YAAY,cAAc,GAAG;AACzC,cAAM,UAAU;AAAA,UACd,YAAY;AAAA,UACZ,YAAY;AAAA,UACZ;AAAA,UACA,YAAY;AAAA,QACd;AAEA,cAAM,MAAM,OAAO;AAAA,MACrB;AAAA,IACF;AAAA,EACF;AAGA,QAAM,eAAe,qBAAqB,QAAQ,UAAU,UAAU,OAAO,SAAS;AACtF,SAAO,MAAM,sCAAsC;AAAA,IACjD,YAAY,SAAS;AAAA,IACrB,cAAc,SAAS;AAAA,IACvB,UAAU;AAAA,IACV,YAAY,QAAQ,iBAAiB;AAAA,IACrC,KAAK;AAAA,EACP,CAAC;AAED,SAAO;AAAA,IACL,YAAY,SAAS;AAAA,IACrB,cAAc,SAAS;AAAA,IACvB,cAAc,SAAS;AAAA,IACvB,SAAS;AAAA,IACT,OAAO,yBAAyB,UAAU,cAAc,YAAY;AAAA,IACpE;AAAA,IACA,iBAAiB;AAAA,IACjB,OAAO,SAAS,SAAS;AAAA,EAC3B;AACF;AAYA,eAAsB,kBACpB,IACA,WACA,YACA,SACoC;AACpC,QAAM,UAAqC,CAAC;AAE5C,WAAS,IAAI,GAAG,IAAI,WAAW,QAAQ,KAAK;AAC1C,UAAM,WAAW,WAAW,CAAC;AAG7B,QAAI,SAAS,OAAO;AAElB,YAAM,QAAQ,MAAM,gBAAgB,IAAI,UAAU,OAAO;AAEzD,cAAQ,KAAK;AAAA,QACX,YAAY,SAAS;AAAA,QACrB,cAAc,SAAS;AAAA,QACvB,cAAc,SAAS;AAAA,QACvB,SAAS;AAAA;AAAA,QACT,OAAO;AAAA,QACP;AAAA,QACA,YAAY;AAAA,QACZ,iBAAiB;AAAA,MACnB,CAAC;AAAA,IACH,OAAO;AAEL,YAAM,SAAS,MAAM,gBAAgB,IAAI,WAAW,UAAU,OAAO;AACrE,cAAQ,KAAK,MAAM;AAGnB,UAAI,CAAC,OAAO,SAAS;AACnB;AAAA,MACF;AAGA,UAAI,OAAO,UAAU,OAAO,OAAO,WAAW,UAAU;AACtD,cAAM,MAAM,SAAS,gBAAgB,SAAS;AAC9C,gBAAQ,kBAAkB;AAAA,UACxB,GAAG,QAAQ;AAAA,UACX,CAAC,GAAG,GAAG,OAAO;AAAA,QAChB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AASA,eAAe,sBACb,IACA,WACA,UACA,SACA,QACc;AAEd,QAAM,qBAAqB,qBAAqB,SAAS,QAAQ,QAAQ,iBAAiB,QAAQ,gBAAgB;AAElH,UAAQ,SAAS,cAAc;AAAA,IAC7B,KAAK;AACH,aAAO,MAAM,iBAAiB,oBAAoB,SAAS,SAAS;AAAA,IAEtE,KAAK;AACH,aAAO,MAAM,eAAe,IAAI,oBAAoB,SAAS,WAAW,MAAM;AAAA,IAEhF,KAAK;AACH,aAAO,MAAM,iBAAiB,oBAAoB,SAAS,SAAS;AAAA,IAEtE,KAAK;AACH,aAAO,MAAM,oBAAoB,IAAI,oBAAoB,SAAS,SAAS;AAAA,IAE7E,KAAK;AACH,aAAO,MAAM,mBAAmB,oBAAoB,SAAS,EAAE,OAAO,CAAC;AAAA,IAEzE,KAAK;AACH,aAAO,MAAM,gBAAgB,oBAAoB,SAAS,SAAS;AAAA,IAErE,KAAK;AACH,aAAO,MAAM,YAAY,kBAAkB;AAAA,IAE7C;AACE,YAAM,IAAI;AAAA,QACR,0BAA0B,SAAS,YAAY;AAAA,QAC/C,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,EACJ;AACF;AAOA,eAAsB,iBACpB,QACA,SACA,WACc;AACd,QAAM,EAAE,IAAI,SAAS,UAAU,cAAc,KAAK,IAAI;AAEtD,MAAI,CAAC,MAAM,CAAC,SAAS;AACnB,UAAM,IAAI,MAAM,+CAA+C;AAAA,EACjE;AAGA,SAAO,KAAK,+BAA+B,EAAE,WAAW,cAAc,QAAQ,CAAC;AAG/E,MAAI;AACF,UAAM,eAAe,UAAU,QAAkE,cAAc;AAC/G,QAAI,gBAAgB,OAAO,aAAa,SAAS,YAAY;AAC3D,YAAM,aAAa,KAAK;AAAA,QACtB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AACD,aAAO,EAAE,MAAM,MAAM,IAAI,SAAS,KAAK,eAAe;AAAA,IACxD;AAAA,EACF,SAAS,OAAO;AAAA,EAEhB;AAEA,SAAO,EAAE,MAAM,MAAM,IAAI,SAAS,KAAK,UAAU;AACnD;AAOA,eAAsB,iBACpB,QACA,SACA,WACc;AACd,QAAM,EAAE,WAAW,QAAQ,IAAI;AAE/B,MAAI,CAAC,WAAW;AACd,UAAM,IAAI,MAAM,uCAAuC;AAAA,EACzD;AAGA,QAAM,WAAW,UAAU,QAA2G,UAAU;AAEhJ,MAAI,CAAC,YAAY,OAAO,SAAS,cAAc,YAAY;AACzD,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AAGA,QAAM,kBAAkB;AAAA,IACtB,GAAG;AAAA,IACH,WAAW;AAAA,MACT,oBAAoB,QAAQ,iBAAiB;AAAA,MAC7C,YAAY,QAAQ,iBAAiB;AAAA,MACrC,UAAU,QAAQ,iBAAiB;AAAA,MACnC,gBAAgB,QAAQ,iBAAiB;AAAA,IAC3C;AAAA,EACF;AAEA,QAAM,SAAS,UAAU,WAAW,iBAAiB;AAAA,IACnD,UAAU,QAAQ,iBAAiB;AAAA,IACnC,gBAAgB,QAAQ,iBAAiB;AAAA,EAC3C,CAAC;AAED,SAAO,EAAE,SAAS,MAAM,WAAW,SAAS,gBAAgB;AAC9D;AA8BA,eAAsB,oBACpB,IACA,QACA,SACA,WACc;AACd,QAAM,EAAE,WAAW,OAAO,iBAAiB,IAAI;AAE/C,MAAI,CAAC,WAAW;AACd,UAAM,IAAI,MAAM,2EAA2E;AAAA,EAC7F;AAEA,QAAM,sBAAsB,uBAAuB,SAAS;AAC5D,MAAI,CAAC,qBAAqB;AACxB,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AAEA,MAAI,CAAC,SAAS,OAAO,UAAU,UAAU;AACvC,UAAM,IAAI,MAAM,wDAAwD;AAAA,EAC1E;AAEA,QAAM,cAAc,OAAO,QAAQ,WAAW,WAAW,QAAQ,OAAO,KAAK,IAAI;AACjF,MAAI,CAAC,aAAa;AAChB,UAAM,IAAI,MAAM,uDAAuD;AAAA,EACzE;AAEA,QAAM,aAAa,MAAM;AAAA,IACvB;AAAA,IACA;AAAA,IACA,oBAAoB;AAAA,IACpB,QAAQ,iBAAiB;AAAA,IACzB,QAAQ,iBAAiB;AAAA,EAC3B;AACA,MAAI,CAAC,YAAY;AACf,UAAM,IAAI,MAAM,yCAAyC;AAAA,EAC3D;AAGA,QAAM,aAAa,UAAU,QAAQ,YAAY;AAEjD,MAAI,CAAC,cAAc,OAAO,WAAW,YAAY,YAAY;AAC3D,UAAM,IAAI,MAAM,uCAAuC;AAAA,EACzD;AAGA,MAAI,aAAa,EAAE,GAAG,MAAM;AAG5B,MAAI,WAAW,eAAe,kBAAkB;AAC9C,UAAM,gBAAgB,MAAM;AAAA,MAC1B;AAAA,MACA;AAAA,MACA,WAAW;AAAA,MACX,QAAQ,iBAAiB;AAAA,MACzB,QAAQ,iBAAiB;AAAA,IAC3B;AACA,QAAI,eAAe;AACjB,iBAAW,gBAAgB;AAAA,IAC7B;AACA,WAAO,WAAW;AAAA,EACpB;AAGA,QAAM,MAAM;AAAA,IACV;AAAA,IACA,MAAM;AAAA,MACJ,KAAK;AAAA,MACL,UAAU,QAAQ,iBAAiB;AAAA,MACnC,OAAO,QAAQ,iBAAiB;AAAA,MAChC,cAAc;AAAA,IAChB;AAAA,IACA,mBAAmB;AAAA,IACnB,wBAAwB,QAAQ,iBAAiB;AAAA,IACjD,iBAAiB,QAAQ,iBAAiB,iBACtC,CAAC,QAAQ,iBAAiB,cAAc,IACxC;AAAA,EACN;AAGA,QAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW,QAAQ,WAAW;AAAA,IAC/D,OAAO;AAAA,IACP;AAAA,EACF,CAAC;AAED,SAAO;AAAA,IACL,UAAU;AAAA,IACV;AAAA,IACA;AAAA,IACA,YAAY,UAAU;AAAA,EACxB;AACF;AAKA,eAAe,yBACb,IACA,eACA,OACA,UACA,gBACwB;AACxB,MAAI;AAEF,UAAM,EAAE,YAAY,gBAAgB,IAAI,MAAM,OAAO,uDAAuD;AAG5G,UAAM,aAAa,MAAM,GAAG,QAAQ,YAAY;AAAA,MAC9C,KAAK;AAAA,MACL;AAAA,MACA;AAAA,MACA,WAAW;AAAA,IACb,CAAC;AAED,QAAI,CAAC,YAAY;AACf,aAAO,KAAK,wBAAwB,EAAE,WAAW,iBAAiB,cAAc,CAAC;AACjF,aAAO;AAAA,IACT;AAGA,UAAM,kBAAkB,MAAM,YAAY,EAAE,KAAK;AACjD,UAAM,QAAQ,MAAM,GAAG,QAAQ,iBAAiB;AAAA,MAC9C,YAAY,WAAW;AAAA,MACvB;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAED,QAAI,CAAC,OAAO;AACV,aAAO,KAAK,8BAA8B,EAAE,WAAW,iBAAiB,eAAe,MAAM,CAAC;AAC9F,aAAO;AAAA,IACT;AAEA,WAAO,MAAM;AAAA,EACf,SAAS,OAAO;AACd,WAAO,MAAM,oCAAoC,EAAE,WAAW,iBAAiB,KAAK,MAAM,CAAC;AAC3F,WAAO;AAAA,EACT;AACF;AAgBA,eAAsB,mBACpB,QACA,SACA,OAAwB,CAAC,GACX;AACd,QAAM,SAAS,wBAAwB,UAAU,MAAM;AACvD,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,SAAS,OAAO,MAAM,OACzB,IAAI,CAAC,UAAU,GAAG,MAAM,KAAK,KAAK,GAAG,KAAK,QAAQ,KAAK,MAAM,OAAO,EAAE,EACtE,KAAK,IAAI;AACZ,UAAM,IAAI,MAAM,gCAAgC,MAAM,EAAE;AAAA,EAC1D;AACA,QAAM,EAAE,KAAK,QAAQ,SAAS,YAAY,KAAK,IAAI,OAAO;AAC1D,QAAM,UAAU,cAAc,CAAC;AAE/B,QAAM,eAAe,KAAK,gBAAgB,yCAAyC;AAEnF,MAAI;AACJ,MAAI;AACF,eAAW,MAAM;AAAA,MACf;AAAA,MACA;AAAA,QACE;AAAA,QACA,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,GAAG;AAAA,QACL;AAAA,QACA,MAAM,SAAS,UAAa,SAAS,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,QACnE,UAAU;AAAA,QACV,QAAQ,KAAK;AAAA,MACf;AAAA,MACA;AAAA,QACE,SAAS;AAAA,QACT;AAAA,QACA,YAAY,KAAK;AAAA,QACjB,WAAW,KAAK;AAAA,MAClB;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,QAAI,iBAAiB,wBAAwB;AAC3C,YAAM,IAAI;AAAA,QACR,4CAA4C,MAAM,MAAM,MAAM,MAAM,OAAO;AAAA,MAC7E;AAAA,IACF;AACA,UAAM;AAAA,EACR;AAEA,MAAI,SAAS,UAAU,OAAO,SAAS,SAAS,KAAK;AACnD,UAAM,WAAW,SAAS,QAAQ,IAAI,UAAU;AAChD,UAAM,IAAI;AAAA,MACR,2CAA2C,SAAS,MAAM,OACxD,YAAY,sBACd;AAAA,IACF;AAAA,EACF;AAGA,MAAI;AACJ,QAAM,cAAc,SAAS,QAAQ,IAAI,cAAc;AAEvD,MAAI,eAAe,YAAY,SAAS,kBAAkB,GAAG;AAC3D,aAAS,MAAM,SAAS,KAAK;AAAA,EAC/B,OAAO;AACL,aAAS,MAAM,SAAS,KAAK;AAAA,EAC/B;AAGA,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,IAAI;AAAA,MACR,sCAAsC,SAAS,MAAM,KAAK,KAAK,UAAU,MAAM,CAAC;AAAA,IAClF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,QAAQ,SAAS;AAAA,IACjB,YAAY,SAAS;AAAA,IACrB;AAAA,EACF;AACF;AAOA,eAAsB,gBACpB,QACA,SACA,WACc;AACd,QAAM,EAAE,cAAc,OAAO,CAAC,EAAE,IAAI;AAEpC,MAAI,CAAC,cAAc;AACjB,UAAM,IAAI,MAAM,gDAAgD;AAAA,EAClE;AAGA,QAAM,QAAQ,oBAAoB,YAAY;AAE9C,MAAI;AACF,UAAM,KAAK,UAAU,QAAQ,KAAK;AAElC,QAAI,OAAO,OAAO,YAAY;AAC5B,YAAM,IAAI,MAAM,iCAAiC,YAAY,qBAAqB;AAAA,IACpF;AAGA,UAAM,SAAS,MAAM,GAAG,MAAM,OAAO;AAErC,WAAO,EAAE,UAAU,MAAM,cAAc,OAAO;AAAA,EAChD,SAAS,OAAO;AACd,QAAI,iBAAiB,SAAS,MAAM,QAAQ,SAAS,gBAAgB,GAAG;AACtE,YAAM,IAAI;AAAA,QACR,sBAAsB,YAAY,0CAA0C,KAAK;AAAA,MACnF;AAAA,IACF;AACA,UAAM;AAAA,EACR;AACF;AAMA,SAAS,qBAAqB,QAAuD;AACnF,MAAI,OAAO,OAAO;AAChB,UAAM,aAAa,IAAI,KAAK,OAAO,KAAK;AACxC,QAAI,MAAM,WAAW,QAAQ,CAAC,GAAG;AAC/B,YAAM,IAAI,MAAM,4CAA4C,OAAO,KAAK,EAAE;AAAA,IAC5E;AACA,UAAM,UAAU,WAAW,QAAQ,IAAI,KAAK,IAAI;AAChD,WAAO,KAAK,IAAI,GAAG,OAAO;AAAA,EAC5B;AAEA,MAAI,OAAO,UAAU;AACnB,WAAO,cAAc,OAAO,QAAQ;AAAA,EACtC;AAEA,QAAM,IAAI,MAAM,uFAAuF;AACzG;AAYA,eAAe,YAAY,QAA2B;AACpD,QAAM,aAAa,qBAAqB,MAAM;AAI9C,QAAM,MAAM,UAAU;AAEtB,SAAO,EAAE,QAAQ,MAAM,WAAW;AACpC;AAYA,eAAsB,eACpB,IACA,QACA,SACA,WACA,QACc;AAEd,QAAM,qBAAqB,qBAAqB,QAAQ,QAAQ,iBAAiB,QAAQ,gBAAgB;AAEzG,QAAM;AAAA,IACJ;AAAA,IACA,SAAS;AAAA,IACT,UAAU,CAAC;AAAA,IACX;AAAA,IACA,sBAAsB;AAAA,EACxB,IAAI;AAGJ,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,MAAM,oCAAoC;AAAA,EACtD;AAGA,QAAM,UAAU,YAAY,QAAQ;AAGpC,QAAM,EAAE,kBAAkB,IAAI,MAAM,OAAO,uCAAuC;AAqBlF,QAAM,WAAW,UACd,QAAiC,IAAI,EACrC,KAAK,EAAE,OAAO,MAAM,mBAAmB,MAAM,YAAY,MAAM,CAAC;AAsBnE,QAAM,kBAAkB,MAAM,sBAAsB,UAAU,QAAQ,gBAAgB;AAEtF,MAAI,gBAAgB,WAAW,GAAG;AAChC,UAAM,IAAI;AAAA,MACR,iEAAiE,QAAQ,iBAAiB,EAAE;AAAA,IAG9F;AAAA,EACF;AAGA,SAAO,MAAM;AAAA,IACX;AAAA,IACA;AAAA,MACE,MAAM,cAAc,QAAQ,iBAAiB,EAAE;AAAA,MAC/C,aAAa,6BAA6B,QAAQ,iBAAiB,UAAU,aAAa,QAAQ,iBAAiB,EAAE;AAAA,MACrH,UAAU,QAAQ,iBAAiB;AAAA,MACnC,gBAAgB,QAAQ,iBAAiB;AAAA,MACzC,OAAO;AAAA,MACP,WAAW;AAAA,IACb;AAAA,IACA,OAAO,iBAAiB;AAEtB,YAAM,iBAAyC;AAAA,QAC7C,gBAAgB;AAAA,QAChB,iBAAiB,UAAU,YAAY;AAAA,QACvC,eAAe,QAAQ,iBAAiB;AAAA,QACxC,qBAAqB,QAAQ,iBAAiB;AAAA,QAC9C,0BAA0B,QAAQ,iBAAiB;AAAA,QACnD,GAAG;AAAA,MACL;AAGA,YAAM,WAAW,MAAM,MAAM,SAAS;AAAA,QACpC;AAAA,QACA,SAAS;AAAA,QACT,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,QACpC;AAAA,MACF,CAAC;AAGD,UAAI;AACJ,YAAM,cAAc,SAAS,QAAQ,IAAI,cAAc;AAEvD,UAAI;AACF,YAAI,eAAe,YAAY,SAAS,kBAAkB,GAAG;AAC3D,yBAAe,MAAM,SAAS,KAAK;AAAA,QACrC,OAAO;AACL,yBAAe,MAAM,SAAS,KAAK;AAAA,QACrC;AAAA,MACF,SAAS,OAAO;AACd,uBAAe;AAAA,MACjB;AAGA,UAAI,CAAC,SAAS,IAAI;AAChB,8BAAsB,SAAS,QAAQ,cAAc,OAAO;AAAA,MAC9D;AAGA,UAAI,uBAAuB,gBAAgB,OAAO,iBAAiB,UAAU;AAC3E,YAAI,aAAa,YAAY,aAAa,aAAa,QAAQ,iBAAiB,UAAU;AACxF,gBAAM,IAAI;AAAA,YACR,wCAAwC,QAAQ,iBAAiB,QAAQ,qBAAqB,aAAa,QAAQ;AAAA,UACrH;AAAA,QACF;AAAA,MACF;AAGA,aAAO;AAAA,QACL,QAAQ,SAAS;AAAA,QACjB,YAAY,SAAS;AAAA,QACrB,SAAS,OAAO,YAAY,SAAS,QAAQ,QAAQ,CAAC;AAAA,QACtD,MAAM;AAAA,QACN,eAAe;AAAA,QACf,UAAU,QAAQ,iBAAiB;AAAA,QACnC,gBAAgB,QAAQ,iBAAiB;AAAA,MAC3C;AAAA,IACF;AAAA,EACF;AACF;AAcA,eAAe,4BACb,IACA,QACA,OACmB;AACnB,QAAM,EAAE,uBAAuB,mBAAmB,IAAI,MAAM,OAAO,0CAA0C;AAC7G,QAAM,EAAE,MAAM,UAAU,KAAK,IAAI,MAAM,OAAO,0BAA0B;AAExE,QAAM,OAAO,MAAM,sBAAsB,IAAI,MAAM;AAAA,IACjD,IAAI;AAAA,IACJ,UAAU,MAAM;AAAA,IAChB,WAAW;AAAA,EACb,GAAG,CAAC,GAAG,KAAK;AACZ,MAAI,CAAC,KAAM,QAAO,CAAC;AAEnB,QAAM,YAAY,MAAM;AAAA,IACtB;AAAA,IACA;AAAA,IACA,EAAE,MAAM,KAAK,IAAI,WAAW,KAAK;AAAA,IACjC,EAAE,UAAU,CAAC,MAAM,EAAE;AAAA,IACrB;AAAA,EACF;AACA,QAAM,UAAU,UACb,IAAI,CAAC,OAAa,OAAO,GAAG,SAAS,WAAW,GAAG,OAAO,GAAG,MAAM,EAAG,EACtE,OAAO,CAAC,OAA8B,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC;AAEhF,MAAI,QAAQ,WAAW,EAAG,QAAO,CAAC;AAElC,QAAM,cAAc,MAAM,mBAAmB,IAAI,MAAM;AAAA,IACrD,IAAI,EAAE,KAAK,QAAQ;AAAA,IACnB,UAAU,MAAM;AAAA,IAChB,WAAW;AAAA,EACb,GAAG,CAAC,GAAG,KAAK;AACZ,SAAO,YAAY,IAAI,CAAC,MAAW,EAAE,EAAY;AACnD;AAEA,eAAsB,sBACpB,IACA,UACmB;AACnB,MAAI,CAAC,SAAS,aAAc,QAAO,CAAC;AAEpC,QAAM,EAAE,sBAAsB,IAAI,MAAM,OAAO,0CAA0C;AACzF,QAAM,EAAE,mBAAmB,IAAI,MAAM,OAAO,kBAAkB;AAE9D,QAAM,QAAQ,EAAE,UAAU,SAAS,UAAU,gBAAgB,SAAS,eAAe;AAQrF,QAAM,kBAAkB,SAAS,UAAU,eAAe;AAC1D,MAAI,iBAAiB;AACnB,WAAO,4BAA4B,IAAI,iBAAiB,KAAK;AAAA,EAC/D;AAIA,QAAM,aAAa,MAAM,sBAAsB,IAAI,oBAAoB;AAAA,IACrE,IAAI,SAAS;AAAA,IACb,UAAU,SAAS;AAAA,IACnB,WAAW;AAAA,EACb,GAAG,CAAC,GAAG,KAAK;AACZ,QAAM,eAAe,YAAY;AACjC,MAAI,CAAC,aAAc,QAAO,CAAC;AAE3B,SAAO,4BAA4B,IAAI,cAAc,KAAK;AAC5D;AAOA,SAAS,YAAY,UAA0B;AAC7C,QAAM,SAAS,QAAQ,IAAI,WAAW;AAGtC,MAAI,SAAS,WAAW,GAAG,GAAG;AAE5B,QAAI,CAAC,SAAS,WAAW,OAAO,GAAG;AACjC,YAAM,IAAI,MAAM,6CAA6C,QAAQ,EAAE;AAAA,IACzE;AACA,WAAO,GAAG,MAAM,GAAG,QAAQ;AAAA,EAC7B;AAGA,MAAI;AACF,UAAM,cAAc,IAAI,IAAI,QAAQ;AACpC,UAAM,YAAY,IAAI,IAAI,MAAM;AAEhC,QAAI,YAAY,SAAS,UAAU,MAAM;AACvC,YAAM,IAAI;AAAA,QACR,8CAA8C,YAAY,IAAI,6BAA6B,UAAU,IAAI;AAAA,MAC3G;AAAA,IACF;AAEA,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QAAI,iBAAiB,WAAW;AAC9B,YAAM,IAAI,MAAM,yBAAyB,QAAQ,EAAE;AAAA,IACrD;AACA,UAAM;AAAA,EACR;AACF;AAOA,SAAS,sBAAsB,QAAgB,MAAW,KAAoB;AAC5E,QAAM,UAAU,OAAO,SAAS,WAAW,OAAO,KAAK,UAAU,IAAI;AAErE,MAAI,UAAU,OAAO,SAAS,KAAK;AAEjC,UAAM,IAAI;AAAA,MACR,uCAAuC,MAAM,qBAAqB,OAAO;AAAA,IAC3E;AAAA,EACF;AAEA,MAAI,UAAU,KAAK;AAEjB,UAAM,QAAa,IAAI;AAAA,MACrB,uCAAuC,MAAM,iBAAiB,OAAO;AAAA,IACvE;AACA,UAAM,YAAY;AAClB,UAAM;AAAA,EACR;AAGA,QAAM,IAAI,MAAM,uCAAuC,MAAM,KAAK,OAAO,EAAE;AAC7E;AAkBA,SAAS,qBACP,QACA,SACA,kBACK;AACL,MAAI,OAAO,WAAW,UAAU;AAG9B,UAAM,iBAAiB,OAAO,MAAM,mBAAmB;AAEvD,QAAI,gBAAgB;AAClB,YAAM,cAAc,eAAe,CAAC,EAAE,KAAK;AAG3C,UAAI,YAAY,WAAW,WAAW,KAAK,kBAAkB;AAC3D,cAAM,cAAc,YAAY,UAAU,YAAY,MAAM;AAC5D,gBAAQ,aAAa;AAAA,UACnB,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,iBAAiB;AAAA;AAAA,UAC1B;AACE,mBAAO;AAAA,QACX;AAAA,MACF;AAGA,UAAI,YAAY,WAAW,MAAM,GAAG;AAClC,cAAM,SAAS,YAAY,UAAU,OAAO,MAAM;AAClD,eAAO,gCAAgC,MAAM;AAAA,MAC/C;AAGA,UAAI,gBAAgB,OAAO;AACzB,gBAAO,oBAAI,KAAK,GAAE,YAAY;AAAA,MAChC;AAGA,YAAM,cAAc,YAAY,WAAW,UAAU,IACjD,YAAY,UAAU,WAAW,MAAM,IACvC;AAEJ,YAAM,QAAQ,eAAe,SAAS,WAAW;AACjD,aAAO,UAAU,SAAY,QAAQ;AAAA,IACvC;AAGA,WAAO,OAAO,QAAQ,oBAAoB,CAAC,OAAO,SAAS;AACzD,YAAM,cAAc,KAAK,KAAK;AAG9B,UAAI,YAAY,WAAW,WAAW,KAAK,kBAAkB;AAC3D,cAAM,cAAc,YAAY,UAAU,YAAY,MAAM;AAC5D,gBAAQ,aAAa;AAAA,UACnB,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,OAAO,iBAAiB,OAAO;AAAA,UACxC;AACE,mBAAO;AAAA,QACX;AAAA,MACF;AAGA,UAAI,YAAY,WAAW,MAAM,GAAG;AAClC,cAAM,SAAS,YAAY,UAAU,OAAO,MAAM;AAClD,eAAO,gCAAgC,MAAM;AAAA,MAC/C;AAGA,UAAI,gBAAgB,OAAO;AACzB,gBAAO,oBAAI,KAAK,GAAE,YAAY;AAAA,MAChC;AAGA,YAAM,cAAc,YAAY,WAAW,UAAU,IACjD,YAAY,UAAU,WAAW,MAAM,IACvC;AAEJ,YAAM,QAAQ,eAAe,SAAS,WAAW;AACjD,aAAO,UAAU,SAAY,OAAO,KAAK,IAAI;AAAA,IAC/C,CAAC;AAAA,EACH;AAEA,MAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,WAAO,OAAO,IAAI,CAAC,SAAS,qBAAqB,MAAM,SAAS,gBAAgB,CAAC;AAAA,EACnF;AAEA,MAAI,UAAU,OAAO,WAAW,UAAU;AACxC,UAAM,SAA8B,CAAC;AACrC,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,aAAO,GAAG,IAAI,qBAAqB,OAAO,SAAS,gBAAgB;AAAA,IACrE;AACA,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AAKA,SAAS,eAAe,KAAU,MAAmB;AACnD,QAAM,QAAQ,KAAK,MAAM,GAAG;AAC5B,MAAI,QAAQ;AAEZ,aAAW,QAAQ,OAAO;AACxB,QAAI,SAAS,OAAO,UAAU,YAAY,QAAQ,OAAO;AACvD,cAAQ,MAAM,IAAI;AAAA,IACpB,OAAO;AACL,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO;AACT;AAKA,SAAS,iBACP,mBACA,oBACA,SACA,eACQ;AACR,QAAM,UAAU,oBAAoB,KAAK,IAAI,oBAAoB,OAAO;AACxE,SAAO,KAAK,IAAI,SAAS,iBAAiB,QAAQ;AACpD;AAKA,SAAS,MAAM,IAA2B;AACxC,SAAO,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,EAAE,CAAC;AACzD;AAKA,eAAe,mBACb,UACA,WACY;AACZ,MAAI;AACJ,QAAM,kBAAkB,IAAI,gBAAgB;AAE5C,QAAM,iBAAiB,IAAI,QAAe,CAAC,GAAG,WAAW;AACvD,gBAAY,WAAW,MAAM;AAC3B,sBAAgB,MAAM;AACtB,aAAO,IAAI,MAAM,oCAAoC,SAAS,IAAI,CAAC;AAAA,IACrE,GAAG,SAAS;AAAA,EACd,CAAC;AAED,MAAI;AACF,WAAO,MAAM,QAAQ,KAAK,CAAC,SAAS,gBAAgB,MAAM,GAAG,cAAc,CAAC;AAAA,EAC9E,UAAE;AACA,iBAAa,SAAU;AAAA,EACzB;AACF;",
+  "sourcesContent": ["/**\n * Workflows Module - Activity Executor Service\n *\n * Executes workflow activities (send email, call API, emit events, etc.)\n * - Supports multiple activity types\n * - Implements retry logic with exponential backoff\n * - Handles timeouts\n * - Variable interpolation from workflow context\n *\n * Functional API (no classes) following Open Mercato conventions.\n */\n\nimport { EntityManager } from '@mikro-orm/core'\nimport type { EntityManager as PostgreSqlEntityManager } from '@mikro-orm/postgresql'\nimport type { AwilixContainer } from 'awilix'\nimport { WorkflowInstance } from '../data/entities'\nimport { createModuleQueue, Queue } from '@open-mercato/queue'\nimport { getRedisUrl } from '@open-mercato/shared/lib/redis/connection'\nimport {\n  safeOutboundFetch,\n  UnsafeOutboundUrlError,\n  type HostLookup,\n} from '@open-mercato/shared/lib/url-safety'\nimport { parseBooleanWithDefault } from '@open-mercato/shared/lib/boolean'\nimport { callWebhookConfigSchema } from '../data/validators'\nimport { WorkflowActivityJob, WORKFLOW_ACTIVITIES_QUEUE_NAME } from './activity-queue-types'\nimport { logWorkflowEvent } from './event-logger'\nimport { parseDuration } from './duration'\nimport { getWorkflowSafeCommand } from './workflow-safe-commands'\n\nexport { isPrivateUrl } from '@open-mercato/shared/lib/network'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows')\n\nfunction isAllowPrivateWorkflowWebhookUrlsEnabled(): boolean {\n  if (parseBooleanWithDefault(process.env.OM_WORKFLOWS_ALLOW_PRIVATE_URLS, false)) {\n    if (process.env.NODE_ENV === 'production') {\n      logger.warn('OM_WORKFLOWS_ALLOW_PRIVATE_URLS is set but ignored in production. SSRF protection remains enabled.', { component: 'CALL_WEBHOOK' })\n      return false\n    }\n\n    logger.warn('OM_WORKFLOWS_ALLOW_PRIVATE_URLS is enabled. SSRF protection is bypassed for workflow webhooks; use only in development.', { component: 'CALL_WEBHOOK' })\n    return true\n  }\n\n  if (parseBooleanWithDefault(process.env.WORKFLOW_WEBHOOK_ALLOW_PRIVATE_URLS, false)) {\n    if (process.env.NODE_ENV === 'production') {\n      logger.warn('WORKFLOW_WEBHOOK_ALLOW_PRIVATE_URLS is deprecated and ignored in production. Use OM_WORKFLOWS_ALLOW_PRIVATE_URLS for development only. SSRF protection remains enabled.', { component: 'CALL_WEBHOOK' })\n      return false\n    }\n\n    logger.warn('WORKFLOW_WEBHOOK_ALLOW_PRIVATE_URLS is deprecated. Use OM_WORKFLOWS_ALLOW_PRIVATE_URLS instead. SSRF protection is bypassed.', { component: 'CALL_WEBHOOK' })\n    return true\n  }\n\n  return false\n}\n\nconst DEFAULT_WORKFLOW_ENV_INTERPOLATION_ALLOWLIST = new Set(['APP_URL'])\nconst WORKFLOW_ENV_INTERPOLATION_ALLOWLIST_KEY = 'OM_WORKFLOWS_ENV_INTERPOLATION_ALLOWLIST'\n\nfunction getWorkflowEnvInterpolationAllowlist(): Set<string> {\n  const allowlist = new Set(DEFAULT_WORKFLOW_ENV_INTERPOLATION_ALLOWLIST)\n  const configuredKeys = process.env[WORKFLOW_ENV_INTERPOLATION_ALLOWLIST_KEY]\n  if (!configuredKeys) {\n    return allowlist\n  }\n\n  for (const key of configuredKeys.split(',')) {\n    const trimmedKey = key.trim()\n    if (trimmedKey) {\n      allowlist.add(trimmedKey)\n    }\n  }\n\n  return allowlist\n}\n\nfunction resolveWorkflowEnvInterpolation(envKey: string): string {\n  if (!getWorkflowEnvInterpolationAllowlist().has(envKey)) {\n    return ''\n  }\n\n  return process.env[envKey] ?? ''\n}\n\n// ============================================================================\n// Types and Interfaces\n// ============================================================================\n\nexport type ActivityType =\n  | 'SEND_EMAIL'\n  | 'CALL_API'\n  | 'EMIT_EVENT'\n  | 'UPDATE_ENTITY'\n  | 'CALL_WEBHOOK'\n  | 'EXECUTE_FUNCTION'\n  | 'WAIT'\n\nexport interface ActivityDefinition {\n  activityId: string // Unique identifier for activity\n  activityName?: string // Optional, for debugging/logging\n  activityType: ActivityType\n  config: any\n  async?: boolean // Flag to execute activity asynchronously via queue\n  retryPolicy?: RetryPolicy\n  timeoutMs?: number\n  /**\n   * @deprecated Use `timeoutMs`. Legacy ISO 8601 duration string accepted by\n   * the definition schema before #4424; normalized by `resolveActivityTimeoutMs`.\n   */\n  timeout?: string\n  compensate?: boolean // Flag to execute compensation on failure\n}\n\n/**\n * Effective timeout for an activity, in milliseconds.\n *\n * The editor and this executor both speak `timeoutMs`, but the definition\n * schema historically accepted only an ISO 8601 `timeout` string \u2014 so stored\n * definitions can carry either. Prefer `timeoutMs`; fall back to parsing\n * `timeout`, ignoring a malformed value rather than throwing mid-execution\n * (an unparseable timeout must not fail an activity that would otherwise\n * succeed). Returns undefined when no usable timeout is configured (#4424).\n */\nexport function resolveActivityTimeoutMs(activity: {\n  timeoutMs?: number\n  timeout?: string\n}): number | undefined {\n  if (typeof activity.timeoutMs === 'number' && activity.timeoutMs > 0) {\n    return activity.timeoutMs\n  }\n  if (typeof activity.timeout === 'string' && activity.timeout.trim().length > 0) {\n    try {\n      const parsed = parseDuration(activity.timeout.trim())\n      if (Number.isFinite(parsed) && parsed > 0) return parsed\n    } catch {\n      return undefined\n    }\n  }\n  return undefined\n}\n\nexport interface RetryPolicy {\n  maxAttempts: number\n  initialIntervalMs: number\n  backoffCoefficient: number\n  maxIntervalMs: number\n}\n\nexport interface ActivityContext {\n  workflowInstance: WorkflowInstance\n  workflowContext: Record<string, any>\n  stepContext?: Record<string, any>\n  stepInstanceId?: string\n  // Set when the activity runs inside a parallel branch; carried on the queue\n  // payload so async resume targets the branch rather than the instance.\n  branchInstanceId?: string | null\n  transitionId?: string\n  userId?: string\n}\n\ntype RbacFeatureResolver = {\n  userHasAllFeatures: (\n    userId: string,\n    required: string[],\n    opts: { tenantId: string | null; organizationId: string | null }\n  ) => Promise<boolean>\n}\n\nasync function workflowUserHasAllFeatures(\n  container: AwilixContainer,\n  userId: string,\n  required: readonly string[],\n  tenantId: string | null,\n  organizationId: string | null\n): Promise<boolean> {\n  try {\n    const rbac = container.resolve('rbacService') as RbacFeatureResolver | undefined\n    if (rbac?.userHasAllFeatures) {\n      return await rbac.userHasAllFeatures(userId, [...required], { tenantId, organizationId })\n    }\n  } catch {\n    // Fail closed below when the workflow executor cannot prove the actor's grants.\n  }\n  return false\n}\n\nexport interface ActivityExecutionResult {\n  activityId: string\n  activityName?: string\n  activityType: ActivityType\n  success: boolean\n  output?: any\n  error?: string\n  retryCount: number\n  executionTimeMs: number\n  async?: boolean // Marks activity as async (queued)\n  jobId?: string // Queue job ID for async activities\n}\n\nexport class ActivityExecutionError extends Error {\n  constructor(\n    message: string,\n    public activityType: ActivityType,\n    public activityName?: string,\n    public details?: any\n  ) {\n    super(message)\n    this.name = 'ActivityExecutionError'\n  }\n}\n\n// ============================================================================\n// Queue Integration for Async Activities\n// ============================================================================\n\nlet activityQueue: Queue<WorkflowActivityJob> | null = null\n\n/**\n * Get or create the activity queue (lazy initialization)\n */\nfunction getActivityQueue(): Queue<WorkflowActivityJob> {\n  if (!activityQueue) {\n    activityQueue = createModuleQueue<WorkflowActivityJob>(\n      WORKFLOW_ACTIVITIES_QUEUE_NAME,\n      { concurrency: parseInt(process.env.WORKFLOW_WORKER_CONCURRENCY || '5') },\n    )\n  }\n\n  return activityQueue\n}\n\n/**\n * Enqueue an activity for background execution\n *\n * @param em - Entity manager\n * @param activity - Activity definition\n * @param context - Execution context\n * @returns Job ID\n */\nexport async function enqueueActivity(\n  em: EntityManager,\n  activity: ActivityDefinition,\n  context: ActivityContext\n): Promise<string> {\n  const { workflowInstance, workflowContext, stepContext, transitionId, stepInstanceId, branchInstanceId } =\n    context\n\n  // Interpolate config variables NOW (before queuing)\n  const interpolatedConfig = interpolateVariables(activity.config, workflowContext, workflowInstance)\n\n  // Create job payload\n  const job: WorkflowActivityJob = {\n    workflowInstanceId: workflowInstance.id,\n    stepInstanceId,\n    branchInstanceId: branchInstanceId ?? undefined,\n    transitionId,\n    activityId: activity.activityId,\n    activityName: activity.activityName || activity.activityType,\n    activityType: activity.activityType,\n    activityConfig: interpolatedConfig,\n    workflowContext,\n    stepContext,\n    retryPolicy: activity.retryPolicy,\n    timeoutMs: activity.timeoutMs,\n    tenantId: workflowInstance.tenantId,\n    organizationId: workflowInstance.organizationId,\n    userId: context.userId,\n  }\n\n  // Enqueue to queue (WAIT activities use delayMs for the actual delay)\n  const queue = getActivityQueue()\n  const enqueueOptions = activity.activityType === 'WAIT' && (interpolatedConfig.duration || interpolatedConfig.until)\n    ? { delayMs: calculateWaitDelayMs(interpolatedConfig) }\n    : undefined\n  const jobId = await queue.enqueue(job, enqueueOptions)\n\n  // Log event\n  await logWorkflowEvent(em, {\n    workflowInstanceId: workflowInstance.id,\n    stepInstanceId,\n    eventType: 'ACTIVITY_QUEUED',\n    eventData: {\n      activityId: activity.activityId,\n      activityName: activity.activityName,\n      activityType: activity.activityType,\n      async: true,\n      jobId,\n    },\n    tenantId: workflowInstance.tenantId,\n    organizationId: workflowInstance.organizationId,\n  })\n\n  return jobId\n}\n\n/**\n * Enqueue a delayed timer job for a WAIT_FOR_TIMER step.\n *\n * The activity worker handles `kind: 'timer'` jobs by calling\n * `timerHandler.fireTimer`, which resumes the paused workflow instance.\n */\nexport async function enqueueTimerJob(params: {\n  workflowInstanceId: string\n  stepInstanceId: string\n  branchInstanceId?: string | null\n  tenantId: string\n  organizationId: string\n  userId?: string\n  fireAt: string\n  delayMs: number\n}): Promise<string> {\n  const { workflowInstanceId, stepInstanceId, branchInstanceId, tenantId, organizationId, userId, fireAt, delayMs } =\n    params\n\n  const queue = getActivityQueue()\n  const jobId = await queue.enqueue(\n    {\n      kind: 'timer',\n      workflowInstanceId,\n      stepInstanceId,\n      branchInstanceId: branchInstanceId ?? undefined,\n      tenantId,\n      organizationId,\n      userId,\n      fireAt,\n    },\n    { delayMs: delayMs > 0 ? delayMs : undefined }\n  )\n\n  return jobId\n}\n\n// ============================================================================\n// Main Activity Execution Functions\n// ============================================================================\n\n/**\n * Execute a single activity with retry logic and timeout\n *\n * @param em - Entity manager\n * @param container - DI container\n * @param activity - Activity definition\n * @param context - Execution context\n * @returns Execution result\n */\nexport async function executeActivity(\n  em: EntityManager,\n  container: AwilixContainer,\n  activity: ActivityDefinition,\n  context: ActivityContext\n): Promise<ActivityExecutionResult> {\n  const retryPolicy = activity.retryPolicy || {\n    maxAttempts: 1,\n    initialIntervalMs: 0,\n    backoffCoefficient: 1,\n    maxIntervalMs: 0,\n  }\n\n  let lastError: any\n  let retryCount = 0\n\n  for (let attempt = 0; attempt < retryPolicy.maxAttempts; attempt++) {\n    try {\n      const startTime = Date.now()\n\n      // Execute with timeout if specified (timeoutMs, or a legacy ISO 8601\n      // `timeout` string normalized to ms \u2014 see resolveActivityTimeoutMs).\n      const timeoutMs = resolveActivityTimeoutMs(activity)\n      const result = timeoutMs\n        ? await executeWithTimeout(\n            (signal) => executeActivityByType(em, container, activity, context, signal),\n            timeoutMs\n          )\n        : await executeActivityByType(em, container, activity, context)\n\n      const executionTimeMs = Date.now() - startTime\n\n      return {\n        activityId: activity.activityId,\n        activityName: activity.activityName,\n        activityType: activity.activityType,\n        success: true,\n        output: result,\n        retryCount: attempt,\n        executionTimeMs,\n        async: activity.async || false,\n      }\n    } catch (error) {\n      lastError = error\n      retryCount = attempt + 1\n\n      // Log activity retry attempt with context\n      if (attempt < retryPolicy.maxAttempts - 1) {\n        logger.error('Activity failed; will retry', {\n          activityId: activity.activityId,\n          activityType: activity.activityType,\n          attempt: attempt + 1,\n          maxAttempts: retryPolicy.maxAttempts,\n          instanceId: context.workflowInstance.id,\n          err: error,\n        })\n      }\n\n      // If not the last attempt, apply backoff and retry\n      if (attempt < retryPolicy.maxAttempts - 1) {\n        const backoff = calculateBackoff(\n          retryPolicy.initialIntervalMs,\n          retryPolicy.backoffCoefficient,\n          attempt,\n          retryPolicy.maxIntervalMs\n        )\n\n        await sleep(backoff)\n      }\n    }\n  }\n\n  // All retries exhausted\n  const errorMessage = lastError instanceof Error ? lastError.message : String(lastError)\n  logger.error('Activity failed after all attempts', {\n    activityId: activity.activityId,\n    activityType: activity.activityType,\n    attempts: retryCount,\n    instanceId: context.workflowInstance.id,\n    err: lastError,\n  })\n\n  return {\n    activityId: activity.activityId,\n    activityName: activity.activityName,\n    activityType: activity.activityType,\n    success: false,\n    error: `Activity failed after ${retryCount} attempts: ${errorMessage}`,\n    retryCount,\n    executionTimeMs: 0,\n    async: activity.async || false,\n  }\n}\n\n/**\n * Execute multiple activities in sequence\n * Supports both synchronous and asynchronous (queued) execution\n *\n * @param em - Entity manager\n * @param container - DI container\n * @param activities - Array of activity definitions\n * @param context - Execution context\n * @returns Array of execution results\n */\nexport async function executeActivities(\n  em: EntityManager,\n  container: AwilixContainer,\n  activities: ActivityDefinition[],\n  context: ActivityContext\n): Promise<ActivityExecutionResult[]> {\n  const results: ActivityExecutionResult[] = []\n\n  for (let i = 0; i < activities.length; i++) {\n    const activity = activities[i]\n\n    // Check if activity should run async\n    if (activity.async) {\n      // Enqueue for background execution\n      const jobId = await enqueueActivity(em, activity, context)\n\n      results.push({\n        activityId: activity.activityId,\n        activityName: activity.activityName,\n        activityType: activity.activityType,\n        success: true, // Queued successfully\n        async: true,\n        jobId,\n        retryCount: 0,\n        executionTimeMs: 0,\n      })\n    } else {\n      // Execute synchronously (existing logic)\n      const result = await executeActivity(em, container, activity, context)\n      results.push(result)\n\n      // Stop execution if activity fails (fail-fast)\n      if (!result.success) {\n        break\n      }\n\n      // Update workflow context with activity output\n      if (result.output && typeof result.output === 'object') {\n        const key = activity.activityName || activity.activityType\n        context.workflowContext = {\n          ...context.workflowContext,\n          [key]: result.output,\n        }\n      }\n    }\n  }\n\n  return results\n}\n\n// ============================================================================\n// Activity Type Handlers\n// ============================================================================\n\n/**\n * Execute activity based on its type\n */\nasync function executeActivityByType(\n  em: EntityManager,\n  container: AwilixContainer,\n  activity: ActivityDefinition,\n  context: ActivityContext,\n  signal?: AbortSignal\n): Promise<any> {\n  // Interpolate config variables from context (including workflow metadata)\n  const interpolatedConfig = interpolateVariables(activity.config, context.workflowContext, context.workflowInstance)\n\n  switch (activity.activityType) {\n    case 'SEND_EMAIL':\n      return await executeSendEmail(interpolatedConfig, context, container)\n\n    case 'CALL_API':\n      return await executeCallApi(em, interpolatedConfig, context, container, signal)\n\n    case 'EMIT_EVENT':\n      return await executeEmitEvent(interpolatedConfig, context, container)\n\n    case 'UPDATE_ENTITY':\n      return await executeUpdateEntity(em, interpolatedConfig, context, container)\n\n    case 'CALL_WEBHOOK':\n      return await executeCallWebhook(interpolatedConfig, context, { signal })\n\n    case 'EXECUTE_FUNCTION':\n      return await executeFunction(interpolatedConfig, context, container)\n\n    case 'WAIT':\n      return await executeWait(interpolatedConfig)\n\n    default:\n      throw new ActivityExecutionError(\n        `Unknown activity type: ${activity.activityType}`,\n        activity.activityType,\n        activity.activityName\n      )\n  }\n}\n\n/**\n * SEND_EMAIL activity handler\n *\n * For MVP, this logs the email (actual email sending can be added later)\n */\nexport async function executeSendEmail(\n  config: any,\n  context: ActivityContext,\n  container: AwilixContainer\n): Promise<any> {\n  const { to, subject, template, templateData, body } = config\n\n  if (!to || !subject) {\n    throw new Error('SEND_EMAIL requires \"to\" and \"subject\" fields')\n  }\n\n  // For MVP: Log the email (actual email service integration can be added later)\n  logger.info('Send email activity invoked', { component: 'SEND_EMAIL', subject })\n\n  // Check if email service is available in container\n  try {\n    const emailService = container.resolve<{ send: (input: unknown) => Promise<unknown> | unknown }>('emailService')\n    if (emailService && typeof emailService.send === 'function') {\n      await emailService.send({\n        to,\n        subject,\n        template,\n        templateData,\n        body,\n      })\n      return { sent: true, to, subject, via: 'emailService' }\n    }\n  } catch (error) {\n    // Email service not available, just log\n  }\n\n  return { sent: true, to, subject, via: 'console' }\n}\n\n/**\n * EMIT_EVENT activity handler\n *\n * Publishes a domain event to the event bus\n */\nexport async function executeEmitEvent(\n  config: any,\n  context: ActivityContext,\n  container: AwilixContainer\n): Promise<any> {\n  const { eventName, payload } = config\n\n  if (!eventName) {\n    throw new Error('EMIT_EVENT requires \"eventName\" field')\n  }\n\n  // Emissions are fire-and-forget and no subscriber validates the payload shape,\n  // so an unresolved `{{context.x}}` here is even quieter than on the command\n  // path \u2014 it ships the literal template to every consumer. Fail loudly instead.\n  const unresolvedPayloadKeys = findUnresolvedTemplateKeys(payload)\n  if (unresolvedPayloadKeys.length > 0) {\n    throw new Error(\n      `EMIT_EVENT payload contains unresolved template variables for: ${unresolvedPayloadKeys.join(', ')}. ` +\n        `Check that the workflow context provides these keys.`\n    )\n  }\n\n  // Get event bus from container\n  const eventBus = container.resolve<{ emitEvent: (event: string, payload: unknown, options?: unknown) => Promise<unknown> | unknown }>('eventBus')\n\n  if (!eventBus || typeof eventBus.emitEvent !== 'function') {\n    throw new Error('Event bus not available in container')\n  }\n\n  // Publish event with workflow metadata\n  const enrichedPayload = {\n    ...payload,\n    _workflow: {\n      workflowInstanceId: context.workflowInstance.id,\n      workflowId: context.workflowInstance.workflowId,\n      tenantId: context.workflowInstance.tenantId,\n      organizationId: context.workflowInstance.organizationId,\n    },\n  }\n\n  await eventBus.emitEvent(eventName, enrichedPayload, {\n    tenantId: context.workflowInstance.tenantId,\n    organizationId: context.workflowInstance.organizationId,\n  })\n\n  return { emitted: true, eventName, payload: enrichedPayload }\n}\n\nconst UNRESOLVED_TEMPLATE_PATTERN = /\\{\\{[^}]+\\}\\}/\n\nfunction findUnresolvedTemplateKeys(value: unknown, path = ''): string[] {\n  if (typeof value === 'string') {\n    return UNRESOLVED_TEMPLATE_PATTERN.test(value) ? [path] : []\n  }\n  if (Array.isArray(value)) {\n    return value.flatMap((item, index) => findUnresolvedTemplateKeys(item, `${path}[${index}]`))\n  }\n  if (value && typeof value === 'object') {\n    return Object.entries(value).flatMap(([key, nested]) =>\n      findUnresolvedTemplateKeys(nested, path ? `${path}.${key}` : key)\n    )\n  }\n  return []\n}\n\n/**\n * UPDATE_ENTITY activity handler\n *\n * Updates an entity via CommandBus for proper audit logging, undo support, and side effects.\n *\n * Config format:\n * ```json\n * {\n *   \"commandId\": \"sales.documents.update\",\n *   \"input\": {\n *     \"id\": \"{{context.orderId}}\",\n *     \"statusEntryId\": \"{{context.approvedStatusId}}\"\n *   }\n * }\n * ```\n *\n * Alternative format with statusValue (auto-resolves to statusEntryId):\n * ```json\n * {\n *   \"commandId\": \"sales.orders.update\",\n *   \"statusDictionary\": \"sales.order_status\",\n *   \"input\": {\n *     \"id\": \"{{context.orderId}}\",\n *     \"statusValue\": \"pending_approval\"\n *   }\n * }\n * ```\n *\n * Every `{{...}}` reference in `input` must resolve against the workflow context \u2014\n * an unresolved reference is rejected rather than forwarded to the command bus.\n */\nexport async function executeUpdateEntity(\n  em: EntityManager,\n  config: any,\n  context: ActivityContext,\n  container: AwilixContainer\n): Promise<any> {\n  const { commandId, input, statusDictionary } = config\n\n  if (!commandId) {\n    throw new Error('UPDATE_ENTITY requires \"commandId\" field (e.g., \"sales.documents.update\")')\n  }\n\n  const workflowSafeCommand = getWorkflowSafeCommand(commandId)\n  if (!workflowSafeCommand) {\n    throw new Error('UPDATE_ENTITY command is not allowed')\n  }\n\n  if (!input || typeof input !== 'object') {\n    throw new Error('UPDATE_ENTITY requires \"input\" object with entity data')\n  }\n\n  const actorUserId = typeof context.userId === 'string' ? context.userId.trim() : ''\n  if (!actorUserId) {\n    throw new Error('UPDATE_ENTITY requires an authenticated workflow user')\n  }\n\n  const authorized = await workflowUserHasAllFeatures(\n    container,\n    actorUserId,\n    workflowSafeCommand.requiredFeatures,\n    context.workflowInstance.tenantId,\n    context.workflowInstance.organizationId\n  )\n  if (!authorized) {\n    throw new Error('UPDATE_ENTITY command is not authorized')\n  }\n\n  // Resolve CommandBus from container\n  const commandBus = container.resolve('commandBus') as any\n\n  if (!commandBus || typeof commandBus.execute !== 'function') {\n    throw new Error('CommandBus not available in container')\n  }\n\n  const unresolvedKeys = findUnresolvedTemplateKeys(input)\n  if (unresolvedKeys.length > 0) {\n    throw new Error(\n      `UPDATE_ENTITY input contains unresolved template variables for: ${unresolvedKeys.join(', ')}. ` +\n        `Check that the workflow context provides these keys.`\n    )\n  }\n\n  // Prepare final input, resolving statusValue if provided\n  let finalInput = { ...input }\n\n  // If statusValue is provided with a statusDictionary, resolve it to statusEntryId\n  if (finalInput.statusValue && statusDictionary) {\n    const statusEntryId = await resolveDictionaryEntryId(\n      em,\n      statusDictionary,\n      finalInput.statusValue,\n      context.workflowInstance.tenantId,\n      context.workflowInstance.organizationId\n    )\n    if (statusEntryId) {\n      finalInput.statusEntryId = statusEntryId\n    }\n    delete finalInput.statusValue\n  }\n\n  // Build synthetic CommandRuntimeContext for workflow execution\n  const ctx = {\n    container,\n    auth: {\n      sub: actorUserId,\n      tenantId: context.workflowInstance.tenantId,\n      orgId: context.workflowInstance.organizationId,\n      isSuperAdmin: false,\n    },\n    organizationScope: null,\n    selectedOrganizationId: context.workflowInstance.organizationId,\n    organizationIds: context.workflowInstance.organizationId\n      ? [context.workflowInstance.organizationId]\n      : null,\n  }\n\n  // Execute the command\n  const { result, logEntry } = await commandBus.execute(commandId, {\n    input: finalInput,\n    ctx,\n  })\n\n  return {\n    executed: true,\n    commandId,\n    result,\n    logEntryId: logEntry?.id,\n  }\n}\n\n/**\n * Helper to resolve dictionary entry ID by value\n */\nasync function resolveDictionaryEntryId(\n  em: EntityManager,\n  dictionaryKey: string,\n  value: string,\n  tenantId: string,\n  organizationId: string\n): Promise<string | null> {\n  try {\n    // Import here to avoid circular dependencies\n    const { Dictionary, DictionaryEntry } = await import('@open-mercato/core/modules/dictionaries/data/entities')\n\n    // Find the dictionary\n    const dictionary = await em.findOne(Dictionary, {\n      key: dictionaryKey,\n      tenantId,\n      organizationId,\n      deletedAt: null,\n    })\n\n    if (!dictionary) {\n      logger.warn('Dictionary not found', { component: 'UPDATE_ENTITY', dictionaryKey })\n      return null\n    }\n\n    // Find the entry by normalized value\n    const normalizedValue = value.toLowerCase().trim()\n    const entry = await em.findOne(DictionaryEntry, {\n      dictionary: dictionary.id,\n      tenantId,\n      organizationId,\n      normalizedValue,\n    })\n\n    if (!entry) {\n      logger.warn('Dictionary entry not found', { component: 'UPDATE_ENTITY', dictionaryKey, value })\n      return null\n    }\n\n    return entry.id\n  } catch (error) {\n    logger.error('Error resolving dictionary entry', { component: 'UPDATE_ENTITY', err: error })\n    return null\n  }\n}\n\n/**\n * CALL_WEBHOOK activity handler\n *\n * Makes HTTP request to an external URL. Applies shared SSRF guard\n * (protocol / credentials / blocked host / private IP literal / DNS rebinding)\n * before issuing the request and rejects any 3xx redirect rather than following.\n */\nexport type CallWebhookDeps = {\n  lookupHost?: HostLookup\n  allowPrivate?: boolean\n  fetchImpl?: typeof fetch\n  signal?: AbortSignal\n}\n\nexport async function executeCallWebhook(\n  config: unknown,\n  context: ActivityContext,\n  deps: CallWebhookDeps = {}\n): Promise<any> {\n  const parsed = callWebhookConfigSchema.safeParse(config)\n  if (!parsed.success) {\n    const issues = parsed.error.issues\n      .map((issue) => `${issue.path.join('.') || 'config'}: ${issue.message}`)\n      .join('; ')\n    throw new Error(`CALL_WEBHOOK config invalid: ${issues}`)\n  }\n  const { url, method, headers: rawHeaders, body } = parsed.data\n  const headers = rawHeaders ?? {}\n\n  const allowPrivate = deps.allowPrivate ?? isAllowPrivateWorkflowWebhookUrlsEnabled()\n\n  let response: Response\n  try {\n    response = await safeOutboundFetch(\n      url,\n      {\n        method,\n        headers: {\n          'Content-Type': 'application/json',\n          ...headers,\n        },\n        body: body !== undefined && body !== null ? JSON.stringify(body) : undefined,\n        redirect: 'manual',\n        signal: deps.signal,\n      },\n      {\n        subject: 'Workflow webhook URL',\n        allowPrivate,\n        lookupHost: deps.lookupHost,\n        fetchImpl: deps.fetchImpl,\n      },\n    )\n  } catch (error) {\n    if (error instanceof UnsafeOutboundUrlError) {\n      throw new Error(\n        `CALL_WEBHOOK rejected unsafe URL (reason=${error.reason}): ${error.message}`\n      )\n    }\n    throw error\n  }\n\n  if (response.status >= 300 && response.status < 400) {\n    const location = response.headers.get('location')\n    throw new Error(\n      `CALL_WEBHOOK refused to follow redirect ${response.status} to ${\n        location ?? '(no Location header)'\n      }`\n    )\n  }\n\n  // Parse response\n  let result: any\n  const contentType = response.headers.get('content-type')\n\n  if (contentType && contentType.includes('application/json')) {\n    result = await response.json()\n  } else {\n    result = await response.text()\n  }\n\n  // Check for HTTP errors\n  if (!response.ok) {\n    throw new Error(\n      `Webhook request failed with status ${response.status}: ${JSON.stringify(result)}`\n    )\n  }\n\n  return {\n    status: response.status,\n    statusText: response.statusText,\n    result,\n  }\n}\n\n/**\n * EXECUTE_FUNCTION activity handler\n *\n * Calls a registered function from DI container\n */\nexport async function executeFunction(\n  config: any,\n  context: ActivityContext,\n  container: AwilixContainer\n): Promise<any> {\n  const { functionName, args = {} } = config\n\n  if (!functionName) {\n    throw new Error('EXECUTE_FUNCTION requires \"functionName\" field')\n  }\n\n  // Look up function in container\n  const fnKey = `workflowFunction:${functionName}`\n\n  try {\n    const fn = container.resolve(fnKey)\n\n    if (typeof fn !== 'function') {\n      throw new Error(`Registered workflow function \"${functionName}\" is not a function`)\n    }\n\n    // Call function with args and context\n    const result = await fn(args, context)\n\n    return { executed: true, functionName, result }\n  } catch (error) {\n    if (error instanceof Error && error.message.includes('not registered')) {\n      throw new Error(\n        `Workflow function \"${functionName}\" not registered in DI container (key: ${fnKey})`\n      )\n    }\n    throw error\n  }\n}\n\n/**\n * Calculate delay in milliseconds from a WAIT activity config.\n * Supports either `duration` (relative, e.g. \"PT5M\") or `until` (absolute ISO 8601 datetime).\n */\nfunction calculateWaitDelayMs(config: { duration?: string; until?: string }): number {\n  if (config.until) {\n    const targetDate = new Date(config.until)\n    if (isNaN(targetDate.getTime())) {\n      throw new Error(`WAIT activity: invalid \"until\" datetime: ${config.until}`)\n    }\n    const delayMs = targetDate.getTime() - Date.now()\n    return Math.max(0, delayMs)\n  }\n\n  if (config.duration) {\n    return parseDuration(config.duration)\n  }\n\n  throw new Error('WAIT activity requires \"duration\" (e.g., \"PT5M\", \"1h\") or \"until\" (ISO 8601 datetime)')\n}\n\n/**\n * WAIT activity handler\n *\n * Delays workflow execution for a configured duration or until a specific datetime.\n * - `duration`: relative delay (e.g. \"PT5M\", \"1h\", \"30s\")\n * - `until`: absolute datetime (e.g. \"2026-04-15T10:00:00Z\")\n * - Sync mode: blocks via sleep (suitable for short delays)\n * - Async mode: delay is handled by the queue's delayMs option;\n *   this handler returns immediately when called from the worker\n */\nasync function executeWait(config: any): Promise<any> {\n  const durationMs = calculateWaitDelayMs(config)\n\n  // In sync mode, actually sleep for the duration\n  // In async mode (called from worker), the delay already happened via queue scheduling\n  await sleep(durationMs)\n\n  return { waited: true, durationMs }\n}\n\n/**\n * CALL_API activity handler\n *\n * Makes authenticated HTTP request to internal Open Mercato APIs\n * - Automatically creates one-time API key for authentication\n * - Injects tenant/organization context headers\n * - Validates URL security (SSRF prevention)\n * - Classifies errors (retriable vs non-retriable)\n * - Deletes API key after request (no stored credentials!)\n */\nexport async function executeCallApi(\n  em: EntityManager,\n  config: any,\n  context: ActivityContext,\n  container: AwilixContainer,\n  signal?: AbortSignal\n): Promise<any> {\n  // 1. Interpolate variables in config (including {{workflow.*}}, {{context.*}}, allowlisted {{env.*}}, {{now}})\n  const interpolatedConfig = interpolateVariables(config, context.workflowContext, context.workflowInstance)\n\n  const {\n    endpoint,\n    method = 'GET',\n    headers = {},\n    body,\n    validateTenantMatch = true,\n  } = interpolatedConfig\n\n\n  if (!endpoint) {\n    throw new Error('CALL_API requires \"endpoint\" field')\n  }\n\n  // 2. Build full URL (prepend APP_URL for relative paths)\n  const fullUrl = buildApiUrl(endpoint)\n\n  // 3. Import the one-time API key helper\n  const { withOnetimeApiKey } = await import('../../api_keys/services/apiKeyService')\n\n  // 4. Create the one-time API key on an EntityManager that is fully detached\n  //    from the surrounding request/transaction context.\n  //\n  //    CALL_API runs inside `workflowExecutor.executeWorkflow()`, which wraps\n  //    the whole execution in `em.transactional(...)`. The request EM is forked\n  //    with `useContext: true`, so while that transaction is open, EVERY\n  //    operation on the container's `em` \u2014 including this API key's\n  //    persist/flush \u2014 is transparently redirected to the uncommitted\n  //    transaction fork (MikroORM `getContext()` \u2192 `TransactionContext`). The\n  //    key would therefore stay invisible until the transaction commits, but\n  //    the commit cannot happen until this activity returns. The outbound\n  //    self-authenticated `fetch` below opens a SEPARATE DB connection that\n  //    cannot see the uncommitted row, so the internal API responds `401` and\n  //    the activity fails (issue #4202).\n  //\n  //    Forking with `useContext: false` (matching the query_index/webhooks\n  //    isolated-EM convention) gives the key its own pooled connection with\n  //    autocommit, so it is committed and visible to the internal request\n  //    immediately.\n  const apiKeyEm = container\n    .resolve<PostgreSqlEntityManager>('em')\n    .fork({ clear: true, freshEventManager: true, useContext: false }) as PostgreSqlEntityManager\n\n  // 5. Resolve the roles that the one-time API key will inherit.\n  //\n  // SECURITY: The key must never exceed the permissions of the human who\n  //   triggered (or authored) this workflow. Previously this code looked up\n  //   a role named \"admin\"/\"superadmin\" for the tenant and assigned it to\n  //   the key \u2014 which allowed any non-admin workflow author with\n  //   `workflows.definitions.edit` + `workflows.instances.create` to issue\n  //   arbitrary administrative API calls via a CALL_API activity. See the\n  //   SECURITY.md changelog entry for this fix.\n  //\n  //   The resolution strategy is:\n  //     1. Use the workflow instance's `metadata.initiatedBy` user (whoever\n  //        manually started the instance), when available. Only this user's\n  //        current active roles are used \u2014 we never fall back to the author\n  //        when the initiator is known, because that would escalate the\n  //        initiator's privileges.\n  //     2. Fall back to the workflow definition's `createdBy` (author) only\n  //        when the instance was started by an event trigger with no user.\n  //     3. If no traceable principal exists, the activity refuses to run \u2014\n  //        there is no \"system\" fallback that bypasses RBAC.\n  const resolvedRoleIds = await resolveCallApiRoleIds(apiKeyEm, context.workflowInstance)\n\n  if (resolvedRoleIds.length === 0) {\n    throw new Error(\n      `[CALL_API] Refusing to execute CALL_API for workflow instance ${context.workflowInstance.id}: ` +\n      `no traceable user roles could be resolved from the workflow instance or definition. ` +\n      `CALL_API activities must run under the identity of the user who triggered them.`\n    )\n  }\n\n  // 6. Execute request with one-time API key scoped to the resolved user's roles\n  return await withOnetimeApiKey(\n    apiKeyEm,\n    {\n      name: `__workflow_${context.workflowInstance.id}__`,\n      description: `One-time key for workflow ${context.workflowInstance.workflowId} instance ${context.workflowInstance.id}`,\n      tenantId: context.workflowInstance.tenantId,\n      organizationId: context.workflowInstance.organizationId,\n      roles: resolvedRoleIds,\n      expiresAt: null,\n    },\n    async (apiKeySecret) => {\n      // Build request headers (auth + context + custom)\n      const requestHeaders: Record<string, string> = {\n        'Content-Type': 'application/json',\n        'Authorization': `apikey ${apiKeySecret}`,\n        'X-Tenant-Id': context.workflowInstance.tenantId,\n        'X-Organization-Id': context.workflowInstance.organizationId,\n        'X-Workflow-Instance-Id': context.workflowInstance.id,\n        ...headers,\n      }\n\n      // Make HTTP request\n      const response = await fetch(fullUrl, {\n        method,\n        headers: requestHeaders,\n        body: body ? JSON.stringify(body) : undefined,\n        signal,\n      })\n\n      // Parse response body (JSON-safe)\n      let responseBody: any\n      const contentType = response.headers.get('content-type')\n\n      try {\n        if (contentType && contentType.includes('application/json')) {\n          responseBody = await response.json()\n        } else {\n          responseBody = await response.text()\n        }\n      } catch (error) {\n        responseBody = null\n      }\n\n      // Check for HTTP errors and classify\n      if (!response.ok) {\n        classifyAndThrowError(response.status, responseBody, fullUrl)\n      }\n\n      // Validate tenant match (security check)\n      if (validateTenantMatch && responseBody && typeof responseBody === 'object') {\n        if (responseBody.tenantId && responseBody.tenantId !== context.workflowInstance.tenantId) {\n          throw new Error(\n            `Tenant ID mismatch: workflow expects ${context.workflowInstance.tenantId} but API returned ${responseBody.tenantId}`\n          )\n        }\n      }\n\n      // Return structured result\n      return {\n        status: response.status,\n        statusText: response.statusText,\n        headers: Object.fromEntries(response.headers.entries()),\n        body: responseBody,\n        authenticated: true,\n        tenantId: context.workflowInstance.tenantId,\n        organizationId: context.workflowInstance.organizationId,\n      }\n    }\n  )\n}\n\n// ============================================================================\n// CALL_API Helper Functions\n// ============================================================================\n\nexport type CallApiInstanceLike = {\n  id: string\n  tenantId: string\n  organizationId: string\n  definitionId: string\n  metadata?: { initiatedBy?: string | null } | null\n}\n\nasync function resolveActiveRoleIdsForUser(\n  em: any,\n  userId: string,\n  scope: { tenantId: string; organizationId: string },\n): Promise<string[]> {\n  const { findOneWithDecryption, findWithDecryption } = await import('@open-mercato/shared/lib/encryption/find')\n  const { User, UserRole, Role } = await import('../../auth/data/entities')\n\n  const user = await findOneWithDecryption(em, User, {\n    id: userId,\n    tenantId: scope.tenantId,\n    deletedAt: null,\n  }, {}, scope)\n  if (!user) return []\n\n  const userRoles = await findWithDecryption(\n    em,\n    UserRole,\n    { user: user.id, deletedAt: null },\n    { populate: ['role'] },\n    scope,\n  )\n  const roleIds = userRoles\n    .map((ur: any) => (typeof ur.role === 'string' ? ur.role : ur.role?.id))\n    .filter((id: unknown): id is string => typeof id === 'string' && id.length > 0)\n\n  if (roleIds.length === 0) return []\n\n  const scopedRoles = await findWithDecryption(em, Role, {\n    id: { $in: roleIds },\n    tenantId: scope.tenantId,\n    deletedAt: null,\n  }, {}, scope)\n  return scopedRoles.map((r: any) => r.id as string)\n}\n\nexport async function resolveCallApiRoleIds(\n  em: any,\n  instance: CallApiInstanceLike\n): Promise<string[]> {\n  if (!instance.definitionId) return []\n\n  const { findOneWithDecryption } = await import('@open-mercato/shared/lib/encryption/find')\n  const { WorkflowDefinition } = await import('../data/entities')\n\n  const scope = { tenantId: instance.tenantId, organizationId: instance.organizationId }\n\n  // 1. Prefer the triggering user (whoever manually started this instance).\n  //    WorkflowInstance.metadata.initiatedBy is the canonical record of that\n  //    principal for user-started instances; use their current role set so\n  //    CALL_API never exceeds the initiator's permissions. Refuse if the\n  //    initiator has no active scoped roles \u2014 do not fall back to the\n  //    definition author, which would escalate the initiator's privileges.\n  const initiatorUserId = instance.metadata?.initiatedBy ?? null\n  if (initiatorUserId) {\n    return resolveActiveRoleIdsForUser(em, initiatorUserId, scope)\n  }\n\n  // 2. Event-triggered instance with no human initiator: fall back to the\n  //    definition author. Soft-deleted definitions must not mint keys.\n  const definition = await findOneWithDecryption(em, WorkflowDefinition, {\n    id: instance.definitionId,\n    tenantId: instance.tenantId,\n    deletedAt: null,\n  }, {}, scope)\n  const authorUserId = definition?.createdBy\n  if (!authorUserId) return []\n\n  return resolveActiveRoleIdsForUser(em, authorUserId, scope)\n}\n\n/**\n * Build full API URL from endpoint\n * - Relative paths (/api/...) \u2192 prepend APP_URL\n * - Absolute URLs \u2192 validate domain matches APP_URL (SSRF prevention)\n */\nfunction buildApiUrl(endpoint: string): string {\n  const appUrl = process.env.APP_URL || 'http://localhost:3000'\n\n  // Relative path - prepend APP_URL\n  if (endpoint.startsWith('/')) {\n    // Security: Only allow /api/* paths\n    if (!endpoint.startsWith('/api/')) {\n      throw new Error(`CALL_API only supports /api/* paths, got: ${endpoint}`)\n    }\n    return `${appUrl}${endpoint}`\n  }\n\n  // Absolute URL - validate domain matches APP_URL (SSRF prevention)\n  try {\n    const endpointUrl = new URL(endpoint)\n    const appUrlObj = new URL(appUrl)\n\n    if (endpointUrl.host !== appUrlObj.host) {\n      throw new Error(\n        `SSRF Prevention: CALL_API endpoint domain (${endpointUrl.host}) does not match APP_URL (${appUrlObj.host})`\n      )\n    }\n\n    return endpoint\n  } catch (error) {\n    if (error instanceof TypeError) {\n      throw new Error(`Invalid endpoint URL: ${endpoint}`)\n    }\n    throw error\n  }\n}\n\n/**\n * Classify HTTP error and throw appropriate error\n * - 400-499: Non-retriable (client error - validation/auth)\n * - 500-599: Retriable (server error)\n */\nfunction classifyAndThrowError(status: number, body: any, url: string): never {\n  const bodyStr = typeof body === 'string' ? body : JSON.stringify(body)\n\n  if (status >= 400 && status < 500) {\n    // Client errors - non-retriable\n    throw new Error(\n      `CALL_API request failed with status ${status} (non-retriable): ${bodyStr}`\n    )\n  }\n\n  if (status >= 500) {\n    // Server errors - retriable\n    const error: any = new Error(\n      `CALL_API request failed with status ${status} (retriable): ${bodyStr}`\n    )\n    error.retriable = true\n    throw error\n  }\n\n  // Other errors\n  throw new Error(`CALL_API request failed with status ${status}: ${bodyStr}`)\n}\n\n// ============================================================================\n// Helper Functions\n// ============================================================================\n\n/**\n * Interpolate variables in config from workflow context\n *\n * Supports syntax:\n * - {{context.field}} or {{context.nested.field}} - from workflow context\n * - {{workflow.instanceId}} - workflow instance ID\n * - {{workflow.tenantId}} - tenant ID\n * - {{workflow.organizationId}} - organization ID\n * - {{workflow.currentStepId}} - current step ID\n * - {{env.VAR_NAME}} - server-allowlisted environment variables\n * - {{now}} - current ISO timestamp\n */\nfunction interpolateVariables(\n  config: any,\n  context: Record<string, any>,\n  workflowInstance?: WorkflowInstance\n): any {\n  if (typeof config === 'string') {\n    // Check if this is a single variable reference (e.g., \"{{context.cart.items}}\")\n    // This preserves the original type (array, object, number, boolean)\n    const singleVarMatch = config.match(/^\\{\\{([^}]+)\\}\\}$/)\n\n    if (singleVarMatch) {\n      const trimmedPath = singleVarMatch[1].trim()\n\n      // Handle {{workflow.*}} variables\n      if (trimmedPath.startsWith('workflow.') && workflowInstance) {\n        const workflowKey = trimmedPath.substring('workflow.'.length)\n        switch (workflowKey) {\n          case 'instanceId':\n            return workflowInstance.id\n          case 'tenantId':\n            return workflowInstance.tenantId\n          case 'organizationId':\n            return workflowInstance.organizationId\n          case 'currentStepId':\n            return workflowInstance.currentStepId\n          case 'workflowId':\n            return workflowInstance.workflowId\n          case 'version':\n            return workflowInstance.version // Return as number\n          default:\n            return config // Return original if unknown\n        }\n      }\n\n      // Handle {{env.*}} variables\n      if (trimmedPath.startsWith('env.')) {\n        const envKey = trimmedPath.substring('env.'.length)\n        return resolveWorkflowEnvInterpolation(envKey)\n      }\n\n      // Handle {{now}} - current timestamp\n      if (trimmedPath === 'now') {\n        return new Date().toISOString()\n      }\n\n      // Handle {{context.*}} variables (default behavior)\n      const contextPath = trimmedPath.startsWith('context.')\n        ? trimmedPath.substring('context.'.length)\n        : trimmedPath\n\n      const value = getNestedValue(context, contextPath)\n      return value !== undefined ? value : config // Return raw value to preserve type\n    }\n\n    // Multiple interpolations or mixed text - return string\n    return config.replace(/\\{\\{([^}]+)\\}\\}/g, (match, path) => {\n      const trimmedPath = path.trim()\n\n      // Handle {{workflow.*}} variables\n      if (trimmedPath.startsWith('workflow.') && workflowInstance) {\n        const workflowKey = trimmedPath.substring('workflow.'.length)\n        switch (workflowKey) {\n          case 'instanceId':\n            return workflowInstance.id\n          case 'tenantId':\n            return workflowInstance.tenantId\n          case 'organizationId':\n            return workflowInstance.organizationId\n          case 'currentStepId':\n            return workflowInstance.currentStepId\n          case 'workflowId':\n            return workflowInstance.workflowId\n          case 'version':\n            return String(workflowInstance.version)\n          default:\n            return match // Unknown workflow key\n        }\n      }\n\n      // Handle {{env.*}} variables\n      if (trimmedPath.startsWith('env.')) {\n        const envKey = trimmedPath.substring('env.'.length)\n        return resolveWorkflowEnvInterpolation(envKey)\n      }\n\n      // Handle {{now}} - current timestamp\n      if (trimmedPath === 'now') {\n        return new Date().toISOString()\n      }\n\n      // Handle {{context.*}} variables (default behavior)\n      const contextPath = trimmedPath.startsWith('context.')\n        ? trimmedPath.substring('context.'.length)\n        : trimmedPath\n\n      const value = getNestedValue(context, contextPath)\n      return value !== undefined ? String(value) : match\n    })\n  }\n\n  if (Array.isArray(config)) {\n    return config.map((item) => interpolateVariables(item, context, workflowInstance))\n  }\n\n  if (config && typeof config === 'object') {\n    const result: Record<string, any> = {}\n    for (const [key, value] of Object.entries(config)) {\n      result[key] = interpolateVariables(value, context, workflowInstance)\n    }\n    return result\n  }\n\n  return config\n}\n\n/**\n * Get nested value from object by path (e.g., \"user.email\")\n */\nfunction getNestedValue(obj: any, path: string): any {\n  const parts = path.split('.')\n  let value = obj\n\n  for (const part of parts) {\n    if (value && typeof value === 'object' && part in value) {\n      value = value[part]\n    } else {\n      return undefined\n    }\n  }\n\n  return value\n}\n\n/**\n * Calculate exponential backoff delay\n */\nfunction calculateBackoff(\n  initialIntervalMs: number,\n  backoffCoefficient: number,\n  attempt: number,\n  maxIntervalMs: number\n): number {\n  const backoff = initialIntervalMs * Math.pow(backoffCoefficient, attempt)\n  return Math.min(backoff, maxIntervalMs || Infinity)\n}\n\n/**\n * Sleep for specified milliseconds\n */\nfunction sleep(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms))\n}\n\n/**\n * Execute a promise with timeout\n */\nasync function executeWithTimeout<T>(\n  executor: (signal: AbortSignal) => Promise<T>,\n  timeoutMs: number\n): Promise<T> {\n  let timeoutId: NodeJS.Timeout\n  const abortController = new AbortController()\n\n  const timeoutPromise = new Promise<never>((_, reject) => {\n    timeoutId = setTimeout(() => {\n      abortController.abort()\n      reject(new Error(`Activity execution timeout after ${timeoutMs}ms`))\n    }, timeoutMs)\n  })\n\n  try {\n    return await Promise.race([executor(abortController.signal), timeoutPromise])\n  } finally {\n    clearTimeout(timeoutId!)\n  }\n}\n"],
+  "mappings": "AAgBA,SAAS,yBAAgC;AAEzC;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,SAAS,+BAA+B;AACxC,SAAS,+BAA+B;AACxC,SAA8B,sCAAsC;AACpE,SAAS,wBAAwB;AACjC,SAAS,qBAAqB;AAC9B,SAAS,8BAA8B;AAEvC,SAAS,oBAAoB;AAC7B,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEvC,SAAS,2CAAoD;AAC3D,MAAI,wBAAwB,QAAQ,IAAI,iCAAiC,KAAK,GAAG;AAC/E,QAAI,QAAQ,IAAI,aAAa,cAAc;AACzC,aAAO,KAAK,sGAAsG,EAAE,WAAW,eAAe,CAAC;AAC/I,aAAO;AAAA,IACT;AAEA,WAAO,KAAK,2HAA2H,EAAE,WAAW,eAAe,CAAC;AACpK,WAAO;AAAA,EACT;AAEA,MAAI,wBAAwB,QAAQ,IAAI,qCAAqC,KAAK,GAAG;AACnF,QAAI,QAAQ,IAAI,aAAa,cAAc;AACzC,aAAO,KAAK,2KAA2K,EAAE,WAAW,eAAe,CAAC;AACpN,aAAO;AAAA,IACT;AAEA,WAAO,KAAK,gIAAgI,EAAE,WAAW,eAAe,CAAC;AACzK,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AAEA,MAAM,+CAA+C,oBAAI,IAAI,CAAC,SAAS,CAAC;AACxE,MAAM,2CAA2C;AAEjD,SAAS,uCAAoD;AAC3D,QAAM,YAAY,IAAI,IAAI,4CAA4C;AACtE,QAAM,iBAAiB,QAAQ,IAAI,wCAAwC;AAC3E,MAAI,CAAC,gBAAgB;AACnB,WAAO;AAAA,EACT;AAEA,aAAW,OAAO,eAAe,MAAM,GAAG,GAAG;AAC3C,UAAM,aAAa,IAAI,KAAK;AAC5B,QAAI,YAAY;AACd,gBAAU,IAAI,UAAU;AAAA,IAC1B;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,gCAAgC,QAAwB;AAC/D,MAAI,CAAC,qCAAqC,EAAE,IAAI,MAAM,GAAG;AACvD,WAAO;AAAA,EACT;AAEA,SAAO,QAAQ,IAAI,MAAM,KAAK;AAChC;AAyCO,SAAS,yBAAyB,UAGlB;AACrB,MAAI,OAAO,SAAS,cAAc,YAAY,SAAS,YAAY,GAAG;AACpE,WAAO,SAAS;AAAA,EAClB;AACA,MAAI,OAAO,SAAS,YAAY,YAAY,SAAS,QAAQ,KAAK,EAAE,SAAS,GAAG;AAC9E,QAAI;AACF,YAAM,SAAS,cAAc,SAAS,QAAQ,KAAK,CAAC;AACpD,UAAI,OAAO,SAAS,MAAM,KAAK,SAAS,EAAG,QAAO;AAAA,IACpD,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AA6BA,eAAe,2BACb,WACA,QACA,UACA,UACA,gBACkB;AAClB,MAAI;AACF,UAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,QAAI,MAAM,oBAAoB;AAC5B,aAAO,MAAM,KAAK,mBAAmB,QAAQ,CAAC,GAAG,QAAQ,GAAG,EAAE,UAAU,eAAe,CAAC;AAAA,IAC1F;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO;AACT;AAeO,MAAM,+BAA+B,MAAM;AAAA,EAChD,YACE,SACO,cACA,cACA,SACP;AACA,UAAM,OAAO;AAJN;AACA;AACA;AAGP,SAAK,OAAO;AAAA,EACd;AACF;AAMA,IAAI,gBAAmD;AAKvD,SAAS,mBAA+C;AACtD,MAAI,CAAC,eAAe;AAClB,oBAAgB;AAAA,MACd;AAAA,MACA,EAAE,aAAa,SAAS,QAAQ,IAAI,+BAA+B,GAAG,EAAE;AAAA,IAC1E;AAAA,EACF;AAEA,SAAO;AACT;AAUA,eAAsB,gBACpB,IACA,UACA,SACiB;AACjB,QAAM,EAAE,kBAAkB,iBAAiB,aAAa,cAAc,gBAAgB,iBAAiB,IACrG;AAGF,QAAM,qBAAqB,qBAAqB,SAAS,QAAQ,iBAAiB,gBAAgB;AAGlG,QAAM,MAA2B;AAAA,IAC/B,oBAAoB,iBAAiB;AAAA,IACrC;AAAA,IACA,kBAAkB,oBAAoB;AAAA,IACtC;AAAA,IACA,YAAY,SAAS;AAAA,IACrB,cAAc,SAAS,gBAAgB,SAAS;AAAA,IAChD,cAAc,SAAS;AAAA,IACvB,gBAAgB;AAAA,IAChB;AAAA,IACA;AAAA,IACA,aAAa,SAAS;AAAA,IACtB,WAAW,SAAS;AAAA,IACpB,UAAU,iBAAiB;AAAA,IAC3B,gBAAgB,iBAAiB;AAAA,IACjC,QAAQ,QAAQ;AAAA,EAClB;AAGA,QAAM,QAAQ,iBAAiB;AAC/B,QAAM,iBAAiB,SAAS,iBAAiB,WAAW,mBAAmB,YAAY,mBAAmB,SAC1G,EAAE,SAAS,qBAAqB,kBAAkB,EAAE,IACpD;AACJ,QAAM,QAAQ,MAAM,MAAM,QAAQ,KAAK,cAAc;AAGrD,QAAM,iBAAiB,IAAI;AAAA,IACzB,oBAAoB,iBAAiB;AAAA,IACrC;AAAA,IACA,WAAW;AAAA,IACX,WAAW;AAAA,MACT,YAAY,SAAS;AAAA,MACrB,cAAc,SAAS;AAAA,MACvB,cAAc,SAAS;AAAA,MACvB,OAAO;AAAA,MACP;AAAA,IACF;AAAA,IACA,UAAU,iBAAiB;AAAA,IAC3B,gBAAgB,iBAAiB;AAAA,EACnC,CAAC;AAED,SAAO;AACT;AAQA,eAAsB,gBAAgB,QASlB;AAClB,QAAM,EAAE,oBAAoB,gBAAgB,kBAAkB,UAAU,gBAAgB,QAAQ,QAAQ,QAAQ,IAC9G;AAEF,QAAM,QAAQ,iBAAiB;AAC/B,QAAM,QAAQ,MAAM,MAAM;AAAA,IACxB;AAAA,MACE,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,kBAAkB,oBAAoB;AAAA,MACtC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,EAAE,SAAS,UAAU,IAAI,UAAU,OAAU;AAAA,EAC/C;AAEA,SAAO;AACT;AAeA,eAAsB,gBACpB,IACA,WACA,UACA,SACkC;AAClC,QAAM,cAAc,SAAS,eAAe;AAAA,IAC1C,aAAa;AAAA,IACb,mBAAmB;AAAA,IACnB,oBAAoB;AAAA,IACpB,eAAe;AAAA,EACjB;AAEA,MAAI;AACJ,MAAI,aAAa;AAEjB,WAAS,UAAU,GAAG,UAAU,YAAY,aAAa,WAAW;AAClE,QAAI;AACF,YAAM,YAAY,KAAK,IAAI;AAI3B,YAAM,YAAY,yBAAyB,QAAQ;AACnD,YAAM,SAAS,YACX,MAAM;AAAA,QACJ,CAAC,WAAW,sBAAsB,IAAI,WAAW,UAAU,SAAS,MAAM;AAAA,QAC1E;AAAA,MACF,IACA,MAAM,sBAAsB,IAAI,WAAW,UAAU,OAAO;AAEhE,YAAM,kBAAkB,KAAK,IAAI,IAAI;AAErC,aAAO;AAAA,QACL,YAAY,SAAS;AAAA,QACrB,cAAc,SAAS;AAAA,QACvB,cAAc,SAAS;AAAA,QACvB,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,YAAY;AAAA,QACZ;AAAA,QACA,OAAO,SAAS,SAAS;AAAA,MAC3B;AAAA,IACF,SAAS,OAAO;AACd,kBAAY;AACZ,mBAAa,UAAU;AAGvB,UAAI,UAAU,YAAY,cAAc,GAAG;AACzC,eAAO,MAAM,+BAA+B;AAAA,UAC1C,YAAY,SAAS;AAAA,UACrB,cAAc,SAAS;AAAA,UACvB,SAAS,UAAU;AAAA,UACnB,aAAa,YAAY;AAAA,UACzB,YAAY,QAAQ,iBAAiB;AAAA,UACrC,KAAK;AAAA,QACP,CAAC;AAAA,MACH;AAGA,UAAI,UAAU,YAAY,cAAc,GAAG;AACzC,cAAM,UAAU;AAAA,UACd,YAAY;AAAA,UACZ,YAAY;AAAA,UACZ;AAAA,UACA,YAAY;AAAA,QACd;AAEA,cAAM,MAAM,OAAO;AAAA,MACrB;AAAA,IACF;AAAA,EACF;AAGA,QAAM,eAAe,qBAAqB,QAAQ,UAAU,UAAU,OAAO,SAAS;AACtF,SAAO,MAAM,sCAAsC;AAAA,IACjD,YAAY,SAAS;AAAA,IACrB,cAAc,SAAS;AAAA,IACvB,UAAU;AAAA,IACV,YAAY,QAAQ,iBAAiB;AAAA,IACrC,KAAK;AAAA,EACP,CAAC;AAED,SAAO;AAAA,IACL,YAAY,SAAS;AAAA,IACrB,cAAc,SAAS;AAAA,IACvB,cAAc,SAAS;AAAA,IACvB,SAAS;AAAA,IACT,OAAO,yBAAyB,UAAU,cAAc,YAAY;AAAA,IACpE;AAAA,IACA,iBAAiB;AAAA,IACjB,OAAO,SAAS,SAAS;AAAA,EAC3B;AACF;AAYA,eAAsB,kBACpB,IACA,WACA,YACA,SACoC;AACpC,QAAM,UAAqC,CAAC;AAE5C,WAAS,IAAI,GAAG,IAAI,WAAW,QAAQ,KAAK;AAC1C,UAAM,WAAW,WAAW,CAAC;AAG7B,QAAI,SAAS,OAAO;AAElB,YAAM,QAAQ,MAAM,gBAAgB,IAAI,UAAU,OAAO;AAEzD,cAAQ,KAAK;AAAA,QACX,YAAY,SAAS;AAAA,QACrB,cAAc,SAAS;AAAA,QACvB,cAAc,SAAS;AAAA,QACvB,SAAS;AAAA;AAAA,QACT,OAAO;AAAA,QACP;AAAA,QACA,YAAY;AAAA,QACZ,iBAAiB;AAAA,MACnB,CAAC;AAAA,IACH,OAAO;AAEL,YAAM,SAAS,MAAM,gBAAgB,IAAI,WAAW,UAAU,OAAO;AACrE,cAAQ,KAAK,MAAM;AAGnB,UAAI,CAAC,OAAO,SAAS;AACnB;AAAA,MACF;AAGA,UAAI,OAAO,UAAU,OAAO,OAAO,WAAW,UAAU;AACtD,cAAM,MAAM,SAAS,gBAAgB,SAAS;AAC9C,gBAAQ,kBAAkB;AAAA,UACxB,GAAG,QAAQ;AAAA,UACX,CAAC,GAAG,GAAG,OAAO;AAAA,QAChB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AASA,eAAe,sBACb,IACA,WACA,UACA,SACA,QACc;AAEd,QAAM,qBAAqB,qBAAqB,SAAS,QAAQ,QAAQ,iBAAiB,QAAQ,gBAAgB;AAElH,UAAQ,SAAS,cAAc;AAAA,IAC7B,KAAK;AACH,aAAO,MAAM,iBAAiB,oBAAoB,SAAS,SAAS;AAAA,IAEtE,KAAK;AACH,aAAO,MAAM,eAAe,IAAI,oBAAoB,SAAS,WAAW,MAAM;AAAA,IAEhF,KAAK;AACH,aAAO,MAAM,iBAAiB,oBAAoB,SAAS,SAAS;AAAA,IAEtE,KAAK;AACH,aAAO,MAAM,oBAAoB,IAAI,oBAAoB,SAAS,SAAS;AAAA,IAE7E,KAAK;AACH,aAAO,MAAM,mBAAmB,oBAAoB,SAAS,EAAE,OAAO,CAAC;AAAA,IAEzE,KAAK;AACH,aAAO,MAAM,gBAAgB,oBAAoB,SAAS,SAAS;AAAA,IAErE,KAAK;AACH,aAAO,MAAM,YAAY,kBAAkB;AAAA,IAE7C;AACE,YAAM,IAAI;AAAA,QACR,0BAA0B,SAAS,YAAY;AAAA,QAC/C,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,EACJ;AACF;AAOA,eAAsB,iBACpB,QACA,SACA,WACc;AACd,QAAM,EAAE,IAAI,SAAS,UAAU,cAAc,KAAK,IAAI;AAEtD,MAAI,CAAC,MAAM,CAAC,SAAS;AACnB,UAAM,IAAI,MAAM,+CAA+C;AAAA,EACjE;AAGA,SAAO,KAAK,+BAA+B,EAAE,WAAW,cAAc,QAAQ,CAAC;AAG/E,MAAI;AACF,UAAM,eAAe,UAAU,QAAkE,cAAc;AAC/G,QAAI,gBAAgB,OAAO,aAAa,SAAS,YAAY;AAC3D,YAAM,aAAa,KAAK;AAAA,QACtB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AACD,aAAO,EAAE,MAAM,MAAM,IAAI,SAAS,KAAK,eAAe;AAAA,IACxD;AAAA,EACF,SAAS,OAAO;AAAA,EAEhB;AAEA,SAAO,EAAE,MAAM,MAAM,IAAI,SAAS,KAAK,UAAU;AACnD;AAOA,eAAsB,iBACpB,QACA,SACA,WACc;AACd,QAAM,EAAE,WAAW,QAAQ,IAAI;AAE/B,MAAI,CAAC,WAAW;AACd,UAAM,IAAI,MAAM,uCAAuC;AAAA,EACzD;AAKA,QAAM,wBAAwB,2BAA2B,OAAO;AAChE,MAAI,sBAAsB,SAAS,GAAG;AACpC,UAAM,IAAI;AAAA,MACR,kEAAkE,sBAAsB,KAAK,IAAI,CAAC;AAAA,IAEpG;AAAA,EACF;AAGA,QAAM,WAAW,UAAU,QAA2G,UAAU;AAEhJ,MAAI,CAAC,YAAY,OAAO,SAAS,cAAc,YAAY;AACzD,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AAGA,QAAM,kBAAkB;AAAA,IACtB,GAAG;AAAA,IACH,WAAW;AAAA,MACT,oBAAoB,QAAQ,iBAAiB;AAAA,MAC7C,YAAY,QAAQ,iBAAiB;AAAA,MACrC,UAAU,QAAQ,iBAAiB;AAAA,MACnC,gBAAgB,QAAQ,iBAAiB;AAAA,IAC3C;AAAA,EACF;AAEA,QAAM,SAAS,UAAU,WAAW,iBAAiB;AAAA,IACnD,UAAU,QAAQ,iBAAiB;AAAA,IACnC,gBAAgB,QAAQ,iBAAiB;AAAA,EAC3C,CAAC;AAED,SAAO,EAAE,SAAS,MAAM,WAAW,SAAS,gBAAgB;AAC9D;AAEA,MAAM,8BAA8B;AAEpC,SAAS,2BAA2B,OAAgB,OAAO,IAAc;AACvE,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,4BAA4B,KAAK,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC;AAAA,EAC7D;AACA,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,WAAO,MAAM,QAAQ,CAAC,MAAM,UAAU,2BAA2B,MAAM,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC;AAAA,EAC7F;AACA,MAAI,SAAS,OAAO,UAAU,UAAU;AACtC,WAAO,OAAO,QAAQ,KAAK,EAAE;AAAA,MAAQ,CAAC,CAAC,KAAK,MAAM,MAChD,2BAA2B,QAAQ,OAAO,GAAG,IAAI,IAAI,GAAG,KAAK,GAAG;AAAA,IAClE;AAAA,EACF;AACA,SAAO,CAAC;AACV;AAiCA,eAAsB,oBACpB,IACA,QACA,SACA,WACc;AACd,QAAM,EAAE,WAAW,OAAO,iBAAiB,IAAI;AAE/C,MAAI,CAAC,WAAW;AACd,UAAM,IAAI,MAAM,2EAA2E;AAAA,EAC7F;AAEA,QAAM,sBAAsB,uBAAuB,SAAS;AAC5D,MAAI,CAAC,qBAAqB;AACxB,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AAEA,MAAI,CAAC,SAAS,OAAO,UAAU,UAAU;AACvC,UAAM,IAAI,MAAM,wDAAwD;AAAA,EAC1E;AAEA,QAAM,cAAc,OAAO,QAAQ,WAAW,WAAW,QAAQ,OAAO,KAAK,IAAI;AACjF,MAAI,CAAC,aAAa;AAChB,UAAM,IAAI,MAAM,uDAAuD;AAAA,EACzE;AAEA,QAAM,aAAa,MAAM;AAAA,IACvB;AAAA,IACA;AAAA,IACA,oBAAoB;AAAA,IACpB,QAAQ,iBAAiB;AAAA,IACzB,QAAQ,iBAAiB;AAAA,EAC3B;AACA,MAAI,CAAC,YAAY;AACf,UAAM,IAAI,MAAM,yCAAyC;AAAA,EAC3D;AAGA,QAAM,aAAa,UAAU,QAAQ,YAAY;AAEjD,MAAI,CAAC,cAAc,OAAO,WAAW,YAAY,YAAY;AAC3D,UAAM,IAAI,MAAM,uCAAuC;AAAA,EACzD;AAEA,QAAM,iBAAiB,2BAA2B,KAAK;AACvD,MAAI,eAAe,SAAS,GAAG;AAC7B,UAAM,IAAI;AAAA,MACR,mEAAmE,eAAe,KAAK,IAAI,CAAC;AAAA,IAE9F;AAAA,EACF;AAGA,MAAI,aAAa,EAAE,GAAG,MAAM;AAG5B,MAAI,WAAW,eAAe,kBAAkB;AAC9C,UAAM,gBAAgB,MAAM;AAAA,MAC1B;AAAA,MACA;AAAA,MACA,WAAW;AAAA,MACX,QAAQ,iBAAiB;AAAA,MACzB,QAAQ,iBAAiB;AAAA,IAC3B;AACA,QAAI,eAAe;AACjB,iBAAW,gBAAgB;AAAA,IAC7B;AACA,WAAO,WAAW;AAAA,EACpB;AAGA,QAAM,MAAM;AAAA,IACV;AAAA,IACA,MAAM;AAAA,MACJ,KAAK;AAAA,MACL,UAAU,QAAQ,iBAAiB;AAAA,MACnC,OAAO,QAAQ,iBAAiB;AAAA,MAChC,cAAc;AAAA,IAChB;AAAA,IACA,mBAAmB;AAAA,IACnB,wBAAwB,QAAQ,iBAAiB;AAAA,IACjD,iBAAiB,QAAQ,iBAAiB,iBACtC,CAAC,QAAQ,iBAAiB,cAAc,IACxC;AAAA,EACN;AAGA,QAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW,QAAQ,WAAW;AAAA,IAC/D,OAAO;AAAA,IACP;AAAA,EACF,CAAC;AAED,SAAO;AAAA,IACL,UAAU;AAAA,IACV;AAAA,IACA;AAAA,IACA,YAAY,UAAU;AAAA,EACxB;AACF;AAKA,eAAe,yBACb,IACA,eACA,OACA,UACA,gBACwB;AACxB,MAAI;AAEF,UAAM,EAAE,YAAY,gBAAgB,IAAI,MAAM,OAAO,uDAAuD;AAG5G,UAAM,aAAa,MAAM,GAAG,QAAQ,YAAY;AAAA,MAC9C,KAAK;AAAA,MACL;AAAA,MACA;AAAA,MACA,WAAW;AAAA,IACb,CAAC;AAED,QAAI,CAAC,YAAY;AACf,aAAO,KAAK,wBAAwB,EAAE,WAAW,iBAAiB,cAAc,CAAC;AACjF,aAAO;AAAA,IACT;AAGA,UAAM,kBAAkB,MAAM,YAAY,EAAE,KAAK;AACjD,UAAM,QAAQ,MAAM,GAAG,QAAQ,iBAAiB;AAAA,MAC9C,YAAY,WAAW;AAAA,MACvB;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAED,QAAI,CAAC,OAAO;AACV,aAAO,KAAK,8BAA8B,EAAE,WAAW,iBAAiB,eAAe,MAAM,CAAC;AAC9F,aAAO;AAAA,IACT;AAEA,WAAO,MAAM;AAAA,EACf,SAAS,OAAO;AACd,WAAO,MAAM,oCAAoC,EAAE,WAAW,iBAAiB,KAAK,MAAM,CAAC;AAC3F,WAAO;AAAA,EACT;AACF;AAgBA,eAAsB,mBACpB,QACA,SACA,OAAwB,CAAC,GACX;AACd,QAAM,SAAS,wBAAwB,UAAU,MAAM;AACvD,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,SAAS,OAAO,MAAM,OACzB,IAAI,CAAC,UAAU,GAAG,MAAM,KAAK,KAAK,GAAG,KAAK,QAAQ,KAAK,MAAM,OAAO,EAAE,EACtE,KAAK,IAAI;AACZ,UAAM,IAAI,MAAM,gCAAgC,MAAM,EAAE;AAAA,EAC1D;AACA,QAAM,EAAE,KAAK,QAAQ,SAAS,YAAY,KAAK,IAAI,OAAO;AAC1D,QAAM,UAAU,cAAc,CAAC;AAE/B,QAAM,eAAe,KAAK,gBAAgB,yCAAyC;AAEnF,MAAI;AACJ,MAAI;AACF,eAAW,MAAM;AAAA,MACf;AAAA,MACA;AAAA,QACE;AAAA,QACA,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,GAAG;AAAA,QACL;AAAA,QACA,MAAM,SAAS,UAAa,SAAS,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,QACnE,UAAU;AAAA,QACV,QAAQ,KAAK;AAAA,MACf;AAAA,MACA;AAAA,QACE,SAAS;AAAA,QACT;AAAA,QACA,YAAY,KAAK;AAAA,QACjB,WAAW,KAAK;AAAA,MAClB;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,QAAI,iBAAiB,wBAAwB;AAC3C,YAAM,IAAI;AAAA,QACR,4CAA4C,MAAM,MAAM,MAAM,MAAM,OAAO;AAAA,MAC7E;AAAA,IACF;AACA,UAAM;AAAA,EACR;AAEA,MAAI,SAAS,UAAU,OAAO,SAAS,SAAS,KAAK;AACnD,UAAM,WAAW,SAAS,QAAQ,IAAI,UAAU;AAChD,UAAM,IAAI;AAAA,MACR,2CAA2C,SAAS,MAAM,OACxD,YAAY,sBACd;AAAA,IACF;AAAA,EACF;AAGA,MAAI;AACJ,QAAM,cAAc,SAAS,QAAQ,IAAI,cAAc;AAEvD,MAAI,eAAe,YAAY,SAAS,kBAAkB,GAAG;AAC3D,aAAS,MAAM,SAAS,KAAK;AAAA,EAC/B,OAAO;AACL,aAAS,MAAM,SAAS,KAAK;AAAA,EAC/B;AAGA,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,IAAI;AAAA,MACR,sCAAsC,SAAS,MAAM,KAAK,KAAK,UAAU,MAAM,CAAC;AAAA,IAClF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,QAAQ,SAAS;AAAA,IACjB,YAAY,SAAS;AAAA,IACrB;AAAA,EACF;AACF;AAOA,eAAsB,gBACpB,QACA,SACA,WACc;AACd,QAAM,EAAE,cAAc,OAAO,CAAC,EAAE,IAAI;AAEpC,MAAI,CAAC,cAAc;AACjB,UAAM,IAAI,MAAM,gDAAgD;AAAA,EAClE;AAGA,QAAM,QAAQ,oBAAoB,YAAY;AAE9C,MAAI;AACF,UAAM,KAAK,UAAU,QAAQ,KAAK;AAElC,QAAI,OAAO,OAAO,YAAY;AAC5B,YAAM,IAAI,MAAM,iCAAiC,YAAY,qBAAqB;AAAA,IACpF;AAGA,UAAM,SAAS,MAAM,GAAG,MAAM,OAAO;AAErC,WAAO,EAAE,UAAU,MAAM,cAAc,OAAO;AAAA,EAChD,SAAS,OAAO;AACd,QAAI,iBAAiB,SAAS,MAAM,QAAQ,SAAS,gBAAgB,GAAG;AACtE,YAAM,IAAI;AAAA,QACR,sBAAsB,YAAY,0CAA0C,KAAK;AAAA,MACnF;AAAA,IACF;AACA,UAAM;AAAA,EACR;AACF;AAMA,SAAS,qBAAqB,QAAuD;AACnF,MAAI,OAAO,OAAO;AAChB,UAAM,aAAa,IAAI,KAAK,OAAO,KAAK;AACxC,QAAI,MAAM,WAAW,QAAQ,CAAC,GAAG;AAC/B,YAAM,IAAI,MAAM,4CAA4C,OAAO,KAAK,EAAE;AAAA,IAC5E;AACA,UAAM,UAAU,WAAW,QAAQ,IAAI,KAAK,IAAI;AAChD,WAAO,KAAK,IAAI,GAAG,OAAO;AAAA,EAC5B;AAEA,MAAI,OAAO,UAAU;AACnB,WAAO,cAAc,OAAO,QAAQ;AAAA,EACtC;AAEA,QAAM,IAAI,MAAM,uFAAuF;AACzG;AAYA,eAAe,YAAY,QAA2B;AACpD,QAAM,aAAa,qBAAqB,MAAM;AAI9C,QAAM,MAAM,UAAU;AAEtB,SAAO,EAAE,QAAQ,MAAM,WAAW;AACpC;AAYA,eAAsB,eACpB,IACA,QACA,SACA,WACA,QACc;AAEd,QAAM,qBAAqB,qBAAqB,QAAQ,QAAQ,iBAAiB,QAAQ,gBAAgB;AAEzG,QAAM;AAAA,IACJ;AAAA,IACA,SAAS;AAAA,IACT,UAAU,CAAC;AAAA,IACX;AAAA,IACA,sBAAsB;AAAA,EACxB,IAAI;AAGJ,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,MAAM,oCAAoC;AAAA,EACtD;AAGA,QAAM,UAAU,YAAY,QAAQ;AAGpC,QAAM,EAAE,kBAAkB,IAAI,MAAM,OAAO,uCAAuC;AAqBlF,QAAM,WAAW,UACd,QAAiC,IAAI,EACrC,KAAK,EAAE,OAAO,MAAM,mBAAmB,MAAM,YAAY,MAAM,CAAC;AAsBnE,QAAM,kBAAkB,MAAM,sBAAsB,UAAU,QAAQ,gBAAgB;AAEtF,MAAI,gBAAgB,WAAW,GAAG;AAChC,UAAM,IAAI;AAAA,MACR,iEAAiE,QAAQ,iBAAiB,EAAE;AAAA,IAG9F;AAAA,EACF;AAGA,SAAO,MAAM;AAAA,IACX;AAAA,IACA;AAAA,MACE,MAAM,cAAc,QAAQ,iBAAiB,EAAE;AAAA,MAC/C,aAAa,6BAA6B,QAAQ,iBAAiB,UAAU,aAAa,QAAQ,iBAAiB,EAAE;AAAA,MACrH,UAAU,QAAQ,iBAAiB;AAAA,MACnC,gBAAgB,QAAQ,iBAAiB;AAAA,MACzC,OAAO;AAAA,MACP,WAAW;AAAA,IACb;AAAA,IACA,OAAO,iBAAiB;AAEtB,YAAM,iBAAyC;AAAA,QAC7C,gBAAgB;AAAA,QAChB,iBAAiB,UAAU,YAAY;AAAA,QACvC,eAAe,QAAQ,iBAAiB;AAAA,QACxC,qBAAqB,QAAQ,iBAAiB;AAAA,QAC9C,0BAA0B,QAAQ,iBAAiB;AAAA,QACnD,GAAG;AAAA,MACL;AAGA,YAAM,WAAW,MAAM,MAAM,SAAS;AAAA,QACpC;AAAA,QACA,SAAS;AAAA,QACT,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,QACpC;AAAA,MACF,CAAC;AAGD,UAAI;AACJ,YAAM,cAAc,SAAS,QAAQ,IAAI,cAAc;AAEvD,UAAI;AACF,YAAI,eAAe,YAAY,SAAS,kBAAkB,GAAG;AAC3D,yBAAe,MAAM,SAAS,KAAK;AAAA,QACrC,OAAO;AACL,yBAAe,MAAM,SAAS,KAAK;AAAA,QACrC;AAAA,MACF,SAAS,OAAO;AACd,uBAAe;AAAA,MACjB;AAGA,UAAI,CAAC,SAAS,IAAI;AAChB,8BAAsB,SAAS,QAAQ,cAAc,OAAO;AAAA,MAC9D;AAGA,UAAI,uBAAuB,gBAAgB,OAAO,iBAAiB,UAAU;AAC3E,YAAI,aAAa,YAAY,aAAa,aAAa,QAAQ,iBAAiB,UAAU;AACxF,gBAAM,IAAI;AAAA,YACR,wCAAwC,QAAQ,iBAAiB,QAAQ,qBAAqB,aAAa,QAAQ;AAAA,UACrH;AAAA,QACF;AAAA,MACF;AAGA,aAAO;AAAA,QACL,QAAQ,SAAS;AAAA,QACjB,YAAY,SAAS;AAAA,QACrB,SAAS,OAAO,YAAY,SAAS,QAAQ,QAAQ,CAAC;AAAA,QACtD,MAAM;AAAA,QACN,eAAe;AAAA,QACf,UAAU,QAAQ,iBAAiB;AAAA,QACnC,gBAAgB,QAAQ,iBAAiB;AAAA,MAC3C;AAAA,IACF;AAAA,EACF;AACF;AAcA,eAAe,4BACb,IACA,QACA,OACmB;AACnB,QAAM,EAAE,uBAAuB,mBAAmB,IAAI,MAAM,OAAO,0CAA0C;AAC7G,QAAM,EAAE,MAAM,UAAU,KAAK,IAAI,MAAM,OAAO,0BAA0B;AAExE,QAAM,OAAO,MAAM,sBAAsB,IAAI,MAAM;AAAA,IACjD,IAAI;AAAA,IACJ,UAAU,MAAM;AAAA,IAChB,WAAW;AAAA,EACb,GAAG,CAAC,GAAG,KAAK;AACZ,MAAI,CAAC,KAAM,QAAO,CAAC;AAEnB,QAAM,YAAY,MAAM;AAAA,IACtB;AAAA,IACA;AAAA,IACA,EAAE,MAAM,KAAK,IAAI,WAAW,KAAK;AAAA,IACjC,EAAE,UAAU,CAAC,MAAM,EAAE;AAAA,IACrB;AAAA,EACF;AACA,QAAM,UAAU,UACb,IAAI,CAAC,OAAa,OAAO,GAAG,SAAS,WAAW,GAAG,OAAO,GAAG,MAAM,EAAG,EACtE,OAAO,CAAC,OAA8B,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC;AAEhF,MAAI,QAAQ,WAAW,EAAG,QAAO,CAAC;AAElC,QAAM,cAAc,MAAM,mBAAmB,IAAI,MAAM;AAAA,IACrD,IAAI,EAAE,KAAK,QAAQ;AAAA,IACnB,UAAU,MAAM;AAAA,IAChB,WAAW;AAAA,EACb,GAAG,CAAC,GAAG,KAAK;AACZ,SAAO,YAAY,IAAI,CAAC,MAAW,EAAE,EAAY;AACnD;AAEA,eAAsB,sBACpB,IACA,UACmB;AACnB,MAAI,CAAC,SAAS,aAAc,QAAO,CAAC;AAEpC,QAAM,EAAE,sBAAsB,IAAI,MAAM,OAAO,0CAA0C;AACzF,QAAM,EAAE,mBAAmB,IAAI,MAAM,OAAO,kBAAkB;AAE9D,QAAM,QAAQ,EAAE,UAAU,SAAS,UAAU,gBAAgB,SAAS,eAAe;AAQrF,QAAM,kBAAkB,SAAS,UAAU,eAAe;AAC1D,MAAI,iBAAiB;AACnB,WAAO,4BAA4B,IAAI,iBAAiB,KAAK;AAAA,EAC/D;AAIA,QAAM,aAAa,MAAM,sBAAsB,IAAI,oBAAoB;AAAA,IACrE,IAAI,SAAS;AAAA,IACb,UAAU,SAAS;AAAA,IACnB,WAAW;AAAA,EACb,GAAG,CAAC,GAAG,KAAK;AACZ,QAAM,eAAe,YAAY;AACjC,MAAI,CAAC,aAAc,QAAO,CAAC;AAE3B,SAAO,4BAA4B,IAAI,cAAc,KAAK;AAC5D;AAOA,SAAS,YAAY,UAA0B;AAC7C,QAAM,SAAS,QAAQ,IAAI,WAAW;AAGtC,MAAI,SAAS,WAAW,GAAG,GAAG;AAE5B,QAAI,CAAC,SAAS,WAAW,OAAO,GAAG;AACjC,YAAM,IAAI,MAAM,6CAA6C,QAAQ,EAAE;AAAA,IACzE;AACA,WAAO,GAAG,MAAM,GAAG,QAAQ;AAAA,EAC7B;AAGA,MAAI;AACF,UAAM,cAAc,IAAI,IAAI,QAAQ;AACpC,UAAM,YAAY,IAAI,IAAI,MAAM;AAEhC,QAAI,YAAY,SAAS,UAAU,MAAM;AACvC,YAAM,IAAI;AAAA,QACR,8CAA8C,YAAY,IAAI,6BAA6B,UAAU,IAAI;AAAA,MAC3G;AAAA,IACF;AAEA,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QAAI,iBAAiB,WAAW;AAC9B,YAAM,IAAI,MAAM,yBAAyB,QAAQ,EAAE;AAAA,IACrD;AACA,UAAM;AAAA,EACR;AACF;AAOA,SAAS,sBAAsB,QAAgB,MAAW,KAAoB;AAC5E,QAAM,UAAU,OAAO,SAAS,WAAW,OAAO,KAAK,UAAU,IAAI;AAErE,MAAI,UAAU,OAAO,SAAS,KAAK;AAEjC,UAAM,IAAI;AAAA,MACR,uCAAuC,MAAM,qBAAqB,OAAO;AAAA,IAC3E;AAAA,EACF;AAEA,MAAI,UAAU,KAAK;AAEjB,UAAM,QAAa,IAAI;AAAA,MACrB,uCAAuC,MAAM,iBAAiB,OAAO;AAAA,IACvE;AACA,UAAM,YAAY;AAClB,UAAM;AAAA,EACR;AAGA,QAAM,IAAI,MAAM,uCAAuC,MAAM,KAAK,OAAO,EAAE;AAC7E;AAkBA,SAAS,qBACP,QACA,SACA,kBACK;AACL,MAAI,OAAO,WAAW,UAAU;AAG9B,UAAM,iBAAiB,OAAO,MAAM,mBAAmB;AAEvD,QAAI,gBAAgB;AAClB,YAAM,cAAc,eAAe,CAAC,EAAE,KAAK;AAG3C,UAAI,YAAY,WAAW,WAAW,KAAK,kBAAkB;AAC3D,cAAM,cAAc,YAAY,UAAU,YAAY,MAAM;AAC5D,gBAAQ,aAAa;AAAA,UACnB,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,iBAAiB;AAAA;AAAA,UAC1B;AACE,mBAAO;AAAA,QACX;AAAA,MACF;AAGA,UAAI,YAAY,WAAW,MAAM,GAAG;AAClC,cAAM,SAAS,YAAY,UAAU,OAAO,MAAM;AAClD,eAAO,gCAAgC,MAAM;AAAA,MAC/C;AAGA,UAAI,gBAAgB,OAAO;AACzB,gBAAO,oBAAI,KAAK,GAAE,YAAY;AAAA,MAChC;AAGA,YAAM,cAAc,YAAY,WAAW,UAAU,IACjD,YAAY,UAAU,WAAW,MAAM,IACvC;AAEJ,YAAM,QAAQ,eAAe,SAAS,WAAW;AACjD,aAAO,UAAU,SAAY,QAAQ;AAAA,IACvC;AAGA,WAAO,OAAO,QAAQ,oBAAoB,CAAC,OAAO,SAAS;AACzD,YAAM,cAAc,KAAK,KAAK;AAG9B,UAAI,YAAY,WAAW,WAAW,KAAK,kBAAkB;AAC3D,cAAM,cAAc,YAAY,UAAU,YAAY,MAAM;AAC5D,gBAAQ,aAAa;AAAA,UACnB,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,OAAO,iBAAiB,OAAO;AAAA,UACxC;AACE,mBAAO;AAAA,QACX;AAAA,MACF;AAGA,UAAI,YAAY,WAAW,MAAM,GAAG;AAClC,cAAM,SAAS,YAAY,UAAU,OAAO,MAAM;AAClD,eAAO,gCAAgC,MAAM;AAAA,MAC/C;AAGA,UAAI,gBAAgB,OAAO;AACzB,gBAAO,oBAAI,KAAK,GAAE,YAAY;AAAA,MAChC;AAGA,YAAM,cAAc,YAAY,WAAW,UAAU,IACjD,YAAY,UAAU,WAAW,MAAM,IACvC;AAEJ,YAAM,QAAQ,eAAe,SAAS,WAAW;AACjD,aAAO,UAAU,SAAY,OAAO,KAAK,IAAI;AAAA,IAC/C,CAAC;AAAA,EACH;AAEA,MAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,WAAO,OAAO,IAAI,CAAC,SAAS,qBAAqB,MAAM,SAAS,gBAAgB,CAAC;AAAA,EACnF;AAEA,MAAI,UAAU,OAAO,WAAW,UAAU;AACxC,UAAM,SAA8B,CAAC;AACrC,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,aAAO,GAAG,IAAI,qBAAqB,OAAO,SAAS,gBAAgB;AAAA,IACrE;AACA,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AAKA,SAAS,eAAe,KAAU,MAAmB;AACnD,QAAM,QAAQ,KAAK,MAAM,GAAG;AAC5B,MAAI,QAAQ;AAEZ,aAAW,QAAQ,OAAO;AACxB,QAAI,SAAS,OAAO,UAAU,YAAY,QAAQ,OAAO;AACvD,cAAQ,MAAM,IAAI;AAAA,IACpB,OAAO;AACL,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO;AACT;AAKA,SAAS,iBACP,mBACA,oBACA,SACA,eACQ;AACR,QAAM,UAAU,oBAAoB,KAAK,IAAI,oBAAoB,OAAO;AACxE,SAAO,KAAK,IAAI,SAAS,iBAAiB,QAAQ;AACpD;AAKA,SAAS,MAAM,IAA2B;AACxC,SAAO,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,EAAE,CAAC;AACzD;AAKA,eAAe,mBACb,UACA,WACY;AACZ,MAAI;AACJ,QAAM,kBAAkB,IAAI,gBAAgB;AAE5C,QAAM,iBAAiB,IAAI,QAAe,CAAC,GAAG,WAAW;AACvD,gBAAY,WAAW,MAAM;AAC3B,sBAAgB,MAAM;AACtB,aAAO,IAAI,MAAM,oCAAoC,SAAS,IAAI,CAAC;AAAA,IACrE,GAAG,SAAS;AAAA,EACd,CAAC;AAED,MAAI;AACF,WAAO,MAAM,QAAQ,KAAK,CAAC,SAAS,gBAAgB,MAAM,GAAG,cAAc,CAAC;AAAA,EAC9E,UAAE;AACA,iBAAa,SAAU;AAAA,EACzB;AACF;",
   "names": []
 }

package/dist/modules/workflows/widgets/injection/order-approval/context-keys.js

@@ -0,0 +1,10 @@
+const ORDER_APPROVAL_CONTEXT_KEYS = [
+  "orderId",
+  "pendingApprovalStatusId",
+  "approvedStatusId",
+  "rejectedStatusId"
+];
+export {
+  ORDER_APPROVAL_CONTEXT_KEYS
+};
+//# sourceMappingURL=context-keys.js.map

package/dist/modules/workflows/widgets/injection/order-approval/context-keys.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/workflows/widgets/injection/order-approval/context-keys.ts"],
+  "sourcesContent": ["/**\n * The context keys the order-approval widget seeds when it starts the\n * `sales.order-approval` workflow. The workflow definition interpolates\n * `{{context.<key>}}` against exactly this set, and `interpolateVariables()`\n * silently returns the original string when a key is missing \u2014 so the two must\n * not drift. Both the widget and the contract test import this list, which is\n * what makes the drift a type error rather than a runtime surprise (issue #4334).\n */\nexport const ORDER_APPROVAL_CONTEXT_KEYS = [\n  'orderId',\n  'pendingApprovalStatusId',\n  'approvedStatusId',\n  'rejectedStatusId',\n] as const\n\nexport type OrderApprovalContextKey = (typeof ORDER_APPROVAL_CONTEXT_KEYS)[number]\n\nexport type OrderApprovalInitialContext = Record<OrderApprovalContextKey, string>\n"],
+  "mappings": "AAQO,MAAM,8BAA8B;AAAA,EACzC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;",
+  "names": []
+}

package/dist/modules/workflows/widgets/injection/order-approval/widget.client.js

@@ -129,19 +129,23 @@ function OrderApprovalWidget({ data }) {
       const pendingApprovalStatusId = findStatusId("pending_approval");
       const approvedStatusId = findStatusId("approved");
       const rejectedStatusId = findStatusId("rejected");
+      if (!orderId) {
+        throw new Error(t("workflows.orderApproval.missingOrderId", "Cannot start the approval workflow before the order has loaded."));
+      }
       if (!pendingApprovalStatusId || !approvedStatusId || !rejectedStatusId) {
         throw new Error(t("workflows.orderApproval.missingStatuses", "Missing order status entries. Please ensure pending_approval, approved, and rejected statuses exist in the sales.order_status dictionary."));
       }
+      const initialContext = {
+        orderId,
+        pendingApprovalStatusId,
+        approvedStatusId,
+        rejectedStatusId
+      };
       const result = await apiCall("/api/workflows/instances", {
         method: "POST",
         body: JSON.stringify({
           workflowId: WORKFLOW_ID,
-          initialContext: {
-            orderId,
-            pendingApprovalStatusId,
-            approvedStatusId,
-            rejectedStatusId
-          },
+          initialContext,
           metadata: {
             entityType: "SalesOrder",
             entityId: orderId

package/dist/modules/workflows/widgets/injection/order-approval/widget.client.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/workflows/widgets/injection/order-approval/widget.client.tsx"],
-  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport type { InjectionWidgetComponentProps } from '@open-mercato/shared/modules/widgets/injection'\nimport { useQuery, useMutation, useQueryClient } from '@tanstack/react-query'\nimport { apiCall } from '@open-mercato/ui/backend/utils/apiCall'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { Spinner } from '@open-mercato/ui/primitives/spinner'\nimport { Textarea } from '@open-mercato/ui/primitives/textarea'\nimport { Badge } from '@open-mercato/ui/primitives/badge'\nimport { emitSalesDocumentDataRefresh } from '@open-mercato/core/modules/sales/lib/frontend/documentDataEvents'\nimport { fetchAllDictionaryEntries } from '@open-mercato/core/modules/dictionaries/lib/fetchAllEntries'\n\ntype OrderRecord = {\n  id: string\n  orderNumber?: string\n  status?: string\n  statusEntryId?: string\n}\n\ntype WorkflowInstance = {\n  id: string\n  workflowId: string\n  status: 'RUNNING' | 'PAUSED' | 'COMPLETED' | 'FAILED' | 'CANCELLED' | 'WAITING_FOR_ACTIVITIES'\n  currentStepId: string\n  context: Record<string, any>\n}\n\ntype UserTask = {\n  id: string\n  taskName: string\n  status: 'PENDING' | 'IN_PROGRESS' | 'COMPLETED' | 'CANCELLED'\n  workflowInstanceId: string\n  claimedBy: string | null\n}\n\ntype DictionaryEntry = {\n  id: string\n  value: string\n  label: string\n  color?: string\n  icon?: string\n}\n\nconst WORKFLOW_ID = 'sales.order-approval'\n\nexport default function OrderApprovalWidget({ data }: InjectionWidgetComponentProps<unknown, OrderRecord>) {\n  const t = useT()\n  const queryClient = useQueryClient()\n  const orderId = data?.id\n\n  const [decision, setDecision] = React.useState<'approve' | 'reject' | ''>('')\n  const [comments, setComments] = React.useState('')\n  const [error, setError] = React.useState<string | null>(null)\n\n  // Track if we're waiting for workflow to process (for polling)\n  const [isWaitingForProcessing, setIsWaitingForProcessing] = React.useState(false)\n\n  // Fetch current order status directly (to detect when workflow updates it)\n  // Use list endpoint with ID filter since single-item endpoint doesn't exist\n  const { data: orderData } = useQuery({\n    queryKey: ['order-status', orderId],\n    queryFn: async () => {\n      if (!orderId) return null\n      const result = await apiCall<{ items: Array<{ id: string; status?: string | null }> }>(\n        `/api/sales/orders?id=${orderId}&pageSize=1`\n      )\n      return result.ok && result.result?.items?.[0] ? result.result.items[0] : null\n    },\n    enabled: Boolean(orderId),\n    staleTime: 5_000,\n    // Poll when waiting for processing to detect status change\n    refetchInterval: isWaitingForProcessing ? 2_000 : false,\n  })\n\n  // Use fresh order status from query, fallback to prop data\n  // The API returns status as a string value (e.g., \"approved\", \"pending_approval\")\n  const currentOrderStatus = orderData?.status || data?.status\n\n  // Fetch active workflow instances for this order\n  const { data: instancesData, isLoading: instancesLoading } = useQuery({\n    queryKey: ['workflow-instances', orderId],\n    queryFn: async () => {\n      if (!orderId) return { data: [] }\n      const result = await apiCall<{ data: WorkflowInstance[] }>(\n        `/api/workflows/instances?entityId=${orderId}&status=RUNNING,PAUSED,WAITING_FOR_ACTIVITIES`\n      )\n      return result.ok ? result.result : { data: [] }\n    },\n    enabled: Boolean(orderId),\n    staleTime: 5_000,\n    // Poll every 2 seconds when waiting for processing\n    refetchInterval: isWaitingForProcessing ? 2_000 : false,\n  })\n\n  const activeInstance = instancesData?.data?.find(\n    (inst) => inst.workflowId === WORKFLOW_ID && !['COMPLETED', 'FAILED', 'CANCELLED'].includes(inst.status)\n  )\n\n  // Fetch pending user tasks for active instance\n  const { data: tasksData, isLoading: tasksLoading } = useQuery({\n    queryKey: ['workflow-tasks', activeInstance?.id],\n    queryFn: async () => {\n      if (!activeInstance?.id) return { data: [] }\n      const result = await apiCall<{ data: UserTask[] }>(\n        `/api/workflows/tasks?workflowInstanceId=${activeInstance.id}&status=PENDING,IN_PROGRESS`\n      )\n      return result.ok ? result.result : { data: [] }\n    },\n    enabled: Boolean(activeInstance?.id),\n    staleTime: 5_000,\n    // Poll every 2 seconds when waiting for processing\n    refetchInterval: isWaitingForProcessing ? 2_000 : false,\n  })\n\n  const pendingTask = tasksData?.data?.[0]\n\n  // Auto-detect when workflow is processing (active instance but no pending task)\n  const isProcessing = activeInstance && !pendingTask && !['COMPLETED', 'FAILED', 'CANCELLED'].includes(activeInstance.status)\n\n  // Track previous status to detect changes\n  const prevStatusRef = React.useRef<string | undefined>(data?.status)\n\n  // Update polling state when processing state changes\n  React.useEffect(() => {\n    if (isProcessing) {\n      setIsWaitingForProcessing(true)\n    } else if (!activeInstance || activeInstance.status === 'COMPLETED') {\n      setIsWaitingForProcessing(false)\n    }\n  }, [isProcessing, activeInstance])\n\n  // When order status changes, emit refresh event to update the page\n  React.useEffect(() => {\n    const newStatus = orderData?.status\n    const oldStatus = prevStatusRef.current\n\n    if (newStatus && oldStatus && newStatus !== oldStatus) {\n      // Status changed - emit document refresh event to reload the page data\n      if (orderId) {\n        emitSalesDocumentDataRefresh({ documentId: orderId, kind: 'order' })\n      }\n    }\n\n    prevStatusRef.current = newStatus || oldStatus\n  }, [orderData?.status, orderId])\n\n  // First fetch dictionaries to find the order_status dictionary ID\n  const { data: dictionariesData } = useQuery({\n    queryKey: ['dictionaries'],\n    queryFn: async () => {\n      const result = await apiCall<{ items: Array<{ id: string; key: string }> }>(\n        '/api/dictionaries'\n      )\n      return result.ok ? result.result : { items: [] }\n    },\n    staleTime: 60_000,\n  })\n\n  const orderStatusDictionaryId = React.useMemo(() => {\n    const dict = dictionariesData?.items?.find(d => d.key === 'sales.order_status')\n    return dict?.id\n  }, [dictionariesData])\n\n  // Fetch order status dictionary entries using the dictionary ID\n  const { data: statusEntriesData } = useQuery({\n    queryKey: ['dictionary-entries', orderStatusDictionaryId],\n    queryFn: async (): Promise<{ items: DictionaryEntry[] }> => {\n      if (!orderStatusDictionaryId) return { items: [] }\n      const result = await fetchAllDictionaryEntries(orderStatusDictionaryId)\n      if (!result.ok) return { items: [] }\n      const items = result.items.flatMap((entry) => {\n        const id = typeof entry.id === 'string' ? entry.id : null\n        const value = typeof entry.value === 'string' ? entry.value : null\n        if (!id || !value) return []\n        const label = typeof entry.label === 'string' && entry.label.trim().length ? entry.label : value\n        return [{ id, value, label }]\n      })\n      return { items }\n    },\n    enabled: Boolean(orderStatusDictionaryId),\n    staleTime: 60_000,\n  })\n\n  const findStatusId = React.useCallback((code: string) => {\n    const entries = statusEntriesData?.items || []\n    // The API returns 'value' as the code/key for dictionary entries\n    const entry = entries.find(\n      (e) => e.value === code || e.label?.toLowerCase() === code.toLowerCase()\n    )\n    return entry?.id\n  }, [statusEntriesData])\n\n  // Start workflow mutation\n  const startWorkflowMutation = useMutation({\n    mutationFn: async () => {\n      const pendingApprovalStatusId = findStatusId('pending_approval')\n      const approvedStatusId = findStatusId('approved')\n      const rejectedStatusId = findStatusId('rejected')\n\n      if (!pendingApprovalStatusId || !approvedStatusId || !rejectedStatusId) {\n        throw new Error(t('workflows.orderApproval.missingStatuses', 'Missing order status entries. Please ensure pending_approval, approved, and rejected statuses exist in the sales.order_status dictionary.'))\n      }\n\n      const result = await apiCall<{ data: WorkflowInstance }>('/api/workflows/instances', {\n        method: 'POST',\n        body: JSON.stringify({\n          workflowId: WORKFLOW_ID,\n          initialContext: {\n            orderId,\n            pendingApprovalStatusId,\n            approvedStatusId,\n            rejectedStatusId,\n          },\n          metadata: {\n            entityType: 'SalesOrder',\n            entityId: orderId,\n          },\n        }),\n      })\n\n      if (!result.ok) {\n        const errorResult = result.result as { error?: string } | null\n        throw new Error(errorResult?.error || t('workflows.orderApproval.startError', 'Failed to start approval workflow'))\n      }\n\n      return result.result\n    },\n    onSuccess: () => {\n      setError(null)\n      queryClient.invalidateQueries({ queryKey: ['workflow-instances', orderId] })\n    },\n    onError: (err: Error) => {\n      setError(err.message)\n    },\n  })\n\n  // Complete task mutation\n  const completeTaskMutation = useMutation({\n    mutationFn: async ({ taskId, formData }: { taskId: string; formData: { decision: string; comments?: string } }) => {\n      const result = await apiCall(`/api/workflows/tasks/${taskId}/complete`, {\n        method: 'POST',\n        body: JSON.stringify({ formData }),\n      })\n\n      if (!result.ok) {\n        const errorResult = result.result as { error?: string } | null\n        throw new Error(errorResult?.error || t('workflows.orderApproval.completeError', 'Failed to complete approval task'))\n      }\n\n      return result.result\n    },\n    onSuccess: () => {\n      setError(null)\n      setDecision('')\n      setComments('')\n      // Start polling immediately after submitting decision\n      setIsWaitingForProcessing(true)\n      queryClient.invalidateQueries({ queryKey: ['workflow-instances', orderId] })\n      queryClient.invalidateQueries({ queryKey: ['workflow-tasks', activeInstance?.id] })\n      // Also refresh the order data\n      queryClient.invalidateQueries({ queryKey: ['sales-order', orderId] })\n    },\n    onError: (err: Error) => {\n      setError(err.message)\n    },\n  })\n\n  const handleStartWorkflow = () => {\n    // Start polling after starting workflow\n    setIsWaitingForProcessing(true)\n    startWorkflowMutation.mutate()\n  }\n\n  const handleCompleteTask = () => {\n    if (!pendingTask || !decision) return\n    completeTaskMutation.mutate({\n      taskId: pendingTask.id,\n      formData: { decision, comments },\n    })\n  }\n\n  // Handle keyboard shortcuts (Cmd/Ctrl+Enter to submit)\n  const handleKeyDown = (e: React.KeyboardEvent) => {\n    if ((e.metaKey || e.ctrlKey) && e.key === 'Enter') {\n      e.preventDefault()\n      if (pendingTask && decision && !isSubmitting) {\n        handleCompleteTask()\n      }\n    }\n  }\n\n  const isLoading = instancesLoading || tasksLoading\n  const isSubmitting = startWorkflowMutation.isPending || completeTaskMutation.isPending\n\n  // Don't render if no orderId\n  if (!orderId) return null\n\n  // Only show widget when order status is pending_approval\n  const orderStatus = currentOrderStatus?.toLowerCase()\n  if (orderStatus !== 'pending_approval') {\n    return null\n  }\n\n  // Loading state\n  if (isLoading) {\n    return (\n      <div className=\"flex items-center justify-center p-4\">\n        <Spinner size=\"sm\" />\n        <span className=\"ml-2 text-sm text-muted-foreground\">{t('common.loading', 'Loading...')}</span>\n      </div>\n    )\n  }\n\n  // Show workflow status badge\n  const getStatusBadge = () => {\n    if (!activeInstance) return null\n\n    const statusVariants: Record<string, 'default' | 'secondary' | 'destructive' | 'outline'> = {\n      RUNNING: 'default',\n      PAUSED: 'secondary',\n      WAITING_FOR_ACTIVITIES: 'secondary',\n      COMPLETED: 'default',\n      FAILED: 'destructive',\n      CANCELLED: 'outline',\n    }\n\n    return (\n      <Badge variant={statusVariants[activeInstance.status] || 'outline'}>\n        {t(`workflows.instances.statuses.${activeInstance.status}`, activeInstance.status)}\n      </Badge>\n    )\n  }\n\n  return (\n    <div className=\"space-y-3 rounded-lg border bg-card p-4 shadow-sm\">\n      <div className=\"flex items-start justify-between gap-3\">\n        <div>\n          <div className=\"text-sm font-semibold text-foreground\">\n            {t('workflows.orderApproval.groupLabel', 'Order Approval')}\n          </div>\n          <p className=\"text-xs text-muted-foreground\">\n            {t('workflows.orderApproval.groupDescription', 'Review and approve or reject this order')}\n          </p>\n        </div>\n        {getStatusBadge()}\n      </div>\n\n      {error && (\n        <div className=\"rounded-md border border-red-200 bg-red-50 p-3 text-xs text-red-800\">\n          {error}\n        </div>\n      )}\n\n      {/* No active workflow - show request approval button */}\n      {!activeInstance && (\n        <div className=\"space-y-3\">\n          <p className=\"text-sm text-muted-foreground\">\n            {t('workflows.orderApproval.noWorkflowActive', 'No approval workflow is active for this order.')}\n          </p>\n          <Button\n            onClick={handleStartWorkflow}\n            disabled={isSubmitting}\n            variant=\"default\"\n            size=\"sm\"\n          >\n            {isSubmitting && <Spinner size=\"sm\" className=\"mr-2\" />}\n            {t('workflows.orderApproval.requestApproval', 'Request Approval')}\n          </Button>\n        </div>\n      )}\n\n      {/* Active workflow with pending task - show approve/reject UI */}\n      {activeInstance && pendingTask && (\n        <div className=\"space-y-3\" onKeyDown={handleKeyDown}>\n          <div className=\"rounded-md border border-amber-200 bg-amber-50 p-3\">\n            <p className=\"text-sm font-medium text-amber-800\">\n              {t('workflows.orderApproval.pendingTitle', 'Pending Approval')}\n            </p>\n            <p className=\"text-xs text-amber-700 mt-1\">\n              {t('workflows.orderApproval.pendingDescription', 'This order requires approval before processing.')}\n            </p>\n          </div>\n\n          <div className=\"space-y-2\">\n            <label className=\"text-sm font-medium\">\n              {t('workflows.orderApproval.decisionLabel', 'Decision')}\n            </label>\n            <div className=\"flex gap-2\">\n              <Button\n                variant={decision === 'approve' ? 'default' : 'outline'}\n                size=\"sm\"\n                onClick={() => setDecision('approve')}\n                className={decision === 'approve' ? 'bg-emerald-600 hover:bg-emerald-700' : ''}\n              >\n                {t('workflows.orderApproval.approveButton', 'Approve')}\n              </Button>\n              <Button\n                variant={decision === 'reject' ? 'destructive' : 'outline'}\n                size=\"sm\"\n                onClick={() => setDecision('reject')}\n              >\n                {t('workflows.orderApproval.rejectButton', 'Reject')}\n              </Button>\n            </div>\n          </div>\n\n          <div className=\"space-y-2\">\n            <label className=\"text-sm font-medium\">\n              {t('workflows.orderApproval.commentsLabel', 'Comments')} <span className=\"text-muted-foreground font-normal\">({t('common.optional', 'optional')})</span>\n            </label>\n            <Textarea\n              value={comments}\n              onChange={(e) => setComments(e.target.value)}\n              placeholder={t('workflows.orderApproval.commentsPlaceholder', 'Add optional comments...')}\n              rows={2}\n            />\n          </div>\n\n          <Button\n            onClick={handleCompleteTask}\n            disabled={!decision || isSubmitting}\n            variant=\"default\"\n            size=\"sm\"\n            className=\"w-full\"\n          >\n            {isSubmitting && <Spinner size=\"sm\" className=\"mr-2\" />}\n            {t('workflows.orderApproval.submitDecision', 'Submit Decision')}\n          </Button>\n        </div>\n      )}\n\n      {/* Active workflow but no pending task (processing) */}\n      {activeInstance && !pendingTask && activeInstance.status !== 'COMPLETED' && (\n        <div className=\"rounded-md border border-blue-200 bg-blue-50 p-3\">\n          <p className=\"text-sm text-blue-800\">\n            {t('workflows.orderApproval.processing', 'Workflow is processing...')}\n          </p>\n        </div>\n      )}\n\n      {/* Completed workflow */}\n      {activeInstance && activeInstance.status === 'COMPLETED' && (\n        <div className=\"rounded-md border border-emerald-200 bg-emerald-50 p-3\">\n          <p className=\"text-sm text-emerald-800\">\n            {t('workflows.orderApproval.completed', 'Approval workflow completed.')}\n          </p>\n        </div>\n      )}\n    </div>\n  )\n}\n"],
-  "mappings": ";AAoTM,SACE,KADF;AAlTN,YAAY,WAAW;AAEvB,SAAS,UAAU,aAAa,sBAAsB;AACtD,SAAS,eAAe;AACxB,SAAS,YAAY;AACrB,SAAS,cAAc;AACvB,SAAS,eAAe;AACxB,SAAS,gBAAgB;AACzB,SAAS,aAAa;AACtB,SAAS,oCAAoC;AAC7C,SAAS,iCAAiC;AAiC1C,MAAM,cAAc;AAEL,SAAR,oBAAqC,EAAE,KAAK,GAAwD;AACzG,QAAM,IAAI,KAAK;AACf,QAAM,cAAc,eAAe;AACnC,QAAM,UAAU,MAAM;AAEtB,QAAM,CAAC,UAAU,WAAW,IAAI,MAAM,SAAoC,EAAE;AAC5E,QAAM,CAAC,UAAU,WAAW,IAAI,MAAM,SAAS,EAAE;AACjD,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAwB,IAAI;AAG5D,QAAM,CAAC,wBAAwB,yBAAyB,IAAI,MAAM,SAAS,KAAK;AAIhF,QAAM,EAAE,MAAM,UAAU,IAAI,SAAS;AAAA,IACnC,UAAU,CAAC,gBAAgB,OAAO;AAAA,IAClC,SAAS,YAAY;AACnB,UAAI,CAAC,QAAS,QAAO;AACrB,YAAM,SAAS,MAAM;AAAA,QACnB,wBAAwB,OAAO;AAAA,MACjC;AACA,aAAO,OAAO,MAAM,OAAO,QAAQ,QAAQ,CAAC,IAAI,OAAO,OAAO,MAAM,CAAC,IAAI;AAAA,IAC3E;AAAA,IACA,SAAS,QAAQ,OAAO;AAAA,IACxB,WAAW;AAAA;AAAA,IAEX,iBAAiB,yBAAyB,MAAQ;AAAA,EACpD,CAAC;AAID,QAAM,qBAAqB,WAAW,UAAU,MAAM;AAGtD,QAAM,EAAE,MAAM,eAAe,WAAW,iBAAiB,IAAI,SAAS;AAAA,IACpE,UAAU,CAAC,sBAAsB,OAAO;AAAA,IACxC,SAAS,YAAY;AACnB,UAAI,CAAC,QAAS,QAAO,EAAE,MAAM,CAAC,EAAE;AAChC,YAAM,SAAS,MAAM;AAAA,QACnB,qCAAqC,OAAO;AAAA,MAC9C;AACA,aAAO,OAAO,KAAK,OAAO,SAAS,EAAE,MAAM,CAAC,EAAE;AAAA,IAChD;AAAA,IACA,SAAS,QAAQ,OAAO;AAAA,IACxB,WAAW;AAAA;AAAA,IAEX,iBAAiB,yBAAyB,MAAQ;AAAA,EACpD,CAAC;AAED,QAAM,iBAAiB,eAAe,MAAM;AAAA,IAC1C,CAAC,SAAS,KAAK,eAAe,eAAe,CAAC,CAAC,aAAa,UAAU,WAAW,EAAE,SAAS,KAAK,MAAM;AAAA,EACzG;AAGA,QAAM,EAAE,MAAM,WAAW,WAAW,aAAa,IAAI,SAAS;AAAA,IAC5D,UAAU,CAAC,kBAAkB,gBAAgB,EAAE;AAAA,IAC/C,SAAS,YAAY;AACnB,UAAI,CAAC,gBAAgB,GAAI,QAAO,EAAE,MAAM,CAAC,EAAE;AAC3C,YAAM,SAAS,MAAM;AAAA,QACnB,2CAA2C,eAAe,EAAE;AAAA,MAC9D;AACA,aAAO,OAAO,KAAK,OAAO,SAAS,EAAE,MAAM,CAAC,EAAE;AAAA,IAChD;AAAA,IACA,SAAS,QAAQ,gBAAgB,EAAE;AAAA,IACnC,WAAW;AAAA;AAAA,IAEX,iBAAiB,yBAAyB,MAAQ;AAAA,EACpD,CAAC;AAED,QAAM,cAAc,WAAW,OAAO,CAAC;AAGvC,QAAM,eAAe,kBAAkB,CAAC,eAAe,CAAC,CAAC,aAAa,UAAU,WAAW,EAAE,SAAS,eAAe,MAAM;AAG3H,QAAM,gBAAgB,MAAM,OAA2B,MAAM,MAAM;AAGnE,QAAM,UAAU,MAAM;AACpB,QAAI,cAAc;AAChB,gCAA0B,IAAI;AAAA,IAChC,WAAW,CAAC,kBAAkB,eAAe,WAAW,aAAa;AACnE,gCAA0B,KAAK;AAAA,IACjC;AAAA,EACF,GAAG,CAAC,cAAc,cAAc,CAAC;AAGjC,QAAM,UAAU,MAAM;AACpB,UAAM,YAAY,WAAW;AAC7B,UAAM,YAAY,cAAc;AAEhC,QAAI,aAAa,aAAa,cAAc,WAAW;AAErD,UAAI,SAAS;AACX,qCAA6B,EAAE,YAAY,SAAS,MAAM,QAAQ,CAAC;AAAA,MACrE;AAAA,IACF;AAEA,kBAAc,UAAU,aAAa;AAAA,EACvC,GAAG,CAAC,WAAW,QAAQ,OAAO,CAAC;AAG/B,QAAM,EAAE,MAAM,iBAAiB,IAAI,SAAS;AAAA,IAC1C,UAAU,CAAC,cAAc;AAAA,IACzB,SAAS,YAAY;AACnB,YAAM,SAAS,MAAM;AAAA,QACnB;AAAA,MACF;AACA,aAAO,OAAO,KAAK,OAAO,SAAS,EAAE,OAAO,CAAC,EAAE;AAAA,IACjD;AAAA,IACA,WAAW;AAAA,EACb,CAAC;AAED,QAAM,0BAA0B,MAAM,QAAQ,MAAM;AAClD,UAAM,OAAO,kBAAkB,OAAO,KAAK,OAAK,EAAE,QAAQ,oBAAoB;AAC9E,WAAO,MAAM;AAAA,EACf,GAAG,CAAC,gBAAgB,CAAC;AAGrB,QAAM,EAAE,MAAM,kBAAkB,IAAI,SAAS;AAAA,IAC3C,UAAU,CAAC,sBAAsB,uBAAuB;AAAA,IACxD,SAAS,YAAmD;AAC1D,UAAI,CAAC,wBAAyB,QAAO,EAAE,OAAO,CAAC,EAAE;AACjD,YAAM,SAAS,MAAM,0BAA0B,uBAAuB;AACtE,UAAI,CAAC,OAAO,GAAI,QAAO,EAAE,OAAO,CAAC,EAAE;AACnC,YAAM,QAAQ,OAAO,MAAM,QAAQ,CAAC,UAAU;AAC5C,cAAM,KAAK,OAAO,MAAM,OAAO,WAAW,MAAM,KAAK;AACrD,cAAM,QAAQ,OAAO,MAAM,UAAU,WAAW,MAAM,QAAQ;AAC9D,YAAI,CAAC,MAAM,CAAC,MAAO,QAAO,CAAC;AAC3B,cAAM,QAAQ,OAAO,MAAM,UAAU,YAAY,MAAM,MAAM,KAAK,EAAE,SAAS,MAAM,QAAQ;AAC3F,eAAO,CAAC,EAAE,IAAI,OAAO,MAAM,CAAC;AAAA,MAC9B,CAAC;AACD,aAAO,EAAE,MAAM;AAAA,IACjB;AAAA,IACA,SAAS,QAAQ,uBAAuB;AAAA,IACxC,WAAW;AAAA,EACb,CAAC;AAED,QAAM,eAAe,MAAM,YAAY,CAAC,SAAiB;AACvD,UAAM,UAAU,mBAAmB,SAAS,CAAC;AAE7C,UAAM,QAAQ,QAAQ;AAAA,MACpB,CAAC,MAAM,EAAE,UAAU,QAAQ,EAAE,OAAO,YAAY,MAAM,KAAK,YAAY;AAAA,IACzE;AACA,WAAO,OAAO;AAAA,EAChB,GAAG,CAAC,iBAAiB,CAAC;AAGtB,QAAM,wBAAwB,YAAY;AAAA,IACxC,YAAY,YAAY;AACtB,YAAM,0BAA0B,aAAa,kBAAkB;AAC/D,YAAM,mBAAmB,aAAa,UAAU;AAChD,YAAM,mBAAmB,aAAa,UAAU;AAEhD,UAAI,CAAC,2BAA2B,CAAC,oBAAoB,CAAC,kBAAkB;AACtE,cAAM,IAAI,MAAM,EAAE,2CAA2C,2IAA2I,CAAC;AAAA,MAC3M;AAEA,YAAM,SAAS,MAAM,QAAoC,4BAA4B;AAAA,QACnF,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU;AAAA,UACnB,YAAY;AAAA,UACZ,gBAAgB;AAAA,YACd;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,UACF;AAAA,UACA,UAAU;AAAA,YACR,YAAY;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF,CAAC;AAAA,MACH,CAAC;AAED,UAAI,CAAC,OAAO,IAAI;AACd,cAAM,cAAc,OAAO;AAC3B,cAAM,IAAI,MAAM,aAAa,SAAS,EAAE,sCAAsC,mCAAmC,CAAC;AAAA,MACpH;AAEA,aAAO,OAAO;AAAA,IAChB;AAAA,IACA,WAAW,MAAM;AACf,eAAS,IAAI;AACb,kBAAY,kBAAkB,EAAE,UAAU,CAAC,sBAAsB,OAAO,EAAE,CAAC;AAAA,IAC7E;AAAA,IACA,SAAS,CAAC,QAAe;AACvB,eAAS,IAAI,OAAO;AAAA,IACtB;AAAA,EACF,CAAC;AAGD,QAAM,uBAAuB,YAAY;AAAA,IACvC,YAAY,OAAO,EAAE,QAAQ,SAAS,MAA6E;AACjH,YAAM,SAAS,MAAM,QAAQ,wBAAwB,MAAM,aAAa;AAAA,QACtE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,EAAE,SAAS,CAAC;AAAA,MACnC,CAAC;AAED,UAAI,CAAC,OAAO,IAAI;AACd,cAAM,cAAc,OAAO;AAC3B,cAAM,IAAI,MAAM,aAAa,SAAS,EAAE,yCAAyC,kCAAkC,CAAC;AAAA,MACtH;AAEA,aAAO,OAAO;AAAA,IAChB;AAAA,IACA,WAAW,MAAM;AACf,eAAS,IAAI;AACb,kBAAY,EAAE;AACd,kBAAY,EAAE;AAEd,gCAA0B,IAAI;AAC9B,kBAAY,kBAAkB,EAAE,UAAU,CAAC,sBAAsB,OAAO,EAAE,CAAC;AAC3E,kBAAY,kBAAkB,EAAE,UAAU,CAAC,kBAAkB,gBAAgB,EAAE,EAAE,CAAC;AAElF,kBAAY,kBAAkB,EAAE,UAAU,CAAC,eAAe,OAAO,EAAE,CAAC;AAAA,IACtE;AAAA,IACA,SAAS,CAAC,QAAe;AACvB,eAAS,IAAI,OAAO;AAAA,IACtB;AAAA,EACF,CAAC;AAED,QAAM,sBAAsB,MAAM;AAEhC,8BAA0B,IAAI;AAC9B,0BAAsB,OAAO;AAAA,EAC/B;AAEA,QAAM,qBAAqB,MAAM;AAC/B,QAAI,CAAC,eAAe,CAAC,SAAU;AAC/B,yBAAqB,OAAO;AAAA,MAC1B,QAAQ,YAAY;AAAA,MACpB,UAAU,EAAE,UAAU,SAAS;AAAA,IACjC,CAAC;AAAA,EACH;AAGA,QAAM,gBAAgB,CAAC,MAA2B;AAChD,SAAK,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,SAAS;AACjD,QAAE,eAAe;AACjB,UAAI,eAAe,YAAY,CAAC,cAAc;AAC5C,2BAAmB;AAAA,MACrB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,YAAY,oBAAoB;AACtC,QAAM,eAAe,sBAAsB,aAAa,qBAAqB;AAG7E,MAAI,CAAC,QAAS,QAAO;AAGrB,QAAM,cAAc,oBAAoB,YAAY;AACpD,MAAI,gBAAgB,oBAAoB;AACtC,WAAO;AAAA,EACT;AAGA,MAAI,WAAW;AACb,WACE,qBAAC,SAAI,WAAU,wCACb;AAAA,0BAAC,WAAQ,MAAK,MAAK;AAAA,MACnB,oBAAC,UAAK,WAAU,sCAAsC,YAAE,kBAAkB,YAAY,GAAE;AAAA,OAC1F;AAAA,EAEJ;AAGA,QAAM,iBAAiB,MAAM;AAC3B,QAAI,CAAC,eAAgB,QAAO;AAE5B,UAAM,iBAAsF;AAAA,MAC1F,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,wBAAwB;AAAA,MACxB,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,WAAW;AAAA,IACb;AAEA,WACE,oBAAC,SAAM,SAAS,eAAe,eAAe,MAAM,KAAK,WACtD,YAAE,gCAAgC,eAAe,MAAM,IAAI,eAAe,MAAM,GACnF;AAAA,EAEJ;AAEA,SACE,qBAAC,SAAI,WAAU,qDACb;AAAA,yBAAC,SAAI,WAAU,0CACb;AAAA,2BAAC,SACC;AAAA,4BAAC,SAAI,WAAU,yCACZ,YAAE,sCAAsC,gBAAgB,GAC3D;AAAA,QACA,oBAAC,OAAE,WAAU,iCACV,YAAE,4CAA4C,yCAAyC,GAC1F;AAAA,SACF;AAAA,MACC,eAAe;AAAA,OAClB;AAAA,IAEC,SACC,oBAAC,SAAI,WAAU,uEACZ,iBACH;AAAA,IAID,CAAC,kBACA,qBAAC,SAAI,WAAU,aACb;AAAA,0BAAC,OAAE,WAAU,iCACV,YAAE,4CAA4C,gDAAgD,GACjG;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,SAAS;AAAA,UACT,UAAU;AAAA,UACV,SAAQ;AAAA,UACR,MAAK;AAAA,UAEJ;AAAA,4BAAgB,oBAAC,WAAQ,MAAK,MAAK,WAAU,QAAO;AAAA,YACpD,EAAE,2CAA2C,kBAAkB;AAAA;AAAA;AAAA,MAClE;AAAA,OACF;AAAA,IAID,kBAAkB,eACjB,qBAAC,SAAI,WAAU,aAAY,WAAW,eACpC;AAAA,2BAAC,SAAI,WAAU,sDACb;AAAA,4BAAC,OAAE,WAAU,sCACV,YAAE,wCAAwC,kBAAkB,GAC/D;AAAA,QACA,oBAAC,OAAE,WAAU,+BACV,YAAE,8CAA8C,iDAAiD,GACpG;AAAA,SACF;AAAA,MAEA,qBAAC,SAAI,WAAU,aACb;AAAA,4BAAC,WAAM,WAAU,uBACd,YAAE,yCAAyC,UAAU,GACxD;AAAA,QACA,qBAAC,SAAI,WAAU,cACb;AAAA;AAAA,YAAC;AAAA;AAAA,cACC,SAAS,aAAa,YAAY,YAAY;AAAA,cAC9C,MAAK;AAAA,cACL,SAAS,MAAM,YAAY,SAAS;AAAA,cACpC,WAAW,aAAa,YAAY,wCAAwC;AAAA,cAE3E,YAAE,yCAAyC,SAAS;AAAA;AAAA,UACvD;AAAA,UACA;AAAA,YAAC;AAAA;AAAA,cACC,SAAS,aAAa,WAAW,gBAAgB;AAAA,cACjD,MAAK;AAAA,cACL,SAAS,MAAM,YAAY,QAAQ;AAAA,cAElC,YAAE,wCAAwC,QAAQ;AAAA;AAAA,UACrD;AAAA,WACF;AAAA,SACF;AAAA,MAEA,qBAAC,SAAI,WAAU,aACb;AAAA,6BAAC,WAAM,WAAU,uBACd;AAAA,YAAE,yCAAyC,UAAU;AAAA,UAAE;AAAA,UAAC,qBAAC,UAAK,WAAU,qCAAoC;AAAA;AAAA,YAAE,EAAE,mBAAmB,UAAU;AAAA,YAAE;AAAA,aAAC;AAAA,WACnJ;AAAA,QACA;AAAA,UAAC;AAAA;AAAA,YACC,OAAO;AAAA,YACP,UAAU,CAAC,MAAM,YAAY,EAAE,OAAO,KAAK;AAAA,YAC3C,aAAa,EAAE,+CAA+C,0BAA0B;AAAA,YACxF,MAAM;AAAA;AAAA,QACR;AAAA,SACF;AAAA,MAEA;AAAA,QAAC;AAAA;AAAA,UACC,SAAS;AAAA,UACT,UAAU,CAAC,YAAY;AAAA,UACvB,SAAQ;AAAA,UACR,MAAK;AAAA,UACL,WAAU;AAAA,UAET;AAAA,4BAAgB,oBAAC,WAAQ,MAAK,MAAK,WAAU,QAAO;AAAA,YACpD,EAAE,0CAA0C,iBAAiB;AAAA;AAAA;AAAA,MAChE;AAAA,OACF;AAAA,IAID,kBAAkB,CAAC,eAAe,eAAe,WAAW,eAC3D,oBAAC,SAAI,WAAU,oDACb,8BAAC,OAAE,WAAU,yBACV,YAAE,sCAAsC,2BAA2B,GACtE,GACF;AAAA,IAID,kBAAkB,eAAe,WAAW,eAC3C,oBAAC,SAAI,WAAU,0DACb,8BAAC,OAAE,WAAU,4BACV,YAAE,qCAAqC,8BAA8B,GACxE,GACF;AAAA,KAEJ;AAEJ;",
+  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport type { InjectionWidgetComponentProps } from '@open-mercato/shared/modules/widgets/injection'\nimport { useQuery, useMutation, useQueryClient } from '@tanstack/react-query'\nimport { apiCall } from '@open-mercato/ui/backend/utils/apiCall'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { Spinner } from '@open-mercato/ui/primitives/spinner'\nimport { Textarea } from '@open-mercato/ui/primitives/textarea'\nimport { Badge } from '@open-mercato/ui/primitives/badge'\nimport { emitSalesDocumentDataRefresh } from '@open-mercato/core/modules/sales/lib/frontend/documentDataEvents'\nimport { fetchAllDictionaryEntries } from '@open-mercato/core/modules/dictionaries/lib/fetchAllEntries'\nimport type { OrderApprovalInitialContext } from './context-keys'\n\ntype OrderRecord = {\n  id: string\n  orderNumber?: string\n  status?: string\n  statusEntryId?: string\n}\n\ntype WorkflowInstance = {\n  id: string\n  workflowId: string\n  status: 'RUNNING' | 'PAUSED' | 'COMPLETED' | 'FAILED' | 'CANCELLED' | 'WAITING_FOR_ACTIVITIES'\n  currentStepId: string\n  context: Record<string, any>\n}\n\ntype UserTask = {\n  id: string\n  taskName: string\n  status: 'PENDING' | 'IN_PROGRESS' | 'COMPLETED' | 'CANCELLED'\n  workflowInstanceId: string\n  claimedBy: string | null\n}\n\ntype DictionaryEntry = {\n  id: string\n  value: string\n  label: string\n  color?: string\n  icon?: string\n}\n\nconst WORKFLOW_ID = 'sales.order-approval'\n\nexport default function OrderApprovalWidget({ data }: InjectionWidgetComponentProps<unknown, OrderRecord>) {\n  const t = useT()\n  const queryClient = useQueryClient()\n  const orderId = data?.id\n\n  const [decision, setDecision] = React.useState<'approve' | 'reject' | ''>('')\n  const [comments, setComments] = React.useState('')\n  const [error, setError] = React.useState<string | null>(null)\n\n  // Track if we're waiting for workflow to process (for polling)\n  const [isWaitingForProcessing, setIsWaitingForProcessing] = React.useState(false)\n\n  // Fetch current order status directly (to detect when workflow updates it)\n  // Use list endpoint with ID filter since single-item endpoint doesn't exist\n  const { data: orderData } = useQuery({\n    queryKey: ['order-status', orderId],\n    queryFn: async () => {\n      if (!orderId) return null\n      const result = await apiCall<{ items: Array<{ id: string; status?: string | null }> }>(\n        `/api/sales/orders?id=${orderId}&pageSize=1`\n      )\n      return result.ok && result.result?.items?.[0] ? result.result.items[0] : null\n    },\n    enabled: Boolean(orderId),\n    staleTime: 5_000,\n    // Poll when waiting for processing to detect status change\n    refetchInterval: isWaitingForProcessing ? 2_000 : false,\n  })\n\n  // Use fresh order status from query, fallback to prop data\n  // The API returns status as a string value (e.g., \"approved\", \"pending_approval\")\n  const currentOrderStatus = orderData?.status || data?.status\n\n  // Fetch active workflow instances for this order\n  const { data: instancesData, isLoading: instancesLoading } = useQuery({\n    queryKey: ['workflow-instances', orderId],\n    queryFn: async () => {\n      if (!orderId) return { data: [] }\n      const result = await apiCall<{ data: WorkflowInstance[] }>(\n        `/api/workflows/instances?entityId=${orderId}&status=RUNNING,PAUSED,WAITING_FOR_ACTIVITIES`\n      )\n      return result.ok ? result.result : { data: [] }\n    },\n    enabled: Boolean(orderId),\n    staleTime: 5_000,\n    // Poll every 2 seconds when waiting for processing\n    refetchInterval: isWaitingForProcessing ? 2_000 : false,\n  })\n\n  const activeInstance = instancesData?.data?.find(\n    (inst) => inst.workflowId === WORKFLOW_ID && !['COMPLETED', 'FAILED', 'CANCELLED'].includes(inst.status)\n  )\n\n  // Fetch pending user tasks for active instance\n  const { data: tasksData, isLoading: tasksLoading } = useQuery({\n    queryKey: ['workflow-tasks', activeInstance?.id],\n    queryFn: async () => {\n      if (!activeInstance?.id) return { data: [] }\n      const result = await apiCall<{ data: UserTask[] }>(\n        `/api/workflows/tasks?workflowInstanceId=${activeInstance.id}&status=PENDING,IN_PROGRESS`\n      )\n      return result.ok ? result.result : { data: [] }\n    },\n    enabled: Boolean(activeInstance?.id),\n    staleTime: 5_000,\n    // Poll every 2 seconds when waiting for processing\n    refetchInterval: isWaitingForProcessing ? 2_000 : false,\n  })\n\n  const pendingTask = tasksData?.data?.[0]\n\n  // Auto-detect when workflow is processing (active instance but no pending task)\n  const isProcessing = activeInstance && !pendingTask && !['COMPLETED', 'FAILED', 'CANCELLED'].includes(activeInstance.status)\n\n  // Track previous status to detect changes\n  const prevStatusRef = React.useRef<string | undefined>(data?.status)\n\n  // Update polling state when processing state changes\n  React.useEffect(() => {\n    if (isProcessing) {\n      setIsWaitingForProcessing(true)\n    } else if (!activeInstance || activeInstance.status === 'COMPLETED') {\n      setIsWaitingForProcessing(false)\n    }\n  }, [isProcessing, activeInstance])\n\n  // When order status changes, emit refresh event to update the page\n  React.useEffect(() => {\n    const newStatus = orderData?.status\n    const oldStatus = prevStatusRef.current\n\n    if (newStatus && oldStatus && newStatus !== oldStatus) {\n      // Status changed - emit document refresh event to reload the page data\n      if (orderId) {\n        emitSalesDocumentDataRefresh({ documentId: orderId, kind: 'order' })\n      }\n    }\n\n    prevStatusRef.current = newStatus || oldStatus\n  }, [orderData?.status, orderId])\n\n  // First fetch dictionaries to find the order_status dictionary ID\n  const { data: dictionariesData } = useQuery({\n    queryKey: ['dictionaries'],\n    queryFn: async () => {\n      const result = await apiCall<{ items: Array<{ id: string; key: string }> }>(\n        '/api/dictionaries'\n      )\n      return result.ok ? result.result : { items: [] }\n    },\n    staleTime: 60_000,\n  })\n\n  const orderStatusDictionaryId = React.useMemo(() => {\n    const dict = dictionariesData?.items?.find(d => d.key === 'sales.order_status')\n    return dict?.id\n  }, [dictionariesData])\n\n  // Fetch order status dictionary entries using the dictionary ID\n  const { data: statusEntriesData } = useQuery({\n    queryKey: ['dictionary-entries', orderStatusDictionaryId],\n    queryFn: async (): Promise<{ items: DictionaryEntry[] }> => {\n      if (!orderStatusDictionaryId) return { items: [] }\n      const result = await fetchAllDictionaryEntries(orderStatusDictionaryId)\n      if (!result.ok) return { items: [] }\n      const items = result.items.flatMap((entry) => {\n        const id = typeof entry.id === 'string' ? entry.id : null\n        const value = typeof entry.value === 'string' ? entry.value : null\n        if (!id || !value) return []\n        const label = typeof entry.label === 'string' && entry.label.trim().length ? entry.label : value\n        return [{ id, value, label }]\n      })\n      return { items }\n    },\n    enabled: Boolean(orderStatusDictionaryId),\n    staleTime: 60_000,\n  })\n\n  const findStatusId = React.useCallback((code: string) => {\n    const entries = statusEntriesData?.items || []\n    // The API returns 'value' as the code/key for dictionary entries\n    const entry = entries.find(\n      (e) => e.value === code || e.label?.toLowerCase() === code.toLowerCase()\n    )\n    return entry?.id\n  }, [statusEntriesData])\n\n  // Start workflow mutation\n  const startWorkflowMutation = useMutation({\n    mutationFn: async () => {\n      const pendingApprovalStatusId = findStatusId('pending_approval')\n      const approvedStatusId = findStatusId('approved')\n      const rejectedStatusId = findStatusId('rejected')\n\n      if (!orderId) {\n        throw new Error(t('workflows.orderApproval.missingOrderId', 'Cannot start the approval workflow before the order has loaded.'))\n      }\n\n      if (!pendingApprovalStatusId || !approvedStatusId || !rejectedStatusId) {\n        throw new Error(t('workflows.orderApproval.missingStatuses', 'Missing order status entries. Please ensure pending_approval, approved, and rejected statuses exist in the sales.order_status dictionary.'))\n      }\n\n      // Typed against the shared key list so a definition that references a new\n      // {{context.*}} key cannot compile until this seed provides it.\n      const initialContext: OrderApprovalInitialContext = {\n        orderId,\n        pendingApprovalStatusId,\n        approvedStatusId,\n        rejectedStatusId,\n      }\n\n      const result = await apiCall<{ data: WorkflowInstance }>('/api/workflows/instances', {\n        method: 'POST',\n        body: JSON.stringify({\n          workflowId: WORKFLOW_ID,\n          initialContext,\n          metadata: {\n            entityType: 'SalesOrder',\n            entityId: orderId,\n          },\n        }),\n      })\n\n      if (!result.ok) {\n        const errorResult = result.result as { error?: string } | null\n        throw new Error(errorResult?.error || t('workflows.orderApproval.startError', 'Failed to start approval workflow'))\n      }\n\n      return result.result\n    },\n    onSuccess: () => {\n      setError(null)\n      queryClient.invalidateQueries({ queryKey: ['workflow-instances', orderId] })\n    },\n    onError: (err: Error) => {\n      setError(err.message)\n    },\n  })\n\n  // Complete task mutation\n  const completeTaskMutation = useMutation({\n    mutationFn: async ({ taskId, formData }: { taskId: string; formData: { decision: string; comments?: string } }) => {\n      const result = await apiCall(`/api/workflows/tasks/${taskId}/complete`, {\n        method: 'POST',\n        body: JSON.stringify({ formData }),\n      })\n\n      if (!result.ok) {\n        const errorResult = result.result as { error?: string } | null\n        throw new Error(errorResult?.error || t('workflows.orderApproval.completeError', 'Failed to complete approval task'))\n      }\n\n      return result.result\n    },\n    onSuccess: () => {\n      setError(null)\n      setDecision('')\n      setComments('')\n      // Start polling immediately after submitting decision\n      setIsWaitingForProcessing(true)\n      queryClient.invalidateQueries({ queryKey: ['workflow-instances', orderId] })\n      queryClient.invalidateQueries({ queryKey: ['workflow-tasks', activeInstance?.id] })\n      // Also refresh the order data\n      queryClient.invalidateQueries({ queryKey: ['sales-order', orderId] })\n    },\n    onError: (err: Error) => {\n      setError(err.message)\n    },\n  })\n\n  const handleStartWorkflow = () => {\n    // Start polling after starting workflow\n    setIsWaitingForProcessing(true)\n    startWorkflowMutation.mutate()\n  }\n\n  const handleCompleteTask = () => {\n    if (!pendingTask || !decision) return\n    completeTaskMutation.mutate({\n      taskId: pendingTask.id,\n      formData: { decision, comments },\n    })\n  }\n\n  // Handle keyboard shortcuts (Cmd/Ctrl+Enter to submit)\n  const handleKeyDown = (e: React.KeyboardEvent) => {\n    if ((e.metaKey || e.ctrlKey) && e.key === 'Enter') {\n      e.preventDefault()\n      if (pendingTask && decision && !isSubmitting) {\n        handleCompleteTask()\n      }\n    }\n  }\n\n  const isLoading = instancesLoading || tasksLoading\n  const isSubmitting = startWorkflowMutation.isPending || completeTaskMutation.isPending\n\n  // Don't render if no orderId\n  if (!orderId) return null\n\n  // Only show widget when order status is pending_approval\n  const orderStatus = currentOrderStatus?.toLowerCase()\n  if (orderStatus !== 'pending_approval') {\n    return null\n  }\n\n  // Loading state\n  if (isLoading) {\n    return (\n      <div className=\"flex items-center justify-center p-4\">\n        <Spinner size=\"sm\" />\n        <span className=\"ml-2 text-sm text-muted-foreground\">{t('common.loading', 'Loading...')}</span>\n      </div>\n    )\n  }\n\n  // Show workflow status badge\n  const getStatusBadge = () => {\n    if (!activeInstance) return null\n\n    const statusVariants: Record<string, 'default' | 'secondary' | 'destructive' | 'outline'> = {\n      RUNNING: 'default',\n      PAUSED: 'secondary',\n      WAITING_FOR_ACTIVITIES: 'secondary',\n      COMPLETED: 'default',\n      FAILED: 'destructive',\n      CANCELLED: 'outline',\n    }\n\n    return (\n      <Badge variant={statusVariants[activeInstance.status] || 'outline'}>\n        {t(`workflows.instances.statuses.${activeInstance.status}`, activeInstance.status)}\n      </Badge>\n    )\n  }\n\n  return (\n    <div className=\"space-y-3 rounded-lg border bg-card p-4 shadow-sm\">\n      <div className=\"flex items-start justify-between gap-3\">\n        <div>\n          <div className=\"text-sm font-semibold text-foreground\">\n            {t('workflows.orderApproval.groupLabel', 'Order Approval')}\n          </div>\n          <p className=\"text-xs text-muted-foreground\">\n            {t('workflows.orderApproval.groupDescription', 'Review and approve or reject this order')}\n          </p>\n        </div>\n        {getStatusBadge()}\n      </div>\n\n      {error && (\n        <div className=\"rounded-md border border-red-200 bg-red-50 p-3 text-xs text-red-800\">\n          {error}\n        </div>\n      )}\n\n      {/* No active workflow - show request approval button */}\n      {!activeInstance && (\n        <div className=\"space-y-3\">\n          <p className=\"text-sm text-muted-foreground\">\n            {t('workflows.orderApproval.noWorkflowActive', 'No approval workflow is active for this order.')}\n          </p>\n          <Button\n            onClick={handleStartWorkflow}\n            disabled={isSubmitting}\n            variant=\"default\"\n            size=\"sm\"\n          >\n            {isSubmitting && <Spinner size=\"sm\" className=\"mr-2\" />}\n            {t('workflows.orderApproval.requestApproval', 'Request Approval')}\n          </Button>\n        </div>\n      )}\n\n      {/* Active workflow with pending task - show approve/reject UI */}\n      {activeInstance && pendingTask && (\n        <div className=\"space-y-3\" onKeyDown={handleKeyDown}>\n          <div className=\"rounded-md border border-amber-200 bg-amber-50 p-3\">\n            <p className=\"text-sm font-medium text-amber-800\">\n              {t('workflows.orderApproval.pendingTitle', 'Pending Approval')}\n            </p>\n            <p className=\"text-xs text-amber-700 mt-1\">\n              {t('workflows.orderApproval.pendingDescription', 'This order requires approval before processing.')}\n            </p>\n          </div>\n\n          <div className=\"space-y-2\">\n            <label className=\"text-sm font-medium\">\n              {t('workflows.orderApproval.decisionLabel', 'Decision')}\n            </label>\n            <div className=\"flex gap-2\">\n              <Button\n                variant={decision === 'approve' ? 'default' : 'outline'}\n                size=\"sm\"\n                onClick={() => setDecision('approve')}\n                className={decision === 'approve' ? 'bg-emerald-600 hover:bg-emerald-700' : ''}\n              >\n                {t('workflows.orderApproval.approveButton', 'Approve')}\n              </Button>\n              <Button\n                variant={decision === 'reject' ? 'destructive' : 'outline'}\n                size=\"sm\"\n                onClick={() => setDecision('reject')}\n              >\n                {t('workflows.orderApproval.rejectButton', 'Reject')}\n              </Button>\n            </div>\n          </div>\n\n          <div className=\"space-y-2\">\n            <label className=\"text-sm font-medium\">\n              {t('workflows.orderApproval.commentsLabel', 'Comments')} <span className=\"text-muted-foreground font-normal\">({t('common.optional', 'optional')})</span>\n            </label>\n            <Textarea\n              value={comments}\n              onChange={(e) => setComments(e.target.value)}\n              placeholder={t('workflows.orderApproval.commentsPlaceholder', 'Add optional comments...')}\n              rows={2}\n            />\n          </div>\n\n          <Button\n            onClick={handleCompleteTask}\n            disabled={!decision || isSubmitting}\n            variant=\"default\"\n            size=\"sm\"\n            className=\"w-full\"\n          >\n            {isSubmitting && <Spinner size=\"sm\" className=\"mr-2\" />}\n            {t('workflows.orderApproval.submitDecision', 'Submit Decision')}\n          </Button>\n        </div>\n      )}\n\n      {/* Active workflow but no pending task (processing) */}\n      {activeInstance && !pendingTask && activeInstance.status !== 'COMPLETED' && (\n        <div className=\"rounded-md border border-blue-200 bg-blue-50 p-3\">\n          <p className=\"text-sm text-blue-800\">\n            {t('workflows.orderApproval.processing', 'Workflow is processing...')}\n          </p>\n        </div>\n      )}\n\n      {/* Completed workflow */}\n      {activeInstance && activeInstance.status === 'COMPLETED' && (\n        <div className=\"rounded-md border border-emerald-200 bg-emerald-50 p-3\">\n          <p className=\"text-sm text-emerald-800\">\n            {t('workflows.orderApproval.completed', 'Approval workflow completed.')}\n          </p>\n        </div>\n      )}\n    </div>\n  )\n}\n"],
+  "mappings": ";AA6TM,SACE,KADF;AA3TN,YAAY,WAAW;AAEvB,SAAS,UAAU,aAAa,sBAAsB;AACtD,SAAS,eAAe;AACxB,SAAS,YAAY;AACrB,SAAS,cAAc;AACvB,SAAS,eAAe;AACxB,SAAS,gBAAgB;AACzB,SAAS,aAAa;AACtB,SAAS,oCAAoC;AAC7C,SAAS,iCAAiC;AAkC1C,MAAM,cAAc;AAEL,SAAR,oBAAqC,EAAE,KAAK,GAAwD;AACzG,QAAM,IAAI,KAAK;AACf,QAAM,cAAc,eAAe;AACnC,QAAM,UAAU,MAAM;AAEtB,QAAM,CAAC,UAAU,WAAW,IAAI,MAAM,SAAoC,EAAE;AAC5E,QAAM,CAAC,UAAU,WAAW,IAAI,MAAM,SAAS,EAAE;AACjD,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAwB,IAAI;AAG5D,QAAM,CAAC,wBAAwB,yBAAyB,IAAI,MAAM,SAAS,KAAK;AAIhF,QAAM,EAAE,MAAM,UAAU,IAAI,SAAS;AAAA,IACnC,UAAU,CAAC,gBAAgB,OAAO;AAAA,IAClC,SAAS,YAAY;AACnB,UAAI,CAAC,QAAS,QAAO;AACrB,YAAM,SAAS,MAAM;AAAA,QACnB,wBAAwB,OAAO;AAAA,MACjC;AACA,aAAO,OAAO,MAAM,OAAO,QAAQ,QAAQ,CAAC,IAAI,OAAO,OAAO,MAAM,CAAC,IAAI;AAAA,IAC3E;AAAA,IACA,SAAS,QAAQ,OAAO;AAAA,IACxB,WAAW;AAAA;AAAA,IAEX,iBAAiB,yBAAyB,MAAQ;AAAA,EACpD,CAAC;AAID,QAAM,qBAAqB,WAAW,UAAU,MAAM;AAGtD,QAAM,EAAE,MAAM,eAAe,WAAW,iBAAiB,IAAI,SAAS;AAAA,IACpE,UAAU,CAAC,sBAAsB,OAAO;AAAA,IACxC,SAAS,YAAY;AACnB,UAAI,CAAC,QAAS,QAAO,EAAE,MAAM,CAAC,EAAE;AAChC,YAAM,SAAS,MAAM;AAAA,QACnB,qCAAqC,OAAO;AAAA,MAC9C;AACA,aAAO,OAAO,KAAK,OAAO,SAAS,EAAE,MAAM,CAAC,EAAE;AAAA,IAChD;AAAA,IACA,SAAS,QAAQ,OAAO;AAAA,IACxB,WAAW;AAAA;AAAA,IAEX,iBAAiB,yBAAyB,MAAQ;AAAA,EACpD,CAAC;AAED,QAAM,iBAAiB,eAAe,MAAM;AAAA,IAC1C,CAAC,SAAS,KAAK,eAAe,eAAe,CAAC,CAAC,aAAa,UAAU,WAAW,EAAE,SAAS,KAAK,MAAM;AAAA,EACzG;AAGA,QAAM,EAAE,MAAM,WAAW,WAAW,aAAa,IAAI,SAAS;AAAA,IAC5D,UAAU,CAAC,kBAAkB,gBAAgB,EAAE;AAAA,IAC/C,SAAS,YAAY;AACnB,UAAI,CAAC,gBAAgB,GAAI,QAAO,EAAE,MAAM,CAAC,EAAE;AAC3C,YAAM,SAAS,MAAM;AAAA,QACnB,2CAA2C,eAAe,EAAE;AAAA,MAC9D;AACA,aAAO,OAAO,KAAK,OAAO,SAAS,EAAE,MAAM,CAAC,EAAE;AAAA,IAChD;AAAA,IACA,SAAS,QAAQ,gBAAgB,EAAE;AAAA,IACnC,WAAW;AAAA;AAAA,IAEX,iBAAiB,yBAAyB,MAAQ;AAAA,EACpD,CAAC;AAED,QAAM,cAAc,WAAW,OAAO,CAAC;AAGvC,QAAM,eAAe,kBAAkB,CAAC,eAAe,CAAC,CAAC,aAAa,UAAU,WAAW,EAAE,SAAS,eAAe,MAAM;AAG3H,QAAM,gBAAgB,MAAM,OAA2B,MAAM,MAAM;AAGnE,QAAM,UAAU,MAAM;AACpB,QAAI,cAAc;AAChB,gCAA0B,IAAI;AAAA,IAChC,WAAW,CAAC,kBAAkB,eAAe,WAAW,aAAa;AACnE,gCAA0B,KAAK;AAAA,IACjC;AAAA,EACF,GAAG,CAAC,cAAc,cAAc,CAAC;AAGjC,QAAM,UAAU,MAAM;AACpB,UAAM,YAAY,WAAW;AAC7B,UAAM,YAAY,cAAc;AAEhC,QAAI,aAAa,aAAa,cAAc,WAAW;AAErD,UAAI,SAAS;AACX,qCAA6B,EAAE,YAAY,SAAS,MAAM,QAAQ,CAAC;AAAA,MACrE;AAAA,IACF;AAEA,kBAAc,UAAU,aAAa;AAAA,EACvC,GAAG,CAAC,WAAW,QAAQ,OAAO,CAAC;AAG/B,QAAM,EAAE,MAAM,iBAAiB,IAAI,SAAS;AAAA,IAC1C,UAAU,CAAC,cAAc;AAAA,IACzB,SAAS,YAAY;AACnB,YAAM,SAAS,MAAM;AAAA,QACnB;AAAA,MACF;AACA,aAAO,OAAO,KAAK,OAAO,SAAS,EAAE,OAAO,CAAC,EAAE;AAAA,IACjD;AAAA,IACA,WAAW;AAAA,EACb,CAAC;AAED,QAAM,0BAA0B,MAAM,QAAQ,MAAM;AAClD,UAAM,OAAO,kBAAkB,OAAO,KAAK,OAAK,EAAE,QAAQ,oBAAoB;AAC9E,WAAO,MAAM;AAAA,EACf,GAAG,CAAC,gBAAgB,CAAC;AAGrB,QAAM,EAAE,MAAM,kBAAkB,IAAI,SAAS;AAAA,IAC3C,UAAU,CAAC,sBAAsB,uBAAuB;AAAA,IACxD,SAAS,YAAmD;AAC1D,UAAI,CAAC,wBAAyB,QAAO,EAAE,OAAO,CAAC,EAAE;AACjD,YAAM,SAAS,MAAM,0BAA0B,uBAAuB;AACtE,UAAI,CAAC,OAAO,GAAI,QAAO,EAAE,OAAO,CAAC,EAAE;AACnC,YAAM,QAAQ,OAAO,MAAM,QAAQ,CAAC,UAAU;AAC5C,cAAM,KAAK,OAAO,MAAM,OAAO,WAAW,MAAM,KAAK;AACrD,cAAM,QAAQ,OAAO,MAAM,UAAU,WAAW,MAAM,QAAQ;AAC9D,YAAI,CAAC,MAAM,CAAC,MAAO,QAAO,CAAC;AAC3B,cAAM,QAAQ,OAAO,MAAM,UAAU,YAAY,MAAM,MAAM,KAAK,EAAE,SAAS,MAAM,QAAQ;AAC3F,eAAO,CAAC,EAAE,IAAI,OAAO,MAAM,CAAC;AAAA,MAC9B,CAAC;AACD,aAAO,EAAE,MAAM;AAAA,IACjB;AAAA,IACA,SAAS,QAAQ,uBAAuB;AAAA,IACxC,WAAW;AAAA,EACb,CAAC;AAED,QAAM,eAAe,MAAM,YAAY,CAAC,SAAiB;AACvD,UAAM,UAAU,mBAAmB,SAAS,CAAC;AAE7C,UAAM,QAAQ,QAAQ;AAAA,MACpB,CAAC,MAAM,EAAE,UAAU,QAAQ,EAAE,OAAO,YAAY,MAAM,KAAK,YAAY;AAAA,IACzE;AACA,WAAO,OAAO;AAAA,EAChB,GAAG,CAAC,iBAAiB,CAAC;AAGtB,QAAM,wBAAwB,YAAY;AAAA,IACxC,YAAY,YAAY;AACtB,YAAM,0BAA0B,aAAa,kBAAkB;AAC/D,YAAM,mBAAmB,aAAa,UAAU;AAChD,YAAM,mBAAmB,aAAa,UAAU;AAEhD,UAAI,CAAC,SAAS;AACZ,cAAM,IAAI,MAAM,EAAE,0CAA0C,iEAAiE,CAAC;AAAA,MAChI;AAEA,UAAI,CAAC,2BAA2B,CAAC,oBAAoB,CAAC,kBAAkB;AACtE,cAAM,IAAI,MAAM,EAAE,2CAA2C,2IAA2I,CAAC;AAAA,MAC3M;AAIA,YAAM,iBAA8C;AAAA,QAClD;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAEA,YAAM,SAAS,MAAM,QAAoC,4BAA4B;AAAA,QACnF,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU;AAAA,UACnB,YAAY;AAAA,UACZ;AAAA,UACA,UAAU;AAAA,YACR,YAAY;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF,CAAC;AAAA,MACH,CAAC;AAED,UAAI,CAAC,OAAO,IAAI;AACd,cAAM,cAAc,OAAO;AAC3B,cAAM,IAAI,MAAM,aAAa,SAAS,EAAE,sCAAsC,mCAAmC,CAAC;AAAA,MACpH;AAEA,aAAO,OAAO;AAAA,IAChB;AAAA,IACA,WAAW,MAAM;AACf,eAAS,IAAI;AACb,kBAAY,kBAAkB,EAAE,UAAU,CAAC,sBAAsB,OAAO,EAAE,CAAC;AAAA,IAC7E;AAAA,IACA,SAAS,CAAC,QAAe;AACvB,eAAS,IAAI,OAAO;AAAA,IACtB;AAAA,EACF,CAAC;AAGD,QAAM,uBAAuB,YAAY;AAAA,IACvC,YAAY,OAAO,EAAE,QAAQ,SAAS,MAA6E;AACjH,YAAM,SAAS,MAAM,QAAQ,wBAAwB,MAAM,aAAa;AAAA,QACtE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,EAAE,SAAS,CAAC;AAAA,MACnC,CAAC;AAED,UAAI,CAAC,OAAO,IAAI;AACd,cAAM,cAAc,OAAO;AAC3B,cAAM,IAAI,MAAM,aAAa,SAAS,EAAE,yCAAyC,kCAAkC,CAAC;AAAA,MACtH;AAEA,aAAO,OAAO;AAAA,IAChB;AAAA,IACA,WAAW,MAAM;AACf,eAAS,IAAI;AACb,kBAAY,EAAE;AACd,kBAAY,EAAE;AAEd,gCAA0B,IAAI;AAC9B,kBAAY,kBAAkB,EAAE,UAAU,CAAC,sBAAsB,OAAO,EAAE,CAAC;AAC3E,kBAAY,kBAAkB,EAAE,UAAU,CAAC,kBAAkB,gBAAgB,EAAE,EAAE,CAAC;AAElF,kBAAY,kBAAkB,EAAE,UAAU,CAAC,eAAe,OAAO,EAAE,CAAC;AAAA,IACtE;AAAA,IACA,SAAS,CAAC,QAAe;AACvB,eAAS,IAAI,OAAO;AAAA,IACtB;AAAA,EACF,CAAC;AAED,QAAM,sBAAsB,MAAM;AAEhC,8BAA0B,IAAI;AAC9B,0BAAsB,OAAO;AAAA,EAC/B;AAEA,QAAM,qBAAqB,MAAM;AAC/B,QAAI,CAAC,eAAe,CAAC,SAAU;AAC/B,yBAAqB,OAAO;AAAA,MAC1B,QAAQ,YAAY;AAAA,MACpB,UAAU,EAAE,UAAU,SAAS;AAAA,IACjC,CAAC;AAAA,EACH;AAGA,QAAM,gBAAgB,CAAC,MAA2B;AAChD,SAAK,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,SAAS;AACjD,QAAE,eAAe;AACjB,UAAI,eAAe,YAAY,CAAC,cAAc;AAC5C,2BAAmB;AAAA,MACrB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,YAAY,oBAAoB;AACtC,QAAM,eAAe,sBAAsB,aAAa,qBAAqB;AAG7E,MAAI,CAAC,QAAS,QAAO;AAGrB,QAAM,cAAc,oBAAoB,YAAY;AACpD,MAAI,gBAAgB,oBAAoB;AACtC,WAAO;AAAA,EACT;AAGA,MAAI,WAAW;AACb,WACE,qBAAC,SAAI,WAAU,wCACb;AAAA,0BAAC,WAAQ,MAAK,MAAK;AAAA,MACnB,oBAAC,UAAK,WAAU,sCAAsC,YAAE,kBAAkB,YAAY,GAAE;AAAA,OAC1F;AAAA,EAEJ;AAGA,QAAM,iBAAiB,MAAM;AAC3B,QAAI,CAAC,eAAgB,QAAO;AAE5B,UAAM,iBAAsF;AAAA,MAC1F,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,wBAAwB;AAAA,MACxB,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,WAAW;AAAA,IACb;AAEA,WACE,oBAAC,SAAM,SAAS,eAAe,eAAe,MAAM,KAAK,WACtD,YAAE,gCAAgC,eAAe,MAAM,IAAI,eAAe,MAAM,GACnF;AAAA,EAEJ;AAEA,SACE,qBAAC,SAAI,WAAU,qDACb;AAAA,yBAAC,SAAI,WAAU,0CACb;AAAA,2BAAC,SACC;AAAA,4BAAC,SAAI,WAAU,yCACZ,YAAE,sCAAsC,gBAAgB,GAC3D;AAAA,QACA,oBAAC,OAAE,WAAU,iCACV,YAAE,4CAA4C,yCAAyC,GAC1F;AAAA,SACF;AAAA,MACC,eAAe;AAAA,OAClB;AAAA,IAEC,SACC,oBAAC,SAAI,WAAU,uEACZ,iBACH;AAAA,IAID,CAAC,kBACA,qBAAC,SAAI,WAAU,aACb;AAAA,0BAAC,OAAE,WAAU,iCACV,YAAE,4CAA4C,gDAAgD,GACjG;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,SAAS;AAAA,UACT,UAAU;AAAA,UACV,SAAQ;AAAA,UACR,MAAK;AAAA,UAEJ;AAAA,4BAAgB,oBAAC,WAAQ,MAAK,MAAK,WAAU,QAAO;AAAA,YACpD,EAAE,2CAA2C,kBAAkB;AAAA;AAAA;AAAA,MAClE;AAAA,OACF;AAAA,IAID,kBAAkB,eACjB,qBAAC,SAAI,WAAU,aAAY,WAAW,eACpC;AAAA,2BAAC,SAAI,WAAU,sDACb;AAAA,4BAAC,OAAE,WAAU,sCACV,YAAE,wCAAwC,kBAAkB,GAC/D;AAAA,QACA,oBAAC,OAAE,WAAU,+BACV,YAAE,8CAA8C,iDAAiD,GACpG;AAAA,SACF;AAAA,MAEA,qBAAC,SAAI,WAAU,aACb;AAAA,4BAAC,WAAM,WAAU,uBACd,YAAE,yCAAyC,UAAU,GACxD;AAAA,QACA,qBAAC,SAAI,WAAU,cACb;AAAA;AAAA,YAAC;AAAA;AAAA,cACC,SAAS,aAAa,YAAY,YAAY;AAAA,cAC9C,MAAK;AAAA,cACL,SAAS,MAAM,YAAY,SAAS;AAAA,cACpC,WAAW,aAAa,YAAY,wCAAwC;AAAA,cAE3E,YAAE,yCAAyC,SAAS;AAAA;AAAA,UACvD;AAAA,UACA;AAAA,YAAC;AAAA;AAAA,cACC,SAAS,aAAa,WAAW,gBAAgB;AAAA,cACjD,MAAK;AAAA,cACL,SAAS,MAAM,YAAY,QAAQ;AAAA,cAElC,YAAE,wCAAwC,QAAQ;AAAA;AAAA,UACrD;AAAA,WACF;AAAA,SACF;AAAA,MAEA,qBAAC,SAAI,WAAU,aACb;AAAA,6BAAC,WAAM,WAAU,uBACd;AAAA,YAAE,yCAAyC,UAAU;AAAA,UAAE;AAAA,UAAC,qBAAC,UAAK,WAAU,qCAAoC;AAAA;AAAA,YAAE,EAAE,mBAAmB,UAAU;AAAA,YAAE;AAAA,aAAC;AAAA,WACnJ;AAAA,QACA;AAAA,UAAC;AAAA;AAAA,YACC,OAAO;AAAA,YACP,UAAU,CAAC,MAAM,YAAY,EAAE,OAAO,KAAK;AAAA,YAC3C,aAAa,EAAE,+CAA+C,0BAA0B;AAAA,YACxF,MAAM;AAAA;AAAA,QACR;AAAA,SACF;AAAA,MAEA;AAAA,QAAC;AAAA;AAAA,UACC,SAAS;AAAA,UACT,UAAU,CAAC,YAAY;AAAA,UACvB,SAAQ;AAAA,UACR,MAAK;AAAA,UACL,WAAU;AAAA,UAET;AAAA,4BAAgB,oBAAC,WAAQ,MAAK,MAAK,WAAU,QAAO;AAAA,YACpD,EAAE,0CAA0C,iBAAiB;AAAA;AAAA;AAAA,MAChE;AAAA,OACF;AAAA,IAID,kBAAkB,CAAC,eAAe,eAAe,WAAW,eAC3D,oBAAC,SAAI,WAAU,oDACb,8BAAC,OAAE,WAAU,yBACV,YAAE,sCAAsC,2BAA2B,GACtE,GACF;AAAA,IAID,kBAAkB,eAAe,WAAW,eAC3C,oBAAC,SAAI,WAAU,0DACb,8BAAC,OAAE,WAAU,4BACV,YAAE,qCAAqC,8BAA8B,GACxE,GACF;AAAA,KAEJ;AAEJ;",
   "names": []
 }

package/generated/entities/attachment_quota_reservation/index.ts

@@ -0,0 +1,15 @@
+export const id = "id";
+export const tenant_id = "tenant_id";
+export const organization_id = "organization_id";
+export const reserved_bytes = "reserved_bytes";
+export const actual_bytes = "actual_bytes";
+export const status = "status";
+export const source = "source";
+export const storage_driver = "storage_driver";
+export const partition_code = "partition_code";
+export const storage_path = "storage_path";
+export const lease_token = "lease_token";
+export const upload_token_hash = "upload_token_hash";
+export const expires_at = "expires_at";
+export const created_at = "created_at";
+export const updated_at = "updated_at";

package/generated/entities.ids.generated.ts

@@ -117,7 +117,8 @@ export const M = {
     },
     "attachments": {
       "attachment_partition": "attachments:attachment_partition",
-      "attachment": "attachments:attachment"
+      "attachment": "attachments:attachment",
+      "attachment_quota_reservation": "attachments:attachment_quota_reservation"
     },
     "catalog": {
       "catalog_option_schema_template": "catalog:catalog_option_schema_template",

package/generated/entity-fields-registry.ts

@@ -94,6 +94,23 @@ export const entityFieldsRegistry: Record<string, Record<string, string>> = {
       "created_at": "created_at",
       "updated_at": "updated_at"
     },
+    "attachment_quota_reservation": {
+      "id": "id",
+      "tenant_id": "tenant_id",
+      "organization_id": "organization_id",
+      "reserved_bytes": "reserved_bytes",
+      "actual_bytes": "actual_bytes",
+      "status": "status",
+      "source": "source",
+      "storage_driver": "storage_driver",
+      "partition_code": "partition_code",
+      "storage_path": "storage_path",
+      "lease_token": "lease_token",
+      "upload_token_hash": "upload_token_hash",
+      "expires_at": "expires_at",
+      "created_at": "created_at",
+      "updated_at": "updated_at"
+    },
     "business_rule": {
       "id": "id",
       "rule_id": "rule_id",