npm - @open-mercato/core - Versions diffs - 0.6.8-develop.7100.1.fbf66fca35 → 0.7.0 - Mend

@open-mercato/core 0.6.8-develop.7100.1.fbf66fca35 → 0.7.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (967) hide show

package/dist/modules/workflows/backend/instances/page.js.map CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/workflows/backend/instances/page.tsx"],
-  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport { extensionPoints } from '@open-mercato/core/modules/workflows/extension-points'\nimport Link from 'next/link'\nimport { useRouter } from 'next/navigation'\nimport { Page, PageBody } from '@open-mercato/ui/backend/Page'\nimport { DataTable } from '@open-mercato/ui/backend/DataTable'\nimport type { LegacyColumnDef as ColumnDef } from '@tanstack/react-table/legacy'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { RowActions } from '@open-mercato/ui/backend/RowActions'\nimport { apiCall } from '@open-mercato/ui/backend/utils/apiCall'\nimport { flash } from '@open-mercato/ui/backend/FlashMessages'\nimport { useQuery, useQueryClient } from '@tanstack/react-query'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport type { FilterDef, FilterValues } from '@open-mercato/ui/backend/FilterBar'\nimport { useConfirmDialog } from '@open-mercato/ui/backend/confirm-dialog'\n\ntype WorkflowInstance = {\n  id: string\n  definitionId: string\n  workflowId: string\n  version: number\n  status: 'RUNNING' | 'PAUSED' | 'COMPLETED' | 'FAILED' | 'CANCELLED' | 'COMPENSATING' | 'COMPENSATED'\n  currentStepId: string\n  correlationKey: string | null\n  startedAt: string\n  completedAt: string | null\n  cancelledAt: string | null\n  errorMessage: string | null\n  retryCount: number\n  tenantId: string\n  organizationId: string\n  createdAt: string\n  updatedAt: string\n}\n\ntype InstancesResponse = {\n  data: WorkflowInstance[]\n  pagination: {\n    total: number\n    limit: number\n    offset: number\n    hasMore: boolean\n    totalIsCapped?: boolean\n  }\n}\n\nexport default function WorkflowInstancesListPage() {\n  const [page, setPage] = React.useState(1)\n  const [pageSize] = React.useState(50)\n  const [total, setTotal] = React.useState(0)\n  const [totalPages, setTotalPages] = React.useState(1)\n  const [totalIsCapped, setTotalIsCapped] = React.useState(false)\n  const t = useT()\n  const router = useRouter()\n  const queryClient = useQueryClient()\n  const { confirm: confirmDialog, ConfirmDialogElement } = useConfirmDialog()\n  const [filterValues, setFilterValues] = React.useState<FilterValues>({})\n\n  const { data, isLoading, error } = useQuery({\n    queryKey: ['workflow-instances', 'list', filterValues, page],\n    queryFn: async () => {\n      const params = new URLSearchParams()\n      const offset = (page - 1) * pageSize\n      params.set('limit', pageSize.toString())\n      params.set('offset', offset.toString())\n\n      if (filterValues.status) params.set('status', filterValues.status as string)\n      if (filterValues.workflowId) params.set('workflowId', filterValues.workflowId as string)\n      if (filterValues.correlationKey) params.set('correlationKey', filterValues.correlationKey as string)\n      if (filterValues.entityType) params.set('entityType', filterValues.entityType as string)\n      if (filterValues.entityId) params.set('entityId', filterValues.entityId as string)\n\n      const result = await apiCall<InstancesResponse>(\n        `/api/workflows/instances?${params.toString()}`\n      )\n\n      if (!result.ok) {\n        throw new Error('Failed to fetch workflow instances')\n      }\n\n      const response = result.result\n      if (response?.pagination) {\n        setTotal(response.pagination.total || 0)\n        const calculatedPages = Math.ceil((response.pagination.total || 0) / pageSize)\n        setTotalPages(calculatedPages || 1)\n        setTotalIsCapped(response.pagination?.totalIsCapped === true)\n      }\n\n      return response?.data || []\n    },\n  })\n\n  const handleCancel = async (id: string, workflowId: string) => {\n    const confirmed = await confirmDialog({\n      title: t('workflows.instances.confirm.cancel', { id: workflowId }),\n      variant: 'destructive',\n    })\n    if (!confirmed) {\n      return\n    }\n\n    const result = await apiCall(`/api/workflows/instances/${id}/cancel`, {\n      method: 'POST',\n    })\n\n    if (result.ok) {\n      flash(t('workflows.instances.messages.cancelled'), 'success')\n      queryClient.invalidateQueries({ queryKey: ['workflow-instances'] })\n    } else {\n      flash(t('workflows.instances.messages.cancelFailed'), 'error')\n    }\n  }\n\n  const handleRetry = async (id: string, workflowId: string) => {\n    const ok = await confirmDialog({\n      title: t('workflows.instances.confirm.retry', { id: workflowId }),\n      variant: 'default',\n    })\n    if (!ok) {\n      return\n    }\n\n    const result = await apiCall(`/api/workflows/instances/${id}/retry`, {\n      method: 'POST',\n    })\n\n    if (result.ok) {\n      flash(t('workflows.instances.messages.retried'), 'success')\n      queryClient.invalidateQueries({ queryKey: ['workflow-instances'] })\n    } else {\n      flash(t('workflows.instances.messages.retryFailed'), 'error')\n    }\n  }\n\n  const handleFiltersApply = React.useCallback((values: FilterValues) => {\n    const next: FilterValues = {}\n    Object.entries(values).forEach(([key, value]) => {\n      if (value !== undefined && value !== '') next[key] = value\n    })\n    setFilterValues(next)\n    setPage(1)\n  }, [])\n\n  const handleFiltersClear = React.useCallback(() => {\n    setFilterValues({})\n    setPage(1)\n  }, [])\n\n  const getStatusBadgeClass = (status: WorkflowInstance['status']) => {\n    switch (status) {\n      case 'RUNNING':\n        return 'bg-status-info-bg text-status-info-text'\n      case 'PAUSED':\n        return 'bg-status-warning-bg text-status-warning-text'\n      case 'COMPLETED':\n        return 'bg-status-success-bg text-status-success-text'\n      case 'FAILED':\n        return 'bg-status-error-bg text-status-error-text'\n      case 'CANCELLED':\n        return 'bg-muted text-foreground'\n      case 'COMPENSATING':\n        return 'bg-status-warning-bg text-status-warning-text'\n      case 'COMPENSATED':\n        return 'bg-status-neutral-bg text-status-neutral-text'\n      default:\n        return 'bg-muted text-muted-foreground'\n    }\n  }\n\n  const filters: FilterDef[] = [\n    {\n      id: 'status',\n      type: 'select',\n      label: t('workflows.instances.filters.status'),\n      options: [\n        { label: t('common.all'), value: '' },\n        { label: t('workflows.instances.status.RUNNING'), value: 'RUNNING' },\n        { label: t('workflows.instances.status.PAUSED'), value: 'PAUSED' },\n        { label: t('workflows.instances.status.COMPLETED'), value: 'COMPLETED' },\n        { label: t('workflows.instances.status.FAILED'), value: 'FAILED' },\n        { label: t('workflows.instances.status.CANCELLED'), value: 'CANCELLED' },\n        { label: t('workflows.instances.status.COMPENSATING'), value: 'COMPENSATING' },\n        { label: t('workflows.instances.status.COMPENSATED'), value: 'COMPENSATED' },\n      ],\n    },\n    {\n      id: 'workflowId',\n      type: 'text',\n      label: t('workflows.instances.filters.workflowId'),\n      placeholder: t('workflows.instances.filters.workflowIdPlaceholder'),\n    },\n    {\n      id: 'correlationKey',\n      type: 'text',\n      label: t('workflows.instances.filters.correlationKey'),\n      placeholder: t('workflows.instances.filters.correlationKeyPlaceholder'),\n    },\n    {\n      id: 'entityType',\n      type: 'text',\n      label: t('workflows.instances.filters.entityType'),\n      placeholder: t('workflows.instances.filters.entityTypePlaceholder'),\n    },\n    {\n      id: 'entityId',\n      type: 'text',\n      label: t('workflows.instances.filters.entityId'),\n      placeholder: t('workflows.instances.filters.entityIdPlaceholder'),\n    },\n  ]\n\n  const columns: ColumnDef<WorkflowInstance>[] = [\n    {\n      id: 'workflowId',\n      header: t('workflows.instances.fields.workflowId'),\n      accessorKey: 'workflowId',\n      cell: ({ row }) => (\n        <Link href={`/backend/instances/${row.original.id}`} className=\"block hover:underline\">\n          <div className=\"font-mono text-sm font-medium\">{row.original.workflowId}</div>\n          {row.original.correlationKey && (\n            <div className=\"text-xs text-muted-foreground\">\n              {t('workflows.instances.fields.correlationKey')}: {row.original.correlationKey}\n            </div>\n          )}\n        </Link>\n      ),\n    },\n    {\n      id: 'status',\n      header: t('workflows.instances.fields.status'),\n      accessorKey: 'status',\n      cell: ({ row }) => (\n        <span className={`inline-flex items-center px-2 py-1 rounded text-xs font-medium ${getStatusBadgeClass(row.original.status)}`}>\n          {t(`workflows.instances.status.${row.original.status}`)}\n        </span>\n      ),\n    },\n    {\n      id: 'currentStep',\n      header: t('workflows.instances.fields.currentStep'),\n      accessorKey: 'currentStepId',\n      cell: ({ row }) => (\n        <span className=\"text-sm text-muted-foreground\">{row.original.currentStepId}</span>\n      ),\n    },\n    {\n      id: 'timing',\n      header: t('workflows.instances.fields.timing'),\n      cell: ({ row }) => {\n        const started = new Date(row.original.startedAt)\n        const completed = row.original.completedAt ? new Date(row.original.completedAt) : null\n        const duration = completed ? completed.getTime() - started.getTime() : Date.now() - started.getTime()\n        const durationText = duration < 60000\n          ? `${Math.floor(duration / 1000)}s`\n          : `${Math.floor(duration / 60000)}m`\n\n        return (\n          <div className=\"text-sm\">\n            <div className=\"text-foreground\">{started.toLocaleString()}</div>\n            <div className=\"text-xs text-muted-foreground\">\n              {completed ? t('workflows.instances.duration') : t('workflows.instances.elapsed')}: {durationText}\n            </div>\n          </div>\n        )\n      },\n    },\n    {\n      id: 'retryCount',\n      header: t('workflows.instances.fields.retryCount'),\n      accessorKey: 'retryCount',\n      cell: ({ row }) => (\n        <span className={`text-sm ${row.original.retryCount > 0 ? 'text-status-warning-text font-medium' : 'text-muted-foreground'}`}>\n          {row.original.retryCount}\n        </span>\n      ),\n    },\n    {\n      id: 'actions',\n      header: '',\n      cell: ({ row }) => {\n        const items: Array<{ id: string; label: string; href?: string; onSelect?: () => void }> = [\n          {\n            id: 'view',\n            label: t('workflows.instances.actions.viewDetails'),\n            href: `/backend/instances/${row.original.id}`,\n          },\n        ]\n\n        if (row.original.status === 'RUNNING' || row.original.status === 'PAUSED') {\n          items.push({\n            id: 'cancel',\n            label: t('workflows.instances.actions.cancel'),\n            onSelect: () => void handleCancel(row.original.id, row.original.workflowId),\n          })\n        }\n\n        if (row.original.status === 'FAILED') {\n          items.push({\n            id: 'retry',\n            label: t('workflows.instances.actions.retry'),\n            onSelect: () => void handleRetry(row.original.id, row.original.workflowId),\n          })\n        }\n\n        return <RowActions items={items} />\n      },\n    },\n  ]\n\n  if (error) {\n    return (\n      <Page>\n        <PageBody>\n          <div className=\"p-8 text-center\">\n            <p className=\"text-status-error-text\">{t('workflows.instances.messages.loadFailed')}</p>\n            <Button onClick={() => queryClient.invalidateQueries({ queryKey: ['workflow-instances'] })} className=\"mt-4\">\n              {t('common.retry')}\n            </Button>\n          </div>\n        </PageBody>\n      </Page>\n    )\n  }\n\n  return (\n    <Page>\n      <PageBody>\n        <DataTable\n          title={t('workflows.instances.list.title')}\n          columns={columns}\n          data={data || []}\n          filters={filters}\n          filterValues={filterValues}\n          onFiltersApply={handleFiltersApply}\n          onFiltersClear={handleFiltersClear}\n          perspective={{\n            tableId: extensionPoints.hosts.instancesTable.tableId,\n          }}\n          pagination={{ page, pageSize, total, totalPages, totalIsCapped, onPageChange: setPage }}\n        />\n      </PageBody>\n      {ConfirmDialogElement}\n    </Page>\n  )\n}\n"],
-  "mappings": ";AA4NU,cAEE,YAFF;AA1NV,YAAY,WAAW;AACvB,SAAS,uBAAuB;AAChC,OAAO,UAAU;AACjB,SAAS,iBAAiB;AAC1B,SAAS,MAAM,gBAAgB;AAC/B,SAAS,iBAAiB;AAE1B,SAAS,cAAc;AACvB,SAAS,kBAAkB;AAC3B,SAAS,eAAe;AACxB,SAAS,aAAa;AACtB,SAAS,UAAU,sBAAsB;AACzC,SAAS,YAAY;AAErB,SAAS,wBAAwB;AAgClB,SAAR,4BAA6C;AAClD,QAAM,CAAC,MAAM,OAAO,IAAI,MAAM,SAAS,CAAC;AACxC,QAAM,CAAC,QAAQ,IAAI,MAAM,SAAS,EAAE;AACpC,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAS,CAAC;AAC1C,QAAM,CAAC,YAAY,aAAa,IAAI,MAAM,SAAS,CAAC;AACpD,QAAM,CAAC,eAAe,gBAAgB,IAAI,MAAM,SAAS,KAAK;AAC9D,QAAM,IAAI,KAAK;AACf,QAAM,SAAS,UAAU;AACzB,QAAM,cAAc,eAAe;AACnC,QAAM,EAAE,SAAS,eAAe,qBAAqB,IAAI,iBAAiB;AAC1E,QAAM,CAAC,cAAc,eAAe,IAAI,MAAM,SAAuB,CAAC,CAAC;AAEvE,QAAM,EAAE,MAAM,WAAW,MAAM,IAAI,SAAS;AAAA,IAC1C,UAAU,CAAC,sBAAsB,QAAQ,cAAc,IAAI;AAAA,IAC3D,SAAS,YAAY;AACnB,YAAM,SAAS,IAAI,gBAAgB;AACnC,YAAM,UAAU,OAAO,KAAK;AAC5B,aAAO,IAAI,SAAS,SAAS,SAAS,CAAC;AACvC,aAAO,IAAI,UAAU,OAAO,SAAS,CAAC;AAEtC,UAAI,aAAa,OAAQ,QAAO,IAAI,UAAU,aAAa,MAAgB;AAC3E,UAAI,aAAa,WAAY,QAAO,IAAI,cAAc,aAAa,UAAoB;AACvF,UAAI,aAAa,eAAgB,QAAO,IAAI,kBAAkB,aAAa,cAAwB;AACnG,UAAI,aAAa,WAAY,QAAO,IAAI,cAAc,aAAa,UAAoB;AACvF,UAAI,aAAa,SAAU,QAAO,IAAI,YAAY,aAAa,QAAkB;AAEjF,YAAM,SAAS,MAAM;AAAA,QACnB,4BAA4B,OAAO,SAAS,CAAC;AAAA,MAC/C;AAEA,UAAI,CAAC,OAAO,IAAI;AACd,cAAM,IAAI,MAAM,oCAAoC;AAAA,MACtD;AAEA,YAAM,WAAW,OAAO;AACxB,UAAI,UAAU,YAAY;AACxB,iBAAS,SAAS,WAAW,SAAS,CAAC;AACvC,cAAM,kBAAkB,KAAK,MAAM,SAAS,WAAW,SAAS,KAAK,QAAQ;AAC7E,sBAAc,mBAAmB,CAAC;AAClC,yBAAiB,SAAS,YAAY,kBAAkB,IAAI;AAAA,MAC9D;AAEA,aAAO,UAAU,QAAQ,CAAC;AAAA,IAC5B;AAAA,EACF,CAAC;AAED,QAAM,eAAe,OAAO,IAAY,eAAuB;AAC7D,UAAM,YAAY,MAAM,cAAc;AAAA,MACpC,OAAO,EAAE,sCAAsC,EAAE,IAAI,WAAW,CAAC;AAAA,MACjE,SAAS;AAAA,IACX,CAAC;AACD,QAAI,CAAC,WAAW;AACd;AAAA,IACF;AAEA,UAAM,SAAS,MAAM,QAAQ,4BAA4B,EAAE,WAAW;AAAA,MACpE,QAAQ;AAAA,IACV,CAAC;AAED,QAAI,OAAO,IAAI;AACb,YAAM,EAAE,wCAAwC,GAAG,SAAS;AAC5D,kBAAY,kBAAkB,EAAE,UAAU,CAAC,oBAAoB,EAAE,CAAC;AAAA,IACpE,OAAO;AACL,YAAM,EAAE,2CAA2C,GAAG,OAAO;AAAA,IAC/D;AAAA,EACF;AAEA,QAAM,cAAc,OAAO,IAAY,eAAuB;AAC5D,UAAM,KAAK,MAAM,cAAc;AAAA,MAC7B,OAAO,EAAE,qCAAqC,EAAE,IAAI,WAAW,CAAC;AAAA,MAChE,SAAS;AAAA,IACX,CAAC;AACD,QAAI,CAAC,IAAI;AACP;AAAA,IACF;AAEA,UAAM,SAAS,MAAM,QAAQ,4BAA4B,EAAE,UAAU;AAAA,MACnE,QAAQ;AAAA,IACV,CAAC;AAED,QAAI,OAAO,IAAI;AACb,YAAM,EAAE,sCAAsC,GAAG,SAAS;AAC1D,kBAAY,kBAAkB,EAAE,UAAU,CAAC,oBAAoB,EAAE,CAAC;AAAA,IACpE,OAAO;AACL,YAAM,EAAE,0CAA0C,GAAG,OAAO;AAAA,IAC9D;AAAA,EACF;AAEA,QAAM,qBAAqB,MAAM,YAAY,CAAC,WAAyB;AACrE,UAAM,OAAqB,CAAC;AAC5B,WAAO,QAAQ,MAAM,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM;AAC/C,UAAI,UAAU,UAAa,UAAU,GAAI,MAAK,GAAG,IAAI;AAAA,IACvD,CAAC;AACD,oBAAgB,IAAI;AACpB,YAAQ,CAAC;AAAA,EACX,GAAG,CAAC,CAAC;AAEL,QAAM,qBAAqB,MAAM,YAAY,MAAM;AACjD,oBAAgB,CAAC,CAAC;AAClB,YAAQ,CAAC;AAAA,EACX,GAAG,CAAC,CAAC;AAEL,QAAM,sBAAsB,CAAC,WAAuC;AAClE,YAAQ,QAAQ;AAAA,MACd,KAAK;AACH,eAAO;AAAA,MACT,KAAK;AACH,eAAO;AAAA,MACT,KAAK;AACH,eAAO;AAAA,MACT,KAAK;AACH,eAAO;AAAA,MACT,KAAK;AACH,eAAO;AAAA,MACT,KAAK;AACH,eAAO;AAAA,MACT,KAAK;AACH,eAAO;AAAA,MACT;AACE,eAAO;AAAA,IACX;AAAA,EACF;AAEA,QAAM,UAAuB;AAAA,IAC3B;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO,EAAE,oCAAoC;AAAA,MAC7C,SAAS;AAAA,QACP,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,GAAG;AAAA,QACpC,EAAE,OAAO,EAAE,oCAAoC,GAAG,OAAO,UAAU;AAAA,QACnE,EAAE,OAAO,EAAE,mCAAmC,GAAG,OAAO,SAAS;AAAA,QACjE,EAAE,OAAO,EAAE,sCAAsC,GAAG,OAAO,YAAY;AAAA,QACvE,EAAE,OAAO,EAAE,mCAAmC,GAAG,OAAO,SAAS;AAAA,QACjE,EAAE,OAAO,EAAE,sCAAsC,GAAG,OAAO,YAAY;AAAA,QACvE,EAAE,OAAO,EAAE,yCAAyC,GAAG,OAAO,eAAe;AAAA,QAC7E,EAAE,OAAO,EAAE,wCAAwC,GAAG,OAAO,cAAc;AAAA,MAC7E;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO,EAAE,wCAAwC;AAAA,MACjD,aAAa,EAAE,mDAAmD;AAAA,IACpE;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO,EAAE,4CAA4C;AAAA,MACrD,aAAa,EAAE,uDAAuD;AAAA,IACxE;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO,EAAE,wCAAwC;AAAA,MACjD,aAAa,EAAE,mDAAmD;AAAA,IACpE;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO,EAAE,sCAAsC;AAAA,MAC/C,aAAa,EAAE,iDAAiD;AAAA,IAClE;AAAA,EACF;AAEA,QAAM,UAAyC;AAAA,IAC7C;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ,EAAE,uCAAuC;AAAA,MACjD,aAAa;AAAA,MACb,MAAM,CAAC,EAAE,IAAI,MACX,qBAAC,QAAK,MAAM,sBAAsB,IAAI,SAAS,EAAE,IAAI,WAAU,yBAC7D;AAAA,4BAAC,SAAI,WAAU,iCAAiC,cAAI,SAAS,YAAW;AAAA,QACvE,IAAI,SAAS,kBACZ,qBAAC,SAAI,WAAU,iCACZ;AAAA,YAAE,2CAA2C;AAAA,UAAE;AAAA,UAAG,IAAI,SAAS;AAAA,WAClE;AAAA,SAEJ;AAAA,IAEJ;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ,EAAE,mCAAmC;AAAA,MAC7C,aAAa;AAAA,MACb,MAAM,CAAC,EAAE,IAAI,MACX,oBAAC,UAAK,WAAW,kEAAkE,oBAAoB,IAAI,SAAS,MAAM,CAAC,IACxH,YAAE,8BAA8B,IAAI,SAAS,MAAM,EAAE,GACxD;AAAA,IAEJ;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ,EAAE,wCAAwC;AAAA,MAClD,aAAa;AAAA,MACb,MAAM,CAAC,EAAE,IAAI,MACX,oBAAC,UAAK,WAAU,iCAAiC,cAAI,SAAS,eAAc;AAAA,IAEhF;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ,EAAE,mCAAmC;AAAA,MAC7C,MAAM,CAAC,EAAE,IAAI,MAAM;AACjB,cAAM,UAAU,IAAI,KAAK,IAAI,SAAS,SAAS;AAC/C,cAAM,YAAY,IAAI,SAAS,cAAc,IAAI,KAAK,IAAI,SAAS,WAAW,IAAI;AAClF,cAAM,WAAW,YAAY,UAAU,QAAQ,IAAI,QAAQ,QAAQ,IAAI,KAAK,IAAI,IAAI,QAAQ,QAAQ;AACpG,cAAM,eAAe,WAAW,MAC5B,GAAG,KAAK,MAAM,WAAW,GAAI,CAAC,MAC9B,GAAG,KAAK,MAAM,WAAW,GAAK,CAAC;AAEnC,eACE,qBAAC,SAAI,WAAU,WACb;AAAA,8BAAC,SAAI,WAAU,mBAAmB,kBAAQ,eAAe,GAAE;AAAA,UAC3D,qBAAC,SAAI,WAAU,iCACZ;AAAA,wBAAY,EAAE,8BAA8B,IAAI,EAAE,6BAA6B;AAAA,YAAE;AAAA,YAAG;AAAA,aACvF;AAAA,WACF;AAAA,MAEJ;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ,EAAE,uCAAuC;AAAA,MACjD,aAAa;AAAA,MACb,MAAM,CAAC,EAAE,IAAI,MACX,oBAAC,UAAK,WAAW,WAAW,IAAI,SAAS,aAAa,IAAI,yCAAyC,uBAAuB,IACvH,cAAI,SAAS,YAChB;AAAA,IAEJ;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ;AAAA,MACR,MAAM,CAAC,EAAE,IAAI,MAAM;AACjB,cAAM,QAAoF;AAAA,UACxF;AAAA,YACE,IAAI;AAAA,YACJ,OAAO,EAAE,yCAAyC;AAAA,YAClD,MAAM,sBAAsB,IAAI,SAAS,EAAE;AAAA,UAC7C;AAAA,QACF;AAEA,YAAI,IAAI,SAAS,WAAW,aAAa,IAAI,SAAS,WAAW,UAAU;AACzE,gBAAM,KAAK;AAAA,YACT,IAAI;AAAA,YACJ,OAAO,EAAE,oCAAoC;AAAA,YAC7C,UAAU,MAAM,KAAK,aAAa,IAAI,SAAS,IAAI,IAAI,SAAS,UAAU;AAAA,UAC5E,CAAC;AAAA,QACH;AAEA,YAAI,IAAI,SAAS,WAAW,UAAU;AACpC,gBAAM,KAAK;AAAA,YACT,IAAI;AAAA,YACJ,OAAO,EAAE,mCAAmC;AAAA,YAC5C,UAAU,MAAM,KAAK,YAAY,IAAI,SAAS,IAAI,IAAI,SAAS,UAAU;AAAA,UAC3E,CAAC;AAAA,QACH;AAEA,eAAO,oBAAC,cAAW,OAAc;AAAA,MACnC;AAAA,IACF;AAAA,EACF;AAEA,MAAI,OAAO;AACT,WACE,oBAAC,QACC,8BAAC,YACC,+BAAC,SAAI,WAAU,mBACb;AAAA,0BAAC,OAAE,WAAU,0BAA0B,YAAE,yCAAyC,GAAE;AAAA,MACpF,oBAAC,UAAO,SAAS,MAAM,YAAY,kBAAkB,EAAE,UAAU,CAAC,oBAAoB,EAAE,CAAC,GAAG,WAAU,QACnG,YAAE,cAAc,GACnB;AAAA,OACF,GACF,GACF;AAAA,EAEJ;AAEA,SACE,qBAAC,QACC;AAAA,wBAAC,YACC;AAAA,MAAC;AAAA;AAAA,QACC,OAAO,EAAE,gCAAgC;AAAA,QACzC;AAAA,QACA,MAAM,QAAQ,CAAC;AAAA,QACf;AAAA,QACA;AAAA,QACA,gBAAgB;AAAA,QAChB,gBAAgB;AAAA,QAChB,aAAa;AAAA,UACX,SAAS,gBAAgB,MAAM,eAAe;AAAA,QAChD;AAAA,QACA,YAAY,EAAE,MAAM,UAAU,OAAO,YAAY,eAAe,cAAc,QAAQ;AAAA;AAAA,IACxF,GACF;AAAA,IACC;AAAA,KACH;AAEJ;",
+  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport { extensionPoints } from '@open-mercato/core/modules/workflows/extension-points'\nimport Link from 'next/link'\nimport { useRouter } from 'next/navigation'\nimport { Page, PageBody } from '@open-mercato/ui/backend/Page'\nimport { DataTable } from '@open-mercato/ui/backend/DataTable'\nimport type { LegacyColumnDef as ColumnDef } from '@tanstack/react-table/legacy'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { RowActions } from '@open-mercato/ui/backend/RowActions'\nimport { apiCall } from '@open-mercato/ui/backend/utils/apiCall'\nimport { flash } from '@open-mercato/ui/backend/FlashMessages'\nimport { useQuery, useQueryClient } from '@tanstack/react-query'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport type { FilterDef, FilterValues } from '@open-mercato/ui/backend/FilterBar'\nimport { useConfirmDialog } from '@open-mercato/ui/backend/confirm-dialog'\n\ntype WorkflowInstance = {\n  id: string\n  definitionId: string\n  workflowId: string\n  version: number\n  status: 'RUNNING' | 'PAUSED' | 'COMPLETED' | 'FAILED' | 'CANCELLED' | 'COMPENSATING' | 'COMPENSATED'\n  currentStepId: string\n  correlationKey: string | null\n  startedAt: string\n  completedAt: string | null\n  cancelledAt: string | null\n  errorMessage: string | null\n  retryCount: number\n  tenantId: string\n  organizationId: string\n  createdAt: string\n  updatedAt: string\n}\n\ntype InstancesResponse = {\n  data: WorkflowInstance[]\n  pagination: {\n    total: number\n    limit: number\n    offset: number\n    hasMore: boolean\n  }\n}\n\nexport default function WorkflowInstancesListPage() {\n  const [page, setPage] = React.useState(1)\n  const [pageSize] = React.useState(50)\n  const [total, setTotal] = React.useState(0)\n  const [totalPages, setTotalPages] = React.useState(1)\n  const t = useT()\n  const router = useRouter()\n  const queryClient = useQueryClient()\n  const { confirm: confirmDialog, ConfirmDialogElement } = useConfirmDialog()\n  const [filterValues, setFilterValues] = React.useState<FilterValues>({})\n\n  const { data, isLoading, error } = useQuery({\n    queryKey: ['workflow-instances', 'list', filterValues, page],\n    queryFn: async () => {\n      const params = new URLSearchParams()\n      const offset = (page - 1) * pageSize\n      params.set('limit', pageSize.toString())\n      params.set('offset', offset.toString())\n\n      if (filterValues.status) params.set('status', filterValues.status as string)\n      if (filterValues.workflowId) params.set('workflowId', filterValues.workflowId as string)\n      if (filterValues.correlationKey) params.set('correlationKey', filterValues.correlationKey as string)\n      if (filterValues.entityType) params.set('entityType', filterValues.entityType as string)\n      if (filterValues.entityId) params.set('entityId', filterValues.entityId as string)\n\n      const result = await apiCall<InstancesResponse>(\n        `/api/workflows/instances?${params.toString()}`\n      )\n\n      if (!result.ok) {\n        throw new Error('Failed to fetch workflow instances')\n      }\n\n      const response = result.result\n      if (response?.pagination) {\n        setTotal(response.pagination.total || 0)\n        const calculatedPages = Math.ceil((response.pagination.total || 0) / pageSize)\n        setTotalPages(calculatedPages || 1)\n      }\n\n      return response?.data || []\n    },\n  })\n\n  const handleCancel = async (id: string, workflowId: string) => {\n    const confirmed = await confirmDialog({\n      title: t('workflows.instances.confirm.cancel', { id: workflowId }),\n      variant: 'destructive',\n    })\n    if (!confirmed) {\n      return\n    }\n\n    const result = await apiCall(`/api/workflows/instances/${id}/cancel`, {\n      method: 'POST',\n    })\n\n    if (result.ok) {\n      flash(t('workflows.instances.messages.cancelled'), 'success')\n      queryClient.invalidateQueries({ queryKey: ['workflow-instances'] })\n    } else {\n      flash(t('workflows.instances.messages.cancelFailed'), 'error')\n    }\n  }\n\n  const handleRetry = async (id: string, workflowId: string) => {\n    const ok = await confirmDialog({\n      title: t('workflows.instances.confirm.retry', { id: workflowId }),\n      variant: 'default',\n    })\n    if (!ok) {\n      return\n    }\n\n    const result = await apiCall(`/api/workflows/instances/${id}/retry`, {\n      method: 'POST',\n    })\n\n    if (result.ok) {\n      flash(t('workflows.instances.messages.retried'), 'success')\n      queryClient.invalidateQueries({ queryKey: ['workflow-instances'] })\n    } else {\n      flash(t('workflows.instances.messages.retryFailed'), 'error')\n    }\n  }\n\n  const handleFiltersApply = React.useCallback((values: FilterValues) => {\n    const next: FilterValues = {}\n    Object.entries(values).forEach(([key, value]) => {\n      if (value !== undefined && value !== '') next[key] = value\n    })\n    setFilterValues(next)\n    setPage(1)\n  }, [])\n\n  const handleFiltersClear = React.useCallback(() => {\n    setFilterValues({})\n    setPage(1)\n  }, [])\n\n  const getStatusBadgeClass = (status: WorkflowInstance['status']) => {\n    switch (status) {\n      case 'RUNNING':\n        return 'bg-status-info-bg text-status-info-text'\n      case 'PAUSED':\n        return 'bg-status-warning-bg text-status-warning-text'\n      case 'COMPLETED':\n        return 'bg-status-success-bg text-status-success-text'\n      case 'FAILED':\n        return 'bg-status-error-bg text-status-error-text'\n      case 'CANCELLED':\n        return 'bg-muted text-foreground'\n      case 'COMPENSATING':\n        return 'bg-status-warning-bg text-status-warning-text'\n      case 'COMPENSATED':\n        return 'bg-status-neutral-bg text-status-neutral-text'\n      default:\n        return 'bg-muted text-muted-foreground'\n    }\n  }\n\n  const filters: FilterDef[] = [\n    {\n      id: 'status',\n      type: 'select',\n      label: t('workflows.instances.filters.status'),\n      options: [\n        { label: t('common.all'), value: '' },\n        { label: t('workflows.instances.status.RUNNING'), value: 'RUNNING' },\n        { label: t('workflows.instances.status.PAUSED'), value: 'PAUSED' },\n        { label: t('workflows.instances.status.COMPLETED'), value: 'COMPLETED' },\n        { label: t('workflows.instances.status.FAILED'), value: 'FAILED' },\n        { label: t('workflows.instances.status.CANCELLED'), value: 'CANCELLED' },\n        { label: t('workflows.instances.status.COMPENSATING'), value: 'COMPENSATING' },\n        { label: t('workflows.instances.status.COMPENSATED'), value: 'COMPENSATED' },\n      ],\n    },\n    {\n      id: 'workflowId',\n      type: 'text',\n      label: t('workflows.instances.filters.workflowId'),\n      placeholder: t('workflows.instances.filters.workflowIdPlaceholder'),\n    },\n    {\n      id: 'correlationKey',\n      type: 'text',\n      label: t('workflows.instances.filters.correlationKey'),\n      placeholder: t('workflows.instances.filters.correlationKeyPlaceholder'),\n    },\n    {\n      id: 'entityType',\n      type: 'text',\n      label: t('workflows.instances.filters.entityType'),\n      placeholder: t('workflows.instances.filters.entityTypePlaceholder'),\n    },\n    {\n      id: 'entityId',\n      type: 'text',\n      label: t('workflows.instances.filters.entityId'),\n      placeholder: t('workflows.instances.filters.entityIdPlaceholder'),\n    },\n  ]\n\n  const columns: ColumnDef<WorkflowInstance>[] = [\n    {\n      id: 'workflowId',\n      header: t('workflows.instances.fields.workflowId'),\n      accessorKey: 'workflowId',\n      cell: ({ row }) => (\n        <Link href={`/backend/instances/${row.original.id}`} className=\"block hover:underline\">\n          <div className=\"font-mono text-sm font-medium\">{row.original.workflowId}</div>\n          {row.original.correlationKey && (\n            <div className=\"text-xs text-muted-foreground\">\n              {t('workflows.instances.fields.correlationKey')}: {row.original.correlationKey}\n            </div>\n          )}\n        </Link>\n      ),\n    },\n    {\n      id: 'status',\n      header: t('workflows.instances.fields.status'),\n      accessorKey: 'status',\n      cell: ({ row }) => (\n        <span className={`inline-flex items-center px-2 py-1 rounded text-xs font-medium ${getStatusBadgeClass(row.original.status)}`}>\n          {t(`workflows.instances.status.${row.original.status}`)}\n        </span>\n      ),\n    },\n    {\n      id: 'currentStep',\n      header: t('workflows.instances.fields.currentStep'),\n      accessorKey: 'currentStepId',\n      cell: ({ row }) => (\n        <span className=\"text-sm text-muted-foreground\">{row.original.currentStepId}</span>\n      ),\n    },\n    {\n      id: 'timing',\n      header: t('workflows.instances.fields.timing'),\n      cell: ({ row }) => {\n        const started = new Date(row.original.startedAt)\n        const completed = row.original.completedAt ? new Date(row.original.completedAt) : null\n        const duration = completed ? completed.getTime() - started.getTime() : Date.now() - started.getTime()\n        const durationText = duration < 60000\n          ? `${Math.floor(duration / 1000)}s`\n          : `${Math.floor(duration / 60000)}m`\n\n        return (\n          <div className=\"text-sm\">\n            <div className=\"text-foreground\">{started.toLocaleString()}</div>\n            <div className=\"text-xs text-muted-foreground\">\n              {completed ? t('workflows.instances.duration') : t('workflows.instances.elapsed')}: {durationText}\n            </div>\n          </div>\n        )\n      },\n    },\n    {\n      id: 'retryCount',\n      header: t('workflows.instances.fields.retryCount'),\n      accessorKey: 'retryCount',\n      cell: ({ row }) => (\n        <span className={`text-sm ${row.original.retryCount > 0 ? 'text-status-warning-text font-medium' : 'text-muted-foreground'}`}>\n          {row.original.retryCount}\n        </span>\n      ),\n    },\n    {\n      id: 'actions',\n      header: '',\n      cell: ({ row }) => {\n        const items: Array<{ id: string; label: string; href?: string; onSelect?: () => void }> = [\n          {\n            id: 'view',\n            label: t('workflows.instances.actions.viewDetails'),\n            href: `/backend/instances/${row.original.id}`,\n          },\n        ]\n\n        if (row.original.status === 'RUNNING' || row.original.status === 'PAUSED') {\n          items.push({\n            id: 'cancel',\n            label: t('workflows.instances.actions.cancel'),\n            onSelect: () => void handleCancel(row.original.id, row.original.workflowId),\n          })\n        }\n\n        if (row.original.status === 'FAILED') {\n          items.push({\n            id: 'retry',\n            label: t('workflows.instances.actions.retry'),\n            onSelect: () => void handleRetry(row.original.id, row.original.workflowId),\n          })\n        }\n\n        return <RowActions items={items} />\n      },\n    },\n  ]\n\n  if (error) {\n    return (\n      <Page>\n        <PageBody>\n          <div className=\"p-8 text-center\">\n            <p className=\"text-status-error-text\">{t('workflows.instances.messages.loadFailed')}</p>\n            <Button onClick={() => queryClient.invalidateQueries({ queryKey: ['workflow-instances'] })} className=\"mt-4\">\n              {t('common.retry')}\n            </Button>\n          </div>\n        </PageBody>\n      </Page>\n    )\n  }\n\n  return (\n    <Page>\n      <PageBody>\n        <DataTable\n          title={t('workflows.instances.list.title')}\n          columns={columns}\n          data={data || []}\n          filters={filters}\n          filterValues={filterValues}\n          onFiltersApply={handleFiltersApply}\n          onFiltersClear={handleFiltersClear}\n          perspective={{\n            tableId: extensionPoints.hosts.instancesTable.tableId,\n          }}\n          pagination={{ page, pageSize, total, totalPages, onPageChange: setPage }}\n        />\n      </PageBody>\n      {ConfirmDialogElement}\n    </Page>\n  )\n}\n"],
+  "mappings": ";AAyNU,cAEE,YAFF;AAvNV,YAAY,WAAW;AACvB,SAAS,uBAAuB;AAChC,OAAO,UAAU;AACjB,SAAS,iBAAiB;AAC1B,SAAS,MAAM,gBAAgB;AAC/B,SAAS,iBAAiB;AAE1B,SAAS,cAAc;AACvB,SAAS,kBAAkB;AAC3B,SAAS,eAAe;AACxB,SAAS,aAAa;AACtB,SAAS,UAAU,sBAAsB;AACzC,SAAS,YAAY;AAErB,SAAS,wBAAwB;AA+BlB,SAAR,4BAA6C;AAClD,QAAM,CAAC,MAAM,OAAO,IAAI,MAAM,SAAS,CAAC;AACxC,QAAM,CAAC,QAAQ,IAAI,MAAM,SAAS,EAAE;AACpC,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAS,CAAC;AAC1C,QAAM,CAAC,YAAY,aAAa,IAAI,MAAM,SAAS,CAAC;AACpD,QAAM,IAAI,KAAK;AACf,QAAM,SAAS,UAAU;AACzB,QAAM,cAAc,eAAe;AACnC,QAAM,EAAE,SAAS,eAAe,qBAAqB,IAAI,iBAAiB;AAC1E,QAAM,CAAC,cAAc,eAAe,IAAI,MAAM,SAAuB,CAAC,CAAC;AAEvE,QAAM,EAAE,MAAM,WAAW,MAAM,IAAI,SAAS;AAAA,IAC1C,UAAU,CAAC,sBAAsB,QAAQ,cAAc,IAAI;AAAA,IAC3D,SAAS,YAAY;AACnB,YAAM,SAAS,IAAI,gBAAgB;AACnC,YAAM,UAAU,OAAO,KAAK;AAC5B,aAAO,IAAI,SAAS,SAAS,SAAS,CAAC;AACvC,aAAO,IAAI,UAAU,OAAO,SAAS,CAAC;AAEtC,UAAI,aAAa,OAAQ,QAAO,IAAI,UAAU,aAAa,MAAgB;AAC3E,UAAI,aAAa,WAAY,QAAO,IAAI,cAAc,aAAa,UAAoB;AACvF,UAAI,aAAa,eAAgB,QAAO,IAAI,kBAAkB,aAAa,cAAwB;AACnG,UAAI,aAAa,WAAY,QAAO,IAAI,cAAc,aAAa,UAAoB;AACvF,UAAI,aAAa,SAAU,QAAO,IAAI,YAAY,aAAa,QAAkB;AAEjF,YAAM,SAAS,MAAM;AAAA,QACnB,4BAA4B,OAAO,SAAS,CAAC;AAAA,MAC/C;AAEA,UAAI,CAAC,OAAO,IAAI;AACd,cAAM,IAAI,MAAM,oCAAoC;AAAA,MACtD;AAEA,YAAM,WAAW,OAAO;AACxB,UAAI,UAAU,YAAY;AACxB,iBAAS,SAAS,WAAW,SAAS,CAAC;AACvC,cAAM,kBAAkB,KAAK,MAAM,SAAS,WAAW,SAAS,KAAK,QAAQ;AAC7E,sBAAc,mBAAmB,CAAC;AAAA,MACpC;AAEA,aAAO,UAAU,QAAQ,CAAC;AAAA,IAC5B;AAAA,EACF,CAAC;AAED,QAAM,eAAe,OAAO,IAAY,eAAuB;AAC7D,UAAM,YAAY,MAAM,cAAc;AAAA,MACpC,OAAO,EAAE,sCAAsC,EAAE,IAAI,WAAW,CAAC;AAAA,MACjE,SAAS;AAAA,IACX,CAAC;AACD,QAAI,CAAC,WAAW;AACd;AAAA,IACF;AAEA,UAAM,SAAS,MAAM,QAAQ,4BAA4B,EAAE,WAAW;AAAA,MACpE,QAAQ;AAAA,IACV,CAAC;AAED,QAAI,OAAO,IAAI;AACb,YAAM,EAAE,wCAAwC,GAAG,SAAS;AAC5D,kBAAY,kBAAkB,EAAE,UAAU,CAAC,oBAAoB,EAAE,CAAC;AAAA,IACpE,OAAO;AACL,YAAM,EAAE,2CAA2C,GAAG,OAAO;AAAA,IAC/D;AAAA,EACF;AAEA,QAAM,cAAc,OAAO,IAAY,eAAuB;AAC5D,UAAM,KAAK,MAAM,cAAc;AAAA,MAC7B,OAAO,EAAE,qCAAqC,EAAE,IAAI,WAAW,CAAC;AAAA,MAChE,SAAS;AAAA,IACX,CAAC;AACD,QAAI,CAAC,IAAI;AACP;AAAA,IACF;AAEA,UAAM,SAAS,MAAM,QAAQ,4BAA4B,EAAE,UAAU;AAAA,MACnE,QAAQ;AAAA,IACV,CAAC;AAED,QAAI,OAAO,IAAI;AACb,YAAM,EAAE,sCAAsC,GAAG,SAAS;AAC1D,kBAAY,kBAAkB,EAAE,UAAU,CAAC,oBAAoB,EAAE,CAAC;AAAA,IACpE,OAAO;AACL,YAAM,EAAE,0CAA0C,GAAG,OAAO;AAAA,IAC9D;AAAA,EACF;AAEA,QAAM,qBAAqB,MAAM,YAAY,CAAC,WAAyB;AACrE,UAAM,OAAqB,CAAC;AAC5B,WAAO,QAAQ,MAAM,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM;AAC/C,UAAI,UAAU,UAAa,UAAU,GAAI,MAAK,GAAG,IAAI;AAAA,IACvD,CAAC;AACD,oBAAgB,IAAI;AACpB,YAAQ,CAAC;AAAA,EACX,GAAG,CAAC,CAAC;AAEL,QAAM,qBAAqB,MAAM,YAAY,MAAM;AACjD,oBAAgB,CAAC,CAAC;AAClB,YAAQ,CAAC;AAAA,EACX,GAAG,CAAC,CAAC;AAEL,QAAM,sBAAsB,CAAC,WAAuC;AAClE,YAAQ,QAAQ;AAAA,MACd,KAAK;AACH,eAAO;AAAA,MACT,KAAK;AACH,eAAO;AAAA,MACT,KAAK;AACH,eAAO;AAAA,MACT,KAAK;AACH,eAAO;AAAA,MACT,KAAK;AACH,eAAO;AAAA,MACT,KAAK;AACH,eAAO;AAAA,MACT,KAAK;AACH,eAAO;AAAA,MACT;AACE,eAAO;AAAA,IACX;AAAA,EACF;AAEA,QAAM,UAAuB;AAAA,IAC3B;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO,EAAE,oCAAoC;AAAA,MAC7C,SAAS;AAAA,QACP,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,GAAG;AAAA,QACpC,EAAE,OAAO,EAAE,oCAAoC,GAAG,OAAO,UAAU;AAAA,QACnE,EAAE,OAAO,EAAE,mCAAmC,GAAG,OAAO,SAAS;AAAA,QACjE,EAAE,OAAO,EAAE,sCAAsC,GAAG,OAAO,YAAY;AAAA,QACvE,EAAE,OAAO,EAAE,mCAAmC,GAAG,OAAO,SAAS;AAAA,QACjE,EAAE,OAAO,EAAE,sCAAsC,GAAG,OAAO,YAAY;AAAA,QACvE,EAAE,OAAO,EAAE,yCAAyC,GAAG,OAAO,eAAe;AAAA,QAC7E,EAAE,OAAO,EAAE,wCAAwC,GAAG,OAAO,cAAc;AAAA,MAC7E;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO,EAAE,wCAAwC;AAAA,MACjD,aAAa,EAAE,mDAAmD;AAAA,IACpE;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO,EAAE,4CAA4C;AAAA,MACrD,aAAa,EAAE,uDAAuD;AAAA,IACxE;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO,EAAE,wCAAwC;AAAA,MACjD,aAAa,EAAE,mDAAmD;AAAA,IACpE;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO,EAAE,sCAAsC;AAAA,MAC/C,aAAa,EAAE,iDAAiD;AAAA,IAClE;AAAA,EACF;AAEA,QAAM,UAAyC;AAAA,IAC7C;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ,EAAE,uCAAuC;AAAA,MACjD,aAAa;AAAA,MACb,MAAM,CAAC,EAAE,IAAI,MACX,qBAAC,QAAK,MAAM,sBAAsB,IAAI,SAAS,EAAE,IAAI,WAAU,yBAC7D;AAAA,4BAAC,SAAI,WAAU,iCAAiC,cAAI,SAAS,YAAW;AAAA,QACvE,IAAI,SAAS,kBACZ,qBAAC,SAAI,WAAU,iCACZ;AAAA,YAAE,2CAA2C;AAAA,UAAE;AAAA,UAAG,IAAI,SAAS;AAAA,WAClE;AAAA,SAEJ;AAAA,IAEJ;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ,EAAE,mCAAmC;AAAA,MAC7C,aAAa;AAAA,MACb,MAAM,CAAC,EAAE,IAAI,MACX,oBAAC,UAAK,WAAW,kEAAkE,oBAAoB,IAAI,SAAS,MAAM,CAAC,IACxH,YAAE,8BAA8B,IAAI,SAAS,MAAM,EAAE,GACxD;AAAA,IAEJ;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ,EAAE,wCAAwC;AAAA,MAClD,aAAa;AAAA,MACb,MAAM,CAAC,EAAE,IAAI,MACX,oBAAC,UAAK,WAAU,iCAAiC,cAAI,SAAS,eAAc;AAAA,IAEhF;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ,EAAE,mCAAmC;AAAA,MAC7C,MAAM,CAAC,EAAE,IAAI,MAAM;AACjB,cAAM,UAAU,IAAI,KAAK,IAAI,SAAS,SAAS;AAC/C,cAAM,YAAY,IAAI,SAAS,cAAc,IAAI,KAAK,IAAI,SAAS,WAAW,IAAI;AAClF,cAAM,WAAW,YAAY,UAAU,QAAQ,IAAI,QAAQ,QAAQ,IAAI,KAAK,IAAI,IAAI,QAAQ,QAAQ;AACpG,cAAM,eAAe,WAAW,MAC5B,GAAG,KAAK,MAAM,WAAW,GAAI,CAAC,MAC9B,GAAG,KAAK,MAAM,WAAW,GAAK,CAAC;AAEnC,eACE,qBAAC,SAAI,WAAU,WACb;AAAA,8BAAC,SAAI,WAAU,mBAAmB,kBAAQ,eAAe,GAAE;AAAA,UAC3D,qBAAC,SAAI,WAAU,iCACZ;AAAA,wBAAY,EAAE,8BAA8B,IAAI,EAAE,6BAA6B;AAAA,YAAE;AAAA,YAAG;AAAA,aACvF;AAAA,WACF;AAAA,MAEJ;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ,EAAE,uCAAuC;AAAA,MACjD,aAAa;AAAA,MACb,MAAM,CAAC,EAAE,IAAI,MACX,oBAAC,UAAK,WAAW,WAAW,IAAI,SAAS,aAAa,IAAI,yCAAyC,uBAAuB,IACvH,cAAI,SAAS,YAChB;AAAA,IAEJ;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ;AAAA,MACR,MAAM,CAAC,EAAE,IAAI,MAAM;AACjB,cAAM,QAAoF;AAAA,UACxF;AAAA,YACE,IAAI;AAAA,YACJ,OAAO,EAAE,yCAAyC;AAAA,YAClD,MAAM,sBAAsB,IAAI,SAAS,EAAE;AAAA,UAC7C;AAAA,QACF;AAEA,YAAI,IAAI,SAAS,WAAW,aAAa,IAAI,SAAS,WAAW,UAAU;AACzE,gBAAM,KAAK;AAAA,YACT,IAAI;AAAA,YACJ,OAAO,EAAE,oCAAoC;AAAA,YAC7C,UAAU,MAAM,KAAK,aAAa,IAAI,SAAS,IAAI,IAAI,SAAS,UAAU;AAAA,UAC5E,CAAC;AAAA,QACH;AAEA,YAAI,IAAI,SAAS,WAAW,UAAU;AACpC,gBAAM,KAAK;AAAA,YACT,IAAI;AAAA,YACJ,OAAO,EAAE,mCAAmC;AAAA,YAC5C,UAAU,MAAM,KAAK,YAAY,IAAI,SAAS,IAAI,IAAI,SAAS,UAAU;AAAA,UAC3E,CAAC;AAAA,QACH;AAEA,eAAO,oBAAC,cAAW,OAAc;AAAA,MACnC;AAAA,IACF;AAAA,EACF;AAEA,MAAI,OAAO;AACT,WACE,oBAAC,QACC,8BAAC,YACC,+BAAC,SAAI,WAAU,mBACb;AAAA,0BAAC,OAAE,WAAU,0BAA0B,YAAE,yCAAyC,GAAE;AAAA,MACpF,oBAAC,UAAO,SAAS,MAAM,YAAY,kBAAkB,EAAE,UAAU,CAAC,oBAAoB,EAAE,CAAC,GAAG,WAAU,QACnG,YAAE,cAAc,GACnB;AAAA,OACF,GACF,GACF;AAAA,EAEJ;AAEA,SACE,qBAAC,QACC;AAAA,wBAAC,YACC;AAAA,MAAC;AAAA;AAAA,QACC,OAAO,EAAE,gCAAgC;AAAA,QACzC;AAAA,QACA,MAAM,QAAQ,CAAC;AAAA,QACf;AAAA,QACA;AAAA,QACA,gBAAgB;AAAA,QAChB,gBAAgB;AAAA,QAChB,aAAa;AAAA,UACX,SAAS,gBAAgB,MAAM,eAAe;AAAA,QAChD;AAAA,QACA,YAAY,EAAE,MAAM,UAAU,OAAO,YAAY,cAAc,QAAQ;AAAA;AAAA,IACzE,GACF;AAAA,IACC;AAAA,KACH;AAEJ;",
   "names": []
 }

package/dist/modules/workflows/backend/tasks/page.js CHANGED Viewed

@@ -17,7 +17,6 @@ function UserTasksListPage() {
   const [pageSize] = React.useState(50);
   const [total, setTotal] = React.useState(0);
   const [totalPages, setTotalPages] = React.useState(1);
-  const [totalIsCapped, setTotalIsCapped] = React.useState(false);
   const t = useT();
   const router = useRouter();
   const queryClient = useQueryClient();
@@ -47,7 +46,6 @@ function UserTasksListPage() {
         setTotal(response.pagination.total || 0);
         const calculatedPages = Math.ceil((response.pagination.total || 0) / pageSize);
         setTotalPages(calculatedPages || 1);
-        setTotalIsCapped(response.pagination?.totalIsCapped === true);
       }
       return response?.data || [];
     }
@@ -249,7 +247,7 @@ function UserTasksListPage() {
         perspective: {
           tableId: extensionPoints.hosts.tasksTable.tableId
         },
-        pagination: { page, pageSize, total, totalPages, totalIsCapped, onPageChange: setPage }
+        pagination: { page, pageSize, total, totalPages, onPageChange: setPage }
       }
     ) }),
     ConfirmDialogElement

package/dist/modules/workflows/backend/tasks/page.js.map CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/workflows/backend/tasks/page.tsx"],
-  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport { extensionPoints } from '@open-mercato/core/modules/workflows/extension-points'\nimport Link from 'next/link'\nimport { useRouter } from 'next/navigation'\nimport { Page, PageBody } from '@open-mercato/ui/backend/Page'\nimport { DataTable } from '@open-mercato/ui/backend/DataTable'\nimport type { LegacyColumnDef as ColumnDef } from '@tanstack/react-table/legacy'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { RowActions } from '@open-mercato/ui/backend/RowActions'\nimport { apiCall } from '@open-mercato/ui/backend/utils/apiCall'\nimport { flash } from '@open-mercato/ui/backend/FlashMessages'\nimport { useQuery, useQueryClient } from '@tanstack/react-query'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport type { FilterDef, FilterValues } from '@open-mercato/ui/backend/FilterBar'\nimport { useConfirmDialog } from '@open-mercato/ui/backend/confirm-dialog'\n\ntype UserTaskStatus = 'PENDING' | 'IN_PROGRESS' | 'COMPLETED' | 'CANCELLED'\n\ntype UserTask = {\n  id: string\n  workflowInstanceId: string\n  stepInstanceId: string\n  taskName: string\n  description: string | null\n  status: UserTaskStatus\n  formSchema: any | null\n  formData: any | null\n  assignedTo: string | null\n  assignedToRoles: string[] | null\n  claimedBy: string | null\n  claimedAt: string | null\n  dueDate: string | null\n  escalatedAt: string | null\n  escalatedTo: string | null\n  completedBy: string | null\n  completedAt: string | null\n  comments: string | null\n  tenantId: string\n  organizationId: string\n  createdAt: string\n  updatedAt: string\n}\n\ntype TasksResponse = {\n  data: UserTask[]\n  pagination: {\n    total: number\n    limit: number\n    offset: number\n    hasMore: boolean\n    totalIsCapped?: boolean\n  }\n}\n\nexport default function UserTasksListPage() {\n  const [page, setPage] = React.useState(1)\n  const [pageSize] = React.useState(50)\n  const [total, setTotal] = React.useState(0)\n  const [totalPages, setTotalPages] = React.useState(1)\n  const [totalIsCapped, setTotalIsCapped] = React.useState(false)\n  const t = useT()\n  const router = useRouter()\n  const queryClient = useQueryClient()\n  const { confirm: confirmDialog, ConfirmDialogElement } = useConfirmDialog()\n  const [filterValues, setFilterValues] = React.useState<FilterValues>({\n    myTasks: 'true', // Default to \"My Tasks\" view\n  })\n\n  const { data, isLoading, error } = useQuery({\n    queryKey: ['workflow-tasks', 'list', filterValues, page],\n    queryFn: async () => {\n      const params = new URLSearchParams()\n      const offset = (page - 1) * pageSize\n      params.set('limit', pageSize.toString())\n      params.set('offset', offset.toString())\n\n      if (filterValues.status) params.set('status', filterValues.status as string)\n      if (filterValues.overdue === 'true') params.set('overdue', 'true')\n      if (filterValues.workflowInstanceId) params.set('workflowInstanceId', filterValues.workflowInstanceId as string)\n\n      const result = await apiCall<TasksResponse>(\n        `/api/workflows/tasks?${params.toString()}`\n      )\n\n      if (!result.ok) {\n        throw new Error('Failed to fetch user tasks')\n      }\n\n      const response = result.result\n      if (response?.pagination) {\n        setTotal(response.pagination.total || 0)\n        const calculatedPages = Math.ceil((response.pagination.total || 0) / pageSize)\n        setTotalPages(calculatedPages || 1)\n        setTotalIsCapped(response.pagination?.totalIsCapped === true)\n      }\n\n      return response?.data || []\n    },\n  })\n\n  const handleClaim = async (id: string, taskName: string) => {\n    const confirmed = await confirmDialog({\n      title: t('workflows.tasks.confirm.claim', { name: taskName }),\n      variant: 'default',\n    })\n    if (!confirmed) {\n      return\n    }\n\n    const result = await apiCall(`/api/workflows/tasks/${id}/claim`, {\n      method: 'POST',\n    })\n\n    if (result.ok) {\n      flash(t('workflows.tasks.messages.claimed'), 'success')\n      queryClient.invalidateQueries({ queryKey: ['workflow-tasks'] })\n    } else {\n      flash(t('workflows.tasks.messages.claimFailed'), 'error')\n    }\n  }\n\n  const handleFiltersApply = React.useCallback((values: FilterValues) => {\n    const next: FilterValues = {}\n    Object.entries(values).forEach(([key, value]) => {\n      if (value !== undefined && value !== '') next[key] = value\n    })\n    setFilterValues(next)\n    setPage(1)\n  }, [])\n\n  const handleFiltersClear = React.useCallback(() => {\n    setFilterValues({ myTasks: 'true' })\n    setPage(1)\n  }, [])\n\n  const getStatusBadgeClass = (status: UserTaskStatus) => {\n    switch (status) {\n      case 'PENDING':\n        return 'bg-status-warning-bg text-status-warning-text'\n      case 'IN_PROGRESS':\n        return 'bg-status-info-bg text-status-info-text'\n      case 'COMPLETED':\n        return 'bg-status-success-bg text-status-success-text'\n      case 'CANCELLED':\n        return 'bg-muted text-foreground'\n      default:\n        return 'bg-muted text-muted-foreground'\n    }\n  }\n\n  const isOverdue = (task: UserTask) => {\n    if (!task.dueDate || task.status === 'COMPLETED' || task.status === 'CANCELLED') {\n      return false\n    }\n    return new Date(task.dueDate) < new Date()\n  }\n\n  const filters: FilterDef[] = [\n    {\n      id: 'status',\n      type: 'select',\n      label: t('workflows.tasks.filters.status'),\n      options: [\n        { label: t('common.all'), value: '' },\n        { label: t('workflows.tasks.statuses.PENDING'), value: 'PENDING' },\n        { label: t('workflows.tasks.statuses.IN_PROGRESS'), value: 'IN_PROGRESS' },\n        { label: t('workflows.tasks.statuses.COMPLETED'), value: 'COMPLETED' },\n        { label: t('workflows.tasks.statuses.CANCELLED'), value: 'CANCELLED' },\n      ],\n    },\n    {\n      id: 'myTasks',\n      type: 'select',\n      label: t('workflows.tasks.filters.view'),\n      options: [\n        { label: t('workflows.tasks.filters.myTasks'), value: 'true' },\n        { label: t('workflows.tasks.filters.allTasks'), value: '' },\n      ],\n    },\n    {\n      id: 'overdue',\n      type: 'select',\n      label: t('workflows.tasks.filters.overdue'),\n      options: [\n        { label: t('common.all'), value: '' },\n        { label: t('workflows.tasks.filters.overdueOnly'), value: 'true' },\n      ],\n    },\n    {\n      id: 'workflowInstanceId',\n      type: 'text',\n      label: t('workflows.tasks.filters.workflowInstanceId'),\n      placeholder: t('workflows.tasks.filters.workflowInstanceIdPlaceholder'),\n    },\n  ]\n\n  const columns: ColumnDef<UserTask>[] = [\n    {\n      id: 'taskName',\n      header: t('workflows.tasks.fields.taskName'),\n      accessorKey: 'taskName',\n      cell: ({ row }) => (\n        <div>\n          <div className=\"font-medium text-sm\">{row.original.taskName}</div>\n          {row.original.description && (\n            <div className=\"text-xs text-muted-foreground line-clamp-1\">\n              {row.original.description}\n            </div>\n          )}\n          {isOverdue(row.original) && (\n            <div className=\"text-xs text-status-error-text font-medium mt-1\">\n              {t('workflows.tasks.overdue')}\n            </div>\n          )}\n        </div>\n      ),\n    },\n    {\n      id: 'status',\n      header: t('workflows.tasks.fields.status'),\n      accessorKey: 'status',\n      cell: ({ row }) => (\n        <span className={`inline-flex items-center px-2 py-1 rounded text-xs font-medium ${getStatusBadgeClass(row.original.status)}`}>\n          {t(`workflows.tasks.statuses.${row.original.status}`)}\n        </span>\n      ),\n    },\n    {\n      id: 'assignment',\n      header: t('workflows.tasks.fields.assignment'),\n      cell: ({ row }) => {\n        if (row.original.claimedBy) {\n          return (\n            <div className=\"text-sm\">\n              <div className=\"text-foreground\">{t('workflows.tasks.claimedBy')}: {row.original.claimedBy}</div>\n            </div>\n          )\n        }\n        if (row.original.assignedTo) {\n          return <div className=\"text-sm text-foreground\">{row.original.assignedTo}</div>\n        }\n        if (row.original.assignedToRoles && row.original.assignedToRoles.length > 0) {\n          return (\n            <div className=\"text-sm text-muted-foreground\">\n              {t('workflows.tasks.roles')}: {row.original.assignedToRoles.join(', ')}\n            </div>\n          )\n        }\n        return <span className=\"text-sm text-muted-foreground\">-</span>\n      },\n    },\n    {\n      id: 'dueDate',\n      header: t('workflows.tasks.fields.dueDate'),\n      accessorKey: 'dueDate',\n      cell: ({ row }) => {\n        if (!row.original.dueDate) {\n          return <span className=\"text-sm text-muted-foreground\">-</span>\n        }\n        const dueDate = new Date(row.original.dueDate)\n        const overdue = isOverdue(row.original)\n        return (\n          <div className={`text-sm ${overdue ? 'text-status-error-text font-medium' : 'text-foreground'}`}>\n            {dueDate.toLocaleString()}\n          </div>\n        )\n      },\n    },\n    {\n      id: 'createdAt',\n      header: t('workflows.tasks.fields.createdAt'),\n      accessorKey: 'createdAt',\n      cell: ({ row }) => (\n        <span className=\"text-sm text-muted-foreground\">\n          {new Date(row.original.createdAt).toLocaleString()}\n        </span>\n      ),\n    },\n    {\n      id: 'actions',\n      header: '',\n      cell: ({ row }) => {\n        const items: Array<{ id: string; label: string; href?: string; onSelect?: () => void }> = [\n          {\n            id: 'view',\n            label: t('workflows.tasks.actions.viewDetails'),\n            href: `/backend/tasks/${row.original.id}`,\n          },\n        ]\n\n        // Allow claiming if task is PENDING and assigned to roles (not specific user)\n        if (\n          row.original.status === 'PENDING' &&\n          !row.original.assignedTo &&\n          row.original.assignedToRoles &&\n          row.original.assignedToRoles.length > 0\n        ) {\n          items.push({\n            id: 'claim',\n            label: t('workflows.tasks.actions.claim'),\n            onSelect: () => void handleClaim(row.original.id, row.original.taskName),\n          })\n        }\n\n        // Allow completing if task is in progress or pending\n        if (row.original.status === 'PENDING' || row.original.status === 'IN_PROGRESS') {\n          items.push({\n            id: 'complete',\n            label: t('workflows.tasks.actions.complete'),\n            href: `/backend/tasks/${row.original.id}`,\n          })\n        }\n\n        return <RowActions items={items} />\n      },\n    },\n  ]\n\n  if (error) {\n    return (\n      <Page>\n        <PageBody>\n          <div className=\"p-8 text-center\">\n            <p className=\"text-status-error-text\">{t('workflows.tasks.messages.loadFailed')}</p>\n            <Button onClick={() => queryClient.invalidateQueries({ queryKey: ['workflow-tasks'] })} className=\"mt-4\">\n              {t('common.retry')}\n            </Button>\n          </div>\n        </PageBody>\n      </Page>\n    )\n  }\n\n  return (\n    <Page>\n      <PageBody>\n        <DataTable\n          title={t('workflows.tasks.list.title')}\n          columns={columns}\n          data={data || []}\n          filters={filters}\n          filterValues={filterValues}\n          onFiltersApply={handleFiltersApply}\n          onFiltersClear={handleFiltersClear}\n          perspective={{\n            tableId: extensionPoints.hosts.tasksTable.tableId,\n          }}\n          pagination={{ page, pageSize, total, totalPages, totalIsCapped, onPageChange: setPage }}\n        />\n      </PageBody>\n      {ConfirmDialogElement}\n    </Page>\n  )\n}\n"],
-  "mappings": ";AA4MQ,SACE,KADF;AA1MR,YAAY,WAAW;AACvB,SAAS,uBAAuB;AAEhC,SAAS,iBAAiB;AAC1B,SAAS,MAAM,gBAAgB;AAC/B,SAAS,iBAAiB;AAE1B,SAAS,cAAc;AACvB,SAAS,kBAAkB;AAC3B,SAAS,eAAe;AACxB,SAAS,aAAa;AACtB,SAAS,UAAU,sBAAsB;AACzC,SAAS,YAAY;AAErB,SAAS,wBAAwB;AAwClB,SAAR,oBAAqC;AAC1C,QAAM,CAAC,MAAM,OAAO,IAAI,MAAM,SAAS,CAAC;AACxC,QAAM,CAAC,QAAQ,IAAI,MAAM,SAAS,EAAE;AACpC,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAS,CAAC;AAC1C,QAAM,CAAC,YAAY,aAAa,IAAI,MAAM,SAAS,CAAC;AACpD,QAAM,CAAC,eAAe,gBAAgB,IAAI,MAAM,SAAS,KAAK;AAC9D,QAAM,IAAI,KAAK;AACf,QAAM,SAAS,UAAU;AACzB,QAAM,cAAc,eAAe;AACnC,QAAM,EAAE,SAAS,eAAe,qBAAqB,IAAI,iBAAiB;AAC1E,QAAM,CAAC,cAAc,eAAe,IAAI,MAAM,SAAuB;AAAA,IACnE,SAAS;AAAA;AAAA,EACX,CAAC;AAED,QAAM,EAAE,MAAM,WAAW,MAAM,IAAI,SAAS;AAAA,IAC1C,UAAU,CAAC,kBAAkB,QAAQ,cAAc,IAAI;AAAA,IACvD,SAAS,YAAY;AACnB,YAAM,SAAS,IAAI,gBAAgB;AACnC,YAAM,UAAU,OAAO,KAAK;AAC5B,aAAO,IAAI,SAAS,SAAS,SAAS,CAAC;AACvC,aAAO,IAAI,UAAU,OAAO,SAAS,CAAC;AAEtC,UAAI,aAAa,OAAQ,QAAO,IAAI,UAAU,aAAa,MAAgB;AAC3E,UAAI,aAAa,YAAY,OAAQ,QAAO,IAAI,WAAW,MAAM;AACjE,UAAI,aAAa,mBAAoB,QAAO,IAAI,sBAAsB,aAAa,kBAA4B;AAE/G,YAAM,SAAS,MAAM;AAAA,QACnB,wBAAwB,OAAO,SAAS,CAAC;AAAA,MAC3C;AAEA,UAAI,CAAC,OAAO,IAAI;AACd,cAAM,IAAI,MAAM,4BAA4B;AAAA,MAC9C;AAEA,YAAM,WAAW,OAAO;AACxB,UAAI,UAAU,YAAY;AACxB,iBAAS,SAAS,WAAW,SAAS,CAAC;AACvC,cAAM,kBAAkB,KAAK,MAAM,SAAS,WAAW,SAAS,KAAK,QAAQ;AAC7E,sBAAc,mBAAmB,CAAC;AAClC,yBAAiB,SAAS,YAAY,kBAAkB,IAAI;AAAA,MAC9D;AAEA,aAAO,UAAU,QAAQ,CAAC;AAAA,IAC5B;AAAA,EACF,CAAC;AAED,QAAM,cAAc,OAAO,IAAY,aAAqB;AAC1D,UAAM,YAAY,MAAM,cAAc;AAAA,MACpC,OAAO,EAAE,iCAAiC,EAAE,MAAM,SAAS,CAAC;AAAA,MAC5D,SAAS;AAAA,IACX,CAAC;AACD,QAAI,CAAC,WAAW;AACd;AAAA,IACF;AAEA,UAAM,SAAS,MAAM,QAAQ,wBAAwB,EAAE,UAAU;AAAA,MAC/D,QAAQ;AAAA,IACV,CAAC;AAED,QAAI,OAAO,IAAI;AACb,YAAM,EAAE,kCAAkC,GAAG,SAAS;AACtD,kBAAY,kBAAkB,EAAE,UAAU,CAAC,gBAAgB,EAAE,CAAC;AAAA,IAChE,OAAO;AACL,YAAM,EAAE,sCAAsC,GAAG,OAAO;AAAA,IAC1D;AAAA,EACF;AAEA,QAAM,qBAAqB,MAAM,YAAY,CAAC,WAAyB;AACrE,UAAM,OAAqB,CAAC;AAC5B,WAAO,QAAQ,MAAM,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM;AAC/C,UAAI,UAAU,UAAa,UAAU,GAAI,MAAK,GAAG,IAAI;AAAA,IACvD,CAAC;AACD,oBAAgB,IAAI;AACpB,YAAQ,CAAC;AAAA,EACX,GAAG,CAAC,CAAC;AAEL,QAAM,qBAAqB,MAAM,YAAY,MAAM;AACjD,oBAAgB,EAAE,SAAS,OAAO,CAAC;AACnC,YAAQ,CAAC;AAAA,EACX,GAAG,CAAC,CAAC;AAEL,QAAM,sBAAsB,CAAC,WAA2B;AACtD,YAAQ,QAAQ;AAAA,MACd,KAAK;AACH,eAAO;AAAA,MACT,KAAK;AACH,eAAO;AAAA,MACT,KAAK;AACH,eAAO;AAAA,MACT,KAAK;AACH,eAAO;AAAA,MACT;AACE,eAAO;AAAA,IACX;AAAA,EACF;AAEA,QAAM,YAAY,CAAC,SAAmB;AACpC,QAAI,CAAC,KAAK,WAAW,KAAK,WAAW,eAAe,KAAK,WAAW,aAAa;AAC/E,aAAO;AAAA,IACT;AACA,WAAO,IAAI,KAAK,KAAK,OAAO,IAAI,oBAAI,KAAK;AAAA,EAC3C;AAEA,QAAM,UAAuB;AAAA,IAC3B;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO,EAAE,gCAAgC;AAAA,MACzC,SAAS;AAAA,QACP,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,GAAG;AAAA,QACpC,EAAE,OAAO,EAAE,kCAAkC,GAAG,OAAO,UAAU;AAAA,QACjE,EAAE,OAAO,EAAE,sCAAsC,GAAG,OAAO,cAAc;AAAA,QACzE,EAAE,OAAO,EAAE,oCAAoC,GAAG,OAAO,YAAY;AAAA,QACrE,EAAE,OAAO,EAAE,oCAAoC,GAAG,OAAO,YAAY;AAAA,MACvE;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO,EAAE,8BAA8B;AAAA,MACvC,SAAS;AAAA,QACP,EAAE,OAAO,EAAE,iCAAiC,GAAG,OAAO,OAAO;AAAA,QAC7D,EAAE,OAAO,EAAE,kCAAkC,GAAG,OAAO,GAAG;AAAA,MAC5D;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO,EAAE,iCAAiC;AAAA,MAC1C,SAAS;AAAA,QACP,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,GAAG;AAAA,QACpC,EAAE,OAAO,EAAE,qCAAqC,GAAG,OAAO,OAAO;AAAA,MACnE;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO,EAAE,4CAA4C;AAAA,MACrD,aAAa,EAAE,uDAAuD;AAAA,IACxE;AAAA,EACF;AAEA,QAAM,UAAiC;AAAA,IACrC;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ,EAAE,iCAAiC;AAAA,MAC3C,aAAa;AAAA,MACb,MAAM,CAAC,EAAE,IAAI,MACX,qBAAC,SACC;AAAA,4BAAC,SAAI,WAAU,uBAAuB,cAAI,SAAS,UAAS;AAAA,QAC3D,IAAI,SAAS,eACZ,oBAAC,SAAI,WAAU,8CACZ,cAAI,SAAS,aAChB;AAAA,QAED,UAAU,IAAI,QAAQ,KACrB,oBAAC,SAAI,WAAU,mDACZ,YAAE,yBAAyB,GAC9B;AAAA,SAEJ;AAAA,IAEJ;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ,EAAE,+BAA+B;AAAA,MACzC,aAAa;AAAA,MACb,MAAM,CAAC,EAAE,IAAI,MACX,oBAAC,UAAK,WAAW,kEAAkE,oBAAoB,IAAI,SAAS,MAAM,CAAC,IACxH,YAAE,4BAA4B,IAAI,SAAS,MAAM,EAAE,GACtD;AAAA,IAEJ;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ,EAAE,mCAAmC;AAAA,MAC7C,MAAM,CAAC,EAAE,IAAI,MAAM;AACjB,YAAI,IAAI,SAAS,WAAW;AAC1B,iBACE,oBAAC,SAAI,WAAU,WACb,+BAAC,SAAI,WAAU,mBAAmB;AAAA,cAAE,2BAA2B;AAAA,YAAE;AAAA,YAAG,IAAI,SAAS;AAAA,aAAU,GAC7F;AAAA,QAEJ;AACA,YAAI,IAAI,SAAS,YAAY;AAC3B,iBAAO,oBAAC,SAAI,WAAU,2BAA2B,cAAI,SAAS,YAAW;AAAA,QAC3E;AACA,YAAI,IAAI,SAAS,mBAAmB,IAAI,SAAS,gBAAgB,SAAS,GAAG;AAC3E,iBACE,qBAAC,SAAI,WAAU,iCACZ;AAAA,cAAE,uBAAuB;AAAA,YAAE;AAAA,YAAG,IAAI,SAAS,gBAAgB,KAAK,IAAI;AAAA,aACvE;AAAA,QAEJ;AACA,eAAO,oBAAC,UAAK,WAAU,iCAAgC,eAAC;AAAA,MAC1D;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ,EAAE,gCAAgC;AAAA,MAC1C,aAAa;AAAA,MACb,MAAM,CAAC,EAAE,IAAI,MAAM;AACjB,YAAI,CAAC,IAAI,SAAS,SAAS;AACzB,iBAAO,oBAAC,UAAK,WAAU,iCAAgC,eAAC;AAAA,QAC1D;AACA,cAAM,UAAU,IAAI,KAAK,IAAI,SAAS,OAAO;AAC7C,cAAM,UAAU,UAAU,IAAI,QAAQ;AACtC,eACE,oBAAC,SAAI,WAAW,WAAW,UAAU,uCAAuC,iBAAiB,IAC1F,kBAAQ,eAAe,GAC1B;AAAA,MAEJ;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ,EAAE,kCAAkC;AAAA,MAC5C,aAAa;AAAA,MACb,MAAM,CAAC,EAAE,IAAI,MACX,oBAAC,UAAK,WAAU,iCACb,cAAI,KAAK,IAAI,SAAS,SAAS,EAAE,eAAe,GACnD;AAAA,IAEJ;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ;AAAA,MACR,MAAM,CAAC,EAAE,IAAI,MAAM;AACjB,cAAM,QAAoF;AAAA,UACxF;AAAA,YACE,IAAI;AAAA,YACJ,OAAO,EAAE,qCAAqC;AAAA,YAC9C,MAAM,kBAAkB,IAAI,SAAS,EAAE;AAAA,UACzC;AAAA,QACF;AAGA,YACE,IAAI,SAAS,WAAW,aACxB,CAAC,IAAI,SAAS,cACd,IAAI,SAAS,mBACb,IAAI,SAAS,gBAAgB,SAAS,GACtC;AACA,gBAAM,KAAK;AAAA,YACT,IAAI;AAAA,YACJ,OAAO,EAAE,+BAA+B;AAAA,YACxC,UAAU,MAAM,KAAK,YAAY,IAAI,SAAS,IAAI,IAAI,SAAS,QAAQ;AAAA,UACzE,CAAC;AAAA,QACH;AAGA,YAAI,IAAI,SAAS,WAAW,aAAa,IAAI,SAAS,WAAW,eAAe;AAC9E,gBAAM,KAAK;AAAA,YACT,IAAI;AAAA,YACJ,OAAO,EAAE,kCAAkC;AAAA,YAC3C,MAAM,kBAAkB,IAAI,SAAS,EAAE;AAAA,UACzC,CAAC;AAAA,QACH;AAEA,eAAO,oBAAC,cAAW,OAAc;AAAA,MACnC;AAAA,IACF;AAAA,EACF;AAEA,MAAI,OAAO;AACT,WACE,oBAAC,QACC,8BAAC,YACC,+BAAC,SAAI,WAAU,mBACb;AAAA,0BAAC,OAAE,WAAU,0BAA0B,YAAE,qCAAqC,GAAE;AAAA,MAChF,oBAAC,UAAO,SAAS,MAAM,YAAY,kBAAkB,EAAE,UAAU,CAAC,gBAAgB,EAAE,CAAC,GAAG,WAAU,QAC/F,YAAE,cAAc,GACnB;AAAA,OACF,GACF,GACF;AAAA,EAEJ;AAEA,SACE,qBAAC,QACC;AAAA,wBAAC,YACC;AAAA,MAAC;AAAA;AAAA,QACC,OAAO,EAAE,4BAA4B;AAAA,QACrC;AAAA,QACA,MAAM,QAAQ,CAAC;AAAA,QACf;AAAA,QACA;AAAA,QACA,gBAAgB;AAAA,QAChB,gBAAgB;AAAA,QAChB,aAAa;AAAA,UACX,SAAS,gBAAgB,MAAM,WAAW;AAAA,QAC5C;AAAA,QACA,YAAY,EAAE,MAAM,UAAU,OAAO,YAAY,eAAe,cAAc,QAAQ;AAAA;AAAA,IACxF,GACF;AAAA,IACC;AAAA,KACH;AAEJ;",
+  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport { extensionPoints } from '@open-mercato/core/modules/workflows/extension-points'\nimport Link from 'next/link'\nimport { useRouter } from 'next/navigation'\nimport { Page, PageBody } from '@open-mercato/ui/backend/Page'\nimport { DataTable } from '@open-mercato/ui/backend/DataTable'\nimport type { LegacyColumnDef as ColumnDef } from '@tanstack/react-table/legacy'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { RowActions } from '@open-mercato/ui/backend/RowActions'\nimport { apiCall } from '@open-mercato/ui/backend/utils/apiCall'\nimport { flash } from '@open-mercato/ui/backend/FlashMessages'\nimport { useQuery, useQueryClient } from '@tanstack/react-query'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport type { FilterDef, FilterValues } from '@open-mercato/ui/backend/FilterBar'\nimport { useConfirmDialog } from '@open-mercato/ui/backend/confirm-dialog'\n\ntype UserTaskStatus = 'PENDING' | 'IN_PROGRESS' | 'COMPLETED' | 'CANCELLED'\n\ntype UserTask = {\n  id: string\n  workflowInstanceId: string\n  stepInstanceId: string\n  taskName: string\n  description: string | null\n  status: UserTaskStatus\n  formSchema: any | null\n  formData: any | null\n  assignedTo: string | null\n  assignedToRoles: string[] | null\n  claimedBy: string | null\n  claimedAt: string | null\n  dueDate: string | null\n  escalatedAt: string | null\n  escalatedTo: string | null\n  completedBy: string | null\n  completedAt: string | null\n  comments: string | null\n  tenantId: string\n  organizationId: string\n  createdAt: string\n  updatedAt: string\n}\n\ntype TasksResponse = {\n  data: UserTask[]\n  pagination: {\n    total: number\n    limit: number\n    offset: number\n    hasMore: boolean\n  }\n}\n\nexport default function UserTasksListPage() {\n  const [page, setPage] = React.useState(1)\n  const [pageSize] = React.useState(50)\n  const [total, setTotal] = React.useState(0)\n  const [totalPages, setTotalPages] = React.useState(1)\n  const t = useT()\n  const router = useRouter()\n  const queryClient = useQueryClient()\n  const { confirm: confirmDialog, ConfirmDialogElement } = useConfirmDialog()\n  const [filterValues, setFilterValues] = React.useState<FilterValues>({\n    myTasks: 'true', // Default to \"My Tasks\" view\n  })\n\n  const { data, isLoading, error } = useQuery({\n    queryKey: ['workflow-tasks', 'list', filterValues, page],\n    queryFn: async () => {\n      const params = new URLSearchParams()\n      const offset = (page - 1) * pageSize\n      params.set('limit', pageSize.toString())\n      params.set('offset', offset.toString())\n\n      if (filterValues.status) params.set('status', filterValues.status as string)\n      if (filterValues.overdue === 'true') params.set('overdue', 'true')\n      if (filterValues.workflowInstanceId) params.set('workflowInstanceId', filterValues.workflowInstanceId as string)\n\n      const result = await apiCall<TasksResponse>(\n        `/api/workflows/tasks?${params.toString()}`\n      )\n\n      if (!result.ok) {\n        throw new Error('Failed to fetch user tasks')\n      }\n\n      const response = result.result\n      if (response?.pagination) {\n        setTotal(response.pagination.total || 0)\n        const calculatedPages = Math.ceil((response.pagination.total || 0) / pageSize)\n        setTotalPages(calculatedPages || 1)\n      }\n\n      return response?.data || []\n    },\n  })\n\n  const handleClaim = async (id: string, taskName: string) => {\n    const confirmed = await confirmDialog({\n      title: t('workflows.tasks.confirm.claim', { name: taskName }),\n      variant: 'default',\n    })\n    if (!confirmed) {\n      return\n    }\n\n    const result = await apiCall(`/api/workflows/tasks/${id}/claim`, {\n      method: 'POST',\n    })\n\n    if (result.ok) {\n      flash(t('workflows.tasks.messages.claimed'), 'success')\n      queryClient.invalidateQueries({ queryKey: ['workflow-tasks'] })\n    } else {\n      flash(t('workflows.tasks.messages.claimFailed'), 'error')\n    }\n  }\n\n  const handleFiltersApply = React.useCallback((values: FilterValues) => {\n    const next: FilterValues = {}\n    Object.entries(values).forEach(([key, value]) => {\n      if (value !== undefined && value !== '') next[key] = value\n    })\n    setFilterValues(next)\n    setPage(1)\n  }, [])\n\n  const handleFiltersClear = React.useCallback(() => {\n    setFilterValues({ myTasks: 'true' })\n    setPage(1)\n  }, [])\n\n  const getStatusBadgeClass = (status: UserTaskStatus) => {\n    switch (status) {\n      case 'PENDING':\n        return 'bg-status-warning-bg text-status-warning-text'\n      case 'IN_PROGRESS':\n        return 'bg-status-info-bg text-status-info-text'\n      case 'COMPLETED':\n        return 'bg-status-success-bg text-status-success-text'\n      case 'CANCELLED':\n        return 'bg-muted text-foreground'\n      default:\n        return 'bg-muted text-muted-foreground'\n    }\n  }\n\n  const isOverdue = (task: UserTask) => {\n    if (!task.dueDate || task.status === 'COMPLETED' || task.status === 'CANCELLED') {\n      return false\n    }\n    return new Date(task.dueDate) < new Date()\n  }\n\n  const filters: FilterDef[] = [\n    {\n      id: 'status',\n      type: 'select',\n      label: t('workflows.tasks.filters.status'),\n      options: [\n        { label: t('common.all'), value: '' },\n        { label: t('workflows.tasks.statuses.PENDING'), value: 'PENDING' },\n        { label: t('workflows.tasks.statuses.IN_PROGRESS'), value: 'IN_PROGRESS' },\n        { label: t('workflows.tasks.statuses.COMPLETED'), value: 'COMPLETED' },\n        { label: t('workflows.tasks.statuses.CANCELLED'), value: 'CANCELLED' },\n      ],\n    },\n    {\n      id: 'myTasks',\n      type: 'select',\n      label: t('workflows.tasks.filters.view'),\n      options: [\n        { label: t('workflows.tasks.filters.myTasks'), value: 'true' },\n        { label: t('workflows.tasks.filters.allTasks'), value: '' },\n      ],\n    },\n    {\n      id: 'overdue',\n      type: 'select',\n      label: t('workflows.tasks.filters.overdue'),\n      options: [\n        { label: t('common.all'), value: '' },\n        { label: t('workflows.tasks.filters.overdueOnly'), value: 'true' },\n      ],\n    },\n    {\n      id: 'workflowInstanceId',\n      type: 'text',\n      label: t('workflows.tasks.filters.workflowInstanceId'),\n      placeholder: t('workflows.tasks.filters.workflowInstanceIdPlaceholder'),\n    },\n  ]\n\n  const columns: ColumnDef<UserTask>[] = [\n    {\n      id: 'taskName',\n      header: t('workflows.tasks.fields.taskName'),\n      accessorKey: 'taskName',\n      cell: ({ row }) => (\n        <div>\n          <div className=\"font-medium text-sm\">{row.original.taskName}</div>\n          {row.original.description && (\n            <div className=\"text-xs text-muted-foreground line-clamp-1\">\n              {row.original.description}\n            </div>\n          )}\n          {isOverdue(row.original) && (\n            <div className=\"text-xs text-status-error-text font-medium mt-1\">\n              {t('workflows.tasks.overdue')}\n            </div>\n          )}\n        </div>\n      ),\n    },\n    {\n      id: 'status',\n      header: t('workflows.tasks.fields.status'),\n      accessorKey: 'status',\n      cell: ({ row }) => (\n        <span className={`inline-flex items-center px-2 py-1 rounded text-xs font-medium ${getStatusBadgeClass(row.original.status)}`}>\n          {t(`workflows.tasks.statuses.${row.original.status}`)}\n        </span>\n      ),\n    },\n    {\n      id: 'assignment',\n      header: t('workflows.tasks.fields.assignment'),\n      cell: ({ row }) => {\n        if (row.original.claimedBy) {\n          return (\n            <div className=\"text-sm\">\n              <div className=\"text-foreground\">{t('workflows.tasks.claimedBy')}: {row.original.claimedBy}</div>\n            </div>\n          )\n        }\n        if (row.original.assignedTo) {\n          return <div className=\"text-sm text-foreground\">{row.original.assignedTo}</div>\n        }\n        if (row.original.assignedToRoles && row.original.assignedToRoles.length > 0) {\n          return (\n            <div className=\"text-sm text-muted-foreground\">\n              {t('workflows.tasks.roles')}: {row.original.assignedToRoles.join(', ')}\n            </div>\n          )\n        }\n        return <span className=\"text-sm text-muted-foreground\">-</span>\n      },\n    },\n    {\n      id: 'dueDate',\n      header: t('workflows.tasks.fields.dueDate'),\n      accessorKey: 'dueDate',\n      cell: ({ row }) => {\n        if (!row.original.dueDate) {\n          return <span className=\"text-sm text-muted-foreground\">-</span>\n        }\n        const dueDate = new Date(row.original.dueDate)\n        const overdue = isOverdue(row.original)\n        return (\n          <div className={`text-sm ${overdue ? 'text-status-error-text font-medium' : 'text-foreground'}`}>\n            {dueDate.toLocaleString()}\n          </div>\n        )\n      },\n    },\n    {\n      id: 'createdAt',\n      header: t('workflows.tasks.fields.createdAt'),\n      accessorKey: 'createdAt',\n      cell: ({ row }) => (\n        <span className=\"text-sm text-muted-foreground\">\n          {new Date(row.original.createdAt).toLocaleString()}\n        </span>\n      ),\n    },\n    {\n      id: 'actions',\n      header: '',\n      cell: ({ row }) => {\n        const items: Array<{ id: string; label: string; href?: string; onSelect?: () => void }> = [\n          {\n            id: 'view',\n            label: t('workflows.tasks.actions.viewDetails'),\n            href: `/backend/tasks/${row.original.id}`,\n          },\n        ]\n\n        // Allow claiming if task is PENDING and assigned to roles (not specific user)\n        if (\n          row.original.status === 'PENDING' &&\n          !row.original.assignedTo &&\n          row.original.assignedToRoles &&\n          row.original.assignedToRoles.length > 0\n        ) {\n          items.push({\n            id: 'claim',\n            label: t('workflows.tasks.actions.claim'),\n            onSelect: () => void handleClaim(row.original.id, row.original.taskName),\n          })\n        }\n\n        // Allow completing if task is in progress or pending\n        if (row.original.status === 'PENDING' || row.original.status === 'IN_PROGRESS') {\n          items.push({\n            id: 'complete',\n            label: t('workflows.tasks.actions.complete'),\n            href: `/backend/tasks/${row.original.id}`,\n          })\n        }\n\n        return <RowActions items={items} />\n      },\n    },\n  ]\n\n  if (error) {\n    return (\n      <Page>\n        <PageBody>\n          <div className=\"p-8 text-center\">\n            <p className=\"text-status-error-text\">{t('workflows.tasks.messages.loadFailed')}</p>\n            <Button onClick={() => queryClient.invalidateQueries({ queryKey: ['workflow-tasks'] })} className=\"mt-4\">\n              {t('common.retry')}\n            </Button>\n          </div>\n        </PageBody>\n      </Page>\n    )\n  }\n\n  return (\n    <Page>\n      <PageBody>\n        <DataTable\n          title={t('workflows.tasks.list.title')}\n          columns={columns}\n          data={data || []}\n          filters={filters}\n          filterValues={filterValues}\n          onFiltersApply={handleFiltersApply}\n          onFiltersClear={handleFiltersClear}\n          perspective={{\n            tableId: extensionPoints.hosts.tasksTable.tableId,\n          }}\n          pagination={{ page, pageSize, total, totalPages, onPageChange: setPage }}\n        />\n      </PageBody>\n      {ConfirmDialogElement}\n    </Page>\n  )\n}\n"],
+  "mappings": ";AAyMQ,SACE,KADF;AAvMR,YAAY,WAAW;AACvB,SAAS,uBAAuB;AAEhC,SAAS,iBAAiB;AAC1B,SAAS,MAAM,gBAAgB;AAC/B,SAAS,iBAAiB;AAE1B,SAAS,cAAc;AACvB,SAAS,kBAAkB;AAC3B,SAAS,eAAe;AACxB,SAAS,aAAa;AACtB,SAAS,UAAU,sBAAsB;AACzC,SAAS,YAAY;AAErB,SAAS,wBAAwB;AAuClB,SAAR,oBAAqC;AAC1C,QAAM,CAAC,MAAM,OAAO,IAAI,MAAM,SAAS,CAAC;AACxC,QAAM,CAAC,QAAQ,IAAI,MAAM,SAAS,EAAE;AACpC,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAS,CAAC;AAC1C,QAAM,CAAC,YAAY,aAAa,IAAI,MAAM,SAAS,CAAC;AACpD,QAAM,IAAI,KAAK;AACf,QAAM,SAAS,UAAU;AACzB,QAAM,cAAc,eAAe;AACnC,QAAM,EAAE,SAAS,eAAe,qBAAqB,IAAI,iBAAiB;AAC1E,QAAM,CAAC,cAAc,eAAe,IAAI,MAAM,SAAuB;AAAA,IACnE,SAAS;AAAA;AAAA,EACX,CAAC;AAED,QAAM,EAAE,MAAM,WAAW,MAAM,IAAI,SAAS;AAAA,IAC1C,UAAU,CAAC,kBAAkB,QAAQ,cAAc,IAAI;AAAA,IACvD,SAAS,YAAY;AACnB,YAAM,SAAS,IAAI,gBAAgB;AACnC,YAAM,UAAU,OAAO,KAAK;AAC5B,aAAO,IAAI,SAAS,SAAS,SAAS,CAAC;AACvC,aAAO,IAAI,UAAU,OAAO,SAAS,CAAC;AAEtC,UAAI,aAAa,OAAQ,QAAO,IAAI,UAAU,aAAa,MAAgB;AAC3E,UAAI,aAAa,YAAY,OAAQ,QAAO,IAAI,WAAW,MAAM;AACjE,UAAI,aAAa,mBAAoB,QAAO,IAAI,sBAAsB,aAAa,kBAA4B;AAE/G,YAAM,SAAS,MAAM;AAAA,QACnB,wBAAwB,OAAO,SAAS,CAAC;AAAA,MAC3C;AAEA,UAAI,CAAC,OAAO,IAAI;AACd,cAAM,IAAI,MAAM,4BAA4B;AAAA,MAC9C;AAEA,YAAM,WAAW,OAAO;AACxB,UAAI,UAAU,YAAY;AACxB,iBAAS,SAAS,WAAW,SAAS,CAAC;AACvC,cAAM,kBAAkB,KAAK,MAAM,SAAS,WAAW,SAAS,KAAK,QAAQ;AAC7E,sBAAc,mBAAmB,CAAC;AAAA,MACpC;AAEA,aAAO,UAAU,QAAQ,CAAC;AAAA,IAC5B;AAAA,EACF,CAAC;AAED,QAAM,cAAc,OAAO,IAAY,aAAqB;AAC1D,UAAM,YAAY,MAAM,cAAc;AAAA,MACpC,OAAO,EAAE,iCAAiC,EAAE,MAAM,SAAS,CAAC;AAAA,MAC5D,SAAS;AAAA,IACX,CAAC;AACD,QAAI,CAAC,WAAW;AACd;AAAA,IACF;AAEA,UAAM,SAAS,MAAM,QAAQ,wBAAwB,EAAE,UAAU;AAAA,MAC/D,QAAQ;AAAA,IACV,CAAC;AAED,QAAI,OAAO,IAAI;AACb,YAAM,EAAE,kCAAkC,GAAG,SAAS;AACtD,kBAAY,kBAAkB,EAAE,UAAU,CAAC,gBAAgB,EAAE,CAAC;AAAA,IAChE,OAAO;AACL,YAAM,EAAE,sCAAsC,GAAG,OAAO;AAAA,IAC1D;AAAA,EACF;AAEA,QAAM,qBAAqB,MAAM,YAAY,CAAC,WAAyB;AACrE,UAAM,OAAqB,CAAC;AAC5B,WAAO,QAAQ,MAAM,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM;AAC/C,UAAI,UAAU,UAAa,UAAU,GAAI,MAAK,GAAG,IAAI;AAAA,IACvD,CAAC;AACD,oBAAgB,IAAI;AACpB,YAAQ,CAAC;AAAA,EACX,GAAG,CAAC,CAAC;AAEL,QAAM,qBAAqB,MAAM,YAAY,MAAM;AACjD,oBAAgB,EAAE,SAAS,OAAO,CAAC;AACnC,YAAQ,CAAC;AAAA,EACX,GAAG,CAAC,CAAC;AAEL,QAAM,sBAAsB,CAAC,WAA2B;AACtD,YAAQ,QAAQ;AAAA,MACd,KAAK;AACH,eAAO;AAAA,MACT,KAAK;AACH,eAAO;AAAA,MACT,KAAK;AACH,eAAO;AAAA,MACT,KAAK;AACH,eAAO;AAAA,MACT;AACE,eAAO;AAAA,IACX;AAAA,EACF;AAEA,QAAM,YAAY,CAAC,SAAmB;AACpC,QAAI,CAAC,KAAK,WAAW,KAAK,WAAW,eAAe,KAAK,WAAW,aAAa;AAC/E,aAAO;AAAA,IACT;AACA,WAAO,IAAI,KAAK,KAAK,OAAO,IAAI,oBAAI,KAAK;AAAA,EAC3C;AAEA,QAAM,UAAuB;AAAA,IAC3B;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO,EAAE,gCAAgC;AAAA,MACzC,SAAS;AAAA,QACP,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,GAAG;AAAA,QACpC,EAAE,OAAO,EAAE,kCAAkC,GAAG,OAAO,UAAU;AAAA,QACjE,EAAE,OAAO,EAAE,sCAAsC,GAAG,OAAO,cAAc;AAAA,QACzE,EAAE,OAAO,EAAE,oCAAoC,GAAG,OAAO,YAAY;AAAA,QACrE,EAAE,OAAO,EAAE,oCAAoC,GAAG,OAAO,YAAY;AAAA,MACvE;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO,EAAE,8BAA8B;AAAA,MACvC,SAAS;AAAA,QACP,EAAE,OAAO,EAAE,iCAAiC,GAAG,OAAO,OAAO;AAAA,QAC7D,EAAE,OAAO,EAAE,kCAAkC,GAAG,OAAO,GAAG;AAAA,MAC5D;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO,EAAE,iCAAiC;AAAA,MAC1C,SAAS;AAAA,QACP,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,GAAG;AAAA,QACpC,EAAE,OAAO,EAAE,qCAAqC,GAAG,OAAO,OAAO;AAAA,MACnE;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO,EAAE,4CAA4C;AAAA,MACrD,aAAa,EAAE,uDAAuD;AAAA,IACxE;AAAA,EACF;AAEA,QAAM,UAAiC;AAAA,IACrC;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ,EAAE,iCAAiC;AAAA,MAC3C,aAAa;AAAA,MACb,MAAM,CAAC,EAAE,IAAI,MACX,qBAAC,SACC;AAAA,4BAAC,SAAI,WAAU,uBAAuB,cAAI,SAAS,UAAS;AAAA,QAC3D,IAAI,SAAS,eACZ,oBAAC,SAAI,WAAU,8CACZ,cAAI,SAAS,aAChB;AAAA,QAED,UAAU,IAAI,QAAQ,KACrB,oBAAC,SAAI,WAAU,mDACZ,YAAE,yBAAyB,GAC9B;AAAA,SAEJ;AAAA,IAEJ;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ,EAAE,+BAA+B;AAAA,MACzC,aAAa;AAAA,MACb,MAAM,CAAC,EAAE,IAAI,MACX,oBAAC,UAAK,WAAW,kEAAkE,oBAAoB,IAAI,SAAS,MAAM,CAAC,IACxH,YAAE,4BAA4B,IAAI,SAAS,MAAM,EAAE,GACtD;AAAA,IAEJ;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ,EAAE,mCAAmC;AAAA,MAC7C,MAAM,CAAC,EAAE,IAAI,MAAM;AACjB,YAAI,IAAI,SAAS,WAAW;AAC1B,iBACE,oBAAC,SAAI,WAAU,WACb,+BAAC,SAAI,WAAU,mBAAmB;AAAA,cAAE,2BAA2B;AAAA,YAAE;AAAA,YAAG,IAAI,SAAS;AAAA,aAAU,GAC7F;AAAA,QAEJ;AACA,YAAI,IAAI,SAAS,YAAY;AAC3B,iBAAO,oBAAC,SAAI,WAAU,2BAA2B,cAAI,SAAS,YAAW;AAAA,QAC3E;AACA,YAAI,IAAI,SAAS,mBAAmB,IAAI,SAAS,gBAAgB,SAAS,GAAG;AAC3E,iBACE,qBAAC,SAAI,WAAU,iCACZ;AAAA,cAAE,uBAAuB;AAAA,YAAE;AAAA,YAAG,IAAI,SAAS,gBAAgB,KAAK,IAAI;AAAA,aACvE;AAAA,QAEJ;AACA,eAAO,oBAAC,UAAK,WAAU,iCAAgC,eAAC;AAAA,MAC1D;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ,EAAE,gCAAgC;AAAA,MAC1C,aAAa;AAAA,MACb,MAAM,CAAC,EAAE,IAAI,MAAM;AACjB,YAAI,CAAC,IAAI,SAAS,SAAS;AACzB,iBAAO,oBAAC,UAAK,WAAU,iCAAgC,eAAC;AAAA,QAC1D;AACA,cAAM,UAAU,IAAI,KAAK,IAAI,SAAS,OAAO;AAC7C,cAAM,UAAU,UAAU,IAAI,QAAQ;AACtC,eACE,oBAAC,SAAI,WAAW,WAAW,UAAU,uCAAuC,iBAAiB,IAC1F,kBAAQ,eAAe,GAC1B;AAAA,MAEJ;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ,EAAE,kCAAkC;AAAA,MAC5C,aAAa;AAAA,MACb,MAAM,CAAC,EAAE,IAAI,MACX,oBAAC,UAAK,WAAU,iCACb,cAAI,KAAK,IAAI,SAAS,SAAS,EAAE,eAAe,GACnD;AAAA,IAEJ;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ;AAAA,MACR,MAAM,CAAC,EAAE,IAAI,MAAM;AACjB,cAAM,QAAoF;AAAA,UACxF;AAAA,YACE,IAAI;AAAA,YACJ,OAAO,EAAE,qCAAqC;AAAA,YAC9C,MAAM,kBAAkB,IAAI,SAAS,EAAE;AAAA,UACzC;AAAA,QACF;AAGA,YACE,IAAI,SAAS,WAAW,aACxB,CAAC,IAAI,SAAS,cACd,IAAI,SAAS,mBACb,IAAI,SAAS,gBAAgB,SAAS,GACtC;AACA,gBAAM,KAAK;AAAA,YACT,IAAI;AAAA,YACJ,OAAO,EAAE,+BAA+B;AAAA,YACxC,UAAU,MAAM,KAAK,YAAY,IAAI,SAAS,IAAI,IAAI,SAAS,QAAQ;AAAA,UACzE,CAAC;AAAA,QACH;AAGA,YAAI,IAAI,SAAS,WAAW,aAAa,IAAI,SAAS,WAAW,eAAe;AAC9E,gBAAM,KAAK;AAAA,YACT,IAAI;AAAA,YACJ,OAAO,EAAE,kCAAkC;AAAA,YAC3C,MAAM,kBAAkB,IAAI,SAAS,EAAE;AAAA,UACzC,CAAC;AAAA,QACH;AAEA,eAAO,oBAAC,cAAW,OAAc;AAAA,MACnC;AAAA,IACF;AAAA,EACF;AAEA,MAAI,OAAO;AACT,WACE,oBAAC,QACC,8BAAC,YACC,+BAAC,SAAI,WAAU,mBACb;AAAA,0BAAC,OAAE,WAAU,0BAA0B,YAAE,qCAAqC,GAAE;AAAA,MAChF,oBAAC,UAAO,SAAS,MAAM,YAAY,kBAAkB,EAAE,UAAU,CAAC,gBAAgB,EAAE,CAAC,GAAG,WAAU,QAC/F,YAAE,cAAc,GACnB;AAAA,OACF,GACF,GACF;AAAA,EAEJ;AAEA,SACE,qBAAC,QACC;AAAA,wBAAC,YACC;AAAA,MAAC;AAAA;AAAA,QACC,OAAO,EAAE,4BAA4B;AAAA,QACrC;AAAA,QACA,MAAM,QAAQ,CAAC;AAAA,QACf;AAAA,QACA;AAAA,QACA,gBAAgB;AAAA,QAChB,gBAAgB;AAAA,QAChB,aAAa;AAAA,UACX,SAAS,gBAAgB,MAAM,WAAW;AAAA,QAC5C;AAAA,QACA,YAAY,EAAE,MAAM,UAAU,OAAO,YAAY,cAAc,QAAQ;AAAA;AAAA,IACzE,GACF;AAAA,IACC;AAAA,KACH;AAEJ;",
   "names": []
 }

package/dist/modules/workflows/lib/activity-executor.js CHANGED Viewed

@@ -4,7 +4,6 @@ import {
   UnsafeOutboundUrlError
 } from "@open-mercato/shared/lib/url-safety";
 import { parseBooleanWithDefault } from "@open-mercato/shared/lib/boolean";
-import { isPrivateCrossProcessBroadcastEvent } from "@open-mercato/shared/modules/events";
 import { callWebhookConfigSchema } from "../data/validators.js";
 import { WORKFLOW_ACTIVITIES_QUEUE_NAME } from "./activity-queue-types.js";
 import { logWorkflowEvent } from "./event-logger.js";
@@ -298,9 +297,6 @@ async function executeEmitEvent(config, context, container) {
   if (!eventName) {
     throw new Error('EMIT_EVENT requires "eventName" field');
   }
-  if (isPrivateCrossProcessBroadcastEvent(eventName)) {
-    throw new Error(`EMIT_EVENT cannot emit private cross-process event "${eventName}"`);
-  }
   const unresolvedPayloadKeys = findUnresolvedTemplateKeys(payload);
   if (unresolvedPayloadKeys.length > 0) {
     throw new Error(

package/dist/modules/workflows/lib/activity-executor.js.map CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/workflows/lib/activity-executor.ts"],
-  "sourcesContent": ["/**\n * Workflows Module - Activity Executor Service\n *\n * Executes workflow activities (send email, call API, emit events, etc.)\n * - Supports multiple activity types\n * - Implements retry logic with exponential backoff\n * - Handles timeouts\n * - Variable interpolation from workflow context\n *\n * Functional API (no classes) following Open Mercato conventions.\n */\n\nimport { EntityManager } from '@mikro-orm/core'\nimport type { EntityManager as PostgreSqlEntityManager } from '@mikro-orm/postgresql'\nimport type { AwilixContainer } from 'awilix'\nimport { WorkflowInstance } from '../data/entities'\nimport { createModuleQueue, Queue } from '@open-mercato/queue'\nimport { getRedisUrl } from '@open-mercato/shared/lib/redis/connection'\nimport {\n  safeOutboundFetch,\n  UnsafeOutboundUrlError,\n  type HostLookup,\n} from '@open-mercato/shared/lib/url-safety'\nimport { parseBooleanWithDefault } from '@open-mercato/shared/lib/boolean'\nimport { isPrivateCrossProcessBroadcastEvent } from '@open-mercato/shared/modules/events'\nimport { callWebhookConfigSchema } from '../data/validators'\nimport { WorkflowActivityJob, WORKFLOW_ACTIVITIES_QUEUE_NAME } from './activity-queue-types'\nimport { logWorkflowEvent } from './event-logger'\nimport { parseDuration } from './duration'\nimport { resolveActivityTimeoutMs } from './activityTimeoutFields'\nimport { getWorkflowSafeCommand } from './workflow-safe-commands'\n\nexport { isPrivateUrl } from '@open-mercato/shared/lib/network'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows')\n\nfunction isAllowPrivateWorkflowWebhookUrlsEnabled(): boolean {\n  if (parseBooleanWithDefault(process.env.OM_WORKFLOWS_ALLOW_PRIVATE_URLS, false)) {\n    if (process.env.NODE_ENV === 'production') {\n      logger.warn('OM_WORKFLOWS_ALLOW_PRIVATE_URLS is set but ignored in production. SSRF protection remains enabled.', { component: 'CALL_WEBHOOK' })\n      return false\n    }\n\n    logger.warn('OM_WORKFLOWS_ALLOW_PRIVATE_URLS is enabled. SSRF protection is bypassed for workflow webhooks; use only in development.', { component: 'CALL_WEBHOOK' })\n    return true\n  }\n\n  if (parseBooleanWithDefault(process.env.WORKFLOW_WEBHOOK_ALLOW_PRIVATE_URLS, false)) {\n    if (process.env.NODE_ENV === 'production') {\n      logger.warn('WORKFLOW_WEBHOOK_ALLOW_PRIVATE_URLS is deprecated and ignored in production. Use OM_WORKFLOWS_ALLOW_PRIVATE_URLS for development only. SSRF protection remains enabled.', { component: 'CALL_WEBHOOK' })\n      return false\n    }\n\n    logger.warn('WORKFLOW_WEBHOOK_ALLOW_PRIVATE_URLS is deprecated. Use OM_WORKFLOWS_ALLOW_PRIVATE_URLS instead. SSRF protection is bypassed.', { component: 'CALL_WEBHOOK' })\n    return true\n  }\n\n  return false\n}\n\nconst DEFAULT_WORKFLOW_ENV_INTERPOLATION_ALLOWLIST = new Set(['APP_URL'])\nconst WORKFLOW_ENV_INTERPOLATION_ALLOWLIST_KEY = 'OM_WORKFLOWS_ENV_INTERPOLATION_ALLOWLIST'\n\nfunction getWorkflowEnvInterpolationAllowlist(): Set<string> {\n  const allowlist = new Set(DEFAULT_WORKFLOW_ENV_INTERPOLATION_ALLOWLIST)\n  const configuredKeys = process.env[WORKFLOW_ENV_INTERPOLATION_ALLOWLIST_KEY]\n  if (!configuredKeys) {\n    return allowlist\n  }\n\n  for (const key of configuredKeys.split(',')) {\n    const trimmedKey = key.trim()\n    if (trimmedKey) {\n      allowlist.add(trimmedKey)\n    }\n  }\n\n  return allowlist\n}\n\nfunction resolveWorkflowEnvInterpolation(envKey: string): string {\n  if (!getWorkflowEnvInterpolationAllowlist().has(envKey)) {\n    return ''\n  }\n\n  return process.env[envKey] ?? ''\n}\n\n// ============================================================================\n// Types and Interfaces\n// ============================================================================\n\nexport type ActivityType =\n  | 'SEND_EMAIL'\n  | 'CALL_API'\n  | 'EMIT_EVENT'\n  | 'UPDATE_ENTITY'\n  | 'CALL_WEBHOOK'\n  | 'EXECUTE_FUNCTION'\n  | 'WAIT'\n\nexport interface ActivityDefinition {\n  activityId: string // Unique identifier for activity\n  activityName?: string // Optional, for debugging/logging\n  activityType: ActivityType\n  config: any\n  async?: boolean // Flag to execute activity asynchronously via queue\n  retryPolicy?: RetryPolicy\n  timeoutMs?: number\n  /**\n   * @deprecated Use `timeoutMs`. Legacy ISO 8601 duration string accepted by\n   * the definition schema before #4424; normalized by `resolveActivityTimeoutMs`.\n   */\n  timeout?: string\n  compensate?: boolean // Flag to execute compensation on failure\n}\n\nexport { resolveActivityTimeoutMs }\n\nexport interface RetryPolicy {\n  maxAttempts: number\n  initialIntervalMs: number\n  backoffCoefficient: number\n  maxIntervalMs: number\n}\n\nexport interface ActivityContext {\n  workflowInstance: WorkflowInstance\n  workflowContext: Record<string, any>\n  stepContext?: Record<string, any>\n  stepInstanceId?: string\n  // Set when the activity runs inside a parallel branch; carried on the queue\n  // payload so async resume targets the branch rather than the instance.\n  branchInstanceId?: string | null\n  transitionId?: string\n  userId?: string\n}\n\ntype RbacFeatureResolver = {\n  userHasAllFeatures: (\n    userId: string,\n    required: string[],\n    opts: { tenantId: string | null; organizationId: string | null }\n  ) => Promise<boolean>\n}\n\nasync function workflowUserHasAllFeatures(\n  container: AwilixContainer,\n  userId: string,\n  required: readonly string[],\n  tenantId: string | null,\n  organizationId: string | null\n): Promise<boolean> {\n  try {\n    const rbac = container.resolve('rbacService') as RbacFeatureResolver | undefined\n    if (rbac?.userHasAllFeatures) {\n      return await rbac.userHasAllFeatures(userId, [...required], { tenantId, organizationId })\n    }\n  } catch {\n    // Fail closed below when the workflow executor cannot prove the actor's grants.\n  }\n  return false\n}\n\nexport interface ActivityExecutionResult {\n  activityId: string\n  activityName?: string\n  activityType: ActivityType\n  success: boolean\n  output?: any\n  error?: string\n  retryCount: number\n  executionTimeMs: number\n  async?: boolean // Marks activity as async (queued)\n  jobId?: string // Queue job ID for async activities\n}\n\nexport class ActivityExecutionError extends Error {\n  constructor(\n    message: string,\n    public activityType: ActivityType,\n    public activityName?: string,\n    public details?: any\n  ) {\n    super(message)\n    this.name = 'ActivityExecutionError'\n  }\n}\n\n// ============================================================================\n// Queue Integration for Async Activities\n// ============================================================================\n\nlet activityQueue: Queue<WorkflowActivityJob> | null = null\n\n/**\n * Get or create the activity queue (lazy initialization)\n */\nfunction getActivityQueue(): Queue<WorkflowActivityJob> {\n  if (!activityQueue) {\n    activityQueue = createModuleQueue<WorkflowActivityJob>(\n      WORKFLOW_ACTIVITIES_QUEUE_NAME,\n      { concurrency: parseInt(process.env.WORKFLOW_WORKER_CONCURRENCY || '5') },\n    )\n  }\n\n  return activityQueue\n}\n\n/**\n * Enqueue an activity for background execution\n *\n * @param em - Entity manager\n * @param activity - Activity definition\n * @param context - Execution context\n * @returns Job ID\n */\nexport async function enqueueActivity(\n  em: EntityManager,\n  activity: ActivityDefinition,\n  context: ActivityContext\n): Promise<string> {\n  const { workflowInstance, workflowContext, stepContext, transitionId, stepInstanceId, branchInstanceId } =\n    context\n\n  // Interpolate config variables NOW (before queuing)\n  const interpolatedConfig = interpolateVariables(activity.config, workflowContext, workflowInstance)\n\n  // Create job payload\n  const job: WorkflowActivityJob = {\n    workflowInstanceId: workflowInstance.id,\n    stepInstanceId,\n    branchInstanceId: branchInstanceId ?? undefined,\n    transitionId,\n    activityId: activity.activityId,\n    activityName: activity.activityName || activity.activityType,\n    activityType: activity.activityType,\n    activityConfig: interpolatedConfig,\n    workflowContext,\n    stepContext,\n    retryPolicy: activity.retryPolicy,\n    timeoutMs: activity.timeoutMs,\n    tenantId: workflowInstance.tenantId,\n    organizationId: workflowInstance.organizationId,\n    userId: context.userId,\n  }\n\n  // Enqueue to queue (WAIT activities use delayMs for the actual delay)\n  const queue = getActivityQueue()\n  const enqueueOptions = activity.activityType === 'WAIT' && (interpolatedConfig.duration || interpolatedConfig.until)\n    ? { delayMs: calculateWaitDelayMs(interpolatedConfig) }\n    : undefined\n  const jobId = await queue.enqueue(job, enqueueOptions)\n\n  // Log event\n  await logWorkflowEvent(em, {\n    workflowInstanceId: workflowInstance.id,\n    stepInstanceId,\n    eventType: 'ACTIVITY_QUEUED',\n    eventData: {\n      activityId: activity.activityId,\n      activityName: activity.activityName,\n      activityType: activity.activityType,\n      async: true,\n      jobId,\n    },\n    tenantId: workflowInstance.tenantId,\n    organizationId: workflowInstance.organizationId,\n  })\n\n  return jobId\n}\n\n/**\n * Enqueue a delayed timer job for a WAIT_FOR_TIMER step.\n *\n * The activity worker handles `kind: 'timer'` jobs by calling\n * `timerHandler.fireTimer`, which resumes the paused workflow instance.\n */\nexport async function enqueueTimerJob(params: {\n  workflowInstanceId: string\n  stepInstanceId: string\n  branchInstanceId?: string | null\n  tenantId: string\n  organizationId: string\n  userId?: string\n  fireAt: string\n  delayMs: number\n}): Promise<string> {\n  const { workflowInstanceId, stepInstanceId, branchInstanceId, tenantId, organizationId, userId, fireAt, delayMs } =\n    params\n\n  const queue = getActivityQueue()\n  const jobId = await queue.enqueue(\n    {\n      kind: 'timer',\n      workflowInstanceId,\n      stepInstanceId,\n      branchInstanceId: branchInstanceId ?? undefined,\n      tenantId,\n      organizationId,\n      userId,\n      fireAt,\n    },\n    { delayMs: delayMs > 0 ? delayMs : undefined }\n  )\n\n  return jobId\n}\n\n// ============================================================================\n// Main Activity Execution Functions\n// ============================================================================\n\n/**\n * Execute a single activity with retry logic and timeout\n *\n * @param em - Entity manager\n * @param container - DI container\n * @param activity - Activity definition\n * @param context - Execution context\n * @returns Execution result\n */\nexport async function executeActivity(\n  em: EntityManager,\n  container: AwilixContainer,\n  activity: ActivityDefinition,\n  context: ActivityContext\n): Promise<ActivityExecutionResult> {\n  const retryPolicy = activity.retryPolicy || {\n    maxAttempts: 1,\n    initialIntervalMs: 0,\n    backoffCoefficient: 1,\n    maxIntervalMs: 0,\n  }\n\n  let lastError: any\n  let retryCount = 0\n\n  for (let attempt = 0; attempt < retryPolicy.maxAttempts; attempt++) {\n    try {\n      const startTime = Date.now()\n\n      // Execute with timeout if specified (timeoutMs, or a legacy ISO 8601\n      // `timeout` string normalized to ms \u2014 see resolveActivityTimeoutMs).\n      const timeoutMs = resolveActivityTimeoutMs(activity)\n      const result = timeoutMs\n        ? await executeWithTimeout(\n            (signal) => executeActivityByType(em, container, activity, context, signal),\n            timeoutMs\n          )\n        : await executeActivityByType(em, container, activity, context)\n\n      const executionTimeMs = Date.now() - startTime\n\n      return {\n        activityId: activity.activityId,\n        activityName: activity.activityName,\n        activityType: activity.activityType,\n        success: true,\n        output: result,\n        retryCount: attempt,\n        executionTimeMs,\n        async: activity.async || false,\n      }\n    } catch (error) {\n      lastError = error\n      retryCount = attempt + 1\n\n      // Log activity retry attempt with context\n      if (attempt < retryPolicy.maxAttempts - 1) {\n        logger.error('Activity failed; will retry', {\n          activityId: activity.activityId,\n          activityType: activity.activityType,\n          attempt: attempt + 1,\n          maxAttempts: retryPolicy.maxAttempts,\n          instanceId: context.workflowInstance.id,\n          err: error,\n        })\n      }\n\n      // If not the last attempt, apply backoff and retry\n      if (attempt < retryPolicy.maxAttempts - 1) {\n        const backoff = calculateBackoff(\n          retryPolicy.initialIntervalMs,\n          retryPolicy.backoffCoefficient,\n          attempt,\n          retryPolicy.maxIntervalMs\n        )\n\n        await sleep(backoff)\n      }\n    }\n  }\n\n  // All retries exhausted\n  const errorMessage = lastError instanceof Error ? lastError.message : String(lastError)\n  logger.error('Activity failed after all attempts', {\n    activityId: activity.activityId,\n    activityType: activity.activityType,\n    attempts: retryCount,\n    instanceId: context.workflowInstance.id,\n    err: lastError,\n  })\n\n  return {\n    activityId: activity.activityId,\n    activityName: activity.activityName,\n    activityType: activity.activityType,\n    success: false,\n    error: `Activity failed after ${retryCount} attempts: ${errorMessage}`,\n    retryCount,\n    executionTimeMs: 0,\n    async: activity.async || false,\n  }\n}\n\n/**\n * Execute multiple activities in sequence\n * Supports both synchronous and asynchronous (queued) execution\n *\n * @param em - Entity manager\n * @param container - DI container\n * @param activities - Array of activity definitions\n * @param context - Execution context\n * @returns Array of execution results\n */\nexport async function executeActivities(\n  em: EntityManager,\n  container: AwilixContainer,\n  activities: ActivityDefinition[],\n  context: ActivityContext\n): Promise<ActivityExecutionResult[]> {\n  const results: ActivityExecutionResult[] = []\n\n  for (let i = 0; i < activities.length; i++) {\n    const activity = activities[i]\n\n    // Check if activity should run async\n    if (activity.async) {\n      // Enqueue for background execution\n      const jobId = await enqueueActivity(em, activity, context)\n\n      results.push({\n        activityId: activity.activityId,\n        activityName: activity.activityName,\n        activityType: activity.activityType,\n        success: true, // Queued successfully\n        async: true,\n        jobId,\n        retryCount: 0,\n        executionTimeMs: 0,\n      })\n    } else {\n      // Execute synchronously (existing logic)\n      const result = await executeActivity(em, container, activity, context)\n      results.push(result)\n\n      // Stop execution if activity fails (fail-fast)\n      if (!result.success) {\n        break\n      }\n\n      // Update workflow context with activity output\n      if (result.output && typeof result.output === 'object') {\n        const key = activity.activityName || activity.activityType\n        context.workflowContext = {\n          ...context.workflowContext,\n          [key]: result.output,\n        }\n      }\n    }\n  }\n\n  return results\n}\n\n// ============================================================================\n// Activity Type Handlers\n// ============================================================================\n\n/**\n * Execute activity based on its type\n */\nasync function executeActivityByType(\n  em: EntityManager,\n  container: AwilixContainer,\n  activity: ActivityDefinition,\n  context: ActivityContext,\n  signal?: AbortSignal\n): Promise<any> {\n  // Interpolate config variables from context (including workflow metadata)\n  const interpolatedConfig = interpolateVariables(activity.config, context.workflowContext, context.workflowInstance)\n\n  switch (activity.activityType) {\n    case 'SEND_EMAIL':\n      return await executeSendEmail(interpolatedConfig, context, container)\n\n    case 'CALL_API':\n      return await executeCallApi(em, interpolatedConfig, context, container, signal)\n\n    case 'EMIT_EVENT':\n      return await executeEmitEvent(interpolatedConfig, context, container)\n\n    case 'UPDATE_ENTITY':\n      return await executeUpdateEntity(em, interpolatedConfig, context, container)\n\n    case 'CALL_WEBHOOK':\n      return await executeCallWebhook(interpolatedConfig, context, { signal })\n\n    case 'EXECUTE_FUNCTION':\n      return await executeFunction(interpolatedConfig, context, container)\n\n    case 'WAIT':\n      return await executeWait(interpolatedConfig)\n\n    default:\n      throw new ActivityExecutionError(\n        `Unknown activity type: ${activity.activityType}`,\n        activity.activityType,\n        activity.activityName\n      )\n  }\n}\n\n/**\n * SEND_EMAIL activity handler\n *\n * For MVP, this logs the email (actual email sending can be added later)\n */\nexport async function executeSendEmail(\n  config: any,\n  context: ActivityContext,\n  container: AwilixContainer\n): Promise<any> {\n  const { to, subject, template, templateData, body } = config\n\n  if (!to || !subject) {\n    throw new Error('SEND_EMAIL requires \"to\" and \"subject\" fields')\n  }\n\n  // For MVP: Log the email (actual email service integration can be added later)\n  logger.info('Send email activity invoked', { component: 'SEND_EMAIL', subject })\n\n  // Check if email service is available in container\n  try {\n    const emailService = container.resolve<{ send: (input: unknown) => Promise<unknown> | unknown }>('emailService')\n    if (emailService && typeof emailService.send === 'function') {\n      await emailService.send({\n        to,\n        subject,\n        template,\n        templateData,\n        body,\n      })\n      return { sent: true, to, subject, via: 'emailService' }\n    }\n  } catch (error) {\n    // Email service not available, just log\n  }\n\n  return { sent: true, to, subject, via: 'console' }\n}\n\n/**\n * EMIT_EVENT activity handler\n *\n * Publishes a domain event to the event bus\n */\nexport async function executeEmitEvent(\n  config: any,\n  context: ActivityContext,\n  container: AwilixContainer\n): Promise<any> {\n  const { eventName, payload } = config\n\n  if (!eventName) {\n    throw new Error('EMIT_EVENT requires \"eventName\" field')\n  }\n\n  // Workflow definitions are tenant-managed input. Private cross-process\n  // events coordinate trusted server state (for example closing an in-memory\n  // collaboration room), so allowing a workflow to name one would turn a\n  // regular event activity into a cross-process invalidation primitive.\n  if (isPrivateCrossProcessBroadcastEvent(eventName)) {\n    throw new Error(`EMIT_EVENT cannot emit private cross-process event \"${eventName}\"`)\n  }\n\n  // Emissions are fire-and-forget and no subscriber validates the payload shape,\n  // so an unresolved `{{context.x}}` here is even quieter than on the command\n  // path \u2014 it ships the literal template to every consumer. Fail loudly instead.\n  const unresolvedPayloadKeys = findUnresolvedTemplateKeys(payload)\n  if (unresolvedPayloadKeys.length > 0) {\n    throw new Error(\n      `EMIT_EVENT payload contains unresolved template variables for: ${unresolvedPayloadKeys.join(', ')}. ` +\n        `Check that the workflow context provides these keys.`\n    )\n  }\n\n  // Get event bus from container\n  const eventBus = container.resolve<{ emitEvent: (event: string, payload: unknown, options?: unknown) => Promise<unknown> | unknown }>('eventBus')\n\n  if (!eventBus || typeof eventBus.emitEvent !== 'function') {\n    throw new Error('Event bus not available in container')\n  }\n\n  // Publish event with workflow metadata\n  const enrichedPayload = {\n    ...payload,\n    _workflow: {\n      workflowInstanceId: context.workflowInstance.id,\n      workflowId: context.workflowInstance.workflowId,\n      tenantId: context.workflowInstance.tenantId,\n      organizationId: context.workflowInstance.organizationId,\n    },\n  }\n\n  await eventBus.emitEvent(eventName, enrichedPayload, {\n    tenantId: context.workflowInstance.tenantId,\n    organizationId: context.workflowInstance.organizationId,\n  })\n\n  return { emitted: true, eventName, payload: enrichedPayload }\n}\n\nconst UNRESOLVED_TEMPLATE_PATTERN = /\\{\\{[^}]+\\}\\}/\n\nfunction findUnresolvedTemplateKeys(value: unknown, path = ''): string[] {\n  if (typeof value === 'string') {\n    return UNRESOLVED_TEMPLATE_PATTERN.test(value) ? [path] : []\n  }\n  if (Array.isArray(value)) {\n    return value.flatMap((item, index) => findUnresolvedTemplateKeys(item, `${path}[${index}]`))\n  }\n  if (value && typeof value === 'object') {\n    return Object.entries(value).flatMap(([key, nested]) =>\n      findUnresolvedTemplateKeys(nested, path ? `${path}.${key}` : key)\n    )\n  }\n  return []\n}\n\n/**\n * UPDATE_ENTITY activity handler\n *\n * Updates an entity via CommandBus for proper audit logging, undo support, and side effects.\n *\n * Config format:\n * ```json\n * {\n *   \"commandId\": \"sales.documents.update\",\n *   \"input\": {\n *     \"id\": \"{{context.orderId}}\",\n *     \"statusEntryId\": \"{{context.approvedStatusId}}\"\n *   }\n * }\n * ```\n *\n * Alternative format with statusValue (auto-resolves to statusEntryId):\n * ```json\n * {\n *   \"commandId\": \"sales.orders.update\",\n *   \"statusDictionary\": \"sales.order_status\",\n *   \"input\": {\n *     \"id\": \"{{context.orderId}}\",\n *     \"statusValue\": \"pending_approval\"\n *   }\n * }\n * ```\n *\n * Every `{{...}}` reference in `input` must resolve against the workflow context \u2014\n * an unresolved reference is rejected rather than forwarded to the command bus.\n */\nexport async function executeUpdateEntity(\n  em: EntityManager,\n  config: any,\n  context: ActivityContext,\n  container: AwilixContainer\n): Promise<any> {\n  const { commandId, input, statusDictionary } = config\n\n  if (!commandId) {\n    throw new Error('UPDATE_ENTITY requires \"commandId\" field (e.g., \"sales.documents.update\")')\n  }\n\n  const workflowSafeCommand = getWorkflowSafeCommand(commandId)\n  if (!workflowSafeCommand) {\n    throw new Error('UPDATE_ENTITY command is not allowed')\n  }\n\n  if (!input || typeof input !== 'object') {\n    throw new Error('UPDATE_ENTITY requires \"input\" object with entity data')\n  }\n\n  const actorUserId = typeof context.userId === 'string' ? context.userId.trim() : ''\n  if (!actorUserId) {\n    throw new Error('UPDATE_ENTITY requires an authenticated workflow user')\n  }\n\n  const authorized = await workflowUserHasAllFeatures(\n    container,\n    actorUserId,\n    workflowSafeCommand.requiredFeatures,\n    context.workflowInstance.tenantId,\n    context.workflowInstance.organizationId\n  )\n  if (!authorized) {\n    throw new Error('UPDATE_ENTITY command is not authorized')\n  }\n\n  // Resolve CommandBus from container\n  const commandBus = container.resolve('commandBus') as any\n\n  if (!commandBus || typeof commandBus.execute !== 'function') {\n    throw new Error('CommandBus not available in container')\n  }\n\n  const unresolvedKeys = findUnresolvedTemplateKeys(input)\n  if (unresolvedKeys.length > 0) {\n    throw new Error(\n      `UPDATE_ENTITY input contains unresolved template variables for: ${unresolvedKeys.join(', ')}. ` +\n        `Check that the workflow context provides these keys.`\n    )\n  }\n\n  // Prepare final input, resolving statusValue if provided\n  let finalInput = { ...input }\n\n  // If statusValue is provided with a statusDictionary, resolve it to statusEntryId\n  if (finalInput.statusValue && statusDictionary) {\n    const statusEntryId = await resolveDictionaryEntryId(\n      em,\n      statusDictionary,\n      finalInput.statusValue,\n      context.workflowInstance.tenantId,\n      context.workflowInstance.organizationId\n    )\n    if (statusEntryId) {\n      finalInput.statusEntryId = statusEntryId\n    }\n    delete finalInput.statusValue\n  }\n\n  // Build synthetic CommandRuntimeContext for workflow execution\n  const ctx = {\n    container,\n    auth: {\n      sub: actorUserId,\n      tenantId: context.workflowInstance.tenantId,\n      orgId: context.workflowInstance.organizationId,\n      isSuperAdmin: false,\n    },\n    organizationScope: null,\n    selectedOrganizationId: context.workflowInstance.organizationId,\n    organizationIds: context.workflowInstance.organizationId\n      ? [context.workflowInstance.organizationId]\n      : null,\n  }\n\n  // Execute the command\n  const { result, logEntry } = await commandBus.execute(commandId, {\n    input: finalInput,\n    ctx,\n  })\n\n  return {\n    executed: true,\n    commandId,\n    result,\n    logEntryId: logEntry?.id,\n  }\n}\n\n/**\n * Helper to resolve dictionary entry ID by value\n */\nasync function resolveDictionaryEntryId(\n  em: EntityManager,\n  dictionaryKey: string,\n  value: string,\n  tenantId: string,\n  organizationId: string\n): Promise<string | null> {\n  try {\n    // Import here to avoid circular dependencies\n    const { Dictionary, DictionaryEntry } = await import('@open-mercato/core/modules/dictionaries/data/entities')\n\n    // Find the dictionary\n    const dictionary = await em.findOne(Dictionary, {\n      key: dictionaryKey,\n      tenantId,\n      organizationId,\n      deletedAt: null,\n    })\n\n    if (!dictionary) {\n      logger.warn('Dictionary not found', { component: 'UPDATE_ENTITY', dictionaryKey })\n      return null\n    }\n\n    // Find the entry by normalized value\n    const normalizedValue = value.toLowerCase().trim()\n    const entry = await em.findOne(DictionaryEntry, {\n      dictionary: dictionary.id,\n      tenantId,\n      organizationId,\n      normalizedValue,\n    })\n\n    if (!entry) {\n      logger.warn('Dictionary entry not found', { component: 'UPDATE_ENTITY', dictionaryKey, value })\n      return null\n    }\n\n    return entry.id\n  } catch (error) {\n    logger.error('Error resolving dictionary entry', { component: 'UPDATE_ENTITY', err: error })\n    return null\n  }\n}\n\n/**\n * CALL_WEBHOOK activity handler\n *\n * Makes HTTP request to an external URL. Applies shared SSRF guard\n * (protocol / credentials / blocked host / private IP literal / DNS rebinding)\n * before issuing the request and rejects any 3xx redirect rather than following.\n */\nexport type CallWebhookDeps = {\n  lookupHost?: HostLookup\n  allowPrivate?: boolean\n  fetchImpl?: typeof fetch\n  signal?: AbortSignal\n}\n\nexport async function executeCallWebhook(\n  config: unknown,\n  context: ActivityContext,\n  deps: CallWebhookDeps = {}\n): Promise<any> {\n  const parsed = callWebhookConfigSchema.safeParse(config)\n  if (!parsed.success) {\n    const issues = parsed.error.issues\n      .map((issue) => `${issue.path.join('.') || 'config'}: ${issue.message}`)\n      .join('; ')\n    throw new Error(`CALL_WEBHOOK config invalid: ${issues}`)\n  }\n  const { url, method, headers: rawHeaders, body } = parsed.data\n  const headers = rawHeaders ?? {}\n\n  const allowPrivate = deps.allowPrivate ?? isAllowPrivateWorkflowWebhookUrlsEnabled()\n\n  let response: Response\n  try {\n    response = await safeOutboundFetch(\n      url,\n      {\n        method,\n        headers: {\n          'Content-Type': 'application/json',\n          ...headers,\n        },\n        body: body !== undefined && body !== null ? JSON.stringify(body) : undefined,\n        redirect: 'manual',\n        signal: deps.signal,\n      },\n      {\n        subject: 'Workflow webhook URL',\n        allowPrivate,\n        lookupHost: deps.lookupHost,\n        fetchImpl: deps.fetchImpl,\n      },\n    )\n  } catch (error) {\n    if (error instanceof UnsafeOutboundUrlError) {\n      throw new Error(\n        `CALL_WEBHOOK rejected unsafe URL (reason=${error.reason}): ${error.message}`\n      )\n    }\n    throw error\n  }\n\n  if (response.status >= 300 && response.status < 400) {\n    const location = response.headers.get('location')\n    throw new Error(\n      `CALL_WEBHOOK refused to follow redirect ${response.status} to ${\n        location ?? '(no Location header)'\n      }`\n    )\n  }\n\n  // Parse response\n  let result: any\n  const contentType = response.headers.get('content-type')\n\n  if (contentType && contentType.includes('application/json')) {\n    result = await response.json()\n  } else {\n    result = await response.text()\n  }\n\n  // Check for HTTP errors\n  if (!response.ok) {\n    throw new Error(\n      `Webhook request failed with status ${response.status}: ${JSON.stringify(result)}`\n    )\n  }\n\n  return {\n    status: response.status,\n    statusText: response.statusText,\n    result,\n  }\n}\n\n/**\n * EXECUTE_FUNCTION activity handler\n *\n * Calls a registered function from DI container\n */\nexport async function executeFunction(\n  config: any,\n  context: ActivityContext,\n  container: AwilixContainer\n): Promise<any> {\n  const { functionName, args = {} } = config\n\n  if (!functionName) {\n    throw new Error('EXECUTE_FUNCTION requires \"functionName\" field')\n  }\n\n  // Look up function in container\n  const fnKey = `workflowFunction:${functionName}`\n\n  try {\n    const fn = container.resolve(fnKey)\n\n    if (typeof fn !== 'function') {\n      throw new Error(`Registered workflow function \"${functionName}\" is not a function`)\n    }\n\n    // Call function with args and context\n    const result = await fn(args, context)\n\n    return { executed: true, functionName, result }\n  } catch (error) {\n    if (error instanceof Error && error.message.includes('not registered')) {\n      throw new Error(\n        `Workflow function \"${functionName}\" not registered in DI container (key: ${fnKey})`\n      )\n    }\n    throw error\n  }\n}\n\n/**\n * Calculate delay in milliseconds from a WAIT activity config.\n * Supports either `duration` (relative, e.g. \"PT5M\") or `until` (absolute ISO 8601 datetime).\n */\nfunction calculateWaitDelayMs(config: { duration?: string; until?: string }): number {\n  if (config.until) {\n    const targetDate = new Date(config.until)\n    if (isNaN(targetDate.getTime())) {\n      throw new Error(`WAIT activity: invalid \"until\" datetime: ${config.until}`)\n    }\n    const delayMs = targetDate.getTime() - Date.now()\n    return Math.max(0, delayMs)\n  }\n\n  if (config.duration) {\n    return parseDuration(config.duration)\n  }\n\n  throw new Error('WAIT activity requires \"duration\" (e.g., \"PT5M\", \"1h\") or \"until\" (ISO 8601 datetime)')\n}\n\n/**\n * WAIT activity handler\n *\n * Delays workflow execution for a configured duration or until a specific datetime.\n * - `duration`: relative delay (e.g. \"PT5M\", \"1h\", \"30s\")\n * - `until`: absolute datetime (e.g. \"2026-04-15T10:00:00Z\")\n * - Sync mode: blocks via sleep (suitable for short delays)\n * - Async mode: delay is handled by the queue's delayMs option;\n *   this handler returns immediately when called from the worker\n */\nasync function executeWait(config: any): Promise<any> {\n  const durationMs = calculateWaitDelayMs(config)\n\n  // In sync mode, actually sleep for the duration\n  // In async mode (called from worker), the delay already happened via queue scheduling\n  await sleep(durationMs)\n\n  return { waited: true, durationMs }\n}\n\n/**\n * CALL_API activity handler\n *\n * Makes authenticated HTTP request to internal Open Mercato APIs\n * - Automatically creates one-time API key for authentication\n * - Injects tenant/organization context headers\n * - Validates URL security (SSRF prevention)\n * - Classifies errors (retriable vs non-retriable)\n * - Deletes API key after request (no stored credentials!)\n */\nexport async function executeCallApi(\n  em: EntityManager,\n  config: any,\n  context: ActivityContext,\n  container: AwilixContainer,\n  signal?: AbortSignal\n): Promise<any> {\n  // 1. Interpolate variables in config (including {{workflow.*}}, {{context.*}}, allowlisted {{env.*}}, {{now}})\n  const interpolatedConfig = interpolateVariables(config, context.workflowContext, context.workflowInstance)\n\n  const {\n    endpoint,\n    method = 'GET',\n    headers = {},\n    body,\n    validateTenantMatch = true,\n  } = interpolatedConfig\n\n\n  if (!endpoint) {\n    throw new Error('CALL_API requires \"endpoint\" field')\n  }\n\n  // 2. Build full URL (prepend APP_URL for relative paths)\n  const fullUrl = buildApiUrl(endpoint)\n\n  // 3. Import the one-time API key helper\n  const { withOnetimeApiKey } = await import('../../api_keys/services/apiKeyService')\n\n  // 4. Create the one-time API key on an EntityManager that is fully detached\n  //    from the surrounding request/transaction context.\n  //\n  //    CALL_API runs inside `workflowExecutor.executeWorkflow()`, which wraps\n  //    the whole execution in `em.transactional(...)`. The request EM is forked\n  //    with `useContext: true`, so while that transaction is open, EVERY\n  //    operation on the container's `em` \u2014 including this API key's\n  //    persist/flush \u2014 is transparently redirected to the uncommitted\n  //    transaction fork (MikroORM `getContext()` \u2192 `TransactionContext`). The\n  //    key would therefore stay invisible until the transaction commits, but\n  //    the commit cannot happen until this activity returns. The outbound\n  //    self-authenticated `fetch` below opens a SEPARATE DB connection that\n  //    cannot see the uncommitted row, so the internal API responds `401` and\n  //    the activity fails (issue #4202).\n  //\n  //    Forking with `useContext: false` (matching the query_index/webhooks\n  //    isolated-EM convention) gives the key its own pooled connection with\n  //    autocommit, so it is committed and visible to the internal request\n  //    immediately.\n  const apiKeyEm = container\n    .resolve<PostgreSqlEntityManager>('em')\n    .fork({ clear: true, freshEventManager: true, useContext: false }) as PostgreSqlEntityManager\n\n  // 5. Resolve the roles that the one-time API key will inherit.\n  //\n  // SECURITY: The key must never exceed the permissions of the human who\n  //   triggered (or authored) this workflow. Previously this code looked up\n  //   a role named \"admin\"/\"superadmin\" for the tenant and assigned it to\n  //   the key \u2014 which allowed any non-admin workflow author with\n  //   `workflows.definitions.edit` + `workflows.instances.create` to issue\n  //   arbitrary administrative API calls via a CALL_API activity. See the\n  //   SECURITY.md changelog entry for this fix.\n  //\n  //   The resolution strategy is:\n  //     1. Use the workflow instance's `metadata.initiatedBy` user (whoever\n  //        manually started the instance), when available. Only this user's\n  //        current active roles are used \u2014 we never fall back to the author\n  //        when the initiator is known, because that would escalate the\n  //        initiator's privileges.\n  //     2. Fall back to the workflow definition's `createdBy` (author) only\n  //        when the instance was started by an event trigger with no user.\n  //     3. If no traceable principal exists, the activity refuses to run \u2014\n  //        there is no \"system\" fallback that bypasses RBAC.\n  const resolvedRoleIds = await resolveCallApiRoleIds(apiKeyEm, context.workflowInstance)\n\n  if (resolvedRoleIds.length === 0) {\n    throw new Error(\n      `[CALL_API] Refusing to execute CALL_API for workflow instance ${context.workflowInstance.id}: ` +\n      `no traceable user roles could be resolved from the workflow instance or definition. ` +\n      `CALL_API activities must run under the identity of the user who triggered them.`\n    )\n  }\n\n  // 6. Execute request with one-time API key scoped to the resolved user's roles\n  return await withOnetimeApiKey(\n    apiKeyEm,\n    {\n      name: `__workflow_${context.workflowInstance.id}__`,\n      description: `One-time key for workflow ${context.workflowInstance.workflowId} instance ${context.workflowInstance.id}`,\n      tenantId: context.workflowInstance.tenantId,\n      organizationId: context.workflowInstance.organizationId,\n      roles: resolvedRoleIds,\n      expiresAt: null,\n    },\n    async (apiKeySecret) => {\n      // Build request headers (auth + context + custom)\n      const requestHeaders: Record<string, string> = {\n        'Content-Type': 'application/json',\n        'Authorization': `apikey ${apiKeySecret}`,\n        'X-Tenant-Id': context.workflowInstance.tenantId,\n        'X-Organization-Id': context.workflowInstance.organizationId,\n        'X-Workflow-Instance-Id': context.workflowInstance.id,\n        ...headers,\n      }\n\n      // Make HTTP request\n      const response = await fetch(fullUrl, {\n        method,\n        headers: requestHeaders,\n        body: body ? JSON.stringify(body) : undefined,\n        signal,\n      })\n\n      // Parse response body (JSON-safe)\n      let responseBody: any\n      const contentType = response.headers.get('content-type')\n\n      try {\n        if (contentType && contentType.includes('application/json')) {\n          responseBody = await response.json()\n        } else {\n          responseBody = await response.text()\n        }\n      } catch (error) {\n        responseBody = null\n      }\n\n      // Check for HTTP errors and classify\n      if (!response.ok) {\n        classifyAndThrowError(response.status, responseBody, fullUrl)\n      }\n\n      // Validate tenant match (security check)\n      if (validateTenantMatch && responseBody && typeof responseBody === 'object') {\n        if (responseBody.tenantId && responseBody.tenantId !== context.workflowInstance.tenantId) {\n          throw new Error(\n            `Tenant ID mismatch: workflow expects ${context.workflowInstance.tenantId} but API returned ${responseBody.tenantId}`\n          )\n        }\n      }\n\n      // Return structured result\n      return {\n        status: response.status,\n        statusText: response.statusText,\n        headers: Object.fromEntries(response.headers.entries()),\n        body: responseBody,\n        authenticated: true,\n        tenantId: context.workflowInstance.tenantId,\n        organizationId: context.workflowInstance.organizationId,\n      }\n    }\n  )\n}\n\n// ============================================================================\n// CALL_API Helper Functions\n// ============================================================================\n\nexport type CallApiInstanceLike = {\n  id: string\n  tenantId: string\n  organizationId: string\n  definitionId: string\n  metadata?: { initiatedBy?: string | null } | null\n}\n\nasync function resolveActiveRoleIdsForUser(\n  em: any,\n  userId: string,\n  scope: { tenantId: string; organizationId: string },\n): Promise<string[]> {\n  const { findOneWithDecryption, findWithDecryption } = await import('@open-mercato/shared/lib/encryption/find')\n  const { User, UserRole, Role } = await import('../../auth/data/entities')\n\n  const user = await findOneWithDecryption(em, User, {\n    id: userId,\n    tenantId: scope.tenantId,\n    deletedAt: null,\n  }, {}, scope)\n  if (!user) return []\n\n  const userRoles = await findWithDecryption(\n    em,\n    UserRole,\n    { user: user.id, deletedAt: null },\n    { populate: ['role'] },\n    scope,\n  )\n  const roleIds = userRoles\n    .map((ur: any) => (typeof ur.role === 'string' ? ur.role : ur.role?.id))\n    .filter((id: unknown): id is string => typeof id === 'string' && id.length > 0)\n\n  if (roleIds.length === 0) return []\n\n  const scopedRoles = await findWithDecryption(em, Role, {\n    id: { $in: roleIds },\n    tenantId: scope.tenantId,\n    deletedAt: null,\n  }, {}, scope)\n  return scopedRoles.map((r: any) => r.id as string)\n}\n\nexport async function resolveCallApiRoleIds(\n  em: any,\n  instance: CallApiInstanceLike\n): Promise<string[]> {\n  if (!instance.definitionId) return []\n\n  const { findOneWithDecryption } = await import('@open-mercato/shared/lib/encryption/find')\n  const { WorkflowDefinition } = await import('../data/entities')\n\n  const scope = { tenantId: instance.tenantId, organizationId: instance.organizationId }\n\n  // 1. Prefer the triggering user (whoever manually started this instance).\n  //    WorkflowInstance.metadata.initiatedBy is the canonical record of that\n  //    principal for user-started instances; use their current role set so\n  //    CALL_API never exceeds the initiator's permissions. Refuse if the\n  //    initiator has no active scoped roles \u2014 do not fall back to the\n  //    definition author, which would escalate the initiator's privileges.\n  const initiatorUserId = instance.metadata?.initiatedBy ?? null\n  if (initiatorUserId) {\n    return resolveActiveRoleIdsForUser(em, initiatorUserId, scope)\n  }\n\n  // 2. Event-triggered instance with no human initiator: fall back to the\n  //    definition author. Soft-deleted definitions must not mint keys.\n  const definition = await findOneWithDecryption(em, WorkflowDefinition, {\n    id: instance.definitionId,\n    tenantId: instance.tenantId,\n    deletedAt: null,\n  }, {}, scope)\n  const authorUserId = definition?.createdBy\n  if (!authorUserId) return []\n\n  return resolveActiveRoleIdsForUser(em, authorUserId, scope)\n}\n\n/**\n * Build full API URL from endpoint\n * - Relative paths (/api/...) \u2192 prepend APP_URL\n * - Absolute URLs \u2192 validate domain matches APP_URL (SSRF prevention)\n */\nfunction buildApiUrl(endpoint: string): string {\n  const appUrl = process.env.APP_URL || 'http://localhost:3000'\n\n  // Relative path - prepend APP_URL\n  if (endpoint.startsWith('/')) {\n    // Security: Only allow /api/* paths\n    if (!endpoint.startsWith('/api/')) {\n      throw new Error(`CALL_API only supports /api/* paths, got: ${endpoint}`)\n    }\n    return `${appUrl}${endpoint}`\n  }\n\n  // Absolute URL - validate domain matches APP_URL (SSRF prevention)\n  try {\n    const endpointUrl = new URL(endpoint)\n    const appUrlObj = new URL(appUrl)\n\n    if (endpointUrl.host !== appUrlObj.host) {\n      throw new Error(\n        `SSRF Prevention: CALL_API endpoint domain (${endpointUrl.host}) does not match APP_URL (${appUrlObj.host})`\n      )\n    }\n\n    return endpoint\n  } catch (error) {\n    if (error instanceof TypeError) {\n      throw new Error(`Invalid endpoint URL: ${endpoint}`)\n    }\n    throw error\n  }\n}\n\n/**\n * Classify HTTP error and throw appropriate error\n * - 400-499: Non-retriable (client error - validation/auth)\n * - 500-599: Retriable (server error)\n */\nfunction classifyAndThrowError(status: number, body: any, url: string): never {\n  const bodyStr = typeof body === 'string' ? body : JSON.stringify(body)\n\n  if (status >= 400 && status < 500) {\n    // Client errors - non-retriable\n    throw new Error(\n      `CALL_API request failed with status ${status} (non-retriable): ${bodyStr}`\n    )\n  }\n\n  if (status >= 500) {\n    // Server errors - retriable\n    const error: any = new Error(\n      `CALL_API request failed with status ${status} (retriable): ${bodyStr}`\n    )\n    error.retriable = true\n    throw error\n  }\n\n  // Other errors\n  throw new Error(`CALL_API request failed with status ${status}: ${bodyStr}`)\n}\n\n// ============================================================================\n// Helper Functions\n// ============================================================================\n\n/**\n * Interpolate variables in config from workflow context\n *\n * Supports syntax:\n * - {{context.field}} or {{context.nested.field}} - from workflow context\n * - {{workflow.instanceId}} - workflow instance ID\n * - {{workflow.tenantId}} - tenant ID\n * - {{workflow.organizationId}} - organization ID\n * - {{workflow.currentStepId}} - current step ID\n * - {{env.VAR_NAME}} - server-allowlisted environment variables\n * - {{now}} - current ISO timestamp\n */\nfunction interpolateVariables(\n  config: any,\n  context: Record<string, any>,\n  workflowInstance?: WorkflowInstance\n): any {\n  if (typeof config === 'string') {\n    // Check if this is a single variable reference (e.g., \"{{context.cart.items}}\")\n    // This preserves the original type (array, object, number, boolean)\n    const singleVarMatch = config.match(/^\\{\\{([^}]+)\\}\\}$/)\n\n    if (singleVarMatch) {\n      const trimmedPath = singleVarMatch[1].trim()\n\n      // Handle {{workflow.*}} variables\n      if (trimmedPath.startsWith('workflow.') && workflowInstance) {\n        const workflowKey = trimmedPath.substring('workflow.'.length)\n        switch (workflowKey) {\n          case 'instanceId':\n            return workflowInstance.id\n          case 'tenantId':\n            return workflowInstance.tenantId\n          case 'organizationId':\n            return workflowInstance.organizationId\n          case 'currentStepId':\n            return workflowInstance.currentStepId\n          case 'workflowId':\n            return workflowInstance.workflowId\n          case 'version':\n            return workflowInstance.version // Return as number\n          default:\n            return config // Return original if unknown\n        }\n      }\n\n      // Handle {{env.*}} variables\n      if (trimmedPath.startsWith('env.')) {\n        const envKey = trimmedPath.substring('env.'.length)\n        return resolveWorkflowEnvInterpolation(envKey)\n      }\n\n      // Handle {{now}} - current timestamp\n      if (trimmedPath === 'now') {\n        return new Date().toISOString()\n      }\n\n      // Handle {{context.*}} variables (default behavior)\n      const contextPath = trimmedPath.startsWith('context.')\n        ? trimmedPath.substring('context.'.length)\n        : trimmedPath\n\n      const value = getNestedValue(context, contextPath)\n      return value !== undefined ? value : config // Return raw value to preserve type\n    }\n\n    // Multiple interpolations or mixed text - return string\n    return config.replace(/\\{\\{([^}]+)\\}\\}/g, (match, path) => {\n      const trimmedPath = path.trim()\n\n      // Handle {{workflow.*}} variables\n      if (trimmedPath.startsWith('workflow.') && workflowInstance) {\n        const workflowKey = trimmedPath.substring('workflow.'.length)\n        switch (workflowKey) {\n          case 'instanceId':\n            return workflowInstance.id\n          case 'tenantId':\n            return workflowInstance.tenantId\n          case 'organizationId':\n            return workflowInstance.organizationId\n          case 'currentStepId':\n            return workflowInstance.currentStepId\n          case 'workflowId':\n            return workflowInstance.workflowId\n          case 'version':\n            return String(workflowInstance.version)\n          default:\n            return match // Unknown workflow key\n        }\n      }\n\n      // Handle {{env.*}} variables\n      if (trimmedPath.startsWith('env.')) {\n        const envKey = trimmedPath.substring('env.'.length)\n        return resolveWorkflowEnvInterpolation(envKey)\n      }\n\n      // Handle {{now}} - current timestamp\n      if (trimmedPath === 'now') {\n        return new Date().toISOString()\n      }\n\n      // Handle {{context.*}} variables (default behavior)\n      const contextPath = trimmedPath.startsWith('context.')\n        ? trimmedPath.substring('context.'.length)\n        : trimmedPath\n\n      const value = getNestedValue(context, contextPath)\n      return value !== undefined ? String(value) : match\n    })\n  }\n\n  if (Array.isArray(config)) {\n    return config.map((item) => interpolateVariables(item, context, workflowInstance))\n  }\n\n  if (config && typeof config === 'object') {\n    const result: Record<string, any> = {}\n    for (const [key, value] of Object.entries(config)) {\n      result[key] = interpolateVariables(value, context, workflowInstance)\n    }\n    return result\n  }\n\n  return config\n}\n\n/**\n * Get nested value from object by path (e.g., \"user.email\")\n */\nfunction getNestedValue(obj: any, path: string): any {\n  const parts = path.split('.')\n  let value = obj\n\n  for (const part of parts) {\n    if (value && typeof value === 'object' && part in value) {\n      value = value[part]\n    } else {\n      return undefined\n    }\n  }\n\n  return value\n}\n\n/**\n * Calculate exponential backoff delay\n */\nfunction calculateBackoff(\n  initialIntervalMs: number,\n  backoffCoefficient: number,\n  attempt: number,\n  maxIntervalMs: number\n): number {\n  const backoff = initialIntervalMs * Math.pow(backoffCoefficient, attempt)\n  return Math.min(backoff, maxIntervalMs || Infinity)\n}\n\n/**\n * Sleep for specified milliseconds\n */\nfunction sleep(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms))\n}\n\n/**\n * Execute a promise with timeout\n *\n * Only CALL_API and CALL_WEBHOOK honour the abort signal today \u2014 they forward\n * it to `fetch`. SEND_EMAIL, EMIT_EVENT, UPDATE_ENTITY and EXECUTE_FUNCTION\n * still run to completion after the timeout has been recorded. Tracked in\n * #5148.\n */\nasync function executeWithTimeout<T>(\n  executor: (signal: AbortSignal) => Promise<T>,\n  timeoutMs: number\n): Promise<T> {\n  let timeoutId: NodeJS.Timeout\n  const abortController = new AbortController()\n\n  const timeoutPromise = new Promise<never>((_, reject) => {\n    timeoutId = setTimeout(() => {\n      abortController.abort()\n      reject(new Error(`Activity execution timeout after ${timeoutMs}ms`))\n    }, timeoutMs)\n  })\n\n  try {\n    return await Promise.race([executor(abortController.signal), timeoutPromise])\n  } finally {\n    clearTimeout(timeoutId!)\n  }\n}\n"],
-  "mappings": "AAgBA,SAAS,yBAAgC;AAEzC;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,SAAS,+BAA+B;AACxC,SAAS,2CAA2C;AACpD,SAAS,+BAA+B;AACxC,SAA8B,sCAAsC;AACpE,SAAS,wBAAwB;AACjC,SAAS,qBAAqB;AAC9B,SAAS,gCAAgC;AACzC,SAAS,8BAA8B;AAEvC,SAAS,oBAAoB;AAC7B,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEvC,SAAS,2CAAoD;AAC3D,MAAI,wBAAwB,QAAQ,IAAI,iCAAiC,KAAK,GAAG;AAC/E,QAAI,QAAQ,IAAI,aAAa,cAAc;AACzC,aAAO,KAAK,sGAAsG,EAAE,WAAW,eAAe,CAAC;AAC/I,aAAO;AAAA,IACT;AAEA,WAAO,KAAK,2HAA2H,EAAE,WAAW,eAAe,CAAC;AACpK,WAAO;AAAA,EACT;AAEA,MAAI,wBAAwB,QAAQ,IAAI,qCAAqC,KAAK,GAAG;AACnF,QAAI,QAAQ,IAAI,aAAa,cAAc;AACzC,aAAO,KAAK,2KAA2K,EAAE,WAAW,eAAe,CAAC;AACpN,aAAO;AAAA,IACT;AAEA,WAAO,KAAK,gIAAgI,EAAE,WAAW,eAAe,CAAC;AACzK,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AAEA,MAAM,+CAA+C,oBAAI,IAAI,CAAC,SAAS,CAAC;AACxE,MAAM,2CAA2C;AAEjD,SAAS,uCAAoD;AAC3D,QAAM,YAAY,IAAI,IAAI,4CAA4C;AACtE,QAAM,iBAAiB,QAAQ,IAAI,wCAAwC;AAC3E,MAAI,CAAC,gBAAgB;AACnB,WAAO;AAAA,EACT;AAEA,aAAW,OAAO,eAAe,MAAM,GAAG,GAAG;AAC3C,UAAM,aAAa,IAAI,KAAK;AAC5B,QAAI,YAAY;AACd,gBAAU,IAAI,UAAU;AAAA,IAC1B;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,gCAAgC,QAAwB;AAC/D,MAAI,CAAC,qCAAqC,EAAE,IAAI,MAAM,GAAG;AACvD,WAAO;AAAA,EACT;AAEA,SAAO,QAAQ,IAAI,MAAM,KAAK;AAChC;AA4DA,eAAe,2BACb,WACA,QACA,UACA,UACA,gBACkB;AAClB,MAAI;AACF,UAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,QAAI,MAAM,oBAAoB;AAC5B,aAAO,MAAM,KAAK,mBAAmB,QAAQ,CAAC,GAAG,QAAQ,GAAG,EAAE,UAAU,eAAe,CAAC;AAAA,IAC1F;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO;AACT;AAeO,MAAM,+BAA+B,MAAM;AAAA,EAChD,YACE,SACO,cACA,cACA,SACP;AACA,UAAM,OAAO;AAJN;AACA;AACA;AAGP,SAAK,OAAO;AAAA,EACd;AACF;AAMA,IAAI,gBAAmD;AAKvD,SAAS,mBAA+C;AACtD,MAAI,CAAC,eAAe;AAClB,oBAAgB;AAAA,MACd;AAAA,MACA,EAAE,aAAa,SAAS,QAAQ,IAAI,+BAA+B,GAAG,EAAE;AAAA,IAC1E;AAAA,EACF;AAEA,SAAO;AACT;AAUA,eAAsB,gBACpB,IACA,UACA,SACiB;AACjB,QAAM,EAAE,kBAAkB,iBAAiB,aAAa,cAAc,gBAAgB,iBAAiB,IACrG;AAGF,QAAM,qBAAqB,qBAAqB,SAAS,QAAQ,iBAAiB,gBAAgB;AAGlG,QAAM,MAA2B;AAAA,IAC/B,oBAAoB,iBAAiB;AAAA,IACrC;AAAA,IACA,kBAAkB,oBAAoB;AAAA,IACtC;AAAA,IACA,YAAY,SAAS;AAAA,IACrB,cAAc,SAAS,gBAAgB,SAAS;AAAA,IAChD,cAAc,SAAS;AAAA,IACvB,gBAAgB;AAAA,IAChB;AAAA,IACA;AAAA,IACA,aAAa,SAAS;AAAA,IACtB,WAAW,SAAS;AAAA,IACpB,UAAU,iBAAiB;AAAA,IAC3B,gBAAgB,iBAAiB;AAAA,IACjC,QAAQ,QAAQ;AAAA,EAClB;AAGA,QAAM,QAAQ,iBAAiB;AAC/B,QAAM,iBAAiB,SAAS,iBAAiB,WAAW,mBAAmB,YAAY,mBAAmB,SAC1G,EAAE,SAAS,qBAAqB,kBAAkB,EAAE,IACpD;AACJ,QAAM,QAAQ,MAAM,MAAM,QAAQ,KAAK,cAAc;AAGrD,QAAM,iBAAiB,IAAI;AAAA,IACzB,oBAAoB,iBAAiB;AAAA,IACrC;AAAA,IACA,WAAW;AAAA,IACX,WAAW;AAAA,MACT,YAAY,SAAS;AAAA,MACrB,cAAc,SAAS;AAAA,MACvB,cAAc,SAAS;AAAA,MACvB,OAAO;AAAA,MACP;AAAA,IACF;AAAA,IACA,UAAU,iBAAiB;AAAA,IAC3B,gBAAgB,iBAAiB;AAAA,EACnC,CAAC;AAED,SAAO;AACT;AAQA,eAAsB,gBAAgB,QASlB;AAClB,QAAM,EAAE,oBAAoB,gBAAgB,kBAAkB,UAAU,gBAAgB,QAAQ,QAAQ,QAAQ,IAC9G;AAEF,QAAM,QAAQ,iBAAiB;AAC/B,QAAM,QAAQ,MAAM,MAAM;AAAA,IACxB;AAAA,MACE,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,kBAAkB,oBAAoB;AAAA,MACtC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,EAAE,SAAS,UAAU,IAAI,UAAU,OAAU;AAAA,EAC/C;AAEA,SAAO;AACT;AAeA,eAAsB,gBACpB,IACA,WACA,UACA,SACkC;AAClC,QAAM,cAAc,SAAS,eAAe;AAAA,IAC1C,aAAa;AAAA,IACb,mBAAmB;AAAA,IACnB,oBAAoB;AAAA,IACpB,eAAe;AAAA,EACjB;AAEA,MAAI;AACJ,MAAI,aAAa;AAEjB,WAAS,UAAU,GAAG,UAAU,YAAY,aAAa,WAAW;AAClE,QAAI;AACF,YAAM,YAAY,KAAK,IAAI;AAI3B,YAAM,YAAY,yBAAyB,QAAQ;AACnD,YAAM,SAAS,YACX,MAAM;AAAA,QACJ,CAAC,WAAW,sBAAsB,IAAI,WAAW,UAAU,SAAS,MAAM;AAAA,QAC1E;AAAA,MACF,IACA,MAAM,sBAAsB,IAAI,WAAW,UAAU,OAAO;AAEhE,YAAM,kBAAkB,KAAK,IAAI,IAAI;AAErC,aAAO;AAAA,QACL,YAAY,SAAS;AAAA,QACrB,cAAc,SAAS;AAAA,QACvB,cAAc,SAAS;AAAA,QACvB,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,YAAY;AAAA,QACZ;AAAA,QACA,OAAO,SAAS,SAAS;AAAA,MAC3B;AAAA,IACF,SAAS,OAAO;AACd,kBAAY;AACZ,mBAAa,UAAU;AAGvB,UAAI,UAAU,YAAY,cAAc,GAAG;AACzC,eAAO,MAAM,+BAA+B;AAAA,UAC1C,YAAY,SAAS;AAAA,UACrB,cAAc,SAAS;AAAA,UACvB,SAAS,UAAU;AAAA,UACnB,aAAa,YAAY;AAAA,UACzB,YAAY,QAAQ,iBAAiB;AAAA,UACrC,KAAK;AAAA,QACP,CAAC;AAAA,MACH;AAGA,UAAI,UAAU,YAAY,cAAc,GAAG;AACzC,cAAM,UAAU;AAAA,UACd,YAAY;AAAA,UACZ,YAAY;AAAA,UACZ;AAAA,UACA,YAAY;AAAA,QACd;AAEA,cAAM,MAAM,OAAO;AAAA,MACrB;AAAA,IACF;AAAA,EACF;AAGA,QAAM,eAAe,qBAAqB,QAAQ,UAAU,UAAU,OAAO,SAAS;AACtF,SAAO,MAAM,sCAAsC;AAAA,IACjD,YAAY,SAAS;AAAA,IACrB,cAAc,SAAS;AAAA,IACvB,UAAU;AAAA,IACV,YAAY,QAAQ,iBAAiB;AAAA,IACrC,KAAK;AAAA,EACP,CAAC;AAED,SAAO;AAAA,IACL,YAAY,SAAS;AAAA,IACrB,cAAc,SAAS;AAAA,IACvB,cAAc,SAAS;AAAA,IACvB,SAAS;AAAA,IACT,OAAO,yBAAyB,UAAU,cAAc,YAAY;AAAA,IACpE;AAAA,IACA,iBAAiB;AAAA,IACjB,OAAO,SAAS,SAAS;AAAA,EAC3B;AACF;AAYA,eAAsB,kBACpB,IACA,WACA,YACA,SACoC;AACpC,QAAM,UAAqC,CAAC;AAE5C,WAAS,IAAI,GAAG,IAAI,WAAW,QAAQ,KAAK;AAC1C,UAAM,WAAW,WAAW,CAAC;AAG7B,QAAI,SAAS,OAAO;AAElB,YAAM,QAAQ,MAAM,gBAAgB,IAAI,UAAU,OAAO;AAEzD,cAAQ,KAAK;AAAA,QACX,YAAY,SAAS;AAAA,QACrB,cAAc,SAAS;AAAA,QACvB,cAAc,SAAS;AAAA,QACvB,SAAS;AAAA;AAAA,QACT,OAAO;AAAA,QACP;AAAA,QACA,YAAY;AAAA,QACZ,iBAAiB;AAAA,MACnB,CAAC;AAAA,IACH,OAAO;AAEL,YAAM,SAAS,MAAM,gBAAgB,IAAI,WAAW,UAAU,OAAO;AACrE,cAAQ,KAAK,MAAM;AAGnB,UAAI,CAAC,OAAO,SAAS;AACnB;AAAA,MACF;AAGA,UAAI,OAAO,UAAU,OAAO,OAAO,WAAW,UAAU;AACtD,cAAM,MAAM,SAAS,gBAAgB,SAAS;AAC9C,gBAAQ,kBAAkB;AAAA,UACxB,GAAG,QAAQ;AAAA,UACX,CAAC,GAAG,GAAG,OAAO;AAAA,QAChB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AASA,eAAe,sBACb,IACA,WACA,UACA,SACA,QACc;AAEd,QAAM,qBAAqB,qBAAqB,SAAS,QAAQ,QAAQ,iBAAiB,QAAQ,gBAAgB;AAElH,UAAQ,SAAS,cAAc;AAAA,IAC7B,KAAK;AACH,aAAO,MAAM,iBAAiB,oBAAoB,SAAS,SAAS;AAAA,IAEtE,KAAK;AACH,aAAO,MAAM,eAAe,IAAI,oBAAoB,SAAS,WAAW,MAAM;AAAA,IAEhF,KAAK;AACH,aAAO,MAAM,iBAAiB,oBAAoB,SAAS,SAAS;AAAA,IAEtE,KAAK;AACH,aAAO,MAAM,oBAAoB,IAAI,oBAAoB,SAAS,SAAS;AAAA,IAE7E,KAAK;AACH,aAAO,MAAM,mBAAmB,oBAAoB,SAAS,EAAE,OAAO,CAAC;AAAA,IAEzE,KAAK;AACH,aAAO,MAAM,gBAAgB,oBAAoB,SAAS,SAAS;AAAA,IAErE,KAAK;AACH,aAAO,MAAM,YAAY,kBAAkB;AAAA,IAE7C;AACE,YAAM,IAAI;AAAA,QACR,0BAA0B,SAAS,YAAY;AAAA,QAC/C,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,EACJ;AACF;AAOA,eAAsB,iBACpB,QACA,SACA,WACc;AACd,QAAM,EAAE,IAAI,SAAS,UAAU,cAAc,KAAK,IAAI;AAEtD,MAAI,CAAC,MAAM,CAAC,SAAS;AACnB,UAAM,IAAI,MAAM,+CAA+C;AAAA,EACjE;AAGA,SAAO,KAAK,+BAA+B,EAAE,WAAW,cAAc,QAAQ,CAAC;AAG/E,MAAI;AACF,UAAM,eAAe,UAAU,QAAkE,cAAc;AAC/G,QAAI,gBAAgB,OAAO,aAAa,SAAS,YAAY;AAC3D,YAAM,aAAa,KAAK;AAAA,QACtB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AACD,aAAO,EAAE,MAAM,MAAM,IAAI,SAAS,KAAK,eAAe;AAAA,IACxD;AAAA,EACF,SAAS,OAAO;AAAA,EAEhB;AAEA,SAAO,EAAE,MAAM,MAAM,IAAI,SAAS,KAAK,UAAU;AACnD;AAOA,eAAsB,iBACpB,QACA,SACA,WACc;AACd,QAAM,EAAE,WAAW,QAAQ,IAAI;AAE/B,MAAI,CAAC,WAAW;AACd,UAAM,IAAI,MAAM,uCAAuC;AAAA,EACzD;AAMA,MAAI,oCAAoC,SAAS,GAAG;AAClD,UAAM,IAAI,MAAM,uDAAuD,SAAS,GAAG;AAAA,EACrF;AAKA,QAAM,wBAAwB,2BAA2B,OAAO;AAChE,MAAI,sBAAsB,SAAS,GAAG;AACpC,UAAM,IAAI;AAAA,MACR,kEAAkE,sBAAsB,KAAK,IAAI,CAAC;AAAA,IAEpG;AAAA,EACF;AAGA,QAAM,WAAW,UAAU,QAA2G,UAAU;AAEhJ,MAAI,CAAC,YAAY,OAAO,SAAS,cAAc,YAAY;AACzD,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AAGA,QAAM,kBAAkB;AAAA,IACtB,GAAG;AAAA,IACH,WAAW;AAAA,MACT,oBAAoB,QAAQ,iBAAiB;AAAA,MAC7C,YAAY,QAAQ,iBAAiB;AAAA,MACrC,UAAU,QAAQ,iBAAiB;AAAA,MACnC,gBAAgB,QAAQ,iBAAiB;AAAA,IAC3C;AAAA,EACF;AAEA,QAAM,SAAS,UAAU,WAAW,iBAAiB;AAAA,IACnD,UAAU,QAAQ,iBAAiB;AAAA,IACnC,gBAAgB,QAAQ,iBAAiB;AAAA,EAC3C,CAAC;AAED,SAAO,EAAE,SAAS,MAAM,WAAW,SAAS,gBAAgB;AAC9D;AAEA,MAAM,8BAA8B;AAEpC,SAAS,2BAA2B,OAAgB,OAAO,IAAc;AACvE,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,4BAA4B,KAAK,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC;AAAA,EAC7D;AACA,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,WAAO,MAAM,QAAQ,CAAC,MAAM,UAAU,2BAA2B,MAAM,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC;AAAA,EAC7F;AACA,MAAI,SAAS,OAAO,UAAU,UAAU;AACtC,WAAO,OAAO,QAAQ,KAAK,EAAE;AAAA,MAAQ,CAAC,CAAC,KAAK,MAAM,MAChD,2BAA2B,QAAQ,OAAO,GAAG,IAAI,IAAI,GAAG,KAAK,GAAG;AAAA,IAClE;AAAA,EACF;AACA,SAAO,CAAC;AACV;AAiCA,eAAsB,oBACpB,IACA,QACA,SACA,WACc;AACd,QAAM,EAAE,WAAW,OAAO,iBAAiB,IAAI;AAE/C,MAAI,CAAC,WAAW;AACd,UAAM,IAAI,MAAM,2EAA2E;AAAA,EAC7F;AAEA,QAAM,sBAAsB,uBAAuB,SAAS;AAC5D,MAAI,CAAC,qBAAqB;AACxB,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AAEA,MAAI,CAAC,SAAS,OAAO,UAAU,UAAU;AACvC,UAAM,IAAI,MAAM,wDAAwD;AAAA,EAC1E;AAEA,QAAM,cAAc,OAAO,QAAQ,WAAW,WAAW,QAAQ,OAAO,KAAK,IAAI;AACjF,MAAI,CAAC,aAAa;AAChB,UAAM,IAAI,MAAM,uDAAuD;AAAA,EACzE;AAEA,QAAM,aAAa,MAAM;AAAA,IACvB;AAAA,IACA;AAAA,IACA,oBAAoB;AAAA,IACpB,QAAQ,iBAAiB;AAAA,IACzB,QAAQ,iBAAiB;AAAA,EAC3B;AACA,MAAI,CAAC,YAAY;AACf,UAAM,IAAI,MAAM,yCAAyC;AAAA,EAC3D;AAGA,QAAM,aAAa,UAAU,QAAQ,YAAY;AAEjD,MAAI,CAAC,cAAc,OAAO,WAAW,YAAY,YAAY;AAC3D,UAAM,IAAI,MAAM,uCAAuC;AAAA,EACzD;AAEA,QAAM,iBAAiB,2BAA2B,KAAK;AACvD,MAAI,eAAe,SAAS,GAAG;AAC7B,UAAM,IAAI;AAAA,MACR,mEAAmE,eAAe,KAAK,IAAI,CAAC;AAAA,IAE9F;AAAA,EACF;AAGA,MAAI,aAAa,EAAE,GAAG,MAAM;AAG5B,MAAI,WAAW,eAAe,kBAAkB;AAC9C,UAAM,gBAAgB,MAAM;AAAA,MAC1B;AAAA,MACA;AAAA,MACA,WAAW;AAAA,MACX,QAAQ,iBAAiB;AAAA,MACzB,QAAQ,iBAAiB;AAAA,IAC3B;AACA,QAAI,eAAe;AACjB,iBAAW,gBAAgB;AAAA,IAC7B;AACA,WAAO,WAAW;AAAA,EACpB;AAGA,QAAM,MAAM;AAAA,IACV;AAAA,IACA,MAAM;AAAA,MACJ,KAAK;AAAA,MACL,UAAU,QAAQ,iBAAiB;AAAA,MACnC,OAAO,QAAQ,iBAAiB;AAAA,MAChC,cAAc;AAAA,IAChB;AAAA,IACA,mBAAmB;AAAA,IACnB,wBAAwB,QAAQ,iBAAiB;AAAA,IACjD,iBAAiB,QAAQ,iBAAiB,iBACtC,CAAC,QAAQ,iBAAiB,cAAc,IACxC;AAAA,EACN;AAGA,QAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW,QAAQ,WAAW;AAAA,IAC/D,OAAO;AAAA,IACP;AAAA,EACF,CAAC;AAED,SAAO;AAAA,IACL,UAAU;AAAA,IACV;AAAA,IACA;AAAA,IACA,YAAY,UAAU;AAAA,EACxB;AACF;AAKA,eAAe,yBACb,IACA,eACA,OACA,UACA,gBACwB;AACxB,MAAI;AAEF,UAAM,EAAE,YAAY,gBAAgB,IAAI,MAAM,OAAO,uDAAuD;AAG5G,UAAM,aAAa,MAAM,GAAG,QAAQ,YAAY;AAAA,MAC9C,KAAK;AAAA,MACL;AAAA,MACA;AAAA,MACA,WAAW;AAAA,IACb,CAAC;AAED,QAAI,CAAC,YAAY;AACf,aAAO,KAAK,wBAAwB,EAAE,WAAW,iBAAiB,cAAc,CAAC;AACjF,aAAO;AAAA,IACT;AAGA,UAAM,kBAAkB,MAAM,YAAY,EAAE,KAAK;AACjD,UAAM,QAAQ,MAAM,GAAG,QAAQ,iBAAiB;AAAA,MAC9C,YAAY,WAAW;AAAA,MACvB;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAED,QAAI,CAAC,OAAO;AACV,aAAO,KAAK,8BAA8B,EAAE,WAAW,iBAAiB,eAAe,MAAM,CAAC;AAC9F,aAAO;AAAA,IACT;AAEA,WAAO,MAAM;AAAA,EACf,SAAS,OAAO;AACd,WAAO,MAAM,oCAAoC,EAAE,WAAW,iBAAiB,KAAK,MAAM,CAAC;AAC3F,WAAO;AAAA,EACT;AACF;AAgBA,eAAsB,mBACpB,QACA,SACA,OAAwB,CAAC,GACX;AACd,QAAM,SAAS,wBAAwB,UAAU,MAAM;AACvD,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,SAAS,OAAO,MAAM,OACzB,IAAI,CAAC,UAAU,GAAG,MAAM,KAAK,KAAK,GAAG,KAAK,QAAQ,KAAK,MAAM,OAAO,EAAE,EACtE,KAAK,IAAI;AACZ,UAAM,IAAI,MAAM,gCAAgC,MAAM,EAAE;AAAA,EAC1D;AACA,QAAM,EAAE,KAAK,QAAQ,SAAS,YAAY,KAAK,IAAI,OAAO;AAC1D,QAAM,UAAU,cAAc,CAAC;AAE/B,QAAM,eAAe,KAAK,gBAAgB,yCAAyC;AAEnF,MAAI;AACJ,MAAI;AACF,eAAW,MAAM;AAAA,MACf;AAAA,MACA;AAAA,QACE;AAAA,QACA,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,GAAG;AAAA,QACL;AAAA,QACA,MAAM,SAAS,UAAa,SAAS,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,QACnE,UAAU;AAAA,QACV,QAAQ,KAAK;AAAA,MACf;AAAA,MACA;AAAA,QACE,SAAS;AAAA,QACT;AAAA,QACA,YAAY,KAAK;AAAA,QACjB,WAAW,KAAK;AAAA,MAClB;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,QAAI,iBAAiB,wBAAwB;AAC3C,YAAM,IAAI;AAAA,QACR,4CAA4C,MAAM,MAAM,MAAM,MAAM,OAAO;AAAA,MAC7E;AAAA,IACF;AACA,UAAM;AAAA,EACR;AAEA,MAAI,SAAS,UAAU,OAAO,SAAS,SAAS,KAAK;AACnD,UAAM,WAAW,SAAS,QAAQ,IAAI,UAAU;AAChD,UAAM,IAAI;AAAA,MACR,2CAA2C,SAAS,MAAM,OACxD,YAAY,sBACd;AAAA,IACF;AAAA,EACF;AAGA,MAAI;AACJ,QAAM,cAAc,SAAS,QAAQ,IAAI,cAAc;AAEvD,MAAI,eAAe,YAAY,SAAS,kBAAkB,GAAG;AAC3D,aAAS,MAAM,SAAS,KAAK;AAAA,EAC/B,OAAO;AACL,aAAS,MAAM,SAAS,KAAK;AAAA,EAC/B;AAGA,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,IAAI;AAAA,MACR,sCAAsC,SAAS,MAAM,KAAK,KAAK,UAAU,MAAM,CAAC;AAAA,IAClF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,QAAQ,SAAS;AAAA,IACjB,YAAY,SAAS;AAAA,IACrB;AAAA,EACF;AACF;AAOA,eAAsB,gBACpB,QACA,SACA,WACc;AACd,QAAM,EAAE,cAAc,OAAO,CAAC,EAAE,IAAI;AAEpC,MAAI,CAAC,cAAc;AACjB,UAAM,IAAI,MAAM,gDAAgD;AAAA,EAClE;AAGA,QAAM,QAAQ,oBAAoB,YAAY;AAE9C,MAAI;AACF,UAAM,KAAK,UAAU,QAAQ,KAAK;AAElC,QAAI,OAAO,OAAO,YAAY;AAC5B,YAAM,IAAI,MAAM,iCAAiC,YAAY,qBAAqB;AAAA,IACpF;AAGA,UAAM,SAAS,MAAM,GAAG,MAAM,OAAO;AAErC,WAAO,EAAE,UAAU,MAAM,cAAc,OAAO;AAAA,EAChD,SAAS,OAAO;AACd,QAAI,iBAAiB,SAAS,MAAM,QAAQ,SAAS,gBAAgB,GAAG;AACtE,YAAM,IAAI;AAAA,QACR,sBAAsB,YAAY,0CAA0C,KAAK;AAAA,MACnF;AAAA,IACF;AACA,UAAM;AAAA,EACR;AACF;AAMA,SAAS,qBAAqB,QAAuD;AACnF,MAAI,OAAO,OAAO;AAChB,UAAM,aAAa,IAAI,KAAK,OAAO,KAAK;AACxC,QAAI,MAAM,WAAW,QAAQ,CAAC,GAAG;AAC/B,YAAM,IAAI,MAAM,4CAA4C,OAAO,KAAK,EAAE;AAAA,IAC5E;AACA,UAAM,UAAU,WAAW,QAAQ,IAAI,KAAK,IAAI;AAChD,WAAO,KAAK,IAAI,GAAG,OAAO;AAAA,EAC5B;AAEA,MAAI,OAAO,UAAU;AACnB,WAAO,cAAc,OAAO,QAAQ;AAAA,EACtC;AAEA,QAAM,IAAI,MAAM,uFAAuF;AACzG;AAYA,eAAe,YAAY,QAA2B;AACpD,QAAM,aAAa,qBAAqB,MAAM;AAI9C,QAAM,MAAM,UAAU;AAEtB,SAAO,EAAE,QAAQ,MAAM,WAAW;AACpC;AAYA,eAAsB,eACpB,IACA,QACA,SACA,WACA,QACc;AAEd,QAAM,qBAAqB,qBAAqB,QAAQ,QAAQ,iBAAiB,QAAQ,gBAAgB;AAEzG,QAAM;AAAA,IACJ;AAAA,IACA,SAAS;AAAA,IACT,UAAU,CAAC;AAAA,IACX;AAAA,IACA,sBAAsB;AAAA,EACxB,IAAI;AAGJ,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,MAAM,oCAAoC;AAAA,EACtD;AAGA,QAAM,UAAU,YAAY,QAAQ;AAGpC,QAAM,EAAE,kBAAkB,IAAI,MAAM,OAAO,uCAAuC;AAqBlF,QAAM,WAAW,UACd,QAAiC,IAAI,EACrC,KAAK,EAAE,OAAO,MAAM,mBAAmB,MAAM,YAAY,MAAM,CAAC;AAsBnE,QAAM,kBAAkB,MAAM,sBAAsB,UAAU,QAAQ,gBAAgB;AAEtF,MAAI,gBAAgB,WAAW,GAAG;AAChC,UAAM,IAAI;AAAA,MACR,iEAAiE,QAAQ,iBAAiB,EAAE;AAAA,IAG9F;AAAA,EACF;AAGA,SAAO,MAAM;AAAA,IACX;AAAA,IACA;AAAA,MACE,MAAM,cAAc,QAAQ,iBAAiB,EAAE;AAAA,MAC/C,aAAa,6BAA6B,QAAQ,iBAAiB,UAAU,aAAa,QAAQ,iBAAiB,EAAE;AAAA,MACrH,UAAU,QAAQ,iBAAiB;AAAA,MACnC,gBAAgB,QAAQ,iBAAiB;AAAA,MACzC,OAAO;AAAA,MACP,WAAW;AAAA,IACb;AAAA,IACA,OAAO,iBAAiB;AAEtB,YAAM,iBAAyC;AAAA,QAC7C,gBAAgB;AAAA,QAChB,iBAAiB,UAAU,YAAY;AAAA,QACvC,eAAe,QAAQ,iBAAiB;AAAA,QACxC,qBAAqB,QAAQ,iBAAiB;AAAA,QAC9C,0BAA0B,QAAQ,iBAAiB;AAAA,QACnD,GAAG;AAAA,MACL;AAGA,YAAM,WAAW,MAAM,MAAM,SAAS;AAAA,QACpC;AAAA,QACA,SAAS;AAAA,QACT,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,QACpC;AAAA,MACF,CAAC;AAGD,UAAI;AACJ,YAAM,cAAc,SAAS,QAAQ,IAAI,cAAc;AAEvD,UAAI;AACF,YAAI,eAAe,YAAY,SAAS,kBAAkB,GAAG;AAC3D,yBAAe,MAAM,SAAS,KAAK;AAAA,QACrC,OAAO;AACL,yBAAe,MAAM,SAAS,KAAK;AAAA,QACrC;AAAA,MACF,SAAS,OAAO;AACd,uBAAe;AAAA,MACjB;AAGA,UAAI,CAAC,SAAS,IAAI;AAChB,8BAAsB,SAAS,QAAQ,cAAc,OAAO;AAAA,MAC9D;AAGA,UAAI,uBAAuB,gBAAgB,OAAO,iBAAiB,UAAU;AAC3E,YAAI,aAAa,YAAY,aAAa,aAAa,QAAQ,iBAAiB,UAAU;AACxF,gBAAM,IAAI;AAAA,YACR,wCAAwC,QAAQ,iBAAiB,QAAQ,qBAAqB,aAAa,QAAQ;AAAA,UACrH;AAAA,QACF;AAAA,MACF;AAGA,aAAO;AAAA,QACL,QAAQ,SAAS;AAAA,QACjB,YAAY,SAAS;AAAA,QACrB,SAAS,OAAO,YAAY,SAAS,QAAQ,QAAQ,CAAC;AAAA,QACtD,MAAM;AAAA,QACN,eAAe;AAAA,QACf,UAAU,QAAQ,iBAAiB;AAAA,QACnC,gBAAgB,QAAQ,iBAAiB;AAAA,MAC3C;AAAA,IACF;AAAA,EACF;AACF;AAcA,eAAe,4BACb,IACA,QACA,OACmB;AACnB,QAAM,EAAE,uBAAuB,mBAAmB,IAAI,MAAM,OAAO,0CAA0C;AAC7G,QAAM,EAAE,MAAM,UAAU,KAAK,IAAI,MAAM,OAAO,0BAA0B;AAExE,QAAM,OAAO,MAAM,sBAAsB,IAAI,MAAM;AAAA,IACjD,IAAI;AAAA,IACJ,UAAU,MAAM;AAAA,IAChB,WAAW;AAAA,EACb,GAAG,CAAC,GAAG,KAAK;AACZ,MAAI,CAAC,KAAM,QAAO,CAAC;AAEnB,QAAM,YAAY,MAAM;AAAA,IACtB;AAAA,IACA;AAAA,IACA,EAAE,MAAM,KAAK,IAAI,WAAW,KAAK;AAAA,IACjC,EAAE,UAAU,CAAC,MAAM,EAAE;AAAA,IACrB;AAAA,EACF;AACA,QAAM,UAAU,UACb,IAAI,CAAC,OAAa,OAAO,GAAG,SAAS,WAAW,GAAG,OAAO,GAAG,MAAM,EAAG,EACtE,OAAO,CAAC,OAA8B,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC;AAEhF,MAAI,QAAQ,WAAW,EAAG,QAAO,CAAC;AAElC,QAAM,cAAc,MAAM,mBAAmB,IAAI,MAAM;AAAA,IACrD,IAAI,EAAE,KAAK,QAAQ;AAAA,IACnB,UAAU,MAAM;AAAA,IAChB,WAAW;AAAA,EACb,GAAG,CAAC,GAAG,KAAK;AACZ,SAAO,YAAY,IAAI,CAAC,MAAW,EAAE,EAAY;AACnD;AAEA,eAAsB,sBACpB,IACA,UACmB;AACnB,MAAI,CAAC,SAAS,aAAc,QAAO,CAAC;AAEpC,QAAM,EAAE,sBAAsB,IAAI,MAAM,OAAO,0CAA0C;AACzF,QAAM,EAAE,mBAAmB,IAAI,MAAM,OAAO,kBAAkB;AAE9D,QAAM,QAAQ,EAAE,UAAU,SAAS,UAAU,gBAAgB,SAAS,eAAe;AAQrF,QAAM,kBAAkB,SAAS,UAAU,eAAe;AAC1D,MAAI,iBAAiB;AACnB,WAAO,4BAA4B,IAAI,iBAAiB,KAAK;AAAA,EAC/D;AAIA,QAAM,aAAa,MAAM,sBAAsB,IAAI,oBAAoB;AAAA,IACrE,IAAI,SAAS;AAAA,IACb,UAAU,SAAS;AAAA,IACnB,WAAW;AAAA,EACb,GAAG,CAAC,GAAG,KAAK;AACZ,QAAM,eAAe,YAAY;AACjC,MAAI,CAAC,aAAc,QAAO,CAAC;AAE3B,SAAO,4BAA4B,IAAI,cAAc,KAAK;AAC5D;AAOA,SAAS,YAAY,UAA0B;AAC7C,QAAM,SAAS,QAAQ,IAAI,WAAW;AAGtC,MAAI,SAAS,WAAW,GAAG,GAAG;AAE5B,QAAI,CAAC,SAAS,WAAW,OAAO,GAAG;AACjC,YAAM,IAAI,MAAM,6CAA6C,QAAQ,EAAE;AAAA,IACzE;AACA,WAAO,GAAG,MAAM,GAAG,QAAQ;AAAA,EAC7B;AAGA,MAAI;AACF,UAAM,cAAc,IAAI,IAAI,QAAQ;AACpC,UAAM,YAAY,IAAI,IAAI,MAAM;AAEhC,QAAI,YAAY,SAAS,UAAU,MAAM;AACvC,YAAM,IAAI;AAAA,QACR,8CAA8C,YAAY,IAAI,6BAA6B,UAAU,IAAI;AAAA,MAC3G;AAAA,IACF;AAEA,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QAAI,iBAAiB,WAAW;AAC9B,YAAM,IAAI,MAAM,yBAAyB,QAAQ,EAAE;AAAA,IACrD;AACA,UAAM;AAAA,EACR;AACF;AAOA,SAAS,sBAAsB,QAAgB,MAAW,KAAoB;AAC5E,QAAM,UAAU,OAAO,SAAS,WAAW,OAAO,KAAK,UAAU,IAAI;AAErE,MAAI,UAAU,OAAO,SAAS,KAAK;AAEjC,UAAM,IAAI;AAAA,MACR,uCAAuC,MAAM,qBAAqB,OAAO;AAAA,IAC3E;AAAA,EACF;AAEA,MAAI,UAAU,KAAK;AAEjB,UAAM,QAAa,IAAI;AAAA,MACrB,uCAAuC,MAAM,iBAAiB,OAAO;AAAA,IACvE;AACA,UAAM,YAAY;AAClB,UAAM;AAAA,EACR;AAGA,QAAM,IAAI,MAAM,uCAAuC,MAAM,KAAK,OAAO,EAAE;AAC7E;AAkBA,SAAS,qBACP,QACA,SACA,kBACK;AACL,MAAI,OAAO,WAAW,UAAU;AAG9B,UAAM,iBAAiB,OAAO,MAAM,mBAAmB;AAEvD,QAAI,gBAAgB;AAClB,YAAM,cAAc,eAAe,CAAC,EAAE,KAAK;AAG3C,UAAI,YAAY,WAAW,WAAW,KAAK,kBAAkB;AAC3D,cAAM,cAAc,YAAY,UAAU,YAAY,MAAM;AAC5D,gBAAQ,aAAa;AAAA,UACnB,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,iBAAiB;AAAA;AAAA,UAC1B;AACE,mBAAO;AAAA,QACX;AAAA,MACF;AAGA,UAAI,YAAY,WAAW,MAAM,GAAG;AAClC,cAAM,SAAS,YAAY,UAAU,OAAO,MAAM;AAClD,eAAO,gCAAgC,MAAM;AAAA,MAC/C;AAGA,UAAI,gBAAgB,OAAO;AACzB,gBAAO,oBAAI,KAAK,GAAE,YAAY;AAAA,MAChC;AAGA,YAAM,cAAc,YAAY,WAAW,UAAU,IACjD,YAAY,UAAU,WAAW,MAAM,IACvC;AAEJ,YAAM,QAAQ,eAAe,SAAS,WAAW;AACjD,aAAO,UAAU,SAAY,QAAQ;AAAA,IACvC;AAGA,WAAO,OAAO,QAAQ,oBAAoB,CAAC,OAAO,SAAS;AACzD,YAAM,cAAc,KAAK,KAAK;AAG9B,UAAI,YAAY,WAAW,WAAW,KAAK,kBAAkB;AAC3D,cAAM,cAAc,YAAY,UAAU,YAAY,MAAM;AAC5D,gBAAQ,aAAa;AAAA,UACnB,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,OAAO,iBAAiB,OAAO;AAAA,UACxC;AACE,mBAAO;AAAA,QACX;AAAA,MACF;AAGA,UAAI,YAAY,WAAW,MAAM,GAAG;AAClC,cAAM,SAAS,YAAY,UAAU,OAAO,MAAM;AAClD,eAAO,gCAAgC,MAAM;AAAA,MAC/C;AAGA,UAAI,gBAAgB,OAAO;AACzB,gBAAO,oBAAI,KAAK,GAAE,YAAY;AAAA,MAChC;AAGA,YAAM,cAAc,YAAY,WAAW,UAAU,IACjD,YAAY,UAAU,WAAW,MAAM,IACvC;AAEJ,YAAM,QAAQ,eAAe,SAAS,WAAW;AACjD,aAAO,UAAU,SAAY,OAAO,KAAK,IAAI;AAAA,IAC/C,CAAC;AAAA,EACH;AAEA,MAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,WAAO,OAAO,IAAI,CAAC,SAAS,qBAAqB,MAAM,SAAS,gBAAgB,CAAC;AAAA,EACnF;AAEA,MAAI,UAAU,OAAO,WAAW,UAAU;AACxC,UAAM,SAA8B,CAAC;AACrC,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,aAAO,GAAG,IAAI,qBAAqB,OAAO,SAAS,gBAAgB;AAAA,IACrE;AACA,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AAKA,SAAS,eAAe,KAAU,MAAmB;AACnD,QAAM,QAAQ,KAAK,MAAM,GAAG;AAC5B,MAAI,QAAQ;AAEZ,aAAW,QAAQ,OAAO;AACxB,QAAI,SAAS,OAAO,UAAU,YAAY,QAAQ,OAAO;AACvD,cAAQ,MAAM,IAAI;AAAA,IACpB,OAAO;AACL,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO;AACT;AAKA,SAAS,iBACP,mBACA,oBACA,SACA,eACQ;AACR,QAAM,UAAU,oBAAoB,KAAK,IAAI,oBAAoB,OAAO;AACxE,SAAO,KAAK,IAAI,SAAS,iBAAiB,QAAQ;AACpD;AAKA,SAAS,MAAM,IAA2B;AACxC,SAAO,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,EAAE,CAAC;AACzD;AAUA,eAAe,mBACb,UACA,WACY;AACZ,MAAI;AACJ,QAAM,kBAAkB,IAAI,gBAAgB;AAE5C,QAAM,iBAAiB,IAAI,QAAe,CAAC,GAAG,WAAW;AACvD,gBAAY,WAAW,MAAM;AAC3B,sBAAgB,MAAM;AACtB,aAAO,IAAI,MAAM,oCAAoC,SAAS,IAAI,CAAC;AAAA,IACrE,GAAG,SAAS;AAAA,EACd,CAAC;AAED,MAAI;AACF,WAAO,MAAM,QAAQ,KAAK,CAAC,SAAS,gBAAgB,MAAM,GAAG,cAAc,CAAC;AAAA,EAC9E,UAAE;AACA,iBAAa,SAAU;AAAA,EACzB;AACF;",
+  "sourcesContent": ["/**\n * Workflows Module - Activity Executor Service\n *\n * Executes workflow activities (send email, call API, emit events, etc.)\n * - Supports multiple activity types\n * - Implements retry logic with exponential backoff\n * - Handles timeouts\n * - Variable interpolation from workflow context\n *\n * Functional API (no classes) following Open Mercato conventions.\n */\n\nimport { EntityManager } from '@mikro-orm/core'\nimport type { EntityManager as PostgreSqlEntityManager } from '@mikro-orm/postgresql'\nimport type { AwilixContainer } from 'awilix'\nimport { WorkflowInstance } from '../data/entities'\nimport { createModuleQueue, Queue } from '@open-mercato/queue'\nimport { getRedisUrl } from '@open-mercato/shared/lib/redis/connection'\nimport {\n  safeOutboundFetch,\n  UnsafeOutboundUrlError,\n  type HostLookup,\n} from '@open-mercato/shared/lib/url-safety'\nimport { parseBooleanWithDefault } from '@open-mercato/shared/lib/boolean'\nimport { callWebhookConfigSchema } from '../data/validators'\nimport { WorkflowActivityJob, WORKFLOW_ACTIVITIES_QUEUE_NAME } from './activity-queue-types'\nimport { logWorkflowEvent } from './event-logger'\nimport { parseDuration } from './duration'\nimport { resolveActivityTimeoutMs } from './activityTimeoutFields'\nimport { getWorkflowSafeCommand } from './workflow-safe-commands'\n\nexport { isPrivateUrl } from '@open-mercato/shared/lib/network'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows')\n\nfunction isAllowPrivateWorkflowWebhookUrlsEnabled(): boolean {\n  if (parseBooleanWithDefault(process.env.OM_WORKFLOWS_ALLOW_PRIVATE_URLS, false)) {\n    if (process.env.NODE_ENV === 'production') {\n      logger.warn('OM_WORKFLOWS_ALLOW_PRIVATE_URLS is set but ignored in production. SSRF protection remains enabled.', { component: 'CALL_WEBHOOK' })\n      return false\n    }\n\n    logger.warn('OM_WORKFLOWS_ALLOW_PRIVATE_URLS is enabled. SSRF protection is bypassed for workflow webhooks; use only in development.', { component: 'CALL_WEBHOOK' })\n    return true\n  }\n\n  if (parseBooleanWithDefault(process.env.WORKFLOW_WEBHOOK_ALLOW_PRIVATE_URLS, false)) {\n    if (process.env.NODE_ENV === 'production') {\n      logger.warn('WORKFLOW_WEBHOOK_ALLOW_PRIVATE_URLS is deprecated and ignored in production. Use OM_WORKFLOWS_ALLOW_PRIVATE_URLS for development only. SSRF protection remains enabled.', { component: 'CALL_WEBHOOK' })\n      return false\n    }\n\n    logger.warn('WORKFLOW_WEBHOOK_ALLOW_PRIVATE_URLS is deprecated. Use OM_WORKFLOWS_ALLOW_PRIVATE_URLS instead. SSRF protection is bypassed.', { component: 'CALL_WEBHOOK' })\n    return true\n  }\n\n  return false\n}\n\nconst DEFAULT_WORKFLOW_ENV_INTERPOLATION_ALLOWLIST = new Set(['APP_URL'])\nconst WORKFLOW_ENV_INTERPOLATION_ALLOWLIST_KEY = 'OM_WORKFLOWS_ENV_INTERPOLATION_ALLOWLIST'\n\nfunction getWorkflowEnvInterpolationAllowlist(): Set<string> {\n  const allowlist = new Set(DEFAULT_WORKFLOW_ENV_INTERPOLATION_ALLOWLIST)\n  const configuredKeys = process.env[WORKFLOW_ENV_INTERPOLATION_ALLOWLIST_KEY]\n  if (!configuredKeys) {\n    return allowlist\n  }\n\n  for (const key of configuredKeys.split(',')) {\n    const trimmedKey = key.trim()\n    if (trimmedKey) {\n      allowlist.add(trimmedKey)\n    }\n  }\n\n  return allowlist\n}\n\nfunction resolveWorkflowEnvInterpolation(envKey: string): string {\n  if (!getWorkflowEnvInterpolationAllowlist().has(envKey)) {\n    return ''\n  }\n\n  return process.env[envKey] ?? ''\n}\n\n// ============================================================================\n// Types and Interfaces\n// ============================================================================\n\nexport type ActivityType =\n  | 'SEND_EMAIL'\n  | 'CALL_API'\n  | 'EMIT_EVENT'\n  | 'UPDATE_ENTITY'\n  | 'CALL_WEBHOOK'\n  | 'EXECUTE_FUNCTION'\n  | 'WAIT'\n\nexport interface ActivityDefinition {\n  activityId: string // Unique identifier for activity\n  activityName?: string // Optional, for debugging/logging\n  activityType: ActivityType\n  config: any\n  async?: boolean // Flag to execute activity asynchronously via queue\n  retryPolicy?: RetryPolicy\n  timeoutMs?: number\n  /**\n   * @deprecated Use `timeoutMs`. Legacy ISO 8601 duration string accepted by\n   * the definition schema before #4424; normalized by `resolveActivityTimeoutMs`.\n   */\n  timeout?: string\n  compensate?: boolean // Flag to execute compensation on failure\n}\n\nexport { resolveActivityTimeoutMs }\n\nexport interface RetryPolicy {\n  maxAttempts: number\n  initialIntervalMs: number\n  backoffCoefficient: number\n  maxIntervalMs: number\n}\n\nexport interface ActivityContext {\n  workflowInstance: WorkflowInstance\n  workflowContext: Record<string, any>\n  stepContext?: Record<string, any>\n  stepInstanceId?: string\n  // Set when the activity runs inside a parallel branch; carried on the queue\n  // payload so async resume targets the branch rather than the instance.\n  branchInstanceId?: string | null\n  transitionId?: string\n  userId?: string\n}\n\ntype RbacFeatureResolver = {\n  userHasAllFeatures: (\n    userId: string,\n    required: string[],\n    opts: { tenantId: string | null; organizationId: string | null }\n  ) => Promise<boolean>\n}\n\nasync function workflowUserHasAllFeatures(\n  container: AwilixContainer,\n  userId: string,\n  required: readonly string[],\n  tenantId: string | null,\n  organizationId: string | null\n): Promise<boolean> {\n  try {\n    const rbac = container.resolve('rbacService') as RbacFeatureResolver | undefined\n    if (rbac?.userHasAllFeatures) {\n      return await rbac.userHasAllFeatures(userId, [...required], { tenantId, organizationId })\n    }\n  } catch {\n    // Fail closed below when the workflow executor cannot prove the actor's grants.\n  }\n  return false\n}\n\nexport interface ActivityExecutionResult {\n  activityId: string\n  activityName?: string\n  activityType: ActivityType\n  success: boolean\n  output?: any\n  error?: string\n  retryCount: number\n  executionTimeMs: number\n  async?: boolean // Marks activity as async (queued)\n  jobId?: string // Queue job ID for async activities\n}\n\nexport class ActivityExecutionError extends Error {\n  constructor(\n    message: string,\n    public activityType: ActivityType,\n    public activityName?: string,\n    public details?: any\n  ) {\n    super(message)\n    this.name = 'ActivityExecutionError'\n  }\n}\n\n// ============================================================================\n// Queue Integration for Async Activities\n// ============================================================================\n\nlet activityQueue: Queue<WorkflowActivityJob> | null = null\n\n/**\n * Get or create the activity queue (lazy initialization)\n */\nfunction getActivityQueue(): Queue<WorkflowActivityJob> {\n  if (!activityQueue) {\n    activityQueue = createModuleQueue<WorkflowActivityJob>(\n      WORKFLOW_ACTIVITIES_QUEUE_NAME,\n      { concurrency: parseInt(process.env.WORKFLOW_WORKER_CONCURRENCY || '5') },\n    )\n  }\n\n  return activityQueue\n}\n\n/**\n * Enqueue an activity for background execution\n *\n * @param em - Entity manager\n * @param activity - Activity definition\n * @param context - Execution context\n * @returns Job ID\n */\nexport async function enqueueActivity(\n  em: EntityManager,\n  activity: ActivityDefinition,\n  context: ActivityContext\n): Promise<string> {\n  const { workflowInstance, workflowContext, stepContext, transitionId, stepInstanceId, branchInstanceId } =\n    context\n\n  // Interpolate config variables NOW (before queuing)\n  const interpolatedConfig = interpolateVariables(activity.config, workflowContext, workflowInstance)\n\n  // Create job payload\n  const job: WorkflowActivityJob = {\n    workflowInstanceId: workflowInstance.id,\n    stepInstanceId,\n    branchInstanceId: branchInstanceId ?? undefined,\n    transitionId,\n    activityId: activity.activityId,\n    activityName: activity.activityName || activity.activityType,\n    activityType: activity.activityType,\n    activityConfig: interpolatedConfig,\n    workflowContext,\n    stepContext,\n    retryPolicy: activity.retryPolicy,\n    timeoutMs: activity.timeoutMs,\n    tenantId: workflowInstance.tenantId,\n    organizationId: workflowInstance.organizationId,\n    userId: context.userId,\n  }\n\n  // Enqueue to queue (WAIT activities use delayMs for the actual delay)\n  const queue = getActivityQueue()\n  const enqueueOptions = activity.activityType === 'WAIT' && (interpolatedConfig.duration || interpolatedConfig.until)\n    ? { delayMs: calculateWaitDelayMs(interpolatedConfig) }\n    : undefined\n  const jobId = await queue.enqueue(job, enqueueOptions)\n\n  // Log event\n  await logWorkflowEvent(em, {\n    workflowInstanceId: workflowInstance.id,\n    stepInstanceId,\n    eventType: 'ACTIVITY_QUEUED',\n    eventData: {\n      activityId: activity.activityId,\n      activityName: activity.activityName,\n      activityType: activity.activityType,\n      async: true,\n      jobId,\n    },\n    tenantId: workflowInstance.tenantId,\n    organizationId: workflowInstance.organizationId,\n  })\n\n  return jobId\n}\n\n/**\n * Enqueue a delayed timer job for a WAIT_FOR_TIMER step.\n *\n * The activity worker handles `kind: 'timer'` jobs by calling\n * `timerHandler.fireTimer`, which resumes the paused workflow instance.\n */\nexport async function enqueueTimerJob(params: {\n  workflowInstanceId: string\n  stepInstanceId: string\n  branchInstanceId?: string | null\n  tenantId: string\n  organizationId: string\n  userId?: string\n  fireAt: string\n  delayMs: number\n}): Promise<string> {\n  const { workflowInstanceId, stepInstanceId, branchInstanceId, tenantId, organizationId, userId, fireAt, delayMs } =\n    params\n\n  const queue = getActivityQueue()\n  const jobId = await queue.enqueue(\n    {\n      kind: 'timer',\n      workflowInstanceId,\n      stepInstanceId,\n      branchInstanceId: branchInstanceId ?? undefined,\n      tenantId,\n      organizationId,\n      userId,\n      fireAt,\n    },\n    { delayMs: delayMs > 0 ? delayMs : undefined }\n  )\n\n  return jobId\n}\n\n// ============================================================================\n// Main Activity Execution Functions\n// ============================================================================\n\n/**\n * Execute a single activity with retry logic and timeout\n *\n * @param em - Entity manager\n * @param container - DI container\n * @param activity - Activity definition\n * @param context - Execution context\n * @returns Execution result\n */\nexport async function executeActivity(\n  em: EntityManager,\n  container: AwilixContainer,\n  activity: ActivityDefinition,\n  context: ActivityContext\n): Promise<ActivityExecutionResult> {\n  const retryPolicy = activity.retryPolicy || {\n    maxAttempts: 1,\n    initialIntervalMs: 0,\n    backoffCoefficient: 1,\n    maxIntervalMs: 0,\n  }\n\n  let lastError: any\n  let retryCount = 0\n\n  for (let attempt = 0; attempt < retryPolicy.maxAttempts; attempt++) {\n    try {\n      const startTime = Date.now()\n\n      // Execute with timeout if specified (timeoutMs, or a legacy ISO 8601\n      // `timeout` string normalized to ms \u2014 see resolveActivityTimeoutMs).\n      const timeoutMs = resolveActivityTimeoutMs(activity)\n      const result = timeoutMs\n        ? await executeWithTimeout(\n            (signal) => executeActivityByType(em, container, activity, context, signal),\n            timeoutMs\n          )\n        : await executeActivityByType(em, container, activity, context)\n\n      const executionTimeMs = Date.now() - startTime\n\n      return {\n        activityId: activity.activityId,\n        activityName: activity.activityName,\n        activityType: activity.activityType,\n        success: true,\n        output: result,\n        retryCount: attempt,\n        executionTimeMs,\n        async: activity.async || false,\n      }\n    } catch (error) {\n      lastError = error\n      retryCount = attempt + 1\n\n      // Log activity retry attempt with context\n      if (attempt < retryPolicy.maxAttempts - 1) {\n        logger.error('Activity failed; will retry', {\n          activityId: activity.activityId,\n          activityType: activity.activityType,\n          attempt: attempt + 1,\n          maxAttempts: retryPolicy.maxAttempts,\n          instanceId: context.workflowInstance.id,\n          err: error,\n        })\n      }\n\n      // If not the last attempt, apply backoff and retry\n      if (attempt < retryPolicy.maxAttempts - 1) {\n        const backoff = calculateBackoff(\n          retryPolicy.initialIntervalMs,\n          retryPolicy.backoffCoefficient,\n          attempt,\n          retryPolicy.maxIntervalMs\n        )\n\n        await sleep(backoff)\n      }\n    }\n  }\n\n  // All retries exhausted\n  const errorMessage = lastError instanceof Error ? lastError.message : String(lastError)\n  logger.error('Activity failed after all attempts', {\n    activityId: activity.activityId,\n    activityType: activity.activityType,\n    attempts: retryCount,\n    instanceId: context.workflowInstance.id,\n    err: lastError,\n  })\n\n  return {\n    activityId: activity.activityId,\n    activityName: activity.activityName,\n    activityType: activity.activityType,\n    success: false,\n    error: `Activity failed after ${retryCount} attempts: ${errorMessage}`,\n    retryCount,\n    executionTimeMs: 0,\n    async: activity.async || false,\n  }\n}\n\n/**\n * Execute multiple activities in sequence\n * Supports both synchronous and asynchronous (queued) execution\n *\n * @param em - Entity manager\n * @param container - DI container\n * @param activities - Array of activity definitions\n * @param context - Execution context\n * @returns Array of execution results\n */\nexport async function executeActivities(\n  em: EntityManager,\n  container: AwilixContainer,\n  activities: ActivityDefinition[],\n  context: ActivityContext\n): Promise<ActivityExecutionResult[]> {\n  const results: ActivityExecutionResult[] = []\n\n  for (let i = 0; i < activities.length; i++) {\n    const activity = activities[i]\n\n    // Check if activity should run async\n    if (activity.async) {\n      // Enqueue for background execution\n      const jobId = await enqueueActivity(em, activity, context)\n\n      results.push({\n        activityId: activity.activityId,\n        activityName: activity.activityName,\n        activityType: activity.activityType,\n        success: true, // Queued successfully\n        async: true,\n        jobId,\n        retryCount: 0,\n        executionTimeMs: 0,\n      })\n    } else {\n      // Execute synchronously (existing logic)\n      const result = await executeActivity(em, container, activity, context)\n      results.push(result)\n\n      // Stop execution if activity fails (fail-fast)\n      if (!result.success) {\n        break\n      }\n\n      // Update workflow context with activity output\n      if (result.output && typeof result.output === 'object') {\n        const key = activity.activityName || activity.activityType\n        context.workflowContext = {\n          ...context.workflowContext,\n          [key]: result.output,\n        }\n      }\n    }\n  }\n\n  return results\n}\n\n// ============================================================================\n// Activity Type Handlers\n// ============================================================================\n\n/**\n * Execute activity based on its type\n */\nasync function executeActivityByType(\n  em: EntityManager,\n  container: AwilixContainer,\n  activity: ActivityDefinition,\n  context: ActivityContext,\n  signal?: AbortSignal\n): Promise<any> {\n  // Interpolate config variables from context (including workflow metadata)\n  const interpolatedConfig = interpolateVariables(activity.config, context.workflowContext, context.workflowInstance)\n\n  switch (activity.activityType) {\n    case 'SEND_EMAIL':\n      return await executeSendEmail(interpolatedConfig, context, container)\n\n    case 'CALL_API':\n      return await executeCallApi(em, interpolatedConfig, context, container, signal)\n\n    case 'EMIT_EVENT':\n      return await executeEmitEvent(interpolatedConfig, context, container)\n\n    case 'UPDATE_ENTITY':\n      return await executeUpdateEntity(em, interpolatedConfig, context, container)\n\n    case 'CALL_WEBHOOK':\n      return await executeCallWebhook(interpolatedConfig, context, { signal })\n\n    case 'EXECUTE_FUNCTION':\n      return await executeFunction(interpolatedConfig, context, container)\n\n    case 'WAIT':\n      return await executeWait(interpolatedConfig)\n\n    default:\n      throw new ActivityExecutionError(\n        `Unknown activity type: ${activity.activityType}`,\n        activity.activityType,\n        activity.activityName\n      )\n  }\n}\n\n/**\n * SEND_EMAIL activity handler\n *\n * For MVP, this logs the email (actual email sending can be added later)\n */\nexport async function executeSendEmail(\n  config: any,\n  context: ActivityContext,\n  container: AwilixContainer\n): Promise<any> {\n  const { to, subject, template, templateData, body } = config\n\n  if (!to || !subject) {\n    throw new Error('SEND_EMAIL requires \"to\" and \"subject\" fields')\n  }\n\n  // For MVP: Log the email (actual email service integration can be added later)\n  logger.info('Send email activity invoked', { component: 'SEND_EMAIL', subject })\n\n  // Check if email service is available in container\n  try {\n    const emailService = container.resolve<{ send: (input: unknown) => Promise<unknown> | unknown }>('emailService')\n    if (emailService && typeof emailService.send === 'function') {\n      await emailService.send({\n        to,\n        subject,\n        template,\n        templateData,\n        body,\n      })\n      return { sent: true, to, subject, via: 'emailService' }\n    }\n  } catch (error) {\n    // Email service not available, just log\n  }\n\n  return { sent: true, to, subject, via: 'console' }\n}\n\n/**\n * EMIT_EVENT activity handler\n *\n * Publishes a domain event to the event bus\n */\nexport async function executeEmitEvent(\n  config: any,\n  context: ActivityContext,\n  container: AwilixContainer\n): Promise<any> {\n  const { eventName, payload } = config\n\n  if (!eventName) {\n    throw new Error('EMIT_EVENT requires \"eventName\" field')\n  }\n\n  // Emissions are fire-and-forget and no subscriber validates the payload shape,\n  // so an unresolved `{{context.x}}` here is even quieter than on the command\n  // path \u2014 it ships the literal template to every consumer. Fail loudly instead.\n  const unresolvedPayloadKeys = findUnresolvedTemplateKeys(payload)\n  if (unresolvedPayloadKeys.length > 0) {\n    throw new Error(\n      `EMIT_EVENT payload contains unresolved template variables for: ${unresolvedPayloadKeys.join(', ')}. ` +\n        `Check that the workflow context provides these keys.`\n    )\n  }\n\n  // Get event bus from container\n  const eventBus = container.resolve<{ emitEvent: (event: string, payload: unknown, options?: unknown) => Promise<unknown> | unknown }>('eventBus')\n\n  if (!eventBus || typeof eventBus.emitEvent !== 'function') {\n    throw new Error('Event bus not available in container')\n  }\n\n  // Publish event with workflow metadata\n  const enrichedPayload = {\n    ...payload,\n    _workflow: {\n      workflowInstanceId: context.workflowInstance.id,\n      workflowId: context.workflowInstance.workflowId,\n      tenantId: context.workflowInstance.tenantId,\n      organizationId: context.workflowInstance.organizationId,\n    },\n  }\n\n  await eventBus.emitEvent(eventName, enrichedPayload, {\n    tenantId: context.workflowInstance.tenantId,\n    organizationId: context.workflowInstance.organizationId,\n  })\n\n  return { emitted: true, eventName, payload: enrichedPayload }\n}\n\nconst UNRESOLVED_TEMPLATE_PATTERN = /\\{\\{[^}]+\\}\\}/\n\nfunction findUnresolvedTemplateKeys(value: unknown, path = ''): string[] {\n  if (typeof value === 'string') {\n    return UNRESOLVED_TEMPLATE_PATTERN.test(value) ? [path] : []\n  }\n  if (Array.isArray(value)) {\n    return value.flatMap((item, index) => findUnresolvedTemplateKeys(item, `${path}[${index}]`))\n  }\n  if (value && typeof value === 'object') {\n    return Object.entries(value).flatMap(([key, nested]) =>\n      findUnresolvedTemplateKeys(nested, path ? `${path}.${key}` : key)\n    )\n  }\n  return []\n}\n\n/**\n * UPDATE_ENTITY activity handler\n *\n * Updates an entity via CommandBus for proper audit logging, undo support, and side effects.\n *\n * Config format:\n * ```json\n * {\n *   \"commandId\": \"sales.documents.update\",\n *   \"input\": {\n *     \"id\": \"{{context.orderId}}\",\n *     \"statusEntryId\": \"{{context.approvedStatusId}}\"\n *   }\n * }\n * ```\n *\n * Alternative format with statusValue (auto-resolves to statusEntryId):\n * ```json\n * {\n *   \"commandId\": \"sales.orders.update\",\n *   \"statusDictionary\": \"sales.order_status\",\n *   \"input\": {\n *     \"id\": \"{{context.orderId}}\",\n *     \"statusValue\": \"pending_approval\"\n *   }\n * }\n * ```\n *\n * Every `{{...}}` reference in `input` must resolve against the workflow context \u2014\n * an unresolved reference is rejected rather than forwarded to the command bus.\n */\nexport async function executeUpdateEntity(\n  em: EntityManager,\n  config: any,\n  context: ActivityContext,\n  container: AwilixContainer\n): Promise<any> {\n  const { commandId, input, statusDictionary } = config\n\n  if (!commandId) {\n    throw new Error('UPDATE_ENTITY requires \"commandId\" field (e.g., \"sales.documents.update\")')\n  }\n\n  const workflowSafeCommand = getWorkflowSafeCommand(commandId)\n  if (!workflowSafeCommand) {\n    throw new Error('UPDATE_ENTITY command is not allowed')\n  }\n\n  if (!input || typeof input !== 'object') {\n    throw new Error('UPDATE_ENTITY requires \"input\" object with entity data')\n  }\n\n  const actorUserId = typeof context.userId === 'string' ? context.userId.trim() : ''\n  if (!actorUserId) {\n    throw new Error('UPDATE_ENTITY requires an authenticated workflow user')\n  }\n\n  const authorized = await workflowUserHasAllFeatures(\n    container,\n    actorUserId,\n    workflowSafeCommand.requiredFeatures,\n    context.workflowInstance.tenantId,\n    context.workflowInstance.organizationId\n  )\n  if (!authorized) {\n    throw new Error('UPDATE_ENTITY command is not authorized')\n  }\n\n  // Resolve CommandBus from container\n  const commandBus = container.resolve('commandBus') as any\n\n  if (!commandBus || typeof commandBus.execute !== 'function') {\n    throw new Error('CommandBus not available in container')\n  }\n\n  const unresolvedKeys = findUnresolvedTemplateKeys(input)\n  if (unresolvedKeys.length > 0) {\n    throw new Error(\n      `UPDATE_ENTITY input contains unresolved template variables for: ${unresolvedKeys.join(', ')}. ` +\n        `Check that the workflow context provides these keys.`\n    )\n  }\n\n  // Prepare final input, resolving statusValue if provided\n  let finalInput = { ...input }\n\n  // If statusValue is provided with a statusDictionary, resolve it to statusEntryId\n  if (finalInput.statusValue && statusDictionary) {\n    const statusEntryId = await resolveDictionaryEntryId(\n      em,\n      statusDictionary,\n      finalInput.statusValue,\n      context.workflowInstance.tenantId,\n      context.workflowInstance.organizationId\n    )\n    if (statusEntryId) {\n      finalInput.statusEntryId = statusEntryId\n    }\n    delete finalInput.statusValue\n  }\n\n  // Build synthetic CommandRuntimeContext for workflow execution\n  const ctx = {\n    container,\n    auth: {\n      sub: actorUserId,\n      tenantId: context.workflowInstance.tenantId,\n      orgId: context.workflowInstance.organizationId,\n      isSuperAdmin: false,\n    },\n    organizationScope: null,\n    selectedOrganizationId: context.workflowInstance.organizationId,\n    organizationIds: context.workflowInstance.organizationId\n      ? [context.workflowInstance.organizationId]\n      : null,\n  }\n\n  // Execute the command\n  const { result, logEntry } = await commandBus.execute(commandId, {\n    input: finalInput,\n    ctx,\n  })\n\n  return {\n    executed: true,\n    commandId,\n    result,\n    logEntryId: logEntry?.id,\n  }\n}\n\n/**\n * Helper to resolve dictionary entry ID by value\n */\nasync function resolveDictionaryEntryId(\n  em: EntityManager,\n  dictionaryKey: string,\n  value: string,\n  tenantId: string,\n  organizationId: string\n): Promise<string | null> {\n  try {\n    // Import here to avoid circular dependencies\n    const { Dictionary, DictionaryEntry } = await import('@open-mercato/core/modules/dictionaries/data/entities')\n\n    // Find the dictionary\n    const dictionary = await em.findOne(Dictionary, {\n      key: dictionaryKey,\n      tenantId,\n      organizationId,\n      deletedAt: null,\n    })\n\n    if (!dictionary) {\n      logger.warn('Dictionary not found', { component: 'UPDATE_ENTITY', dictionaryKey })\n      return null\n    }\n\n    // Find the entry by normalized value\n    const normalizedValue = value.toLowerCase().trim()\n    const entry = await em.findOne(DictionaryEntry, {\n      dictionary: dictionary.id,\n      tenantId,\n      organizationId,\n      normalizedValue,\n    })\n\n    if (!entry) {\n      logger.warn('Dictionary entry not found', { component: 'UPDATE_ENTITY', dictionaryKey, value })\n      return null\n    }\n\n    return entry.id\n  } catch (error) {\n    logger.error('Error resolving dictionary entry', { component: 'UPDATE_ENTITY', err: error })\n    return null\n  }\n}\n\n/**\n * CALL_WEBHOOK activity handler\n *\n * Makes HTTP request to an external URL. Applies shared SSRF guard\n * (protocol / credentials / blocked host / private IP literal / DNS rebinding)\n * before issuing the request and rejects any 3xx redirect rather than following.\n */\nexport type CallWebhookDeps = {\n  lookupHost?: HostLookup\n  allowPrivate?: boolean\n  fetchImpl?: typeof fetch\n  signal?: AbortSignal\n}\n\nexport async function executeCallWebhook(\n  config: unknown,\n  context: ActivityContext,\n  deps: CallWebhookDeps = {}\n): Promise<any> {\n  const parsed = callWebhookConfigSchema.safeParse(config)\n  if (!parsed.success) {\n    const issues = parsed.error.issues\n      .map((issue) => `${issue.path.join('.') || 'config'}: ${issue.message}`)\n      .join('; ')\n    throw new Error(`CALL_WEBHOOK config invalid: ${issues}`)\n  }\n  const { url, method, headers: rawHeaders, body } = parsed.data\n  const headers = rawHeaders ?? {}\n\n  const allowPrivate = deps.allowPrivate ?? isAllowPrivateWorkflowWebhookUrlsEnabled()\n\n  let response: Response\n  try {\n    response = await safeOutboundFetch(\n      url,\n      {\n        method,\n        headers: {\n          'Content-Type': 'application/json',\n          ...headers,\n        },\n        body: body !== undefined && body !== null ? JSON.stringify(body) : undefined,\n        redirect: 'manual',\n        signal: deps.signal,\n      },\n      {\n        subject: 'Workflow webhook URL',\n        allowPrivate,\n        lookupHost: deps.lookupHost,\n        fetchImpl: deps.fetchImpl,\n      },\n    )\n  } catch (error) {\n    if (error instanceof UnsafeOutboundUrlError) {\n      throw new Error(\n        `CALL_WEBHOOK rejected unsafe URL (reason=${error.reason}): ${error.message}`\n      )\n    }\n    throw error\n  }\n\n  if (response.status >= 300 && response.status < 400) {\n    const location = response.headers.get('location')\n    throw new Error(\n      `CALL_WEBHOOK refused to follow redirect ${response.status} to ${\n        location ?? '(no Location header)'\n      }`\n    )\n  }\n\n  // Parse response\n  let result: any\n  const contentType = response.headers.get('content-type')\n\n  if (contentType && contentType.includes('application/json')) {\n    result = await response.json()\n  } else {\n    result = await response.text()\n  }\n\n  // Check for HTTP errors\n  if (!response.ok) {\n    throw new Error(\n      `Webhook request failed with status ${response.status}: ${JSON.stringify(result)}`\n    )\n  }\n\n  return {\n    status: response.status,\n    statusText: response.statusText,\n    result,\n  }\n}\n\n/**\n * EXECUTE_FUNCTION activity handler\n *\n * Calls a registered function from DI container\n */\nexport async function executeFunction(\n  config: any,\n  context: ActivityContext,\n  container: AwilixContainer\n): Promise<any> {\n  const { functionName, args = {} } = config\n\n  if (!functionName) {\n    throw new Error('EXECUTE_FUNCTION requires \"functionName\" field')\n  }\n\n  // Look up function in container\n  const fnKey = `workflowFunction:${functionName}`\n\n  try {\n    const fn = container.resolve(fnKey)\n\n    if (typeof fn !== 'function') {\n      throw new Error(`Registered workflow function \"${functionName}\" is not a function`)\n    }\n\n    // Call function with args and context\n    const result = await fn(args, context)\n\n    return { executed: true, functionName, result }\n  } catch (error) {\n    if (error instanceof Error && error.message.includes('not registered')) {\n      throw new Error(\n        `Workflow function \"${functionName}\" not registered in DI container (key: ${fnKey})`\n      )\n    }\n    throw error\n  }\n}\n\n/**\n * Calculate delay in milliseconds from a WAIT activity config.\n * Supports either `duration` (relative, e.g. \"PT5M\") or `until` (absolute ISO 8601 datetime).\n */\nfunction calculateWaitDelayMs(config: { duration?: string; until?: string }): number {\n  if (config.until) {\n    const targetDate = new Date(config.until)\n    if (isNaN(targetDate.getTime())) {\n      throw new Error(`WAIT activity: invalid \"until\" datetime: ${config.until}`)\n    }\n    const delayMs = targetDate.getTime() - Date.now()\n    return Math.max(0, delayMs)\n  }\n\n  if (config.duration) {\n    return parseDuration(config.duration)\n  }\n\n  throw new Error('WAIT activity requires \"duration\" (e.g., \"PT5M\", \"1h\") or \"until\" (ISO 8601 datetime)')\n}\n\n/**\n * WAIT activity handler\n *\n * Delays workflow execution for a configured duration or until a specific datetime.\n * - `duration`: relative delay (e.g. \"PT5M\", \"1h\", \"30s\")\n * - `until`: absolute datetime (e.g. \"2026-04-15T10:00:00Z\")\n * - Sync mode: blocks via sleep (suitable for short delays)\n * - Async mode: delay is handled by the queue's delayMs option;\n *   this handler returns immediately when called from the worker\n */\nasync function executeWait(config: any): Promise<any> {\n  const durationMs = calculateWaitDelayMs(config)\n\n  // In sync mode, actually sleep for the duration\n  // In async mode (called from worker), the delay already happened via queue scheduling\n  await sleep(durationMs)\n\n  return { waited: true, durationMs }\n}\n\n/**\n * CALL_API activity handler\n *\n * Makes authenticated HTTP request to internal Open Mercato APIs\n * - Automatically creates one-time API key for authentication\n * - Injects tenant/organization context headers\n * - Validates URL security (SSRF prevention)\n * - Classifies errors (retriable vs non-retriable)\n * - Deletes API key after request (no stored credentials!)\n */\nexport async function executeCallApi(\n  em: EntityManager,\n  config: any,\n  context: ActivityContext,\n  container: AwilixContainer,\n  signal?: AbortSignal\n): Promise<any> {\n  // 1. Interpolate variables in config (including {{workflow.*}}, {{context.*}}, allowlisted {{env.*}}, {{now}})\n  const interpolatedConfig = interpolateVariables(config, context.workflowContext, context.workflowInstance)\n\n  const {\n    endpoint,\n    method = 'GET',\n    headers = {},\n    body,\n    validateTenantMatch = true,\n  } = interpolatedConfig\n\n\n  if (!endpoint) {\n    throw new Error('CALL_API requires \"endpoint\" field')\n  }\n\n  // 2. Build full URL (prepend APP_URL for relative paths)\n  const fullUrl = buildApiUrl(endpoint)\n\n  // 3. Import the one-time API key helper\n  const { withOnetimeApiKey } = await import('../../api_keys/services/apiKeyService')\n\n  // 4. Create the one-time API key on an EntityManager that is fully detached\n  //    from the surrounding request/transaction context.\n  //\n  //    CALL_API runs inside `workflowExecutor.executeWorkflow()`, which wraps\n  //    the whole execution in `em.transactional(...)`. The request EM is forked\n  //    with `useContext: true`, so while that transaction is open, EVERY\n  //    operation on the container's `em` \u2014 including this API key's\n  //    persist/flush \u2014 is transparently redirected to the uncommitted\n  //    transaction fork (MikroORM `getContext()` \u2192 `TransactionContext`). The\n  //    key would therefore stay invisible until the transaction commits, but\n  //    the commit cannot happen until this activity returns. The outbound\n  //    self-authenticated `fetch` below opens a SEPARATE DB connection that\n  //    cannot see the uncommitted row, so the internal API responds `401` and\n  //    the activity fails (issue #4202).\n  //\n  //    Forking with `useContext: false` (matching the query_index/webhooks\n  //    isolated-EM convention) gives the key its own pooled connection with\n  //    autocommit, so it is committed and visible to the internal request\n  //    immediately.\n  const apiKeyEm = container\n    .resolve<PostgreSqlEntityManager>('em')\n    .fork({ clear: true, freshEventManager: true, useContext: false }) as PostgreSqlEntityManager\n\n  // 5. Resolve the roles that the one-time API key will inherit.\n  //\n  // SECURITY: The key must never exceed the permissions of the human who\n  //   triggered (or authored) this workflow. Previously this code looked up\n  //   a role named \"admin\"/\"superadmin\" for the tenant and assigned it to\n  //   the key \u2014 which allowed any non-admin workflow author with\n  //   `workflows.definitions.edit` + `workflows.instances.create` to issue\n  //   arbitrary administrative API calls via a CALL_API activity. See the\n  //   SECURITY.md changelog entry for this fix.\n  //\n  //   The resolution strategy is:\n  //     1. Use the workflow instance's `metadata.initiatedBy` user (whoever\n  //        manually started the instance), when available. Only this user's\n  //        current active roles are used \u2014 we never fall back to the author\n  //        when the initiator is known, because that would escalate the\n  //        initiator's privileges.\n  //     2. Fall back to the workflow definition's `createdBy` (author) only\n  //        when the instance was started by an event trigger with no user.\n  //     3. If no traceable principal exists, the activity refuses to run \u2014\n  //        there is no \"system\" fallback that bypasses RBAC.\n  const resolvedRoleIds = await resolveCallApiRoleIds(apiKeyEm, context.workflowInstance)\n\n  if (resolvedRoleIds.length === 0) {\n    throw new Error(\n      `[CALL_API] Refusing to execute CALL_API for workflow instance ${context.workflowInstance.id}: ` +\n      `no traceable user roles could be resolved from the workflow instance or definition. ` +\n      `CALL_API activities must run under the identity of the user who triggered them.`\n    )\n  }\n\n  // 6. Execute request with one-time API key scoped to the resolved user's roles\n  return await withOnetimeApiKey(\n    apiKeyEm,\n    {\n      name: `__workflow_${context.workflowInstance.id}__`,\n      description: `One-time key for workflow ${context.workflowInstance.workflowId} instance ${context.workflowInstance.id}`,\n      tenantId: context.workflowInstance.tenantId,\n      organizationId: context.workflowInstance.organizationId,\n      roles: resolvedRoleIds,\n      expiresAt: null,\n    },\n    async (apiKeySecret) => {\n      // Build request headers (auth + context + custom)\n      const requestHeaders: Record<string, string> = {\n        'Content-Type': 'application/json',\n        'Authorization': `apikey ${apiKeySecret}`,\n        'X-Tenant-Id': context.workflowInstance.tenantId,\n        'X-Organization-Id': context.workflowInstance.organizationId,\n        'X-Workflow-Instance-Id': context.workflowInstance.id,\n        ...headers,\n      }\n\n      // Make HTTP request\n      const response = await fetch(fullUrl, {\n        method,\n        headers: requestHeaders,\n        body: body ? JSON.stringify(body) : undefined,\n        signal,\n      })\n\n      // Parse response body (JSON-safe)\n      let responseBody: any\n      const contentType = response.headers.get('content-type')\n\n      try {\n        if (contentType && contentType.includes('application/json')) {\n          responseBody = await response.json()\n        } else {\n          responseBody = await response.text()\n        }\n      } catch (error) {\n        responseBody = null\n      }\n\n      // Check for HTTP errors and classify\n      if (!response.ok) {\n        classifyAndThrowError(response.status, responseBody, fullUrl)\n      }\n\n      // Validate tenant match (security check)\n      if (validateTenantMatch && responseBody && typeof responseBody === 'object') {\n        if (responseBody.tenantId && responseBody.tenantId !== context.workflowInstance.tenantId) {\n          throw new Error(\n            `Tenant ID mismatch: workflow expects ${context.workflowInstance.tenantId} but API returned ${responseBody.tenantId}`\n          )\n        }\n      }\n\n      // Return structured result\n      return {\n        status: response.status,\n        statusText: response.statusText,\n        headers: Object.fromEntries(response.headers.entries()),\n        body: responseBody,\n        authenticated: true,\n        tenantId: context.workflowInstance.tenantId,\n        organizationId: context.workflowInstance.organizationId,\n      }\n    }\n  )\n}\n\n// ============================================================================\n// CALL_API Helper Functions\n// ============================================================================\n\nexport type CallApiInstanceLike = {\n  id: string\n  tenantId: string\n  organizationId: string\n  definitionId: string\n  metadata?: { initiatedBy?: string | null } | null\n}\n\nasync function resolveActiveRoleIdsForUser(\n  em: any,\n  userId: string,\n  scope: { tenantId: string; organizationId: string },\n): Promise<string[]> {\n  const { findOneWithDecryption, findWithDecryption } = await import('@open-mercato/shared/lib/encryption/find')\n  const { User, UserRole, Role } = await import('../../auth/data/entities')\n\n  const user = await findOneWithDecryption(em, User, {\n    id: userId,\n    tenantId: scope.tenantId,\n    deletedAt: null,\n  }, {}, scope)\n  if (!user) return []\n\n  const userRoles = await findWithDecryption(\n    em,\n    UserRole,\n    { user: user.id, deletedAt: null },\n    { populate: ['role'] },\n    scope,\n  )\n  const roleIds = userRoles\n    .map((ur: any) => (typeof ur.role === 'string' ? ur.role : ur.role?.id))\n    .filter((id: unknown): id is string => typeof id === 'string' && id.length > 0)\n\n  if (roleIds.length === 0) return []\n\n  const scopedRoles = await findWithDecryption(em, Role, {\n    id: { $in: roleIds },\n    tenantId: scope.tenantId,\n    deletedAt: null,\n  }, {}, scope)\n  return scopedRoles.map((r: any) => r.id as string)\n}\n\nexport async function resolveCallApiRoleIds(\n  em: any,\n  instance: CallApiInstanceLike\n): Promise<string[]> {\n  if (!instance.definitionId) return []\n\n  const { findOneWithDecryption } = await import('@open-mercato/shared/lib/encryption/find')\n  const { WorkflowDefinition } = await import('../data/entities')\n\n  const scope = { tenantId: instance.tenantId, organizationId: instance.organizationId }\n\n  // 1. Prefer the triggering user (whoever manually started this instance).\n  //    WorkflowInstance.metadata.initiatedBy is the canonical record of that\n  //    principal for user-started instances; use their current role set so\n  //    CALL_API never exceeds the initiator's permissions. Refuse if the\n  //    initiator has no active scoped roles \u2014 do not fall back to the\n  //    definition author, which would escalate the initiator's privileges.\n  const initiatorUserId = instance.metadata?.initiatedBy ?? null\n  if (initiatorUserId) {\n    return resolveActiveRoleIdsForUser(em, initiatorUserId, scope)\n  }\n\n  // 2. Event-triggered instance with no human initiator: fall back to the\n  //    definition author. Soft-deleted definitions must not mint keys.\n  const definition = await findOneWithDecryption(em, WorkflowDefinition, {\n    id: instance.definitionId,\n    tenantId: instance.tenantId,\n    deletedAt: null,\n  }, {}, scope)\n  const authorUserId = definition?.createdBy\n  if (!authorUserId) return []\n\n  return resolveActiveRoleIdsForUser(em, authorUserId, scope)\n}\n\n/**\n * Build full API URL from endpoint\n * - Relative paths (/api/...) \u2192 prepend APP_URL\n * - Absolute URLs \u2192 validate domain matches APP_URL (SSRF prevention)\n */\nfunction buildApiUrl(endpoint: string): string {\n  const appUrl = process.env.APP_URL || 'http://localhost:3000'\n\n  // Relative path - prepend APP_URL\n  if (endpoint.startsWith('/')) {\n    // Security: Only allow /api/* paths\n    if (!endpoint.startsWith('/api/')) {\n      throw new Error(`CALL_API only supports /api/* paths, got: ${endpoint}`)\n    }\n    return `${appUrl}${endpoint}`\n  }\n\n  // Absolute URL - validate domain matches APP_URL (SSRF prevention)\n  try {\n    const endpointUrl = new URL(endpoint)\n    const appUrlObj = new URL(appUrl)\n\n    if (endpointUrl.host !== appUrlObj.host) {\n      throw new Error(\n        `SSRF Prevention: CALL_API endpoint domain (${endpointUrl.host}) does not match APP_URL (${appUrlObj.host})`\n      )\n    }\n\n    return endpoint\n  } catch (error) {\n    if (error instanceof TypeError) {\n      throw new Error(`Invalid endpoint URL: ${endpoint}`)\n    }\n    throw error\n  }\n}\n\n/**\n * Classify HTTP error and throw appropriate error\n * - 400-499: Non-retriable (client error - validation/auth)\n * - 500-599: Retriable (server error)\n */\nfunction classifyAndThrowError(status: number, body: any, url: string): never {\n  const bodyStr = typeof body === 'string' ? body : JSON.stringify(body)\n\n  if (status >= 400 && status < 500) {\n    // Client errors - non-retriable\n    throw new Error(\n      `CALL_API request failed with status ${status} (non-retriable): ${bodyStr}`\n    )\n  }\n\n  if (status >= 500) {\n    // Server errors - retriable\n    const error: any = new Error(\n      `CALL_API request failed with status ${status} (retriable): ${bodyStr}`\n    )\n    error.retriable = true\n    throw error\n  }\n\n  // Other errors\n  throw new Error(`CALL_API request failed with status ${status}: ${bodyStr}`)\n}\n\n// ============================================================================\n// Helper Functions\n// ============================================================================\n\n/**\n * Interpolate variables in config from workflow context\n *\n * Supports syntax:\n * - {{context.field}} or {{context.nested.field}} - from workflow context\n * - {{workflow.instanceId}} - workflow instance ID\n * - {{workflow.tenantId}} - tenant ID\n * - {{workflow.organizationId}} - organization ID\n * - {{workflow.currentStepId}} - current step ID\n * - {{env.VAR_NAME}} - server-allowlisted environment variables\n * - {{now}} - current ISO timestamp\n */\nfunction interpolateVariables(\n  config: any,\n  context: Record<string, any>,\n  workflowInstance?: WorkflowInstance\n): any {\n  if (typeof config === 'string') {\n    // Check if this is a single variable reference (e.g., \"{{context.cart.items}}\")\n    // This preserves the original type (array, object, number, boolean)\n    const singleVarMatch = config.match(/^\\{\\{([^}]+)\\}\\}$/)\n\n    if (singleVarMatch) {\n      const trimmedPath = singleVarMatch[1].trim()\n\n      // Handle {{workflow.*}} variables\n      if (trimmedPath.startsWith('workflow.') && workflowInstance) {\n        const workflowKey = trimmedPath.substring('workflow.'.length)\n        switch (workflowKey) {\n          case 'instanceId':\n            return workflowInstance.id\n          case 'tenantId':\n            return workflowInstance.tenantId\n          case 'organizationId':\n            return workflowInstance.organizationId\n          case 'currentStepId':\n            return workflowInstance.currentStepId\n          case 'workflowId':\n            return workflowInstance.workflowId\n          case 'version':\n            return workflowInstance.version // Return as number\n          default:\n            return config // Return original if unknown\n        }\n      }\n\n      // Handle {{env.*}} variables\n      if (trimmedPath.startsWith('env.')) {\n        const envKey = trimmedPath.substring('env.'.length)\n        return resolveWorkflowEnvInterpolation(envKey)\n      }\n\n      // Handle {{now}} - current timestamp\n      if (trimmedPath === 'now') {\n        return new Date().toISOString()\n      }\n\n      // Handle {{context.*}} variables (default behavior)\n      const contextPath = trimmedPath.startsWith('context.')\n        ? trimmedPath.substring('context.'.length)\n        : trimmedPath\n\n      const value = getNestedValue(context, contextPath)\n      return value !== undefined ? value : config // Return raw value to preserve type\n    }\n\n    // Multiple interpolations or mixed text - return string\n    return config.replace(/\\{\\{([^}]+)\\}\\}/g, (match, path) => {\n      const trimmedPath = path.trim()\n\n      // Handle {{workflow.*}} variables\n      if (trimmedPath.startsWith('workflow.') && workflowInstance) {\n        const workflowKey = trimmedPath.substring('workflow.'.length)\n        switch (workflowKey) {\n          case 'instanceId':\n            return workflowInstance.id\n          case 'tenantId':\n            return workflowInstance.tenantId\n          case 'organizationId':\n            return workflowInstance.organizationId\n          case 'currentStepId':\n            return workflowInstance.currentStepId\n          case 'workflowId':\n            return workflowInstance.workflowId\n          case 'version':\n            return String(workflowInstance.version)\n          default:\n            return match // Unknown workflow key\n        }\n      }\n\n      // Handle {{env.*}} variables\n      if (trimmedPath.startsWith('env.')) {\n        const envKey = trimmedPath.substring('env.'.length)\n        return resolveWorkflowEnvInterpolation(envKey)\n      }\n\n      // Handle {{now}} - current timestamp\n      if (trimmedPath === 'now') {\n        return new Date().toISOString()\n      }\n\n      // Handle {{context.*}} variables (default behavior)\n      const contextPath = trimmedPath.startsWith('context.')\n        ? trimmedPath.substring('context.'.length)\n        : trimmedPath\n\n      const value = getNestedValue(context, contextPath)\n      return value !== undefined ? String(value) : match\n    })\n  }\n\n  if (Array.isArray(config)) {\n    return config.map((item) => interpolateVariables(item, context, workflowInstance))\n  }\n\n  if (config && typeof config === 'object') {\n    const result: Record<string, any> = {}\n    for (const [key, value] of Object.entries(config)) {\n      result[key] = interpolateVariables(value, context, workflowInstance)\n    }\n    return result\n  }\n\n  return config\n}\n\n/**\n * Get nested value from object by path (e.g., \"user.email\")\n */\nfunction getNestedValue(obj: any, path: string): any {\n  const parts = path.split('.')\n  let value = obj\n\n  for (const part of parts) {\n    if (value && typeof value === 'object' && part in value) {\n      value = value[part]\n    } else {\n      return undefined\n    }\n  }\n\n  return value\n}\n\n/**\n * Calculate exponential backoff delay\n */\nfunction calculateBackoff(\n  initialIntervalMs: number,\n  backoffCoefficient: number,\n  attempt: number,\n  maxIntervalMs: number\n): number {\n  const backoff = initialIntervalMs * Math.pow(backoffCoefficient, attempt)\n  return Math.min(backoff, maxIntervalMs || Infinity)\n}\n\n/**\n * Sleep for specified milliseconds\n */\nfunction sleep(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms))\n}\n\n/**\n * Execute a promise with timeout\n *\n * Only CALL_API and CALL_WEBHOOK honour the abort signal today \u2014 they forward\n * it to `fetch`. SEND_EMAIL, EMIT_EVENT, UPDATE_ENTITY and EXECUTE_FUNCTION\n * still run to completion after the timeout has been recorded. Tracked in\n * #5148.\n */\nasync function executeWithTimeout<T>(\n  executor: (signal: AbortSignal) => Promise<T>,\n  timeoutMs: number\n): Promise<T> {\n  let timeoutId: NodeJS.Timeout\n  const abortController = new AbortController()\n\n  const timeoutPromise = new Promise<never>((_, reject) => {\n    timeoutId = setTimeout(() => {\n      abortController.abort()\n      reject(new Error(`Activity execution timeout after ${timeoutMs}ms`))\n    }, timeoutMs)\n  })\n\n  try {\n    return await Promise.race([executor(abortController.signal), timeoutPromise])\n  } finally {\n    clearTimeout(timeoutId!)\n  }\n}\n"],
+  "mappings": "AAgBA,SAAS,yBAAgC;AAEzC;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,SAAS,+BAA+B;AACxC,SAAS,+BAA+B;AACxC,SAA8B,sCAAsC;AACpE,SAAS,wBAAwB;AACjC,SAAS,qBAAqB;AAC9B,SAAS,gCAAgC;AACzC,SAAS,8BAA8B;AAEvC,SAAS,oBAAoB;AAC7B,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEvC,SAAS,2CAAoD;AAC3D,MAAI,wBAAwB,QAAQ,IAAI,iCAAiC,KAAK,GAAG;AAC/E,QAAI,QAAQ,IAAI,aAAa,cAAc;AACzC,aAAO,KAAK,sGAAsG,EAAE,WAAW,eAAe,CAAC;AAC/I,aAAO;AAAA,IACT;AAEA,WAAO,KAAK,2HAA2H,EAAE,WAAW,eAAe,CAAC;AACpK,WAAO;AAAA,EACT;AAEA,MAAI,wBAAwB,QAAQ,IAAI,qCAAqC,KAAK,GAAG;AACnF,QAAI,QAAQ,IAAI,aAAa,cAAc;AACzC,aAAO,KAAK,2KAA2K,EAAE,WAAW,eAAe,CAAC;AACpN,aAAO;AAAA,IACT;AAEA,WAAO,KAAK,gIAAgI,EAAE,WAAW,eAAe,CAAC;AACzK,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AAEA,MAAM,+CAA+C,oBAAI,IAAI,CAAC,SAAS,CAAC;AACxE,MAAM,2CAA2C;AAEjD,SAAS,uCAAoD;AAC3D,QAAM,YAAY,IAAI,IAAI,4CAA4C;AACtE,QAAM,iBAAiB,QAAQ,IAAI,wCAAwC;AAC3E,MAAI,CAAC,gBAAgB;AACnB,WAAO;AAAA,EACT;AAEA,aAAW,OAAO,eAAe,MAAM,GAAG,GAAG;AAC3C,UAAM,aAAa,IAAI,KAAK;AAC5B,QAAI,YAAY;AACd,gBAAU,IAAI,UAAU;AAAA,IAC1B;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,gCAAgC,QAAwB;AAC/D,MAAI,CAAC,qCAAqC,EAAE,IAAI,MAAM,GAAG;AACvD,WAAO;AAAA,EACT;AAEA,SAAO,QAAQ,IAAI,MAAM,KAAK;AAChC;AA4DA,eAAe,2BACb,WACA,QACA,UACA,UACA,gBACkB;AAClB,MAAI;AACF,UAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,QAAI,MAAM,oBAAoB;AAC5B,aAAO,MAAM,KAAK,mBAAmB,QAAQ,CAAC,GAAG,QAAQ,GAAG,EAAE,UAAU,eAAe,CAAC;AAAA,IAC1F;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO;AACT;AAeO,MAAM,+BAA+B,MAAM;AAAA,EAChD,YACE,SACO,cACA,cACA,SACP;AACA,UAAM,OAAO;AAJN;AACA;AACA;AAGP,SAAK,OAAO;AAAA,EACd;AACF;AAMA,IAAI,gBAAmD;AAKvD,SAAS,mBAA+C;AACtD,MAAI,CAAC,eAAe;AAClB,oBAAgB;AAAA,MACd;AAAA,MACA,EAAE,aAAa,SAAS,QAAQ,IAAI,+BAA+B,GAAG,EAAE;AAAA,IAC1E;AAAA,EACF;AAEA,SAAO;AACT;AAUA,eAAsB,gBACpB,IACA,UACA,SACiB;AACjB,QAAM,EAAE,kBAAkB,iBAAiB,aAAa,cAAc,gBAAgB,iBAAiB,IACrG;AAGF,QAAM,qBAAqB,qBAAqB,SAAS,QAAQ,iBAAiB,gBAAgB;AAGlG,QAAM,MAA2B;AAAA,IAC/B,oBAAoB,iBAAiB;AAAA,IACrC;AAAA,IACA,kBAAkB,oBAAoB;AAAA,IACtC;AAAA,IACA,YAAY,SAAS;AAAA,IACrB,cAAc,SAAS,gBAAgB,SAAS;AAAA,IAChD,cAAc,SAAS;AAAA,IACvB,gBAAgB;AAAA,IAChB;AAAA,IACA;AAAA,IACA,aAAa,SAAS;AAAA,IACtB,WAAW,SAAS;AAAA,IACpB,UAAU,iBAAiB;AAAA,IAC3B,gBAAgB,iBAAiB;AAAA,IACjC,QAAQ,QAAQ;AAAA,EAClB;AAGA,QAAM,QAAQ,iBAAiB;AAC/B,QAAM,iBAAiB,SAAS,iBAAiB,WAAW,mBAAmB,YAAY,mBAAmB,SAC1G,EAAE,SAAS,qBAAqB,kBAAkB,EAAE,IACpD;AACJ,QAAM,QAAQ,MAAM,MAAM,QAAQ,KAAK,cAAc;AAGrD,QAAM,iBAAiB,IAAI;AAAA,IACzB,oBAAoB,iBAAiB;AAAA,IACrC;AAAA,IACA,WAAW;AAAA,IACX,WAAW;AAAA,MACT,YAAY,SAAS;AAAA,MACrB,cAAc,SAAS;AAAA,MACvB,cAAc,SAAS;AAAA,MACvB,OAAO;AAAA,MACP;AAAA,IACF;AAAA,IACA,UAAU,iBAAiB;AAAA,IAC3B,gBAAgB,iBAAiB;AAAA,EACnC,CAAC;AAED,SAAO;AACT;AAQA,eAAsB,gBAAgB,QASlB;AAClB,QAAM,EAAE,oBAAoB,gBAAgB,kBAAkB,UAAU,gBAAgB,QAAQ,QAAQ,QAAQ,IAC9G;AAEF,QAAM,QAAQ,iBAAiB;AAC/B,QAAM,QAAQ,MAAM,MAAM;AAAA,IACxB;AAAA,MACE,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,kBAAkB,oBAAoB;AAAA,MACtC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,EAAE,SAAS,UAAU,IAAI,UAAU,OAAU;AAAA,EAC/C;AAEA,SAAO;AACT;AAeA,eAAsB,gBACpB,IACA,WACA,UACA,SACkC;AAClC,QAAM,cAAc,SAAS,eAAe;AAAA,IAC1C,aAAa;AAAA,IACb,mBAAmB;AAAA,IACnB,oBAAoB;AAAA,IACpB,eAAe;AAAA,EACjB;AAEA,MAAI;AACJ,MAAI,aAAa;AAEjB,WAAS,UAAU,GAAG,UAAU,YAAY,aAAa,WAAW;AAClE,QAAI;AACF,YAAM,YAAY,KAAK,IAAI;AAI3B,YAAM,YAAY,yBAAyB,QAAQ;AACnD,YAAM,SAAS,YACX,MAAM;AAAA,QACJ,CAAC,WAAW,sBAAsB,IAAI,WAAW,UAAU,SAAS,MAAM;AAAA,QAC1E;AAAA,MACF,IACA,MAAM,sBAAsB,IAAI,WAAW,UAAU,OAAO;AAEhE,YAAM,kBAAkB,KAAK,IAAI,IAAI;AAErC,aAAO;AAAA,QACL,YAAY,SAAS;AAAA,QACrB,cAAc,SAAS;AAAA,QACvB,cAAc,SAAS;AAAA,QACvB,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,YAAY;AAAA,QACZ;AAAA,QACA,OAAO,SAAS,SAAS;AAAA,MAC3B;AAAA,IACF,SAAS,OAAO;AACd,kBAAY;AACZ,mBAAa,UAAU;AAGvB,UAAI,UAAU,YAAY,cAAc,GAAG;AACzC,eAAO,MAAM,+BAA+B;AAAA,UAC1C,YAAY,SAAS;AAAA,UACrB,cAAc,SAAS;AAAA,UACvB,SAAS,UAAU;AAAA,UACnB,aAAa,YAAY;AAAA,UACzB,YAAY,QAAQ,iBAAiB;AAAA,UACrC,KAAK;AAAA,QACP,CAAC;AAAA,MACH;AAGA,UAAI,UAAU,YAAY,cAAc,GAAG;AACzC,cAAM,UAAU;AAAA,UACd,YAAY;AAAA,UACZ,YAAY;AAAA,UACZ;AAAA,UACA,YAAY;AAAA,QACd;AAEA,cAAM,MAAM,OAAO;AAAA,MACrB;AAAA,IACF;AAAA,EACF;AAGA,QAAM,eAAe,qBAAqB,QAAQ,UAAU,UAAU,OAAO,SAAS;AACtF,SAAO,MAAM,sCAAsC;AAAA,IACjD,YAAY,SAAS;AAAA,IACrB,cAAc,SAAS;AAAA,IACvB,UAAU;AAAA,IACV,YAAY,QAAQ,iBAAiB;AAAA,IACrC,KAAK;AAAA,EACP,CAAC;AAED,SAAO;AAAA,IACL,YAAY,SAAS;AAAA,IACrB,cAAc,SAAS;AAAA,IACvB,cAAc,SAAS;AAAA,IACvB,SAAS;AAAA,IACT,OAAO,yBAAyB,UAAU,cAAc,YAAY;AAAA,IACpE;AAAA,IACA,iBAAiB;AAAA,IACjB,OAAO,SAAS,SAAS;AAAA,EAC3B;AACF;AAYA,eAAsB,kBACpB,IACA,WACA,YACA,SACoC;AACpC,QAAM,UAAqC,CAAC;AAE5C,WAAS,IAAI,GAAG,IAAI,WAAW,QAAQ,KAAK;AAC1C,UAAM,WAAW,WAAW,CAAC;AAG7B,QAAI,SAAS,OAAO;AAElB,YAAM,QAAQ,MAAM,gBAAgB,IAAI,UAAU,OAAO;AAEzD,cAAQ,KAAK;AAAA,QACX,YAAY,SAAS;AAAA,QACrB,cAAc,SAAS;AAAA,QACvB,cAAc,SAAS;AAAA,QACvB,SAAS;AAAA;AAAA,QACT,OAAO;AAAA,QACP;AAAA,QACA,YAAY;AAAA,QACZ,iBAAiB;AAAA,MACnB,CAAC;AAAA,IACH,OAAO;AAEL,YAAM,SAAS,MAAM,gBAAgB,IAAI,WAAW,UAAU,OAAO;AACrE,cAAQ,KAAK,MAAM;AAGnB,UAAI,CAAC,OAAO,SAAS;AACnB;AAAA,MACF;AAGA,UAAI,OAAO,UAAU,OAAO,OAAO,WAAW,UAAU;AACtD,cAAM,MAAM,SAAS,gBAAgB,SAAS;AAC9C,gBAAQ,kBAAkB;AAAA,UACxB,GAAG,QAAQ;AAAA,UACX,CAAC,GAAG,GAAG,OAAO;AAAA,QAChB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AASA,eAAe,sBACb,IACA,WACA,UACA,SACA,QACc;AAEd,QAAM,qBAAqB,qBAAqB,SAAS,QAAQ,QAAQ,iBAAiB,QAAQ,gBAAgB;AAElH,UAAQ,SAAS,cAAc;AAAA,IAC7B,KAAK;AACH,aAAO,MAAM,iBAAiB,oBAAoB,SAAS,SAAS;AAAA,IAEtE,KAAK;AACH,aAAO,MAAM,eAAe,IAAI,oBAAoB,SAAS,WAAW,MAAM;AAAA,IAEhF,KAAK;AACH,aAAO,MAAM,iBAAiB,oBAAoB,SAAS,SAAS;AAAA,IAEtE,KAAK;AACH,aAAO,MAAM,oBAAoB,IAAI,oBAAoB,SAAS,SAAS;AAAA,IAE7E,KAAK;AACH,aAAO,MAAM,mBAAmB,oBAAoB,SAAS,EAAE,OAAO,CAAC;AAAA,IAEzE,KAAK;AACH,aAAO,MAAM,gBAAgB,oBAAoB,SAAS,SAAS;AAAA,IAErE,KAAK;AACH,aAAO,MAAM,YAAY,kBAAkB;AAAA,IAE7C;AACE,YAAM,IAAI;AAAA,QACR,0BAA0B,SAAS,YAAY;AAAA,QAC/C,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,EACJ;AACF;AAOA,eAAsB,iBACpB,QACA,SACA,WACc;AACd,QAAM,EAAE,IAAI,SAAS,UAAU,cAAc,KAAK,IAAI;AAEtD,MAAI,CAAC,MAAM,CAAC,SAAS;AACnB,UAAM,IAAI,MAAM,+CAA+C;AAAA,EACjE;AAGA,SAAO,KAAK,+BAA+B,EAAE,WAAW,cAAc,QAAQ,CAAC;AAG/E,MAAI;AACF,UAAM,eAAe,UAAU,QAAkE,cAAc;AAC/G,QAAI,gBAAgB,OAAO,aAAa,SAAS,YAAY;AAC3D,YAAM,aAAa,KAAK;AAAA,QACtB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AACD,aAAO,EAAE,MAAM,MAAM,IAAI,SAAS,KAAK,eAAe;AAAA,IACxD;AAAA,EACF,SAAS,OAAO;AAAA,EAEhB;AAEA,SAAO,EAAE,MAAM,MAAM,IAAI,SAAS,KAAK,UAAU;AACnD;AAOA,eAAsB,iBACpB,QACA,SACA,WACc;AACd,QAAM,EAAE,WAAW,QAAQ,IAAI;AAE/B,MAAI,CAAC,WAAW;AACd,UAAM,IAAI,MAAM,uCAAuC;AAAA,EACzD;AAKA,QAAM,wBAAwB,2BAA2B,OAAO;AAChE,MAAI,sBAAsB,SAAS,GAAG;AACpC,UAAM,IAAI;AAAA,MACR,kEAAkE,sBAAsB,KAAK,IAAI,CAAC;AAAA,IAEpG;AAAA,EACF;AAGA,QAAM,WAAW,UAAU,QAA2G,UAAU;AAEhJ,MAAI,CAAC,YAAY,OAAO,SAAS,cAAc,YAAY;AACzD,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AAGA,QAAM,kBAAkB;AAAA,IACtB,GAAG;AAAA,IACH,WAAW;AAAA,MACT,oBAAoB,QAAQ,iBAAiB;AAAA,MAC7C,YAAY,QAAQ,iBAAiB;AAAA,MACrC,UAAU,QAAQ,iBAAiB;AAAA,MACnC,gBAAgB,QAAQ,iBAAiB;AAAA,IAC3C;AAAA,EACF;AAEA,QAAM,SAAS,UAAU,WAAW,iBAAiB;AAAA,IACnD,UAAU,QAAQ,iBAAiB;AAAA,IACnC,gBAAgB,QAAQ,iBAAiB;AAAA,EAC3C,CAAC;AAED,SAAO,EAAE,SAAS,MAAM,WAAW,SAAS,gBAAgB;AAC9D;AAEA,MAAM,8BAA8B;AAEpC,SAAS,2BAA2B,OAAgB,OAAO,IAAc;AACvE,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,4BAA4B,KAAK,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC;AAAA,EAC7D;AACA,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,WAAO,MAAM,QAAQ,CAAC,MAAM,UAAU,2BAA2B,MAAM,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC;AAAA,EAC7F;AACA,MAAI,SAAS,OAAO,UAAU,UAAU;AACtC,WAAO,OAAO,QAAQ,KAAK,EAAE;AAAA,MAAQ,CAAC,CAAC,KAAK,MAAM,MAChD,2BAA2B,QAAQ,OAAO,GAAG,IAAI,IAAI,GAAG,KAAK,GAAG;AAAA,IAClE;AAAA,EACF;AACA,SAAO,CAAC;AACV;AAiCA,eAAsB,oBACpB,IACA,QACA,SACA,WACc;AACd,QAAM,EAAE,WAAW,OAAO,iBAAiB,IAAI;AAE/C,MAAI,CAAC,WAAW;AACd,UAAM,IAAI,MAAM,2EAA2E;AAAA,EAC7F;AAEA,QAAM,sBAAsB,uBAAuB,SAAS;AAC5D,MAAI,CAAC,qBAAqB;AACxB,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AAEA,MAAI,CAAC,SAAS,OAAO,UAAU,UAAU;AACvC,UAAM,IAAI,MAAM,wDAAwD;AAAA,EAC1E;AAEA,QAAM,cAAc,OAAO,QAAQ,WAAW,WAAW,QAAQ,OAAO,KAAK,IAAI;AACjF,MAAI,CAAC,aAAa;AAChB,UAAM,IAAI,MAAM,uDAAuD;AAAA,EACzE;AAEA,QAAM,aAAa,MAAM;AAAA,IACvB;AAAA,IACA;AAAA,IACA,oBAAoB;AAAA,IACpB,QAAQ,iBAAiB;AAAA,IACzB,QAAQ,iBAAiB;AAAA,EAC3B;AACA,MAAI,CAAC,YAAY;AACf,UAAM,IAAI,MAAM,yCAAyC;AAAA,EAC3D;AAGA,QAAM,aAAa,UAAU,QAAQ,YAAY;AAEjD,MAAI,CAAC,cAAc,OAAO,WAAW,YAAY,YAAY;AAC3D,UAAM,IAAI,MAAM,uCAAuC;AAAA,EACzD;AAEA,QAAM,iBAAiB,2BAA2B,KAAK;AACvD,MAAI,eAAe,SAAS,GAAG;AAC7B,UAAM,IAAI;AAAA,MACR,mEAAmE,eAAe,KAAK,IAAI,CAAC;AAAA,IAE9F;AAAA,EACF;AAGA,MAAI,aAAa,EAAE,GAAG,MAAM;AAG5B,MAAI,WAAW,eAAe,kBAAkB;AAC9C,UAAM,gBAAgB,MAAM;AAAA,MAC1B;AAAA,MACA;AAAA,MACA,WAAW;AAAA,MACX,QAAQ,iBAAiB;AAAA,MACzB,QAAQ,iBAAiB;AAAA,IAC3B;AACA,QAAI,eAAe;AACjB,iBAAW,gBAAgB;AAAA,IAC7B;AACA,WAAO,WAAW;AAAA,EACpB;AAGA,QAAM,MAAM;AAAA,IACV;AAAA,IACA,MAAM;AAAA,MACJ,KAAK;AAAA,MACL,UAAU,QAAQ,iBAAiB;AAAA,MACnC,OAAO,QAAQ,iBAAiB;AAAA,MAChC,cAAc;AAAA,IAChB;AAAA,IACA,mBAAmB;AAAA,IACnB,wBAAwB,QAAQ,iBAAiB;AAAA,IACjD,iBAAiB,QAAQ,iBAAiB,iBACtC,CAAC,QAAQ,iBAAiB,cAAc,IACxC;AAAA,EACN;AAGA,QAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW,QAAQ,WAAW;AAAA,IAC/D,OAAO;AAAA,IACP;AAAA,EACF,CAAC;AAED,SAAO;AAAA,IACL,UAAU;AAAA,IACV;AAAA,IACA;AAAA,IACA,YAAY,UAAU;AAAA,EACxB;AACF;AAKA,eAAe,yBACb,IACA,eACA,OACA,UACA,gBACwB;AACxB,MAAI;AAEF,UAAM,EAAE,YAAY,gBAAgB,IAAI,MAAM,OAAO,uDAAuD;AAG5G,UAAM,aAAa,MAAM,GAAG,QAAQ,YAAY;AAAA,MAC9C,KAAK;AAAA,MACL;AAAA,MACA;AAAA,MACA,WAAW;AAAA,IACb,CAAC;AAED,QAAI,CAAC,YAAY;AACf,aAAO,KAAK,wBAAwB,EAAE,WAAW,iBAAiB,cAAc,CAAC;AACjF,aAAO;AAAA,IACT;AAGA,UAAM,kBAAkB,MAAM,YAAY,EAAE,KAAK;AACjD,UAAM,QAAQ,MAAM,GAAG,QAAQ,iBAAiB;AAAA,MAC9C,YAAY,WAAW;AAAA,MACvB;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAED,QAAI,CAAC,OAAO;AACV,aAAO,KAAK,8BAA8B,EAAE,WAAW,iBAAiB,eAAe,MAAM,CAAC;AAC9F,aAAO;AAAA,IACT;AAEA,WAAO,MAAM;AAAA,EACf,SAAS,OAAO;AACd,WAAO,MAAM,oCAAoC,EAAE,WAAW,iBAAiB,KAAK,MAAM,CAAC;AAC3F,WAAO;AAAA,EACT;AACF;AAgBA,eAAsB,mBACpB,QACA,SACA,OAAwB,CAAC,GACX;AACd,QAAM,SAAS,wBAAwB,UAAU,MAAM;AACvD,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,SAAS,OAAO,MAAM,OACzB,IAAI,CAAC,UAAU,GAAG,MAAM,KAAK,KAAK,GAAG,KAAK,QAAQ,KAAK,MAAM,OAAO,EAAE,EACtE,KAAK,IAAI;AACZ,UAAM,IAAI,MAAM,gCAAgC,MAAM,EAAE;AAAA,EAC1D;AACA,QAAM,EAAE,KAAK,QAAQ,SAAS,YAAY,KAAK,IAAI,OAAO;AAC1D,QAAM,UAAU,cAAc,CAAC;AAE/B,QAAM,eAAe,KAAK,gBAAgB,yCAAyC;AAEnF,MAAI;AACJ,MAAI;AACF,eAAW,MAAM;AAAA,MACf;AAAA,MACA;AAAA,QACE;AAAA,QACA,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,GAAG;AAAA,QACL;AAAA,QACA,MAAM,SAAS,UAAa,SAAS,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,QACnE,UAAU;AAAA,QACV,QAAQ,KAAK;AAAA,MACf;AAAA,MACA;AAAA,QACE,SAAS;AAAA,QACT;AAAA,QACA,YAAY,KAAK;AAAA,QACjB,WAAW,KAAK;AAAA,MAClB;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,QAAI,iBAAiB,wBAAwB;AAC3C,YAAM,IAAI;AAAA,QACR,4CAA4C,MAAM,MAAM,MAAM,MAAM,OAAO;AAAA,MAC7E;AAAA,IACF;AACA,UAAM;AAAA,EACR;AAEA,MAAI,SAAS,UAAU,OAAO,SAAS,SAAS,KAAK;AACnD,UAAM,WAAW,SAAS,QAAQ,IAAI,UAAU;AAChD,UAAM,IAAI;AAAA,MACR,2CAA2C,SAAS,MAAM,OACxD,YAAY,sBACd;AAAA,IACF;AAAA,EACF;AAGA,MAAI;AACJ,QAAM,cAAc,SAAS,QAAQ,IAAI,cAAc;AAEvD,MAAI,eAAe,YAAY,SAAS,kBAAkB,GAAG;AAC3D,aAAS,MAAM,SAAS,KAAK;AAAA,EAC/B,OAAO;AACL,aAAS,MAAM,SAAS,KAAK;AAAA,EAC/B;AAGA,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,IAAI;AAAA,MACR,sCAAsC,SAAS,MAAM,KAAK,KAAK,UAAU,MAAM,CAAC;AAAA,IAClF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,QAAQ,SAAS;AAAA,IACjB,YAAY,SAAS;AAAA,IACrB;AAAA,EACF;AACF;AAOA,eAAsB,gBACpB,QACA,SACA,WACc;AACd,QAAM,EAAE,cAAc,OAAO,CAAC,EAAE,IAAI;AAEpC,MAAI,CAAC,cAAc;AACjB,UAAM,IAAI,MAAM,gDAAgD;AAAA,EAClE;AAGA,QAAM,QAAQ,oBAAoB,YAAY;AAE9C,MAAI;AACF,UAAM,KAAK,UAAU,QAAQ,KAAK;AAElC,QAAI,OAAO,OAAO,YAAY;AAC5B,YAAM,IAAI,MAAM,iCAAiC,YAAY,qBAAqB;AAAA,IACpF;AAGA,UAAM,SAAS,MAAM,GAAG,MAAM,OAAO;AAErC,WAAO,EAAE,UAAU,MAAM,cAAc,OAAO;AAAA,EAChD,SAAS,OAAO;AACd,QAAI,iBAAiB,SAAS,MAAM,QAAQ,SAAS,gBAAgB,GAAG;AACtE,YAAM,IAAI;AAAA,QACR,sBAAsB,YAAY,0CAA0C,KAAK;AAAA,MACnF;AAAA,IACF;AACA,UAAM;AAAA,EACR;AACF;AAMA,SAAS,qBAAqB,QAAuD;AACnF,MAAI,OAAO,OAAO;AAChB,UAAM,aAAa,IAAI,KAAK,OAAO,KAAK;AACxC,QAAI,MAAM,WAAW,QAAQ,CAAC,GAAG;AAC/B,YAAM,IAAI,MAAM,4CAA4C,OAAO,KAAK,EAAE;AAAA,IAC5E;AACA,UAAM,UAAU,WAAW,QAAQ,IAAI,KAAK,IAAI;AAChD,WAAO,KAAK,IAAI,GAAG,OAAO;AAAA,EAC5B;AAEA,MAAI,OAAO,UAAU;AACnB,WAAO,cAAc,OAAO,QAAQ;AAAA,EACtC;AAEA,QAAM,IAAI,MAAM,uFAAuF;AACzG;AAYA,eAAe,YAAY,QAA2B;AACpD,QAAM,aAAa,qBAAqB,MAAM;AAI9C,QAAM,MAAM,UAAU;AAEtB,SAAO,EAAE,QAAQ,MAAM,WAAW;AACpC;AAYA,eAAsB,eACpB,IACA,QACA,SACA,WACA,QACc;AAEd,QAAM,qBAAqB,qBAAqB,QAAQ,QAAQ,iBAAiB,QAAQ,gBAAgB;AAEzG,QAAM;AAAA,IACJ;AAAA,IACA,SAAS;AAAA,IACT,UAAU,CAAC;AAAA,IACX;AAAA,IACA,sBAAsB;AAAA,EACxB,IAAI;AAGJ,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,MAAM,oCAAoC;AAAA,EACtD;AAGA,QAAM,UAAU,YAAY,QAAQ;AAGpC,QAAM,EAAE,kBAAkB,IAAI,MAAM,OAAO,uCAAuC;AAqBlF,QAAM,WAAW,UACd,QAAiC,IAAI,EACrC,KAAK,EAAE,OAAO,MAAM,mBAAmB,MAAM,YAAY,MAAM,CAAC;AAsBnE,QAAM,kBAAkB,MAAM,sBAAsB,UAAU,QAAQ,gBAAgB;AAEtF,MAAI,gBAAgB,WAAW,GAAG;AAChC,UAAM,IAAI;AAAA,MACR,iEAAiE,QAAQ,iBAAiB,EAAE;AAAA,IAG9F;AAAA,EACF;AAGA,SAAO,MAAM;AAAA,IACX;AAAA,IACA;AAAA,MACE,MAAM,cAAc,QAAQ,iBAAiB,EAAE;AAAA,MAC/C,aAAa,6BAA6B,QAAQ,iBAAiB,UAAU,aAAa,QAAQ,iBAAiB,EAAE;AAAA,MACrH,UAAU,QAAQ,iBAAiB;AAAA,MACnC,gBAAgB,QAAQ,iBAAiB;AAAA,MACzC,OAAO;AAAA,MACP,WAAW;AAAA,IACb;AAAA,IACA,OAAO,iBAAiB;AAEtB,YAAM,iBAAyC;AAAA,QAC7C,gBAAgB;AAAA,QAChB,iBAAiB,UAAU,YAAY;AAAA,QACvC,eAAe,QAAQ,iBAAiB;AAAA,QACxC,qBAAqB,QAAQ,iBAAiB;AAAA,QAC9C,0BAA0B,QAAQ,iBAAiB;AAAA,QACnD,GAAG;AAAA,MACL;AAGA,YAAM,WAAW,MAAM,MAAM,SAAS;AAAA,QACpC;AAAA,QACA,SAAS;AAAA,QACT,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,QACpC;AAAA,MACF,CAAC;AAGD,UAAI;AACJ,YAAM,cAAc,SAAS,QAAQ,IAAI,cAAc;AAEvD,UAAI;AACF,YAAI,eAAe,YAAY,SAAS,kBAAkB,GAAG;AAC3D,yBAAe,MAAM,SAAS,KAAK;AAAA,QACrC,OAAO;AACL,yBAAe,MAAM,SAAS,KAAK;AAAA,QACrC;AAAA,MACF,SAAS,OAAO;AACd,uBAAe;AAAA,MACjB;AAGA,UAAI,CAAC,SAAS,IAAI;AAChB,8BAAsB,SAAS,QAAQ,cAAc,OAAO;AAAA,MAC9D;AAGA,UAAI,uBAAuB,gBAAgB,OAAO,iBAAiB,UAAU;AAC3E,YAAI,aAAa,YAAY,aAAa,aAAa,QAAQ,iBAAiB,UAAU;AACxF,gBAAM,IAAI;AAAA,YACR,wCAAwC,QAAQ,iBAAiB,QAAQ,qBAAqB,aAAa,QAAQ;AAAA,UACrH;AAAA,QACF;AAAA,MACF;AAGA,aAAO;AAAA,QACL,QAAQ,SAAS;AAAA,QACjB,YAAY,SAAS;AAAA,QACrB,SAAS,OAAO,YAAY,SAAS,QAAQ,QAAQ,CAAC;AAAA,QACtD,MAAM;AAAA,QACN,eAAe;AAAA,QACf,UAAU,QAAQ,iBAAiB;AAAA,QACnC,gBAAgB,QAAQ,iBAAiB;AAAA,MAC3C;AAAA,IACF;AAAA,EACF;AACF;AAcA,eAAe,4BACb,IACA,QACA,OACmB;AACnB,QAAM,EAAE,uBAAuB,mBAAmB,IAAI,MAAM,OAAO,0CAA0C;AAC7G,QAAM,EAAE,MAAM,UAAU,KAAK,IAAI,MAAM,OAAO,0BAA0B;AAExE,QAAM,OAAO,MAAM,sBAAsB,IAAI,MAAM;AAAA,IACjD,IAAI;AAAA,IACJ,UAAU,MAAM;AAAA,IAChB,WAAW;AAAA,EACb,GAAG,CAAC,GAAG,KAAK;AACZ,MAAI,CAAC,KAAM,QAAO,CAAC;AAEnB,QAAM,YAAY,MAAM;AAAA,IACtB;AAAA,IACA;AAAA,IACA,EAAE,MAAM,KAAK,IAAI,WAAW,KAAK;AAAA,IACjC,EAAE,UAAU,CAAC,MAAM,EAAE;AAAA,IACrB;AAAA,EACF;AACA,QAAM,UAAU,UACb,IAAI,CAAC,OAAa,OAAO,GAAG,SAAS,WAAW,GAAG,OAAO,GAAG,MAAM,EAAG,EACtE,OAAO,CAAC,OAA8B,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC;AAEhF,MAAI,QAAQ,WAAW,EAAG,QAAO,CAAC;AAElC,QAAM,cAAc,MAAM,mBAAmB,IAAI,MAAM;AAAA,IACrD,IAAI,EAAE,KAAK,QAAQ;AAAA,IACnB,UAAU,MAAM;AAAA,IAChB,WAAW;AAAA,EACb,GAAG,CAAC,GAAG,KAAK;AACZ,SAAO,YAAY,IAAI,CAAC,MAAW,EAAE,EAAY;AACnD;AAEA,eAAsB,sBACpB,IACA,UACmB;AACnB,MAAI,CAAC,SAAS,aAAc,QAAO,CAAC;AAEpC,QAAM,EAAE,sBAAsB,IAAI,MAAM,OAAO,0CAA0C;AACzF,QAAM,EAAE,mBAAmB,IAAI,MAAM,OAAO,kBAAkB;AAE9D,QAAM,QAAQ,EAAE,UAAU,SAAS,UAAU,gBAAgB,SAAS,eAAe;AAQrF,QAAM,kBAAkB,SAAS,UAAU,eAAe;AAC1D,MAAI,iBAAiB;AACnB,WAAO,4BAA4B,IAAI,iBAAiB,KAAK;AAAA,EAC/D;AAIA,QAAM,aAAa,MAAM,sBAAsB,IAAI,oBAAoB;AAAA,IACrE,IAAI,SAAS;AAAA,IACb,UAAU,SAAS;AAAA,IACnB,WAAW;AAAA,EACb,GAAG,CAAC,GAAG,KAAK;AACZ,QAAM,eAAe,YAAY;AACjC,MAAI,CAAC,aAAc,QAAO,CAAC;AAE3B,SAAO,4BAA4B,IAAI,cAAc,KAAK;AAC5D;AAOA,SAAS,YAAY,UAA0B;AAC7C,QAAM,SAAS,QAAQ,IAAI,WAAW;AAGtC,MAAI,SAAS,WAAW,GAAG,GAAG;AAE5B,QAAI,CAAC,SAAS,WAAW,OAAO,GAAG;AACjC,YAAM,IAAI,MAAM,6CAA6C,QAAQ,EAAE;AAAA,IACzE;AACA,WAAO,GAAG,MAAM,GAAG,QAAQ;AAAA,EAC7B;AAGA,MAAI;AACF,UAAM,cAAc,IAAI,IAAI,QAAQ;AACpC,UAAM,YAAY,IAAI,IAAI,MAAM;AAEhC,QAAI,YAAY,SAAS,UAAU,MAAM;AACvC,YAAM,IAAI;AAAA,QACR,8CAA8C,YAAY,IAAI,6BAA6B,UAAU,IAAI;AAAA,MAC3G;AAAA,IACF;AAEA,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QAAI,iBAAiB,WAAW;AAC9B,YAAM,IAAI,MAAM,yBAAyB,QAAQ,EAAE;AAAA,IACrD;AACA,UAAM;AAAA,EACR;AACF;AAOA,SAAS,sBAAsB,QAAgB,MAAW,KAAoB;AAC5E,QAAM,UAAU,OAAO,SAAS,WAAW,OAAO,KAAK,UAAU,IAAI;AAErE,MAAI,UAAU,OAAO,SAAS,KAAK;AAEjC,UAAM,IAAI;AAAA,MACR,uCAAuC,MAAM,qBAAqB,OAAO;AAAA,IAC3E;AAAA,EACF;AAEA,MAAI,UAAU,KAAK;AAEjB,UAAM,QAAa,IAAI;AAAA,MACrB,uCAAuC,MAAM,iBAAiB,OAAO;AAAA,IACvE;AACA,UAAM,YAAY;AAClB,UAAM;AAAA,EACR;AAGA,QAAM,IAAI,MAAM,uCAAuC,MAAM,KAAK,OAAO,EAAE;AAC7E;AAkBA,SAAS,qBACP,QACA,SACA,kBACK;AACL,MAAI,OAAO,WAAW,UAAU;AAG9B,UAAM,iBAAiB,OAAO,MAAM,mBAAmB;AAEvD,QAAI,gBAAgB;AAClB,YAAM,cAAc,eAAe,CAAC,EAAE,KAAK;AAG3C,UAAI,YAAY,WAAW,WAAW,KAAK,kBAAkB;AAC3D,cAAM,cAAc,YAAY,UAAU,YAAY,MAAM;AAC5D,gBAAQ,aAAa;AAAA,UACnB,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,iBAAiB;AAAA;AAAA,UAC1B;AACE,mBAAO;AAAA,QACX;AAAA,MACF;AAGA,UAAI,YAAY,WAAW,MAAM,GAAG;AAClC,cAAM,SAAS,YAAY,UAAU,OAAO,MAAM;AAClD,eAAO,gCAAgC,MAAM;AAAA,MAC/C;AAGA,UAAI,gBAAgB,OAAO;AACzB,gBAAO,oBAAI,KAAK,GAAE,YAAY;AAAA,MAChC;AAGA,YAAM,cAAc,YAAY,WAAW,UAAU,IACjD,YAAY,UAAU,WAAW,MAAM,IACvC;AAEJ,YAAM,QAAQ,eAAe,SAAS,WAAW;AACjD,aAAO,UAAU,SAAY,QAAQ;AAAA,IACvC;AAGA,WAAO,OAAO,QAAQ,oBAAoB,CAAC,OAAO,SAAS;AACzD,YAAM,cAAc,KAAK,KAAK;AAG9B,UAAI,YAAY,WAAW,WAAW,KAAK,kBAAkB;AAC3D,cAAM,cAAc,YAAY,UAAU,YAAY,MAAM;AAC5D,gBAAQ,aAAa;AAAA,UACnB,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,iBAAiB;AAAA,UAC1B,KAAK;AACH,mBAAO,OAAO,iBAAiB,OAAO;AAAA,UACxC;AACE,mBAAO;AAAA,QACX;AAAA,MACF;AAGA,UAAI,YAAY,WAAW,MAAM,GAAG;AAClC,cAAM,SAAS,YAAY,UAAU,OAAO,MAAM;AAClD,eAAO,gCAAgC,MAAM;AAAA,MAC/C;AAGA,UAAI,gBAAgB,OAAO;AACzB,gBAAO,oBAAI,KAAK,GAAE,YAAY;AAAA,MAChC;AAGA,YAAM,cAAc,YAAY,WAAW,UAAU,IACjD,YAAY,UAAU,WAAW,MAAM,IACvC;AAEJ,YAAM,QAAQ,eAAe,SAAS,WAAW;AACjD,aAAO,UAAU,SAAY,OAAO,KAAK,IAAI;AAAA,IAC/C,CAAC;AAAA,EACH;AAEA,MAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,WAAO,OAAO,IAAI,CAAC,SAAS,qBAAqB,MAAM,SAAS,gBAAgB,CAAC;AAAA,EACnF;AAEA,MAAI,UAAU,OAAO,WAAW,UAAU;AACxC,UAAM,SAA8B,CAAC;AACrC,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,aAAO,GAAG,IAAI,qBAAqB,OAAO,SAAS,gBAAgB;AAAA,IACrE;AACA,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AAKA,SAAS,eAAe,KAAU,MAAmB;AACnD,QAAM,QAAQ,KAAK,MAAM,GAAG;AAC5B,MAAI,QAAQ;AAEZ,aAAW,QAAQ,OAAO;AACxB,QAAI,SAAS,OAAO,UAAU,YAAY,QAAQ,OAAO;AACvD,cAAQ,MAAM,IAAI;AAAA,IACpB,OAAO;AACL,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO;AACT;AAKA,SAAS,iBACP,mBACA,oBACA,SACA,eACQ;AACR,QAAM,UAAU,oBAAoB,KAAK,IAAI,oBAAoB,OAAO;AACxE,SAAO,KAAK,IAAI,SAAS,iBAAiB,QAAQ;AACpD;AAKA,SAAS,MAAM,IAA2B;AACxC,SAAO,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,EAAE,CAAC;AACzD;AAUA,eAAe,mBACb,UACA,WACY;AACZ,MAAI;AACJ,QAAM,kBAAkB,IAAI,gBAAgB;AAE5C,QAAM,iBAAiB,IAAI,QAAe,CAAC,GAAG,WAAW;AACvD,gBAAY,WAAW,MAAM;AAC3B,sBAAgB,MAAM;AACtB,aAAO,IAAI,MAAM,oCAAoC,SAAS,IAAI,CAAC;AAAA,IACrE,GAAG,SAAS;AAAA,EACd,CAAC;AAED,MAAI;AACF,WAAO,MAAM,QAAQ,KAAK,CAAC,SAAS,gBAAgB,MAAM,GAAG,cAAc,CAAC;AAAA,EAC9E,UAAE;AACA,iBAAa,SAAU;AAAA,EACzB;AACF;",
   "names": []
 }