@open-mercato/core 0.7.1-develop.7193.1.910a5b0a1e → 0.7.1-develop.7194.1.ab4fc81f82

package/dist/modules/workflows/ai-tools/authoring-pack.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/workflows/ai-tools/authoring-pack.ts"],
+  "sourcesContent": ["/**\n * `workflows.*` agent-authoring tool pack (spec \u00A79.5 \"Agent-as-author\").\n *\n * A person can author a workflow in the Studio; this pack lets an agent do the\n * same through the SAME surfaces. It is deliberately thin: the activity\n * registry, the context ledger and the structured issue body already ARE the\n * agent API, so every tool below delegates to an existing exported function\n * rather than growing a parallel engine surface.\n *\n * What each tool reuses:\n *  - `list_activity_types`  \u2192 `listActivityTypes()` + the OpenAPI `zodToJsonSchema`\n *  - `get_context_schema`   \u2192 the context-schema route's own resolver + ledger\n *  - `validate_definition`  \u2192 `evaluateWorkflowDefinition` (Problems panel + 400 body)\n *  - `create_definition`    \u2192 `createWorkflowDefinitionInputCheckedSchema` (the route's gate)\n *  - `update_definition`    \u2192 the per-user `workflow_definition_drafts` layer\n *  - `start_test_run`       \u2192 `startWorkflow({ isDryRun: true })` + `buildWouldDoReport`\n *\n * Two safety invariants hold for every write here:\n *  1. NEVER auto-published. `create_definition` mints the row with\n *     `enabled: false`, which `findWorkflowDefinition` treats as unresolvable\n *     for execution, and `update_definition` writes a draft, never the\n *     definition. Neither tool exposes `enabled` or `lifecycle` as an input.\n *  2. NEVER cross-tenant. Every read and write is scoped by `tenantId`, so a\n *     foreign definition is invisible rather than merely forbidden.\n */\n\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { z } from 'zod'\nimport { zodToJsonSchema } from '@open-mercato/shared/lib/openapi'\nimport {\n  WorkflowDefinition,\n  WorkflowDefinitionDraft,\n  WorkflowEvent,\n  WorkflowInstance,\n  StepInstance,\n  type WorkflowDefinitionData,\n} from '../data/entities'\nimport {\n  createWorkflowDefinitionInputCheckedSchema,\n  workflowDefinitionDataSchema,\n} from '../data/validators'\nimport { workflowDraftGenerationSchema } from '../lib/ai-authoring'\nimport { isComponentKind } from '../lib/component-guard'\nimport {\n  computeDefinitionContextLedger,\n  narrowLedgerToStep,\n  resolveDefinitionDataForLedger,\n  warmContextLedgerResolvers,\n} from '../lib/definition-context-schema'\nimport { evaluateWorkflowDefinition } from '../lib/definition-evaluation'\nimport { normalizeDefinitionValidationIssues } from '../lib/definition-error-body'\nimport {\n  DRY_RUN_EVENT_TYPES,\n  buildWouldDoReport,\n  type WouldDoSourceEvent,\n} from '../lib/dry-run'\nimport { findWorkflowDefinition } from '../lib/find-definition'\nimport { listActivityTypes } from '../lib/activity-registry'\nimport '../lib/activity-registry-bootstrap'\nimport { invalidateTriggerCache } from '../lib/event-trigger-service'\nimport {\n  MISSING_TENANT_ISSUE,\n  failure,\n  featureRefusal,\n  issue,\n  missingFeatures,\n  organizationWhere,\n  resolveScope,\n  type WorkflowsAiToolDefinition,\n  type WorkflowsToolContext,\n} from './types'\n\nconst DEFINITIONS_VIEW = 'workflows.definitions.view'\nconst DEFINITIONS_CREATE = 'workflows.definitions.create'\nconst DEFINITIONS_EDIT = 'workflows.definitions.edit'\nconst DEFINITIONS_TEST_RUN = 'workflows.definitions.test_run'\nconst INSTANCES_VIEW = 'workflows.instances.view'\nconst INSTANCES_CREATE = 'workflows.instances.create'\n\nfunction resolveEm(ctx: WorkflowsToolContext): EntityManager {\n  return ctx.container.resolve<EntityManager>('em')\n}\n\n/**\n * Definition ids accepted by the context-schema route: a DB UUID, or\n * `code:<workflowId>` / the synthetic code UUID for code-defined workflows.\n */\nconst definitionIdSchema = z\n  .string()\n  .min(1)\n  .describe('Definition UUID, or \"code:<workflowId>\" for a code-defined workflow')\n\nconst rawDefinitionSchema = z\n  .record(z.string(), z.unknown())\n  .describe('The workflow definition JSON \u2014 the same object the Studio Code view round-trips')\n\nfunction asDefinitionData(value: Record<string, unknown>): WorkflowDefinitionData {\n  return value as unknown as WorkflowDefinitionData\n}\n\n/** Compute the server ledger for a definition, tolerating a malformed graph. */\nasync function tryComputeLedger(\n  ctx: WorkflowsToolContext,\n  definition: WorkflowDefinitionData,\n) {\n  try {\n    await warmContextLedgerResolvers(ctx.container)\n    return computeDefinitionContextLedger(definition)\n  } catch {\n    return null\n  }\n}\n\n// ===========================================================================\n// workflows.list_activity_types\n// ===========================================================================\n\nconst listActivityTypesInput = z.object({\n  activityType: z\n    .string()\n    .optional()\n    .describe('Return only this activity type instead of the whole registry'),\n})\n\nconst listActivityTypesTool: WorkflowsAiToolDefinition<\n  z.infer<typeof listActivityTypesInput>\n> = {\n  name: 'workflows.list_activity_types',\n  displayName: 'List workflow activity types',\n  description:\n    'List every registered workflow activity type with its JSON-Schema config contract, form fields, async capability, compensability and dry-run mock mode. This registry IS the authoring contract \u2014 read it before writing any activity config so the config validates on the first attempt.',\n  inputSchema: listActivityTypesInput,\n  requiredFeatures: [DEFINITIONS_VIEW],\n  tags: ['read', 'workflows', 'authoring'],\n  isMutation: false,\n  handler: async (input, ctx) => {\n    const missing = missingFeatures(ctx, [DEFINITIONS_VIEW])\n    if (missing.length) return featureRefusal(missing)\n\n    const entries = listActivityTypes().filter(\n      (entry) => !input.activityType || entry.id === input.activityType,\n    )\n\n    if (input.activityType && entries.length === 0) {\n      return failure(\n        issue(\n          ['activityType'],\n          'unknown_activity_type',\n          `Unknown activity type \"${input.activityType}\"`,\n          { expected: listActivityTypes().map((entry) => entry.id).join(' | '), got: input.activityType },\n        ),\n      )\n    }\n\n    return {\n      ok: true,\n      issues: [],\n      activityTypes: entries.map((entry) => ({\n        id: entry.id,\n        icon: entry.icon,\n        i18nKey: entry.i18nKey,\n        configSchema: zodToJsonSchema(entry.configSchema) ?? null,\n        form: entry.form.map((field) => ({\n          id: field.id,\n          component: field.component,\n          required: field.required ?? false,\n        })),\n        async: entry.async,\n        compensable: entry.compensable ?? false,\n        // 'refuse' and 'none' both stop a dry run at this activity.\n        dryRunMock:\n          entry.mock === 'refuse' ? 'refuse' : entry.mock === undefined ? 'none' : 'simulated',\n      })),\n    }\n  },\n}\n\n// ===========================================================================\n// workflows.get_context_schema\n// ===========================================================================\n\nconst getContextSchemaInput = z.object({\n  definitionId: definitionIdSchema,\n  stepId: z\n    .string()\n    .optional()\n    .describe('Narrow the response to one step instead of returning every step'),\n})\n\nconst getContextSchemaTool: WorkflowsAiToolDefinition<\n  z.infer<typeof getContextSchemaInput>\n> = {\n  name: 'workflows.get_context_schema',\n  displayName: 'Get workflow context ledger',\n  description:\n    'Return the per-step context ledger for a saved workflow definition: for every step, which context paths are available when it runs, with type, presence (always/maybe) and the producing source. Use this to discover the exact {{context.*}} paths a step may reference before writing any expression.',\n  inputSchema: getContextSchemaInput,\n  requiredFeatures: [DEFINITIONS_VIEW],\n  tags: ['read', 'workflows', 'authoring'],\n  isMutation: false,\n  handler: async (input, ctx) => {\n    const missing = missingFeatures(ctx, [DEFINITIONS_VIEW])\n    if (missing.length) return featureRefusal(missing)\n\n    const scope = resolveScope(ctx)\n    if (!scope) return failure(MISSING_TENANT_ISSUE)\n\n    await warmContextLedgerResolvers(ctx.container)\n\n    const definitionData = await resolveDefinitionDataForLedger(\n      resolveEm(ctx),\n      input.definitionId,\n      { tenantId: scope.tenantId, organizationWhere: organizationWhere(scope) },\n    )\n\n    if (!definitionData) {\n      return failure(\n        issue(\n          ['definitionId'],\n          'not_found',\n          'Workflow definition not found',\n          { got: input.definitionId },\n        ),\n      )\n    }\n\n    const ledger = computeDefinitionContextLedger(definitionData)\n\n    if (input.stepId === undefined) {\n      return { ok: true, issues: [], steps: ledger.steps }\n    }\n\n    const stepView = narrowLedgerToStep(ledger, input.stepId)\n    if (!stepView) {\n      return failure(\n        issue(\n          ['stepId'],\n          'not_found',\n          'Step not found in workflow definition',\n          { got: input.stepId },\n        ),\n      )\n    }\n\n    return { ok: true, issues: [], steps: { [input.stepId]: stepView } }\n  },\n}\n\n// ===========================================================================\n// workflows.validate_definition\n// ===========================================================================\n\nconst validateDefinitionInput = z\n  .object({\n    definition: rawDefinitionSchema\n      .optional()\n      .describe('Validate this definition JSON directly, without saving anything'),\n    definitionId: definitionIdSchema\n      .optional()\n      .describe('Validate the definition stored under this id instead'),\n  })\n  .describe('Supply exactly one of `definition` or `definitionId`')\n\nconst validateDefinitionTool: WorkflowsAiToolDefinition<\n  z.infer<typeof validateDefinitionInput>\n> = {\n  name: 'workflows.validate_definition',\n  displayName: 'Validate a workflow definition',\n  description:\n    'Run the full workflow validation pass over a definition without saving it. Returns `issues` (the same structured {path, code, message, expected, got} list the definition API returns on a 400) and `problems` (exactly what the Studio Problems panel would show, errors first). Call this before create_definition or update_definition and fix every error.',\n  inputSchema: validateDefinitionInput,\n  requiredFeatures: [DEFINITIONS_VIEW],\n  tags: ['read', 'workflows', 'authoring'],\n  isMutation: false,\n  handler: async (input, ctx) => {\n    const missing = missingFeatures(ctx, [DEFINITIONS_VIEW])\n    if (missing.length) return featureRefusal(missing)\n\n    if ((input.definition && input.definitionId) || (!input.definition && !input.definitionId)) {\n      return failure(\n        issue(\n          ['definition'],\n          'invalid_input',\n          'Supply exactly one of `definition` or `definitionId`',\n          { expected: 'definition | definitionId' },\n        ),\n      )\n    }\n\n    let definitionData: WorkflowDefinitionData\n    if (input.definitionId) {\n      const scope = resolveScope(ctx)\n      if (!scope) return failure(MISSING_TENANT_ISSUE)\n      const resolved = await resolveDefinitionDataForLedger(\n        resolveEm(ctx),\n        input.definitionId,\n        { tenantId: scope.tenantId, organizationWhere: organizationWhere(scope) },\n      )\n      if (!resolved) {\n        return failure(\n          issue(['definitionId'], 'not_found', 'Workflow definition not found', {\n            got: input.definitionId,\n          }),\n        )\n      }\n      definitionData = resolved\n    } else {\n      definitionData = asDefinitionData(input.definition!)\n    }\n\n    const ledger = await tryComputeLedger(ctx, definitionData)\n    const evaluation = evaluateWorkflowDefinition(definitionData, { ledger })\n\n    return {\n      ok: evaluation.valid,\n      issues: evaluation.issues,\n      problems: evaluation.problems,\n      valid: evaluation.valid,\n      errorCount: evaluation.errorCount,\n      warningCount: evaluation.warningCount,\n    }\n  },\n}\n\n// ===========================================================================\n// workflows.create_definition\n// ===========================================================================\n\nconst createDefinitionInput = z.object({\n  workflowId: z\n    .string()\n    .min(1)\n    .max(100)\n    .describe('Stable machine id, lowercase letters/numbers/dots/hyphens/underscores'),\n  workflowName: z.string().min(1).max(255),\n  description: z.string().max(2000).optional().nullable(),\n  definition: rawDefinitionSchema,\n  metadata: z.record(z.string(), z.unknown()).optional().nullable(),\n})\n\nconst createDefinitionTool: WorkflowsAiToolDefinition<\n  z.infer<typeof createDefinitionInput>\n> = {\n  name: 'workflows.create_definition',\n  displayName: 'Create a workflow definition (disabled draft)',\n  description:\n    'Create a new workflow definition. It is ALWAYS created disabled: it appears in the Studio for a human to review and enable, and the engine will not resolve it for execution or fire its triggers until a person publishes it. Validate with validate_definition first \u2014 this tool applies the identical schema gate the REST API applies and returns the same structured issues on rejection.',\n  inputSchema: createDefinitionInput,\n  requiredFeatures: [DEFINITIONS_CREATE],\n  tags: ['write', 'workflows', 'authoring'],\n  isMutation: true,\n  handler: async (input, ctx) => {\n    const missing = missingFeatures(ctx, [DEFINITIONS_CREATE])\n    if (missing.length) return featureRefusal(missing)\n\n    const scope = resolveScope(ctx)\n    if (!scope) return failure(MISSING_TENANT_ISSUE)\n    if (!scope.organizationId) {\n      return failure(\n        issue(\n          ['organizationId'],\n          'missing_organization_context',\n          'An organization context is required to create a workflow definition',\n        ),\n      )\n    }\n\n    // The exact gate the POST /api/workflows/definitions route applies, so an\n    // agent-authored payload is rejected for exactly the same reasons, with\n    // exactly the same structured issues, as a human-authored one.\n    const validation = createWorkflowDefinitionInputCheckedSchema.safeParse({\n      workflowId: input.workflowId,\n      workflowName: input.workflowName,\n      description: input.description,\n      definition: input.definition,\n      metadata: input.metadata,\n    })\n    if (!validation.success) {\n      return failure(...normalizeDefinitionValidationIssues(validation.error))\n    }\n\n    const em = resolveEm(ctx)\n    const existing = await em.findOne(\n      WorkflowDefinition,\n      { workflowId: input.workflowId, tenantId: scope.tenantId },\n      { orderBy: { version: 'DESC' } },\n    )\n    if (existing) {\n      return failure(\n        issue(\n          ['workflowId'],\n          'already_exists',\n          `Workflow definition with ID \"${input.workflowId}\" already exists`,\n          { got: input.workflowId },\n        ),\n      )\n    }\n\n    // New definitions default to strict interpolation, matching the create route.\n    const definitionData = validation.data.definition.interpolation\n      ? validation.data.definition\n      : { ...validation.data.definition, interpolation: 'strict' as const }\n\n    const created = em.create(WorkflowDefinition, {\n      workflowId: validation.data.workflowId,\n      workflowName: validation.data.workflowName,\n      description: validation.data.description,\n      version: validation.data.version,\n      definition: definitionData,\n      metadata: validation.data.metadata,\n      // NEVER auto-published (spec \u00A79.5). `findWorkflowDefinition` requires\n      // `enabled = true` to resolve a workflow for execution, so a human\n      // enabling it in the Studio is the only way this ever runs.\n      enabled: false,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      createdBy: ctx.userId ?? null,\n      createdAt: new Date(),\n      updatedAt: new Date(),\n    })\n\n    await em.persist(created).flush()\n    invalidateTriggerCache(scope.tenantId, scope.organizationId ?? undefined)\n\n    const ledger = await tryComputeLedger(ctx, definitionData as WorkflowDefinitionData)\n    const evaluation = evaluateWorkflowDefinition(definitionData as WorkflowDefinitionData, {\n      ledger,\n    })\n\n    return {\n      ok: true,\n      issues: [],\n      definitionId: created.id,\n      workflowId: created.workflowId,\n      version: created.version,\n      enabled: false,\n      published: false,\n      problems: evaluation.problems,\n      errorCount: evaluation.errorCount,\n      warningCount: evaluation.warningCount,\n    }\n  },\n}\n\n// ===========================================================================\n// workflows.update_definition\n// ===========================================================================\n\nconst updateDefinitionInput = z.object({\n  definitionId: z.uuid().describe('UUID of the saved definition to draft changes against'),\n  definition: rawDefinitionSchema,\n  metadata: z.record(z.string(), z.unknown()).optional().nullable(),\n})\n\nconst updateDefinitionTool: WorkflowsAiToolDefinition<\n  z.infer<typeof updateDefinitionInput>\n> = {\n  name: 'workflows.update_definition',\n  displayName: 'Update a workflow definition (as a review draft)',\n  description:\n    'Write proposed changes to a saved workflow definition as a per-user editor DRAFT. The published definition is never modified: the next person to open that definition in the Studio sees the draft offered for restore, reviews the visual and JSON diff, and decides whether to save it. Returns the Problems-panel result for the drafted definition so you can self-correct before a human looks.',\n  inputSchema: updateDefinitionInput,\n  requiredFeatures: [DEFINITIONS_EDIT],\n  tags: ['write', 'workflows', 'authoring'],\n  isMutation: true,\n  handler: async (input, ctx) => {\n    const missing = missingFeatures(ctx, [DEFINITIONS_EDIT])\n    if (missing.length) return featureRefusal(missing)\n\n    const scope = resolveScope(ctx)\n    if (!scope) return failure(MISSING_TENANT_ISSUE)\n\n    // A draft belongs to a person \u2014 it is the working copy they will be shown\n    // on their next Studio visit. Without a user there is nobody to review it.\n    if (!ctx.userId) {\n      return failure(\n        issue(\n          ['userId'],\n          'missing_user_context',\n          'A user context is required: drafts are per-user review copies',\n        ),\n      )\n    }\n\n    const parsed = workflowDefinitionDataSchema.safeParse(input.definition)\n    if (!parsed.success) {\n      return failure(...normalizeDefinitionValidationIssues(parsed.error))\n    }\n\n    const em = resolveEm(ctx)\n    const definition = await em.findOne(WorkflowDefinition, {\n      id: input.definitionId,\n      tenantId: scope.tenantId,\n      ...organizationWhere(scope),\n      deletedAt: null,\n    })\n\n    if (!definition) {\n      return failure(\n        issue(['definitionId'], 'not_found', 'Workflow definition not found', {\n          got: input.definitionId,\n        }),\n      )\n    }\n\n    // Matches the draft route's upsert key: (definitionId, userId, tenantId).\n    const existingDraft = await em.findOne(WorkflowDefinitionDraft, {\n      definitionId: input.definitionId,\n      userId: ctx.userId,\n      tenantId: scope.tenantId,\n    })\n\n    let draft: WorkflowDefinitionDraft\n    if (existingDraft) {\n      existingDraft.deletedAt = null\n      existingDraft.organizationId = scope.organizationId ?? existingDraft.organizationId\n      existingDraft.definition = parsed.data as WorkflowDefinitionData\n      if (input.metadata !== undefined) {\n        existingDraft.metadata = input.metadata as WorkflowDefinitionDraft['metadata']\n      }\n      existingDraft.baseUpdatedAt = definition.updatedAt\n      draft = existingDraft\n    } else {\n      draft = em.create(WorkflowDefinitionDraft, {\n        definitionId: input.definitionId,\n        userId: ctx.userId,\n        definition: parsed.data as WorkflowDefinitionData,\n        metadata: (input.metadata ?? null) as WorkflowDefinitionDraft['metadata'],\n        baseUpdatedAt: definition.updatedAt,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId ?? definition.organizationId,\n      })\n      em.persist(draft)\n    }\n\n    await em.flush()\n\n    const definitionData = parsed.data as WorkflowDefinitionData\n    const ledger = await tryComputeLedger(ctx, definitionData)\n    const evaluation = evaluateWorkflowDefinition(definitionData, { ledger })\n\n    return {\n      ok: true,\n      issues: [],\n      draftId: draft.id,\n      definitionId: input.definitionId,\n      // The published definition was not touched, and its optimistic lock was\n      // not taken \u2014 drafts deliberately sit outside it.\n      published: false,\n      definitionUpdatedAt: definition.updatedAt.toISOString(),\n      problems: evaluation.problems,\n      errorCount: evaluation.errorCount,\n      warningCount: evaluation.warningCount,\n    }\n  },\n}\n\n// ===========================================================================\n// workflows.start_test_run\n// ===========================================================================\n\nconst startTestRunInput = z.object({\n  workflowId: z.string().min(1).describe('The definition workflowId to test'),\n  version: z.number().int().positive().optional(),\n  initialContext: z\n    .record(z.string(), z.unknown())\n    .optional()\n    .describe('Starting workflow context, shaped by the definition contextSchema.input'),\n  correlationKey: z.string().optional(),\n})\n\nconst startTestRunTool: WorkflowsAiToolDefinition<z.infer<typeof startTestRunInput>> = {\n  name: 'workflows.start_test_run',\n  displayName: 'Start a workflow dry run',\n  description:\n    'Start an isolated DRY RUN of a workflow and return the \"would do\" report: every side effect the run suppressed, in order. Activities are simulated from their registry mocks (an activity with no mock refuses and stops the run), user tasks are recorded but never created, and nothing reaches real data. This is always a dry run \u2014 there is no option to make it real.',\n  inputSchema: startTestRunInput,\n  requiredFeatures: [INSTANCES_VIEW, INSTANCES_CREATE, DEFINITIONS_TEST_RUN],\n  tags: ['write', 'workflows', 'testing'],\n  isMutation: true,\n  handler: async (input, ctx) => {\n    const missing = missingFeatures(ctx, [INSTANCES_VIEW, INSTANCES_CREATE, DEFINITIONS_TEST_RUN])\n    if (missing.length) return featureRefusal(missing)\n\n    const scope = resolveScope(ctx)\n    if (!scope) return failure(MISSING_TENANT_ISSUE)\n    if (!scope.organizationId) {\n      return failure(\n        issue(\n          ['organizationId'],\n          'missing_organization_context',\n          'An organization context is required to start a workflow run',\n        ),\n      )\n    }\n\n    const em = resolveEm(ctx)\n    const definition = await findWorkflowDefinition(em, {\n      workflowId: input.workflowId,\n      version: input.version,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n    })\n\n    if (!definition) {\n      return failure(\n        issue(['workflowId'], 'not_found', 'Workflow definition not found', {\n          got: input.workflowId,\n        }),\n      )\n    }\n\n    if (isComponentKind(definition.kind)) {\n      return failure(\n        issue(\n          ['workflowId'],\n          'component_not_startable',\n          'This workflow is a reusable component and cannot be started standalone; invoke it from a SUB_WORKFLOW step',\n        ),\n      )\n    }\n\n    const workflowExecutor = ctx.container.resolve<{\n      startWorkflow: (\n        em: EntityManager,\n        options: Record<string, unknown>,\n      ) => Promise<WorkflowInstance>\n      executeWorkflow: (\n        em: EntityManager,\n        container: unknown,\n        instanceId: string,\n        options: { userId?: string | null },\n      ) => Promise<unknown>\n    }>('workflowExecutor')\n\n    const instance = await workflowExecutor.startWorkflow(em, {\n      workflowId: input.workflowId,\n      version: input.version,\n      initialContext: input.initialContext ?? {},\n      correlationKey: input.correlationKey,\n      metadata: { initiatedBy: ctx.userId ?? null },\n      // Forced, never an input. Dry-run isolation is the engine's own\n      // mechanism: mocked effectors, suppressed USER_TASKs, no enqueueing.\n      isDryRun: true,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n    })\n\n    let executionError: string | null = null\n    try {\n      await workflowExecutor.executeWorkflow(em, ctx.container, instance.id, {\n        userId: ctx.userId,\n      })\n    } catch (error) {\n      executionError = error instanceof Error ? error.message : String(error)\n    }\n\n    const events = await em.find(\n      WorkflowEvent,\n      {\n        workflowInstanceId: instance.id,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n        eventType: {\n          $in: [\n            DRY_RUN_EVENT_TYPES.activitySimulated,\n            DRY_RUN_EVENT_TYPES.activityRefused,\n            DRY_RUN_EVENT_TYPES.userTaskSimulated,\n            DRY_RUN_EVENT_TYPES.businessRuleActionsSuppressed,\n          ],\n        },\n      },\n      { orderBy: [{ occurredAt: 'ASC' }, { id: 'ASC' }], limit: 100 },\n    )\n\n    const stepInstanceIds = Array.from(\n      new Set(\n        events\n          .map((event) => event.stepInstanceId)\n          .filter((id): id is string => typeof id === 'string' && id.length > 0),\n      ),\n    )\n    const stepInstances = stepInstanceIds.length\n      ? await em.find(StepInstance, {\n          id: { $in: stepInstanceIds },\n          tenantId: scope.tenantId,\n          organizationId: scope.organizationId,\n        })\n      : []\n    const stepIdByInstanceId = new Map(stepInstances.map((step) => [step.id, step.stepId]))\n\n    const sourceEvents: WouldDoSourceEvent[] = events.map((event) => ({\n      id: event.id,\n      eventType: event.eventType,\n      stepId: event.stepInstanceId ? stepIdByInstanceId.get(event.stepInstanceId) ?? null : null,\n      occurredAt: event.occurredAt,\n      eventData: (event.eventData ?? null) as Record<string, unknown> | null,\n    }))\n    const report = buildWouldDoReport(sourceEvents)\n\n    const refreshed = await em.findOne(WorkflowInstance, {\n      id: instance.id,\n      tenantId: scope.tenantId,\n    })\n\n    return {\n      ok: executionError === null,\n      issues: executionError\n        ? [issue(['execution'], 'execution_failed', executionError)]\n        : [],\n      instanceId: instance.id,\n      isDryRun: true,\n      status: refreshed?.status ?? instance.status,\n      currentStepId: refreshed?.currentStepId ?? null,\n      wouldDo: report.entries,\n      stoppedByRefusal: report.stoppedByRefusal,\n    }\n  },\n}\n\n// ===========================================================================\n// workflows.validate_workflow_definition\n// ===========================================================================\n\n/**\n * Validate a DRAFT in the exact shape the in-Studio `workflows.workflow_author`\n * agent emits, so that agent can self-correct inside its tool loop before a\n * draft ever reaches the generate route.\n *\n * This mirrors `api/definitions/generate/route.ts` step for step \u2014 reshape the\n * draft's `{ steps, transitions, contextSchema }` into a definition, parse it\n * through the one `workflowDefinitionDataSchema`, then run the same\n * `evaluateWorkflowDefinition` Problems pass \u2014 but is gated on\n * `definitions.create` (what the draft path itself requires) rather than the\n * broader `validate_definition` tool's `definitions.view`. It is READ-ONLY: it\n * persists nothing and reads no tenant rows, so an author self-correcting a\n * draft never touches data.\n */\nconst validateWorkflowDraftTool: WorkflowsAiToolDefinition<\n  z.infer<typeof workflowDraftGenerationSchema>\n> = {\n  name: 'workflows.validate_workflow_definition',\n  displayName: 'Validate a draft workflow definition',\n  description:\n    'Validate a DRAFT workflow (the {summary, steps, transitions, contextSchema} object you are authoring) without saving it. Returns the same structured {path, code, message, expected, got} issues and Problems-panel entries the generate route would. Call this before returning a draft and fix every error \u2014 in particular, an INVOKE_AGENT activity requires a string `config.agentId` and a `config.onResult`.',\n  inputSchema: workflowDraftGenerationSchema,\n  requiredFeatures: [DEFINITIONS_CREATE],\n  tags: ['read', 'workflows', 'authoring'],\n  isMutation: false,\n  handler: async (input, ctx) => {\n    const missing = missingFeatures(ctx, [DEFINITIONS_CREATE])\n    if (missing.length) return featureRefusal(missing)\n\n    const candidate: Record<string, unknown> = {\n      steps: input.steps,\n      transitions: input.transitions,\n      ...(input.contextSchema ? { contextSchema: input.contextSchema } : {}),\n    }\n\n    const parsed = workflowDefinitionDataSchema.safeParse(candidate)\n    if (!parsed.success) {\n      return failure(\n        ...parsed.error.issues.map((zodIssue) =>\n          issue(\n            [...zodIssue.path] as Array<string | number>,\n            zodIssue.code,\n            zodIssue.message,\n          ),\n        ),\n      )\n    }\n\n    const definitionData = asDefinitionData(parsed.data as Record<string, unknown>)\n    const ledger = await tryComputeLedger(ctx, definitionData)\n    const evaluation = evaluateWorkflowDefinition(definitionData, { ledger })\n\n    return {\n      ok: evaluation.valid,\n      issues: evaluation.issues,\n      problems: evaluation.problems,\n      valid: evaluation.valid,\n      errorCount: evaluation.errorCount,\n      warningCount: evaluation.warningCount,\n    }\n  },\n}\n\nexport const workflowsAuthoringAiTools: WorkflowsAiToolDefinition<never, never>[] = [\n  listActivityTypesTool,\n  getContextSchemaTool,\n  validateDefinitionTool,\n  validateWorkflowDraftTool,\n  createDefinitionTool,\n  updateDefinitionTool,\n  startTestRunTool,\n] as unknown as WorkflowsAiToolDefinition<never, never>[]\n\nexport default workflowsAuthoringAiTools\n"],
+  "mappings": "AA2BA,SAAS,SAAS;AAClB,SAAS,uBAAuB;AAChC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,qCAAqC;AAC9C,SAAS,uBAAuB;AAChC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,kCAAkC;AAC3C,SAAS,2CAA2C;AACpD;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,SAAS,8BAA8B;AACvC,SAAS,yBAAyB;AAClC,OAAO;AACP,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AAEP,MAAM,mBAAmB;AACzB,MAAM,qBAAqB;AAC3B,MAAM,mBAAmB;AACzB,MAAM,uBAAuB;AAC7B,MAAM,iBAAiB;AACvB,MAAM,mBAAmB;AAEzB,SAAS,UAAU,KAA0C;AAC3D,SAAO,IAAI,UAAU,QAAuB,IAAI;AAClD;AAMA,MAAM,qBAAqB,EACxB,OAAO,EACP,IAAI,CAAC,EACL,SAAS,qEAAqE;AAEjF,MAAM,sBAAsB,EACzB,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAC9B,SAAS,sFAAiF;AAE7F,SAAS,iBAAiB,OAAwD;AAChF,SAAO;AACT;AAGA,eAAe,iBACb,KACA,YACA;AACA,MAAI;AACF,UAAM,2BAA2B,IAAI,SAAS;AAC9C,WAAO,+BAA+B,UAAU;AAAA,EAClD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAMA,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,cAAc,EACX,OAAO,EACP,SAAS,EACT,SAAS,8DAA8D;AAC5E,CAAC;AAED,MAAM,wBAEF;AAAA,EACF,MAAM;AAAA,EACN,aAAa;AAAA,EACb,aACE;AAAA,EACF,aAAa;AAAA,EACb,kBAAkB,CAAC,gBAAgB;AAAA,EACnC,MAAM,CAAC,QAAQ,aAAa,WAAW;AAAA,EACvC,YAAY;AAAA,EACZ,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,UAAU,gBAAgB,KAAK,CAAC,gBAAgB,CAAC;AACvD,QAAI,QAAQ,OAAQ,QAAO,eAAe,OAAO;AAEjD,UAAM,UAAU,kBAAkB,EAAE;AAAA,MAClC,CAAC,UAAU,CAAC,MAAM,gBAAgB,MAAM,OAAO,MAAM;AAAA,IACvD;AAEA,QAAI,MAAM,gBAAgB,QAAQ,WAAW,GAAG;AAC9C,aAAO;AAAA,QACL;AAAA,UACE,CAAC,cAAc;AAAA,UACf;AAAA,UACA,0BAA0B,MAAM,YAAY;AAAA,UAC5C,EAAE,UAAU,kBAAkB,EAAE,IAAI,CAAC,UAAU,MAAM,EAAE,EAAE,KAAK,KAAK,GAAG,KAAK,MAAM,aAAa;AAAA,QAChG;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,QAAQ,CAAC;AAAA,MACT,eAAe,QAAQ,IAAI,CAAC,WAAW;AAAA,QACrC,IAAI,MAAM;AAAA,QACV,MAAM,MAAM;AAAA,QACZ,SAAS,MAAM;AAAA,QACf,cAAc,gBAAgB,MAAM,YAAY,KAAK;AAAA,QACrD,MAAM,MAAM,KAAK,IAAI,CAAC,WAAW;AAAA,UAC/B,IAAI,MAAM;AAAA,UACV,WAAW,MAAM;AAAA,UACjB,UAAU,MAAM,YAAY;AAAA,QAC9B,EAAE;AAAA,QACF,OAAO,MAAM;AAAA,QACb,aAAa,MAAM,eAAe;AAAA;AAAA,QAElC,YACE,MAAM,SAAS,WAAW,WAAW,MAAM,SAAS,SAAY,SAAS;AAAA,MAC7E,EAAE;AAAA,IACJ;AAAA,EACF;AACF;AAMA,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,cAAc;AAAA,EACd,QAAQ,EACL,OAAO,EACP,SAAS,EACT,SAAS,iEAAiE;AAC/E,CAAC;AAED,MAAM,uBAEF;AAAA,EACF,MAAM;AAAA,EACN,aAAa;AAAA,EACb,aACE;AAAA,EACF,aAAa;AAAA,EACb,kBAAkB,CAAC,gBAAgB;AAAA,EACnC,MAAM,CAAC,QAAQ,aAAa,WAAW;AAAA,EACvC,YAAY;AAAA,EACZ,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,UAAU,gBAAgB,KAAK,CAAC,gBAAgB,CAAC;AACvD,QAAI,QAAQ,OAAQ,QAAO,eAAe,OAAO;AAEjD,UAAM,QAAQ,aAAa,GAAG;AAC9B,QAAI,CAAC,MAAO,QAAO,QAAQ,oBAAoB;AAE/C,UAAM,2BAA2B,IAAI,SAAS;AAE9C,UAAM,iBAAiB,MAAM;AAAA,MAC3B,UAAU,GAAG;AAAA,MACb,MAAM;AAAA,MACN,EAAE,UAAU,MAAM,UAAU,mBAAmB,kBAAkB,KAAK,EAAE;AAAA,IAC1E;AAEA,QAAI,CAAC,gBAAgB;AACnB,aAAO;AAAA,QACL;AAAA,UACE,CAAC,cAAc;AAAA,UACf;AAAA,UACA;AAAA,UACA,EAAE,KAAK,MAAM,aAAa;AAAA,QAC5B;AAAA,MACF;AAAA,IACF;AAEA,UAAM,SAAS,+BAA+B,cAAc;AAE5D,QAAI,MAAM,WAAW,QAAW;AAC9B,aAAO,EAAE,IAAI,MAAM,QAAQ,CAAC,GAAG,OAAO,OAAO,MAAM;AAAA,IACrD;AAEA,UAAM,WAAW,mBAAmB,QAAQ,MAAM,MAAM;AACxD,QAAI,CAAC,UAAU;AACb,aAAO;AAAA,QACL;AAAA,UACE,CAAC,QAAQ;AAAA,UACT;AAAA,UACA;AAAA,UACA,EAAE,KAAK,MAAM,OAAO;AAAA,QACtB;AAAA,MACF;AAAA,IACF;AAEA,WAAO,EAAE,IAAI,MAAM,QAAQ,CAAC,GAAG,OAAO,EAAE,CAAC,MAAM,MAAM,GAAG,SAAS,EAAE;AAAA,EACrE;AACF;AAMA,MAAM,0BAA0B,EAC7B,OAAO;AAAA,EACN,YAAY,oBACT,SAAS,EACT,SAAS,iEAAiE;AAAA,EAC7E,cAAc,mBACX,SAAS,EACT,SAAS,sDAAsD;AACpE,CAAC,EACA,SAAS,sDAAsD;AAElE,MAAM,yBAEF;AAAA,EACF,MAAM;AAAA,EACN,aAAa;AAAA,EACb,aACE;AAAA,EACF,aAAa;AAAA,EACb,kBAAkB,CAAC,gBAAgB;AAAA,EACnC,MAAM,CAAC,QAAQ,aAAa,WAAW;AAAA,EACvC,YAAY;AAAA,EACZ,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,UAAU,gBAAgB,KAAK,CAAC,gBAAgB,CAAC;AACvD,QAAI,QAAQ,OAAQ,QAAO,eAAe,OAAO;AAEjD,QAAK,MAAM,cAAc,MAAM,gBAAkB,CAAC,MAAM,cAAc,CAAC,MAAM,cAAe;AAC1F,aAAO;AAAA,QACL;AAAA,UACE,CAAC,YAAY;AAAA,UACb;AAAA,UACA;AAAA,UACA,EAAE,UAAU,4BAA4B;AAAA,QAC1C;AAAA,MACF;AAAA,IACF;AAEA,QAAI;AACJ,QAAI,MAAM,cAAc;AACtB,YAAM,QAAQ,aAAa,GAAG;AAC9B,UAAI,CAAC,MAAO,QAAO,QAAQ,oBAAoB;AAC/C,YAAM,WAAW,MAAM;AAAA,QACrB,UAAU,GAAG;AAAA,QACb,MAAM;AAAA,QACN,EAAE,UAAU,MAAM,UAAU,mBAAmB,kBAAkB,KAAK,EAAE;AAAA,MAC1E;AACA,UAAI,CAAC,UAAU;AACb,eAAO;AAAA,UACL,MAAM,CAAC,cAAc,GAAG,aAAa,iCAAiC;AAAA,YACpE,KAAK,MAAM;AAAA,UACb,CAAC;AAAA,QACH;AAAA,MACF;AACA,uBAAiB;AAAA,IACnB,OAAO;AACL,uBAAiB,iBAAiB,MAAM,UAAW;AAAA,IACrD;AAEA,UAAM,SAAS,MAAM,iBAAiB,KAAK,cAAc;AACzD,UAAM,aAAa,2BAA2B,gBAAgB,EAAE,OAAO,CAAC;AAExE,WAAO;AAAA,MACL,IAAI,WAAW;AAAA,MACf,QAAQ,WAAW;AAAA,MACnB,UAAU,WAAW;AAAA,MACrB,OAAO,WAAW;AAAA,MAClB,YAAY,WAAW;AAAA,MACvB,cAAc,WAAW;AAAA,IAC3B;AAAA,EACF;AACF;AAMA,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,YAAY,EACT,OAAO,EACP,IAAI,CAAC,EACL,IAAI,GAAG,EACP,SAAS,uEAAuE;AAAA,EACnF,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACvC,aAAa,EAAE,OAAO,EAAE,IAAI,GAAI,EAAE,SAAS,EAAE,SAAS;AAAA,EACtD,YAAY;AAAA,EACZ,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS;AAClE,CAAC;AAED,MAAM,uBAEF;AAAA,EACF,MAAM;AAAA,EACN,aAAa;AAAA,EACb,aACE;AAAA,EACF,aAAa;AAAA,EACb,kBAAkB,CAAC,kBAAkB;AAAA,EACrC,MAAM,CAAC,SAAS,aAAa,WAAW;AAAA,EACxC,YAAY;AAAA,EACZ,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,UAAU,gBAAgB,KAAK,CAAC,kBAAkB,CAAC;AACzD,QAAI,QAAQ,OAAQ,QAAO,eAAe,OAAO;AAEjD,UAAM,QAAQ,aAAa,GAAG;AAC9B,QAAI,CAAC,MAAO,QAAO,QAAQ,oBAAoB;AAC/C,QAAI,CAAC,MAAM,gBAAgB;AACzB,aAAO;AAAA,QACL;AAAA,UACE,CAAC,gBAAgB;AAAA,UACjB;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAKA,UAAM,aAAa,2CAA2C,UAAU;AAAA,MACtE,YAAY,MAAM;AAAA,MAClB,cAAc,MAAM;AAAA,MACpB,aAAa,MAAM;AAAA,MACnB,YAAY,MAAM;AAAA,MAClB,UAAU,MAAM;AAAA,IAClB,CAAC;AACD,QAAI,CAAC,WAAW,SAAS;AACvB,aAAO,QAAQ,GAAG,oCAAoC,WAAW,KAAK,CAAC;AAAA,IACzE;AAEA,UAAM,KAAK,UAAU,GAAG;AACxB,UAAM,WAAW,MAAM,GAAG;AAAA,MACxB;AAAA,MACA,EAAE,YAAY,MAAM,YAAY,UAAU,MAAM,SAAS;AAAA,MACzD,EAAE,SAAS,EAAE,SAAS,OAAO,EAAE;AAAA,IACjC;AACA,QAAI,UAAU;AACZ,aAAO;AAAA,QACL;AAAA,UACE,CAAC,YAAY;AAAA,UACb;AAAA,UACA,gCAAgC,MAAM,UAAU;AAAA,UAChD,EAAE,KAAK,MAAM,WAAW;AAAA,QAC1B;AAAA,MACF;AAAA,IACF;AAGA,UAAM,iBAAiB,WAAW,KAAK,WAAW,gBAC9C,WAAW,KAAK,aAChB,EAAE,GAAG,WAAW,KAAK,YAAY,eAAe,SAAkB;AAEtE,UAAM,UAAU,GAAG,OAAO,oBAAoB;AAAA,MAC5C,YAAY,WAAW,KAAK;AAAA,MAC5B,cAAc,WAAW,KAAK;AAAA,MAC9B,aAAa,WAAW,KAAK;AAAA,MAC7B,SAAS,WAAW,KAAK;AAAA,MACzB,YAAY;AAAA,MACZ,UAAU,WAAW,KAAK;AAAA;AAAA;AAAA;AAAA,MAI1B,SAAS;AAAA,MACT,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,WAAW,IAAI,UAAU;AAAA,MACzB,WAAW,oBAAI,KAAK;AAAA,MACpB,WAAW,oBAAI,KAAK;AAAA,IACtB,CAAC;AAED,UAAM,GAAG,QAAQ,OAAO,EAAE,MAAM;AAChC,2BAAuB,MAAM,UAAU,MAAM,kBAAkB,MAAS;AAExE,UAAM,SAAS,MAAM,iBAAiB,KAAK,cAAwC;AACnF,UAAM,aAAa,2BAA2B,gBAA0C;AAAA,MACtF;AAAA,IACF,CAAC;AAED,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,QAAQ,CAAC;AAAA,MACT,cAAc,QAAQ;AAAA,MACtB,YAAY,QAAQ;AAAA,MACpB,SAAS,QAAQ;AAAA,MACjB,SAAS;AAAA,MACT,WAAW;AAAA,MACX,UAAU,WAAW;AAAA,MACrB,YAAY,WAAW;AAAA,MACvB,cAAc,WAAW;AAAA,IAC3B;AAAA,EACF;AACF;AAMA,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,cAAc,EAAE,KAAK,EAAE,SAAS,uDAAuD;AAAA,EACvF,YAAY;AAAA,EACZ,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS;AAClE,CAAC;AAED,MAAM,uBAEF;AAAA,EACF,MAAM;AAAA,EACN,aAAa;AAAA,EACb,aACE;AAAA,EACF,aAAa;AAAA,EACb,kBAAkB,CAAC,gBAAgB;AAAA,EACnC,MAAM,CAAC,SAAS,aAAa,WAAW;AAAA,EACxC,YAAY;AAAA,EACZ,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,UAAU,gBAAgB,KAAK,CAAC,gBAAgB,CAAC;AACvD,QAAI,QAAQ,OAAQ,QAAO,eAAe,OAAO;AAEjD,UAAM,QAAQ,aAAa,GAAG;AAC9B,QAAI,CAAC,MAAO,QAAO,QAAQ,oBAAoB;AAI/C,QAAI,CAAC,IAAI,QAAQ;AACf,aAAO;AAAA,QACL;AAAA,UACE,CAAC,QAAQ;AAAA,UACT;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,UAAM,SAAS,6BAA6B,UAAU,MAAM,UAAU;AACtE,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,QAAQ,GAAG,oCAAoC,OAAO,KAAK,CAAC;AAAA,IACrE;AAEA,UAAM,KAAK,UAAU,GAAG;AACxB,UAAM,aAAa,MAAM,GAAG,QAAQ,oBAAoB;AAAA,MACtD,IAAI,MAAM;AAAA,MACV,UAAU,MAAM;AAAA,MAChB,GAAG,kBAAkB,KAAK;AAAA,MAC1B,WAAW;AAAA,IACb,CAAC;AAED,QAAI,CAAC,YAAY;AACf,aAAO;AAAA,QACL,MAAM,CAAC,cAAc,GAAG,aAAa,iCAAiC;AAAA,UACpE,KAAK,MAAM;AAAA,QACb,CAAC;AAAA,MACH;AAAA,IACF;AAGA,UAAM,gBAAgB,MAAM,GAAG,QAAQ,yBAAyB;AAAA,MAC9D,cAAc,MAAM;AAAA,MACpB,QAAQ,IAAI;AAAA,MACZ,UAAU,MAAM;AAAA,IAClB,CAAC;AAED,QAAI;AACJ,QAAI,eAAe;AACjB,oBAAc,YAAY;AAC1B,oBAAc,iBAAiB,MAAM,kBAAkB,cAAc;AACrE,oBAAc,aAAa,OAAO;AAClC,UAAI,MAAM,aAAa,QAAW;AAChC,sBAAc,WAAW,MAAM;AAAA,MACjC;AACA,oBAAc,gBAAgB,WAAW;AACzC,cAAQ;AAAA,IACV,OAAO;AACL,cAAQ,GAAG,OAAO,yBAAyB;AAAA,QACzC,cAAc,MAAM;AAAA,QACpB,QAAQ,IAAI;AAAA,QACZ,YAAY,OAAO;AAAA,QACnB,UAAW,MAAM,YAAY;AAAA,QAC7B,eAAe,WAAW;AAAA,QAC1B,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM,kBAAkB,WAAW;AAAA,MACrD,CAAC;AACD,SAAG,QAAQ,KAAK;AAAA,IAClB;AAEA,UAAM,GAAG,MAAM;AAEf,UAAM,iBAAiB,OAAO;AAC9B,UAAM,SAAS,MAAM,iBAAiB,KAAK,cAAc;AACzD,UAAM,aAAa,2BAA2B,gBAAgB,EAAE,OAAO,CAAC;AAExE,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,QAAQ,CAAC;AAAA,MACT,SAAS,MAAM;AAAA,MACf,cAAc,MAAM;AAAA;AAAA;AAAA,MAGpB,WAAW;AAAA,MACX,qBAAqB,WAAW,UAAU,YAAY;AAAA,MACtD,UAAU,WAAW;AAAA,MACrB,YAAY,WAAW;AAAA,MACvB,cAAc,WAAW;AAAA,IAC3B;AAAA,EACF;AACF;AAMA,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACjC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,mCAAmC;AAAA,EAC1E,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,EAC9C,gBAAgB,EACb,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAC9B,SAAS,EACT,SAAS,yEAAyE;AAAA,EACrF,gBAAgB,EAAE,OAAO,EAAE,SAAS;AACtC,CAAC;AAED,MAAM,mBAAiF;AAAA,EACrF,MAAM;AAAA,EACN,aAAa;AAAA,EACb,aACE;AAAA,EACF,aAAa;AAAA,EACb,kBAAkB,CAAC,gBAAgB,kBAAkB,oBAAoB;AAAA,EACzE,MAAM,CAAC,SAAS,aAAa,SAAS;AAAA,EACtC,YAAY;AAAA,EACZ,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,UAAU,gBAAgB,KAAK,CAAC,gBAAgB,kBAAkB,oBAAoB,CAAC;AAC7F,QAAI,QAAQ,OAAQ,QAAO,eAAe,OAAO;AAEjD,UAAM,QAAQ,aAAa,GAAG;AAC9B,QAAI,CAAC,MAAO,QAAO,QAAQ,oBAAoB;AAC/C,QAAI,CAAC,MAAM,gBAAgB;AACzB,aAAO;AAAA,QACL;AAAA,UACE,CAAC,gBAAgB;AAAA,UACjB;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,UAAM,KAAK,UAAU,GAAG;AACxB,UAAM,aAAa,MAAM,uBAAuB,IAAI;AAAA,MAClD,YAAY,MAAM;AAAA,MAClB,SAAS,MAAM;AAAA,MACf,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB,CAAC;AAED,QAAI,CAAC,YAAY;AACf,aAAO;AAAA,QACL,MAAM,CAAC,YAAY,GAAG,aAAa,iCAAiC;AAAA,UAClE,KAAK,MAAM;AAAA,QACb,CAAC;AAAA,MACH;AAAA,IACF;AAEA,QAAI,gBAAgB,WAAW,IAAI,GAAG;AACpC,aAAO;AAAA,QACL;AAAA,UACE,CAAC,YAAY;AAAA,UACb;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,UAAM,mBAAmB,IAAI,UAAU,QAWpC,kBAAkB;AAErB,UAAM,WAAW,MAAM,iBAAiB,cAAc,IAAI;AAAA,MACxD,YAAY,MAAM;AAAA,MAClB,SAAS,MAAM;AAAA,MACf,gBAAgB,MAAM,kBAAkB,CAAC;AAAA,MACzC,gBAAgB,MAAM;AAAA,MACtB,UAAU,EAAE,aAAa,IAAI,UAAU,KAAK;AAAA;AAAA;AAAA,MAG5C,UAAU;AAAA,MACV,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB,CAAC;AAED,QAAI,iBAAgC;AACpC,QAAI;AACF,YAAM,iBAAiB,gBAAgB,IAAI,IAAI,WAAW,SAAS,IAAI;AAAA,QACrE,QAAQ,IAAI;AAAA,MACd,CAAC;AAAA,IACH,SAAS,OAAO;AACd,uBAAiB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,IACxE;AAEA,UAAM,SAAS,MAAM,GAAG;AAAA,MACtB;AAAA,MACA;AAAA,QACE,oBAAoB,SAAS;AAAA,QAC7B,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,WAAW;AAAA,UACT,KAAK;AAAA,YACH,oBAAoB;AAAA,YACpB,oBAAoB;AAAA,YACpB,oBAAoB;AAAA,YACpB,oBAAoB;AAAA,UACtB;AAAA,QACF;AAAA,MACF;AAAA,MACA,EAAE,SAAS,CAAC,EAAE,YAAY,MAAM,GAAG,EAAE,IAAI,MAAM,CAAC,GAAG,OAAO,IAAI;AAAA,IAChE;AAEA,UAAM,kBAAkB,MAAM;AAAA,MAC5B,IAAI;AAAA,QACF,OACG,IAAI,CAAC,UAAU,MAAM,cAAc,EACnC,OAAO,CAAC,OAAqB,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC;AAAA,MACzE;AAAA,IACF;AACA,UAAM,gBAAgB,gBAAgB,SAClC,MAAM,GAAG,KAAK,cAAc;AAAA,MAC1B,IAAI,EAAE,KAAK,gBAAgB;AAAA,MAC3B,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB,CAAC,IACD,CAAC;AACL,UAAM,qBAAqB,IAAI,IAAI,cAAc,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,KAAK,MAAM,CAAC,CAAC;AAEtF,UAAM,eAAqC,OAAO,IAAI,CAAC,WAAW;AAAA,MAChE,IAAI,MAAM;AAAA,MACV,WAAW,MAAM;AAAA,MACjB,QAAQ,MAAM,iBAAiB,mBAAmB,IAAI,MAAM,cAAc,KAAK,OAAO;AAAA,MACtF,YAAY,MAAM;AAAA,MAClB,WAAY,MAAM,aAAa;AAAA,IACjC,EAAE;AACF,UAAM,SAAS,mBAAmB,YAAY;AAE9C,UAAM,YAAY,MAAM,GAAG,QAAQ,kBAAkB;AAAA,MACnD,IAAI,SAAS;AAAA,MACb,UAAU,MAAM;AAAA,IAClB,CAAC;AAED,WAAO;AAAA,MACL,IAAI,mBAAmB;AAAA,MACvB,QAAQ,iBACJ,CAAC,MAAM,CAAC,WAAW,GAAG,oBAAoB,cAAc,CAAC,IACzD,CAAC;AAAA,MACL,YAAY,SAAS;AAAA,MACrB,UAAU;AAAA,MACV,QAAQ,WAAW,UAAU,SAAS;AAAA,MACtC,eAAe,WAAW,iBAAiB;AAAA,MAC3C,SAAS,OAAO;AAAA,MAChB,kBAAkB,OAAO;AAAA,IAC3B;AAAA,EACF;AACF;AAoBA,MAAM,4BAEF;AAAA,EACF,MAAM;AAAA,EACN,aAAa;AAAA,EACb,aACE;AAAA,EACF,aAAa;AAAA,EACb,kBAAkB,CAAC,kBAAkB;AAAA,EACrC,MAAM,CAAC,QAAQ,aAAa,WAAW;AAAA,EACvC,YAAY;AAAA,EACZ,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,UAAU,gBAAgB,KAAK,CAAC,kBAAkB,CAAC;AACzD,QAAI,QAAQ,OAAQ,QAAO,eAAe,OAAO;AAEjD,UAAM,YAAqC;AAAA,MACzC,OAAO,MAAM;AAAA,MACb,aAAa,MAAM;AAAA,MACnB,GAAI,MAAM,gBAAgB,EAAE,eAAe,MAAM,cAAc,IAAI,CAAC;AAAA,IACtE;AAEA,UAAM,SAAS,6BAA6B,UAAU,SAAS;AAC/D,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO;AAAA,QACL,GAAG,OAAO,MAAM,OAAO;AAAA,UAAI,CAAC,aAC1B;AAAA,YACE,CAAC,GAAG,SAAS,IAAI;AAAA,YACjB,SAAS;AAAA,YACT,SAAS;AAAA,UACX;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,UAAM,iBAAiB,iBAAiB,OAAO,IAA+B;AAC9E,UAAM,SAAS,MAAM,iBAAiB,KAAK,cAAc;AACzD,UAAM,aAAa,2BAA2B,gBAAgB,EAAE,OAAO,CAAC;AAExE,WAAO;AAAA,MACL,IAAI,WAAW;AAAA,MACf,QAAQ,WAAW;AAAA,MACnB,UAAU,WAAW;AAAA,MACrB,OAAO,WAAW;AAAA,MAClB,YAAY,WAAW;AAAA,MACvB,cAAc,WAAW;AAAA,IAC3B;AAAA,EACF;AACF;AAEO,MAAM,4BAAuE;AAAA,EAClF;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAO,yBAAQ;",
+  "names": []
+}

package/dist/modules/workflows/ai-tools/types.js

@@ -0,0 +1,43 @@
+import { hasFeature } from "@open-mercato/shared/security/features";
+function issue(path, code, message, extra = {}) {
+  return { path, code, message, ...extra };
+}
+function failure(...issues) {
+  return { ok: false, issues };
+}
+function resolveScope(ctx) {
+  if (!ctx.tenantId) return null;
+  return { tenantId: ctx.tenantId, organizationId: ctx.organizationId };
+}
+const MISSING_TENANT_ISSUE = issue(
+  ["tenantId"],
+  "missing_tenant_context",
+  "Tenant context is required for workflows.* tools"
+);
+function missingFeatures(ctx, required) {
+  if (ctx.isSuperAdmin) return [];
+  return required.filter((feature) => !hasFeature(ctx.userFeatures, feature));
+}
+function featureRefusal(missing) {
+  return failure(
+    issue(
+      ["requiredFeatures"],
+      "insufficient_permissions",
+      `Missing required feature(s): ${missing.join(", ")}`,
+      { expected: missing.join(", ") }
+    )
+  );
+}
+function organizationWhere(scope) {
+  return scope.organizationId ? { organizationId: scope.organizationId } : {};
+}
+export {
+  MISSING_TENANT_ISSUE,
+  failure,
+  featureRefusal,
+  issue,
+  missingFeatures,
+  organizationWhere,
+  resolveScope
+};
+//# sourceMappingURL=types.js.map

package/dist/modules/workflows/ai-tools/types.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/workflows/ai-tools/types.ts"],
+  "sourcesContent": ["/**\n * Local AI tool shape for the workflows module.\n *\n * `@open-mercato/core` carries `@open-mercato/ai-assistant` only as a dev/peer\n * dependency, so \u2014 exactly as `customers` and `inbox_ops` already do \u2014 this\n * module declares its tools as plain objects against a structural subset of\n * `AiToolDefinition` instead of importing the framework at runtime. The\n * generator walks every module root for a default/`aiTools` export of this\n * shape and emits it into `ai-tools.generated.ts`, which the ai-assistant\n * tool-loader registers through `registerMcpTool`.\n */\nimport type { z } from 'zod'\nimport type { AwilixContainer } from 'awilix'\nimport { hasFeature } from '@open-mercato/shared/security/features'\nimport type { DefinitionValidationIssue } from '../lib/definition-error-body'\n\nexport interface WorkflowsToolContext {\n  tenantId: string | null\n  organizationId: string | null\n  userId: string | null\n  container: AwilixContainer\n  userFeatures: string[]\n  isSuperAdmin: boolean\n  apiKeySecret?: string\n  sessionId?: string\n}\n\nexport interface WorkflowsAiToolDefinition<TInput = unknown, TOutput = unknown> {\n  name: string\n  displayName?: string\n  description: string\n  inputSchema: z.ZodType<TInput>\n  requiredFeatures?: string[]\n  tags?: string[]\n  isMutation?: boolean\n  isDestructive?: boolean | ((input: TInput) => boolean)\n  handler: (input: TInput, context: WorkflowsToolContext) => Promise<TOutput>\n}\n\n/**\n * Every tool in this pack answers with the same envelope: a boolean outcome and\n * a list of STRUCTURED issues \u2014 never a prose error string. `issues` is the\n * identical `{path, code, message, expected?, got?}` shape the definition\n * create/update routes return in their 400 body.\n */\nexport interface WorkflowsToolEnvelope {\n  ok: boolean\n  issues: DefinitionValidationIssue[]\n}\n\nexport function issue(\n  path: Array<string | number>,\n  code: string,\n  message: string,\n  extra: { expected?: string; got?: string } = {},\n): DefinitionValidationIssue {\n  return { path, code, message, ...extra }\n}\n\nexport function failure(...issues: DefinitionValidationIssue[]): WorkflowsToolEnvelope {\n  return { ok: false, issues }\n}\n\nexport interface WorkflowsToolScope {\n  tenantId: string\n  organizationId: string | null\n}\n\n/**\n * Tenant scope is mandatory for every tool in this pack. An agent principal is\n * still a principal: without a tenant there is no safe query to run, so the\n * tool refuses rather than reading across tenants.\n */\nexport function resolveScope(ctx: WorkflowsToolContext): WorkflowsToolScope | null {\n  if (!ctx.tenantId) return null\n  return { tenantId: ctx.tenantId, organizationId: ctx.organizationId }\n}\n\nexport const MISSING_TENANT_ISSUE = issue(\n  ['tenantId'],\n  'missing_tenant_context',\n  'Tenant context is required for workflows.* tools',\n)\n\n/**\n * Defense in depth. The tool runtime already gates `requiredFeatures` through\n * the wildcard-aware matcher before a handler runs; re-checking here keeps the\n * guarantee when a handler is invoked directly (tests, in-process callers) and\n * makes the refusal a structured issue rather than a thrown string.\n */\nexport function missingFeatures(\n  ctx: WorkflowsToolContext,\n  required: readonly string[],\n): string[] {\n  if (ctx.isSuperAdmin) return []\n  return required.filter((feature) => !hasFeature(ctx.userFeatures, feature))\n}\n\nexport function featureRefusal(missing: readonly string[]): WorkflowsToolEnvelope {\n  return failure(\n    issue(\n      ['requiredFeatures'],\n      'insufficient_permissions',\n      `Missing required feature(s): ${missing.join(', ')}`,\n      { expected: missing.join(', ') },\n    ),\n  )\n}\n\n/**\n * Organization where-clause fragment for a tenant-scoped lookup. A null\n * organization stays tenant-wide, matching the REST routes' behaviour when the\n * caller's scope spans every organization.\n */\nexport function organizationWhere(scope: WorkflowsToolScope): Record<string, unknown> {\n  return scope.organizationId ? { organizationId: scope.organizationId } : {}\n}\n"],
+  "mappings": "AAaA,SAAS,kBAAkB;AAqCpB,SAAS,MACd,MACA,MACA,SACA,QAA6C,CAAC,GACnB;AAC3B,SAAO,EAAE,MAAM,MAAM,SAAS,GAAG,MAAM;AACzC;AAEO,SAAS,WAAW,QAA4D;AACrF,SAAO,EAAE,IAAI,OAAO,OAAO;AAC7B;AAYO,SAAS,aAAa,KAAsD;AACjF,MAAI,CAAC,IAAI,SAAU,QAAO;AAC1B,SAAO,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AACtE;AAEO,MAAM,uBAAuB;AAAA,EAClC,CAAC,UAAU;AAAA,EACX;AAAA,EACA;AACF;AAQO,SAAS,gBACd,KACA,UACU;AACV,MAAI,IAAI,aAAc,QAAO,CAAC;AAC9B,SAAO,SAAS,OAAO,CAAC,YAAY,CAAC,WAAW,IAAI,cAAc,OAAO,CAAC;AAC5E;AAEO,SAAS,eAAe,SAAmD;AAChF,SAAO;AAAA,IACL;AAAA,MACE,CAAC,kBAAkB;AAAA,MACnB;AAAA,MACA,gCAAgC,QAAQ,KAAK,IAAI,CAAC;AAAA,MAClD,EAAE,UAAU,QAAQ,KAAK,IAAI,EAAE;AAAA,IACjC;AAAA,EACF;AACF;AAOO,SAAS,kBAAkB,OAAoD;AACpF,SAAO,MAAM,iBAAiB,EAAE,gBAAgB,MAAM,eAAe,IAAI,CAAC;AAC5E;",
+  "names": []
+}

package/dist/modules/workflows/ai-tools.js

@@ -0,0 +1,10 @@
+import workflowsAuthoringAiTools from "./ai-tools/authoring-pack.js";
+const aiTools = [
+  ...workflowsAuthoringAiTools
+];
+var ai_tools_default = aiTools;
+export {
+  aiTools,
+  ai_tools_default as default
+};
+//# sourceMappingURL=ai-tools.js.map

package/dist/modules/workflows/ai-tools.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/workflows/ai-tools.ts"],
+  "sourcesContent": ["/**\n * Module-root AI tool contribution for the workflows module (spec \u00A79.5,\n * roadmap Phase 6 \u2014 \"Agent-as-author (MCP tool pack)\").\n *\n * The generator walks every module for a top-level `ai-tools.ts` and takes the\n * default/`aiTools` export as the contribution; `ai-tools.generated.ts` is then\n * loaded by the ai-assistant tool-loader, which registers each tool through\n * `registerMcpTool`. That single registry serves BOTH consumers: the MCP server\n * (external agents) and the in-app `<AiChat>` agent runtime.\n *\n * Requires `yarn generate` to be discovered.\n */\nimport workflowsAuthoringAiTools from './ai-tools/authoring-pack'\nimport type { WorkflowsAiToolDefinition } from './ai-tools/types'\n\nexport const aiTools: WorkflowsAiToolDefinition<never, never>[] = [\n  ...workflowsAuthoringAiTools,\n]\n\nexport default aiTools\n"],
+  "mappings": "AAYA,OAAO,+BAA+B;AAG/B,MAAM,UAAqD;AAAA,EAChE,GAAG;AACL;AAEA,IAAO,mBAAQ;",
+  "names": []
+}

package/dist/modules/workflows/api/command-settings/route.js

@@ -0,0 +1,137 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { listWorkflowSafeCommands } from "../../lib/workflow-safe-commands.js";
+import {
+  findUncataloguedCommandIds,
+  mergeEnabledCommandIds,
+  resolveWorkflowCommandCatalogue,
+  UNSET_WORKFLOW_COMMAND_POLICY
+} from "../../lib/workflow-command-enablement.js";
+import {
+  readEnabledWorkflowCommandIds,
+  resolveWorkflowCommandConfigService,
+  writeEnabledWorkflowCommandIds
+} from "../../lib/workflow-command-settings.js";
+import {
+  workflowsTag,
+  workflowErrorSchema,
+  workflowCommandSettingsResponseSchema,
+  workflowCommandSettingsPutBodySchema,
+  workflowCommandSettingsPutResponseSchema
+} from "../openapi.js";
+const metadata = {
+  // Reading which commands a workflow may execute is what a definition author
+  // needs in order to author one, so it rides on the definition-view feature
+  // rather than on task administration.
+  GET: { requireAuth: true, requireFeatures: ["workflows.definitions.view"] },
+  // Ticking a candidate widens what EVERY workflow in the tenant may mutate.
+  PUT: { requireAuth: true, requireFeatures: ["workflows.manage"] }
+};
+const putBodySchema = z.object({
+  enabledCommandIds: z.array(z.string().min(1)).max(500)
+});
+async function resolveModuleConfigService() {
+  try {
+    const container = await createRequestContainer();
+    return resolveWorkflowCommandConfigService(container);
+  } catch {
+    return null;
+  }
+}
+async function GET(request) {
+  const auth = await getAuthFromRequest(request);
+  if (!auth || !auth.tenantId) {
+    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  }
+  const moduleConfigService = await resolveModuleConfigService();
+  const stored = await readEnabledWorkflowCommandIds(moduleConfigService, auth.tenantId);
+  const catalogue = listWorkflowSafeCommands();
+  return NextResponse.json({
+    configured: stored !== null,
+    items: resolveWorkflowCommandCatalogue(
+      catalogue,
+      stored === null ? UNSET_WORKFLOW_COMMAND_POLICY : { enabledCommandIds: stored }
+    )
+  });
+}
+async function PUT(request) {
+  const auth = await getAuthFromRequest(request);
+  if (!auth || !auth.tenantId) {
+    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  }
+  let body;
+  try {
+    body = await request.json();
+  } catch {
+    return NextResponse.json({ error: "Invalid JSON" }, { status: 400 });
+  }
+  const parsed = putBodySchema.safeParse(body);
+  if (!parsed.success) {
+    return NextResponse.json(
+      { error: "Validation failed", details: parsed.error.flatten() },
+      { status: 400 }
+    );
+  }
+  const catalogue = listWorkflowSafeCommands();
+  const unknownCommandIds = findUncataloguedCommandIds(parsed.data.enabledCommandIds, catalogue);
+  if (unknownCommandIds.length > 0) {
+    return NextResponse.json(
+      {
+        error: "Unknown workflow-safe command",
+        code: "WORKFLOW_COMMAND_NOT_IN_CATALOGUE",
+        commandIds: unknownCommandIds
+      },
+      { status: 400 }
+    );
+  }
+  const moduleConfigService = await resolveModuleConfigService();
+  if (!moduleConfigService) {
+    return NextResponse.json({ error: "Settings storage unavailable" }, { status: 503 });
+  }
+  const stored = await readEnabledWorkflowCommandIds(moduleConfigService, auth.tenantId);
+  const enabledCommandIds = mergeEnabledCommandIds(
+    parsed.data.enabledCommandIds,
+    stored,
+    catalogue
+  );
+  await writeEnabledWorkflowCommandIds(moduleConfigService, auth.tenantId, enabledCommandIds);
+  return NextResponse.json({
+    ok: true,
+    configured: true,
+    items: resolveWorkflowCommandCatalogue(catalogue, { enabledCommandIds })
+  });
+}
+const openApi = {
+  tag: workflowsTag,
+  summary: "Tenant UPDATE_ENTITY command enablement",
+  methods: {
+    GET: {
+      summary: "List workflow-safe command candidates with tenant enablement",
+      description: "Returns every command declared through registerWorkflowSafeCommands together with whether this tenant has switched it on. `configured: false` means the tenant has never saved the setting and the answers come from the grandfathered defaults.",
+      responses: [
+        { status: 200, description: "Catalogue with tenant enablement", schema: workflowCommandSettingsResponseSchema },
+        { status: 401, description: "Missing authentication", schema: workflowErrorSchema }
+      ]
+    },
+    PUT: {
+      summary: "Set which workflow-safe commands are enabled for the tenant",
+      description: "Replaces the tenant's enabled set. Every submitted id must be present in the code-declared catalogue; an unknown id is rejected with 400 rather than stored. Stored ids whose declaring module is not loaded in this process are retained so a save can never silently untick them.",
+      requestBody: { schema: workflowCommandSettingsPutBodySchema },
+      responses: [
+        { status: 200, description: "Updated enablement", schema: workflowCommandSettingsPutResponseSchema },
+        { status: 400, description: "Invalid payload or unknown command id", schema: workflowErrorSchema },
+        { status: 401, description: "Missing authentication", schema: workflowErrorSchema },
+        { status: 503, description: "Settings storage unavailable", schema: workflowErrorSchema }
+      ]
+    }
+  }
+};
+export {
+  GET,
+  PUT,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/workflows/api/command-settings/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/workflows/api/command-settings/route.ts"],
+  "sourcesContent": ["/**\n * Tenant enablement for UPDATE_ENTITY commands (tier 2 of the model described\n * in `lib/workflow-command-enablement.ts`).\n *\n * - GET  /api/workflows/command-settings \u2014 the catalogue with this tenant's answer\n * - PUT  /api/workflows/command-settings \u2014 tick / untick candidates\n *\n * A new route, which BACKWARD_COMPATIBILITY.md \u00A77 allows freely. Shape follows\n * `api/task-settings/route.ts`.\n *\n * The PUT body carries command IDS, never a free-form command name: every id is\n * checked against the code-declared catalogue and an unknown one is a 400. That\n * refusal IS the safety model \u2014 an administrator who could type an arbitrary id\n * would reach commands nobody designed for unattended execution, and a command\n * with no declared `requiredFeatures` would have no gate left at all.\n *\n * `tenantId` always comes from the authenticated context and never from the\n * request body \u2014 a settings write that accepted a tenant id would be a\n * cross-tenant write primitive.\n */\n\nimport { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { listWorkflowSafeCommands } from '../../lib/workflow-safe-commands'\nimport {\n  findUncataloguedCommandIds,\n  mergeEnabledCommandIds,\n  resolveWorkflowCommandCatalogue,\n  UNSET_WORKFLOW_COMMAND_POLICY,\n} from '../../lib/workflow-command-enablement'\nimport {\n  readEnabledWorkflowCommandIds,\n  resolveWorkflowCommandConfigService,\n  writeEnabledWorkflowCommandIds,\n  type WorkflowCommandConfigService,\n} from '../../lib/workflow-command-settings'\nimport {\n  workflowsTag,\n  workflowErrorSchema,\n  workflowCommandSettingsResponseSchema,\n  workflowCommandSettingsPutBodySchema,\n  workflowCommandSettingsPutResponseSchema,\n} from '../openapi'\n\nexport const metadata = {\n  // Reading which commands a workflow may execute is what a definition author\n  // needs in order to author one, so it rides on the definition-view feature\n  // rather than on task administration.\n  GET: { requireAuth: true, requireFeatures: ['workflows.definitions.view'] },\n  // Ticking a candidate widens what EVERY workflow in the tenant may mutate.\n  PUT: { requireAuth: true, requireFeatures: ['workflows.manage'] },\n}\n\nconst putBodySchema = z.object({\n  enabledCommandIds: z.array(z.string().min(1)).max(500),\n})\n\nasync function resolveModuleConfigService(): Promise<WorkflowCommandConfigService | null> {\n  try {\n    const container = await createRequestContainer()\n    return resolveWorkflowCommandConfigService(container)\n  } catch {\n    // Fails to the UNSET policy, i.e. the grandfathered set \u2014 never to\n    // \"everything enabled\".\n    return null\n  }\n}\n\nexport async function GET(request: Request) {\n  const auth = await getAuthFromRequest(request)\n  if (!auth || !auth.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const moduleConfigService = await resolveModuleConfigService()\n  const stored = await readEnabledWorkflowCommandIds(moduleConfigService, auth.tenantId)\n  const catalogue = listWorkflowSafeCommands()\n\n  return NextResponse.json({\n    configured: stored !== null,\n    items: resolveWorkflowCommandCatalogue(\n      catalogue,\n      stored === null ? UNSET_WORKFLOW_COMMAND_POLICY : { enabledCommandIds: stored },\n    ),\n  })\n}\n\nexport async function PUT(request: Request) {\n  const auth = await getAuthFromRequest(request)\n  if (!auth || !auth.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  let body: unknown\n  try {\n    body = await request.json()\n  } catch {\n    return NextResponse.json({ error: 'Invalid JSON' }, { status: 400 })\n  }\n\n  const parsed = putBodySchema.safeParse(body)\n  if (!parsed.success) {\n    return NextResponse.json(\n      { error: 'Validation failed', details: parsed.error.flatten() },\n      { status: 400 },\n    )\n  }\n\n  const catalogue = listWorkflowSafeCommands()\n  const unknownCommandIds = findUncataloguedCommandIds(parsed.data.enabledCommandIds, catalogue)\n  if (unknownCommandIds.length > 0) {\n    return NextResponse.json(\n      {\n        error: 'Unknown workflow-safe command',\n        code: 'WORKFLOW_COMMAND_NOT_IN_CATALOGUE',\n        commandIds: unknownCommandIds,\n      },\n      { status: 400 },\n    )\n  }\n\n  const moduleConfigService = await resolveModuleConfigService()\n  if (!moduleConfigService) {\n    return NextResponse.json({ error: 'Settings storage unavailable' }, { status: 503 })\n  }\n\n  const stored = await readEnabledWorkflowCommandIds(moduleConfigService, auth.tenantId)\n  const enabledCommandIds = mergeEnabledCommandIds(\n    parsed.data.enabledCommandIds,\n    stored,\n    catalogue,\n  )\n  await writeEnabledWorkflowCommandIds(moduleConfigService, auth.tenantId, enabledCommandIds)\n\n  return NextResponse.json({\n    ok: true,\n    configured: true,\n    items: resolveWorkflowCommandCatalogue(catalogue, { enabledCommandIds }),\n  })\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: workflowsTag,\n  summary: 'Tenant UPDATE_ENTITY command enablement',\n  methods: {\n    GET: {\n      summary: 'List workflow-safe command candidates with tenant enablement',\n      description:\n        'Returns every command declared through registerWorkflowSafeCommands together with whether this tenant has switched it on. `configured: false` means the tenant has never saved the setting and the answers come from the grandfathered defaults.',\n      responses: [\n        { status: 200, description: 'Catalogue with tenant enablement', schema: workflowCommandSettingsResponseSchema },\n        { status: 401, description: 'Missing authentication', schema: workflowErrorSchema },\n      ],\n    },\n    PUT: {\n      summary: 'Set which workflow-safe commands are enabled for the tenant',\n      description:\n        'Replaces the tenant\\'s enabled set. Every submitted id must be present in the code-declared catalogue; an unknown id is rejected with 400 rather than stored. Stored ids whose declaring module is not loaded in this process are retained so a save can never silently untick them.',\n      requestBody: { schema: workflowCommandSettingsPutBodySchema },\n      responses: [\n        { status: 200, description: 'Updated enablement', schema: workflowCommandSettingsPutResponseSchema },\n        { status: 400, description: 'Invalid payload or unknown command id', schema: workflowErrorSchema },\n        { status: 401, description: 'Missing authentication', schema: workflowErrorSchema },\n        { status: 503, description: 'Settings storage unavailable', schema: workflowErrorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAqBA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AAEvC,SAAS,gCAAgC;AACzC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA;AAAA;AAAA;AAAA,EAItB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAAA;AAAA,EAE1E,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;AAClE;AAEA,MAAM,gBAAgB,EAAE,OAAO;AAAA,EAC7B,mBAAmB,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,GAAG;AACvD,CAAC;AAED,eAAe,6BAA2E;AACxF,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,WAAO,oCAAoC,SAAS;AAAA,EACtD,QAAQ;AAGN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,IAAI,SAAkB;AAC1C,QAAM,OAAO,MAAM,mBAAmB,OAAO;AAC7C,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,sBAAsB,MAAM,2BAA2B;AAC7D,QAAM,SAAS,MAAM,8BAA8B,qBAAqB,KAAK,QAAQ;AACrF,QAAM,YAAY,yBAAyB;AAE3C,SAAO,aAAa,KAAK;AAAA,IACvB,YAAY,WAAW;AAAA,IACvB,OAAO;AAAA,MACL;AAAA,MACA,WAAW,OAAO,gCAAgC,EAAE,mBAAmB,OAAO;AAAA,IAChF;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,IAAI,SAAkB;AAC1C,QAAM,OAAO,MAAM,mBAAmB,OAAO;AAC7C,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,QAAQ,KAAK;AAAA,EAC5B,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,SAAS,cAAc,UAAU,IAAI;AAC3C,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,qBAAqB,SAAS,OAAO,MAAM,QAAQ,EAAE;AAAA,MAC9D,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,YAAY,yBAAyB;AAC3C,QAAM,oBAAoB,2BAA2B,OAAO,KAAK,mBAAmB,SAAS;AAC7F,MAAI,kBAAkB,SAAS,GAAG;AAChC,WAAO,aAAa;AAAA,MAClB;AAAA,QACE,OAAO;AAAA,QACP,MAAM;AAAA,QACN,YAAY;AAAA,MACd;AAAA,MACA,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,sBAAsB,MAAM,2BAA2B;AAC7D,MAAI,CAAC,qBAAqB;AACxB,WAAO,aAAa,KAAK,EAAE,OAAO,+BAA+B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrF;AAEA,QAAM,SAAS,MAAM,8BAA8B,qBAAqB,KAAK,QAAQ;AACrF,QAAM,oBAAoB;AAAA,IACxB,OAAO,KAAK;AAAA,IACZ;AAAA,IACA;AAAA,EACF;AACA,QAAM,+BAA+B,qBAAqB,KAAK,UAAU,iBAAiB;AAE1F,SAAO,aAAa,KAAK;AAAA,IACvB,IAAI;AAAA,IACJ,YAAY;AAAA,IACZ,OAAO,gCAAgC,WAAW,EAAE,kBAAkB,CAAC;AAAA,EACzE,CAAC;AACH;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aACE;AAAA,MACF,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,oCAAoC,QAAQ,sCAAsC;AAAA,QAC9G,EAAE,QAAQ,KAAK,aAAa,0BAA0B,QAAQ,oBAAoB;AAAA,MACpF;AAAA,IACF;AAAA,IACA,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aACE;AAAA,MACF,aAAa,EAAE,QAAQ,qCAAqC;AAAA,MAC5D,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,sBAAsB,QAAQ,yCAAyC;AAAA,QACnG,EAAE,QAAQ,KAAK,aAAa,yCAAyC,QAAQ,oBAAoB;AAAA,QACjG,EAAE,QAAQ,KAAK,aAAa,0BAA0B,QAAQ,oBAAoB;AAAA,QAClF,EAAE,QAAQ,KAAK,aAAa,gCAAgC,QAAQ,oBAAoB;AAAA,MAC1F;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/workflows/api/commands/route.js

@@ -0,0 +1,72 @@
+import { NextResponse } from "next/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { listWorkflowSafeCommands } from "../../lib/workflow-safe-commands.js";
+import { resolveWorkflowCommandCatalogue } from "../../lib/workflow-command-enablement.js";
+import { resolveWorkflowCommandPolicyForContainer } from "../../lib/workflow-command-settings.js";
+import { workflowsTag, workflowErrorSchema, workflowSafeCommandListResponseSchema } from "../openapi.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("workflows");
+const metadata = {
+  requireAuth: true,
+  requireFeatures: ["workflows.definitions.edit"]
+};
+async function GET(request) {
+  try {
+    const container = await createRequestContainer();
+    const auth = await getAuthFromRequest(request);
+    if (!auth) {
+      return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    }
+    const scope = await resolveOrganizationScopeForRequest({ container, auth, request });
+    const tenantId = auth.tenantId;
+    const organizationId = scope?.selectedId ?? auth.orgId;
+    if (!tenantId) {
+      return NextResponse.json({ error: "Missing tenant context" }, { status: 400 });
+    }
+    const rbacService = container.resolve("rbacService");
+    const hasPermission = await rbacService.userHasAllFeatures(
+      auth.sub,
+      ["workflows.definitions.edit"],
+      { tenantId, organizationId }
+    );
+    if (!hasPermission) {
+      return NextResponse.json({ error: "Insufficient permissions" }, { status: 403 });
+    }
+    const policy = await resolveWorkflowCommandPolicyForContainer(container, tenantId);
+    const items = resolveWorkflowCommandCatalogue(listWorkflowSafeCommands(), policy);
+    return NextResponse.json({ items });
+  } catch (error) {
+    logger.error("Error listing workflow-safe commands", { err: error });
+    return NextResponse.json(
+      { error: "Failed to list workflow-safe commands" },
+      { status: 500 }
+    );
+  }
+}
+const openApi = {
+  tag: workflowsTag,
+  summary: "List workflow-safe commands",
+  methods: {
+    GET: {
+      summary: "List commands allowlisted for UPDATE_ENTITY activities",
+      description: "Returns the registered workflow-safe command catalogue consumed by the UPDATE_ENTITY command picker, each entry carrying whether the caller's tenant has enabled it. Entries with enabled:false, and commands outside the catalogue entirely, can still be authored but fail at runtime.",
+      responses: [
+        { status: 200, description: "Allowlisted workflow-safe commands", schema: workflowSafeCommandListResponseSchema }
+      ],
+      errors: [
+        { status: 400, description: "Missing tenant context", schema: workflowErrorSchema },
+        { status: 401, description: "Unauthorized", schema: workflowErrorSchema },
+        { status: 403, description: "Insufficient permissions", schema: workflowErrorSchema },
+        { status: 500, description: "Internal server error", schema: workflowErrorSchema }
+      ]
+    }
+  }
+};
+export {
+  GET,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/workflows/api/commands/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/workflows/api/commands/route.ts"],
+  "sourcesContent": ["/**\n * Workflow-Safe Commands API\n *\n * Endpoint:\n * - GET /api/workflows/commands - List commands allowlisted for UPDATE_ENTITY activities\n *\n * ## Why this returns disabled candidates instead of hiding them\n *\n * It used to return the whole catalogue to any holder of\n * `workflows.definitions.edit`, which meant an author could pick a command the\n * tenant had not enabled and only discover it when a run failed. Returning ONLY\n * the enabled ones would fix that failure but create a worse one: the field\n * accepts free text (`allowCustomValues`), so a command that vanishes from the\n * list is not prevented, it is merely unexplained \u2014 \"why can I not update\n * products here?\" becomes unanswerable from the editor.\n *\n * So every candidate is returned with an explicit `enabled` flag and the picker\n * renders the disabled ones as unavailable, naming the remedy. This is the same\n * rule the command palette already follows: a command that cannot run right now\n * is shown disabled, never hidden, because a missing entry reads as\n * \"unsupported\" and a disabled one reads as \"not now\".\n *\n * `enabled`, `defaultEnabled` and `labelKey` are ADDITIVE fields on an existing\n * response; `commandId` and `requiredFeatures` are unchanged.\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { listWorkflowSafeCommands } from '../../lib/workflow-safe-commands'\nimport { resolveWorkflowCommandCatalogue } from '../../lib/workflow-command-enablement'\nimport { resolveWorkflowCommandPolicyForContainer } from '../../lib/workflow-command-settings'\nimport { workflowsTag, workflowErrorSchema, workflowSafeCommandListResponseSchema } from '../openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows')\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.definitions.edit'],\n}\n\n/**\n * GET /api/workflows/commands\n *\n * List the workflow-safe command allowlist for the UPDATE_ENTITY command picker.\n */\nexport async function GET(request: NextRequest) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = scope?.selectedId ?? auth.orgId\n\n    if (!tenantId) {\n      return NextResponse.json({ error: 'Missing tenant context' }, { status: 400 })\n    }\n\n    const rbacService = container.resolve('rbacService')\n    const hasPermission = await rbacService.userHasAllFeatures(\n      auth.sub,\n      ['workflows.definitions.edit'],\n      { tenantId, organizationId }\n    )\n\n    if (!hasPermission) {\n      return NextResponse.json({ error: 'Insufficient permissions' }, { status: 403 })\n    }\n\n    const policy = await resolveWorkflowCommandPolicyForContainer(container, tenantId)\n    const items = resolveWorkflowCommandCatalogue(listWorkflowSafeCommands(), policy)\n\n    return NextResponse.json({ items })\n  } catch (error) {\n    logger.error('Error listing workflow-safe commands', { err: error })\n    return NextResponse.json(\n      { error: 'Failed to list workflow-safe commands' },\n      { status: 500 }\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: workflowsTag,\n  summary: 'List workflow-safe commands',\n  methods: {\n    GET: {\n      summary: 'List commands allowlisted for UPDATE_ENTITY activities',\n      description: 'Returns the registered workflow-safe command catalogue consumed by the UPDATE_ENTITY command picker, each entry carrying whether the caller\\'s tenant has enabled it. Entries with enabled:false, and commands outside the catalogue entirely, can still be authored but fail at runtime.',\n      responses: [\n        { status: 200, description: 'Allowlisted workflow-safe commands', schema: workflowSafeCommandListResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Missing tenant context', schema: workflowErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: workflowErrorSchema },\n        { status: 403, description: 'Insufficient permissions', schema: workflowErrorSchema },\n        { status: 500, description: 'Internal server error', schema: workflowErrorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AA0BA,SAAsB,oBAAoB;AAE1C,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,gCAAgC;AACzC,SAAS,uCAAuC;AAChD,SAAS,gDAAgD;AACzD,SAAS,cAAc,qBAAqB,6CAA6C;AACzF,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,4BAA4B;AAChD;AAOA,eAAsB,IAAI,SAAsB;AAC9C,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,OAAO,cAAc,KAAK;AAEjD,QAAI,CAAC,UAAU;AACb,aAAO,aAAa,KAAK,EAAE,OAAO,yBAAyB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/E;AAEA,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,gBAAgB,MAAM,YAAY;AAAA,MACtC,KAAK;AAAA,MACL,CAAC,4BAA4B;AAAA,MAC7B,EAAE,UAAU,eAAe;AAAA,IAC7B;AAEA,QAAI,CAAC,eAAe;AAClB,aAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjF;AAEA,UAAM,SAAS,MAAM,yCAAyC,WAAW,QAAQ;AACjF,UAAM,QAAQ,gCAAgC,yBAAyB,GAAG,MAAM;AAEhF,WAAO,aAAa,KAAK,EAAE,MAAM,CAAC;AAAA,EACpC,SAAS,OAAO;AACd,WAAO,MAAM,wCAAwC,EAAE,KAAK,MAAM,CAAC;AACnE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,wCAAwC;AAAA,MACjD,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,sCAAsC,QAAQ,sCAAsC;AAAA,MAClH;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,0BAA0B,QAAQ,oBAAoB;AAAA,QAClF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,oBAAoB;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,oBAAoB;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/workflows/api/definitions/[id]/callers/route.js

@@ -0,0 +1,76 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { WorkflowDefinition } from "../../../../data/entities.js";
+import { findSubWorkflowCallers } from "../../../../lib/caller-graph.js";
+const logger = createLogger("workflows").child({ component: "definition-callers-api" });
+const metadata = {
+  requireAuth: true,
+  requireFeatures: ["workflows.definitions.view"]
+};
+async function GET(request, context) {
+  try {
+    const params = await context.params;
+    const container = await createRequestContainer();
+    const em = container.resolve("em");
+    const auth = await getAuthFromRequest(request);
+    if (!auth) {
+      return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    }
+    const scope = await resolveOrganizationScopeForRequest({ container, auth, request });
+    const tenantId = auth.tenantId;
+    const organizationId = scope?.selectedId ?? auth.orgId;
+    if (!tenantId || !organizationId) {
+      return NextResponse.json({ error: "Missing tenant or organization context" }, { status: 400 });
+    }
+    const definition = await em.findOne(WorkflowDefinition, {
+      id: params.id,
+      tenantId,
+      organizationId,
+      deletedAt: null
+    });
+    if (!definition) {
+      return NextResponse.json({ error: "Workflow definition not found" }, { status: 404 });
+    }
+    const ports = definition.definition?.io || {};
+    const callers = await findSubWorkflowCallers(em, {
+      subWorkflowId: definition.workflowId,
+      tenantId,
+      organizationId,
+      ports
+    });
+    return NextResponse.json({ callers });
+  } catch (error) {
+    logger.error("error resolving workflow definition callers", {
+      error: error instanceof Error ? error.message : String(error)
+    });
+    return NextResponse.json({ error: "Failed to resolve callers" }, { status: 500 });
+  }
+}
+const openApi = {
+  methods: {
+    GET: {
+      summary: "List sub-workflow callers and breaking mappings",
+      description: "Returns parent definitions that invoke this workflow as a sub-workflow and the mappings its current port contract would break.",
+      tags: ["Workflows"],
+      pathParams: z.object({ id: z.string().describe("Workflow definition id") }),
+      responses: [
+        {
+          status: 200,
+          description: "Callers",
+          example: { callers: [{ workflowId: "order-flow", version: 1, stepId: "sub", brokenMappings: ["input:orderId"] }] }
+        },
+        { status: 404, description: "Not found", example: { error: "Workflow definition not found" } }
+      ]
+    }
+  }
+};
+export {
+  GET,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/workflows/api/definitions/[id]/callers/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/workflows/api/definitions/%5Bid%5D/callers/route.ts"],
+  "sourcesContent": ["/**\n * Workflow Definition Callers (breaking-change preview)\n *\n * GET /api/workflows/definitions/[id]/callers\n *\n * Returns the parent definitions that invoke this workflow as a sub-workflow and,\n * for each, the field mappings that this definition's current IO port contract\n * would break.\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { WorkflowDefinition } from '../../../../data/entities'\nimport type { WorkflowIoContract } from '../../../../data/validators'\nimport { findSubWorkflowCallers } from '../../../../lib/caller-graph'\n\nconst logger = createLogger('workflows').child({ component: 'definition-callers-api' })\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.definitions.view'],\n}\n\ninterface RouteContext {\n  params: Promise<{ id: string }>\n}\n\nexport async function GET(request: NextRequest, context: RouteContext) {\n  try {\n    const params = await context.params\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = scope?.selectedId ?? auth.orgId\n\n    if (!tenantId || !organizationId) {\n      return NextResponse.json({ error: 'Missing tenant or organization context' }, { status: 400 })\n    }\n\n    const definition = await em.findOne(WorkflowDefinition, {\n      id: params.id,\n      tenantId,\n      organizationId,\n      deletedAt: null,\n    })\n    if (!definition) {\n      return NextResponse.json({ error: 'Workflow definition not found' }, { status: 404 })\n    }\n\n    const ports: WorkflowIoContract = (definition.definition as { io?: WorkflowIoContract })?.io || {}\n    const callers = await findSubWorkflowCallers(em, {\n      subWorkflowId: definition.workflowId,\n      tenantId,\n      organizationId,\n      ports,\n    })\n\n    return NextResponse.json({ callers })\n  } catch (error) {\n    logger.error('error resolving workflow definition callers', {\n      error: error instanceof Error ? error.message : String(error),\n    })\n    return NextResponse.json({ error: 'Failed to resolve callers' }, { status: 500 })\n  }\n}\n\nexport const openApi = {\n  methods: {\n    GET: {\n      summary: 'List sub-workflow callers and breaking mappings',\n      description: 'Returns parent definitions that invoke this workflow as a sub-workflow and the mappings its current port contract would break.',\n      tags: ['Workflows'],\n      pathParams: z.object({ id: z.string().describe('Workflow definition id') }),\n      responses: [\n        {\n          status: 200,\n          description: 'Callers',\n          example: { callers: [{ workflowId: 'order-flow', version: 1, stepId: 'sub', brokenMappings: ['input:orderId'] }] },\n        },\n        { status: 404, description: 'Not found', example: { error: 'Workflow definition not found' } },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAUA,SAAsB,oBAAoB;AAC1C,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,oBAAoB;AAC7B,SAAS,0CAA0C;AACnD,SAAS,0BAA0B;AAEnC,SAAS,8BAA8B;AAEvC,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,yBAAyB,CAAC;AAE/E,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,4BAA4B;AAChD;AAMA,eAAsB,IAAI,SAAsB,SAAuB;AACrE,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAC7B,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,OAAO,cAAc,KAAK;AAEjD,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,aAAO,aAAa,KAAK,EAAE,OAAO,yCAAyC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/F;AAEA,UAAM,aAAa,MAAM,GAAG,QAAQ,oBAAoB;AAAA,MACtD,IAAI,OAAO;AAAA,MACX;AAAA,MACA;AAAA,MACA,WAAW;AAAA,IACb,CAAC;AACD,QAAI,CAAC,YAAY;AACf,aAAO,aAAa,KAAK,EAAE,OAAO,gCAAgC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACtF;AAEA,UAAM,QAA6B,WAAW,YAA4C,MAAM,CAAC;AACjG,UAAM,UAAU,MAAM,uBAAuB,IAAI;AAAA,MAC/C,eAAe,WAAW;AAAA,MAC1B;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAED,WAAO,aAAa,KAAK,EAAE,QAAQ,CAAC;AAAA,EACtC,SAAS,OAAO;AACd,WAAO,MAAM,+CAA+C;AAAA,MAC1D,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,IAC9D,CAAC;AACD,WAAO,aAAa,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClF;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,MAAM,CAAC,WAAW;AAAA,MAClB,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,wBAAwB,EAAE,CAAC;AAAA,MAC1E,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,cAAc,SAAS,GAAG,QAAQ,OAAO,gBAAgB,CAAC,eAAe,EAAE,CAAC,EAAE;AAAA,QACnH;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,aAAa,SAAS,EAAE,OAAO,gCAAgC,EAAE;AAAA,MAC/F;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}