@open-mercato/core 0.7.1-develop.7193.1.910a5b0a1e → 0.7.1-develop.7194.1.ab4fc81f82

package/dist/modules/workflows/api/instances/[id]/context/route.js

@@ -0,0 +1,180 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { enforceCommandOptimisticLockWithGuards } from "@open-mercato/shared/lib/crud/optimistic-lock-command";
+import {
+  bridgeLegacyGuard,
+  runMutationGuards
+} from "@open-mercato/shared/lib/crud/mutation-guard-registry";
+import { getAllMutationGuardInstances } from "@open-mercato/shared/lib/crud/mutation-guard-store";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { updateWorkflowContextScoped } from "../../../../lib/workflow-executor.js";
+import { wakeConditionWaiters } from "../../../../lib/condition-handler.js";
+import {
+  workflowsTag,
+  workflowErrorSchema,
+  updateInstanceContextRequestSchema,
+  updateInstanceContextResponseSchema
+} from "../../../openapi.js";
+const logger = createLogger("workflows");
+const metadata = {
+  requireAuth: true,
+  requireFeatures: ["workflows.instances.update_context"]
+};
+const CONTEXT_RESOURCE_KIND = "workflows.instance";
+const updateContextSchema = z.object({
+  context: z.record(z.string(), z.any())
+});
+function resolveUserFeatures(auth) {
+  const features = auth?.features;
+  if (!Array.isArray(features)) return [];
+  return features.filter((value) => typeof value === "string");
+}
+async function PATCH(request, context) {
+  try {
+    const params = await context.params;
+    const container = await createRequestContainer();
+    const em = container.resolve("em");
+    const auth = await getAuthFromRequest(request);
+    if (!auth) {
+      return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    }
+    const scope = await resolveOrganizationScopeForRequest({ container, auth, request });
+    const tenantId = auth.tenantId;
+    const organizationId = scope?.selectedId ?? auth.orgId;
+    if (!tenantId || !organizationId) {
+      return NextResponse.json({ error: "Missing tenant or organization context" }, { status: 400 });
+    }
+    const rbacService = container.resolve("rbacService");
+    const hasPermission = await rbacService.userHasAllFeatures(
+      auth.sub,
+      ["workflows.instances.update_context"],
+      { tenantId, organizationId }
+    );
+    if (!hasPermission) {
+      return NextResponse.json({ error: "Insufficient permissions" }, { status: 403 });
+    }
+    const body = await request.json();
+    const input = updateContextSchema.parse(body);
+    const legacyGuard = bridgeLegacyGuard(container);
+    const guards = [...getAllMutationGuardInstances()];
+    if (legacyGuard) guards.push(legacyGuard);
+    const guardInput = {
+      tenantId,
+      organizationId,
+      userId: auth.sub ?? "",
+      resourceKind: CONTEXT_RESOURCE_KIND,
+      resourceId: params.id,
+      operation: "update",
+      requestMethod: request.method,
+      requestHeaders: request.headers
+    };
+    const guardResult = await runMutationGuards(guards, guardInput, {
+      userFeatures: resolveUserFeatures(auth)
+    });
+    if (!guardResult.ok) {
+      return NextResponse.json(
+        guardResult.errorBody ?? { error: "Operation blocked by guard" },
+        { status: guardResult.errorStatus ?? 422 }
+      );
+    }
+    const instance = await updateWorkflowContextScoped(em, {
+      instanceId: params.id,
+      tenantId,
+      organizationId,
+      updates: input.context,
+      // The optimistic-lock compare must run against the freshly loaded row and
+      // BEFORE the merge is flushed, so the scoped helper takes it as a hook.
+      assertVersion: (current) => enforceCommandOptimisticLockWithGuards(container, {
+        resourceKind: CONTEXT_RESOURCE_KIND,
+        resourceId: params.id,
+        current,
+        request
+      })
+    });
+    const { woken } = await wakeConditionWaiters(em, container, {
+      instanceId: instance.id,
+      tenantId,
+      organizationId,
+      userId: auth.sub
+    });
+    for (const callback of guardResult.afterSuccessCallbacks) {
+      if (!callback.guard.afterSuccess) continue;
+      try {
+        await callback.guard.afterSuccess({ ...guardInput, metadata: callback.metadata ?? null });
+      } catch (callbackError) {
+        logger.error("Mutation guard afterSuccess callback failed", {
+          component: "instance-context",
+          guardId: callback.guard.id,
+          err: callbackError
+        });
+      }
+    }
+    return NextResponse.json({ ok: true, instanceId: instance.id, woken });
+  } catch (error) {
+    if (isCrudHttpError(error)) {
+      return NextResponse.json(error.body, { status: error.status });
+    }
+    if (error?.name === "ZodError") {
+      return NextResponse.json(
+        { error: "Invalid request body", details: error.errors },
+        { status: 400 }
+      );
+    }
+    if (error?.code === "RESERVED_CONTEXT_KEY") {
+      return NextResponse.json(
+        { error: error.message, details: error.details },
+        { status: 400 }
+      );
+    }
+    if (error?.code === "INSTANCE_NOT_FOUND") {
+      return NextResponse.json({ error: error.message }, { status: 404 });
+    }
+    if (error?.code === "INSTANCE_NOT_UPDATABLE") {
+      return NextResponse.json({ error: error.message }, { status: 409 });
+    }
+    logger.error("Workflow context patch failed", { component: "instance-context", err: error });
+    return NextResponse.json(
+      { error: error?.message || "Failed to update workflow context" },
+      { status: 500 }
+    );
+  }
+}
+const openApi = {
+  tag: workflowsTag,
+  summary: "Patch workflow instance context",
+  methods: {
+    PATCH: {
+      summary: "Merge a context patch and wake condition waiters",
+      description: "Shallow-merges a partial context patch into a RUNNING/PAUSED/FORKED workflow instance, then re-evaluates every WAIT_FOR_CONDITION waiter in that instance and resumes the ones whose predicate now holds. Reserved engine keys are rejected. Requires the workflows.instances.update_context feature.",
+      requestBody: {
+        contentType: "application/json",
+        schema: updateInstanceContextRequestSchema
+      },
+      responses: [
+        {
+          status: 200,
+          description: "Context merged; woken lists the resumed step ids",
+          schema: updateInstanceContextResponseSchema
+        }
+      ],
+      errors: [
+        { status: 400, description: "Invalid body or reserved context key", schema: workflowErrorSchema },
+        { status: 401, description: "Unauthorized", schema: workflowErrorSchema },
+        { status: 403, description: "Insufficient permissions", schema: workflowErrorSchema },
+        { status: 404, description: "Instance not found in the caller scope", schema: workflowErrorSchema },
+        { status: 409, description: "Instance not updatable or stale version", schema: workflowErrorSchema },
+        { status: 500, description: "Internal server error", schema: workflowErrorSchema }
+      ]
+    }
+  }
+};
+export {
+  PATCH,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/workflows/api/instances/[id]/context/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/workflows/api/instances/%5Bid%5D/context/route.ts"],
+  "sourcesContent": ["import { NextRequest, NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { enforceCommandOptimisticLockWithGuards } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport {\n  bridgeLegacyGuard,\n  runMutationGuards,\n  type MutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard-registry'\nimport { getAllMutationGuardInstances } from '@open-mercato/shared/lib/crud/mutation-guard-store'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { updateWorkflowContextScoped } from '../../../../lib/workflow-executor'\nimport { wakeConditionWaiters } from '../../../../lib/condition-handler'\nimport {\n  workflowsTag,\n  workflowErrorSchema,\n  updateInstanceContextRequestSchema,\n  updateInstanceContextResponseSchema,\n} from '../../../openapi'\n\nconst logger = createLogger('workflows')\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.instances.update_context'],\n}\n\nconst CONTEXT_RESOURCE_KIND = 'workflows.instance'\n\nconst updateContextSchema = z.object({\n  context: z.record(z.string(), z.any()),\n})\n\ninterface RouteContext {\n  params: Promise<{ id: string }>\n}\n\nfunction resolveUserFeatures(auth: unknown): string[] {\n  const features = (auth as { features?: unknown })?.features\n  if (!Array.isArray(features)) return []\n  return features.filter((value): value is string => typeof value === 'string')\n}\n\n/**\n * PATCH /api/workflows/instances/[id]/context\n *\n * Merge a partial context patch into a running instance and wake any\n * WAIT_FOR_CONDITION waiters whose predicate now holds. This is the\n * event-driven fast path; the per-waiter poll job remains the durability\n * backstop, so a missed call here only costs latency, never correctness.\n */\nexport async function PATCH(request: NextRequest, context: RouteContext) {\n  try {\n    const params = await context.params\n\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = scope?.selectedId ?? auth.orgId\n\n    if (!tenantId || !organizationId) {\n      return NextResponse.json({ error: 'Missing tenant or organization context' }, { status: 400 })\n    }\n\n    const rbacService = container.resolve('rbacService')\n    const hasPermission = await rbacService.userHasAllFeatures(\n      auth.sub,\n      ['workflows.instances.update_context'],\n      { tenantId, organizationId }\n    )\n    if (!hasPermission) {\n      return NextResponse.json({ error: 'Insufficient permissions' }, { status: 403 })\n    }\n\n    const body = await request.json()\n    const input = updateContextSchema.parse(body)\n\n    const legacyGuard = bridgeLegacyGuard(container)\n    const guards: MutationGuard[] = [...getAllMutationGuardInstances()]\n    if (legacyGuard) guards.push(legacyGuard)\n\n    const guardInput = {\n      tenantId,\n      organizationId,\n      userId: auth.sub ?? '',\n      resourceKind: CONTEXT_RESOURCE_KIND,\n      resourceId: params.id,\n      operation: 'update' as const,\n      requestMethod: request.method,\n      requestHeaders: request.headers,\n    }\n\n    const guardResult = await runMutationGuards(guards, guardInput, {\n      userFeatures: resolveUserFeatures(auth),\n    })\n    if (!guardResult.ok) {\n      return NextResponse.json(\n        guardResult.errorBody ?? { error: 'Operation blocked by guard' },\n        { status: guardResult.errorStatus ?? 422 }\n      )\n    }\n\n    const instance = await updateWorkflowContextScoped(em, {\n      instanceId: params.id,\n      tenantId,\n      organizationId,\n      updates: input.context,\n      // The optimistic-lock compare must run against the freshly loaded row and\n      // BEFORE the merge is flushed, so the scoped helper takes it as a hook.\n      assertVersion: (current: Date | null | undefined) =>\n        enforceCommandOptimisticLockWithGuards(container, {\n          resourceKind: CONTEXT_RESOURCE_KIND,\n          resourceId: params.id,\n          current,\n          request,\n        }),\n    })\n\n    const { woken } = await wakeConditionWaiters(em, container, {\n      instanceId: instance.id,\n      tenantId,\n      organizationId,\n      userId: auth.sub,\n    })\n\n    for (const callback of guardResult.afterSuccessCallbacks) {\n      if (!callback.guard.afterSuccess) continue\n      try {\n        await callback.guard.afterSuccess({ ...guardInput, metadata: callback.metadata ?? null })\n      } catch (callbackError) {\n        logger.error('Mutation guard afterSuccess callback failed', {\n          component: 'instance-context',\n          guardId: callback.guard.id,\n          err: callbackError,\n        })\n      }\n    }\n\n    return NextResponse.json({ ok: true, instanceId: instance.id, woken })\n  } catch (error: any) {\n    if (isCrudHttpError(error)) {\n      return NextResponse.json(error.body, { status: error.status })\n    }\n\n    if (error?.name === 'ZodError') {\n      return NextResponse.json(\n        { error: 'Invalid request body', details: error.errors },\n        { status: 400 }\n      )\n    }\n\n    if (error?.code === 'RESERVED_CONTEXT_KEY') {\n      return NextResponse.json(\n        { error: error.message, details: error.details },\n        { status: 400 }\n      )\n    }\n    if (error?.code === 'INSTANCE_NOT_FOUND') {\n      return NextResponse.json({ error: error.message }, { status: 404 })\n    }\n    if (error?.code === 'INSTANCE_NOT_UPDATABLE') {\n      return NextResponse.json({ error: error.message }, { status: 409 })\n    }\n\n    logger.error('Workflow context patch failed', { component: 'instance-context', err: error })\n\n    return NextResponse.json(\n      { error: error?.message || 'Failed to update workflow context' },\n      { status: 500 }\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: workflowsTag,\n  summary: 'Patch workflow instance context',\n  methods: {\n    PATCH: {\n      summary: 'Merge a context patch and wake condition waiters',\n      description:\n        'Shallow-merges a partial context patch into a RUNNING/PAUSED/FORKED workflow instance, then re-evaluates every WAIT_FOR_CONDITION waiter in that instance and resumes the ones whose predicate now holds. Reserved engine keys are rejected. Requires the workflows.instances.update_context feature.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: updateInstanceContextRequestSchema,\n      },\n      responses: [\n        {\n          status: 200,\n          description: 'Context merged; woken lists the resumed step ids',\n          schema: updateInstanceContextResponseSchema,\n        },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid body or reserved context key', schema: workflowErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: workflowErrorSchema },\n        { status: 403, description: 'Insufficient permissions', schema: workflowErrorSchema },\n        { status: 404, description: 'Instance not found in the caller scope', schema: workflowErrorSchema },\n        { status: 409, description: 'Instance not updatable or stale version', schema: workflowErrorSchema },\n        { status: 500, description: 'Internal server error', schema: workflowErrorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAsB,oBAAoB;AAC1C,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,uBAAuB;AAChC,SAAS,8CAA8C;AACvD;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,SAAS,oCAAoC;AAC7C,SAAS,oBAAoB;AAC7B,SAAS,mCAAmC;AAC5C,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,oCAAoC;AACxD;AAEA,MAAM,wBAAwB;AAE9B,MAAM,sBAAsB,EAAE,OAAO;AAAA,EACnC,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC;AACvC,CAAC;AAMD,SAAS,oBAAoB,MAAyB;AACpD,QAAM,WAAY,MAAiC;AACnD,MAAI,CAAC,MAAM,QAAQ,QAAQ,EAAG,QAAO,CAAC;AACtC,SAAO,SAAS,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ;AAC9E;AAUA,eAAsB,MAAM,SAAsB,SAAuB;AACvE,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAE7B,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,OAAO,cAAc,KAAK;AAEjD,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,aAAO,aAAa,KAAK,EAAE,OAAO,yCAAyC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/F;AAEA,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,gBAAgB,MAAM,YAAY;AAAA,MACtC,KAAK;AAAA,MACL,CAAC,oCAAoC;AAAA,MACrC,EAAE,UAAU,eAAe;AAAA,IAC7B;AACA,QAAI,CAAC,eAAe;AAClB,aAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjF;AAEA,UAAM,OAAO,MAAM,QAAQ,KAAK;AAChC,UAAM,QAAQ,oBAAoB,MAAM,IAAI;AAE5C,UAAM,cAAc,kBAAkB,SAAS;AAC/C,UAAM,SAA0B,CAAC,GAAG,6BAA6B,CAAC;AAClE,QAAI,YAAa,QAAO,KAAK,WAAW;AAExC,UAAM,aAAa;AAAA,MACjB;AAAA,MACA;AAAA,MACA,QAAQ,KAAK,OAAO;AAAA,MACpB,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,WAAW;AAAA,MACX,eAAe,QAAQ;AAAA,MACvB,gBAAgB,QAAQ;AAAA,IAC1B;AAEA,UAAM,cAAc,MAAM,kBAAkB,QAAQ,YAAY;AAAA,MAC9D,cAAc,oBAAoB,IAAI;AAAA,IACxC,CAAC;AACD,QAAI,CAAC,YAAY,IAAI;AACnB,aAAO,aAAa;AAAA,QAClB,YAAY,aAAa,EAAE,OAAO,6BAA6B;AAAA,QAC/D,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,MAC3C;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,4BAA4B,IAAI;AAAA,MACrD,YAAY,OAAO;AAAA,MACnB;AAAA,MACA;AAAA,MACA,SAAS,MAAM;AAAA;AAAA;AAAA,MAGf,eAAe,CAAC,YACd,uCAAuC,WAAW;AAAA,QAChD,cAAc;AAAA,QACd,YAAY,OAAO;AAAA,QACnB;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACL,CAAC;AAED,UAAM,EAAE,MAAM,IAAI,MAAM,qBAAqB,IAAI,WAAW;AAAA,MAC1D,YAAY,SAAS;AAAA,MACrB;AAAA,MACA;AAAA,MACA,QAAQ,KAAK;AAAA,IACf,CAAC;AAED,eAAW,YAAY,YAAY,uBAAuB;AACxD,UAAI,CAAC,SAAS,MAAM,aAAc;AAClC,UAAI;AACF,cAAM,SAAS,MAAM,aAAa,EAAE,GAAG,YAAY,UAAU,SAAS,YAAY,KAAK,CAAC;AAAA,MAC1F,SAAS,eAAe;AACtB,eAAO,MAAM,+CAA+C;AAAA,UAC1D,WAAW;AAAA,UACX,SAAS,SAAS,MAAM;AAAA,UACxB,KAAK;AAAA,QACP,CAAC;AAAA,MACH;AAAA,IACF;AAEA,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,YAAY,SAAS,IAAI,MAAM,CAAC;AAAA,EACvE,SAAS,OAAY;AACnB,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,aAAa,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC/D;AAEA,QAAI,OAAO,SAAS,YAAY;AAC9B,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,wBAAwB,SAAS,MAAM,OAAO;AAAA,QACvD,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,QAAI,OAAO,SAAS,wBAAwB;AAC1C,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,MAAM,SAAS,SAAS,MAAM,QAAQ;AAAA,QAC/C,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,QAAI,OAAO,SAAS,sBAAsB;AACxC,aAAO,aAAa,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpE;AACA,QAAI,OAAO,SAAS,0BAA0B;AAC5C,aAAO,aAAa,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpE;AAEA,WAAO,MAAM,iCAAiC,EAAE,WAAW,oBAAoB,KAAK,MAAM,CAAC;AAE3F,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,OAAO,WAAW,oCAAoC;AAAA,MAC/D,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,OAAO;AAAA,MACL,SAAS;AAAA,MACT,aACE;AAAA,MACF,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,wCAAwC,QAAQ,oBAAoB;AAAA,QAChG,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,oBAAoB;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,0CAA0C,QAAQ,oBAAoB;AAAA,QAClG,EAAE,QAAQ,KAAK,aAAa,2CAA2C,QAAQ,oBAAoB;AAAA,QACnG,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,oBAAoB;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/workflows/api/instances/[id]/rerun-step/route.js

@@ -0,0 +1,184 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
+import { WorkflowInstance, StepInstance } from "../../../../data/entities.js";
+import { findDefinitionForInstance } from "../../../../lib/find-definition.js";
+import { logWorkflowEvent, WorkflowEventTypes } from "../../../../lib/event-logger.js";
+import { computeContextDiff, resolveRerunEligibility } from "../../../../lib/rerun-from-step.js";
+import * as workflowExecutor from "../../../../lib/workflow-executor.js";
+import { workflowInstanceResponseSchema } from "../../../openapi.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("workflows");
+const metadata = {
+  requireAuth: true,
+  requireFeatures: ["workflows.instances.rerun_step"]
+};
+const requestSchema = z.object({
+  stepId: z.string().min(1),
+  contextPatch: z.record(z.string(), z.unknown()).optional()
+});
+async function POST(request, context) {
+  try {
+    const params = await context.params;
+    const container = await createRequestContainer();
+    const em = container.resolve("em");
+    const auth = await getAuthFromRequest(request);
+    if (!auth) {
+      return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    }
+    const scope = await resolveOrganizationScopeForRequest({ container, auth, request });
+    const tenantId = auth.tenantId;
+    const organizationId = scope?.selectedId ?? auth.orgId;
+    if (!tenantId || !organizationId) {
+      return NextResponse.json({ error: "Missing tenant or organization context" }, { status: 400 });
+    }
+    const rbacService = container.resolve("rbacService");
+    const hasPermission = await rbacService.userHasAllFeatures(
+      auth.sub,
+      ["workflows.instances.rerun_step"],
+      { tenantId, organizationId }
+    );
+    if (!hasPermission) {
+      return NextResponse.json({ error: "Insufficient permissions" }, { status: 403 });
+    }
+    const parsed = requestSchema.safeParse(await readJsonSafe(request));
+    if (!parsed.success) {
+      return NextResponse.json({ error: "Invalid payload" }, { status: 400 });
+    }
+    const instance = await em.findOne(WorkflowInstance, {
+      id: params.id,
+      tenantId,
+      organizationId
+    });
+    if (!instance) {
+      return NextResponse.json({ error: "Workflow instance not found" }, { status: 404 });
+    }
+    const definition = await findDefinitionForInstance(em, instance);
+    if (!definition) {
+      return NextResponse.json({ error: "Workflow definition not found" }, { status: 404 });
+    }
+    const stepExecutions = await em.find(StepInstance, {
+      workflowInstanceId: instance.id,
+      stepId: parsed.data.stepId,
+      tenantId,
+      organizationId
+    });
+    const eligibility = resolveRerunEligibility({
+      instanceStatus: instance.status,
+      stepId: parsed.data.stepId,
+      definitionSteps: definition.definition.steps.map((step) => ({
+        stepId: step.stepId,
+        stepType: step.stepType
+      })),
+      stepExecutions: stepExecutions.map((execution2) => ({
+        id: execution2.id,
+        stepId: execution2.stepId,
+        stepType: execution2.stepType,
+        status: execution2.status,
+        enteredAt: execution2.enteredAt ?? null,
+        createdAt: execution2.createdAt
+      }))
+    });
+    if (!eligibility.ok) {
+      return NextResponse.json({ error: eligibility.message, code: eligibility.code }, { status: 409 });
+    }
+    const editedContextDiff = computeContextDiff(instance.context, parsed.data.contextPatch);
+    const now = /* @__PURE__ */ new Date();
+    await logWorkflowEvent(em, {
+      workflowInstanceId: instance.id,
+      eventType: WorkflowEventTypes.STEP_RERUN,
+      eventData: {
+        stepId: parsed.data.stepId,
+        editedContextDiff,
+        by: auth.sub,
+        supersededStepInstanceId: eligibility.supersededStepInstanceId,
+        previousStatus: instance.status
+      },
+      userId: auth.sub,
+      tenantId,
+      organizationId
+    });
+    if (parsed.data.contextPatch) {
+      instance.context = { ...instance.context || {}, ...parsed.data.contextPatch };
+    }
+    if (instance.metadata?.attention) {
+      instance.metadata = { ...instance.metadata, attention: null };
+    }
+    instance.pendingTransition = null;
+    instance.currentStepId = parsed.data.stepId;
+    instance.status = "RUNNING";
+    instance.retryCount = (instance.retryCount || 0) + 1;
+    instance.errorMessage = null;
+    instance.errorDetails = null;
+    instance.updatedAt = now;
+    await em.flush();
+    const { executeStep } = await import("../../../../lib/step-handler.js");
+    await executeStep(
+      em,
+      instance,
+      parsed.data.stepId,
+      { workflowContext: instance.context || {}, userId: auth.sub },
+      container
+    );
+    const execution = await workflowExecutor.executeWorkflow(em, container, instance.id);
+    await em.refresh(instance);
+    return NextResponse.json({
+      data: { instance, execution, editedContextDiff },
+      message: "Step rerun started."
+    });
+  } catch (error) {
+    logger.error("Error rerunning workflow step", { err: error });
+    if (error instanceof workflowExecutor.WorkflowExecutionError) {
+      return NextResponse.json({ error: error.message }, { status: 400 });
+    }
+    return NextResponse.json({ error: "Failed to rerun the workflow step" }, { status: 500 });
+  }
+}
+const openApi = {
+  methods: {
+    POST: {
+      summary: "Rerun a workflow instance from a step",
+      description: "Replay a FAILED or PAUSED instance from one of its executed steps, optionally with an edited context patch. The previous attempt keeps its terminal step-instance row; the replay gets a fresh one, and the rerun is audited as a STEP_RERUN workflow event.",
+      tags: ["Workflows"],
+      params: z.object({ id: z.string().uuid() }),
+      requestBody: {
+        contentType: "application/json",
+        schema: requestSchema,
+        description: "Step to replay and an optional context patch applied before it runs."
+      },
+      responses: [
+        {
+          status: 200,
+          description: "Rerun started",
+          schema: z.object({
+            data: z.object({
+              instance: workflowInstanceResponseSchema,
+              execution: z.unknown(),
+              editedContextDiff: z.record(z.string(), z.unknown())
+            }),
+            message: z.string()
+          })
+        },
+        { status: 400, description: "Invalid payload", schema: z.object({ error: z.string() }) },
+        { status: 401, description: "Unauthorized", schema: z.object({ error: z.string() }) },
+        { status: 403, description: "Insufficient permissions", schema: z.object({ error: z.string() }) },
+        { status: 404, description: "Workflow instance not found", schema: z.object({ error: z.string() }) },
+        {
+          status: 409,
+          description: "The step cannot be rerun (still parked, changed type, or the instance is not rerunnable)",
+          schema: z.object({ error: z.string(), code: z.string() })
+        },
+        { status: 500, description: "Internal server error", schema: z.object({ error: z.string() }) }
+      ]
+    }
+  }
+};
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/workflows/api/instances/[id]/rerun-step/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/workflows/api/instances/%5Bid%5D/rerun-step/route.ts"],
+  "sourcesContent": ["/**\n * Rerun from step (spec \u00A78.4)\n *\n * Endpoint:\n * - POST /api/workflows/instances/[id]/rerun-step  { stepId, contextPatch? }\n *\n * **No step-state-machine change.** The terminal `StepInstance` of the previous\n * attempt is read (for its recorded `stepType`) and then left untouched; the\n * new attempt gets a FRESH row, because `stepHandler.enterStep` creates one\n * unconditionally on every entry. Both attempts stay in the audit trail and no\n * status is ever set out of order.\n *\n * The cursor move plus `executeStep` is the same shape the definition-level\n * error handler already uses (`enterErrorHandlerStep`), so no transition record\n * is invented either.\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { WorkflowInstance, StepInstance } from '../../../../data/entities'\nimport { findDefinitionForInstance } from '../../../../lib/find-definition'\nimport { logWorkflowEvent, WorkflowEventTypes } from '../../../../lib/event-logger'\nimport { computeContextDiff, resolveRerunEligibility } from '../../../../lib/rerun-from-step'\nimport * as workflowExecutor from '../../../../lib/workflow-executor'\nimport { workflowInstanceResponseSchema } from '../../../openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows')\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.instances.rerun_step'],\n}\n\nconst requestSchema = z.object({\n  stepId: z.string().min(1),\n  contextPatch: z.record(z.string(), z.unknown()).optional(),\n})\n\ninterface RouteContext {\n  params: Promise<{ id: string }>\n}\n\nexport async function POST(request: NextRequest, context: RouteContext) {\n  try {\n    const params = await context.params\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = scope?.selectedId ?? auth.orgId\n\n    if (!tenantId || !organizationId) {\n      return NextResponse.json({ error: 'Missing tenant or organization context' }, { status: 400 })\n    }\n\n    const rbacService = container.resolve('rbacService')\n    const hasPermission = await rbacService.userHasAllFeatures(\n      auth.sub,\n      ['workflows.instances.rerun_step'],\n      { tenantId, organizationId }\n    )\n    if (!hasPermission) {\n      return NextResponse.json({ error: 'Insufficient permissions' }, { status: 403 })\n    }\n\n    const parsed = requestSchema.safeParse(await readJsonSafe(request))\n    if (!parsed.success) {\n      return NextResponse.json({ error: 'Invalid payload' }, { status: 400 })\n    }\n\n    const instance = await em.findOne(WorkflowInstance, {\n      id: params.id,\n      tenantId,\n      organizationId,\n    })\n    if (!instance) {\n      return NextResponse.json({ error: 'Workflow instance not found' }, { status: 404 })\n    }\n\n    const definition = await findDefinitionForInstance(em, instance)\n    if (!definition) {\n      return NextResponse.json({ error: 'Workflow definition not found' }, { status: 404 })\n    }\n\n    const stepExecutions = (await em.find(StepInstance, {\n      workflowInstanceId: instance.id,\n      stepId: parsed.data.stepId,\n      tenantId,\n      organizationId,\n    })) as StepInstance[]\n\n    const eligibility = resolveRerunEligibility({\n      instanceStatus: instance.status,\n      stepId: parsed.data.stepId,\n      definitionSteps: definition.definition.steps.map((step: { stepId: string; stepType: string }) => ({\n        stepId: step.stepId,\n        stepType: step.stepType,\n      })),\n      stepExecutions: stepExecutions.map((execution) => ({\n        id: execution.id,\n        stepId: execution.stepId,\n        stepType: execution.stepType,\n        status: execution.status,\n        enteredAt: execution.enteredAt ?? null,\n        createdAt: execution.createdAt,\n      })),\n    })\n\n    if (!eligibility.ok) {\n      return NextResponse.json({ error: eligibility.message, code: eligibility.code }, { status: 409 })\n    }\n\n    const editedContextDiff = computeContextDiff(instance.context, parsed.data.contextPatch)\n    const now = new Date()\n\n    // Every rerun logs a workflow event \u2014 the terminal StepInstance is never\n    // touched, so the event log is what links the two attempts.\n    await logWorkflowEvent(em, {\n      workflowInstanceId: instance.id,\n      eventType: WorkflowEventTypes.STEP_RERUN,\n      eventData: {\n        stepId: parsed.data.stepId,\n        editedContextDiff,\n        by: auth.sub,\n        supersededStepInstanceId: eligibility.supersededStepInstanceId,\n        previousStatus: instance.status,\n      },\n      userId: auth.sub,\n      tenantId,\n      organizationId,\n    })\n\n    if (parsed.data.contextPatch) {\n      instance.context = { ...(instance.context || {}), ...parsed.data.contextPatch }\n    }\n    // Leaving the failure queue is exactly the marker going away.\n    if (instance.metadata?.attention) {\n      instance.metadata = { ...instance.metadata, attention: null }\n    }\n    instance.pendingTransition = null\n    instance.currentStepId = parsed.data.stepId\n    instance.status = 'RUNNING'\n    instance.retryCount = (instance.retryCount || 0) + 1\n    instance.errorMessage = null\n    instance.errorDetails = null\n    instance.updatedAt = now\n    await em.flush()\n\n    const { executeStep } = await import('../../../../lib/step-handler')\n    await executeStep(\n      em,\n      instance,\n      parsed.data.stepId,\n      { workflowContext: instance.context || {}, userId: auth.sub },\n      container\n    )\n\n    // Drive the run forward from the replayed step, exactly as any other\n    // advance would.\n    const execution = await workflowExecutor.executeWorkflow(em, container, instance.id)\n    await em.refresh(instance)\n\n    return NextResponse.json({\n      data: { instance, execution, editedContextDiff },\n      message: 'Step rerun started.',\n    })\n  } catch (error) {\n    logger.error('Error rerunning workflow step', { err: error })\n    if (error instanceof workflowExecutor.WorkflowExecutionError) {\n      return NextResponse.json({ error: error.message }, { status: 400 })\n    }\n    return NextResponse.json({ error: 'Failed to rerun the workflow step' }, { status: 500 })\n  }\n}\n\nexport const openApi = {\n  methods: {\n    POST: {\n      summary: 'Rerun a workflow instance from a step',\n      description:\n        'Replay a FAILED or PAUSED instance from one of its executed steps, optionally with an edited context patch. The previous attempt keeps its terminal step-instance row; the replay gets a fresh one, and the rerun is audited as a STEP_RERUN workflow event.',\n      tags: ['Workflows'],\n      params: z.object({ id: z.string().uuid() }),\n      requestBody: {\n        contentType: 'application/json',\n        schema: requestSchema,\n        description: 'Step to replay and an optional context patch applied before it runs.',\n      },\n      responses: [\n        {\n          status: 200,\n          description: 'Rerun started',\n          schema: z.object({\n            data: z.object({\n              instance: workflowInstanceResponseSchema,\n              execution: z.unknown(),\n              editedContextDiff: z.record(z.string(), z.unknown()),\n            }),\n            message: z.string(),\n          }),\n        },\n        { status: 400, description: 'Invalid payload', schema: z.object({ error: z.string() }) },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n        { status: 403, description: 'Insufficient permissions', schema: z.object({ error: z.string() }) },\n        { status: 404, description: 'Workflow instance not found', schema: z.object({ error: z.string() }) },\n        {\n          status: 409,\n          description: 'The step cannot be rerun (still parked, changed type, or the instance is not rerunnable)',\n          schema: z.object({ error: z.string(), code: z.string() }),\n        },\n        { status: 500, description: 'Internal server error', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAiBA,SAAsB,oBAAoB;AAC1C,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,oBAAoB;AAC7B,SAAS,kBAAkB,oBAAoB;AAC/C,SAAS,iCAAiC;AAC1C,SAAS,kBAAkB,0BAA0B;AACrD,SAAS,oBAAoB,+BAA+B;AAC5D,YAAY,sBAAsB;AAClC,SAAS,sCAAsC;AAC/C,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,gCAAgC;AACpD;AAEA,MAAM,gBAAgB,EAAE,OAAO;AAAA,EAC7B,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACxB,cAAc,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAC3D,CAAC;AAMD,eAAsB,KAAK,SAAsB,SAAuB;AACtE,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAC7B,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,OAAO,cAAc,KAAK;AAEjD,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,aAAO,aAAa,KAAK,EAAE,OAAO,yCAAyC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/F;AAEA,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,gBAAgB,MAAM,YAAY;AAAA,MACtC,KAAK;AAAA,MACL,CAAC,gCAAgC;AAAA,MACjC,EAAE,UAAU,eAAe;AAAA,IAC7B;AACA,QAAI,CAAC,eAAe;AAClB,aAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjF;AAEA,UAAM,SAAS,cAAc,UAAU,MAAM,aAAa,OAAO,CAAC;AAClE,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,kBAAkB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACxE;AAEA,UAAM,WAAW,MAAM,GAAG,QAAQ,kBAAkB;AAAA,MAClD,IAAI,OAAO;AAAA,MACX;AAAA,MACA;AAAA,IACF,CAAC;AACD,QAAI,CAAC,UAAU;AACb,aAAO,aAAa,KAAK,EAAE,OAAO,8BAA8B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpF;AAEA,UAAM,aAAa,MAAM,0BAA0B,IAAI,QAAQ;AAC/D,QAAI,CAAC,YAAY;AACf,aAAO,aAAa,KAAK,EAAE,OAAO,gCAAgC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACtF;AAEA,UAAM,iBAAkB,MAAM,GAAG,KAAK,cAAc;AAAA,MAClD,oBAAoB,SAAS;AAAA,MAC7B,QAAQ,OAAO,KAAK;AAAA,MACpB;AAAA,MACA;AAAA,IACF,CAAC;AAED,UAAM,cAAc,wBAAwB;AAAA,MAC1C,gBAAgB,SAAS;AAAA,MACzB,QAAQ,OAAO,KAAK;AAAA,MACpB,iBAAiB,WAAW,WAAW,MAAM,IAAI,CAAC,UAAgD;AAAA,QAChG,QAAQ,KAAK;AAAA,QACb,UAAU,KAAK;AAAA,MACjB,EAAE;AAAA,MACF,gBAAgB,eAAe,IAAI,CAACA,gBAAe;AAAA,QACjD,IAAIA,WAAU;AAAA,QACd,QAAQA,WAAU;AAAA,QAClB,UAAUA,WAAU;AAAA,QACpB,QAAQA,WAAU;AAAA,QAClB,WAAWA,WAAU,aAAa;AAAA,QAClC,WAAWA,WAAU;AAAA,MACvB,EAAE;AAAA,IACJ,CAAC;AAED,QAAI,CAAC,YAAY,IAAI;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,YAAY,SAAS,MAAM,YAAY,KAAK,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClG;AAEA,UAAM,oBAAoB,mBAAmB,SAAS,SAAS,OAAO,KAAK,YAAY;AACvF,UAAM,MAAM,oBAAI,KAAK;AAIrB,UAAM,iBAAiB,IAAI;AAAA,MACzB,oBAAoB,SAAS;AAAA,MAC7B,WAAW,mBAAmB;AAAA,MAC9B,WAAW;AAAA,QACT,QAAQ,OAAO,KAAK;AAAA,QACpB;AAAA,QACA,IAAI,KAAK;AAAA,QACT,0BAA0B,YAAY;AAAA,QACtC,gBAAgB,SAAS;AAAA,MAC3B;AAAA,MACA,QAAQ,KAAK;AAAA,MACb;AAAA,MACA;AAAA,IACF,CAAC;AAED,QAAI,OAAO,KAAK,cAAc;AAC5B,eAAS,UAAU,EAAE,GAAI,SAAS,WAAW,CAAC,GAAI,GAAG,OAAO,KAAK,aAAa;AAAA,IAChF;AAEA,QAAI,SAAS,UAAU,WAAW;AAChC,eAAS,WAAW,EAAE,GAAG,SAAS,UAAU,WAAW,KAAK;AAAA,IAC9D;AACA,aAAS,oBAAoB;AAC7B,aAAS,gBAAgB,OAAO,KAAK;AACrC,aAAS,SAAS;AAClB,aAAS,cAAc,SAAS,cAAc,KAAK;AACnD,aAAS,eAAe;AACxB,aAAS,eAAe;AACxB,aAAS,YAAY;AACrB,UAAM,GAAG,MAAM;AAEf,UAAM,EAAE,YAAY,IAAI,MAAM,OAAO,8BAA8B;AACnE,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA,OAAO,KAAK;AAAA,MACZ,EAAE,iBAAiB,SAAS,WAAW,CAAC,GAAG,QAAQ,KAAK,IAAI;AAAA,MAC5D;AAAA,IACF;AAIA,UAAM,YAAY,MAAM,iBAAiB,gBAAgB,IAAI,WAAW,SAAS,EAAE;AACnF,UAAM,GAAG,QAAQ,QAAQ;AAEzB,WAAO,aAAa,KAAK;AAAA,MACvB,MAAM,EAAE,UAAU,WAAW,kBAAkB;AAAA,MAC/C,SAAS;AAAA,IACX,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,MAAM,iCAAiC,EAAE,KAAK,MAAM,CAAC;AAC5D,QAAI,iBAAiB,iBAAiB,wBAAwB;AAC5D,aAAO,aAAa,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpE;AACA,WAAO,aAAa,KAAK,EAAE,OAAO,oCAAoC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1F;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aACE;AAAA,MACF,MAAM,CAAC,WAAW;AAAA,MAClB,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,MAC1C,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,QACR,aAAa;AAAA,MACf;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,MAAM,EAAE,OAAO;AAAA,cACb,UAAU;AAAA,cACV,WAAW,EAAE,QAAQ;AAAA,cACrB,mBAAmB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,YACrD,CAAC;AAAA,YACD,SAAS,EAAE,OAAO;AAAA,UACpB,CAAC;AAAA,QACH;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACvF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QAChG,EAAE,QAAQ,KAAK,aAAa,+BAA+B,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACnG;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,EAAE,OAAO,EAAE,CAAC;AAAA,QAC1D;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MAC/F;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": ["execution"]
+}

package/dist/modules/workflows/api/instances/[id]/retry/route.js

@@ -6,6 +6,7 @@ import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/d
 import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
 import { WorkflowInstance } from "../../../../data/entities.js";
 import * as workflowExecutor from "../../../../lib/workflow-executor.js";
+import { isRetryableRunOutcome } from "../../../../lib/run-outcome.js";
 import { workflowInstanceResponseSchema, workflowExecutionResultSchema } from "../../../openapi.js";
 import { createLogger } from "@open-mercato/shared/lib/logger";
 const logger = createLogger("workflows");
@@ -57,6 +58,15 @@ async function POST(request, context) {
         { status: 404 }
       );
     }
+    if (instance.outcome != null && !isRetryableRunOutcome(instance.outcome)) {
+      return NextResponse.json(
+        {
+          error: `Cannot retry a run whose outcome is ${instance.outcome}. Rerun the specific failed step instead.`,
+          code: "WORKFLOW_RUN_OUTCOME_NOT_RETRYABLE"
+        },
+        { status: 400 }
+      );
+    }
     if (instance.status !== "FAILED") {
       return NextResponse.json(
         {
@@ -129,8 +139,8 @@ const openApi = {
         },
         {
           status: 400,
-          description: "Bad request - Workflow cannot be retried in current status or execution error",
-          schema: z.object({ error: z.string() })
+          description: "Bad request - Workflow cannot be retried in its current status or with its current outcome, or execution error",
+          schema: z.object({ error: z.string(), code: z.string().optional() })
         },
         {
           status: 401,

package/dist/modules/workflows/api/instances/[id]/retry/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/workflows/api/instances/%5Bid%5D/retry/route.ts"],
-  "sourcesContent": ["/**\n * Retry Workflow Instance API\n *\n * Endpoint:\n * - POST /api/workflows/instances/[id]/retry - Retry a failed workflow instance\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { WorkflowInstance } from '../../../../data/entities'\nimport * as workflowExecutor from '../../../../lib/workflow-executor'\nimport { workflowInstanceResponseSchema, workflowExecutionResultSchema } from '../../../openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows')\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.instances.retry'],\n}\n\ninterface RouteContext {\n  params: Promise<{\n    id: string\n  }>\n}\n\n/**\n * POST /api/workflows/instances/[id]/retry\n *\n * Retry a failed workflow instance\n */\nexport async function POST(\n  request: NextRequest,\n  context: RouteContext\n) {\n  try {\n    const params = await context.params\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = scope?.selectedId ?? auth.orgId\n\n    if (!tenantId || !organizationId) {\n      return NextResponse.json(\n        { error: 'Missing tenant or organization context' },\n        { status: 400 }\n      )\n    }\n\n    // Check retry permission\n    const rbacService = container.resolve('rbacService')\n    const hasPermission = await rbacService.userHasAllFeatures(\n      auth.sub,\n      ['workflows.instances.retry'],\n      {\n        tenantId,\n        organizationId,\n      }\n    )\n\n    if (!hasPermission) {\n      return NextResponse.json(\n        { error: 'Insufficient permissions' },\n        { status: 403 }\n      )\n    }\n\n    const instance = await findOneWithDecryption(em, WorkflowInstance, {\n      id: params.id,\n      tenantId,\n      organizationId,\n    })\n\n    if (!instance) {\n      return NextResponse.json(\n        { error: 'Workflow instance not found' },\n        { status: 404 }\n      )\n    }\n\n    // Check if instance can be retried\n    if (instance.status !== 'FAILED') {\n      return NextResponse.json(\n        {\n          error: `Cannot retry workflow in ${instance.status} status. Only FAILED workflows can be retried.`,\n        },\n        { status: 400 }\n      )\n    }\n\n    const previousErrorMessage = instance.errorMessage\n    const previousErrorDetails = instance.errorDetails\n\n    instance.status = 'RUNNING'\n    instance.retryCount = (instance.retryCount || 0) + 1\n    instance.errorMessage = null\n    instance.errorDetails = null\n    instance.updatedAt = new Date()\n\n    await em.flush()\n\n    let result\n    try {\n      result = await workflowExecutor.executeWorkflow(em, container, instance.id)\n    } catch (executionError) {\n      instance.status = 'FAILED'\n      instance.errorMessage = previousErrorMessage\n      instance.errorDetails = previousErrorDetails\n      instance.updatedAt = new Date()\n      await em.flush()\n      throw executionError\n    }\n\n    await em.refresh(instance)\n\n    return NextResponse.json({\n      data: {\n        instance,\n        execution: result,\n      },\n      message: 'Workflow retry initiated successfully',\n    })\n  } catch (error) {\n    logger.error('Error retrying workflow instance', { err: error })\n\n    // Handle specific errors\n    if (error instanceof workflowExecutor.WorkflowExecutionError) {\n      return NextResponse.json(\n        { error: error.message },\n        { status: 400 }\n      )\n    }\n\n    return NextResponse.json(\n      { error: 'Failed to retry workflow instance' },\n      { status: 500 }\n    )\n  }\n}\n\nexport const openApi = {\n  methods: {\n    POST: {\n      summary: 'Retry failed workflow instance',\n      description: 'Retry a failed workflow instance from its current step. The workflow will be reset to RUNNING status and execution will continue.',\n      tags: ['Workflows'],\n      params: z.object({\n        id: z.string().uuid(),\n      }),\n      responses: [\n        {\n          status: 200,\n          description: 'Workflow retry initiated successfully',\n          schema: z.object({\n            data: z.object({\n              instance: workflowInstanceResponseSchema,\n              execution: workflowExecutionResultSchema,\n            }),\n            message: z.string(),\n          }),\n        },\n        {\n          status: 400,\n          description: 'Bad request - Workflow cannot be retried in current status or execution error',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 401,\n          description: 'Unauthorized',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 403,\n          description: 'Forbidden - Insufficient permissions',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 404,\n          description: 'Workflow instance not found',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 500,\n          description: 'Internal server error',\n          schema: z.object({ error: z.string() }),\n        },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAOA,SAAsB,oBAAoB;AAC1C,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,6BAA6B;AACtC,SAAS,wBAAwB;AACjC,YAAY,sBAAsB;AAClC,SAAS,gCAAgC,qCAAqC;AAC9E,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,2BAA2B;AAC/C;AAaA,eAAsB,KACpB,SACA,SACA;AACA,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAC7B,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,OAAO,cAAc,KAAK;AAEjD,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,yCAAyC;AAAA,QAClD,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,gBAAgB,MAAM,YAAY;AAAA,MACtC,KAAK;AAAA,MACL,CAAC,2BAA2B;AAAA,MAC5B;AAAA,QACE;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,eAAe;AAClB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,2BAA2B;AAAA,QACpC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,sBAAsB,IAAI,kBAAkB;AAAA,MACjE,IAAI,OAAO;AAAA,MACX;AAAA,MACA;AAAA,IACF,CAAC;AAED,QAAI,CAAC,UAAU;AACb,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,8BAA8B;AAAA,QACvC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,QAAI,SAAS,WAAW,UAAU;AAChC,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO,4BAA4B,SAAS,MAAM;AAAA,QACpD;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,uBAAuB,SAAS;AACtC,UAAM,uBAAuB,SAAS;AAEtC,aAAS,SAAS;AAClB,aAAS,cAAc,SAAS,cAAc,KAAK;AACnD,aAAS,eAAe;AACxB,aAAS,eAAe;AACxB,aAAS,YAAY,oBAAI,KAAK;AAE9B,UAAM,GAAG,MAAM;AAEf,QAAI;AACJ,QAAI;AACF,eAAS,MAAM,iBAAiB,gBAAgB,IAAI,WAAW,SAAS,EAAE;AAAA,IAC5E,SAAS,gBAAgB;AACvB,eAAS,SAAS;AAClB,eAAS,eAAe;AACxB,eAAS,eAAe;AACxB,eAAS,YAAY,oBAAI,KAAK;AAC9B,YAAM,GAAG,MAAM;AACf,YAAM;AAAA,IACR;AAEA,UAAM,GAAG,QAAQ,QAAQ;AAEzB,WAAO,aAAa,KAAK;AAAA,MACvB,MAAM;AAAA,QACJ;AAAA,QACA,WAAW;AAAA,MACb;AAAA,MACA,SAAS;AAAA,IACX,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,MAAM,oCAAoC,EAAE,KAAK,MAAM,CAAC;AAG/D,QAAI,iBAAiB,iBAAiB,wBAAwB;AAC5D,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,MAAM,QAAQ;AAAA,QACvB,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,oCAAoC;AAAA,MAC7C,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,MAAM,CAAC,WAAW;AAAA,MAClB,QAAQ,EAAE,OAAO;AAAA,QACf,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,MACtB,CAAC;AAAA,MACD,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,MAAM,EAAE,OAAO;AAAA,cACb,UAAU;AAAA,cACV,WAAW;AAAA,YACb,CAAC;AAAA,YACD,SAAS,EAAE,OAAO;AAAA,UACpB,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["/**\n * Retry Workflow Instance API\n *\n * Endpoint:\n * - POST /api/workflows/instances/[id]/retry - Retry a failed workflow instance\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { WorkflowInstance } from '../../../../data/entities'\nimport * as workflowExecutor from '../../../../lib/workflow-executor'\nimport { isRetryableRunOutcome } from '../../../../lib/run-outcome'\nimport { workflowInstanceResponseSchema, workflowExecutionResultSchema } from '../../../openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows')\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.instances.retry'],\n}\n\ninterface RouteContext {\n  params: Promise<{\n    id: string\n  }>\n}\n\n/**\n * POST /api/workflows/instances/[id]/retry\n *\n * Retry a failed workflow instance\n */\nexport async function POST(\n  request: NextRequest,\n  context: RouteContext\n) {\n  try {\n    const params = await context.params\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = scope?.selectedId ?? auth.orgId\n\n    if (!tenantId || !organizationId) {\n      return NextResponse.json(\n        { error: 'Missing tenant or organization context' },\n        { status: 400 }\n      )\n    }\n\n    // Check retry permission\n    const rbacService = container.resolve('rbacService')\n    const hasPermission = await rbacService.userHasAllFeatures(\n      auth.sub,\n      ['workflows.instances.retry'],\n      {\n        tenantId,\n        organizationId,\n      }\n    )\n\n    if (!hasPermission) {\n      return NextResponse.json(\n        { error: 'Insufficient permissions' },\n        { status: 403 }\n      )\n    }\n\n    const instance = await findOneWithDecryption(em, WorkflowInstance, {\n      id: params.id,\n      tenantId,\n      organizationId,\n    })\n\n    if (!instance) {\n      return NextResponse.json(\n        { error: 'Workflow instance not found' },\n        { status: 404 }\n      )\n    }\n\n    // A `partial_failure` reached END: replaying the graph would re-run every\n    // part that already succeeded in order to re-attempt the parts that did\n    // not (maintainer decision, 2026-07-30). Its status is COMPLETED, so the\n    // status guard below already refuses it \u2014 this runs FIRST so the operator\n    // gets the actionable remedy instead of the generic status message.\n    if (instance.outcome != null && !isRetryableRunOutcome(instance.outcome)) {\n      return NextResponse.json(\n        {\n          error: `Cannot retry a run whose outcome is ${instance.outcome}. Rerun the specific failed step instead.`,\n          code: 'WORKFLOW_RUN_OUTCOME_NOT_RETRYABLE',\n        },\n        { status: 400 }\n      )\n    }\n\n    // Check if instance can be retried\n    if (instance.status !== 'FAILED') {\n      return NextResponse.json(\n        {\n          error: `Cannot retry workflow in ${instance.status} status. Only FAILED workflows can be retried.`,\n        },\n        { status: 400 }\n      )\n    }\n\n    const previousErrorMessage = instance.errorMessage\n    const previousErrorDetails = instance.errorDetails\n\n    instance.status = 'RUNNING'\n    instance.retryCount = (instance.retryCount || 0) + 1\n    instance.errorMessage = null\n    instance.errorDetails = null\n    instance.updatedAt = new Date()\n\n    await em.flush()\n\n    let result\n    try {\n      result = await workflowExecutor.executeWorkflow(em, container, instance.id)\n    } catch (executionError) {\n      instance.status = 'FAILED'\n      instance.errorMessage = previousErrorMessage\n      instance.errorDetails = previousErrorDetails\n      instance.updatedAt = new Date()\n      await em.flush()\n      throw executionError\n    }\n\n    await em.refresh(instance)\n\n    return NextResponse.json({\n      data: {\n        instance,\n        execution: result,\n      },\n      message: 'Workflow retry initiated successfully',\n    })\n  } catch (error) {\n    logger.error('Error retrying workflow instance', { err: error })\n\n    // Handle specific errors\n    if (error instanceof workflowExecutor.WorkflowExecutionError) {\n      return NextResponse.json(\n        { error: error.message },\n        { status: 400 }\n      )\n    }\n\n    return NextResponse.json(\n      { error: 'Failed to retry workflow instance' },\n      { status: 500 }\n    )\n  }\n}\n\nexport const openApi = {\n  methods: {\n    POST: {\n      summary: 'Retry failed workflow instance',\n      description: 'Retry a failed workflow instance from its current step. The workflow will be reset to RUNNING status and execution will continue.',\n      tags: ['Workflows'],\n      params: z.object({\n        id: z.string().uuid(),\n      }),\n      responses: [\n        {\n          status: 200,\n          description: 'Workflow retry initiated successfully',\n          schema: z.object({\n            data: z.object({\n              instance: workflowInstanceResponseSchema,\n              execution: workflowExecutionResultSchema,\n            }),\n            message: z.string(),\n          }),\n        },\n        {\n          status: 400,\n          description: 'Bad request - Workflow cannot be retried in its current status or with its current outcome, or execution error',\n          schema: z.object({ error: z.string(), code: z.string().optional() }),\n        },\n        {\n          status: 401,\n          description: 'Unauthorized',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 403,\n          description: 'Forbidden - Insufficient permissions',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 404,\n          description: 'Workflow instance not found',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 500,\n          description: 'Internal server error',\n          schema: z.object({ error: z.string() }),\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAOA,SAAsB,oBAAoB;AAC1C,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,6BAA6B;AACtC,SAAS,wBAAwB;AACjC,YAAY,sBAAsB;AAClC,SAAS,6BAA6B;AACtC,SAAS,gCAAgC,qCAAqC;AAC9E,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,2BAA2B;AAC/C;AAaA,eAAsB,KACpB,SACA,SACA;AACA,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAC7B,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,OAAO,cAAc,KAAK;AAEjD,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,yCAAyC;AAAA,QAClD,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,gBAAgB,MAAM,YAAY;AAAA,MACtC,KAAK;AAAA,MACL,CAAC,2BAA2B;AAAA,MAC5B;AAAA,QACE;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,eAAe;AAClB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,2BAA2B;AAAA,QACpC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,sBAAsB,IAAI,kBAAkB;AAAA,MACjE,IAAI,OAAO;AAAA,MACX;AAAA,MACA;AAAA,IACF,CAAC;AAED,QAAI,CAAC,UAAU;AACb,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,8BAA8B;AAAA,QACvC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAOA,QAAI,SAAS,WAAW,QAAQ,CAAC,sBAAsB,SAAS,OAAO,GAAG;AACxE,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO,uCAAuC,SAAS,OAAO;AAAA,UAC9D,MAAM;AAAA,QACR;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,QAAI,SAAS,WAAW,UAAU;AAChC,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO,4BAA4B,SAAS,MAAM;AAAA,QACpD;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,uBAAuB,SAAS;AACtC,UAAM,uBAAuB,SAAS;AAEtC,aAAS,SAAS;AAClB,aAAS,cAAc,SAAS,cAAc,KAAK;AACnD,aAAS,eAAe;AACxB,aAAS,eAAe;AACxB,aAAS,YAAY,oBAAI,KAAK;AAE9B,UAAM,GAAG,MAAM;AAEf,QAAI;AACJ,QAAI;AACF,eAAS,MAAM,iBAAiB,gBAAgB,IAAI,WAAW,SAAS,EAAE;AAAA,IAC5E,SAAS,gBAAgB;AACvB,eAAS,SAAS;AAClB,eAAS,eAAe;AACxB,eAAS,eAAe;AACxB,eAAS,YAAY,oBAAI,KAAK;AAC9B,YAAM,GAAG,MAAM;AACf,YAAM;AAAA,IACR;AAEA,UAAM,GAAG,QAAQ,QAAQ;AAEzB,WAAO,aAAa,KAAK;AAAA,MACvB,MAAM;AAAA,QACJ;AAAA,QACA,WAAW;AAAA,MACb;AAAA,MACA,SAAS;AAAA,IACX,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,MAAM,oCAAoC,EAAE,KAAK,MAAM,CAAC;AAG/D,QAAI,iBAAiB,iBAAiB,wBAAwB;AAC5D,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,MAAM,QAAQ;AAAA,QACvB,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,oCAAoC;AAAA,MAC7C,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,MAAM,CAAC,WAAW;AAAA,MAClB,QAAQ,EAAE,OAAO;AAAA,QACf,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,MACtB,CAAC;AAAA,MACD,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,MAAM,EAAE,OAAO;AAAA,cACb,UAAU;AAAA,cACV,WAAW;AAAA,YACb,CAAC;AAAA,YACD,SAAS,EAAE,OAAO;AAAA,UACpB,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AAAA,QACrE;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }