@open-mercato/core 0.7.1-develop.7193.1.910a5b0a1e → 0.7.1-develop.7194.1.ab4fc81f82

package/dist/modules/workflows/api/instances/[id]/step-through/route.js

@@ -0,0 +1,148 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { resolveOrganizationScopeFilter } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
+import { WorkflowInstance } from "../../../../data/entities.js";
+import * as workflowExecutor from "../../../../lib/workflow-executor.js";
+import { logWorkflowEvent } from "../../../../lib/event-logger.js";
+import {
+  STEP_THROUGH_RELEASED_EVENT_TYPE,
+  isStepThroughArmed,
+  releaseStepThrough
+} from "../../../../lib/step-through.js";
+import { workflowsTag, workflowErrorSchema } from "../../../openapi.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("workflows");
+const metadata = {
+  requireAuth: true,
+  requireFeatures: ["workflows.definitions.test_run"]
+};
+const stepThroughInputSchema = z.object({
+  action: z.enum(["continue", "stop"])
+});
+async function POST(request, context) {
+  try {
+    const params = await context.params;
+    const container = await createRequestContainer();
+    const em = container.resolve("em");
+    const auth = await getAuthFromRequest(request);
+    if (!auth?.sub) {
+      return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    }
+    const scope = await resolveOrganizationScopeForRequest({ container, auth, request });
+    const tenantId = auth.tenantId;
+    const organizationId = scope?.selectedId ?? auth.orgId ?? null;
+    const orgFilter = resolveOrganizationScopeFilter(scope, auth);
+    if (!tenantId) {
+      return NextResponse.json({ error: "Missing tenant context" }, { status: 400 });
+    }
+    const rbacService = container.resolve("rbacService");
+    const allowed = await rbacService.userHasAllFeatures(
+      auth.sub,
+      ["workflows.definitions.test_run"],
+      { tenantId, organizationId }
+    );
+    if (!allowed) {
+      return NextResponse.json({ error: "Insufficient permissions" }, { status: 403 });
+    }
+    const body = await request.json();
+    const validation = stepThroughInputSchema.safeParse(body);
+    if (!validation.success) {
+      return NextResponse.json(
+        { error: "Validation failed", details: validation.error.issues },
+        { status: 400 }
+      );
+    }
+    const instance = await em.findOne(WorkflowInstance, {
+      id: params.id,
+      tenantId,
+      ...orgFilter.where
+    });
+    if (!instance) {
+      return NextResponse.json({ error: "Workflow instance not found" }, { status: 404 });
+    }
+    if (!isStepThroughArmed(instance)) {
+      return NextResponse.json(
+        { error: "This instance is not running in step-through mode" },
+        { status: 400 }
+      );
+    }
+    if (validation.data.action === "stop") {
+      instance.metadata = { ...instance.metadata || {}, stepThrough: null };
+      instance.updatedAt = /* @__PURE__ */ new Date();
+      await em.flush();
+    } else {
+      instance.metadata = {
+        ...instance.metadata || {},
+        stepThrough: releaseStepThrough(instance.currentStepId)
+      };
+      instance.updatedAt = /* @__PURE__ */ new Date();
+      await em.flush();
+      await logWorkflowEvent(em, {
+        workflowInstanceId: instance.id,
+        eventType: STEP_THROUGH_RELEASED_EVENT_TYPE,
+        eventData: { stepId: instance.currentStepId },
+        userId: auth.sub,
+        tenantId,
+        organizationId: instance.organizationId
+      });
+    }
+    if (instance.status === "PAUSED") {
+      instance.status = "RUNNING";
+      instance.pausedAt = null;
+      instance.updatedAt = /* @__PURE__ */ new Date();
+      await em.flush();
+    }
+    const result = await workflowExecutor.executeWorkflow(em, container, instance.id, {
+      userId: auth.sub
+    });
+    return NextResponse.json({
+      data: {
+        instanceId: instance.id,
+        status: result.status,
+        currentStep: result.currentStep,
+        stepThrough: instance.metadata?.stepThrough ?? null
+      }
+    });
+  } catch (error) {
+    logger.error("Error advancing step-through run", { err: error });
+    return NextResponse.json({ error: "Failed to advance step-through run" }, { status: 500 });
+  }
+}
+const openApi = {
+  tag: workflowsTag,
+  summary: "Step-through control",
+  pathParams: z.object({ id: z.string().uuid() }),
+  methods: {
+    POST: {
+      summary: "Continue one step, or stop stepping",
+      description: "Releases exactly the step the instance is currently parked on and resumes execution, or clears step-through so the run finishes on its own. To abort the run, use the cancel endpoint.",
+      requestBody: { schema: stepThroughInputSchema, example: { action: "continue" } },
+      responses: [
+        {
+          status: 200,
+          description: "The run advanced",
+          schema: z.object({
+            data: z.object({
+              instanceId: z.string(),
+              status: z.string(),
+              currentStep: z.string(),
+              stepThrough: z.object({ enabled: z.literal(true), releaseStepId: z.string().nullable().optional() }).nullable()
+            })
+          })
+        },
+        { status: 400, description: "Not a step-through run, or malformed payload", schema: workflowErrorSchema },
+        { status: 403, description: "Insufficient permissions", schema: workflowErrorSchema },
+        { status: 404, description: "Workflow instance not found", schema: workflowErrorSchema }
+      ]
+    }
+  }
+};
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/workflows/api/instances/[id]/step-through/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/workflows/api/instances/%5Bid%5D/step-through/route.ts"],
+  "sourcesContent": ["/**\n * Step-through control API (spec section 8.2)\n *\n * Endpoint:\n * - POST /api/workflows/instances/[id]/step-through - continue one step, or\n *   stop stepping and let the run finish on its own.\n *\n * \"Abort\" is deliberately NOT here: cancelling a run is already\n * `POST /api/workflows/instances/[id]/cancel`, and a second way to cancel would\n * be a second place to get the compensation semantics wrong.\n *\n * The release is a token for exactly ONE step id, minted server-side from the\n * instance's CURRENT step \u2014 never from the request body \u2014 so a client cannot\n * release a step the run is not sitting on.\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { WorkflowInstance } from '../../../../data/entities'\nimport * as workflowExecutor from '../../../../lib/workflow-executor'\nimport { logWorkflowEvent } from '../../../../lib/event-logger'\nimport {\n  STEP_THROUGH_RELEASED_EVENT_TYPE,\n  isStepThroughArmed,\n  releaseStepThrough,\n} from '../../../../lib/step-through'\nimport { workflowsTag, workflowErrorSchema } from '../../../openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows')\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.definitions.test_run'],\n}\n\nconst stepThroughInputSchema = z.object({\n  action: z.enum(['continue', 'stop']),\n})\n\ninterface RouteContext {\n  params: Promise<{ id: string }>\n}\n\nexport async function POST(request: NextRequest, context: RouteContext) {\n  try {\n    const params = await context.params\n    const container = await createRequestContainer()\n    const em = container.resolve('em') as EntityManager\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth?.sub) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = scope?.selectedId ?? auth.orgId ?? null\n    const orgFilter = resolveOrganizationScopeFilter(scope, auth)\n\n    if (!tenantId) {\n      return NextResponse.json({ error: 'Missing tenant context' }, { status: 400 })\n    }\n\n    const rbacService = container.resolve('rbacService') as {\n      userHasAllFeatures: (\n        userId: string,\n        features: string[],\n        scope: { tenantId: string | null; organizationId: string | null },\n      ) => Promise<boolean>\n    }\n    const allowed = await rbacService.userHasAllFeatures(\n      auth.sub,\n      ['workflows.definitions.test_run'],\n      { tenantId, organizationId },\n    )\n    if (!allowed) {\n      return NextResponse.json({ error: 'Insufficient permissions' }, { status: 403 })\n    }\n\n    const body = await request.json()\n    const validation = stepThroughInputSchema.safeParse(body)\n    if (!validation.success) {\n      return NextResponse.json(\n        { error: 'Validation failed', details: validation.error.issues },\n        { status: 400 },\n      )\n    }\n\n    const instance = await em.findOne(WorkflowInstance, {\n      id: params.id,\n      tenantId,\n      ...orgFilter.where,\n    })\n\n    if (!instance) {\n      return NextResponse.json({ error: 'Workflow instance not found' }, { status: 404 })\n    }\n\n    if (!isStepThroughArmed(instance)) {\n      return NextResponse.json(\n        { error: 'This instance is not running in step-through mode' },\n        { status: 400 },\n      )\n    }\n\n    if (validation.data.action === 'stop') {\n      instance.metadata = { ...(instance.metadata || {}), stepThrough: null }\n      instance.updatedAt = new Date()\n      await em.flush()\n    } else {\n      // The token is minted from the instance's own cursor, so a client can only\n      // ever release the step the run is actually parked on.\n      instance.metadata = {\n        ...(instance.metadata || {}),\n        stepThrough: releaseStepThrough(instance.currentStepId),\n      }\n      instance.updatedAt = new Date()\n      await em.flush()\n\n      await logWorkflowEvent(em, {\n        workflowInstanceId: instance.id,\n        eventType: STEP_THROUGH_RELEASED_EVENT_TYPE,\n        eventData: { stepId: instance.currentStepId },\n        userId: auth.sub,\n        tenantId,\n        organizationId: instance.organizationId,\n      })\n    }\n\n    // The instance was parked with PAUSED; every resume path flips it back to\n    // RUNNING before re-entering, and this one is no different.\n    if (instance.status === 'PAUSED') {\n      instance.status = 'RUNNING'\n      instance.pausedAt = null\n      instance.updatedAt = new Date()\n      await em.flush()\n    }\n\n    const result = await workflowExecutor.executeWorkflow(em, container, instance.id, {\n      userId: auth.sub,\n    })\n\n    return NextResponse.json({\n      data: {\n        instanceId: instance.id,\n        status: result.status,\n        currentStep: result.currentStep,\n        stepThrough: instance.metadata?.stepThrough ?? null,\n      },\n    })\n  } catch (error) {\n    logger.error('Error advancing step-through run', { err: error })\n    return NextResponse.json({ error: 'Failed to advance step-through run' }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: workflowsTag,\n  summary: 'Step-through control',\n  pathParams: z.object({ id: z.string().uuid() }),\n  methods: {\n    POST: {\n      summary: 'Continue one step, or stop stepping',\n      description:\n        'Releases exactly the step the instance is currently parked on and resumes execution, or clears step-through so the run finishes on its own. To abort the run, use the cancel endpoint.',\n      requestBody: { schema: stepThroughInputSchema, example: { action: 'continue' } },\n      responses: [\n        {\n          status: 200,\n          description: 'The run advanced',\n          schema: z.object({\n            data: z.object({\n              instanceId: z.string(),\n              status: z.string(),\n              currentStep: z.string(),\n              stepThrough: z\n                .object({ enabled: z.literal(true), releaseStepId: z.string().nullable().optional() })\n                .nullable(),\n            }),\n          }),\n        },\n        { status: 400, description: 'Not a step-through run, or malformed payload', schema: workflowErrorSchema },\n        { status: 403, description: 'Insufficient permissions', schema: workflowErrorSchema },\n        { status: 404, description: 'Workflow instance not found', schema: workflowErrorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAgBA,SAAsB,oBAAoB;AAC1C,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,sCAAsC;AAE/C,SAAS,wBAAwB;AACjC,YAAY,sBAAsB;AAClC,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,cAAc,2BAA2B;AAClD,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,gCAAgC;AACpD;AAEA,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,QAAQ,EAAE,KAAK,CAAC,YAAY,MAAM,CAAC;AACrC,CAAC;AAMD,eAAsB,KAAK,SAAsB,SAAuB;AACtE,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAC7B,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM,KAAK;AACd,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,UAAM,YAAY,+BAA+B,OAAO,IAAI;AAE5D,QAAI,CAAC,UAAU;AACb,aAAO,aAAa,KAAK,EAAE,OAAO,yBAAyB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/E;AAEA,UAAM,cAAc,UAAU,QAAQ,aAAa;AAOnD,UAAM,UAAU,MAAM,YAAY;AAAA,MAChC,KAAK;AAAA,MACL,CAAC,gCAAgC;AAAA,MACjC,EAAE,UAAU,eAAe;AAAA,IAC7B;AACA,QAAI,CAAC,SAAS;AACZ,aAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjF;AAEA,UAAM,OAAO,MAAM,QAAQ,KAAK;AAChC,UAAM,aAAa,uBAAuB,UAAU,IAAI;AACxD,QAAI,CAAC,WAAW,SAAS;AACvB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,qBAAqB,SAAS,WAAW,MAAM,OAAO;AAAA,QAC/D,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,GAAG,QAAQ,kBAAkB;AAAA,MAClD,IAAI,OAAO;AAAA,MACX;AAAA,MACA,GAAG,UAAU;AAAA,IACf,CAAC;AAED,QAAI,CAAC,UAAU;AACb,aAAO,aAAa,KAAK,EAAE,OAAO,8BAA8B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpF;AAEA,QAAI,CAAC,mBAAmB,QAAQ,GAAG;AACjC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,oDAAoD;AAAA,QAC7D,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,QAAI,WAAW,KAAK,WAAW,QAAQ;AACrC,eAAS,WAAW,EAAE,GAAI,SAAS,YAAY,CAAC,GAAI,aAAa,KAAK;AACtE,eAAS,YAAY,oBAAI,KAAK;AAC9B,YAAM,GAAG,MAAM;AAAA,IACjB,OAAO;AAGL,eAAS,WAAW;AAAA,QAClB,GAAI,SAAS,YAAY,CAAC;AAAA,QAC1B,aAAa,mBAAmB,SAAS,aAAa;AAAA,MACxD;AACA,eAAS,YAAY,oBAAI,KAAK;AAC9B,YAAM,GAAG,MAAM;AAEf,YAAM,iBAAiB,IAAI;AAAA,QACzB,oBAAoB,SAAS;AAAA,QAC7B,WAAW;AAAA,QACX,WAAW,EAAE,QAAQ,SAAS,cAAc;AAAA,QAC5C,QAAQ,KAAK;AAAA,QACb;AAAA,QACA,gBAAgB,SAAS;AAAA,MAC3B,CAAC;AAAA,IACH;AAIA,QAAI,SAAS,WAAW,UAAU;AAChC,eAAS,SAAS;AAClB,eAAS,WAAW;AACpB,eAAS,YAAY,oBAAI,KAAK;AAC9B,YAAM,GAAG,MAAM;AAAA,IACjB;AAEA,UAAM,SAAS,MAAM,iBAAiB,gBAAgB,IAAI,WAAW,SAAS,IAAI;AAAA,MAChF,QAAQ,KAAK;AAAA,IACf,CAAC;AAED,WAAO,aAAa,KAAK;AAAA,MACvB,MAAM;AAAA,QACJ,YAAY,SAAS;AAAA,QACrB,QAAQ,OAAO;AAAA,QACf,aAAa,OAAO;AAAA,QACpB,aAAa,SAAS,UAAU,eAAe;AAAA,MACjD;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,MAAM,oCAAoC,EAAE,KAAK,MAAM,CAAC;AAC/D,WAAO,aAAa,KAAK,EAAE,OAAO,qCAAqC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3F;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,EAC9C,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aACE;AAAA,MACF,aAAa,EAAE,QAAQ,wBAAwB,SAAS,EAAE,QAAQ,WAAW,EAAE;AAAA,MAC/E,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,MAAM,EAAE,OAAO;AAAA,cACb,YAAY,EAAE,OAAO;AAAA,cACrB,QAAQ,EAAE,OAAO;AAAA,cACjB,aAAa,EAAE,OAAO;AAAA,cACtB,aAAa,EACV,OAAO,EAAE,SAAS,EAAE,QAAQ,IAAI,GAAG,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,EACpF,SAAS;AAAA,YACd,CAAC;AAAA,UACH,CAAC;AAAA,QACH;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,gDAAgD,QAAQ,oBAAoB;AAAA,QACxG,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,oBAAoB;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,+BAA+B,QAAQ,oBAAoB;AAAA,MACzF;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/workflows/api/instances/[id]/steps/route.js

@@ -0,0 +1,123 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { resolveOrganizationScopeFilter } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
+import { WorkflowInstance, StepInstance } from "../../../../data/entities.js";
+import { workflowStepInstanceRowSchema, paginationSchema } from "../../../openapi.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("workflows");
+const metadata = {
+  requireAuth: true,
+  requireFeatures: ["workflows.instances.view"]
+};
+const STEP_INSTANCE_PAGE_SIZE_MAX = 100;
+function parsePositiveInt(raw, fallback) {
+  if (raw === null) return fallback;
+  const parsed = Number.parseInt(raw, 10);
+  if (!Number.isFinite(parsed)) return fallback;
+  return parsed;
+}
+async function GET(request, context) {
+  try {
+    const params = await context.params;
+    const container = await createRequestContainer();
+    const em = container.resolve("em");
+    const auth = await getAuthFromRequest(request);
+    if (!auth) {
+      return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    }
+    const scope = await resolveOrganizationScopeForRequest({ container, auth, request });
+    const tenantId = auth.tenantId;
+    const orgFilter = resolveOrganizationScopeFilter(scope, auth);
+    if (!tenantId) {
+      return NextResponse.json({ error: "Missing tenant context" }, { status: 400 });
+    }
+    const instance = await em.findOne(WorkflowInstance, {
+      id: params.id,
+      tenantId,
+      ...orgFilter.where
+    });
+    if (!instance) {
+      return NextResponse.json({ error: "Workflow instance not found" }, { status: 404 });
+    }
+    const { searchParams } = new URL(request.url);
+    const requestedLimit = parsePositiveInt(searchParams.get("limit"), STEP_INSTANCE_PAGE_SIZE_MAX);
+    const limit = Math.min(Math.max(requestedLimit, 1), STEP_INSTANCE_PAGE_SIZE_MAX);
+    const offset = Math.max(parsePositiveInt(searchParams.get("offset"), 0), 0);
+    const [steps, total] = await em.findAndCount(
+      StepInstance,
+      {
+        workflowInstanceId: params.id,
+        tenantId,
+        ...orgFilter.where
+      },
+      {
+        orderBy: [{ enteredAt: "ASC" }, { createdAt: "ASC" }],
+        limit,
+        offset
+      }
+    );
+    return NextResponse.json({
+      data: steps,
+      pagination: {
+        total,
+        limit,
+        offset,
+        hasMore: offset + limit < total
+      }
+    });
+  } catch (error) {
+    logger.error("Error getting workflow step instances", { err: error });
+    return NextResponse.json({ error: "Failed to get workflow step instances" }, { status: 500 });
+  }
+}
+const openApi = {
+  methods: {
+    GET: {
+      summary: "Get workflow instance step executions",
+      description: "List the step executions recorded for a workflow instance, including per-step input, output, error payload, duration and attempt count.",
+      tags: ["Workflows"],
+      params: z.object({
+        id: z.string().uuid()
+      }),
+      query: z.object({
+        limit: z.number().int().positive().max(STEP_INSTANCE_PAGE_SIZE_MAX).default(STEP_INSTANCE_PAGE_SIZE_MAX).optional(),
+        offset: z.number().int().min(0).default(0).optional()
+      }),
+      responses: [
+        {
+          status: 200,
+          description: "List of step executions",
+          schema: z.object({
+            data: z.array(workflowStepInstanceRowSchema),
+            pagination: paginationSchema
+          })
+        },
+        {
+          status: 401,
+          description: "Unauthorized",
+          schema: z.object({ error: z.string() })
+        },
+        {
+          status: 404,
+          description: "Workflow instance not found",
+          schema: z.object({ error: z.string() })
+        },
+        {
+          status: 500,
+          description: "Internal server error",
+          schema: z.object({ error: z.string() })
+        }
+      ]
+    }
+  }
+};
+export {
+  GET,
+  STEP_INSTANCE_PAGE_SIZE_MAX,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/workflows/api/instances/[id]/steps/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/workflows/api/instances/%5Bid%5D/steps/route.ts"],
+  "sourcesContent": ["/**\n * Workflow Step Instances API (spec \u00A78.3)\n *\n * Endpoint:\n * - GET /api/workflows/instances/[id]/steps - Per-step execution record\n *\n * `StepInstance` has always recorded `inputData`, `outputData`, `errorData`,\n * `executionTimeMs` and `retryCount`, but until this route no API or page read\n * any of it. The per-step I/O inspector and the run Gantt both need it, so the\n * read surface comes first.\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { WorkflowInstance, StepInstance } from '../../../../data/entities'\nimport { workflowStepInstanceRowSchema, paginationSchema } from '../../../openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows')\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.instances.view'],\n}\n\n/**\n * Platform cap: no list surface pages above 100 rows. A run with more step\n * executions than this reports `pagination.hasMore` so the caller can page\n * rather than silently rendering a truncated timeline.\n */\nexport const STEP_INSTANCE_PAGE_SIZE_MAX = 100\n\ninterface RouteContext {\n  params: Promise<{\n    id: string\n  }>\n}\n\nfunction parsePositiveInt(raw: string | null, fallback: number): number {\n  if (raw === null) return fallback\n  const parsed = Number.parseInt(raw, 10)\n  if (!Number.isFinite(parsed)) return fallback\n  return parsed\n}\n\n/**\n * GET /api/workflows/instances/[id]/steps\n */\nexport async function GET(request: NextRequest, context: RouteContext) {\n  try {\n    const params = await context.params\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const orgFilter = resolveOrganizationScopeFilter(scope, auth)\n\n    if (!tenantId) {\n      return NextResponse.json({ error: 'Missing tenant context' }, { status: 400 })\n    }\n\n    const instance = await em.findOne(WorkflowInstance, {\n      id: params.id,\n      tenantId,\n      ...orgFilter.where,\n    })\n\n    if (!instance) {\n      return NextResponse.json({ error: 'Workflow instance not found' }, { status: 404 })\n    }\n\n    const { searchParams } = new URL(request.url)\n    const requestedLimit = parsePositiveInt(searchParams.get('limit'), STEP_INSTANCE_PAGE_SIZE_MAX)\n    const limit = Math.min(Math.max(requestedLimit, 1), STEP_INSTANCE_PAGE_SIZE_MAX)\n    const offset = Math.max(parsePositiveInt(searchParams.get('offset'), 0), 0)\n\n    // Ordered by when the step was entered so the Gantt and the overlay read the\n    // run in execution order. `createdAt` is the tiebreaker because a step\n    // instance is persisted before `enteredAt` is stamped on some paths.\n    const [steps, total] = await em.findAndCount(\n      StepInstance,\n      {\n        workflowInstanceId: params.id,\n        tenantId,\n        ...orgFilter.where,\n      },\n      {\n        orderBy: [{ enteredAt: 'ASC' }, { createdAt: 'ASC' }],\n        limit,\n        offset,\n      }\n    )\n\n    return NextResponse.json({\n      data: steps,\n      pagination: {\n        total,\n        limit,\n        offset,\n        hasMore: offset + limit < total,\n      },\n    })\n  } catch (error) {\n    logger.error('Error getting workflow step instances', { err: error })\n    return NextResponse.json({ error: 'Failed to get workflow step instances' }, { status: 500 })\n  }\n}\n\nexport const openApi = {\n  methods: {\n    GET: {\n      summary: 'Get workflow instance step executions',\n      description:\n        'List the step executions recorded for a workflow instance, including per-step input, output, error payload, duration and attempt count.',\n      tags: ['Workflows'],\n      params: z.object({\n        id: z.string().uuid(),\n      }),\n      query: z.object({\n        limit: z.number().int().positive().max(STEP_INSTANCE_PAGE_SIZE_MAX).default(STEP_INSTANCE_PAGE_SIZE_MAX).optional(),\n        offset: z.number().int().min(0).default(0).optional(),\n      }),\n      responses: [\n        {\n          status: 200,\n          description: 'List of step executions',\n          schema: z.object({\n            data: z.array(workflowStepInstanceRowSchema),\n            pagination: paginationSchema,\n          }),\n        },\n        {\n          status: 401,\n          description: 'Unauthorized',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 404,\n          description: 'Workflow instance not found',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 500,\n          description: 'Internal server error',\n          schema: z.object({ error: z.string() }),\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAYA,SAAsB,oBAAoB;AAC1C,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,sCAAsC;AAC/C,SAAS,kBAAkB,oBAAoB;AAC/C,SAAS,+BAA+B,wBAAwB;AAChE,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,0BAA0B;AAC9C;AAOO,MAAM,8BAA8B;AAQ3C,SAAS,iBAAiB,KAAoB,UAA0B;AACtE,MAAI,QAAQ,KAAM,QAAO;AACzB,QAAM,SAAS,OAAO,SAAS,KAAK,EAAE;AACtC,MAAI,CAAC,OAAO,SAAS,MAAM,EAAG,QAAO;AACrC,SAAO;AACT;AAKA,eAAsB,IAAI,SAAsB,SAAuB;AACrE,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAC7B,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,YAAY,+BAA+B,OAAO,IAAI;AAE5D,QAAI,CAAC,UAAU;AACb,aAAO,aAAa,KAAK,EAAE,OAAO,yBAAyB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/E;AAEA,UAAM,WAAW,MAAM,GAAG,QAAQ,kBAAkB;AAAA,MAClD,IAAI,OAAO;AAAA,MACX;AAAA,MACA,GAAG,UAAU;AAAA,IACf,CAAC;AAED,QAAI,CAAC,UAAU;AACb,aAAO,aAAa,KAAK,EAAE,OAAO,8BAA8B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpF;AAEA,UAAM,EAAE,aAAa,IAAI,IAAI,IAAI,QAAQ,GAAG;AAC5C,UAAM,iBAAiB,iBAAiB,aAAa,IAAI,OAAO,GAAG,2BAA2B;AAC9F,UAAM,QAAQ,KAAK,IAAI,KAAK,IAAI,gBAAgB,CAAC,GAAG,2BAA2B;AAC/E,UAAM,SAAS,KAAK,IAAI,iBAAiB,aAAa,IAAI,QAAQ,GAAG,CAAC,GAAG,CAAC;AAK1E,UAAM,CAAC,OAAO,KAAK,IAAI,MAAM,GAAG;AAAA,MAC9B;AAAA,MACA;AAAA,QACE,oBAAoB,OAAO;AAAA,QAC3B;AAAA,QACA,GAAG,UAAU;AAAA,MACf;AAAA,MACA;AAAA,QACE,SAAS,CAAC,EAAE,WAAW,MAAM,GAAG,EAAE,WAAW,MAAM,CAAC;AAAA,QACpD;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,WAAO,aAAa,KAAK;AAAA,MACvB,MAAM;AAAA,MACN,YAAY;AAAA,QACV;AAAA,QACA;AAAA,QACA;AAAA,QACA,SAAS,SAAS,QAAQ;AAAA,MAC5B;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,MAAM,yCAAyC,EAAE,KAAK,MAAM,CAAC;AACpE,WAAO,aAAa,KAAK,EAAE,OAAO,wCAAwC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9F;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aACE;AAAA,MACF,MAAM,CAAC,WAAW;AAAA,MAClB,QAAQ,EAAE,OAAO;AAAA,QACf,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,MACtB,CAAC;AAAA,MACD,OAAO,EAAE,OAAO;AAAA,QACd,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,2BAA2B,EAAE,QAAQ,2BAA2B,EAAE,SAAS;AAAA,QAClH,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,MACtD,CAAC;AAAA,MACD,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,MAAM,EAAE,MAAM,6BAA6B;AAAA,YAC3C,YAAY;AAAA,UACd,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/workflows/api/instances/[id]/would-do/route.js

@@ -0,0 +1,172 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { resolveOrganizationScopeFilter } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
+import { WorkflowInstance, WorkflowEvent, StepInstance } from "../../../../data/entities.js";
+import { DRY_RUN_EVENT_TYPES, buildWouldDoReport } from "../../../../lib/dry-run.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("workflows");
+const metadata = {
+  requireAuth: true,
+  requireFeatures: ["workflows.instances.view"]
+};
+const WOULD_DO_PAGE_SIZE_MAX = 100;
+const REPORTED_EVENT_TYPES = [
+  DRY_RUN_EVENT_TYPES.activitySimulated,
+  DRY_RUN_EVENT_TYPES.activityRefused,
+  DRY_RUN_EVENT_TYPES.userTaskSimulated,
+  DRY_RUN_EVENT_TYPES.businessRuleActionsSuppressed
+];
+function parsePositiveInt(raw, fallback) {
+  if (raw === null) return fallback;
+  const parsed = Number.parseInt(raw, 10);
+  if (!Number.isFinite(parsed)) return fallback;
+  return parsed;
+}
+async function GET(request, context) {
+  try {
+    const params = await context.params;
+    const container = await createRequestContainer();
+    const em = container.resolve("em");
+    const auth = await getAuthFromRequest(request);
+    if (!auth) {
+      return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    }
+    const scope = await resolveOrganizationScopeForRequest({ container, auth, request });
+    const tenantId = auth.tenantId;
+    const orgFilter = resolveOrganizationScopeFilter(scope, auth);
+    if (!tenantId) {
+      return NextResponse.json({ error: "Missing tenant context" }, { status: 400 });
+    }
+    const instance = await em.findOne(WorkflowInstance, {
+      id: params.id,
+      tenantId,
+      ...orgFilter.where
+    });
+    if (!instance) {
+      return NextResponse.json({ error: "Workflow instance not found" }, { status: 404 });
+    }
+    if (!instance.isDryRun) {
+      return NextResponse.json({
+        isDryRun: false,
+        entries: [],
+        stoppedByRefusal: false,
+        pagination: { total: 0, limit: 0, offset: 0, hasMore: false }
+      });
+    }
+    const { searchParams } = new URL(request.url);
+    const requestedLimit = parsePositiveInt(searchParams.get("limit"), WOULD_DO_PAGE_SIZE_MAX);
+    const limit = Math.min(Math.max(requestedLimit, 1), WOULD_DO_PAGE_SIZE_MAX);
+    const offset = Math.max(parsePositiveInt(searchParams.get("offset"), 0), 0);
+    const [events, total] = await em.findAndCount(
+      WorkflowEvent,
+      {
+        workflowInstanceId: params.id,
+        tenantId,
+        ...orgFilter.where,
+        eventType: { $in: REPORTED_EVENT_TYPES }
+      },
+      {
+        // `id` breaks ties: two entries can share a millisecond, and a report
+        // that reorders between two reads is not evidence.
+        orderBy: [{ occurredAt: "ASC" }, { id: "ASC" }],
+        limit,
+        offset
+      }
+    );
+    const stepInstanceIds = Array.from(
+      new Set(
+        events.map((event) => event.stepInstanceId).filter((id) => !!id)
+      )
+    );
+    const stepInstances = stepInstanceIds.length ? await em.find(StepInstance, {
+      id: { $in: stepInstanceIds },
+      tenantId,
+      ...orgFilter.where
+    }) : [];
+    const stepIdByInstanceId = new Map(
+      stepInstances.map((step) => [step.id, step.stepId])
+    );
+    const sourceEvents = events.map((event) => ({
+      // `WorkflowEvent.id` is a `bigint` column, and MikroORM v7's `BigIntType`
+      // hydrates it as a native JS `bigint` (its default mode) despite the
+      // `string` annotation. Lifting it out of the entity into a plain object
+      // bypasses the ORM serializer that would have stringified it, so
+      // `NextResponse.json` would throw "Do not know how to serialize a BigInt"
+      // and the catch below would report it as a generic 500. Same fix as
+      // `api/events/route.ts`.
+      id: String(event.id),
+      eventType: event.eventType,
+      stepId: event.stepInstanceId ? stepIdByInstanceId.get(event.stepInstanceId) ?? null : null,
+      occurredAt: event.occurredAt,
+      eventData: event.eventData ?? null
+    }));
+    const report = buildWouldDoReport(sourceEvents);
+    return NextResponse.json({
+      isDryRun: true,
+      entries: report.entries,
+      stoppedByRefusal: report.stoppedByRefusal,
+      pagination: {
+        total,
+        limit,
+        offset,
+        hasMore: offset + limit < total
+      }
+    });
+  } catch (error) {
+    logger.error("Error building workflow would-do report", { err: error });
+    return NextResponse.json({ error: "Failed to build would-do report" }, { status: 500 });
+  }
+}
+const wouldDoEntrySchema = z.object({
+  id: z.string(),
+  kind: z.enum(["activity", "refusal", "userTask", "businessRule"]),
+  severity: z.enum(["error", "warning", "info"]),
+  stepId: z.string().nullable(),
+  occurredAt: z.string(),
+  subject: z.string(),
+  detail: z.record(z.string(), z.unknown())
+});
+const openApi = {
+  methods: {
+    GET: {
+      summary: `Get a dry run's "Would do" report`,
+      description: "List every side effect a dry run suppressed, in execution order: simulated activities with their would-do output, activity types that refused simulation and stopped the run, user tasks that were not raised, and business rules whose action arm was withheld. A real (non-dry) run answers with an empty report.",
+      tags: ["Workflows"],
+      params: z.object({ id: z.string().uuid() }),
+      query: z.object({
+        limit: z.number().int().positive().max(WOULD_DO_PAGE_SIZE_MAX).optional(),
+        offset: z.number().int().min(0).optional()
+      }),
+      responses: [
+        {
+          status: 200,
+          description: "The would-do report",
+          schema: z.object({
+            isDryRun: z.boolean(),
+            entries: z.array(wouldDoEntrySchema),
+            stoppedByRefusal: z.boolean(),
+            pagination: z.object({
+              total: z.number(),
+              limit: z.number(),
+              offset: z.number(),
+              hasMore: z.boolean()
+            })
+          })
+        },
+        { status: 401, description: "Unauthorized", schema: z.object({ error: z.string() }) },
+        { status: 404, description: "Workflow instance not found", schema: z.object({ error: z.string() }) },
+        { status: 500, description: "Internal server error", schema: z.object({ error: z.string() }) }
+      ]
+    }
+  }
+};
+export {
+  GET,
+  WOULD_DO_PAGE_SIZE_MAX,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/workflows/api/instances/[id]/would-do/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/workflows/api/instances/%5Bid%5D/would-do/route.ts"],
+  "sourcesContent": ["/**\n * Workflow \"Would do\" report API (spec section 8.2)\n *\n * Endpoint:\n * - GET /api/workflows/instances/[id]/would-do - the ordered list of every side\n *   effect a dry run suppressed.\n *\n * The report is DERIVED, never stored twice: a dry run writes its would-do\n * entries as ordinary `WorkflowEvent` rows, so the report inherits the run\n * views' tenant scoping, ordering and retention instead of owning a second\n * table that could disagree with the run log.\n *\n * A real run answers `{ isDryRun: false, entries: [] }` rather than 404 \u2014 the\n * caller asks \"what did this run suppress?\" and \"nothing, it was real\" is a\n * correct answer, not a missing resource.\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { WorkflowInstance, WorkflowEvent, StepInstance } from '../../../../data/entities'\nimport { DRY_RUN_EVENT_TYPES, buildWouldDoReport, type WouldDoSourceEvent } from '../../../../lib/dry-run'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows')\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.instances.view'],\n}\n\n/** Platform cap: no list surface pages above 100 rows. */\nexport const WOULD_DO_PAGE_SIZE_MAX = 100\n\nconst REPORTED_EVENT_TYPES = [\n  DRY_RUN_EVENT_TYPES.activitySimulated,\n  DRY_RUN_EVENT_TYPES.activityRefused,\n  DRY_RUN_EVENT_TYPES.userTaskSimulated,\n  DRY_RUN_EVENT_TYPES.businessRuleActionsSuppressed,\n]\n\ninterface RouteContext {\n  params: Promise<{ id: string }>\n}\n\nfunction parsePositiveInt(raw: string | null, fallback: number): number {\n  if (raw === null) return fallback\n  const parsed = Number.parseInt(raw, 10)\n  if (!Number.isFinite(parsed)) return fallback\n  return parsed\n}\n\nexport async function GET(request: NextRequest, context: RouteContext) {\n  try {\n    const params = await context.params\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const orgFilter = resolveOrganizationScopeFilter(scope, auth)\n\n    if (!tenantId) {\n      return NextResponse.json({ error: 'Missing tenant context' }, { status: 400 })\n    }\n\n    const instance = await em.findOne(WorkflowInstance, {\n      id: params.id,\n      tenantId,\n      ...orgFilter.where,\n    })\n\n    if (!instance) {\n      return NextResponse.json({ error: 'Workflow instance not found' }, { status: 404 })\n    }\n\n    if (!instance.isDryRun) {\n      return NextResponse.json({\n        isDryRun: false,\n        entries: [],\n        stoppedByRefusal: false,\n        pagination: { total: 0, limit: 0, offset: 0, hasMore: false },\n      })\n    }\n\n    const { searchParams } = new URL(request.url)\n    const requestedLimit = parsePositiveInt(searchParams.get('limit'), WOULD_DO_PAGE_SIZE_MAX)\n    const limit = Math.min(Math.max(requestedLimit, 1), WOULD_DO_PAGE_SIZE_MAX)\n    const offset = Math.max(parsePositiveInt(searchParams.get('offset'), 0), 0)\n\n    const [events, total] = await em.findAndCount(\n      WorkflowEvent,\n      {\n        workflowInstanceId: params.id,\n        tenantId,\n        ...orgFilter.where,\n        eventType: { $in: REPORTED_EVENT_TYPES },\n      },\n      {\n        // `id` breaks ties: two entries can share a millisecond, and a report\n        // that reorders between two reads is not evidence.\n        orderBy: [{ occurredAt: 'ASC' }, { id: 'ASC' }],\n        limit,\n        offset,\n      }\n    )\n\n    // `WorkflowEvent` carries the step INSTANCE id; the report is read against\n    // the canvas, which addresses steps by their definition `stepId`. Resolving\n    // the handful of rows once here keeps the pure report builder free of the\n    // ORM and stops every consumer re-deriving the same join.\n    const stepInstanceIds = Array.from(\n      new Set(\n        events\n          .map((event: WorkflowEvent) => event.stepInstanceId)\n          .filter((id: string | null | undefined): id is string => !!id)\n      )\n    )\n    const stepInstances = stepInstanceIds.length\n      ? await em.find(StepInstance, {\n          id: { $in: stepInstanceIds },\n          tenantId,\n          ...orgFilter.where,\n        })\n      : []\n    const stepIdByInstanceId = new Map<string, string>(\n      stepInstances.map((step: StepInstance) => [step.id, step.stepId])\n    )\n\n    const sourceEvents: WouldDoSourceEvent[] = events.map((event: WorkflowEvent) => ({\n      // `WorkflowEvent.id` is a `bigint` column, and MikroORM v7's `BigIntType`\n      // hydrates it as a native JS `bigint` (its default mode) despite the\n      // `string` annotation. Lifting it out of the entity into a plain object\n      // bypasses the ORM serializer that would have stringified it, so\n      // `NextResponse.json` would throw \"Do not know how to serialize a BigInt\"\n      // and the catch below would report it as a generic 500. Same fix as\n      // `api/events/route.ts`.\n      id: String(event.id),\n      eventType: event.eventType,\n      stepId: event.stepInstanceId ? stepIdByInstanceId.get(event.stepInstanceId) ?? null : null,\n      occurredAt: event.occurredAt,\n      eventData: (event.eventData ?? null) as Record<string, unknown> | null,\n    }))\n\n    const report = buildWouldDoReport(sourceEvents)\n\n    return NextResponse.json({\n      isDryRun: true,\n      entries: report.entries,\n      stoppedByRefusal: report.stoppedByRefusal,\n      pagination: {\n        total,\n        limit,\n        offset,\n        hasMore: offset + limit < total,\n      },\n    })\n  } catch (error) {\n    logger.error('Error building workflow would-do report', { err: error })\n    return NextResponse.json({ error: 'Failed to build would-do report' }, { status: 500 })\n  }\n}\n\nconst wouldDoEntrySchema = z.object({\n  id: z.string(),\n  kind: z.enum(['activity', 'refusal', 'userTask', 'businessRule']),\n  severity: z.enum(['error', 'warning', 'info']),\n  stepId: z.string().nullable(),\n  occurredAt: z.string(),\n  subject: z.string(),\n  detail: z.record(z.string(), z.unknown()),\n})\n\nexport const openApi = {\n  methods: {\n    GET: {\n      summary: 'Get a dry run\\'s \"Would do\" report',\n      description:\n        'List every side effect a dry run suppressed, in execution order: simulated activities with their would-do output, activity types that refused simulation and stopped the run, user tasks that were not raised, and business rules whose action arm was withheld. A real (non-dry) run answers with an empty report.',\n      tags: ['Workflows'],\n      params: z.object({ id: z.string().uuid() }),\n      query: z.object({\n        limit: z.number().int().positive().max(WOULD_DO_PAGE_SIZE_MAX).optional(),\n        offset: z.number().int().min(0).optional(),\n      }),\n      responses: [\n        {\n          status: 200,\n          description: 'The would-do report',\n          schema: z.object({\n            isDryRun: z.boolean(),\n            entries: z.array(wouldDoEntrySchema),\n            stoppedByRefusal: z.boolean(),\n            pagination: z.object({\n              total: z.number(),\n              limit: z.number(),\n              offset: z.number(),\n              hasMore: z.boolean(),\n            }),\n          }),\n        },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n        { status: 404, description: 'Workflow instance not found', schema: z.object({ error: z.string() }) },\n        { status: 500, description: 'Internal server error', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAiBA,SAAsB,oBAAoB;AAC1C,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,sCAAsC;AAC/C,SAAS,kBAAkB,eAAe,oBAAoB;AAC9D,SAAS,qBAAqB,0BAAmD;AACjF,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,0BAA0B;AAC9C;AAGO,MAAM,yBAAyB;AAEtC,MAAM,uBAAuB;AAAA,EAC3B,oBAAoB;AAAA,EACpB,oBAAoB;AAAA,EACpB,oBAAoB;AAAA,EACpB,oBAAoB;AACtB;AAMA,SAAS,iBAAiB,KAAoB,UAA0B;AACtE,MAAI,QAAQ,KAAM,QAAO;AACzB,QAAM,SAAS,OAAO,SAAS,KAAK,EAAE;AACtC,MAAI,CAAC,OAAO,SAAS,MAAM,EAAG,QAAO;AACrC,SAAO;AACT;AAEA,eAAsB,IAAI,SAAsB,SAAuB;AACrE,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAC7B,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,YAAY,+BAA+B,OAAO,IAAI;AAE5D,QAAI,CAAC,UAAU;AACb,aAAO,aAAa,KAAK,EAAE,OAAO,yBAAyB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/E;AAEA,UAAM,WAAW,MAAM,GAAG,QAAQ,kBAAkB;AAAA,MAClD,IAAI,OAAO;AAAA,MACX;AAAA,MACA,GAAG,UAAU;AAAA,IACf,CAAC;AAED,QAAI,CAAC,UAAU;AACb,aAAO,aAAa,KAAK,EAAE,OAAO,8BAA8B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpF;AAEA,QAAI,CAAC,SAAS,UAAU;AACtB,aAAO,aAAa,KAAK;AAAA,QACvB,UAAU;AAAA,QACV,SAAS,CAAC;AAAA,QACV,kBAAkB;AAAA,QAClB,YAAY,EAAE,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,MAAM;AAAA,MAC9D,CAAC;AAAA,IACH;AAEA,UAAM,EAAE,aAAa,IAAI,IAAI,IAAI,QAAQ,GAAG;AAC5C,UAAM,iBAAiB,iBAAiB,aAAa,IAAI,OAAO,GAAG,sBAAsB;AACzF,UAAM,QAAQ,KAAK,IAAI,KAAK,IAAI,gBAAgB,CAAC,GAAG,sBAAsB;AAC1E,UAAM,SAAS,KAAK,IAAI,iBAAiB,aAAa,IAAI,QAAQ,GAAG,CAAC,GAAG,CAAC;AAE1E,UAAM,CAAC,QAAQ,KAAK,IAAI,MAAM,GAAG;AAAA,MAC/B;AAAA,MACA;AAAA,QACE,oBAAoB,OAAO;AAAA,QAC3B;AAAA,QACA,GAAG,UAAU;AAAA,QACb,WAAW,EAAE,KAAK,qBAAqB;AAAA,MACzC;AAAA,MACA;AAAA;AAAA;AAAA,QAGE,SAAS,CAAC,EAAE,YAAY,MAAM,GAAG,EAAE,IAAI,MAAM,CAAC;AAAA,QAC9C;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAMA,UAAM,kBAAkB,MAAM;AAAA,MAC5B,IAAI;AAAA,QACF,OACG,IAAI,CAAC,UAAyB,MAAM,cAAc,EAClD,OAAO,CAAC,OAAgD,CAAC,CAAC,EAAE;AAAA,MACjE;AAAA,IACF;AACA,UAAM,gBAAgB,gBAAgB,SAClC,MAAM,GAAG,KAAK,cAAc;AAAA,MAC1B,IAAI,EAAE,KAAK,gBAAgB;AAAA,MAC3B;AAAA,MACA,GAAG,UAAU;AAAA,IACf,CAAC,IACD,CAAC;AACL,UAAM,qBAAqB,IAAI;AAAA,MAC7B,cAAc,IAAI,CAAC,SAAuB,CAAC,KAAK,IAAI,KAAK,MAAM,CAAC;AAAA,IAClE;AAEA,UAAM,eAAqC,OAAO,IAAI,CAAC,WAA0B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAQ/E,IAAI,OAAO,MAAM,EAAE;AAAA,MACnB,WAAW,MAAM;AAAA,MACjB,QAAQ,MAAM,iBAAiB,mBAAmB,IAAI,MAAM,cAAc,KAAK,OAAO;AAAA,MACtF,YAAY,MAAM;AAAA,MAClB,WAAY,MAAM,aAAa;AAAA,IACjC,EAAE;AAEF,UAAM,SAAS,mBAAmB,YAAY;AAE9C,WAAO,aAAa,KAAK;AAAA,MACvB,UAAU;AAAA,MACV,SAAS,OAAO;AAAA,MAChB,kBAAkB,OAAO;AAAA,MACzB,YAAY;AAAA,QACV;AAAA,QACA;AAAA,QACA;AAAA,QACA,SAAS,SAAS,QAAQ;AAAA,MAC5B;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,MAAM,2CAA2C,EAAE,KAAK,MAAM,CAAC;AACtE,WAAO,aAAa,KAAK,EAAE,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACxF;AACF;AAEA,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,IAAI,EAAE,OAAO;AAAA,EACb,MAAM,EAAE,KAAK,CAAC,YAAY,WAAW,YAAY,cAAc,CAAC;AAAA,EAChE,UAAU,EAAE,KAAK,CAAC,SAAS,WAAW,MAAM,CAAC;AAAA,EAC7C,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,YAAY,EAAE,OAAO;AAAA,EACrB,SAAS,EAAE,OAAO;AAAA,EAClB,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAC1C,CAAC;AAEM,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aACE;AAAA,MACF,MAAM,CAAC,WAAW;AAAA,MAClB,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,MAC1C,OAAO,EAAE,OAAO;AAAA,QACd,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,sBAAsB,EAAE,SAAS;AAAA,QACxE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,MAC3C,CAAC;AAAA,MACD,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,UAAU,EAAE,QAAQ;AAAA,YACpB,SAAS,EAAE,MAAM,kBAAkB;AAAA,YACnC,kBAAkB,EAAE,QAAQ;AAAA,YAC5B,YAAY,EAAE,OAAO;AAAA,cACnB,OAAO,EAAE,OAAO;AAAA,cAChB,OAAO,EAAE,OAAO;AAAA,cAChB,QAAQ,EAAE,OAAO;AAAA,cACjB,SAAS,EAAE,QAAQ;AAAA,YACrB,CAAC;AAAA,UACH,CAAC;AAAA,QACH;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,+BAA+B,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACnG,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MAC/F;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/workflows/api/instances/bulk-replay/route.js

@@ -0,0 +1,117 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
+import { BULK_REPLAY_MAX_IDS, getBulkReplayQueue } from "../../../lib/bulk-replay.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("workflows");
+const requestSchema = z.object({
+  action: z.enum(["retry", "cancel"]),
+  ids: z.array(z.string().uuid()).min(1).max(BULK_REPLAY_MAX_IDS)
+});
+const responseSchema = z.object({
+  ok: z.boolean(),
+  progressJobId: z.string().uuid().nullable(),
+  message: z.string()
+});
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: ["workflows.instances.bulk_ops"] }
+};
+const JOB_NAMES = {
+  retry: "Replay workflow instances",
+  cancel: "Cancel workflow instances"
+};
+async function POST(request) {
+  try {
+    const auth = await getAuthFromRequest(request);
+    if (!auth?.tenantId || !auth.orgId) {
+      return NextResponse.json(
+        responseSchema.parse({ ok: false, progressJobId: null, message: "Unauthorized" }),
+        { status: 401 }
+      );
+    }
+    const parsed = requestSchema.safeParse(await readJsonSafe(request));
+    if (!parsed.success) {
+      return NextResponse.json(
+        responseSchema.parse({ ok: false, progressJobId: null, message: "Invalid payload" }),
+        { status: 400 }
+      );
+    }
+    const container = await createRequestContainer();
+    const rbacService = container.resolve("rbacService");
+    const hasPermission = await rbacService.userHasAllFeatures(
+      auth.sub,
+      ["workflows.instances.bulk_ops"],
+      { tenantId: auth.tenantId, organizationId: auth.orgId }
+    );
+    if (!hasPermission) {
+      return NextResponse.json(
+        responseSchema.parse({ ok: false, progressJobId: null, message: "Insufficient permissions" }),
+        { status: 403 }
+      );
+    }
+    const ids = Array.from(new Set(parsed.data.ids));
+    const progressService = container.resolve("progressService");
+    const progressJob = await progressService.createJob(
+      {
+        jobType: `workflows.instances.bulk_${parsed.data.action}`,
+        name: JOB_NAMES[parsed.data.action],
+        description: `${ids.length} workflow instances queued`,
+        totalCount: ids.length,
+        cancellable: false,
+        meta: { source: "workflows.failure-queue", action: parsed.data.action }
+      },
+      { tenantId: auth.tenantId, organizationId: auth.orgId, userId: auth.sub }
+    );
+    await getBulkReplayQueue().enqueue({
+      progressJobId: progressJob.id,
+      action: parsed.data.action,
+      ids,
+      // The worker re-reads every instance under this scope, so an id from
+      // another tenant resolves to nothing and is skipped rather than acted on.
+      scope: { tenantId: auth.tenantId, organizationId: auth.orgId, userId: auth.sub }
+    });
+    return NextResponse.json(
+      responseSchema.parse({
+        ok: true,
+        progressJobId: progressJob.id,
+        message: "Bulk replay started."
+      }),
+      { status: 202 }
+    );
+  } catch (error) {
+    logger.error("Error starting workflow bulk replay", { err: error });
+    return NextResponse.json(
+      responseSchema.parse({ ok: false, progressJobId: null, message: "Failed to start bulk replay" }),
+      { status: 500 }
+    );
+  }
+}
+const openApi = {
+  methods: {
+    POST: {
+      summary: "Bulk retry or cancel workflow instances",
+      description: "Queue a bulk retry or cancel over the failure queue. Work runs in a queue worker and reports through the progress module; the response returns the progress job id immediately.",
+      tags: ["Workflows"],
+      requestBody: {
+        contentType: "application/json",
+        schema: requestSchema,
+        description: "Action to apply and the instance ids to apply it to."
+      },
+      responses: [
+        { status: 202, description: "Bulk replay queued", schema: responseSchema },
+        { status: 400, description: "Invalid payload", schema: responseSchema },
+        { status: 401, description: "Unauthorized", schema: responseSchema },
+        { status: 403, description: "Insufficient permissions", schema: responseSchema },
+        { status: 500, description: "Internal server error", schema: responseSchema }
+      ]
+    }
+  }
+};
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map