@open-mercato/core 0.7.1-develop.7193.1.910a5b0a1e → 0.7.1-develop.7194.1.ab4fc81f82

package/dist/modules/workflows/api/instances/bulk-replay/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/workflows/api/instances/bulk-replay/route.ts"],
+  "sourcesContent": ["/**\n * Failure-queue bulk replay (spec \u00A78.4)\n *\n * Endpoint:\n * - POST /api/workflows/instances/bulk-replay\n *\n * Queues the work through the progress module rather than doing it inline:\n * replaying a page of parked instances re-executes that many real workflows,\n * which cannot happen inside an HTTP handler and must survive the operator\n * navigating away (`progress/AGENTS.md` MUST rules 1-4).\n */\n\nimport { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport type { ProgressService } from '../../../../progress/lib/progressService'\nimport { BULK_REPLAY_MAX_IDS, getBulkReplayQueue } from '../../../lib/bulk-replay'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows')\n\nconst requestSchema = z.object({\n  action: z.enum(['retry', 'cancel']),\n  ids: z.array(z.string().uuid()).min(1).max(BULK_REPLAY_MAX_IDS),\n})\n\nconst responseSchema = z.object({\n  ok: z.boolean(),\n  progressJobId: z.string().uuid().nullable(),\n  message: z.string(),\n})\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['workflows.instances.bulk_ops'] },\n}\n\nconst JOB_NAMES: Record<'retry' | 'cancel', string> = {\n  retry: 'Replay workflow instances',\n  cancel: 'Cancel workflow instances',\n}\n\nexport async function POST(request: Request) {\n  try {\n    const auth = await getAuthFromRequest(request)\n    if (!auth?.tenantId || !auth.orgId) {\n      return NextResponse.json(\n        responseSchema.parse({ ok: false, progressJobId: null, message: 'Unauthorized' }),\n        { status: 401 }\n      )\n    }\n\n    const parsed = requestSchema.safeParse(await readJsonSafe(request))\n    if (!parsed.success) {\n      return NextResponse.json(\n        responseSchema.parse({ ok: false, progressJobId: null, message: 'Invalid payload' }),\n        { status: 400 }\n      )\n    }\n\n    const container = await createRequestContainer()\n\n    // The declarative `requireFeatures` guard already gates the route; this is\n    // the same defence-in-depth check the single-instance retry/cancel routes\n    // perform, and it is the one that is scoped to the caller's organization.\n    const rbacService = container.resolve('rbacService')\n    const hasPermission = await rbacService.userHasAllFeatures(\n      auth.sub,\n      ['workflows.instances.bulk_ops'],\n      { tenantId: auth.tenantId, organizationId: auth.orgId }\n    )\n    if (!hasPermission) {\n      return NextResponse.json(\n        responseSchema.parse({ ok: false, progressJobId: null, message: 'Insufficient permissions' }),\n        { status: 403 }\n      )\n    }\n\n    const ids = Array.from(new Set(parsed.data.ids))\n    const progressService = container.resolve('progressService') as ProgressService\n    const progressJob = await progressService.createJob(\n      {\n        jobType: `workflows.instances.bulk_${parsed.data.action}`,\n        name: JOB_NAMES[parsed.data.action],\n        description: `${ids.length} workflow instances queued`,\n        totalCount: ids.length,\n        cancellable: false,\n        meta: { source: 'workflows.failure-queue', action: parsed.data.action },\n      },\n      { tenantId: auth.tenantId, organizationId: auth.orgId, userId: auth.sub }\n    )\n\n    await getBulkReplayQueue().enqueue({\n      progressJobId: progressJob.id,\n      action: parsed.data.action,\n      ids,\n      // The worker re-reads every instance under this scope, so an id from\n      // another tenant resolves to nothing and is skipped rather than acted on.\n      scope: { tenantId: auth.tenantId, organizationId: auth.orgId, userId: auth.sub },\n    })\n\n    return NextResponse.json(\n      responseSchema.parse({\n        ok: true,\n        progressJobId: progressJob.id,\n        message: 'Bulk replay started.',\n      }),\n      { status: 202 }\n    )\n  } catch (error) {\n    logger.error('Error starting workflow bulk replay', { err: error })\n    return NextResponse.json(\n      responseSchema.parse({ ok: false, progressJobId: null, message: 'Failed to start bulk replay' }),\n      { status: 500 }\n    )\n  }\n}\n\nexport const openApi = {\n  methods: {\n    POST: {\n      summary: 'Bulk retry or cancel workflow instances',\n      description:\n        'Queue a bulk retry or cancel over the failure queue. Work runs in a queue worker and reports through the progress module; the response returns the progress job id immediately.',\n      tags: ['Workflows'],\n      requestBody: {\n        contentType: 'application/json',\n        schema: requestSchema,\n        description: 'Action to apply and the instance ids to apply it to.',\n      },\n      responses: [\n        { status: 202, description: 'Bulk replay queued', schema: responseSchema },\n        { status: 400, description: 'Invalid payload', schema: responseSchema },\n        { status: 401, description: 'Unauthorized', schema: responseSchema },\n        { status: 403, description: 'Insufficient permissions', schema: responseSchema },\n        { status: 500, description: 'Internal server error', schema: responseSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAYA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,oBAAoB;AAE7B,SAAS,qBAAqB,0BAA0B;AACxD,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEvC,MAAM,gBAAgB,EAAE,OAAO;AAAA,EAC7B,QAAQ,EAAE,KAAK,CAAC,SAAS,QAAQ,CAAC;AAAA,EAClC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,mBAAmB;AAChE,CAAC;AAED,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,IAAI,EAAE,QAAQ;AAAA,EACd,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC1C,SAAS,EAAE,OAAO;AACpB,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,8BAA8B,EAAE;AAC/E;AAEA,MAAM,YAAgD;AAAA,EACpD,OAAO;AAAA,EACP,QAAQ;AACV;AAEA,eAAsB,KAAK,SAAkB;AAC3C,MAAI;AACF,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAC7C,QAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,aAAO,aAAa;AAAA,QAClB,eAAe,MAAM,EAAE,IAAI,OAAO,eAAe,MAAM,SAAS,eAAe,CAAC;AAAA,QAChF,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,SAAS,cAAc,UAAU,MAAM,aAAa,OAAO,CAAC;AAClE,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,aAAa;AAAA,QAClB,eAAe,MAAM,EAAE,IAAI,OAAO,eAAe,MAAM,SAAS,kBAAkB,CAAC;AAAA,QACnF,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,YAAY,MAAM,uBAAuB;AAK/C,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,gBAAgB,MAAM,YAAY;AAAA,MACtC,KAAK;AAAA,MACL,CAAC,8BAA8B;AAAA,MAC/B,EAAE,UAAU,KAAK,UAAU,gBAAgB,KAAK,MAAM;AAAA,IACxD;AACA,QAAI,CAAC,eAAe;AAClB,aAAO,aAAa;AAAA,QAClB,eAAe,MAAM,EAAE,IAAI,OAAO,eAAe,MAAM,SAAS,2BAA2B,CAAC;AAAA,QAC5F,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,MAAM,MAAM,KAAK,IAAI,IAAI,OAAO,KAAK,GAAG,CAAC;AAC/C,UAAM,kBAAkB,UAAU,QAAQ,iBAAiB;AAC3D,UAAM,cAAc,MAAM,gBAAgB;AAAA,MACxC;AAAA,QACE,SAAS,4BAA4B,OAAO,KAAK,MAAM;AAAA,QACvD,MAAM,UAAU,OAAO,KAAK,MAAM;AAAA,QAClC,aAAa,GAAG,IAAI,MAAM;AAAA,QAC1B,YAAY,IAAI;AAAA,QAChB,aAAa;AAAA,QACb,MAAM,EAAE,QAAQ,2BAA2B,QAAQ,OAAO,KAAK,OAAO;AAAA,MACxE;AAAA,MACA,EAAE,UAAU,KAAK,UAAU,gBAAgB,KAAK,OAAO,QAAQ,KAAK,IAAI;AAAA,IAC1E;AAEA,UAAM,mBAAmB,EAAE,QAAQ;AAAA,MACjC,eAAe,YAAY;AAAA,MAC3B,QAAQ,OAAO,KAAK;AAAA,MACpB;AAAA;AAAA;AAAA,MAGA,OAAO,EAAE,UAAU,KAAK,UAAU,gBAAgB,KAAK,OAAO,QAAQ,KAAK,IAAI;AAAA,IACjF,CAAC;AAED,WAAO,aAAa;AAAA,MAClB,eAAe,MAAM;AAAA,QACnB,IAAI;AAAA,QACJ,eAAe,YAAY;AAAA,QAC3B,SAAS;AAAA,MACX,CAAC;AAAA,MACD,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF,SAAS,OAAO;AACd,WAAO,MAAM,uCAAuC,EAAE,KAAK,MAAM,CAAC;AAClE,WAAO,aAAa;AAAA,MAClB,eAAe,MAAM,EAAE,IAAI,OAAO,eAAe,MAAM,SAAS,8BAA8B,CAAC;AAAA,MAC/F,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aACE;AAAA,MACF,MAAM,CAAC,WAAW;AAAA,MAClB,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,QACR,aAAa;AAAA,MACf;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,sBAAsB,QAAQ,eAAe;AAAA,QACzE,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,eAAe;AAAA,QACtE,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,eAAe;AAAA,QACnE,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,eAAe;AAAA,QAC/E,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,eAAe;AAAA,MAC9E;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/workflows/api/instances/failure-queue/route.js

@@ -0,0 +1,165 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { raw } from "@mikro-orm/core";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { resolveOrganizationScopeFilter } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
+import { WorkflowInstance } from "../../../data/entities.js";
+import { workflowInstanceResponseSchema, paginationSchema } from "../../openapi.js";
+import {
+  groupFailures,
+  matchesFailureGroup
+} from "../../../lib/failure-grouping.js";
+import { WORKFLOW_ATTENTION_OUTCOMES } from "../../../lib/run-outcome.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("workflows");
+const metadata = {
+  requireAuth: true,
+  requireFeatures: ["workflows.instances.view"]
+};
+const FAILURE_QUEUE_PAGE_SIZE_MAX = 100;
+const FAILURE_GROUP_SCAN_LIMIT = 500;
+function parsePositiveInt(rawValue, fallback) {
+  if (rawValue === null) return fallback;
+  const parsed = Number.parseInt(rawValue, 10);
+  return Number.isFinite(parsed) ? parsed : fallback;
+}
+function toTriageInput(instance) {
+  return {
+    id: instance.id,
+    workflowId: instance.workflowId,
+    status: instance.status,
+    errorMessage: instance.errorMessage ?? null,
+    attentionReason: instance.metadata?.attention?.reason ?? null,
+    outcome: instance.outcome ?? null
+  };
+}
+async function GET(request) {
+  try {
+    const container = await createRequestContainer();
+    const em = container.resolve("em");
+    const auth = await getAuthFromRequest(request);
+    if (!auth) {
+      return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    }
+    const scope = await resolveOrganizationScopeForRequest({ container, auth, request });
+    const tenantId = auth.tenantId;
+    const orgFilter = resolveOrganizationScopeFilter(scope, auth);
+    if (!tenantId) {
+      return NextResponse.json({ error: "Missing tenant context" }, { status: 400 });
+    }
+    const { searchParams } = new URL(request.url);
+    const workflowId = searchParams.get("workflowId");
+    const errorGroup = searchParams.get("errorGroup");
+    const requestedLimit = parsePositiveInt(searchParams.get("limit"), 50);
+    const limit = Math.min(Math.max(requestedLimit, 1), FAILURE_QUEUE_PAGE_SIZE_MAX);
+    const offset = Math.max(parsePositiveInt(searchParams.get("offset"), 0), 0);
+    const attentionPath = raw(`(metadata #>> '{attention,reason}')`);
+    const where = {
+      tenantId,
+      ...orgFilter.where,
+      // A simulation that "failed" is a report about a definition, never a run
+      // an operator must triage — and replaying one from here would start a
+      // REAL instance from a dry-run's context. The run list has excluded dry
+      // runs by default since spec §8.2; this union missed the same filter.
+      isDryRun: false,
+      // A `partial_failure` reached END and was written COMPLETED, so neither
+      // the status arm nor the attention arm reaches it — and a run nobody
+      // looks at because it said COMPLETED is exactly the failure the outcome
+      // verdict exists to remove. Third arm, same union.
+      $or: [
+        { status: "FAILED" },
+        { outcome: { $in: [...WORKFLOW_ATTENTION_OUTCOMES] } },
+        { [attentionPath]: { $ne: null } }
+      ]
+    };
+    if (workflowId) where.workflowId = workflowId;
+    const scanned = await em.find(WorkflowInstance, where, {
+      orderBy: { createdAt: "DESC" },
+      limit: FAILURE_GROUP_SCAN_LIMIT
+    });
+    const scannedInputs = scanned.map(toTriageInput);
+    const groups = groupFailures(scannedInputs);
+    let rows = scanned;
+    if (errorGroup) {
+      rows = scanned.filter((instance) => matchesFailureGroup(toTriageInput(instance), errorGroup));
+    }
+    const total = errorGroup ? rows.length : await em.count(WorkflowInstance, where);
+    return NextResponse.json({
+      data: rows.slice(offset, offset + limit),
+      groups,
+      grouping: {
+        scannedCount: scanned.length,
+        scanLimit: FAILURE_GROUP_SCAN_LIMIT,
+        truncated: scanned.length >= FAILURE_GROUP_SCAN_LIMIT
+      },
+      pagination: {
+        total,
+        limit,
+        offset,
+        hasMore: offset + limit < total
+      }
+    });
+  } catch (error) {
+    logger.error("Error listing the workflow failure queue", { err: error });
+    return NextResponse.json({ error: "Failed to list the workflow failure queue" }, { status: 500 });
+  }
+}
+const failureGroupSchema = z.object({
+  key: z.string(),
+  label: z.string(),
+  count: z.number().int().nonnegative(),
+  workflowIds: z.array(z.string()),
+  instanceIds: z.array(z.string().uuid())
+});
+const openApi = {
+  methods: {
+    GET: {
+      summary: "List the workflow failure queue",
+      description: "Triage list of instances parked by a failure-queue error directive together with FAILED instances, plus normalized error groups so a batch of similar failures reads as one row.",
+      tags: ["Workflows"],
+      query: z.object({
+        workflowId: z.string().optional(),
+        errorGroup: z.string().optional().describe("Narrow the list to one normalized error group key."),
+        limit: z.number().int().positive().max(FAILURE_QUEUE_PAGE_SIZE_MAX).default(50).optional(),
+        offset: z.number().int().min(0).default(0).optional()
+      }),
+      responses: [
+        {
+          status: 200,
+          description: "Failure queue",
+          schema: z.object({
+            data: z.array(workflowInstanceResponseSchema),
+            groups: z.array(failureGroupSchema),
+            grouping: z.object({
+              scannedCount: z.number().int().nonnegative(),
+              scanLimit: z.number().int().positive(),
+              truncated: z.boolean()
+            }),
+            pagination: paginationSchema
+          })
+        },
+        {
+          status: 401,
+          description: "Unauthorized",
+          schema: z.object({ error: z.string() })
+        },
+        {
+          status: 500,
+          description: "Internal server error",
+          schema: z.object({ error: z.string() })
+        }
+      ]
+    }
+  }
+};
+export {
+  FAILURE_GROUP_SCAN_LIMIT,
+  FAILURE_QUEUE_PAGE_SIZE_MAX,
+  GET,
+  failureGroupSchema,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/workflows/api/instances/failure-queue/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/workflows/api/instances/failure-queue/route.ts"],
+  "sourcesContent": ["/**\n * Failure-queue triage API (spec \u00A78.4)\n *\n * Endpoint:\n * - GET /api/workflows/instances/failure-queue\n *\n * The triage set is \"instances parked by a `failureQueue` directive PLUS FAILED\n * instances\". The list route cannot express that: its `attention` and `status`\n * filters are ANDed, and this is a union.\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { raw } from '@mikro-orm/core'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { WorkflowInstance } from '../../../data/entities'\nimport { workflowInstanceResponseSchema, paginationSchema } from '../../openapi'\nimport {\n  groupFailures,\n  matchesFailureGroup,\n  type TriageInstanceInput,\n} from '../../../lib/failure-grouping'\nimport { WORKFLOW_ATTENTION_OUTCOMES } from '../../../lib/run-outcome'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows')\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.instances.view'],\n}\n\n/** Platform list cap. */\nexport const FAILURE_QUEUE_PAGE_SIZE_MAX = 100\n\n/**\n * How many rows the error grouping scans. Grouping normalizes each message in\n * JS, so it cannot be a SQL `GROUP BY`; the response reports `scannedCount` and\n * `groupsTruncated` rather than pretending the groups cover everything.\n */\nexport const FAILURE_GROUP_SCAN_LIMIT = 500\n\nfunction parsePositiveInt(rawValue: string | null, fallback: number): number {\n  if (rawValue === null) return fallback\n  const parsed = Number.parseInt(rawValue, 10)\n  return Number.isFinite(parsed) ? parsed : fallback\n}\n\nfunction toTriageInput(instance: WorkflowInstance): TriageInstanceInput {\n  return {\n    id: instance.id,\n    workflowId: instance.workflowId,\n    status: instance.status,\n    errorMessage: instance.errorMessage ?? null,\n    attentionReason: instance.metadata?.attention?.reason ?? null,\n    outcome: instance.outcome ?? null,\n  }\n}\n\nexport async function GET(request: NextRequest) {\n  try {\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const orgFilter = resolveOrganizationScopeFilter(scope, auth)\n\n    if (!tenantId) {\n      return NextResponse.json({ error: 'Missing tenant context' }, { status: 400 })\n    }\n\n    const { searchParams } = new URL(request.url)\n    const workflowId = searchParams.get('workflowId')\n    const errorGroup = searchParams.get('errorGroup')\n    const requestedLimit = parsePositiveInt(searchParams.get('limit'), 50)\n    const limit = Math.min(Math.max(requestedLimit, 1), FAILURE_QUEUE_PAGE_SIZE_MAX)\n    const offset = Math.max(parsePositiveInt(searchParams.get('offset'), 0), 0)\n\n    const attentionPath = raw(`(metadata #>> '{attention,reason}')`)\n    const where: Record<string, unknown> = {\n      tenantId,\n      ...orgFilter.where,\n      // A simulation that \"failed\" is a report about a definition, never a run\n      // an operator must triage \u2014 and replaying one from here would start a\n      // REAL instance from a dry-run's context. The run list has excluded dry\n      // runs by default since spec \u00A78.2; this union missed the same filter.\n      isDryRun: false,\n      // A `partial_failure` reached END and was written COMPLETED, so neither\n      // the status arm nor the attention arm reaches it \u2014 and a run nobody\n      // looks at because it said COMPLETED is exactly the failure the outcome\n      // verdict exists to remove. Third arm, same union.\n      $or: [\n        { status: 'FAILED' },\n        { outcome: { $in: [...WORKFLOW_ATTENTION_OUTCOMES] } },\n        { [attentionPath]: { $ne: null } },\n      ],\n    }\n    if (workflowId) where.workflowId = workflowId\n\n    // Grouping first, over a bounded scan, so the group counts describe the\n    // same set the caller is paging through.\n    const scanned = (await em.find(WorkflowInstance, where, {\n      orderBy: { createdAt: 'DESC' },\n      limit: FAILURE_GROUP_SCAN_LIMIT,\n    })) as WorkflowInstance[]\n    const scannedInputs = scanned.map(toTriageInput)\n    const groups = groupFailures(scannedInputs)\n\n    let rows = scanned\n    if (errorGroup) {\n      rows = scanned.filter((instance) => matchesFailureGroup(toTriageInput(instance), errorGroup))\n    }\n\n    const total = errorGroup\n      ? rows.length\n      : await em.count(WorkflowInstance, where)\n\n    return NextResponse.json({\n      data: rows.slice(offset, offset + limit),\n      groups,\n      grouping: {\n        scannedCount: scanned.length,\n        scanLimit: FAILURE_GROUP_SCAN_LIMIT,\n        truncated: scanned.length >= FAILURE_GROUP_SCAN_LIMIT,\n      },\n      pagination: {\n        total,\n        limit,\n        offset,\n        hasMore: offset + limit < total,\n      },\n    })\n  } catch (error) {\n    logger.error('Error listing the workflow failure queue', { err: error })\n    return NextResponse.json({ error: 'Failed to list the workflow failure queue' }, { status: 500 })\n  }\n}\n\nexport const failureGroupSchema = z.object({\n  key: z.string(),\n  label: z.string(),\n  count: z.number().int().nonnegative(),\n  workflowIds: z.array(z.string()),\n  instanceIds: z.array(z.string().uuid()),\n})\n\nexport const openApi = {\n  methods: {\n    GET: {\n      summary: 'List the workflow failure queue',\n      description:\n        'Triage list of instances parked by a failure-queue error directive together with FAILED instances, plus normalized error groups so a batch of similar failures reads as one row.',\n      tags: ['Workflows'],\n      query: z.object({\n        workflowId: z.string().optional(),\n        errorGroup: z.string().optional().describe('Narrow the list to one normalized error group key.'),\n        limit: z.number().int().positive().max(FAILURE_QUEUE_PAGE_SIZE_MAX).default(50).optional(),\n        offset: z.number().int().min(0).default(0).optional(),\n      }),\n      responses: [\n        {\n          status: 200,\n          description: 'Failure queue',\n          schema: z.object({\n            data: z.array(workflowInstanceResponseSchema),\n            groups: z.array(failureGroupSchema),\n            grouping: z.object({\n              scannedCount: z.number().int().nonnegative(),\n              scanLimit: z.number().int().positive(),\n              truncated: z.boolean(),\n            }),\n            pagination: paginationSchema,\n          }),\n        },\n        {\n          status: 401,\n          description: 'Unauthorized',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 500,\n          description: 'Internal server error',\n          schema: z.object({ error: z.string() }),\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAWA,SAAsB,oBAAoB;AAC1C,SAAS,SAAS;AAClB,SAAS,WAAW;AACpB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,sCAAsC;AAC/C,SAAS,wBAAwB;AACjC,SAAS,gCAAgC,wBAAwB;AACjE;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,SAAS,mCAAmC;AAC5C,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,0BAA0B;AAC9C;AAGO,MAAM,8BAA8B;AAOpC,MAAM,2BAA2B;AAExC,SAAS,iBAAiB,UAAyB,UAA0B;AAC3E,MAAI,aAAa,KAAM,QAAO;AAC9B,QAAM,SAAS,OAAO,SAAS,UAAU,EAAE;AAC3C,SAAO,OAAO,SAAS,MAAM,IAAI,SAAS;AAC5C;AAEA,SAAS,cAAc,UAAiD;AACtE,SAAO;AAAA,IACL,IAAI,SAAS;AAAA,IACb,YAAY,SAAS;AAAA,IACrB,QAAQ,SAAS;AAAA,IACjB,cAAc,SAAS,gBAAgB;AAAA,IACvC,iBAAiB,SAAS,UAAU,WAAW,UAAU;AAAA,IACzD,SAAS,SAAS,WAAW;AAAA,EAC/B;AACF;AAEA,eAAsB,IAAI,SAAsB;AAC9C,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,YAAY,+BAA+B,OAAO,IAAI;AAE5D,QAAI,CAAC,UAAU;AACb,aAAO,aAAa,KAAK,EAAE,OAAO,yBAAyB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/E;AAEA,UAAM,EAAE,aAAa,IAAI,IAAI,IAAI,QAAQ,GAAG;AAC5C,UAAM,aAAa,aAAa,IAAI,YAAY;AAChD,UAAM,aAAa,aAAa,IAAI,YAAY;AAChD,UAAM,iBAAiB,iBAAiB,aAAa,IAAI,OAAO,GAAG,EAAE;AACrE,UAAM,QAAQ,KAAK,IAAI,KAAK,IAAI,gBAAgB,CAAC,GAAG,2BAA2B;AAC/E,UAAM,SAAS,KAAK,IAAI,iBAAiB,aAAa,IAAI,QAAQ,GAAG,CAAC,GAAG,CAAC;AAE1E,UAAM,gBAAgB,IAAI,qCAAqC;AAC/D,UAAM,QAAiC;AAAA,MACrC;AAAA,MACA,GAAG,UAAU;AAAA;AAAA;AAAA;AAAA;AAAA,MAKb,UAAU;AAAA;AAAA;AAAA;AAAA;AAAA,MAKV,KAAK;AAAA,QACH,EAAE,QAAQ,SAAS;AAAA,QACnB,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,2BAA2B,EAAE,EAAE;AAAA,QACrD,EAAE,CAAC,aAAa,GAAG,EAAE,KAAK,KAAK,EAAE;AAAA,MACnC;AAAA,IACF;AACA,QAAI,WAAY,OAAM,aAAa;AAInC,UAAM,UAAW,MAAM,GAAG,KAAK,kBAAkB,OAAO;AAAA,MACtD,SAAS,EAAE,WAAW,OAAO;AAAA,MAC7B,OAAO;AAAA,IACT,CAAC;AACD,UAAM,gBAAgB,QAAQ,IAAI,aAAa;AAC/C,UAAM,SAAS,cAAc,aAAa;AAE1C,QAAI,OAAO;AACX,QAAI,YAAY;AACd,aAAO,QAAQ,OAAO,CAAC,aAAa,oBAAoB,cAAc,QAAQ,GAAG,UAAU,CAAC;AAAA,IAC9F;AAEA,UAAM,QAAQ,aACV,KAAK,SACL,MAAM,GAAG,MAAM,kBAAkB,KAAK;AAE1C,WAAO,aAAa,KAAK;AAAA,MACvB,MAAM,KAAK,MAAM,QAAQ,SAAS,KAAK;AAAA,MACvC;AAAA,MACA,UAAU;AAAA,QACR,cAAc,QAAQ;AAAA,QACtB,WAAW;AAAA,QACX,WAAW,QAAQ,UAAU;AAAA,MAC/B;AAAA,MACA,YAAY;AAAA,QACV;AAAA,QACA;AAAA,QACA;AAAA,QACA,SAAS,SAAS,QAAQ;AAAA,MAC5B;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,MAAM,4CAA4C,EAAE,KAAK,MAAM,CAAC;AACvE,WAAO,aAAa,KAAK,EAAE,OAAO,4CAA4C,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClG;AACF;AAEO,MAAM,qBAAqB,EAAE,OAAO;AAAA,EACzC,KAAK,EAAE,OAAO;AAAA,EACd,OAAO,EAAE,OAAO;AAAA,EAChB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,EACpC,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA,EAC/B,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;AACxC,CAAC;AAEM,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aACE;AAAA,MACF,MAAM,CAAC,WAAW;AAAA,MAClB,OAAO,EAAE,OAAO;AAAA,QACd,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,QAChC,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,oDAAoD;AAAA,QAC/F,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,2BAA2B,EAAE,QAAQ,EAAE,EAAE,SAAS;AAAA,QACzF,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,MACtD,CAAC;AAAA,MACD,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,MAAM,EAAE,MAAM,8BAA8B;AAAA,YAC5C,QAAQ,EAAE,MAAM,kBAAkB;AAAA,YAClC,UAAU,EAAE,OAAO;AAAA,cACjB,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,cAC3C,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,cACrC,WAAW,EAAE,QAAQ;AAAA,YACvB,CAAC;AAAA,YACD,YAAY;AAAA,UACd,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/workflows/api/instances/route.js

@@ -1,5 +1,7 @@
 import { NextResponse } from "next/server";
 import { z } from "zod";
+import { raw } from "@mikro-orm/core";
+import { parseBooleanToken } from "@open-mercato/shared/lib/boolean";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
@@ -7,7 +9,8 @@ import { resolveOrganizationScopeFilter } from "@open-mercato/core/modules/direc
 import { WorkflowInstance } from "../../data/entities.js";
 import {
   startWorkflowInputSchema,
-  workflowInstanceStatusSchema
+  workflowInstanceStatusSchema,
+  workflowRunOutcomeSchema
 } from "../../data/validators.js";
 import {
   workflowInstanceResponseSchema,
@@ -16,6 +19,10 @@ import {
 } from "../openapi.js";
 import * as workflowExecutor from "../../lib/workflow-executor.js";
 import { createLogger } from "@open-mercato/shared/lib/logger";
+import { findWorkflowDefinition } from "../../lib/find-definition.js";
+import { isComponentKind } from "../../lib/component-guard.js";
+import { buildStartedAtRange } from "../../lib/instance-date-filter.js";
+import { isWorkflowRunOutcome } from "../../lib/run-outcome.js";
 const logger = createLogger("workflows");
 const metadata = {
   requireAuth: true,
@@ -41,11 +48,23 @@ async function GET(request) {
     const { searchParams } = new URL(request.url);
     const workflowId = searchParams.get("workflowId");
     const status = searchParams.get("status");
+    const outcome = searchParams.get("outcome");
     const correlationKey = searchParams.get("correlationKey");
     const entityType = searchParams.get("entityType");
     const entityId = searchParams.get("entityId");
+    const parentInstanceId = searchParams.get("parentInstanceId");
+    const hasParent = parseBooleanToken(searchParams.get("hasParent"));
+    const attention = parseBooleanToken(searchParams.get("attention"));
+    const dryRun = parseBooleanToken(searchParams.get("dryRun"));
     const limit = parseInt(searchParams.get("limit") || "50");
     const offset = parseInt(searchParams.get("offset") || "0");
+    const startedAtRange = buildStartedAtRange(
+      searchParams.get("startedFrom"),
+      searchParams.get("startedTo")
+    );
+    if (!startedAtRange.ok) {
+      return NextResponse.json({ error: startedAtRange.error }, { status: 400 });
+    }
     const where = {
       tenantId,
       ...orgFilter.where
@@ -61,9 +80,28 @@ async function GET(request) {
         where.status = { $in: statuses };
       }
     }
+    if (outcome) {
+      const requested = outcome.split(",").map((value) => value.trim()).filter(Boolean);
+      const invalid = requested.filter((value) => !isWorkflowRunOutcome(value));
+      if (invalid.length > 0) {
+        return NextResponse.json(
+          { error: `Unknown outcome: ${invalid.join(", ")}` },
+          { status: 400 }
+        );
+      }
+      if (requested.length === 1) {
+        where.outcome = requested[0];
+      } else if (requested.length > 1) {
+        where.outcome = { $in: requested };
+      }
+    }
     if (correlationKey) {
       where.correlationKey = correlationKey;
     }
+    where.isDryRun = dryRun === true;
+    if (startedAtRange.range) {
+      where.startedAt = startedAtRange.range;
+    }
     if (entityType || entityId) {
       where.$and = where.$and || [];
       if (entityType) {
@@ -77,6 +115,21 @@ async function GET(request) {
         });
       }
     }
+    if (parentInstanceId) {
+      where.$and = where.$and || [];
+      where.$and.push({
+        metadata: { $contains: { labels: { parentInstanceId } } }
+      });
+    } else if (hasParent !== null) {
+      where.$and = where.$and || [];
+      const parentIdPath = raw(`(metadata #>> '{labels,parentInstanceId}')`);
+      where.$and.push({ [parentIdPath]: hasParent ? { $ne: null } : null });
+    }
+    if (attention !== null) {
+      where.$and = where.$and || [];
+      const attentionPath = raw(`(metadata #>> '{attention,reason}')`);
+      where.$and.push({ [attentionPath]: attention ? { $ne: null } : null });
+    }
     const [instances, total] = await em.findAndCount(
       WorkflowInstance,
       where,
@@ -147,9 +200,35 @@ async function POST(request) {
       );
     }
     const input = validation.data;
+    if (input.dryRun || input.stepThrough) {
+      const canTestRun = await rbacService.userHasAllFeatures(
+        auth.sub,
+        ["workflows.definitions.test_run"],
+        { tenantId, organizationId }
+      );
+      if (!canTestRun) {
+        return NextResponse.json(
+          { error: "Insufficient permissions" },
+          { status: 403 }
+        );
+      }
+    }
+    const startDefinition = await findWorkflowDefinition(em, {
+      workflowId: input.workflowId,
+      version: input.version,
+      tenantId,
+      organizationId
+    });
+    if (startDefinition && isComponentKind(startDefinition.kind)) {
+      return NextResponse.json(
+        { error: "This workflow is a reusable component and cannot be started standalone; invoke it from a SUB_WORKFLOW step." },
+        { status: 400 }
+      );
+    }
     const metadata2 = {
       ...input.metadata,
-      initiatedBy: auth.sub
+      initiatedBy: auth.sub,
+      ...input.stepThrough ? { stepThrough: { enabled: true, releaseStepId: null } } : {}
     };
     const instance = await workflowExecutor.startWorkflow(em, {
       workflowId: input.workflowId,
@@ -157,6 +236,7 @@ async function POST(request) {
       initialContext: input.initialContext || {},
       correlationKey: input.correlationKey,
       metadata: metadata2,
+      isDryRun: input.dryRun === true,
       tenantId,
       organizationId
     });
@@ -178,7 +258,7 @@ async function POST(request) {
           execution: {
             status: instance.status,
             currentStep: instance.currentStepId,
-            message: "Workflow execution started in background"
+            message: "Workflow execution started"
           }
         },
         message: "Workflow started successfully"
@@ -232,9 +312,15 @@ const openApi = {
       query: z.object({
         workflowId: z.string().optional(),
         status: workflowInstanceStatusSchema.optional(),
+        outcome: workflowRunOutcomeSchema.optional().describe("Filter by the run VERDICT, independently of status. Comma-separated for several (e.g. partial_failure,failure). An unknown value is a 400."),
         correlationKey: z.string().optional(),
         entityType: z.string().optional(),
         entityId: z.string().optional(),
+        parentInstanceId: z.string().optional().describe("Return only direct sub-workflow children of this parent instance."),
+        hasParent: z.boolean().optional().describe("false = only top-level/standalone instances; true = only sub-workflow children. Ignored when parentInstanceId is set."),
+        attention: z.boolean().optional().describe("true = only instances parked by a failure-queue error directive; false = only instances without an attention marker."),
+        startedFrom: z.string().optional().describe("Lower bound on startedAt. A calendar day (YYYY-MM-DD) is taken from 00:00:00.000Z; a full ISO timestamp is taken verbatim."),
+        startedTo: z.string().optional().describe("Upper bound on startedAt, inclusive. A calendar day (YYYY-MM-DD) covers the whole day up to 23:59:59.999Z."),
         limit: z.number().int().positive().default(50).optional(),
         offset: z.number().int().min(0).default(0).optional()
       }),
@@ -247,6 +333,11 @@ const openApi = {
             pagination: paginationSchema
           })
         },
+        {
+          status: 400,
+          description: "Invalid date range or unknown outcome",
+          schema: z.object({ error: z.string() })
+        },
         {
           status: 401,
           description: "Unauthorized",

package/dist/modules/workflows/api/instances/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/workflows/api/instances/route.ts"],
-  "sourcesContent": ["/**\n * Workflow Instances API\n *\n * Endpoints:\n * - GET /api/workflows/instances - List workflow instances\n * - POST /api/workflows/instances - Start a new workflow instance\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { WorkflowInstance } from '../../data/entities'\nimport {\n  startWorkflowInputSchema,\n  type StartWorkflowApiInput,\n  workflowInstanceStatusSchema,\n} from '../../data/validators'\nimport {\n  workflowInstanceResponseSchema,\n  workflowBackgroundStartSchema,\n  paginationSchema,\n} from '../openapi'\nimport * as workflowExecutor from '../../lib/workflow-executor'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows')\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.instances.view'],\n}\n\n/**\n * GET /api/workflows/instances\n *\n * List workflow instances with optional filters\n */\nexport async function GET(request: NextRequest) {\n  try {\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const orgFilter = resolveOrganizationScopeFilter(scope, auth)\n\n    if (!tenantId) {\n      return NextResponse.json(\n        { error: 'Missing tenant context' },\n        { status: 400 }\n      )\n    }\n\n    const { searchParams } = new URL(request.url)\n    const workflowId = searchParams.get('workflowId')\n    const status = searchParams.get('status')\n    const correlationKey = searchParams.get('correlationKey')\n    const entityType = searchParams.get('entityType')\n    const entityId = searchParams.get('entityId')\n    const limit = parseInt(searchParams.get('limit') || '50')\n    const offset = parseInt(searchParams.get('offset') || '0')\n\n    // Build where clause with tenant scoping\n    const where: any = {\n      tenantId,\n      ...orgFilter.where,\n    }\n\n    if (workflowId) {\n      where.workflowId = workflowId\n    }\n\n    if (status) {\n      // Support comma-separated status values (e.g., \"RUNNING,PAUSED,WAITING_FOR_ACTIVITIES\")\n      const statuses = status.split(',').map(s => s.trim()).filter(Boolean)\n      if (statuses.length === 1) {\n        where.status = statuses[0]\n      } else if (statuses.length > 1) {\n        where.status = { $in: statuses }\n      }\n    }\n\n    if (correlationKey) {\n      where.correlationKey = correlationKey\n    }\n\n    // For JSONB metadata filtering, use $contains with explicit key-value pairs\n    // MikroORM's dot notation creates table joins, not JSON access\n    if (entityType || entityId) {\n      where.$and = where.$and || []\n      if (entityType) {\n        where.$and.push({\n          metadata: { $contains: { entityType: entityType } }\n        })\n      }\n      if (entityId) {\n        where.$and.push({\n          metadata: { $contains: { entityId: entityId } }\n        })\n      }\n    }\n\n    const [instances, total] = await em.findAndCount(\n      WorkflowInstance,\n      where,\n      {\n        orderBy: { createdAt: 'DESC' },\n        limit,\n        offset,\n      }\n    )\n\n    return NextResponse.json({\n      data: instances,\n      pagination: {\n        total,\n        limit,\n        offset,\n        hasMore: offset + limit < total,\n      },\n    })\n  } catch (error) {\n    logger.error('Error listing workflow instances', { err: error })\n    return NextResponse.json(\n      { error: 'Failed to list workflow instances' },\n      { status: 500 }\n    )\n  }\n}\n\n/**\n * POST /api/workflows/instances\n *\n * Start a new workflow instance\n */\nexport async function POST(request: NextRequest) {\n  try {\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = scope?.selectedId ?? auth.orgId\n\n    if (!tenantId || !organizationId) {\n      return NextResponse.json(\n        { error: 'Missing tenant or organization context' },\n        { status: 400 }\n      )\n    }\n\n    // Check create permission\n    const rbacService = container.resolve('rbacService')\n    const hasPermission = await rbacService.userHasAllFeatures(\n      auth.sub,\n      ['workflows.instances.create'],\n      {\n        tenantId,\n        organizationId,\n      }\n    )\n\n    if (!hasPermission) {\n      return NextResponse.json(\n        { error: 'Insufficient permissions' },\n        { status: 403 }\n      )\n    }\n\n    const body = await request.json()\n\n    // Validate input\n    const validation = startWorkflowInputSchema.safeParse(body)\n    if (!validation.success) {\n      return NextResponse.json(\n        {\n          error: 'Validation failed',\n          details: validation.error.issues,\n        },\n        { status: 400 }\n      )\n    }\n\n    const input: StartWorkflowApiInput = validation.data\n\n    // Server-authoritative actor; do not trust client-supplied metadata.initiatedBy.\n    const metadata = {\n      ...input.metadata,\n      initiatedBy: auth.sub,\n    }\n\n    // Start workflow\n    const instance = await workflowExecutor.startWorkflow(em, {\n      workflowId: input.workflowId,\n      version: input.version,\n      initialContext: input.initialContext || {},\n      correlationKey: input.correlationKey,\n      metadata,\n      tenantId,\n      organizationId,\n    })\n\n    // Execute workflow in background (non-blocking for demo visibility)\n    // This allows the frontend to see step-by-step progress via polling\n    setImmediate(async () => {\n      try {\n        // Create new container and EM for background execution\n        const bgContainer = await createRequestContainer()\n        const bgEm = bgContainer.resolve('em')\n        await workflowExecutor.executeWorkflow(bgEm, bgContainer, instance.id, {\n          userId: auth.sub,\n        })\n      } catch (error) {\n        logger.error('Background workflow execution error', { err: error })\n      }\n    })\n\n    return NextResponse.json(\n      {\n        data: {\n          instance,\n          execution: {\n            status: instance.status,\n            currentStep: instance.currentStepId,\n            message: 'Workflow execution started in background',\n          },\n        },\n        message: 'Workflow started successfully',\n      },\n      { status: 201 }\n    )\n  } catch (error) {\n    logger.error('Error starting workflow', { err: error })\n\n    // Handle specific errors\n    if (error instanceof workflowExecutor.WorkflowExecutionError) {\n      if (error.code === 'DEFINITION_NOT_FOUND') {\n        return NextResponse.json(\n          { error: error.message },\n          { status: 404 }\n        )\n      }\n      if (error.code === 'DEFINITION_DISABLED') {\n        return NextResponse.json(\n          { error: error.message },\n          { status: 400 }\n        )\n      }\n      if (error.code === 'INVALID_DEFINITION') {\n        return NextResponse.json(\n          { error: error.message },\n          { status: 400 }\n        )\n      }\n      if (error.code === 'START_PRE_CONDITIONS_FAILED') {\n        return NextResponse.json(\n          {\n            error: error.message,\n            code: error.code,\n            details: error.details,\n          },\n          { status: 422 }\n        )\n      }\n    }\n\n    return NextResponse.json(\n      { error: 'Failed to start workflow' },\n      { status: 500 }\n    )\n  }\n}\n\nexport const openApi = {\n  methods: {\n    GET: {\n      summary: 'List workflow instances',\n      description: 'Get a list of workflow instances with optional filters. Supports pagination and filtering by status, workflowId, correlationKey, etc.',\n      tags: ['Workflows'],\n      query: z.object({\n        workflowId: z.string().optional(),\n        status: workflowInstanceStatusSchema.optional(),\n        correlationKey: z.string().optional(),\n        entityType: z.string().optional(),\n        entityId: z.string().optional(),\n        limit: z.number().int().positive().default(50).optional(),\n        offset: z.number().int().min(0).default(0).optional(),\n      }),\n      responses: [\n        {\n          status: 200,\n          description: 'List of workflow instances',\n          schema: z.object({\n            data: z.array(workflowInstanceResponseSchema),\n            pagination: paginationSchema,\n          }),\n        },\n        {\n          status: 401,\n          description: 'Unauthorized',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 500,\n          description: 'Internal server error',\n          schema: z.object({ error: z.string() }),\n        },\n      ],\n    },\n    POST: {\n      summary: 'Start workflow instance',\n      description: 'Start a new workflow instance from a workflow definition. The workflow will execute immediately.',\n      tags: ['Workflows'],\n      requestBody: {\n        contentType: 'application/json',\n        schema: startWorkflowInputSchema,\n        description: 'Workflow instance configuration including workflowId, initial context, and metadata.',\n      },\n      responses: [\n        {\n          status: 201,\n          description: 'Workflow started successfully',\n          schema: z.object({\n            data: z.object({\n              instance: workflowInstanceResponseSchema,\n              execution: workflowBackgroundStartSchema,\n            }),\n            message: z.string(),\n          }),\n        },\n        {\n          status: 400,\n          description: 'Bad request - Validation failed or definition disabled/invalid',\n          schema: z.object({\n            error: z.string(),\n            details: z.any().optional(),\n          }),\n        },\n        {\n          status: 401,\n          description: 'Unauthorized',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 403,\n          description: 'Forbidden - Insufficient permissions',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 404,\n          description: 'Workflow definition not found',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 500,\n          description: 'Internal server error',\n          schema: z.object({ error: z.string() }),\n        },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAQA,SAAsB,oBAAoB;AAC1C,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,sCAAsC;AAC/C,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,EAEA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,YAAY,sBAAsB;AAClC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,0BAA0B;AAC9C;AAOA,eAAsB,IAAI,SAAsB;AAC9C,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,YAAY,+BAA+B,OAAO,IAAI;AAE5D,QAAI,CAAC,UAAU;AACb,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,yBAAyB;AAAA,QAClC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,EAAE,aAAa,IAAI,IAAI,IAAI,QAAQ,GAAG;AAC5C,UAAM,aAAa,aAAa,IAAI,YAAY;AAChD,UAAM,SAAS,aAAa,IAAI,QAAQ;AACxC,UAAM,iBAAiB,aAAa,IAAI,gBAAgB;AACxD,UAAM,aAAa,aAAa,IAAI,YAAY;AAChD,UAAM,WAAW,aAAa,IAAI,UAAU;AAC5C,UAAM,QAAQ,SAAS,aAAa,IAAI,OAAO,KAAK,IAAI;AACxD,UAAM,SAAS,SAAS,aAAa,IAAI,QAAQ,KAAK,GAAG;AAGzD,UAAM,QAAa;AAAA,MACjB;AAAA,MACA,GAAG,UAAU;AAAA,IACf;AAEA,QAAI,YAAY;AACd,YAAM,aAAa;AAAA,IACrB;AAEA,QAAI,QAAQ;AAEV,YAAM,WAAW,OAAO,MAAM,GAAG,EAAE,IAAI,OAAK,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO;AACpE,UAAI,SAAS,WAAW,GAAG;AACzB,cAAM,SAAS,SAAS,CAAC;AAAA,MAC3B,WAAW,SAAS,SAAS,GAAG;AAC9B,cAAM,SAAS,EAAE,KAAK,SAAS;AAAA,MACjC;AAAA,IACF;AAEA,QAAI,gBAAgB;AAClB,YAAM,iBAAiB;AAAA,IACzB;AAIA,QAAI,cAAc,UAAU;AAC1B,YAAM,OAAO,MAAM,QAAQ,CAAC;AAC5B,UAAI,YAAY;AACd,cAAM,KAAK,KAAK;AAAA,UACd,UAAU,EAAE,WAAW,EAAE,WAAuB,EAAE;AAAA,QACpD,CAAC;AAAA,MACH;AACA,UAAI,UAAU;AACZ,cAAM,KAAK,KAAK;AAAA,UACd,UAAU,EAAE,WAAW,EAAE,SAAmB,EAAE;AAAA,QAChD,CAAC;AAAA,MACH;AAAA,IACF;AAEA,UAAM,CAAC,WAAW,KAAK,IAAI,MAAM,GAAG;AAAA,MAClC;AAAA,MACA;AAAA,MACA;AAAA,QACE,SAAS,EAAE,WAAW,OAAO;AAAA,QAC7B;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,WAAO,aAAa,KAAK;AAAA,MACvB,MAAM;AAAA,MACN,YAAY;AAAA,QACV;AAAA,QACA;AAAA,QACA;AAAA,QACA,SAAS,SAAS,QAAQ;AAAA,MAC5B;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,MAAM,oCAAoC,EAAE,KAAK,MAAM,CAAC;AAC/D,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,oCAAoC;AAAA,MAC7C,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAOA,eAAsB,KAAK,SAAsB;AAC/C,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,OAAO,cAAc,KAAK;AAEjD,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,yCAAyC;AAAA,QAClD,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,gBAAgB,MAAM,YAAY;AAAA,MACtC,KAAK;AAAA,MACL,CAAC,4BAA4B;AAAA,MAC7B;AAAA,QACE;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,eAAe;AAClB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,2BAA2B;AAAA,QACpC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,OAAO,MAAM,QAAQ,KAAK;AAGhC,UAAM,aAAa,yBAAyB,UAAU,IAAI;AAC1D,QAAI,CAAC,WAAW,SAAS;AACvB,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO;AAAA,UACP,SAAS,WAAW,MAAM;AAAA,QAC5B;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,QAA+B,WAAW;AAGhD,UAAMA,YAAW;AAAA,MACf,GAAG,MAAM;AAAA,MACT,aAAa,KAAK;AAAA,IACpB;AAGA,UAAM,WAAW,MAAM,iBAAiB,cAAc,IAAI;AAAA,MACxD,YAAY,MAAM;AAAA,MAClB,SAAS,MAAM;AAAA,MACf,gBAAgB,MAAM,kBAAkB,CAAC;AAAA,MACzC,gBAAgB,MAAM;AAAA,MACtB,UAAAA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAID,iBAAa,YAAY;AACvB,UAAI;AAEF,cAAM,cAAc,MAAM,uBAAuB;AACjD,cAAM,OAAO,YAAY,QAAQ,IAAI;AACrC,cAAM,iBAAiB,gBAAgB,MAAM,aAAa,SAAS,IAAI;AAAA,UACrE,QAAQ,KAAK;AAAA,QACf,CAAC;AAAA,MACH,SAAS,OAAO;AACd,eAAO,MAAM,uCAAuC,EAAE,KAAK,MAAM,CAAC;AAAA,MACpE;AAAA,IACF,CAAC;AAED,WAAO,aAAa;AAAA,MAClB;AAAA,QACE,MAAM;AAAA,UACJ;AAAA,UACA,WAAW;AAAA,YACT,QAAQ,SAAS;AAAA,YACjB,aAAa,SAAS;AAAA,YACtB,SAAS;AAAA,UACX;AAAA,QACF;AAAA,QACA,SAAS;AAAA,MACX;AAAA,MACA,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF,SAAS,OAAO;AACd,WAAO,MAAM,2BAA2B,EAAE,KAAK,MAAM,CAAC;AAGtD,QAAI,iBAAiB,iBAAiB,wBAAwB;AAC5D,UAAI,MAAM,SAAS,wBAAwB;AACzC,eAAO,aAAa;AAAA,UAClB,EAAE,OAAO,MAAM,QAAQ;AAAA,UACvB,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AACA,UAAI,MAAM,SAAS,uBAAuB;AACxC,eAAO,aAAa;AAAA,UAClB,EAAE,OAAO,MAAM,QAAQ;AAAA,UACvB,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AACA,UAAI,MAAM,SAAS,sBAAsB;AACvC,eAAO,aAAa;AAAA,UAClB,EAAE,OAAO,MAAM,QAAQ;AAAA,UACvB,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AACA,UAAI,MAAM,SAAS,+BAA+B;AAChD,eAAO,aAAa;AAAA,UAClB;AAAA,YACE,OAAO,MAAM;AAAA,YACb,MAAM,MAAM;AAAA,YACZ,SAAS,MAAM;AAAA,UACjB;AAAA,UACA,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAAA,IACF;AAEA,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,2BAA2B;AAAA,MACpC,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,MAAM,CAAC,WAAW;AAAA,MAClB,OAAO,EAAE,OAAO;AAAA,QACd,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,QAChC,QAAQ,6BAA6B,SAAS;AAAA,QAC9C,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,QACpC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,QAChC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,QAC9B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,SAAS;AAAA,QACxD,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,MACtD,CAAC;AAAA,MACD,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,MAAM,EAAE,MAAM,8BAA8B;AAAA,YAC5C,YAAY;AAAA,UACd,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,MAAM,CAAC,WAAW;AAAA,MAClB,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,QACR,aAAa;AAAA,MACf;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,MAAM,EAAE,OAAO;AAAA,cACb,UAAU;AAAA,cACV,WAAW;AAAA,YACb,CAAC;AAAA,YACD,SAAS,EAAE,OAAO;AAAA,UACpB,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,OAAO,EAAE,OAAO;AAAA,YAChB,SAAS,EAAE,IAAI,EAAE,SAAS;AAAA,UAC5B,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["/**\n * Workflow Instances API\n *\n * Endpoints:\n * - GET /api/workflows/instances - List workflow instances\n * - POST /api/workflows/instances - Start a new workflow instance\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { raw } from '@mikro-orm/core'\nimport { parseBooleanToken } from '@open-mercato/shared/lib/boolean'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { WorkflowInstance } from '../../data/entities'\nimport {\n  startWorkflowInputSchema,\n  type StartWorkflowApiInput,\n  workflowInstanceStatusSchema,\n  workflowRunOutcomeSchema,\n} from '../../data/validators'\nimport {\n  workflowInstanceResponseSchema,\n  workflowBackgroundStartSchema,\n  paginationSchema,\n} from '../openapi'\nimport * as workflowExecutor from '../../lib/workflow-executor'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { findWorkflowDefinition } from '../../lib/find-definition'\nimport { isComponentKind } from '../../lib/component-guard'\nimport { buildStartedAtRange } from '../../lib/instance-date-filter'\nimport { isWorkflowRunOutcome } from '../../lib/run-outcome'\n\nconst logger = createLogger('workflows')\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.instances.view'],\n}\n\n/**\n * GET /api/workflows/instances\n *\n * List workflow instances with optional filters\n */\nexport async function GET(request: NextRequest) {\n  try {\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const orgFilter = resolveOrganizationScopeFilter(scope, auth)\n\n    if (!tenantId) {\n      return NextResponse.json(\n        { error: 'Missing tenant context' },\n        { status: 400 }\n      )\n    }\n\n    const { searchParams } = new URL(request.url)\n    const workflowId = searchParams.get('workflowId')\n    const status = searchParams.get('status')\n    const outcome = searchParams.get('outcome')\n    const correlationKey = searchParams.get('correlationKey')\n    const entityType = searchParams.get('entityType')\n    const entityId = searchParams.get('entityId')\n    const parentInstanceId = searchParams.get('parentInstanceId')\n    const hasParent = parseBooleanToken(searchParams.get('hasParent'))\n    const attention = parseBooleanToken(searchParams.get('attention'))\n    const dryRun = parseBooleanToken(searchParams.get('dryRun'))\n    const limit = parseInt(searchParams.get('limit') || '50')\n    const offset = parseInt(searchParams.get('offset') || '0')\n\n    // Spec 8.3 run-list date filter. An unparseable bound is a 400, never a\n    // dropped predicate \u2014 a query built from an Invalid Date answers nothing\n    // while looking like it answered something.\n    const startedAtRange = buildStartedAtRange(\n      searchParams.get('startedFrom'),\n      searchParams.get('startedTo')\n    )\n    if (!startedAtRange.ok) {\n      return NextResponse.json({ error: startedAtRange.error }, { status: 400 })\n    }\n\n    // Build where clause with tenant scoping\n    const where: any = {\n      tenantId,\n      ...orgFilter.where,\n    }\n\n    if (workflowId) {\n      where.workflowId = workflowId\n    }\n\n    if (status) {\n      // Support comma-separated status values (e.g., \"RUNNING,PAUSED,WAITING_FOR_ACTIVITIES\")\n      const statuses = status.split(',').map(s => s.trim()).filter(Boolean)\n      if (statuses.length === 1) {\n        where.status = statuses[0]\n      } else if (statuses.length > 1) {\n        where.status = { $in: statuses }\n      }\n    }\n\n    // Outcome (the run's VERDICT) filters independently of `status` \u2014 the two\n    // answer different questions and a caller narrowing by one must not have\n    // the other narrowed for them. An unrecognised value is a 400 rather than a\n    // dropped predicate: a filter that silently matches everything is the exact\n    // invisible-omission failure this column exists to remove.\n    if (outcome) {\n      const requested = outcome.split(',').map((value) => value.trim()).filter(Boolean)\n      const invalid = requested.filter((value) => !isWorkflowRunOutcome(value))\n      if (invalid.length > 0) {\n        return NextResponse.json(\n          { error: `Unknown outcome: ${invalid.join(', ')}` },\n          { status: 400 }\n        )\n      }\n      if (requested.length === 1) {\n        where.outcome = requested[0]\n      } else if (requested.length > 1) {\n        where.outcome = { $in: requested }\n      }\n    }\n\n    if (correlationKey) {\n      where.correlationKey = correlationKey\n    }\n\n    // Simulations are excluded from the run list by DEFAULT (spec section 8.2:\n    // \"excludes the instance from KPIs\"). A caller that wants them asks for\n    // them with `dryRun=true`; `dryRun=false` is the same as omitting it.\n    where.isDryRun = dryRun === true\n\n    if (startedAtRange.range) {\n      where.startedAt = startedAtRange.range\n    }\n\n    // For JSONB metadata filtering, use $contains with explicit key-value pairs\n    // MikroORM's dot notation creates table joins, not JSON access\n    if (entityType || entityId) {\n      where.$and = where.$and || []\n      if (entityType) {\n        where.$and.push({\n          metadata: { $contains: { entityType: entityType } }\n        })\n      }\n      if (entityId) {\n        where.$and.push({\n          metadata: { $contains: { entityId: entityId } }\n        })\n      }\n    }\n\n    // Parent/sub-workflow filtering. The parent linkage is stored in\n    // metadata.labels.parentInstanceId (set by the SUB_WORKFLOW step handler).\n    // - parentInstanceId: return only the direct children of that parent\n    //   (JSONB containment; works for equality).\n    // - hasParent=false: return only top-level/standalone instances, and\n    //   hasParent=true only children. Absence of a key cannot be expressed via\n    //   $contains, so use a JSON-path predicate (null = IS NULL).\n    if (parentInstanceId) {\n      where.$and = where.$and || []\n      where.$and.push({\n        metadata: { $contains: { labels: { parentInstanceId } } },\n      })\n    } else if (hasParent !== null) {\n      where.$and = where.$and || []\n      // Unqualified column reference is unambiguous here \u2014 the instance list\n      // query is single-table (tenant/org scope adds predicates, not joins).\n      const parentIdPath = raw(`(metadata #>> '{labels,parentInstanceId}')`)\n      where.$and.push({ [parentIdPath]: hasParent ? { $ne: null } : null })\n    }\n\n    // Failure-queue park filter (spec 5.9): instances parked by a `failureQueue`\n    // error directive carry an engine-owned metadata.attention marker.\n    if (attention !== null) {\n      where.$and = where.$and || []\n      const attentionPath = raw(`(metadata #>> '{attention,reason}')`)\n      where.$and.push({ [attentionPath]: attention ? { $ne: null } : null })\n    }\n\n    const [instances, total] = await em.findAndCount(\n      WorkflowInstance,\n      where,\n      {\n        orderBy: { createdAt: 'DESC' },\n        limit,\n        offset,\n      }\n    )\n\n    return NextResponse.json({\n      data: instances,\n      pagination: {\n        total,\n        limit,\n        offset,\n        hasMore: offset + limit < total,\n      },\n    })\n  } catch (error) {\n    logger.error('Error listing workflow instances', { err: error })\n    return NextResponse.json(\n      { error: 'Failed to list workflow instances' },\n      { status: 500 }\n    )\n  }\n}\n\n/**\n * POST /api/workflows/instances\n *\n * Start a new workflow instance\n */\nexport async function POST(request: NextRequest) {\n  try {\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = scope?.selectedId ?? auth.orgId\n\n    if (!tenantId || !organizationId) {\n      return NextResponse.json(\n        { error: 'Missing tenant or organization context' },\n        { status: 400 }\n      )\n    }\n\n    // Check create permission\n    const rbacService = container.resolve('rbacService')\n    const hasPermission = await rbacService.userHasAllFeatures(\n      auth.sub,\n      ['workflows.instances.create'],\n      {\n        tenantId,\n        organizationId,\n      }\n    )\n\n    if (!hasPermission) {\n      return NextResponse.json(\n        { error: 'Insufficient permissions' },\n        { status: 403 }\n      )\n    }\n\n    const body = await request.json()\n\n    // Validate input\n    const validation = startWorkflowInputSchema.safeParse(body)\n    if (!validation.success) {\n      return NextResponse.json(\n        {\n          error: 'Validation failed',\n          details: validation.error.issues,\n        },\n        { status: 400 }\n      )\n    }\n\n    const input: StartWorkflowApiInput = validation.data\n\n    // Dry run (spec section 8.2) is the definition-author's test loop, not a\n    // way to start instances, so it carries its own grant on top of\n    // `instances.create` \u2014 the same feature the per-node Test step uses.\n    if (input.dryRun || input.stepThrough) {\n      const canTestRun = await rbacService.userHasAllFeatures(\n        auth.sub,\n        ['workflows.definitions.test_run'],\n        { tenantId, organizationId }\n      )\n      if (!canTestRun) {\n        return NextResponse.json(\n          { error: 'Insufficient permissions' },\n          { status: 403 }\n        )\n      }\n    }\n\n    // Reject standalone start of a reusable component. Components have no\n    // trigger and may only be invoked as a SUB_WORKFLOW; this guard lives on\n    // the manual-start path only, so sub-workflow invocation is unaffected.\n    const startDefinition = await findWorkflowDefinition(em, {\n      workflowId: input.workflowId,\n      version: input.version,\n      tenantId,\n      organizationId,\n    })\n    if (startDefinition && isComponentKind(startDefinition.kind)) {\n      return NextResponse.json(\n        { error: 'This workflow is a reusable component and cannot be started standalone; invoke it from a SUB_WORKFLOW step.' },\n        { status: 400 }\n      )\n    }\n\n    // Server-authoritative actor; do not trust client-supplied metadata.initiatedBy.\n    // The step-through marker is engine-owned for the same reason: it is set\n    // ONLY from the feature-gated flag above, never from client metadata.\n    const metadata = {\n      ...input.metadata,\n      initiatedBy: auth.sub,\n      ...(input.stepThrough ? { stepThrough: { enabled: true as const, releaseStepId: null } } : {}),\n    }\n\n    // Start workflow\n    const instance = await workflowExecutor.startWorkflow(em, {\n      workflowId: input.workflowId,\n      version: input.version,\n      initialContext: input.initialContext || {},\n      correlationKey: input.correlationKey,\n      metadata,\n      isDryRun: input.dryRun === true,\n      tenantId,\n      organizationId,\n    })\n\n    // Advance the workflow asynchronously after responding (non-blocking, so the\n    // frontend can poll step-by-step progress). This is a fire-and-forget task in\n    // this process \u2014 NOT a durable queue job \u2014 so it does not survive a process\n    // restart; the executor durably marks the instance FAILED on error, and the\n    // async-activity worker / retry endpoint resume any instance left mid-flight.\n    setImmediate(async () => {\n      try {\n        // Create new container and EM for background execution\n        const bgContainer = await createRequestContainer()\n        const bgEm = bgContainer.resolve('em')\n        await workflowExecutor.executeWorkflow(bgEm, bgContainer, instance.id, {\n          userId: auth.sub,\n        })\n      } catch (error) {\n        logger.error('Background workflow execution error', { err: error })\n      }\n    })\n\n    return NextResponse.json(\n      {\n        data: {\n          instance,\n          execution: {\n            status: instance.status,\n            currentStep: instance.currentStepId,\n            message: 'Workflow execution started',\n          },\n        },\n        message: 'Workflow started successfully',\n      },\n      { status: 201 }\n    )\n  } catch (error) {\n    logger.error('Error starting workflow', { err: error })\n\n    // Handle specific errors\n    if (error instanceof workflowExecutor.WorkflowExecutionError) {\n      if (error.code === 'DEFINITION_NOT_FOUND') {\n        return NextResponse.json(\n          { error: error.message },\n          { status: 404 }\n        )\n      }\n      if (error.code === 'DEFINITION_DISABLED') {\n        return NextResponse.json(\n          { error: error.message },\n          { status: 400 }\n        )\n      }\n      if (error.code === 'INVALID_DEFINITION') {\n        return NextResponse.json(\n          { error: error.message },\n          { status: 400 }\n        )\n      }\n      if (error.code === 'START_PRE_CONDITIONS_FAILED') {\n        return NextResponse.json(\n          {\n            error: error.message,\n            code: error.code,\n            details: error.details,\n          },\n          { status: 422 }\n        )\n      }\n    }\n\n    return NextResponse.json(\n      { error: 'Failed to start workflow' },\n      { status: 500 }\n    )\n  }\n}\n\nexport const openApi = {\n  methods: {\n    GET: {\n      summary: 'List workflow instances',\n      description: 'Get a list of workflow instances with optional filters. Supports pagination and filtering by status, workflowId, correlationKey, etc.',\n      tags: ['Workflows'],\n      query: z.object({\n        workflowId: z.string().optional(),\n        status: workflowInstanceStatusSchema.optional(),\n        outcome: workflowRunOutcomeSchema.optional().describe('Filter by the run VERDICT, independently of status. Comma-separated for several (e.g. partial_failure,failure). An unknown value is a 400.'),\n        correlationKey: z.string().optional(),\n        entityType: z.string().optional(),\n        entityId: z.string().optional(),\n        parentInstanceId: z.string().optional().describe('Return only direct sub-workflow children of this parent instance.'),\n        hasParent: z.boolean().optional().describe('false = only top-level/standalone instances; true = only sub-workflow children. Ignored when parentInstanceId is set.'),\n        attention: z.boolean().optional().describe('true = only instances parked by a failure-queue error directive; false = only instances without an attention marker.'),\n        startedFrom: z.string().optional().describe('Lower bound on startedAt. A calendar day (YYYY-MM-DD) is taken from 00:00:00.000Z; a full ISO timestamp is taken verbatim.'),\n        startedTo: z.string().optional().describe('Upper bound on startedAt, inclusive. A calendar day (YYYY-MM-DD) covers the whole day up to 23:59:59.999Z.'),\n        limit: z.number().int().positive().default(50).optional(),\n        offset: z.number().int().min(0).default(0).optional(),\n      }),\n      responses: [\n        {\n          status: 200,\n          description: 'List of workflow instances',\n          schema: z.object({\n            data: z.array(workflowInstanceResponseSchema),\n            pagination: paginationSchema,\n          }),\n        },\n        {\n          status: 400,\n          description: 'Invalid date range or unknown outcome',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 401,\n          description: 'Unauthorized',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 500,\n          description: 'Internal server error',\n          schema: z.object({ error: z.string() }),\n        },\n      ],\n    },\n    POST: {\n      summary: 'Start workflow instance',\n      description: 'Start a new workflow instance from a workflow definition. The workflow will execute immediately.',\n      tags: ['Workflows'],\n      requestBody: {\n        contentType: 'application/json',\n        schema: startWorkflowInputSchema,\n        description: 'Workflow instance configuration including workflowId, initial context, and metadata.',\n      },\n      responses: [\n        {\n          status: 201,\n          description: 'Workflow started successfully',\n          schema: z.object({\n            data: z.object({\n              instance: workflowInstanceResponseSchema,\n              execution: workflowBackgroundStartSchema,\n            }),\n            message: z.string(),\n          }),\n        },\n        {\n          status: 400,\n          description: 'Bad request - Validation failed or definition disabled/invalid',\n          schema: z.object({\n            error: z.string(),\n            details: z.any().optional(),\n          }),\n        },\n        {\n          status: 401,\n          description: 'Unauthorized',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 403,\n          description: 'Forbidden - Insufficient permissions',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 404,\n          description: 'Workflow definition not found',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 500,\n          description: 'Internal server error',\n          schema: z.object({ error: z.string() }),\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAQA,SAAsB,oBAAoB;AAC1C,SAAS,SAAS;AAClB,SAAS,WAAW;AACpB,SAAS,yBAAyB;AAClC,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,sCAAsC;AAC/C,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,EAEA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,YAAY,sBAAsB;AAClC,SAAS,oBAAoB;AAC7B,SAAS,8BAA8B;AACvC,SAAS,uBAAuB;AAChC,SAAS,2BAA2B;AACpC,SAAS,4BAA4B;AAErC,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,0BAA0B;AAC9C;AAOA,eAAsB,IAAI,SAAsB;AAC9C,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,YAAY,+BAA+B,OAAO,IAAI;AAE5D,QAAI,CAAC,UAAU;AACb,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,yBAAyB;AAAA,QAClC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,EAAE,aAAa,IAAI,IAAI,IAAI,QAAQ,GAAG;AAC5C,UAAM,aAAa,aAAa,IAAI,YAAY;AAChD,UAAM,SAAS,aAAa,IAAI,QAAQ;AACxC,UAAM,UAAU,aAAa,IAAI,SAAS;AAC1C,UAAM,iBAAiB,aAAa,IAAI,gBAAgB;AACxD,UAAM,aAAa,aAAa,IAAI,YAAY;AAChD,UAAM,WAAW,aAAa,IAAI,UAAU;AAC5C,UAAM,mBAAmB,aAAa,IAAI,kBAAkB;AAC5D,UAAM,YAAY,kBAAkB,aAAa,IAAI,WAAW,CAAC;AACjE,UAAM,YAAY,kBAAkB,aAAa,IAAI,WAAW,CAAC;AACjE,UAAM,SAAS,kBAAkB,aAAa,IAAI,QAAQ,CAAC;AAC3D,UAAM,QAAQ,SAAS,aAAa,IAAI,OAAO,KAAK,IAAI;AACxD,UAAM,SAAS,SAAS,aAAa,IAAI,QAAQ,KAAK,GAAG;AAKzD,UAAM,iBAAiB;AAAA,MACrB,aAAa,IAAI,aAAa;AAAA,MAC9B,aAAa,IAAI,WAAW;AAAA,IAC9B;AACA,QAAI,CAAC,eAAe,IAAI;AACtB,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,MAAM,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC3E;AAGA,UAAM,QAAa;AAAA,MACjB;AAAA,MACA,GAAG,UAAU;AAAA,IACf;AAEA,QAAI,YAAY;AACd,YAAM,aAAa;AAAA,IACrB;AAEA,QAAI,QAAQ;AAEV,YAAM,WAAW,OAAO,MAAM,GAAG,EAAE,IAAI,OAAK,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO;AACpE,UAAI,SAAS,WAAW,GAAG;AACzB,cAAM,SAAS,SAAS,CAAC;AAAA,MAC3B,WAAW,SAAS,SAAS,GAAG;AAC9B,cAAM,SAAS,EAAE,KAAK,SAAS;AAAA,MACjC;AAAA,IACF;AAOA,QAAI,SAAS;AACX,YAAM,YAAY,QAAQ,MAAM,GAAG,EAAE,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAAE,OAAO,OAAO;AAChF,YAAM,UAAU,UAAU,OAAO,CAAC,UAAU,CAAC,qBAAqB,KAAK,CAAC;AACxE,UAAI,QAAQ,SAAS,GAAG;AACtB,eAAO,aAAa;AAAA,UAClB,EAAE,OAAO,oBAAoB,QAAQ,KAAK,IAAI,CAAC,GAAG;AAAA,UAClD,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AACA,UAAI,UAAU,WAAW,GAAG;AAC1B,cAAM,UAAU,UAAU,CAAC;AAAA,MAC7B,WAAW,UAAU,SAAS,GAAG;AAC/B,cAAM,UAAU,EAAE,KAAK,UAAU;AAAA,MACnC;AAAA,IACF;AAEA,QAAI,gBAAgB;AAClB,YAAM,iBAAiB;AAAA,IACzB;AAKA,UAAM,WAAW,WAAW;AAE5B,QAAI,eAAe,OAAO;AACxB,YAAM,YAAY,eAAe;AAAA,IACnC;AAIA,QAAI,cAAc,UAAU;AAC1B,YAAM,OAAO,MAAM,QAAQ,CAAC;AAC5B,UAAI,YAAY;AACd,cAAM,KAAK,KAAK;AAAA,UACd,UAAU,EAAE,WAAW,EAAE,WAAuB,EAAE;AAAA,QACpD,CAAC;AAAA,MACH;AACA,UAAI,UAAU;AACZ,cAAM,KAAK,KAAK;AAAA,UACd,UAAU,EAAE,WAAW,EAAE,SAAmB,EAAE;AAAA,QAChD,CAAC;AAAA,MACH;AAAA,IACF;AASA,QAAI,kBAAkB;AACpB,YAAM,OAAO,MAAM,QAAQ,CAAC;AAC5B,YAAM,KAAK,KAAK;AAAA,QACd,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,iBAAiB,EAAE,EAAE;AAAA,MAC1D,CAAC;AAAA,IACH,WAAW,cAAc,MAAM;AAC7B,YAAM,OAAO,MAAM,QAAQ,CAAC;AAG5B,YAAM,eAAe,IAAI,4CAA4C;AACrE,YAAM,KAAK,KAAK,EAAE,CAAC,YAAY,GAAG,YAAY,EAAE,KAAK,KAAK,IAAI,KAAK,CAAC;AAAA,IACtE;AAIA,QAAI,cAAc,MAAM;AACtB,YAAM,OAAO,MAAM,QAAQ,CAAC;AAC5B,YAAM,gBAAgB,IAAI,qCAAqC;AAC/D,YAAM,KAAK,KAAK,EAAE,CAAC,aAAa,GAAG,YAAY,EAAE,KAAK,KAAK,IAAI,KAAK,CAAC;AAAA,IACvE;AAEA,UAAM,CAAC,WAAW,KAAK,IAAI,MAAM,GAAG;AAAA,MAClC;AAAA,MACA;AAAA,MACA;AAAA,QACE,SAAS,EAAE,WAAW,OAAO;AAAA,QAC7B;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,WAAO,aAAa,KAAK;AAAA,MACvB,MAAM;AAAA,MACN,YAAY;AAAA,QACV;AAAA,QACA;AAAA,QACA;AAAA,QACA,SAAS,SAAS,QAAQ;AAAA,MAC5B;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,MAAM,oCAAoC,EAAE,KAAK,MAAM,CAAC;AAC/D,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,oCAAoC;AAAA,MAC7C,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAOA,eAAsB,KAAK,SAAsB;AAC/C,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,OAAO,cAAc,KAAK;AAEjD,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,yCAAyC;AAAA,QAClD,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,gBAAgB,MAAM,YAAY;AAAA,MACtC,KAAK;AAAA,MACL,CAAC,4BAA4B;AAAA,MAC7B;AAAA,QACE;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,eAAe;AAClB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,2BAA2B;AAAA,QACpC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,OAAO,MAAM,QAAQ,KAAK;AAGhC,UAAM,aAAa,yBAAyB,UAAU,IAAI;AAC1D,QAAI,CAAC,WAAW,SAAS;AACvB,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO;AAAA,UACP,SAAS,WAAW,MAAM;AAAA,QAC5B;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,QAA+B,WAAW;AAKhD,QAAI,MAAM,UAAU,MAAM,aAAa;AACrC,YAAM,aAAa,MAAM,YAAY;AAAA,QACnC,KAAK;AAAA,QACL,CAAC,gCAAgC;AAAA,QACjC,EAAE,UAAU,eAAe;AAAA,MAC7B;AACA,UAAI,CAAC,YAAY;AACf,eAAO,aAAa;AAAA,UAClB,EAAE,OAAO,2BAA2B;AAAA,UACpC,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAAA,IACF;AAKA,UAAM,kBAAkB,MAAM,uBAAuB,IAAI;AAAA,MACvD,YAAY,MAAM;AAAA,MAClB,SAAS,MAAM;AAAA,MACf;AAAA,MACA;AAAA,IACF,CAAC;AACD,QAAI,mBAAmB,gBAAgB,gBAAgB,IAAI,GAAG;AAC5D,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,8GAA8G;AAAA,QACvH,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAKA,UAAMA,YAAW;AAAA,MACf,GAAG,MAAM;AAAA,MACT,aAAa,KAAK;AAAA,MAClB,GAAI,MAAM,cAAc,EAAE,aAAa,EAAE,SAAS,MAAe,eAAe,KAAK,EAAE,IAAI,CAAC;AAAA,IAC9F;AAGA,UAAM,WAAW,MAAM,iBAAiB,cAAc,IAAI;AAAA,MACxD,YAAY,MAAM;AAAA,MAClB,SAAS,MAAM;AAAA,MACf,gBAAgB,MAAM,kBAAkB,CAAC;AAAA,MACzC,gBAAgB,MAAM;AAAA,MACtB,UAAAA;AAAA,MACA,UAAU,MAAM,WAAW;AAAA,MAC3B;AAAA,MACA;AAAA,IACF,CAAC;AAOD,iBAAa,YAAY;AACvB,UAAI;AAEF,cAAM,cAAc,MAAM,uBAAuB;AACjD,cAAM,OAAO,YAAY,QAAQ,IAAI;AACrC,cAAM,iBAAiB,gBAAgB,MAAM,aAAa,SAAS,IAAI;AAAA,UACrE,QAAQ,KAAK;AAAA,QACf,CAAC;AAAA,MACH,SAAS,OAAO;AACd,eAAO,MAAM,uCAAuC,EAAE,KAAK,MAAM,CAAC;AAAA,MACpE;AAAA,IACF,CAAC;AAED,WAAO,aAAa;AAAA,MAClB;AAAA,QACE,MAAM;AAAA,UACJ;AAAA,UACA,WAAW;AAAA,YACT,QAAQ,SAAS;AAAA,YACjB,aAAa,SAAS;AAAA,YACtB,SAAS;AAAA,UACX;AAAA,QACF;AAAA,QACA,SAAS;AAAA,MACX;AAAA,MACA,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF,SAAS,OAAO;AACd,WAAO,MAAM,2BAA2B,EAAE,KAAK,MAAM,CAAC;AAGtD,QAAI,iBAAiB,iBAAiB,wBAAwB;AAC5D,UAAI,MAAM,SAAS,wBAAwB;AACzC,eAAO,aAAa;AAAA,UAClB,EAAE,OAAO,MAAM,QAAQ;AAAA,UACvB,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AACA,UAAI,MAAM,SAAS,uBAAuB;AACxC,eAAO,aAAa;AAAA,UAClB,EAAE,OAAO,MAAM,QAAQ;AAAA,UACvB,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AACA,UAAI,MAAM,SAAS,sBAAsB;AACvC,eAAO,aAAa;AAAA,UAClB,EAAE,OAAO,MAAM,QAAQ;AAAA,UACvB,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AACA,UAAI,MAAM,SAAS,+BAA+B;AAChD,eAAO,aAAa;AAAA,UAClB;AAAA,YACE,OAAO,MAAM;AAAA,YACb,MAAM,MAAM;AAAA,YACZ,SAAS,MAAM;AAAA,UACjB;AAAA,UACA,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAAA,IACF;AAEA,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,2BAA2B;AAAA,MACpC,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,MAAM,CAAC,WAAW;AAAA,MAClB,OAAO,EAAE,OAAO;AAAA,QACd,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,QAChC,QAAQ,6BAA6B,SAAS;AAAA,QAC9C,SAAS,yBAAyB,SAAS,EAAE,SAAS,4IAA4I;AAAA,QAClM,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,QACpC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,QAChC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,QAC9B,kBAAkB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,mEAAmE;AAAA,QACpH,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,uHAAuH;AAAA,QAClK,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,sHAAsH;AAAA,QACjK,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,4HAA4H;AAAA,QACxK,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,4GAA4G;AAAA,QACtJ,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,SAAS;AAAA,QACxD,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,MACtD,CAAC;AAAA,MACD,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,MAAM,EAAE,MAAM,8BAA8B;AAAA,YAC5C,YAAY;AAAA,UACd,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,MAAM,CAAC,WAAW;AAAA,MAClB,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,QACR,aAAa;AAAA,MACf;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,MAAM,EAAE,OAAO;AAAA,cACb,UAAU;AAAA,cACV,WAAW;AAAA,YACb,CAAC;AAAA,YACD,SAAS,EAAE,OAAO;AAAA,UACpB,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,OAAO,EAAE,OAAO;AAAA,YAChB,SAAS,EAAE,IAAI,EAAE,SAAS;AAAA,UAC5B,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": ["metadata"]
 }