@open-mercato/core 0.7.1-develop.7193.1.910a5b0a1e → 0.7.1-develop.7194.1.ab4fc81f82

package/dist/modules/workflows/api/openapi.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/workflows/api/openapi.ts"],
-  "sourcesContent": ["import { z } from 'zod'\n\nexport const workflowsTag = 'Workflows'\n\nexport const workflowErrorSchema = z\n  .object({\n    error: z.string(),\n    details: z.unknown().optional(),\n  })\n  .passthrough()\n\nexport const userTaskStatusSchema = z.enum([\n  'PENDING',\n  'IN_PROGRESS',\n  'COMPLETED',\n  'CANCELLED',\n  'ESCALATED',\n])\n\nexport const userTaskSchema = z.object({\n  id: z.string().uuid(),\n  workflowInstanceId: z.string().uuid(),\n  stepInstanceId: z.string().uuid(),\n  taskName: z.string(),\n  description: z.string().nullable().optional(),\n  status: userTaskStatusSchema,\n  formSchema: z.unknown().nullable().optional(),\n  formData: z.unknown().nullable().optional(),\n  assignedTo: z.string().nullable().optional(),\n  assignedToRoles: z.array(z.string()).nullable().optional(),\n  claimedBy: z.string().nullable().optional(),\n  claimedAt: z.string().nullable().optional(),\n  dueDate: z.string().nullable().optional(),\n  escalatedAt: z.string().nullable().optional(),\n  escalatedTo: z.string().nullable().optional(),\n  completedBy: z.string().nullable().optional(),\n  completedAt: z.string().nullable().optional(),\n  tenantId: z.string().uuid(),\n  organizationId: z.string().uuid(),\n  createdAt: z.string(),\n  updatedAt: z.string(),\n})\n\nexport const userTaskListQuerySchema = z.object({\n  status: z.string().optional().describe('Filter by status (comma-separated for multiple: PENDING,IN_PROGRESS,COMPLETED,CANCELLED,ESCALATED)'),\n  assignedTo: z.string().uuid().optional().describe('Filter by assigned user ID'),\n  workflowInstanceId: z.string().uuid().optional().describe('Filter by workflow instance ID'),\n  overdue: z.coerce.boolean().optional().describe('Filter overdue tasks (true/false)'),\n  myTasks: z.coerce.boolean().optional().describe('Show only tasks assigned to or claimable by current user'),\n  limit: z.coerce.number().min(1).max(100).optional().default(50).describe('Number of results (max 100)'),\n  offset: z.coerce.number().min(0).optional().default(0).describe('Pagination offset'),\n})\n\nexport const paginationSchema = z.object({\n  total: z.number().int().nonnegative(),\n  limit: z.number().int().positive(),\n  offset: z.number().int().nonnegative(),\n  hasMore: z.boolean(),\n})\n\nexport const userTaskListResponseSchema = z.object({\n  data: z.array(userTaskSchema),\n  pagination: paginationSchema,\n})\n\nexport const userTaskDetailResponseSchema = z.object({\n  data: userTaskSchema,\n})\n\nexport const userTaskClaimResponseSchema = z.object({\n  data: userTaskSchema,\n  message: z.string(),\n})\n\nexport const completeTaskRequestSchema = z.object({\n  formData: z.record(z.string(), z.unknown()).describe('Form field values'),\n  comments: z.string().optional().describe('Optional comments'),\n})\n\nexport const userTaskCompleteResponseSchema = z.object({\n  data: userTaskSchema,\n  message: z.string(),\n})\n\nexport const advanceWorkflowRequestSchema = z.object({\n  toStepId: z.string().optional().describe('Optional target step ID; first valid transition is used when omitted'),\n  triggerData: z.record(z.string(), z.unknown()).optional().describe('Optional trigger data used during transition evaluation'),\n  contextUpdates: z.record(z.string(), z.unknown()).optional().describe('Optional workflow context updates applied before transition'),\n})\n\nexport const advanceWorkflowResponseSchema = z.object({\n  data: z.object({\n    instance: z.object({\n      id: z.string().uuid(),\n      status: z.string(),\n      currentStepId: z.string().nullable(),\n      previousStepId: z.string().nullable(),\n      transitionFired: z.string().nullable(),\n      context: z.unknown(),\n    }),\n    execution: z.unknown(),\n  }),\n  message: z.string(),\n})\n\nexport const sendSignalRequestSchema = z.object({\n  signalName: z.string().describe('Name of the signal to send'),\n  payload: z.record(z.string(), z.unknown()).optional().describe('Optional data payload for the signal'),\n})\n\nexport const sendSignalResponseSchema = z.object({\n  success: z.boolean(),\n  message: z.string(),\n})\n\nexport const validateStartRequestSchema = z.object({\n  workflowId: z.string().min(1).describe('Workflow definition ID'),\n  version: z.number().int().positive().optional().describe('Optional workflow definition version'),\n  context: z.record(z.string(), z.unknown()).optional().describe('Initial workflow context variables'),\n  locale: z.string().optional().describe('Locale for validation messages'),\n})\n\nexport const validateStartErrorSchema = z.object({\n  ruleId: z.string(),\n  message: z.string(),\n  code: z.string(),\n})\n\nexport const validateStartRuleSchema = z.object({\n  ruleId: z.string(),\n  passed: z.boolean(),\n  executionTime: z.number().optional(),\n})\n\nexport const validateStartResponseSchema = z.object({\n  canStart: z.boolean(),\n  workflowId: z.string(),\n  errors: z.array(validateStartErrorSchema).optional(),\n  validatedRules: z.array(validateStartRuleSchema).optional(),\n})\n\n// ---------------------------------------------------------------------------\n// Workflow Instance Response Schemas\n// ---------------------------------------------------------------------------\n\nexport const workflowInstanceStatusEnumSchema = z.enum([\n  'RUNNING',\n  'PAUSED',\n  'COMPLETED',\n  'FAILED',\n  'CANCELLED',\n  'COMPENSATING',\n  'COMPENSATED',\n  'WAITING_FOR_ACTIVITIES',\n])\n\nexport const workflowInstanceResponseSchema = z.object({\n  id: z.string().uuid(),\n  definitionId: z.string().uuid(),\n  workflowId: z.string(),\n  version: z.number().int(),\n  status: workflowInstanceStatusEnumSchema,\n  currentStepId: z.string(),\n  context: z.unknown(),\n  correlationKey: z.string().nullable().optional(),\n  metadata: z.unknown().nullable().optional(),\n  startedAt: z.string(),\n  completedAt: z.string().nullable().optional(),\n  pausedAt: z.string().nullable().optional(),\n  cancelledAt: z.string().nullable().optional(),\n  errorMessage: z.string().nullable().optional(),\n  errorDetails: z.unknown().nullable().optional(),\n  pendingTransition: z.unknown().nullable().optional(),\n  retryCount: z.number().int(),\n  tenantId: z.string().uuid(),\n  organizationId: z.string().uuid(),\n  createdAt: z.string(),\n  updatedAt: z.string(),\n  deletedAt: z.string().nullable().optional(),\n})\n\nexport const workflowInstanceListResponseSchema = z.object({\n  data: z.array(workflowInstanceResponseSchema),\n  pagination: paginationSchema,\n})\n\nexport const workflowInstanceDetailResponseSchema = z.object({\n  data: workflowInstanceResponseSchema,\n})\n\nexport const workflowInstanceCancelResponseSchema = z.object({\n  data: workflowInstanceResponseSchema,\n  message: z.string(),\n})\n\n// ---------------------------------------------------------------------------\n// Workflow Execution Result Schemas\n// ---------------------------------------------------------------------------\n\nexport const workflowEventSummarySchema = z.object({\n  eventType: z.string(),\n  occurredAt: z.string(),\n  data: z.unknown().optional(),\n})\n\nexport const workflowExecutionResultSchema = z.object({\n  status: workflowInstanceStatusEnumSchema,\n  currentStep: z.string(),\n  context: z.unknown(),\n  events: z.array(workflowEventSummarySchema),\n  errors: z.array(z.string()).optional(),\n  executionTime: z.number(),\n})\n\nexport const workflowBackgroundStartSchema = z.object({\n  status: workflowInstanceStatusEnumSchema,\n  currentStep: z.string(),\n  message: z.string(),\n})\n\nexport const workflowInstanceCreateResponseSchema = z.object({\n  data: z.object({\n    instance: workflowInstanceResponseSchema,\n    execution: workflowBackgroundStartSchema,\n  }),\n  message: z.string(),\n})\n\nexport const workflowInstanceRetryResponseSchema = z.object({\n  data: z.object({\n    instance: workflowInstanceResponseSchema,\n    execution: workflowExecutionResultSchema,\n  }),\n  message: z.string(),\n})\n\n// ---------------------------------------------------------------------------\n// Workflow Event Response Schemas\n// ---------------------------------------------------------------------------\n\nexport const workflowEventRowSchema = z.object({\n  id: z.string(),\n  workflowInstanceId: z.string().uuid(),\n  stepInstanceId: z.string().uuid().nullable().optional(),\n  eventType: z.string(),\n  eventData: z.unknown(),\n  occurredAt: z.string(),\n  userId: z.string().nullable().optional(),\n  tenantId: z.string().uuid(),\n  organizationId: z.string().uuid(),\n})\n\nexport const workflowEventInstanceSummarySchema = z.object({\n  id: z.string().uuid(),\n  workflowId: z.string(),\n  workflowName: z.string(),\n  status: workflowInstanceStatusEnumSchema,\n})\n\nexport const workflowEventListItemSchema = z.object({\n  id: z.string(),\n  workflowInstanceId: z.string().uuid(),\n  stepInstanceId: z.string().uuid().nullable().optional(),\n  eventType: z.string(),\n  eventData: z.unknown(),\n  occurredAt: z.string(),\n  userId: z.string().nullable().optional(),\n  workflowInstance: workflowEventInstanceSummarySchema.nullable(),\n})\n\nexport const workflowEventListResponseSchema = z.object({\n  items: z.array(workflowEventListItemSchema),\n  total: z.number().int().nonnegative(),\n  page: z.number().int().positive(),\n  pageSize: z.number().int().positive(),\n  totalPages: z.number().int().nonnegative(),\n})\n\nexport const workflowEventInstanceDetailSchema = z.object({\n  id: z.string().uuid(),\n  workflowId: z.string(),\n  version: z.number().int(),\n  status: workflowInstanceStatusEnumSchema,\n  currentStepId: z.string(),\n  correlationKey: z.string().nullable().optional(),\n  startedAt: z.string().nullable().optional(),\n  completedAt: z.string().nullable().optional(),\n  context: z.unknown(),\n})\n\nexport const workflowEventDetailSchema = z.object({\n  id: z.string(),\n  workflowInstanceId: z.string().uuid(),\n  stepInstanceId: z.string().uuid().nullable().optional(),\n  eventType: z.string(),\n  eventData: z.unknown(),\n  occurredAt: z.string(),\n  userId: z.string().nullable().optional(),\n  tenantId: z.string().uuid(),\n  organizationId: z.string().uuid(),\n  workflowInstance: workflowEventInstanceDetailSchema.nullable(),\n})\n\nexport const workflowEventRowListResponseSchema = z.object({\n  data: z.array(workflowEventRowSchema),\n  pagination: paginationSchema,\n})\n\n// ---------------------------------------------------------------------------\n// Signal Schemas\n// ---------------------------------------------------------------------------\n\nexport const sendSignalByCorrelationRequestSchema = z.object({\n  correlationKey: z.string().min(1).describe('Correlation key used to target waiting workflow instances'),\n  signalName: z.string().min(1).describe('Signal name to deliver'),\n  payload: z.record(z.string(), z.unknown()).optional().describe('Optional data payload for the signal'),\n})\n\nexport const sendSignalByCorrelationResponseSchema = z.object({\n  success: z.boolean(),\n  message: z.string(),\n  count: z.number().int().nonnegative(),\n})\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAEX,MAAM,eAAe;AAErB,MAAM,sBAAsB,EAChC,OAAO;AAAA,EACN,OAAO,EAAE,OAAO;AAAA,EAChB,SAAS,EAAE,QAAQ,EAAE,SAAS;AAChC,CAAC,EACA,YAAY;AAER,MAAM,uBAAuB,EAAE,KAAK;AAAA,EACzC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,MAAM,iBAAiB,EAAE,OAAO;AAAA,EACrC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,oBAAoB,EAAE,OAAO,EAAE,KAAK;AAAA,EACpC,gBAAgB,EAAE,OAAO,EAAE,KAAK;AAAA,EAChC,UAAU,EAAE,OAAO;AAAA,EACnB,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,QAAQ;AAAA,EACR,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1C,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC3C,iBAAiB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,SAAS;AAAA,EACzD,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1C,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1C,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACxC,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK;AAAA,EAChC,WAAW,EAAE,OAAO;AAAA,EACpB,WAAW,EAAE,OAAO;AACtB,CAAC;AAEM,MAAM,0BAA0B,EAAE,OAAO;AAAA,EAC9C,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,oGAAoG;AAAA,EAC3I,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,4BAA4B;AAAA,EAC9E,oBAAoB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,gCAAgC;AAAA,EAC1F,SAAS,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,SAAS,mCAAmC;AAAA,EACnF,SAAS,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,SAAS,0DAA0D;AAAA,EAC1G,OAAO,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,SAAS,6BAA6B;AAAA,EACtG,QAAQ,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,SAAS,mBAAmB;AACrF,CAAC;AAEM,MAAM,mBAAmB,EAAE,OAAO;AAAA,EACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,EACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACjC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,EACrC,SAAS,EAAE,QAAQ;AACrB,CAAC;AAEM,MAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,MAAM,EAAE,MAAM,cAAc;AAAA,EAC5B,YAAY;AACd,CAAC;AAEM,MAAM,+BAA+B,EAAE,OAAO;AAAA,EACnD,MAAM;AACR,CAAC;AAEM,MAAM,8BAA8B,EAAE,OAAO;AAAA,EAClD,MAAM;AAAA,EACN,SAAS,EAAE,OAAO;AACpB,CAAC;AAEM,MAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,mBAAmB;AAAA,EACxE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,mBAAmB;AAC9D,CAAC;AAEM,MAAM,iCAAiC,EAAE,OAAO;AAAA,EACrD,MAAM;AAAA,EACN,SAAS,EAAE,OAAO;AACpB,CAAC;AAEM,MAAM,+BAA+B,EAAE,OAAO;AAAA,EACnD,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,sEAAsE;AAAA,EAC/G,aAAa,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS,yDAAyD;AAAA,EAC5H,gBAAgB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS,6DAA6D;AACrI,CAAC;AAEM,MAAM,gCAAgC,EAAE,OAAO;AAAA,EACpD,MAAM,EAAE,OAAO;AAAA,IACb,UAAU,EAAE,OAAO;AAAA,MACjB,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,MACpB,QAAQ,EAAE,OAAO;AAAA,MACjB,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,MACnC,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,MACpC,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,MACrC,SAAS,EAAE,QAAQ;AAAA,IACrB,CAAC;AAAA,IACD,WAAW,EAAE,QAAQ;AAAA,EACvB,CAAC;AAAA,EACD,SAAS,EAAE,OAAO;AACpB,CAAC;AAEM,MAAM,0BAA0B,EAAE,OAAO;AAAA,EAC9C,YAAY,EAAE,OAAO,EAAE,SAAS,4BAA4B;AAAA,EAC5D,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS,sCAAsC;AACvG,CAAC;AAEM,MAAM,2BAA2B,EAAE,OAAO;AAAA,EAC/C,SAAS,EAAE,QAAQ;AAAA,EACnB,SAAS,EAAE,OAAO;AACpB,CAAC;AAEM,MAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,wBAAwB;AAAA,EAC/D,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,sCAAsC;AAAA,EAC/F,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS,oCAAoC;AAAA,EACnG,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,gCAAgC;AACzE,CAAC;AAEM,MAAM,2BAA2B,EAAE,OAAO;AAAA,EAC/C,QAAQ,EAAE,OAAO;AAAA,EACjB,SAAS,EAAE,OAAO;AAAA,EAClB,MAAM,EAAE,OAAO;AACjB,CAAC;AAEM,MAAM,0BAA0B,EAAE,OAAO;AAAA,EAC9C,QAAQ,EAAE,OAAO;AAAA,EACjB,QAAQ,EAAE,QAAQ;AAAA,EAClB,eAAe,EAAE,OAAO,EAAE,SAAS;AACrC,CAAC;AAEM,MAAM,8BAA8B,EAAE,OAAO;AAAA,EAClD,UAAU,EAAE,QAAQ;AAAA,EACpB,YAAY,EAAE,OAAO;AAAA,EACrB,QAAQ,EAAE,MAAM,wBAAwB,EAAE,SAAS;AAAA,EACnD,gBAAgB,EAAE,MAAM,uBAAuB,EAAE,SAAS;AAC5D,CAAC;AAMM,MAAM,mCAAmC,EAAE,KAAK;AAAA,EACrD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,MAAM,iCAAiC,EAAE,OAAO;AAAA,EACrD,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,cAAc,EAAE,OAAO,EAAE,KAAK;AAAA,EAC9B,YAAY,EAAE,OAAO;AAAA,EACrB,SAAS,EAAE,OAAO,EAAE,IAAI;AAAA,EACxB,QAAQ;AAAA,EACR,eAAe,EAAE,OAAO;AAAA,EACxB,SAAS,EAAE,QAAQ;AAAA,EACnB,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC/C,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1C,WAAW,EAAE,OAAO;AAAA,EACpB,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACzC,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC7C,cAAc,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS;AAAA,EAC9C,mBAAmB,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS;AAAA,EACnD,YAAY,EAAE,OAAO,EAAE,IAAI;AAAA,EAC3B,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK;AAAA,EAChC,WAAW,EAAE,OAAO;AAAA,EACpB,WAAW,EAAE,OAAO;AAAA,EACpB,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAC5C,CAAC;AAEM,MAAM,qCAAqC,EAAE,OAAO;AAAA,EACzD,MAAM,EAAE,MAAM,8BAA8B;AAAA,EAC5C,YAAY;AACd,CAAC;AAEM,MAAM,uCAAuC,EAAE,OAAO;AAAA,EAC3D,MAAM;AACR,CAAC;AAEM,MAAM,uCAAuC,EAAE,OAAO;AAAA,EAC3D,MAAM;AAAA,EACN,SAAS,EAAE,OAAO;AACpB,CAAC;AAMM,MAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,WAAW,EAAE,OAAO;AAAA,EACpB,YAAY,EAAE,OAAO;AAAA,EACrB,MAAM,EAAE,QAAQ,EAAE,SAAS;AAC7B,CAAC;AAEM,MAAM,gCAAgC,EAAE,OAAO;AAAA,EACpD,QAAQ;AAAA,EACR,aAAa,EAAE,OAAO;AAAA,EACtB,SAAS,EAAE,QAAQ;AAAA,EACnB,QAAQ,EAAE,MAAM,0BAA0B;AAAA,EAC1C,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS;AAAA,EACrC,eAAe,EAAE,OAAO;AAC1B,CAAC;AAEM,MAAM,gCAAgC,EAAE,OAAO;AAAA,EACpD,QAAQ;AAAA,EACR,aAAa,EAAE,OAAO;AAAA,EACtB,SAAS,EAAE,OAAO;AACpB,CAAC;AAEM,MAAM,uCAAuC,EAAE,OAAO;AAAA,EAC3D,MAAM,EAAE,OAAO;AAAA,IACb,UAAU;AAAA,IACV,WAAW;AAAA,EACb,CAAC;AAAA,EACD,SAAS,EAAE,OAAO;AACpB,CAAC;AAEM,MAAM,sCAAsC,EAAE,OAAO;AAAA,EAC1D,MAAM,EAAE,OAAO;AAAA,IACb,UAAU;AAAA,IACV,WAAW;AAAA,EACb,CAAC;AAAA,EACD,SAAS,EAAE,OAAO;AACpB,CAAC;AAMM,MAAM,yBAAyB,EAAE,OAAO;AAAA,EAC7C,IAAI,EAAE,OAAO;AAAA,EACb,oBAAoB,EAAE,OAAO,EAAE,KAAK;AAAA,EACpC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACtD,WAAW,EAAE,OAAO;AAAA,EACpB,WAAW,EAAE,QAAQ;AAAA,EACrB,YAAY,EAAE,OAAO;AAAA,EACrB,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACvC,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK;AAClC,CAAC;AAEM,MAAM,qCAAqC,EAAE,OAAO;AAAA,EACzD,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,YAAY,EAAE,OAAO;AAAA,EACrB,cAAc,EAAE,OAAO;AAAA,EACvB,QAAQ;AACV,CAAC;AAEM,MAAM,8BAA8B,EAAE,OAAO;AAAA,EAClD,IAAI,EAAE,OAAO;AAAA,EACb,oBAAoB,EAAE,OAAO,EAAE,KAAK;AAAA,EACpC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACtD,WAAW,EAAE,OAAO;AAAA,EACpB,WAAW,EAAE,QAAQ;AAAA,EACrB,YAAY,EAAE,OAAO;AAAA,EACrB,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACvC,kBAAkB,mCAAmC,SAAS;AAChE,CAAC;AAEM,MAAM,kCAAkC,EAAE,OAAO;AAAA,EACtD,OAAO,EAAE,MAAM,2BAA2B;AAAA,EAC1C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,EACpC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EAChC,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACpC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAC3C,CAAC;AAEM,MAAM,oCAAoC,EAAE,OAAO;AAAA,EACxD,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,YAAY,EAAE,OAAO;AAAA,EACrB,SAAS,EAAE,OAAO,EAAE,IAAI;AAAA,EACxB,QAAQ;AAAA,EACR,eAAe,EAAE,OAAO;AAAA,EACxB,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC/C,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1C,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,SAAS,EAAE,QAAQ;AACrB,CAAC;AAEM,MAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,IAAI,EAAE,OAAO;AAAA,EACb,oBAAoB,EAAE,OAAO,EAAE,KAAK;AAAA,EACpC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACtD,WAAW,EAAE,OAAO;AAAA,EACpB,WAAW,EAAE,QAAQ;AAAA,EACrB,YAAY,EAAE,OAAO;AAAA,EACrB,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACvC,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK;AAAA,EAChC,kBAAkB,kCAAkC,SAAS;AAC/D,CAAC;AAEM,MAAM,qCAAqC,EAAE,OAAO;AAAA,EACzD,MAAM,EAAE,MAAM,sBAAsB;AAAA,EACpC,YAAY;AACd,CAAC;AAMM,MAAM,uCAAuC,EAAE,OAAO;AAAA,EAC3D,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,2DAA2D;AAAA,EACtG,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,wBAAwB;AAAA,EAC/D,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS,sCAAsC;AACvG,CAAC;AAEM,MAAM,wCAAwC,EAAE,OAAO;AAAA,EAC5D,SAAS,EAAE,QAAQ;AAAA,EACnB,SAAS,EAAE,OAAO;AAAA,EAClB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AACtC,CAAC;",
+  "sourcesContent": ["import { z } from 'zod'\nimport { workflowDefinitionDataSchema, workflowDefinitionDraftDataSchema } from '../data/validators'\n\nexport const workflowsTag = 'Workflows'\n\nexport const workflowErrorSchema = z\n  .object({\n    error: z.string(),\n    details: z.unknown().optional(),\n  })\n  .passthrough()\n\nexport const userTaskStatusSchema = z.enum([\n  'PENDING',\n  'IN_PROGRESS',\n  'COMPLETED',\n  'CANCELLED',\n  'ESCALATED',\n])\n\nexport const userTaskSchema = z.object({\n  id: z.string().uuid(),\n  workflowInstanceId: z.string().uuid(),\n  stepInstanceId: z.string().uuid(),\n  branchInstanceId: z.string().uuid().nullable().optional(),\n  taskName: z.string(),\n  description: z.string().nullable().optional(),\n  status: userTaskStatusSchema,\n  formSchema: z.unknown().nullable().optional(),\n  formData: z.unknown().nullable().optional(),\n  assignedTo: z.string().nullable().optional(),\n  assigneeKind: z\n    .enum(['user', 'customer'])\n    .describe('Which principal namespace assignedTo names \u2014 a backoffice user or a portal principal'),\n  assignedToRoles: z.array(z.string()).nullable().optional(),\n  entityTypes: z\n    .array(z.string())\n    .nullable()\n    .optional()\n    .describe('Distinct authored entity types of the bindings, denormalized for the visibility filter'),\n  claimedBy: z.string().nullable().optional(),\n  claimedAt: z.string().nullable().optional(),\n  dueDate: z.string().nullable().optional(),\n  escalatedAt: z.string().nullable().optional(),\n  escalatedTo: z.string().nullable().optional(),\n  completedBy: z.string().nullable().optional(),\n  completedAt: z.string().nullable().optional(),\n  comments: z.string().nullable().optional(),\n  reassignedBy: z.string().nullable().optional().describe('Who last reassigned this task'),\n  reassignedAt: z.string().nullable().optional().describe('When it was last reassigned'),\n  reassignReason: z.string().nullable().optional().describe('Why it was reassigned'),\n  tenantId: z.string().uuid(),\n  organizationId: z.string().uuid(),\n  createdAt: z.string(),\n  /** Optimistic-lock version \u2014 a reassign UI sends it back as the lock header. */\n  updatedAt: z.string(),\n})\n\n/**\n * List projection: every field the raw-entity dump already returned, plus the\n * work-item fields consumers had to dig out of `formSchema` themselves (the\n * enterprise \"Review proposal\" row action read `row.proposalId`, which was\n * never there). Strictly a superset \u2014 BACKWARD_COMPATIBILITY.md \u00A77 forbids\n * dropping a response field.\n */\nexport const userTaskRowSchema = userTaskSchema.extend({\n  kind: z.literal('user_task').describe('Work-inbox source discriminator'),\n  proposalId: z.string().nullable().describe('Agent proposal this task disposes, when any'),\n  priority: z.union([z.string(), z.number()]).nullable(),\n  entityBindings: z.array(z.unknown()).nullable().describe('Records this task is about, when authored'),\n})\n\nexport const userTaskListQuerySchema = z.object({\n  status: z.string().optional().describe('Filter by status (comma-separated for multiple: PENDING,IN_PROGRESS,COMPLETED,CANCELLED,ESCALATED)'),\n  assignedTo: z.string().uuid().optional().describe('Filter by assigned user ID'),\n  workflowInstanceId: z.string().uuid().optional().describe('Filter by workflow instance ID'),\n  overdue: z.coerce.boolean().optional().describe('Filter overdue tasks (true/false)'),\n  myTasks: z.coerce.boolean().optional().describe('Show only tasks assigned to or claimable by current user'),\n  limit: z.coerce.number().min(1).max(100).optional().default(50).describe('Number of results (max 100)'),\n  offset: z.coerce.number().min(0).optional().default(0).describe('Pagination offset'),\n})\n\nexport const paginationSchema = z.object({\n  total: z.number().int().nonnegative(),\n  limit: z.number().int().positive(),\n  offset: z.number().int().nonnegative(),\n  hasMore: z.boolean(),\n})\n\n/**\n * A row the caller may know exists but may not read (design \u00A73.6).\n *\n * Three fields and no fourth: the id (the argument to reassignment and to a\n * support conversation), the reason (an author's typo vs a policy refusal) and\n * the entity type that names the grant which would fix it. Nothing that says\n * what the task is ABOUT appears here \u2014 that is the difference between a\n * diagnostic and a leak.\n */\nexport const taskEntityHiddenMarkerSchema = z.object({\n  id: z.string(),\n  reason: z.enum(['denied:entity-access', 'denied:unknown-entity-type']),\n  entityType: z.string().nullable(),\n})\n\n/**\n * Emitted only for a principal that already knows the rows are there \u2014 a\n * `workflows.tasks.view_all` holder or a superadmin. For everybody else the\n * entity gate removed those rows in SQL, `entityHidden` is empty and its\n * absence discloses nothing.\n *\n * `pagination.total` COUNTS the hidden rows, and that is deliberate: an\n * administrator asking \"how much work is open?\" wants the true number, and the\n * marker list is what explains why the page is shorter than it. Suppressing them\n * from the count would make the page short for no stated reason, which is the\n * silent disappearance \u00A73.6 exists to prevent.\n */\nexport const taskListDiagnosticsSchema = z.object({\n  entityHidden: z.array(taskEntityHiddenMarkerSchema),\n  entityHiddenCount: z.number().int().nonnegative(),\n})\n\nexport const userTaskListResponseSchema = z.object({\n  data: z.array(userTaskRowSchema),\n  pagination: paginationSchema,\n  diagnostics: taskListDiagnosticsSchema.optional(),\n})\n\n/**\n * A decision button as the assignee sees it, re-resolved at request time from\n * the instance's pinned definition (never stored on the task row).\n */\nexport const userTaskDecisionSchema = z.object({\n  id: z.string(),\n  label: z.union([z.string(), z.record(z.string(), z.string())]),\n  transitionId: z.string().describe('Durable id of the route this button takes'),\n  style: z.enum(['primary', 'secondary', 'destructive']).optional(),\n})\n\n/**\n * Why an act surface is closed to a caller who can read the row.\n *\n * Each value is derivable from fields the same response already carries, except\n * `unavailable`, which is deliberately mute: it stands for the entity-gate\n * refusal the act routes answer as a bare 404, and naming the binding there\n * would leak it to the very caller the gate refused.\n */\nexport const taskActionBlockReasonSchema = z.enum([\n  'not-workable',\n  'owned-by-another',\n  'not-in-your-queue',\n  'unowned',\n  'unavailable',\n])\n\n/**\n * Detail projection: the same superset the list returns, plus the derived\n * decision buttons, the definition step id they belong to, and the \u00A76.4 act\n * surfaces.\n *\n * The `can*` flags are ADDITIVE (BACKWARD_COMPATIBILITY.md \u00A77) and are the\n * server's own decision, not a hint: `workflows.tasks.view_all` makes a row\n * readable and leaves `canComplete` false, which is exactly the asymmetry the\n * page used to render wrong.\n */\nexport const userTaskDetailResponseSchema = z.object({\n  data: userTaskRowSchema.extend({\n    stepId: z.string().nullable().describe('Definition step the task is parked on'),\n    decisions: z.array(userTaskDecisionSchema),\n    canComplete: z.boolean().describe('The caller may complete or decide this task'),\n    canClaim: z.boolean().describe('The caller may claim it off its role queue'),\n    canRelease: z.boolean().describe('The caller holds the claim and may release it'),\n    canReassign: z.boolean().describe('The caller may move it to another assignee or queue'),\n    actBlockedReason: taskActionBlockReasonSchema\n      .nullable()\n      .describe('Why completion is unavailable; null when it is available'),\n  }),\n})\n\nexport const userTaskClaimResponseSchema = z.object({\n  data: userTaskSchema,\n  message: z.string(),\n})\n\n/**\n * Reassignment answers with the same row projection every other task surface\n * serves, so a client can refresh its copy \u2014 including the `reassignedBy` /\n * `reassignedAt` / `reassignReason` audit fields and the new `updatedAt` the\n * next optimistic-lock header must carry.\n */\nexport const userTaskReassignResponseSchema = z.object({\n  data: userTaskRowSchema,\n  message: z.string(),\n})\n\n// ============================================================================\n// Work Inbox (spec \u00A76.2/\u00A76.3 \u2014 one queue over every registered source)\n// ============================================================================\n\nexport const workInboxPrioritySchema = z.enum(['extreme', 'high', 'medium', 'low'])\n\nexport const workInboxEntityBindingSchema = z.object({\n  entityType: z.string(),\n  entityId: z.string(),\n  label: z.string().nullable().optional(),\n})\n\nexport const workInboxActionSchema = z.object({\n  id: z.string(),\n  labelKey: z.string(),\n  endpoint: z.string(),\n  appliesTo: z.enum(['claimable', 'claimed-by-me', 'open', 'always']),\n})\n\n/**\n * Passthrough on purpose: a row carries its source's own payload alongside the\n * common projection, so a `user_task` row is a superset of a\n * `GET /api/workflows/tasks` row (that is what keeps `proposalId` reachable).\n */\nexport const workInboxRowSchema = z\n  .object({\n    id: z.string(),\n    kind: z.string().describe('Source discriminator \u2014 user_task, agent_disposition, \u2026'),\n    moduleId: z.string(),\n    title: z.string(),\n    description: z.string().nullable(),\n    status: z.string(),\n    priority: workInboxPrioritySchema.nullable(),\n    dueDate: z.string().nullable(),\n    overdue: z.boolean().describe('Derived: past due and not finished'),\n    createdAt: z.string(),\n    updatedAt: z.string(),\n    assignedTo: z.string().nullable(),\n    assignedToRoles: z.array(z.string()).nullable(),\n    claimedBy: z.string().nullable(),\n    entityTypes: z.array(z.string()),\n    entityBindings: z.array(workInboxEntityBindingSchema),\n    detailHref: z.string().nullable(),\n    actions: z.array(workInboxActionSchema),\n  })\n  .passthrough()\n\nexport const workInboxListQuerySchema = z.object({\n  kind: z.string().optional().describe('Filter by source kind (comma-separated)'),\n  module: z.string().optional().describe('Filter by owning module id (comma-separated)'),\n  entityType: z.string().optional().describe('Filter by bound entity type (comma-separated)'),\n  role: z.string().optional().describe('Filter by queued role (comma-separated)'),\n  priority: z.string().optional().describe('Filter by priority (comma-separated: extreme,high,medium,low)'),\n  status: z.string().optional().describe('Filter by status (comma-separated)'),\n  overdue: z.coerce.boolean().optional().describe('Only items past their due date'),\n  myWork: z.coerce.boolean().optional().describe('Only items assigned to, claimed by, or queued to a role of the caller'),\n  assignedTo: z.string().optional().describe('Filter by assignee'),\n  workflowInstanceId: z.string().uuid().optional().describe('Filter by workflow instance'),\n  limit: z.coerce.number().min(1).max(100).optional().default(50).describe('Number of results (max 100)'),\n  offset: z.coerce.number().min(0).optional().default(0).describe('Pagination offset'),\n})\n\nexport const workInboxListResponseSchema = z.object({\n  data: z.array(workInboxRowSchema),\n  pagination: paginationSchema,\n  meta: z.object({\n    kinds: z.array(z.string()).describe('Source kinds that answered this request'),\n    degradedKinds: z.array(z.string()).describe('Source kinds that failed; their work is missing from this page'),\n  }),\n  diagnostics: taskListDiagnosticsSchema.optional(),\n})\n\nexport const workInboxClaimNextResponseSchema = z.object({\n  data: workInboxRowSchema.nullable().describe('The claimed item, or null when nothing was claimable'),\n  message: z.string(),\n})\n\nexport const completeTaskRequestSchema = z.object({\n  formData: z.record(z.string(), z.unknown()).describe('Form field values'),\n  comments: z.string().optional().describe('Optional comments'),\n  decisionId: z\n    .string()\n    .optional()\n    .describe('Decision button pressed; selects the outgoing route and is recorded with the completion'),\n})\n\nexport const userTaskCompleteResponseSchema = z.object({\n  data: userTaskSchema,\n  message: z.string(),\n})\n\n/**\n * Portal task surface (design \u00A77.4).\n *\n * A separate response envelope from the backoffice one on purpose: the portal\n * routes speak the portal convention (`{ ok, \u2026 }`, page/pageSize paging) that\n * every other `customer_accounts` portal route already speaks, and keeping the\n * two shapes apart means a future change to one cannot silently reshape the\n * other. The ROW projection is deliberately shared \u2014 a task is the same record\n * whoever reads it, and a divergent portal projection is how a field ends up\n * exposed on one surface and not the other.\n */\nexport const portalTaskErrorSchema = z\n  .object({ ok: z.literal(false), error: z.string() })\n  .describe('Portal error response')\n\nexport const portalTaskListQuerySchema = z.object({\n  status: z.string().optional().describe('Filter by status (comma-separated for multiple)'),\n  page: z.coerce.number().min(1).optional().default(1).describe('Page number'),\n  pageSize: z.coerce.number().min(1).max(100).optional().default(25).describe('Rows per page (max 100)'),\n})\n\nexport const portalPaginationSchema = z.object({\n  page: z.number().int().positive(),\n  pageSize: z.number().int().positive(),\n  total: z.number().int().nonnegative(),\n  totalPages: z.number().int().positive(),\n})\n\nexport const portalTaskListResponseSchema = z.object({\n  ok: z.literal(true),\n  tasks: z.array(userTaskRowSchema),\n  pagination: portalPaginationSchema,\n})\n\nexport const portalTaskDetailResponseSchema = z.object({\n  ok: z.literal(true),\n  task: userTaskRowSchema,\n  decisions: z.array(userTaskDecisionSchema),\n  formKey: z.string().nullable().describe('External renderer key, when the author declared one'),\n  canComplete: z\n    .boolean()\n    .describe('True only for the assignee; a portal admin reading a company member\\'s task gets false'),\n})\n\nexport const portalTaskCompleteRequestSchema = completeTaskRequestSchema\n\nexport const portalTaskCompleteResponseSchema = z.object({\n  ok: z.literal(true),\n  task: userTaskRowSchema.nullable(),\n})\n\nexport const advanceWorkflowRequestSchema = z.object({\n  toStepId: z.string().optional().describe('Optional target step ID; first valid transition is used when omitted'),\n  triggerData: z.record(z.string(), z.unknown()).optional().describe('Optional trigger data used during transition evaluation'),\n  contextUpdates: z.record(z.string(), z.unknown()).optional().describe('Optional workflow context updates applied before transition'),\n})\n\nexport const advanceWorkflowResponseSchema = z.object({\n  data: z.object({\n    instance: z.object({\n      id: z.string().uuid(),\n      status: z.string(),\n      currentStepId: z.string().nullable(),\n      previousStepId: z.string().nullable(),\n      transitionFired: z.string().nullable(),\n      context: z.unknown(),\n    }),\n    execution: z.unknown(),\n  }),\n  message: z.string(),\n})\n\nexport const sendSignalRequestSchema = z.object({\n  signalName: z.string().describe('Name of the signal to send'),\n  payload: z.record(z.string(), z.unknown()).optional().describe('Optional data payload for the signal'),\n})\n\nexport const sendSignalResponseSchema = z.object({\n  success: z.boolean(),\n  message: z.string(),\n})\n\nexport const updateInstanceContextRequestSchema = z.object({\n  context: z\n    .record(z.string(), z.unknown())\n    .describe('Partial context patch, shallow-merged into the running instance context'),\n})\n\nexport const updateInstanceContextResponseSchema = z.object({\n  ok: z.literal(true),\n  instanceId: z.string(),\n  woken: z.array(z.string()).describe('Step ids of the WAIT_FOR_CONDITION waiters that resumed'),\n})\n\nexport const validateStartRequestSchema = z.object({\n  workflowId: z.string().min(1).describe('Workflow definition ID'),\n  version: z.number().int().positive().optional().describe('Optional workflow definition version'),\n  context: z.record(z.string(), z.unknown()).optional().describe('Initial workflow context variables'),\n  locale: z.string().optional().describe('Locale for validation messages'),\n})\n\nexport const validateStartErrorSchema = z.object({\n  ruleId: z.string(),\n  message: z.string(),\n  code: z.string(),\n})\n\nexport const validateStartRuleSchema = z.object({\n  ruleId: z.string(),\n  passed: z.boolean(),\n  executionTime: z.number().optional(),\n})\n\nexport const validateStartResponseSchema = z.object({\n  canStart: z.boolean(),\n  workflowId: z.string(),\n  errors: z.array(validateStartErrorSchema).optional(),\n  validatedRules: z.array(validateStartRuleSchema).optional(),\n})\n\n// ---------------------------------------------------------------------------\n// Workflow Definition Response Schemas\n// ---------------------------------------------------------------------------\n\nexport const workflowDefinitionSourceSchema = z.enum(['code', 'code_override', 'user'])\n\nexport const workflowDefinitionResponseSchema = z\n  .object({\n    id: z.string().describe('UUID for DB definitions, or \"code:<workflowId>\" for code-based definitions'),\n    workflowId: z.string(),\n    workflowName: z.string(),\n    description: z.string().nullable(),\n    version: z.number().int(),\n    definition: workflowDefinitionDataSchema,\n    metadata: z.record(z.string(), z.unknown()).nullable(),\n    enabled: z.boolean(),\n    effectiveFrom: z.string().nullable(),\n    effectiveTo: z.string().nullable(),\n    tenantId: z.string().nullable(),\n    organizationId: z.string().nullable(),\n    grantedFeatures: z.array(z.string()).nullable(),\n    createdBy: z.string().nullable(),\n    updatedBy: z.string().nullable(),\n    createdAt: z.string().nullable(),\n    updatedAt: z.string().nullable(),\n    deletedAt: z.string().nullable(),\n    source: workflowDefinitionSourceSchema,\n    isCodeBased: z.boolean(),\n    codeModuleId: z.string().nullable(),\n  })\n  .passthrough()\n\nexport const workflowDefinitionListResponseSchema = z.object({\n  data: z.array(workflowDefinitionResponseSchema),\n  pagination: paginationSchema,\n})\n\nexport const workflowDefinitionDetailResponseSchema = z.object({\n  data: workflowDefinitionResponseSchema,\n})\n\nexport const workflowDefinitionMutationResponseSchema = z.object({\n  data: workflowDefinitionResponseSchema,\n  message: z.string(),\n})\n\nexport const workflowDefinitionResetResponseSchema = z.object({\n  data: workflowDefinitionResponseSchema.nullable(),\n  message: z.string(),\n})\n\nexport const workflowDefinitionDeleteResponseSchema = z.object({\n  message: z.string(),\n})\n\n// ---------------------------------------------------------------------------\n// Workflow Instance Response Schemas\n// ---------------------------------------------------------------------------\n\nexport const workflowInstanceStatusEnumSchema = z.enum([\n  'RUNNING',\n  'PAUSED',\n  'COMPLETED',\n  'FAILED',\n  'CANCELLED',\n  'COMPENSATING',\n  'COMPENSATED',\n  'WAITING_FOR_ACTIVITIES',\n])\n\nexport const workflowRunOutcomeEnumSchema = z.enum([\n  'success',\n  'success_with_warnings',\n  'partial_failure',\n  'failure',\n  'cancelled',\n  'compensated',\n])\n\nexport const workflowInstanceResponseSchema = z.object({\n  id: z.string().uuid(),\n  definitionId: z.string().uuid(),\n  workflowId: z.string(),\n  version: z.number().int(),\n  status: workflowInstanceStatusEnumSchema,\n  // The run's VERDICT, additive alongside the lifecycle status. Null while the\n  // run is still going, and null for ever on a row written before outcomes\n  // existed \u2014 which means \"ran before outcomes existed\", never \"success\".\n  outcome: workflowRunOutcomeEnumSchema.nullable().optional(),\n  currentStepId: z.string(),\n  context: z.unknown(),\n  correlationKey: z.string().nullable().optional(),\n  metadata: z.unknown().nullable().optional(),\n  startedAt: z.string(),\n  completedAt: z.string().nullable().optional(),\n  pausedAt: z.string().nullable().optional(),\n  cancelledAt: z.string().nullable().optional(),\n  errorMessage: z.string().nullable().optional(),\n  errorDetails: z.unknown().nullable().optional(),\n  pendingTransition: z.unknown().nullable().optional(),\n  retryCount: z.number().int(),\n  tenantId: z.string().uuid(),\n  organizationId: z.string().uuid(),\n  createdAt: z.string(),\n  updatedAt: z.string(),\n  deletedAt: z.string().nullable().optional(),\n})\n\nexport const workflowInstanceListResponseSchema = z.object({\n  data: z.array(workflowInstanceResponseSchema),\n  pagination: paginationSchema,\n})\n\nexport const workflowInstanceDetailResponseSchema = z.object({\n  data: workflowInstanceResponseSchema,\n})\n\nexport const workflowInstanceCancelResponseSchema = z.object({\n  data: workflowInstanceResponseSchema,\n  message: z.string(),\n})\n\n// ---------------------------------------------------------------------------\n// Workflow Execution Result Schemas\n// ---------------------------------------------------------------------------\n\nexport const workflowEventSummarySchema = z.object({\n  eventType: z.string(),\n  occurredAt: z.string(),\n  data: z.unknown().optional(),\n})\n\nexport const workflowExecutionResultSchema = z.object({\n  status: workflowInstanceStatusEnumSchema,\n  currentStep: z.string(),\n  context: z.unknown(),\n  events: z.array(workflowEventSummarySchema),\n  errors: z.array(z.string()).optional(),\n  executionTime: z.number(),\n})\n\nexport const workflowBackgroundStartSchema = z.object({\n  status: workflowInstanceStatusEnumSchema,\n  currentStep: z.string(),\n  message: z.string(),\n})\n\nexport const workflowInstanceCreateResponseSchema = z.object({\n  data: z.object({\n    instance: workflowInstanceResponseSchema,\n    execution: workflowBackgroundStartSchema,\n  }),\n  message: z.string(),\n})\n\nexport const workflowInstanceRetryResponseSchema = z.object({\n  data: z.object({\n    instance: workflowInstanceResponseSchema,\n    execution: workflowExecutionResultSchema,\n  }),\n  message: z.string(),\n})\n\n// ---------------------------------------------------------------------------\n// Workflow Event Response Schemas\n// ---------------------------------------------------------------------------\n\nexport const workflowEventRowSchema = z.object({\n  id: z.string(),\n  workflowInstanceId: z.string().uuid(),\n  stepInstanceId: z.string().uuid().nullable().optional(),\n  eventType: z.string(),\n  eventData: z.unknown(),\n  occurredAt: z.string(),\n  userId: z.string().nullable().optional(),\n  tenantId: z.string().uuid(),\n  organizationId: z.string().uuid(),\n})\n\nexport const workflowEventInstanceSummarySchema = z.object({\n  id: z.string().uuid(),\n  workflowId: z.string(),\n  workflowName: z.string(),\n  status: workflowInstanceStatusEnumSchema,\n})\n\nexport const workflowEventListItemSchema = z.object({\n  id: z.string(),\n  workflowInstanceId: z.string().uuid(),\n  stepInstanceId: z.string().uuid().nullable().optional(),\n  eventType: z.string(),\n  eventData: z.unknown(),\n  occurredAt: z.string(),\n  userId: z.string().nullable().optional(),\n  workflowInstance: workflowEventInstanceSummarySchema.nullable(),\n})\n\nexport const workflowEventListResponseSchema = z.object({\n  items: z.array(workflowEventListItemSchema),\n  total: z.number().int().nonnegative(),\n  page: z.number().int().positive(),\n  pageSize: z.number().int().positive(),\n  totalPages: z.number().int().nonnegative(),\n})\n\nexport const workflowEventInstanceDetailSchema = z.object({\n  id: z.string().uuid(),\n  workflowId: z.string(),\n  version: z.number().int(),\n  status: workflowInstanceStatusEnumSchema,\n  currentStepId: z.string(),\n  correlationKey: z.string().nullable().optional(),\n  startedAt: z.string().nullable().optional(),\n  completedAt: z.string().nullable().optional(),\n  context: z.unknown(),\n})\n\nexport const workflowEventDetailSchema = z.object({\n  id: z.string(),\n  workflowInstanceId: z.string().uuid(),\n  stepInstanceId: z.string().uuid().nullable().optional(),\n  eventType: z.string(),\n  eventData: z.unknown(),\n  occurredAt: z.string(),\n  userId: z.string().nullable().optional(),\n  tenantId: z.string().uuid(),\n  organizationId: z.string().uuid(),\n  workflowInstance: workflowEventInstanceDetailSchema.nullable(),\n})\n\nexport const workflowEventRowListResponseSchema = z.object({\n  data: z.array(workflowEventRowSchema),\n  pagination: paginationSchema,\n})\n\n// ---------------------------------------------------------------------------\n// Step Instance Schemas (spec \u00A78.3 per-step I/O inspector)\n// ---------------------------------------------------------------------------\n\nexport const workflowStepInstanceRowSchema = z.object({\n  id: z.string().uuid(),\n  workflowInstanceId: z.string().uuid(),\n  branchInstanceId: z.string().uuid().nullable().optional(),\n  stepId: z.string(),\n  stepName: z.string(),\n  stepType: z.string(),\n  status: z.string(),\n  inputData: z.unknown().nullable().optional(),\n  outputData: z.unknown().nullable().optional(),\n  errorData: z.unknown().nullable().optional(),\n  enteredAt: z.string().nullable().optional(),\n  exitedAt: z.string().nullable().optional(),\n  executionTimeMs: z.number().int().nullable().optional(),\n  retryCount: z.number().int().nonnegative(),\n})\n\nexport const workflowStepInstanceListResponseSchema = z.object({\n  data: z.array(workflowStepInstanceRowSchema),\n  pagination: paginationSchema,\n})\n\n// ---------------------------------------------------------------------------\n// Signal Schemas\n// ---------------------------------------------------------------------------\n\nexport const sendSignalByCorrelationRequestSchema = z.object({\n  correlationKey: z.string().min(1).describe('Correlation key used to target waiting workflow instances'),\n  signalName: z.string().min(1).describe('Signal name to deliver'),\n  payload: z.record(z.string(), z.unknown()).optional().describe('Optional data payload for the signal'),\n})\n\nexport const sendSignalByCorrelationResponseSchema = z.object({\n  success: z.boolean(),\n  message: z.string(),\n  count: z.number().int().nonnegative(),\n})\n\n// ---------------------------------------------------------------------------\n// Workflow-Safe Command Schemas\n// ---------------------------------------------------------------------------\n\nexport const workflowSafeCommandSchema = z.object({\n  commandId: z.string().min(1).describe('Command bus id allowlisted for UPDATE_ENTITY activities'),\n  requiredFeatures: z.array(z.string()).min(1).describe('ACL features the workflow actor must hold to run the command'),\n  labelKey: z.string().nullable().optional().describe('i18n key for a human label, supplied by the declaring module'),\n  enabled: z.boolean().optional().describe('Whether this tenant has switched the command on'),\n  defaultEnabled: z.boolean().optional().describe('Whether the declaration carries the grandfather clause, i.e. it is on for a tenant that never saved the setting'),\n})\n\nexport const workflowSafeCommandListResponseSchema = z.object({\n  items: z.array(workflowSafeCommandSchema),\n})\n\nexport const workflowCommandSettingsResponseSchema = z.object({\n  configured: z.boolean().describe('False when the tenant has never saved the setting and the answers are the grandfathered defaults'),\n  items: z.array(workflowSafeCommandSchema),\n})\n\nexport const workflowCommandSettingsPutBodySchema = z.object({\n  enabledCommandIds: z\n    .array(z.string().min(1))\n    .max(500)\n    .describe('The complete set of catalogue command ids to enable for this tenant'),\n})\n\nexport const workflowCommandSettingsPutResponseSchema = workflowCommandSettingsResponseSchema.extend({\n  ok: z.boolean(),\n})\n\n// ---------------------------------------------------------------------------\n// Workflow Function Schemas\n// ---------------------------------------------------------------------------\n\nexport const workflowFunctionSchema = z.object({\n  name: z.string().min(1).describe('DI-registered function name resolved as workflowFunction:<name> by EXECUTE_FUNCTION activities'),\n  labelKey: z.string().optional().describe('Optional i18n key for a human-readable label'),\n  description: z.string().optional().describe('Optional description of what the function does'),\n})\n\nexport const workflowFunctionListResponseSchema = z.object({\n  items: z.array(workflowFunctionSchema),\n})\n\n// ---------------------------------------------------------------------------\n// Workflow Endpoint Catalog Schemas\n// ---------------------------------------------------------------------------\n\nexport const workflowEndpointParamSchema = z.object({\n  name: z.string().min(1).describe('Parameter name'),\n  in: z.enum(['path', 'query', 'header']).describe('Where the parameter is sent'),\n  required: z.boolean().describe('Whether the endpoint requires the parameter'),\n  type: z.string().describe('JSON-schema primitive type of the parameter, or \"unknown\"'),\n})\n\nexport const workflowEndpointSchema = z.object({\n  path: z.string().min(1).describe('Endpoint path with the /api prefix and {param} placeholders'),\n  method: z.string().min(1).describe('HTTP method'),\n  summary: z.string().describe('Human-readable endpoint summary'),\n  tag: z.string().describe('OpenAPI tag used to group endpoints in the picker'),\n  params: z.array(workflowEndpointParamSchema).describe('Path/query/header parameters split required vs optional'),\n  hasRequestSchema: z.boolean().describe('Whether the endpoint declares a JSON request body schema'),\n  requestSchema: z.record(z.string(), z.unknown()).optional().describe('Declared JSON schema of the request body, when available'),\n  responseSchema: z.record(z.string(), z.unknown()).optional().describe('Declared JSON schema of the success response; omitted when the route declares none'),\n})\n\nexport const workflowEndpointListResponseSchema = z.object({\n  items: z.array(workflowEndpointSchema),\n})\n\n// ---------------------------------------------------------------------------\n// Workflow Template Schemas\n// ---------------------------------------------------------------------------\n\nexport const workflowTemplateSchema = z.object({\n  id: z.string().min(1).describe('Stable template identifier (kebab-case)'),\n  nameKey: z.string().min(1).describe('i18n key resolving to the template display name'),\n  descriptionKey: z.string().min(1).describe('i18n key resolving to the template description'),\n  category: z.string().min(1).describe('Gallery grouping category'),\n  icon: z.string().min(1).describe('Lucide icon name for the gallery card'),\n  definition: workflowDefinitionDataSchema.describe('Complete workflow definition the template seeds'),\n})\n\nexport const workflowTemplateListResponseSchema = z.object({\n  items: z.array(workflowTemplateSchema),\n})\n\n// ---------------------------------------------------------------------------\n// Workflow Definition Draft Schemas\n// ---------------------------------------------------------------------------\n\nexport const workflowDefinitionDraftResponseSchema = z.object({\n  id: z.string().describe('Draft row UUID'),\n  definitionId: z.string().nullable().describe('The workflow definition this draft belongs to'),\n  definition: workflowDefinitionDraftDataSchema.describe('The autosaved (possibly incomplete) workflow definition'),\n  metadata: z.record(z.string(), z.unknown()).nullable(),\n  baseUpdatedAt: z.string().nullable().describe('The definition updatedAt the draft forked from, for conflict-aware restore'),\n  createdAt: z.string().nullable(),\n  updatedAt: z.string().nullable(),\n})\n\nexport const workflowDefinitionDraftDetailResponseSchema = z.object({\n  data: workflowDefinitionDraftResponseSchema,\n})\n\nexport const workflowDefinitionDraftMutationResponseSchema = z.object({\n  data: workflowDefinitionDraftResponseSchema,\n  message: z.string(),\n})\n\nexport const workflowDefinitionDraftDeleteResponseSchema = z.object({\n  message: z.string(),\n})\n\n// ---------------------------------------------------------------------------\n// Workflow Context Schema (per-step ledger) Schemas\n// ---------------------------------------------------------------------------\n\nexport const ledgerEntrySourceSchema = z.object({\n  kind: z.enum([\n    'contextSchema',\n    'trigger',\n    'activity',\n    'setVariable',\n    'userTask',\n    'signal',\n    'subWorkflow',\n    'join',\n    'asyncResult',\n  ]).describe('What kind of producer contributes this context entry'),\n  stepId: z.string().optional().describe('Producing step, when the producer is step-bound'),\n  activityId: z.string().optional().describe('Producing activity, when the producer is an activity'),\n  label: z.string().describe('Stable machine-readable producer label (e.g. \"trigger:<id>:payload\")'),\n})\n\nexport const ledgerEntrySchema = z.object({\n  path: z.string().describe('Dot path in workflow context (\"*\" is the untyped whole-payload wildcard)'),\n  type: z.enum(['text', 'number', 'boolean', 'select', 'date', 'object', 'unknown']),\n  presence: z.enum(['always', 'maybe']).describe('\"always\" only when the entry is present on every incoming route'),\n  source: ledgerEntrySourceSchema,\n})\n\nexport const workflowContextSchemaStepSchema = z.object({\n  entries: z.array(ledgerEntrySchema),\n})\n\nexport const workflowContextSchemaResponseSchema = z.object({\n  steps: z.record(z.string(), workflowContextSchemaStepSchema).describe('Per-step incoming context ledger, keyed by stepId'),\n})\n\n// ---------------------------------------------------------------------------\n// Workflow Test-Step (mock-first dry run) Schemas\n// ---------------------------------------------------------------------------\n\nexport const workflowTestStepRequestSchema = z.object({\n  stepId: z.string().optional().describe('Editor step the test targets; used as the synthetic currentStepId during interpolation'),\n  activityType: z.string().describe('Registered activity type id (e.g. SEND_EMAIL)'),\n  config: z.record(z.string(), z.unknown()).describe('Raw activity config, possibly containing {{...}} templates'),\n  context: z.record(z.string(), z.unknown()).optional().describe('Caller-supplied sample workflow context interpolated into the config'),\n})\n\nexport const workflowTestStepSimulatedResponseSchema = z.object({\n  simulated: z.literal(true),\n  activityType: z.string(),\n  output: z.unknown().describe('The would-do mock output for the activity type'),\n  interpolatedConfig: z.record(z.string(), z.unknown()).describe('Config after variable interpolation, so the UI can show resolved values'),\n})\n\nexport const workflowTestStepRefusedResponseSchema = z.object({\n  refused: z.literal(true),\n  reason: z.enum(['refused', 'noMock']).describe('\"refused\": the type opts out of simulation; \"noMock\": the type declares no mock'),\n  activityType: z.string(),\n})\n\nexport const workflowTestStepInterpolationFailedResponseSchema = z.object({\n  interpolationFailed: z.literal(true),\n  token: z.string().describe('The offending {{ }} token, without the braces'),\n  message: z.string().describe('Why the token could not be interpolated under strict mode'),\n  activityType: z.string(),\n})\n\nexport const workflowTestStepResponseSchema = z.union([\n  workflowTestStepSimulatedResponseSchema,\n  workflowTestStepRefusedResponseSchema,\n  workflowTestStepInterpolationFailedResponseSchema,\n])\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,8BAA8B,yCAAyC;AAEzE,MAAM,eAAe;AAErB,MAAM,sBAAsB,EAChC,OAAO;AAAA,EACN,OAAO,EAAE,OAAO;AAAA,EAChB,SAAS,EAAE,QAAQ,EAAE,SAAS;AAChC,CAAC,EACA,YAAY;AAER,MAAM,uBAAuB,EAAE,KAAK;AAAA,EACzC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,MAAM,iBAAiB,EAAE,OAAO;AAAA,EACrC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,oBAAoB,EAAE,OAAO,EAAE,KAAK;AAAA,EACpC,gBAAgB,EAAE,OAAO,EAAE,KAAK;AAAA,EAChC,kBAAkB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACxD,UAAU,EAAE,OAAO;AAAA,EACnB,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,QAAQ;AAAA,EACR,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1C,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC3C,cAAc,EACX,KAAK,CAAC,QAAQ,UAAU,CAAC,EACzB,SAAS,2FAAsF;AAAA,EAClG,iBAAiB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,SAAS;AAAA,EACzD,aAAa,EACV,MAAM,EAAE,OAAO,CAAC,EAChB,SAAS,EACT,SAAS,EACT,SAAS,wFAAwF;AAAA,EACpG,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1C,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1C,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACxC,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACzC,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,+BAA+B;AAAA,EACvF,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,6BAA6B;AAAA,EACrF,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,uBAAuB;AAAA,EACjF,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK;AAAA,EAChC,WAAW,EAAE,OAAO;AAAA;AAAA,EAEpB,WAAW,EAAE,OAAO;AACtB,CAAC;AASM,MAAM,oBAAoB,eAAe,OAAO;AAAA,EACrD,MAAM,EAAE,QAAQ,WAAW,EAAE,SAAS,iCAAiC;AAAA,EACvE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,6CAA6C;AAAA,EACxF,UAAU,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,EAAE,SAAS;AAAA,EACrD,gBAAgB,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS,2CAA2C;AACtG,CAAC;AAEM,MAAM,0BAA0B,EAAE,OAAO;AAAA,EAC9C,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,oGAAoG;AAAA,EAC3I,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,4BAA4B;AAAA,EAC9E,oBAAoB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,gCAAgC;AAAA,EAC1F,SAAS,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,SAAS,mCAAmC;AAAA,EACnF,SAAS,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,SAAS,0DAA0D;AAAA,EAC1G,OAAO,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,SAAS,6BAA6B;AAAA,EACtG,QAAQ,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,SAAS,mBAAmB;AACrF,CAAC;AAEM,MAAM,mBAAmB,EAAE,OAAO;AAAA,EACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,EACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACjC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,EACrC,SAAS,EAAE,QAAQ;AACrB,CAAC;AAWM,MAAM,+BAA+B,EAAE,OAAO;AAAA,EACnD,IAAI,EAAE,OAAO;AAAA,EACb,QAAQ,EAAE,KAAK,CAAC,wBAAwB,4BAA4B,CAAC;AAAA,EACrE,YAAY,EAAE,OAAO,EAAE,SAAS;AAClC,CAAC;AAcM,MAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,cAAc,EAAE,MAAM,4BAA4B;AAAA,EAClD,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAClD,CAAC;AAEM,MAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,MAAM,EAAE,MAAM,iBAAiB;AAAA,EAC/B,YAAY;AAAA,EACZ,aAAa,0BAA0B,SAAS;AAClD,CAAC;AAMM,MAAM,yBAAyB,EAAE,OAAO;AAAA,EAC7C,IAAI,EAAE,OAAO;AAAA,EACb,OAAO,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;AAAA,EAC7D,cAAc,EAAE,OAAO,EAAE,SAAS,2CAA2C;AAAA,EAC7E,OAAO,EAAE,KAAK,CAAC,WAAW,aAAa,aAAa,CAAC,EAAE,SAAS;AAClE,CAAC;AAUM,MAAM,8BAA8B,EAAE,KAAK;AAAA,EAChD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAYM,MAAM,+BAA+B,EAAE,OAAO;AAAA,EACnD,MAAM,kBAAkB,OAAO;AAAA,IAC7B,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,uCAAuC;AAAA,IAC9E,WAAW,EAAE,MAAM,sBAAsB;AAAA,IACzC,aAAa,EAAE,QAAQ,EAAE,SAAS,6CAA6C;AAAA,IAC/E,UAAU,EAAE,QAAQ,EAAE,SAAS,4CAA4C;AAAA,IAC3E,YAAY,EAAE,QAAQ,EAAE,SAAS,+CAA+C;AAAA,IAChF,aAAa,EAAE,QAAQ,EAAE,SAAS,qDAAqD;AAAA,IACvF,kBAAkB,4BACf,SAAS,EACT,SAAS,0DAA0D;AAAA,EACxE,CAAC;AACH,CAAC;AAEM,MAAM,8BAA8B,EAAE,OAAO;AAAA,EAClD,MAAM;AAAA,EACN,SAAS,EAAE,OAAO;AACpB,CAAC;AAQM,MAAM,iCAAiC,EAAE,OAAO;AAAA,EACrD,MAAM;AAAA,EACN,SAAS,EAAE,OAAO;AACpB,CAAC;AAMM,MAAM,0BAA0B,EAAE,KAAK,CAAC,WAAW,QAAQ,UAAU,KAAK,CAAC;AAE3E,MAAM,+BAA+B,EAAE,OAAO;AAAA,EACnD,YAAY,EAAE,OAAO;AAAA,EACrB,UAAU,EAAE,OAAO;AAAA,EACnB,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AACxC,CAAC;AAEM,MAAM,wBAAwB,EAAE,OAAO;AAAA,EAC5C,IAAI,EAAE,OAAO;AAAA,EACb,UAAU,EAAE,OAAO;AAAA,EACnB,UAAU,EAAE,OAAO;AAAA,EACnB,WAAW,EAAE,KAAK,CAAC,aAAa,iBAAiB,QAAQ,QAAQ,CAAC;AACpE,CAAC;AAOM,MAAM,qBAAqB,EAC/B,OAAO;AAAA,EACN,IAAI,EAAE,OAAO;AAAA,EACb,MAAM,EAAE,OAAO,EAAE,SAAS,kEAAwD;AAAA,EAClF,UAAU,EAAE,OAAO;AAAA,EACnB,OAAO,EAAE,OAAO;AAAA,EAChB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,QAAQ,EAAE,OAAO;AAAA,EACjB,UAAU,wBAAwB,SAAS;AAAA,EAC3C,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,SAAS,EAAE,QAAQ,EAAE,SAAS,oCAAoC;AAAA,EAClE,WAAW,EAAE,OAAO;AAAA,EACpB,WAAW,EAAE,OAAO;AAAA,EACpB,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,iBAAiB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS;AAAA,EAC9C,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA,EAC/B,gBAAgB,EAAE,MAAM,4BAA4B;AAAA,EACpD,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,SAAS,EAAE,MAAM,qBAAqB;AACxC,CAAC,EACA,YAAY;AAER,MAAM,2BAA2B,EAAE,OAAO;AAAA,EAC/C,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,yCAAyC;AAAA,EAC9E,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,8CAA8C;AAAA,EACrF,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,+CAA+C;AAAA,EAC1F,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,yCAAyC;AAAA,EAC9E,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,+DAA+D;AAAA,EACxG,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,oCAAoC;AAAA,EAC3E,SAAS,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,SAAS,gCAAgC;AAAA,EAChF,QAAQ,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,SAAS,uEAAuE;AAAA,EACtH,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,oBAAoB;AAAA,EAC/D,oBAAoB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,6BAA6B;AAAA,EACvF,OAAO,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,SAAS,6BAA6B;AAAA,EACtG,QAAQ,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,SAAS,mBAAmB;AACrF,CAAC;AAEM,MAAM,8BAA8B,EAAE,OAAO;AAAA,EAClD,MAAM,EAAE,MAAM,kBAAkB;AAAA,EAChC,YAAY;AAAA,EACZ,MAAM,EAAE,OAAO;AAAA,IACb,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,yCAAyC;AAAA,IAC7E,eAAe,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,gEAAgE;AAAA,EAC9G,CAAC;AAAA,EACD,aAAa,0BAA0B,SAAS;AAClD,CAAC;AAEM,MAAM,mCAAmC,EAAE,OAAO;AAAA,EACvD,MAAM,mBAAmB,SAAS,EAAE,SAAS,sDAAsD;AAAA,EACnG,SAAS,EAAE,OAAO;AACpB,CAAC;AAEM,MAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,mBAAmB;AAAA,EACxE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,mBAAmB;AAAA,EAC5D,YAAY,EACT,OAAO,EACP,SAAS,EACT,SAAS,yFAAyF;AACvG,CAAC;AAEM,MAAM,iCAAiC,EAAE,OAAO;AAAA,EACrD,MAAM;AAAA,EACN,SAAS,EAAE,OAAO;AACpB,CAAC;AAaM,MAAM,wBAAwB,EAClC,OAAO,EAAE,IAAI,EAAE,QAAQ,KAAK,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC,EAClD,SAAS,uBAAuB;AAE5B,MAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,iDAAiD;AAAA,EACxF,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,SAAS,aAAa;AAAA,EAC3E,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,SAAS,yBAAyB;AACvG,CAAC;AAEM,MAAM,yBAAyB,EAAE,OAAO;AAAA,EAC7C,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EAChC,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,EACpC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AACxC,CAAC;AAEM,MAAM,+BAA+B,EAAE,OAAO;AAAA,EACnD,IAAI,EAAE,QAAQ,IAAI;AAAA,EAClB,OAAO,EAAE,MAAM,iBAAiB;AAAA,EAChC,YAAY;AACd,CAAC;AAEM,MAAM,iCAAiC,EAAE,OAAO;AAAA,EACrD,IAAI,EAAE,QAAQ,IAAI;AAAA,EAClB,MAAM;AAAA,EACN,WAAW,EAAE,MAAM,sBAAsB;AAAA,EACzC,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,qDAAqD;AAAA,EAC7F,aAAa,EACV,QAAQ,EACR,SAAS,uFAAwF;AACtG,CAAC;AAEM,MAAM,kCAAkC;AAExC,MAAM,mCAAmC,EAAE,OAAO;AAAA,EACvD,IAAI,EAAE,QAAQ,IAAI;AAAA,EAClB,MAAM,kBAAkB,SAAS;AACnC,CAAC;AAEM,MAAM,+BAA+B,EAAE,OAAO;AAAA,EACnD,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,sEAAsE;AAAA,EAC/G,aAAa,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS,yDAAyD;AAAA,EAC5H,gBAAgB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS,6DAA6D;AACrI,CAAC;AAEM,MAAM,gCAAgC,EAAE,OAAO;AAAA,EACpD,MAAM,EAAE,OAAO;AAAA,IACb,UAAU,EAAE,OAAO;AAAA,MACjB,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,MACpB,QAAQ,EAAE,OAAO;AAAA,MACjB,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,MACnC,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,MACpC,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,MACrC,SAAS,EAAE,QAAQ;AAAA,IACrB,CAAC;AAAA,IACD,WAAW,EAAE,QAAQ;AAAA,EACvB,CAAC;AAAA,EACD,SAAS,EAAE,OAAO;AACpB,CAAC;AAEM,MAAM,0BAA0B,EAAE,OAAO;AAAA,EAC9C,YAAY,EAAE,OAAO,EAAE,SAAS,4BAA4B;AAAA,EAC5D,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS,sCAAsC;AACvG,CAAC;AAEM,MAAM,2BAA2B,EAAE,OAAO;AAAA,EAC/C,SAAS,EAAE,QAAQ;AAAA,EACnB,SAAS,EAAE,OAAO;AACpB,CAAC;AAEM,MAAM,qCAAqC,EAAE,OAAO;AAAA,EACzD,SAAS,EACN,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAC9B,SAAS,yEAAyE;AACvF,CAAC;AAEM,MAAM,sCAAsC,EAAE,OAAO;AAAA,EAC1D,IAAI,EAAE,QAAQ,IAAI;AAAA,EAClB,YAAY,EAAE,OAAO;AAAA,EACrB,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,yDAAyD;AAC/F,CAAC;AAEM,MAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,wBAAwB;AAAA,EAC/D,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,sCAAsC;AAAA,EAC/F,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS,oCAAoC;AAAA,EACnG,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,gCAAgC;AACzE,CAAC;AAEM,MAAM,2BAA2B,EAAE,OAAO;AAAA,EAC/C,QAAQ,EAAE,OAAO;AAAA,EACjB,SAAS,EAAE,OAAO;AAAA,EAClB,MAAM,EAAE,OAAO;AACjB,CAAC;AAEM,MAAM,0BAA0B,EAAE,OAAO;AAAA,EAC9C,QAAQ,EAAE,OAAO;AAAA,EACjB,QAAQ,EAAE,QAAQ;AAAA,EAClB,eAAe,EAAE,OAAO,EAAE,SAAS;AACrC,CAAC;AAEM,MAAM,8BAA8B,EAAE,OAAO;AAAA,EAClD,UAAU,EAAE,QAAQ;AAAA,EACpB,YAAY,EAAE,OAAO;AAAA,EACrB,QAAQ,EAAE,MAAM,wBAAwB,EAAE,SAAS;AAAA,EACnD,gBAAgB,EAAE,MAAM,uBAAuB,EAAE,SAAS;AAC5D,CAAC;AAMM,MAAM,iCAAiC,EAAE,KAAK,CAAC,QAAQ,iBAAiB,MAAM,CAAC;AAE/E,MAAM,mCAAmC,EAC7C,OAAO;AAAA,EACN,IAAI,EAAE,OAAO,EAAE,SAAS,4EAA4E;AAAA,EACpG,YAAY,EAAE,OAAO;AAAA,EACrB,cAAc,EAAE,OAAO;AAAA,EACvB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,SAAS,EAAE,OAAO,EAAE,IAAI;AAAA,EACxB,YAAY;AAAA,EACZ,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACrD,SAAS,EAAE,QAAQ;AAAA,EACnB,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,EACpC,iBAAiB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS;AAAA,EAC9C,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,QAAQ;AAAA,EACR,aAAa,EAAE,QAAQ;AAAA,EACvB,cAAc,EAAE,OAAO,EAAE,SAAS;AACpC,CAAC,EACA,YAAY;AAER,MAAM,uCAAuC,EAAE,OAAO;AAAA,EAC3D,MAAM,EAAE,MAAM,gCAAgC;AAAA,EAC9C,YAAY;AACd,CAAC;AAEM,MAAM,yCAAyC,EAAE,OAAO;AAAA,EAC7D,MAAM;AACR,CAAC;AAEM,MAAM,2CAA2C,EAAE,OAAO;AAAA,EAC/D,MAAM;AAAA,EACN,SAAS,EAAE,OAAO;AACpB,CAAC;AAEM,MAAM,wCAAwC,EAAE,OAAO;AAAA,EAC5D,MAAM,iCAAiC,SAAS;AAAA,EAChD,SAAS,EAAE,OAAO;AACpB,CAAC;AAEM,MAAM,yCAAyC,EAAE,OAAO;AAAA,EAC7D,SAAS,EAAE,OAAO;AACpB,CAAC;AAMM,MAAM,mCAAmC,EAAE,KAAK;AAAA,EACrD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,MAAM,+BAA+B,EAAE,KAAK;AAAA,EACjD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,MAAM,iCAAiC,EAAE,OAAO;AAAA,EACrD,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,cAAc,EAAE,OAAO,EAAE,KAAK;AAAA,EAC9B,YAAY,EAAE,OAAO;AAAA,EACrB,SAAS,EAAE,OAAO,EAAE,IAAI;AAAA,EACxB,QAAQ;AAAA;AAAA;AAAA;AAAA,EAIR,SAAS,6BAA6B,SAAS,EAAE,SAAS;AAAA,EAC1D,eAAe,EAAE,OAAO;AAAA,EACxB,SAAS,EAAE,QAAQ;AAAA,EACnB,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC/C,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1C,WAAW,EAAE,OAAO;AAAA,EACpB,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACzC,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC7C,cAAc,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS;AAAA,EAC9C,mBAAmB,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS;AAAA,EACnD,YAAY,EAAE,OAAO,EAAE,IAAI;AAAA,EAC3B,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK;AAAA,EAChC,WAAW,EAAE,OAAO;AAAA,EACpB,WAAW,EAAE,OAAO;AAAA,EACpB,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAC5C,CAAC;AAEM,MAAM,qCAAqC,EAAE,OAAO;AAAA,EACzD,MAAM,EAAE,MAAM,8BAA8B;AAAA,EAC5C,YAAY;AACd,CAAC;AAEM,MAAM,uCAAuC,EAAE,OAAO;AAAA,EAC3D,MAAM;AACR,CAAC;AAEM,MAAM,uCAAuC,EAAE,OAAO;AAAA,EAC3D,MAAM;AAAA,EACN,SAAS,EAAE,OAAO;AACpB,CAAC;AAMM,MAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,WAAW,EAAE,OAAO;AAAA,EACpB,YAAY,EAAE,OAAO;AAAA,EACrB,MAAM,EAAE,QAAQ,EAAE,SAAS;AAC7B,CAAC;AAEM,MAAM,gCAAgC,EAAE,OAAO;AAAA,EACpD,QAAQ;AAAA,EACR,aAAa,EAAE,OAAO;AAAA,EACtB,SAAS,EAAE,QAAQ;AAAA,EACnB,QAAQ,EAAE,MAAM,0BAA0B;AAAA,EAC1C,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS;AAAA,EACrC,eAAe,EAAE,OAAO;AAC1B,CAAC;AAEM,MAAM,gCAAgC,EAAE,OAAO;AAAA,EACpD,QAAQ;AAAA,EACR,aAAa,EAAE,OAAO;AAAA,EACtB,SAAS,EAAE,OAAO;AACpB,CAAC;AAEM,MAAM,uCAAuC,EAAE,OAAO;AAAA,EAC3D,MAAM,EAAE,OAAO;AAAA,IACb,UAAU;AAAA,IACV,WAAW;AAAA,EACb,CAAC;AAAA,EACD,SAAS,EAAE,OAAO;AACpB,CAAC;AAEM,MAAM,sCAAsC,EAAE,OAAO;AAAA,EAC1D,MAAM,EAAE,OAAO;AAAA,IACb,UAAU;AAAA,IACV,WAAW;AAAA,EACb,CAAC;AAAA,EACD,SAAS,EAAE,OAAO;AACpB,CAAC;AAMM,MAAM,yBAAyB,EAAE,OAAO;AAAA,EAC7C,IAAI,EAAE,OAAO;AAAA,EACb,oBAAoB,EAAE,OAAO,EAAE,KAAK;AAAA,EACpC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACtD,WAAW,EAAE,OAAO;AAAA,EACpB,WAAW,EAAE,QAAQ;AAAA,EACrB,YAAY,EAAE,OAAO;AAAA,EACrB,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACvC,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK;AAClC,CAAC;AAEM,MAAM,qCAAqC,EAAE,OAAO;AAAA,EACzD,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,YAAY,EAAE,OAAO;AAAA,EACrB,cAAc,EAAE,OAAO;AAAA,EACvB,QAAQ;AACV,CAAC;AAEM,MAAM,8BAA8B,EAAE,OAAO;AAAA,EAClD,IAAI,EAAE,OAAO;AAAA,EACb,oBAAoB,EAAE,OAAO,EAAE,KAAK;AAAA,EACpC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACtD,WAAW,EAAE,OAAO;AAAA,EACpB,WAAW,EAAE,QAAQ;AAAA,EACrB,YAAY,EAAE,OAAO;AAAA,EACrB,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACvC,kBAAkB,mCAAmC,SAAS;AAChE,CAAC;AAEM,MAAM,kCAAkC,EAAE,OAAO;AAAA,EACtD,OAAO,EAAE,MAAM,2BAA2B;AAAA,EAC1C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,EACpC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EAChC,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACpC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAC3C,CAAC;AAEM,MAAM,oCAAoC,EAAE,OAAO;AAAA,EACxD,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,YAAY,EAAE,OAAO;AAAA,EACrB,SAAS,EAAE,OAAO,EAAE,IAAI;AAAA,EACxB,QAAQ;AAAA,EACR,eAAe,EAAE,OAAO;AAAA,EACxB,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC/C,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1C,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,SAAS,EAAE,QAAQ;AACrB,CAAC;AAEM,MAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,IAAI,EAAE,OAAO;AAAA,EACb,oBAAoB,EAAE,OAAO,EAAE,KAAK;AAAA,EACpC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACtD,WAAW,EAAE,OAAO;AAAA,EACpB,WAAW,EAAE,QAAQ;AAAA,EACrB,YAAY,EAAE,OAAO;AAAA,EACrB,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACvC,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK;AAAA,EAChC,kBAAkB,kCAAkC,SAAS;AAC/D,CAAC;AAEM,MAAM,qCAAqC,EAAE,OAAO;AAAA,EACzD,MAAM,EAAE,MAAM,sBAAsB;AAAA,EACpC,YAAY;AACd,CAAC;AAMM,MAAM,gCAAgC,EAAE,OAAO;AAAA,EACpD,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,oBAAoB,EAAE,OAAO,EAAE,KAAK;AAAA,EACpC,kBAAkB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACxD,QAAQ,EAAE,OAAO;AAAA,EACjB,UAAU,EAAE,OAAO;AAAA,EACnB,UAAU,EAAE,OAAO;AAAA,EACnB,QAAQ,EAAE,OAAO;AAAA,EACjB,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS;AAAA,EAC3C,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS;AAAA,EAC3C,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1C,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACzC,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,EACtD,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAC3C,CAAC;AAEM,MAAM,yCAAyC,EAAE,OAAO;AAAA,EAC7D,MAAM,EAAE,MAAM,6BAA6B;AAAA,EAC3C,YAAY;AACd,CAAC;AAMM,MAAM,uCAAuC,EAAE,OAAO;AAAA,EAC3D,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,2DAA2D;AAAA,EACtG,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,wBAAwB;AAAA,EAC/D,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS,sCAAsC;AACvG,CAAC;AAEM,MAAM,wCAAwC,EAAE,OAAO;AAAA,EAC5D,SAAS,EAAE,QAAQ;AAAA,EACnB,SAAS,EAAE,OAAO;AAAA,EAClB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AACtC,CAAC;AAMM,MAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,yDAAyD;AAAA,EAC/F,kBAAkB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE,SAAS,8DAA8D;AAAA,EACpH,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,8DAA8D;AAAA,EAClH,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,iDAAiD;AAAA,EAC1F,gBAAgB,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,iHAAiH;AACnK,CAAC;AAEM,MAAM,wCAAwC,EAAE,OAAO;AAAA,EAC5D,OAAO,EAAE,MAAM,yBAAyB;AAC1C,CAAC;AAEM,MAAM,wCAAwC,EAAE,OAAO;AAAA,EAC5D,YAAY,EAAE,QAAQ,EAAE,SAAS,kGAAkG;AAAA,EACnI,OAAO,EAAE,MAAM,yBAAyB;AAC1C,CAAC;AAEM,MAAM,uCAAuC,EAAE,OAAO;AAAA,EAC3D,mBAAmB,EAChB,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,EACvB,IAAI,GAAG,EACP,SAAS,qEAAqE;AACnF,CAAC;AAEM,MAAM,2CAA2C,sCAAsC,OAAO;AAAA,EACnG,IAAI,EAAE,QAAQ;AAChB,CAAC;AAMM,MAAM,yBAAyB,EAAE,OAAO;AAAA,EAC7C,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,gGAAgG;AAAA,EACjI,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,8CAA8C;AAAA,EACvF,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,gDAAgD;AAC9F,CAAC;AAEM,MAAM,qCAAqC,EAAE,OAAO;AAAA,EACzD,OAAO,EAAE,MAAM,sBAAsB;AACvC,CAAC;AAMM,MAAM,8BAA8B,EAAE,OAAO;AAAA,EAClD,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,gBAAgB;AAAA,EACjD,IAAI,EAAE,KAAK,CAAC,QAAQ,SAAS,QAAQ,CAAC,EAAE,SAAS,6BAA6B;AAAA,EAC9E,UAAU,EAAE,QAAQ,EAAE,SAAS,6CAA6C;AAAA,EAC5E,MAAM,EAAE,OAAO,EAAE,SAAS,2DAA2D;AACvF,CAAC;AAEM,MAAM,yBAAyB,EAAE,OAAO;AAAA,EAC7C,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,6DAA6D;AAAA,EAC9F,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,aAAa;AAAA,EAChD,SAAS,EAAE,OAAO,EAAE,SAAS,iCAAiC;AAAA,EAC9D,KAAK,EAAE,OAAO,EAAE,SAAS,mDAAmD;AAAA,EAC5E,QAAQ,EAAE,MAAM,2BAA2B,EAAE,SAAS,yDAAyD;AAAA,EAC/G,kBAAkB,EAAE,QAAQ,EAAE,SAAS,0DAA0D;AAAA,EACjG,eAAe,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS,0DAA0D;AAAA,EAC/H,gBAAgB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS,oFAAoF;AAC5J,CAAC;AAEM,MAAM,qCAAqC,EAAE,OAAO;AAAA,EACzD,OAAO,EAAE,MAAM,sBAAsB;AACvC,CAAC;AAMM,MAAM,yBAAyB,EAAE,OAAO;AAAA,EAC7C,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,yCAAyC;AAAA,EACxE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,iDAAiD;AAAA,EACrF,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,gDAAgD;AAAA,EAC3F,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,2BAA2B;AAAA,EAChE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,uCAAuC;AAAA,EACxE,YAAY,6BAA6B,SAAS,iDAAiD;AACrG,CAAC;AAEM,MAAM,qCAAqC,EAAE,OAAO;AAAA,EACzD,OAAO,EAAE,MAAM,sBAAsB;AACvC,CAAC;AAMM,MAAM,wCAAwC,EAAE,OAAO;AAAA,EAC5D,IAAI,EAAE,OAAO,EAAE,SAAS,gBAAgB;AAAA,EACxC,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,+CAA+C;AAAA,EAC5F,YAAY,kCAAkC,SAAS,yDAAyD;AAAA,EAChH,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACrD,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,4EAA4E;AAAA,EAC1H,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,WAAW,EAAE,OAAO,EAAE,SAAS;AACjC,CAAC;AAEM,MAAM,8CAA8C,EAAE,OAAO;AAAA,EAClE,MAAM;AACR,CAAC;AAEM,MAAM,gDAAgD,EAAE,OAAO;AAAA,EACpE,MAAM;AAAA,EACN,SAAS,EAAE,OAAO;AACpB,CAAC;AAEM,MAAM,8CAA8C,EAAE,OAAO;AAAA,EAClE,SAAS,EAAE,OAAO;AACpB,CAAC;AAMM,MAAM,0BAA0B,EAAE,OAAO;AAAA,EAC9C,MAAM,EAAE,KAAK;AAAA,IACX;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC,EAAE,SAAS,sDAAsD;AAAA,EAClE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,iDAAiD;AAAA,EACxF,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,sDAAsD;AAAA,EACjG,OAAO,EAAE,OAAO,EAAE,SAAS,sEAAsE;AACnG,CAAC;AAEM,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACxC,MAAM,EAAE,OAAO,EAAE,SAAS,0EAA0E;AAAA,EACpG,MAAM,EAAE,KAAK,CAAC,QAAQ,UAAU,WAAW,UAAU,QAAQ,UAAU,SAAS,CAAC;AAAA,EACjF,UAAU,EAAE,KAAK,CAAC,UAAU,OAAO,CAAC,EAAE,SAAS,iEAAiE;AAAA,EAChH,QAAQ;AACV,CAAC;AAEM,MAAM,kCAAkC,EAAE,OAAO;AAAA,EACtD,SAAS,EAAE,MAAM,iBAAiB;AACpC,CAAC;AAEM,MAAM,sCAAsC,EAAE,OAAO;AAAA,EAC1D,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,+BAA+B,EAAE,SAAS,mDAAmD;AAC3H,CAAC;AAMM,MAAM,gCAAgC,EAAE,OAAO;AAAA,EACpD,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,wFAAwF;AAAA,EAC/H,cAAc,EAAE,OAAO,EAAE,SAAS,+CAA+C;AAAA,EACjF,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,4DAA4D;AAAA,EAC/G,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS,sEAAsE;AACvI,CAAC;AAEM,MAAM,0CAA0C,EAAE,OAAO;AAAA,EAC9D,WAAW,EAAE,QAAQ,IAAI;AAAA,EACzB,cAAc,EAAE,OAAO;AAAA,EACvB,QAAQ,EAAE,QAAQ,EAAE,SAAS,gDAAgD;AAAA,EAC7E,oBAAoB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,yEAAyE;AAC1I,CAAC;AAEM,MAAM,wCAAwC,EAAE,OAAO;AAAA,EAC5D,SAAS,EAAE,QAAQ,IAAI;AAAA,EACvB,QAAQ,EAAE,KAAK,CAAC,WAAW,QAAQ,CAAC,EAAE,SAAS,iFAAiF;AAAA,EAChI,cAAc,EAAE,OAAO;AACzB,CAAC;AAEM,MAAM,oDAAoD,EAAE,OAAO;AAAA,EACxE,qBAAqB,EAAE,QAAQ,IAAI;AAAA,EACnC,OAAO,EAAE,OAAO,EAAE,SAAS,+CAA+C;AAAA,EAC1E,SAAS,EAAE,OAAO,EAAE,SAAS,2DAA2D;AAAA,EACxF,cAAc,EAAE,OAAO;AACzB,CAAC;AAEM,MAAM,iCAAiC,EAAE,MAAM;AAAA,EACpD;AAAA,EACA;AAAA,EACA;AACF,CAAC;",
   "names": []
 }

package/dist/modules/workflows/api/portal/tasks/[id]/complete/route.js

@@ -0,0 +1,132 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import {
+  getCustomerAuthFromRequest,
+  requireCustomerFeature
+} from "@open-mercato/core/modules/customer_accounts/lib/customerAuth";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { UserTask } from "../../../../../data/entities.js";
+import { serializeUserTask } from "../../../../tasks/serialize.js";
+import {
+  decidePortalTaskAccess,
+  PORTAL_TASK_REFUSAL,
+  PORTAL_TASKS_COMPLETE_FEATURE,
+  resolvePortalTaskPrincipal
+} from "../../../../../lib/portal-task-access.js";
+import {
+  workflowsTag,
+  portalTaskCompleteRequestSchema,
+  portalTaskCompleteResponseSchema,
+  portalTaskErrorSchema
+} from "../../../../openapi.js";
+const logger = createLogger("workflows");
+const metadata = { requireAuth: false };
+const completeSchema = z.object({
+  formData: z.record(z.string(), z.any()),
+  comments: z.string().optional(),
+  decisionId: z.string().min(1).optional()
+});
+async function POST(request, { params }) {
+  const auth = await getCustomerAuthFromRequest(request);
+  if (!auth) {
+    return NextResponse.json({ ok: false, error: "Authentication required" }, { status: 401 });
+  }
+  const container = await createRequestContainer();
+  const rbac = container.resolve("customerRbacService");
+  try {
+    await requireCustomerFeature(auth, [PORTAL_TASKS_COMPLETE_FEATURE], rbac);
+  } catch (response) {
+    return response;
+  }
+  try {
+    const em = container.resolve("em");
+    const acl = await rbac.loadAcl(auth.sub, {
+      tenantId: auth.tenantId,
+      organizationId: auth.orgId
+    });
+    const resolved = await resolvePortalTaskPrincipal({ auth, em, isPortalAdmin: acl.isPortalAdmin });
+    if (!resolved.ok) return NextResponse.json(resolved.body, { status: resolved.status });
+    const parsed = completeSchema.safeParse(await request.json());
+    if (!parsed.success) {
+      return NextResponse.json(
+        { ok: false, error: "Invalid request body", details: parsed.error.format() },
+        { status: 400 }
+      );
+    }
+    const task = await em.findOne(UserTask, {
+      id: params.id,
+      tenantId: auth.tenantId,
+      organizationId: auth.orgId
+    });
+    if (!task) {
+      return NextResponse.json(PORTAL_TASK_REFUSAL.body, { status: PORTAL_TASK_REFUSAL.status });
+    }
+    const decision = decidePortalTaskAccess(resolved.principal, task);
+    if (!decision.actable) {
+      return NextResponse.json(PORTAL_TASK_REFUSAL.body, { status: PORTAL_TASK_REFUSAL.status });
+    }
+    const taskHandler = container.resolve("taskHandler");
+    await taskHandler.completeUserTask(em, container, {
+      taskId: params.id,
+      formData: parsed.data.formData,
+      // The portal principal's own id. `completeUserTask` compares it against
+      // `claimedBy ?? assignedTo`, which for a portal task is the same id space,
+      // so its own ownership check agrees with the predicate rather than
+      // fighting it.
+      userId: auth.sub,
+      comments: parsed.data.comments,
+      decisionId: parsed.data.decisionId,
+      scope: { tenantId: auth.tenantId, organizationId: auth.orgId }
+    });
+    const updated = await em.findOne(UserTask, {
+      id: params.id,
+      tenantId: auth.tenantId,
+      organizationId: auth.orgId
+    });
+    return NextResponse.json({
+      ok: true,
+      task: updated ? serializeUserTask(updated) : null
+    });
+  } catch (error) {
+    const code = error.code;
+    if (code === "UNKNOWN_DECISION" || code === "FORM_VALIDATION_FAILED") {
+      return NextResponse.json(
+        { ok: false, error: error instanceof Error ? error.message : "Invalid submission" },
+        { status: 400 }
+      );
+    }
+    if (code === "TASK_NOT_FOUND" || code === "TASK_ASSIGNED_TO_ANOTHER_USER") {
+      return NextResponse.json(PORTAL_TASK_REFUSAL.body, { status: PORTAL_TASK_REFUSAL.status });
+    }
+    logger.error("Error completing portal task", { err: error });
+    return NextResponse.json({ ok: false, error: "Failed to complete task" }, { status: 500 });
+  }
+}
+const openApi = {
+  tag: workflowsTag,
+  summary: "Portal user task completion",
+  methods: {
+    POST: {
+      summary: "Complete a portal task",
+      description: "Completes a customer-assigned task and resumes the workflow. Only the assignee may complete; a portal admin who can read a company member's task is refused.",
+      requestBody: { schema: portalTaskCompleteRequestSchema },
+      responses: [
+        { status: 200, description: "Task completed", schema: portalTaskCompleteResponseSchema }
+      ],
+      errors: [
+        { status: 400, description: "Invalid request body or form data", schema: portalTaskErrorSchema },
+        { status: 401, description: "Authentication required", schema: portalTaskErrorSchema },
+        { status: 403, description: "Insufficient permissions or no company association", schema: portalTaskErrorSchema },
+        { status: 404, description: "Task not found or not actionable by this principal", schema: portalTaskErrorSchema },
+        { status: 500, description: "Internal server error", schema: portalTaskErrorSchema }
+      ]
+    }
+  }
+};
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/workflows/api/portal/tasks/[id]/complete/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../../src/modules/workflows/api/portal/tasks/%5Bid%5D/complete/route.ts"],
+  "sourcesContent": ["/**\n * Portal User Task completion API\n *\n * - POST /api/workflows/portal/tasks/[id]/complete\n *\n * `actable` is the gate, and on the portal branch `actable` is true only for the\n * assignee themselves: a portal admin who can READ a company member's task gets\n * `visible` without `actable` and is refused here. The refusal is a 404, same as\n * every other portal refusal \u2014 telling an admin \"you may see this but not\n * finish it\" would disclose more than the read already did.\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport {\n  getCustomerAuthFromRequest,\n  requireCustomerFeature,\n} from '@open-mercato/core/modules/customer_accounts/lib/customerAuth'\nimport type { CustomerRbacService } from '@open-mercato/core/modules/customer_accounts/services/customerRbacService'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { UserTask } from '../../../../../data/entities'\nimport { serializeUserTask } from '../../../../tasks/serialize'\nimport type { TaskHandlerService } from '../../../../../lib/task-handler'\nimport {\n  decidePortalTaskAccess,\n  PORTAL_TASK_REFUSAL,\n  PORTAL_TASKS_COMPLETE_FEATURE,\n  resolvePortalTaskPrincipal,\n} from '../../../../../lib/portal-task-access'\nimport {\n  workflowsTag,\n  portalTaskCompleteRequestSchema,\n  portalTaskCompleteResponseSchema,\n  portalTaskErrorSchema,\n} from '../../../../openapi'\n\nconst logger = createLogger('workflows')\n\nexport const metadata: { requireAuth?: boolean } = { requireAuth: false }\n\nconst completeSchema = z.object({\n  formData: z.record(z.string(), z.any()),\n  comments: z.string().optional(),\n  decisionId: z.string().min(1).optional(),\n})\n\nexport async function POST(request: NextRequest, { params }: { params: { id: string } }) {\n  const auth = await getCustomerAuthFromRequest(request)\n  if (!auth) {\n    return NextResponse.json({ ok: false, error: 'Authentication required' }, { status: 401 })\n  }\n\n  const container = await createRequestContainer()\n  const rbac = container.resolve('customerRbacService') as CustomerRbacService\n\n  try {\n    await requireCustomerFeature(auth, [PORTAL_TASKS_COMPLETE_FEATURE], rbac)\n  } catch (response) {\n    return response as NextResponse\n  }\n\n  try {\n    const em = container.resolve('em') as import('@mikro-orm/postgresql').EntityManager\n    const acl = await rbac.loadAcl(auth.sub, {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n    })\n\n    const resolved = await resolvePortalTaskPrincipal({ auth, em, isPortalAdmin: acl.isPortalAdmin })\n    if (!resolved.ok) return NextResponse.json(resolved.body, { status: resolved.status })\n\n    const parsed = completeSchema.safeParse(await request.json())\n    if (!parsed.success) {\n      return NextResponse.json(\n        { ok: false, error: 'Invalid request body', details: parsed.error.format() },\n        { status: 400 },\n      )\n    }\n\n    const task = await em.findOne(UserTask, {\n      id: params.id,\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n    })\n    if (!task) {\n      return NextResponse.json(PORTAL_TASK_REFUSAL.body, { status: PORTAL_TASK_REFUSAL.status })\n    }\n\n    const decision = decidePortalTaskAccess(resolved.principal, task)\n    if (!decision.actable) {\n      return NextResponse.json(PORTAL_TASK_REFUSAL.body, { status: PORTAL_TASK_REFUSAL.status })\n    }\n\n    const taskHandler = container.resolve('taskHandler') as TaskHandlerService\n    await taskHandler.completeUserTask(em, container, {\n      taskId: params.id,\n      formData: parsed.data.formData,\n      // The portal principal's own id. `completeUserTask` compares it against\n      // `claimedBy ?? assignedTo`, which for a portal task is the same id space,\n      // so its own ownership check agrees with the predicate rather than\n      // fighting it.\n      userId: auth.sub,\n      comments: parsed.data.comments,\n      decisionId: parsed.data.decisionId,\n      scope: { tenantId: auth.tenantId, organizationId: auth.orgId },\n    })\n\n    const updated = await em.findOne(UserTask, {\n      id: params.id,\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n    })\n\n    return NextResponse.json({\n      ok: true,\n      task: updated ? serializeUserTask(updated) : null,\n    })\n  } catch (error) {\n    const code = (error as { code?: unknown }).code\n    if (code === 'UNKNOWN_DECISION' || code === 'FORM_VALIDATION_FAILED') {\n      return NextResponse.json(\n        { ok: false, error: error instanceof Error ? error.message : 'Invalid submission' },\n        { status: 400 },\n      )\n    }\n    // Anything the handler refuses on ownership or status grounds collapses into\n    // the same 404 the predicate would have produced, so the act path discloses\n    // no more than the read path.\n    if (code === 'TASK_NOT_FOUND' || code === 'TASK_ASSIGNED_TO_ANOTHER_USER') {\n      return NextResponse.json(PORTAL_TASK_REFUSAL.body, { status: PORTAL_TASK_REFUSAL.status })\n    }\n    logger.error('Error completing portal task', { err: error })\n    return NextResponse.json({ ok: false, error: 'Failed to complete task' }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: workflowsTag,\n  summary: 'Portal user task completion',\n  methods: {\n    POST: {\n      summary: 'Complete a portal task',\n      description:\n        'Completes a customer-assigned task and resumes the workflow. Only the assignee may complete; a portal admin who can read a company member\\'s task is refused.',\n      requestBody: { schema: portalTaskCompleteRequestSchema },\n      responses: [\n        { status: 200, description: 'Task completed', schema: portalTaskCompleteResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid request body or form data', schema: portalTaskErrorSchema },\n        { status: 401, description: 'Authentication required', schema: portalTaskErrorSchema },\n        { status: 403, description: 'Insufficient permissions or no company association', schema: portalTaskErrorSchema },\n        { status: 404, description: 'Task not found or not actionable by this principal', schema: portalTaskErrorSchema },\n        { status: 500, description: 'Internal server error', schema: portalTaskErrorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAYA,SAAsB,oBAAoB;AAC1C,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP,SAAS,oBAAoB;AAC7B,SAAS,gBAAgB;AACzB,SAAS,yBAAyB;AAElC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAsC,EAAE,aAAa,MAAM;AAExE,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC;AAAA,EACtC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AACzC,CAAC;AAED,eAAsB,KAAK,SAAsB,EAAE,OAAO,GAA+B;AACvF,QAAM,OAAO,MAAM,2BAA2B,OAAO;AACrD,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,0BAA0B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3F;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,UAAU,QAAQ,qBAAqB;AAEpD,MAAI;AACF,UAAM,uBAAuB,MAAM,CAAC,6BAA6B,GAAG,IAAI;AAAA,EAC1E,SAAS,UAAU;AACjB,WAAO;AAAA,EACT;AAEA,MAAI;AACF,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAK;AAAA,MACvC,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,IACvB,CAAC;AAED,UAAM,WAAW,MAAM,2BAA2B,EAAE,MAAM,IAAI,eAAe,IAAI,cAAc,CAAC;AAChG,QAAI,CAAC,SAAS,GAAI,QAAO,aAAa,KAAK,SAAS,MAAM,EAAE,QAAQ,SAAS,OAAO,CAAC;AAErF,UAAM,SAAS,eAAe,UAAU,MAAM,QAAQ,KAAK,CAAC;AAC5D,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,aAAa;AAAA,QAClB,EAAE,IAAI,OAAO,OAAO,wBAAwB,SAAS,OAAO,MAAM,OAAO,EAAE;AAAA,QAC3E,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,OAAO,MAAM,GAAG,QAAQ,UAAU;AAAA,MACtC,IAAI,OAAO;AAAA,MACX,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,IACvB,CAAC;AACD,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,oBAAoB,MAAM,EAAE,QAAQ,oBAAoB,OAAO,CAAC;AAAA,IAC3F;AAEA,UAAM,WAAW,uBAAuB,SAAS,WAAW,IAAI;AAChE,QAAI,CAAC,SAAS,SAAS;AACrB,aAAO,aAAa,KAAK,oBAAoB,MAAM,EAAE,QAAQ,oBAAoB,OAAO,CAAC;AAAA,IAC3F;AAEA,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,YAAY,iBAAiB,IAAI,WAAW;AAAA,MAChD,QAAQ,OAAO;AAAA,MACf,UAAU,OAAO,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA,MAKtB,QAAQ,KAAK;AAAA,MACb,UAAU,OAAO,KAAK;AAAA,MACtB,YAAY,OAAO,KAAK;AAAA,MACxB,OAAO,EAAE,UAAU,KAAK,UAAU,gBAAgB,KAAK,MAAM;AAAA,IAC/D,CAAC;AAED,UAAM,UAAU,MAAM,GAAG,QAAQ,UAAU;AAAA,MACzC,IAAI,OAAO;AAAA,MACX,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,IACvB,CAAC;AAED,WAAO,aAAa,KAAK;AAAA,MACvB,IAAI;AAAA,MACJ,MAAM,UAAU,kBAAkB,OAAO,IAAI;AAAA,IAC/C,CAAC;AAAA,EACH,SAAS,OAAO;AACd,UAAM,OAAQ,MAA6B;AAC3C,QAAI,SAAS,sBAAsB,SAAS,0BAA0B;AACpE,aAAO,aAAa;AAAA,QAClB,EAAE,IAAI,OAAO,OAAO,iBAAiB,QAAQ,MAAM,UAAU,qBAAqB;AAAA,QAClF,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAIA,QAAI,SAAS,oBAAoB,SAAS,iCAAiC;AACzE,aAAO,aAAa,KAAK,oBAAoB,MAAM,EAAE,QAAQ,oBAAoB,OAAO,CAAC;AAAA,IAC3F;AACA,WAAO,MAAM,gCAAgC,EAAE,KAAK,MAAM,CAAC;AAC3D,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,0BAA0B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3F;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aACE;AAAA,MACF,aAAa,EAAE,QAAQ,gCAAgC;AAAA,MACvD,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,kBAAkB,QAAQ,iCAAiC;AAAA,MACzF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,qCAAqC,QAAQ,sBAAsB;AAAA,QAC/F,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,QACrF,EAAE,QAAQ,KAAK,aAAa,sDAAsD,QAAQ,sBAAsB;AAAA,QAChH,EAAE,QAAQ,KAAK,aAAa,sDAAsD,QAAQ,sBAAsB;AAAA,QAChH,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,sBAAsB;AAAA,MACrF;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/workflows/api/portal/tasks/[id]/route.js

@@ -0,0 +1,97 @@
+import { NextResponse } from "next/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import {
+  getCustomerAuthFromRequest,
+  requireCustomerFeature
+} from "@open-mercato/core/modules/customer_accounts/lib/customerAuth";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { UserTask } from "../../../../data/entities.js";
+import { serializeUserTask } from "../../../tasks/serialize.js";
+import { loadTaskDecisionContext } from "../../../../lib/task-decision-context.js";
+import {
+  decidePortalTaskAccess,
+  PORTAL_TASK_REFUSAL,
+  PORTAL_TASKS_VIEW_FEATURE,
+  resolvePortalTaskPrincipal
+} from "../../../../lib/portal-task-access.js";
+import {
+  workflowsTag,
+  portalTaskDetailResponseSchema,
+  portalTaskErrorSchema
+} from "../../../openapi.js";
+const logger = createLogger("workflows");
+const metadata = { requireAuth: false };
+async function GET(request, { params }) {
+  const auth = await getCustomerAuthFromRequest(request);
+  if (!auth) {
+    return NextResponse.json({ ok: false, error: "Authentication required" }, { status: 401 });
+  }
+  const container = await createRequestContainer();
+  const rbac = container.resolve("customerRbacService");
+  try {
+    await requireCustomerFeature(auth, [PORTAL_TASKS_VIEW_FEATURE], rbac);
+  } catch (response) {
+    return response;
+  }
+  try {
+    const em = container.resolve("em");
+    const acl = await rbac.loadAcl(auth.sub, {
+      tenantId: auth.tenantId,
+      organizationId: auth.orgId
+    });
+    const resolved = await resolvePortalTaskPrincipal({ auth, em, isPortalAdmin: acl.isPortalAdmin });
+    if (!resolved.ok) return NextResponse.json(resolved.body, { status: resolved.status });
+    const task = await em.findOne(UserTask, {
+      id: params.id,
+      tenantId: auth.tenantId,
+      organizationId: auth.orgId
+    });
+    if (!task) {
+      return NextResponse.json(PORTAL_TASK_REFUSAL.body, { status: PORTAL_TASK_REFUSAL.status });
+    }
+    const decision = decidePortalTaskAccess(resolved.principal, task);
+    if (!decision.visible) {
+      return NextResponse.json(PORTAL_TASK_REFUSAL.body, { status: PORTAL_TASK_REFUSAL.status });
+    }
+    const { decisions, formKey } = await loadTaskDecisionContext(em, task);
+    const body = {
+      ok: true,
+      task: serializeUserTask(task),
+      decisions,
+      formKey,
+      // What the UI needs to decide whether to render the completion form at
+      // all. A portal admin reading a member's task gets `false` — they see the
+      // work, they never finish it.
+      canComplete: decision.actable
+    };
+    return NextResponse.json(body);
+  } catch (error) {
+    logger.error("Error loading portal task", { err: error });
+    return NextResponse.json({ ok: false, error: "Failed to load task" }, { status: 500 });
+  }
+}
+const openApi = {
+  tag: workflowsTag,
+  summary: "Portal user task detail",
+  methods: {
+    GET: {
+      summary: "Read one portal task",
+      description: "Returns a single customer-assigned task the portal principal owns. Every refusal \u2014 foreign tenant, another customer, an unbound task, a nonexistent id \u2014 is the same 404.",
+      responses: [
+        { status: 200, description: "Portal task", schema: portalTaskDetailResponseSchema }
+      ],
+      errors: [
+        { status: 401, description: "Authentication required", schema: portalTaskErrorSchema },
+        { status: 403, description: "Insufficient permissions or no company association", schema: portalTaskErrorSchema },
+        { status: 404, description: "Task not found", schema: portalTaskErrorSchema },
+        { status: 500, description: "Internal server error", schema: portalTaskErrorSchema }
+      ]
+    }
+  }
+};
+export {
+  GET,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/workflows/api/portal/tasks/[id]/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/workflows/api/portal/tasks/%5Bid%5D/route.ts"],
+  "sourcesContent": ["/**\n * Portal User Task detail API\n *\n * - GET /api/workflows/portal/tasks/[id]\n *\n * Every refusal is the same 404 with the same body \u2014 a foreign task id, another\n * customer's task, an unbound task and a random uuid are indistinguishable. A\n * portal principal has no legitimate knowledge that any row they cannot read\n * exists, and a portal admin least of all.\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport type { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport {\n  getCustomerAuthFromRequest,\n  requireCustomerFeature,\n} from '@open-mercato/core/modules/customer_accounts/lib/customerAuth'\nimport type { CustomerRbacService } from '@open-mercato/core/modules/customer_accounts/services/customerRbacService'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { UserTask } from '../../../../data/entities'\nimport { serializeUserTask } from '../../../tasks/serialize'\nimport { loadTaskDecisionContext } from '../../../../lib/task-decision-context'\nimport {\n  decidePortalTaskAccess,\n  PORTAL_TASK_REFUSAL,\n  PORTAL_TASKS_VIEW_FEATURE,\n  resolvePortalTaskPrincipal,\n} from '../../../../lib/portal-task-access'\nimport {\n  workflowsTag,\n  portalTaskDetailResponseSchema,\n  portalTaskErrorSchema,\n} from '../../../openapi'\n\nconst logger = createLogger('workflows')\n\nexport const metadata: { requireAuth?: boolean } = { requireAuth: false }\n\nexport async function GET(request: NextRequest, { params }: { params: { id: string } }) {\n  const auth = await getCustomerAuthFromRequest(request)\n  if (!auth) {\n    return NextResponse.json({ ok: false, error: 'Authentication required' }, { status: 401 })\n  }\n\n  const container = await createRequestContainer()\n  const rbac = container.resolve('customerRbacService') as CustomerRbacService\n\n  try {\n    await requireCustomerFeature(auth, [PORTAL_TASKS_VIEW_FEATURE], rbac)\n  } catch (response) {\n    return response as NextResponse\n  }\n\n  try {\n    const em = container.resolve('em') as import('@mikro-orm/postgresql').EntityManager\n    const acl = await rbac.loadAcl(auth.sub, {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n    })\n\n    const resolved = await resolvePortalTaskPrincipal({ auth, em, isPortalAdmin: acl.isPortalAdmin })\n    if (!resolved.ok) return NextResponse.json(resolved.body, { status: resolved.status })\n\n    // Scoped at the lookup, so a foreign-tenant id resolves to nothing before the\n    // predicate ever runs.\n    const task = await em.findOne(UserTask, {\n      id: params.id,\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n    })\n    if (!task) {\n      return NextResponse.json(PORTAL_TASK_REFUSAL.body, { status: PORTAL_TASK_REFUSAL.status })\n    }\n\n    const decision = decidePortalTaskAccess(resolved.principal, task)\n    if (!decision.visible) {\n      return NextResponse.json(PORTAL_TASK_REFUSAL.body, { status: PORTAL_TASK_REFUSAL.status })\n    }\n\n    // Re-resolved from the instance's pinned definition, exactly as the\n    // backoffice detail does \u2014 the portal must offer the SAME named outcomes the\n    // author wrote, or a portal completion silently takes the default route.\n    const { decisions, formKey } = await loadTaskDecisionContext(em, task)\n\n    const body: z.infer<typeof portalTaskDetailResponseSchema> = {\n      ok: true,\n      task: serializeUserTask(task),\n      decisions,\n      formKey,\n      // What the UI needs to decide whether to render the completion form at\n      // all. A portal admin reading a member's task gets `false` \u2014 they see the\n      // work, they never finish it.\n      canComplete: decision.actable,\n    }\n\n    return NextResponse.json(body)\n  } catch (error) {\n    logger.error('Error loading portal task', { err: error })\n    return NextResponse.json({ ok: false, error: 'Failed to load task' }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: workflowsTag,\n  summary: 'Portal user task detail',\n  methods: {\n    GET: {\n      summary: 'Read one portal task',\n      description:\n        'Returns a single customer-assigned task the portal principal owns. Every refusal \u2014 foreign tenant, another customer, an unbound task, a nonexistent id \u2014 is the same 404.',\n      responses: [\n        { status: 200, description: 'Portal task', schema: portalTaskDetailResponseSchema },\n      ],\n      errors: [\n        { status: 401, description: 'Authentication required', schema: portalTaskErrorSchema },\n        { status: 403, description: 'Insufficient permissions or no company association', schema: portalTaskErrorSchema },\n        { status: 404, description: 'Task not found', schema: portalTaskErrorSchema },\n        { status: 500, description: 'Internal server error', schema: portalTaskErrorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAWA,SAAsB,oBAAoB;AAG1C,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP,SAAS,oBAAoB;AAC7B,SAAS,gBAAgB;AACzB,SAAS,yBAAyB;AAClC,SAAS,+BAA+B;AACxC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAsC,EAAE,aAAa,MAAM;AAExE,eAAsB,IAAI,SAAsB,EAAE,OAAO,GAA+B;AACtF,QAAM,OAAO,MAAM,2BAA2B,OAAO;AACrD,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,0BAA0B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3F;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,UAAU,QAAQ,qBAAqB;AAEpD,MAAI;AACF,UAAM,uBAAuB,MAAM,CAAC,yBAAyB,GAAG,IAAI;AAAA,EACtE,SAAS,UAAU;AACjB,WAAO;AAAA,EACT;AAEA,MAAI;AACF,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAK;AAAA,MACvC,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,IACvB,CAAC;AAED,UAAM,WAAW,MAAM,2BAA2B,EAAE,MAAM,IAAI,eAAe,IAAI,cAAc,CAAC;AAChG,QAAI,CAAC,SAAS,GAAI,QAAO,aAAa,KAAK,SAAS,MAAM,EAAE,QAAQ,SAAS,OAAO,CAAC;AAIrF,UAAM,OAAO,MAAM,GAAG,QAAQ,UAAU;AAAA,MACtC,IAAI,OAAO;AAAA,MACX,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,IACvB,CAAC;AACD,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,oBAAoB,MAAM,EAAE,QAAQ,oBAAoB,OAAO,CAAC;AAAA,IAC3F;AAEA,UAAM,WAAW,uBAAuB,SAAS,WAAW,IAAI;AAChE,QAAI,CAAC,SAAS,SAAS;AACrB,aAAO,aAAa,KAAK,oBAAoB,MAAM,EAAE,QAAQ,oBAAoB,OAAO,CAAC;AAAA,IAC3F;AAKA,UAAM,EAAE,WAAW,QAAQ,IAAI,MAAM,wBAAwB,IAAI,IAAI;AAErE,UAAM,OAAuD;AAAA,MAC3D,IAAI;AAAA,MACJ,MAAM,kBAAkB,IAAI;AAAA,MAC5B;AAAA,MACA;AAAA;AAAA;AAAA;AAAA,MAIA,aAAa,SAAS;AAAA,IACxB;AAEA,WAAO,aAAa,KAAK,IAAI;AAAA,EAC/B,SAAS,OAAO;AACd,WAAO,MAAM,6BAA6B,EAAE,KAAK,MAAM,CAAC;AACxD,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aACE;AAAA,MACF,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,eAAe,QAAQ,+BAA+B;AAAA,MACpF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,QACrF,EAAE,QAAQ,KAAK,aAAa,sDAAsD,QAAQ,sBAAsB;AAAA,QAChH,EAAE,QAAQ,KAAK,aAAa,kBAAkB,QAAQ,sBAAsB;AAAA,QAC5E,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,sBAAsB;AAAA,MACrF;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/workflows/api/portal/tasks/route.js

@@ -0,0 +1,126 @@
+import { NextResponse } from "next/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import {
+  getCustomerAuthFromRequest,
+  requireCustomerFeature
+} from "@open-mercato/core/modules/customer_accounts/lib/customerAuth";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { parseNumberWithDefault } from "@open-mercato/shared/lib/number";
+import { UserTask } from "../../../data/entities.js";
+import { serializeUserTask } from "../../tasks/serialize.js";
+import {
+  buildPortalTaskConditions,
+  filterVisiblePortalTasks,
+  PORTAL_TASKS_VIEW_FEATURE,
+  resolvePortalTaskPrincipal
+} from "../../../lib/portal-task-access.js";
+import {
+  workflowsTag,
+  portalTaskListQuerySchema,
+  portalTaskListResponseSchema,
+  portalTaskErrorSchema
+} from "../../openapi.js";
+const logger = createLogger("workflows");
+const DEFAULT_PORTAL_TASK_LIMIT = 25;
+const MAX_PORTAL_TASK_LIMIT = 100;
+const metadata = { requireAuth: false };
+async function GET(request) {
+  const auth = await getCustomerAuthFromRequest(request);
+  if (!auth) {
+    return NextResponse.json({ ok: false, error: "Authentication required" }, { status: 401 });
+  }
+  const container = await createRequestContainer();
+  const rbac = container.resolve("customerRbacService");
+  try {
+    await requireCustomerFeature(auth, [PORTAL_TASKS_VIEW_FEATURE], rbac);
+  } catch (response) {
+    return response;
+  }
+  try {
+    const em = container.resolve("em");
+    const acl = await rbac.loadAcl(auth.sub, {
+      tenantId: auth.tenantId,
+      organizationId: auth.orgId
+    });
+    const resolved = await resolvePortalTaskPrincipal({
+      auth,
+      em,
+      isPortalAdmin: acl.isPortalAdmin
+    });
+    if (!resolved.ok) {
+      return NextResponse.json(resolved.body, { status: resolved.status });
+    }
+    const { searchParams } = new URL(request.url);
+    const status = searchParams.get("status");
+    const page = Math.max(1, parseNumberWithDefault(searchParams.get("page"), 1, { min: 1, integer: true }));
+    const pageSize = Math.min(
+      parseNumberWithDefault(searchParams.get("pageSize"), DEFAULT_PORTAL_TASK_LIMIT, {
+        min: 1,
+        integer: true
+      }),
+      MAX_PORTAL_TASK_LIMIT
+    );
+    const where = buildPortalTaskConditions({
+      principal: resolved.principal,
+      assigneeIds: resolved.assigneeIds
+    });
+    if (status) {
+      const statusValues = status.split(",").map((value) => value.trim()).filter(Boolean);
+      if (statusValues.length === 1) where.status = statusValues[0];
+      else if (statusValues.length > 1) where.status = { $in: statusValues };
+    }
+    const [tasks, total] = await em.findAndCount(UserTask, where, {
+      orderBy: { createdAt: "DESC" },
+      limit: pageSize,
+      offset: (page - 1) * pageSize
+    });
+    const visible = filterVisiblePortalTasks(resolved.principal, tasks);
+    if (visible.length !== tasks.length) {
+      logger.warn("Portal task page dropped rows that failed the ownership check", {
+        component: "portal-tasks",
+        tenantId: auth.tenantId,
+        organizationId: auth.orgId,
+        dropped: tasks.length - visible.length
+      });
+    }
+    const body = {
+      ok: true,
+      tasks: visible.map(serializeUserTask),
+      pagination: {
+        page,
+        pageSize,
+        total,
+        totalPages: Math.max(1, Math.ceil(total / pageSize))
+      }
+    };
+    return NextResponse.json(body);
+  } catch (error) {
+    logger.error("Error listing portal tasks", { err: error });
+    return NextResponse.json({ ok: false, error: "Failed to list tasks" }, { status: 500 });
+  }
+}
+const openApi = {
+  tag: workflowsTag,
+  summary: "Portal user tasks",
+  methods: {
+    GET: {
+      summary: "List the portal principal's tasks",
+      description: "Returns the customer-assigned tasks this portal principal may see. A portal admin additionally sees their company members' tasks but may not act on them. Tasks with no entity bindings are never portal-visible.",
+      query: portalTaskListQuerySchema,
+      responses: [
+        { status: 200, description: "Portal task list", schema: portalTaskListResponseSchema }
+      ],
+      errors: [
+        { status: 401, description: "Authentication required", schema: portalTaskErrorSchema },
+        { status: 403, description: "Insufficient permissions or no company association", schema: portalTaskErrorSchema },
+        { status: 500, description: "Internal server error", schema: portalTaskErrorSchema }
+      ]
+    }
+  }
+};
+export {
+  GET,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/workflows/api/portal/tasks/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/workflows/api/portal/tasks/route.ts"],
+  "sourcesContent": ["/**\n * Portal User Tasks API\n *\n * - GET /api/workflows/portal/tasks \u2014 the customer's own task list\n *\n * NEW SURFACE, not a relaxation. The backoffice task routes are untouched: they\n * still require a backoffice session and still refuse a portal token, and this\n * route refuses a backoffice one. Two principals, two route trees, one shared\n * predicate \u2014 which is the only reason the isolation is testable in both\n * directions rather than merely asserted.\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport type { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport {\n  getCustomerAuthFromRequest,\n  requireCustomerFeature,\n} from '@open-mercato/core/modules/customer_accounts/lib/customerAuth'\nimport type { CustomerRbacService } from '@open-mercato/core/modules/customer_accounts/services/customerRbacService'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { parseNumberWithDefault } from '@open-mercato/shared/lib/number'\nimport { UserTask } from '../../../data/entities'\nimport { serializeUserTask } from '../../tasks/serialize'\nimport {\n  buildPortalTaskConditions,\n  filterVisiblePortalTasks,\n  PORTAL_TASKS_VIEW_FEATURE,\n  resolvePortalTaskPrincipal,\n} from '../../../lib/portal-task-access'\nimport {\n  workflowsTag,\n  portalTaskListQuerySchema,\n  portalTaskListResponseSchema,\n  portalTaskErrorSchema,\n} from '../../openapi'\n\nconst logger = createLogger('workflows')\n\nconst DEFAULT_PORTAL_TASK_LIMIT = 25\nconst MAX_PORTAL_TASK_LIMIT = 100\n\nexport const metadata: { requireAuth?: boolean } = { requireAuth: false }\n\nexport async function GET(request: NextRequest) {\n  const auth = await getCustomerAuthFromRequest(request)\n  if (!auth) {\n    return NextResponse.json({ ok: false, error: 'Authentication required' }, { status: 401 })\n  }\n\n  const container = await createRequestContainer()\n  const rbac = container.resolve('customerRbacService') as CustomerRbacService\n\n  try {\n    await requireCustomerFeature(auth, [PORTAL_TASKS_VIEW_FEATURE], rbac)\n  } catch (response) {\n    return response as NextResponse\n  }\n\n  try {\n    const em = container.resolve('em') as import('@mikro-orm/postgresql').EntityManager\n    const acl = await rbac.loadAcl(auth.sub, {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n    })\n\n    const resolved = await resolvePortalTaskPrincipal({\n      auth,\n      em,\n      isPortalAdmin: acl.isPortalAdmin,\n    })\n    if (!resolved.ok) {\n      return NextResponse.json(resolved.body, { status: resolved.status })\n    }\n\n    const { searchParams } = new URL(request.url)\n    const status = searchParams.get('status')\n    const page = Math.max(1, parseNumberWithDefault(searchParams.get('page'), 1, { min: 1, integer: true }))\n    const pageSize = Math.min(\n      parseNumberWithDefault(searchParams.get('pageSize'), DEFAULT_PORTAL_TASK_LIMIT, {\n        min: 1,\n        integer: true,\n      }),\n      MAX_PORTAL_TASK_LIMIT,\n    )\n\n    const where: Record<string, unknown> = buildPortalTaskConditions({\n      principal: resolved.principal,\n      assigneeIds: resolved.assigneeIds,\n    })\n\n    if (status) {\n      const statusValues = status.split(',').map((value) => value.trim()).filter(Boolean)\n      if (statusValues.length === 1) where.status = statusValues[0]\n      else if (statusValues.length > 1) where.status = { $in: statusValues }\n    }\n\n    const [tasks, total] = await em.findAndCount(UserTask, where, {\n      orderBy: { createdAt: 'DESC' },\n      limit: pageSize,\n      offset: (page - 1) * pageSize,\n    })\n\n    // The SQL is the structural half; ownership is a per-row set membership the\n    // jsonb bindings cannot express, so this genuinely drops rows rather than\n    // being a belt-and-braces no-op. A drop means a task assigned to a company\n    // member is bound to a record outside that company \u2014 an authoring anomaly\n    // worth a log line, never a silent gap.\n    const visible = filterVisiblePortalTasks(resolved.principal, tasks)\n    if (visible.length !== tasks.length) {\n      logger.warn('Portal task page dropped rows that failed the ownership check', {\n        component: 'portal-tasks',\n        tenantId: auth.tenantId,\n        organizationId: auth.orgId,\n        dropped: tasks.length - visible.length,\n      })\n    }\n\n    const body: z.infer<typeof portalTaskListResponseSchema> = {\n      ok: true,\n      tasks: visible.map(serializeUserTask),\n      pagination: {\n        page,\n        pageSize,\n        total,\n        totalPages: Math.max(1, Math.ceil(total / pageSize)),\n      },\n    }\n\n    return NextResponse.json(body)\n  } catch (error) {\n    logger.error('Error listing portal tasks', { err: error })\n    return NextResponse.json({ ok: false, error: 'Failed to list tasks' }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: workflowsTag,\n  summary: 'Portal user tasks',\n  methods: {\n    GET: {\n      summary: 'List the portal principal\\'s tasks',\n      description:\n        'Returns the customer-assigned tasks this portal principal may see. A portal admin additionally sees their company members\\' tasks but may not act on them. Tasks with no entity bindings are never portal-visible.',\n      query: portalTaskListQuerySchema,\n      responses: [\n        { status: 200, description: 'Portal task list', schema: portalTaskListResponseSchema },\n      ],\n      errors: [\n        { status: 401, description: 'Authentication required', schema: portalTaskErrorSchema },\n        { status: 403, description: 'Insufficient permissions or no company association', schema: portalTaskErrorSchema },\n        { status: 500, description: 'Internal server error', schema: portalTaskErrorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAYA,SAAsB,oBAAoB;AAG1C,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP,SAAS,oBAAoB;AAC7B,SAAS,8BAA8B;AACvC,SAAS,gBAAgB;AACzB,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,SAAS,aAAa,WAAW;AAEvC,MAAM,4BAA4B;AAClC,MAAM,wBAAwB;AAEvB,MAAM,WAAsC,EAAE,aAAa,MAAM;AAExE,eAAsB,IAAI,SAAsB;AAC9C,QAAM,OAAO,MAAM,2BAA2B,OAAO;AACrD,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,0BAA0B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3F;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,UAAU,QAAQ,qBAAqB;AAEpD,MAAI;AACF,UAAM,uBAAuB,MAAM,CAAC,yBAAyB,GAAG,IAAI;AAAA,EACtE,SAAS,UAAU;AACjB,WAAO;AAAA,EACT;AAEA,MAAI;AACF,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAK;AAAA,MACvC,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,IACvB,CAAC;AAED,UAAM,WAAW,MAAM,2BAA2B;AAAA,MAChD;AAAA,MACA;AAAA,MACA,eAAe,IAAI;AAAA,IACrB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,aAAO,aAAa,KAAK,SAAS,MAAM,EAAE,QAAQ,SAAS,OAAO,CAAC;AAAA,IACrE;AAEA,UAAM,EAAE,aAAa,IAAI,IAAI,IAAI,QAAQ,GAAG;AAC5C,UAAM,SAAS,aAAa,IAAI,QAAQ;AACxC,UAAM,OAAO,KAAK,IAAI,GAAG,uBAAuB,aAAa,IAAI,MAAM,GAAG,GAAG,EAAE,KAAK,GAAG,SAAS,KAAK,CAAC,CAAC;AACvG,UAAM,WAAW,KAAK;AAAA,MACpB,uBAAuB,aAAa,IAAI,UAAU,GAAG,2BAA2B;AAAA,QAC9E,KAAK;AAAA,QACL,SAAS;AAAA,MACX,CAAC;AAAA,MACD;AAAA,IACF;AAEA,UAAM,QAAiC,0BAA0B;AAAA,MAC/D,WAAW,SAAS;AAAA,MACpB,aAAa,SAAS;AAAA,IACxB,CAAC;AAED,QAAI,QAAQ;AACV,YAAM,eAAe,OAAO,MAAM,GAAG,EAAE,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAAE,OAAO,OAAO;AAClF,UAAI,aAAa,WAAW,EAAG,OAAM,SAAS,aAAa,CAAC;AAAA,eACnD,aAAa,SAAS,EAAG,OAAM,SAAS,EAAE,KAAK,aAAa;AAAA,IACvE;AAEA,UAAM,CAAC,OAAO,KAAK,IAAI,MAAM,GAAG,aAAa,UAAU,OAAO;AAAA,MAC5D,SAAS,EAAE,WAAW,OAAO;AAAA,MAC7B,OAAO;AAAA,MACP,SAAS,OAAO,KAAK;AAAA,IACvB,CAAC;AAOD,UAAM,UAAU,yBAAyB,SAAS,WAAW,KAAK;AAClE,QAAI,QAAQ,WAAW,MAAM,QAAQ;AACnC,aAAO,KAAK,iEAAiE;AAAA,QAC3E,WAAW;AAAA,QACX,UAAU,KAAK;AAAA,QACf,gBAAgB,KAAK;AAAA,QACrB,SAAS,MAAM,SAAS,QAAQ;AAAA,MAClC,CAAC;AAAA,IACH;AAEA,UAAM,OAAqD;AAAA,MACzD,IAAI;AAAA,MACJ,OAAO,QAAQ,IAAI,iBAAiB;AAAA,MACpC,YAAY;AAAA,QACV;AAAA,QACA;AAAA,QACA;AAAA,QACA,YAAY,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,QAAQ,CAAC;AAAA,MACrD;AAAA,IACF;AAEA,WAAO,aAAa,KAAK,IAAI;AAAA,EAC/B,SAAS,OAAO;AACd,WAAO,MAAM,8BAA8B,EAAE,KAAK,MAAM,CAAC;AACzD,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,uBAAuB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACxF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aACE;AAAA,MACF,OAAO;AAAA,MACP,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,oBAAoB,QAAQ,6BAA6B;AAAA,MACvF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,QACrF,EAAE,QAAQ,KAAK,aAAa,sDAAsD,QAAQ,sBAAsB;AAAA,QAChH,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,sBAAsB;AAAA,MACrF;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}