@open-mercato/core 0.7.1-develop.7193.1.910a5b0a1e → 0.7.1-develop.7194.1.ab4fc81f82

package/dist/modules/workflows/lib/ai-authoring.js

@@ -0,0 +1,155 @@
+import { z } from "zod";
+const WORKFLOW_DRAFT_AGENT_ID = "workflows.workflow_author";
+const WORKFLOW_DRAFT_PROMPT_MAX_LENGTH = 2e3;
+const draftActivitySchema = z.object({
+  activityId: z.string().min(1).max(100),
+  activityName: z.string().min(1).max(255),
+  activityType: z.string().min(1).max(100),
+  config: z.record(z.string(), z.unknown())
+});
+const draftStepSchema = z.object({
+  stepId: z.string().min(1).max(100),
+  stepName: z.string().min(1).max(255),
+  stepType: z.string().min(1).max(50),
+  description: z.string().max(1e3).optional()
+});
+const draftTransitionSchema = z.object({
+  transitionId: z.string().min(1).max(100),
+  fromStepId: z.string().min(1).max(100),
+  toStepId: z.string().min(1).max(100),
+  transitionName: z.string().max(255).optional(),
+  trigger: z.string().min(1).max(20),
+  activities: z.array(draftActivitySchema).optional()
+});
+const draftContextFieldSchema = z.object({
+  name: z.string().min(1),
+  type: z.enum(["text", "number", "boolean", "select", "date"]),
+  label: z.string().optional(),
+  required: z.boolean().optional()
+});
+const workflowDraftGenerationSchema = z.object({
+  summary: z.string().min(1).max(400).describe("One plain-language sentence describing what the workflow does"),
+  steps: z.array(draftStepSchema).min(2),
+  transitions: z.array(draftTransitionSchema).min(1),
+  contextSchema: z.object({ input: z.object({ fields: z.array(draftContextFieldSchema) }) }).optional()
+});
+const WORKFLOW_DRAFT_CATALOG_LIMIT = 60;
+function buildWorkflowDraftCatalog(input) {
+  return {
+    stepTypes: [...input.stepTypes],
+    transitionTriggers: [...input.transitionTriggers],
+    activityTypes: input.activityTypes.slice(0, WORKFLOW_DRAFT_CATALOG_LIMIT).map((entry) => ({
+      id: entry.id,
+      ...entry.configSchema === void 0 ? {} : { configSchema: entry.configSchema }
+    })),
+    commands: input.commands.slice(0, WORKFLOW_DRAFT_CATALOG_LIMIT).map((entry) => ({ id: entry.id, ...entry.label ? { description: entry.label } : {} })),
+    functions: input.functions.slice(0, WORKFLOW_DRAFT_CATALOG_LIMIT).map((entry) => ({ id: entry.name, ...entry.label ? { description: entry.label } : {} })),
+    events: input.events.slice(0, WORKFLOW_DRAFT_CATALOG_LIMIT).map((entry) => entry.id),
+    agents: (input.agents ?? []).slice(0, WORKFLOW_DRAFT_CATALOG_LIMIT).map((entry) => ({ id: entry.id, ...entry.label ? { description: entry.label } : {} }))
+  };
+}
+function buildWorkflowDraftPrompt(input) {
+  const { prompt, catalog } = input;
+  const invokeAgentRule = catalog.agents.length > 0 ? "- An INVOKE_AGENT activity MUST set config.agentId to one of the catalog `agents` ids and config.onResult (either { autoApproveThreshold } or { alwaysAsk: true })." : "- Do NOT use the INVOKE_AGENT activity type: this installation has no usable agents, so an agent step cannot be run. Use other activity types instead.";
+  return [
+    "Author a workflow definition for this request:",
+    "",
+    prompt.trim(),
+    "",
+    "Use ONLY the identifiers in this catalog. Never invent a step type, transition trigger, activity type, command id, function name or event name that is not listed here.",
+    "",
+    JSON.stringify(catalog),
+    "",
+    "Rules:",
+    "- Exactly one START step and at least one END step.",
+    "- Every step except END has at least one outgoing transition, and every step except START is reachable.",
+    "- Step, transition and activity ids are lowercase letters, numbers, hyphens and underscores only.",
+    "- Activities belong to the transition that LEAVES the step whose work they do.",
+    "- Reference run context as {{context.<path>}}, and declare every path you reference in contextSchema.input.fields.",
+    invokeAgentRule,
+    "- Call the workflows.validate_workflow_definition tool on your draft and fix every reported error before you return it.",
+    "- Prefer the smallest graph that answers the request."
+  ].join("\n");
+}
+const WORKFLOW_DRAFT_MAX_REPAIR_ATTEMPTS = 2;
+function buildWorkflowDraftRepairPrompt(input) {
+  let rendered;
+  try {
+    rendered = JSON.stringify(input.rejectedDraft);
+  } catch {
+    rendered = "(the previous response could not be serialized)";
+  }
+  return [
+    input.previousPrompt,
+    "",
+    "Your previous answer was rejected by the workflow schema. This was it:",
+    "",
+    rendered,
+    "",
+    "Every path below failed validation. Fix exactly these and change nothing else:",
+    ...input.messages.map((message) => `- ${message}`),
+    "",
+    "Return the whole corrected workflow, in the same shape as before."
+  ].join("\n");
+}
+function interpretWorkflowDraftObject(input) {
+  const generation = workflowDraftGenerationSchema.safeParse(input.raw);
+  if (!generation.success) {
+    return {
+      ok: false,
+      reason: "malformedResponse",
+      messages: generation.error.issues.map(
+        (issue) => `${issue.path.join(".") || "(root)"}: ${issue.message}`
+      )
+    };
+  }
+  const candidate = {
+    steps: generation.data.steps,
+    transitions: generation.data.transitions
+  };
+  if (generation.data.contextSchema) candidate.contextSchema = generation.data.contextSchema;
+  const parsed = input.parseDefinition(candidate);
+  if (!parsed.ok) return { ok: false, reason: "schemaError", messages: parsed.messages };
+  return { ok: true, definition: parsed.definition, summary: generation.data.summary };
+}
+const AI_CHECKPOINT_LABEL_MAX_LENGTH = 64;
+function buildAiCheckpointLabel(prompt, options = { prefix: "AI" }) {
+  const maxLength = options.maxLength ?? AI_CHECKPOINT_LABEL_MAX_LENGTH;
+  const normalized = prompt.replace(/\s+/g, " ").trim();
+  if (!normalized) return options.prefix;
+  const budget = Math.max(1, maxLength - options.prefix.length - 2);
+  if (normalized.length <= budget) return `${options.prefix}: ${normalized}`;
+  const clipped = normalized.slice(0, budget);
+  const lastSpace = clipped.lastIndexOf(" ");
+  const body = lastSpace > budget / 2 ? clipped.slice(0, lastSpace) : clipped;
+  return `${options.prefix}: ${body}\u2026`;
+}
+const UNAVAILABLE_ERROR_CODES = /* @__PURE__ */ new Set([
+  "no_provider_configured",
+  "api_key_missing",
+  "agent_unknown",
+  "agent_features_denied",
+  "execution_mode_not_supported"
+]);
+function classifyWorkflowDraftFailure(error) {
+  if (error && typeof error === "object") {
+    const code = error.code;
+    if (typeof code === "string" && UNAVAILABLE_ERROR_CODES.has(code)) return "unavailable";
+  }
+  return "failed";
+}
+export {
+  AI_CHECKPOINT_LABEL_MAX_LENGTH,
+  WORKFLOW_DRAFT_AGENT_ID,
+  WORKFLOW_DRAFT_CATALOG_LIMIT,
+  WORKFLOW_DRAFT_MAX_REPAIR_ATTEMPTS,
+  WORKFLOW_DRAFT_PROMPT_MAX_LENGTH,
+  buildAiCheckpointLabel,
+  buildWorkflowDraftCatalog,
+  buildWorkflowDraftPrompt,
+  buildWorkflowDraftRepairPrompt,
+  classifyWorkflowDraftFailure,
+  interpretWorkflowDraftObject,
+  workflowDraftGenerationSchema
+};
+//# sourceMappingURL=ai-authoring.js.map

package/dist/modules/workflows/lib/ai-authoring.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/workflows/lib/ai-authoring.ts"],
+  "sourcesContent": ["/**\n * Prompt-to-draft: the pure half (spec \u00A79, \"AI-assisted authoring\").\n *\n * *\"natural language \u2192 draft definition generated against the real catalogs\n * (events, commands, ledger), opened in the Studio with a Problems pass already\n * run. Never auto-published.\"*\n *\n * ## What this module owns\n *\n * The three decisions that must be testable without a model, a canvas or a\n * database: what the request looks like, what a response is allowed to become,\n * and what the resulting undo entry is CALLED.\n *\n *  - `buildWorkflowDraftCatalog` shapes the platform's own registries into the\n *    compact catalog the prompt carries. Generation targets schemas, not\n *    vibes \u2014 an activity type the registry does not know can only be invented,\n *    and the catalog is what stops that.\n *  - `buildWorkflowDraftPrompt` turns a prompt plus a catalog into the exact\n *    request string. Pure, so a change to the instructions is a diff a test can\n *    read.\n *  - `interpretWorkflowDraftObject` maps a model response onto a definition, or\n *    refuses. It NEVER hand-rolls validation: the caller passes the definition\n *    parser in, so the Studio, the API route and the tests all reach the one\n *    `workflowDefinitionDataSchema`.\n *  - `buildAiCheckpointLabel` names the undo entry. Spec \u00A79 asks for a *named\n *    checkpoint in the undo stack (\u00A74.5)* \u2014 `lib/editor-history.ts` already\n *    carries a translated label per entry, so \"checkpoint\" is a NAMING problem,\n *    not a second history.\n *  - `classifyWorkflowDraftFailure` decides whether a thrown error means \"there\n *    is no model here\" or \"the call failed\". It reads the error's `code`\n *    STRUCTURALLY \u2014 the same technique `isGuardrailBlockedError` uses \u2014 so this\n *    module never imports the AI runtime and stays loadable in the browser.\n *\n * ## What it deliberately does NOT own\n *\n * Applying. A generated definition reaches the canvas through\n * `evaluateCodeViewDraft` (`lib/code-view-apply.ts`) \u2014 the same four escalating\n * refusals a human-pasted definition passes, because an AI-authored graph has\n * earned exactly as much trust as a pasted one, which is to say none.\n *\n * PURE: zod and plain data only \u2014 no React, no ORM, no DI, no registry imports.\n */\n\nimport { z } from 'zod'\n\n/**\n * The object-mode agent that authors drafts. Declared in the module-root\n * `ai-agents.ts`; resolved by the AI runtime's generated registry, which means\n * it answers `agent_unknown` \u2014 and therefore \"AI authoring is unavailable\" \u2014\n * until `yarn generate` has run.\n */\nexport const WORKFLOW_DRAFT_AGENT_ID = 'workflows.workflow_author'\n\nexport const WORKFLOW_DRAFT_PROMPT_MAX_LENGTH = 2000\n\n// ---------------------------------------------------------------------------\n// The generation contract\n// ---------------------------------------------------------------------------\n\n/**\n * What the model is allowed to produce.\n *\n * Deliberately NARROWER than `workflowDefinitionDataSchema`, in both\n * directions:\n *\n *  - It omits identity (`workflowId`, `workflowName`, `version`). Those are the\n *    engine's unique key, they are edited in the metadata drawer, and \u2014 this is\n *    the load-bearing reason \u2014 they are NOT versioned by the editor's undo\n *    stack. Writing them on apply would leave a residue an undo could not\n *    remove, which breaks the one thing this feature promises.\n *  - It omits `io`, `interpolation`, `errorHandler` and triggers: each is a\n *    separate authoring decision with its own inspector, and a first draft that\n *    silently rewires a definition's error handling is a worse draft.\n *\n * `activityType` is a plain string rather than the registry-driven enum\n * because this module is pure and must not import the registry. The catalog in\n * the prompt is what steers it, and `workflowDefinitionDataSchema` is what\n * enforces it \u2014 the model's output is re-parsed through the real schema before\n * anything reaches a canvas.\n */\nconst draftActivitySchema = z.object({\n  activityId: z.string().min(1).max(100),\n  activityName: z.string().min(1).max(255),\n  activityType: z.string().min(1).max(100),\n  config: z.record(z.string(), z.unknown()),\n})\n\nconst draftStepSchema = z.object({\n  stepId: z.string().min(1).max(100),\n  stepName: z.string().min(1).max(255),\n  stepType: z.string().min(1).max(50),\n  description: z.string().max(1000).optional(),\n})\n\nconst draftTransitionSchema = z.object({\n  transitionId: z.string().min(1).max(100),\n  fromStepId: z.string().min(1).max(100),\n  toStepId: z.string().min(1).max(100),\n  transitionName: z.string().max(255).optional(),\n  trigger: z.string().min(1).max(20),\n  activities: z.array(draftActivitySchema).optional(),\n})\n\nconst draftContextFieldSchema = z.object({\n  name: z.string().min(1),\n  type: z.enum(['text', 'number', 'boolean', 'select', 'date']),\n  label: z.string().optional(),\n  required: z.boolean().optional(),\n})\n\nexport const workflowDraftGenerationSchema = z.object({\n  summary: z\n    .string()\n    .min(1)\n    .max(400)\n    .describe('One plain-language sentence describing what the workflow does'),\n  steps: z.array(draftStepSchema).min(2),\n  transitions: z.array(draftTransitionSchema).min(1),\n  contextSchema: z\n    .object({ input: z.object({ fields: z.array(draftContextFieldSchema) }) })\n    .optional(),\n})\n\nexport type WorkflowDraftGeneration = z.infer<typeof workflowDraftGenerationSchema>\n\n// ---------------------------------------------------------------------------\n// The catalog\n// ---------------------------------------------------------------------------\n\nexport interface WorkflowDraftCatalogEntry {\n  id: string\n  /** Compact JSON-Schema description of the entry's config, when it has one. */\n  configSchema?: unknown\n  description?: string\n}\n\nexport interface WorkflowDraftCatalog {\n  stepTypes: string[]\n  transitionTriggers: string[]\n  activityTypes: WorkflowDraftCatalogEntry[]\n  commands: WorkflowDraftCatalogEntry[]\n  functions: WorkflowDraftCatalogEntry[]\n  events: string[]\n  /**\n   * The agents an `INVOKE_AGENT` activity may target. Empty when the optional\n   * `agent_orchestrator` peer is absent or exposes none \u2014 which is exactly when\n   * `INVOKE_AGENT` must be forbidden (an agent step with no agent to run can\n   * only fail the strict `invokeAgentConfigSchema` later). Fail-closed.\n   */\n  agents: WorkflowDraftCatalogEntry[]\n}\n\nexport interface WorkflowDraftCatalogInput {\n  stepTypes: readonly string[]\n  transitionTriggers: readonly string[]\n  activityTypes: readonly { id: string; configSchema?: unknown }[]\n  commands: readonly { id: string; label?: string }[]\n  functions: readonly { name: string; label?: string }[]\n  events: readonly { id: string }[]\n  /** Usable agents; omitted/empty \u21D2 `INVOKE_AGENT` is fail-closed forbidden. */\n  agents?: readonly { id: string; label?: string }[]\n}\n\n/**\n * The number of registry entries of each kind the prompt carries. A tenant with\n * hundreds of registered commands would otherwise spend the whole context\n * window on a catalog, and a truncated catalog is honest \u2014 the model simply has\n * fewer ids to reach for, and every id it does reach for is real.\n */\nexport const WORKFLOW_DRAFT_CATALOG_LIMIT = 60\n\nexport function buildWorkflowDraftCatalog(\n  input: WorkflowDraftCatalogInput,\n): WorkflowDraftCatalog {\n  return {\n    stepTypes: [...input.stepTypes],\n    transitionTriggers: [...input.transitionTriggers],\n    activityTypes: input.activityTypes\n      .slice(0, WORKFLOW_DRAFT_CATALOG_LIMIT)\n      .map((entry) => ({\n        id: entry.id,\n        ...(entry.configSchema === undefined ? {} : { configSchema: entry.configSchema }),\n      })),\n    commands: input.commands\n      .slice(0, WORKFLOW_DRAFT_CATALOG_LIMIT)\n      .map((entry) => ({ id: entry.id, ...(entry.label ? { description: entry.label } : {}) })),\n    functions: input.functions\n      .slice(0, WORKFLOW_DRAFT_CATALOG_LIMIT)\n      .map((entry) => ({ id: entry.name, ...(entry.label ? { description: entry.label } : {}) })),\n    events: input.events.slice(0, WORKFLOW_DRAFT_CATALOG_LIMIT).map((entry) => entry.id),\n    agents: (input.agents ?? [])\n      .slice(0, WORKFLOW_DRAFT_CATALOG_LIMIT)\n      .map((entry) => ({ id: entry.id, ...(entry.label ? { description: entry.label } : {}) })),\n  }\n}\n\n// ---------------------------------------------------------------------------\n// The request\n// ---------------------------------------------------------------------------\n\nexport interface WorkflowDraftPromptInput {\n  prompt: string\n  catalog: WorkflowDraftCatalog\n}\n\n/**\n * Build the single user message the object-mode agent receives.\n *\n * The catalog travels in the REQUEST rather than through tool calls: the draft\n * agent is declared with an empty tool allowlist, so it has no way to reach\n * tenant data at all. That is the strongest form of \"propose only\" available \u2014\n * not a policy that forbids writes, but a runtime with nothing to write to.\n */\nexport function buildWorkflowDraftPrompt(input: WorkflowDraftPromptInput): string {\n  const { prompt, catalog } = input\n  const invokeAgentRule =\n    catalog.agents.length > 0\n      ? '- An INVOKE_AGENT activity MUST set config.agentId to one of the catalog `agents` ids and config.onResult (either { autoApproveThreshold } or { alwaysAsk: true }).'\n      : '- Do NOT use the INVOKE_AGENT activity type: this installation has no usable agents, so an agent step cannot be run. Use other activity types instead.'\n  return [\n    'Author a workflow definition for this request:',\n    '',\n    prompt.trim(),\n    '',\n    'Use ONLY the identifiers in this catalog. Never invent a step type, transition trigger, activity type, command id, function name or event name that is not listed here.',\n    '',\n    JSON.stringify(catalog),\n    '',\n    'Rules:',\n    '- Exactly one START step and at least one END step.',\n    '- Every step except END has at least one outgoing transition, and every step except START is reachable.',\n    '- Step, transition and activity ids are lowercase letters, numbers, hyphens and underscores only.',\n    '- Activities belong to the transition that LEAVES the step whose work they do.',\n    '- Reference run context as {{context.<path>}}, and declare every path you reference in contextSchema.input.fields.',\n    invokeAgentRule,\n    '- Call the workflows.validate_workflow_definition tool on your draft and fix every reported error before you return it.',\n    '- Prefer the smallest graph that answers the request.',\n  ].join('\\n')\n}\n\n/** How many repair attempts follow a rejected draft before the surface gives up. */\nexport const WORKFLOW_DRAFT_MAX_REPAIR_ATTEMPTS = 2\n\nexport interface WorkflowDraftRepairPromptInput {\n  /** The prompt the previous attempt was authored against, catalog and all. */\n  previousPrompt: string\n  /** Exactly what the model returned, so it can see what it is amending. */\n  rejectedDraft: unknown\n  /** The validator's own messages, verbatim \u2014 `path: message`. */\n  messages: string[]\n}\n\n/**\n * Build the follow-up message for a rejected draft.\n *\n * The validator already produces precise, per-path errors\n * (`transitions.3.activities.0.config.to: SEND_EMAIL activity requires \"to\"`).\n * Handing those to the human as a dead end while the model that can act on them\n * never sees them is the actual defect this repairs: the errors go BACK to the\n * author. The instruction is deliberately narrow \u2014 amend the listed paths and\n * change nothing else \u2014 because a model told to \"try again\" tends to rewrite\n * the graph and lose the parts that were already correct.\n */\nexport function buildWorkflowDraftRepairPrompt(input: WorkflowDraftRepairPromptInput): string {\n  let rendered: string\n  try {\n    rendered = JSON.stringify(input.rejectedDraft)\n  } catch {\n    rendered = '(the previous response could not be serialized)'\n  }\n  return [\n    input.previousPrompt,\n    '',\n    'Your previous answer was rejected by the workflow schema. This was it:',\n    '',\n    rendered,\n    '',\n    'Every path below failed validation. Fix exactly these and change nothing else:',\n    ...input.messages.map((message) => `- ${message}`),\n    '',\n    'Return the whole corrected workflow, in the same shape as before.',\n  ].join('\\n')\n}\n\n// ---------------------------------------------------------------------------\n// The response\n// ---------------------------------------------------------------------------\n\nexport type WorkflowDraftInterpretation<TDefinition> =\n  | { ok: true; definition: TDefinition; summary: string }\n  | { ok: false; reason: 'malformedResponse'; messages: string[] }\n  | { ok: false; reason: 'schemaError'; messages: string[] }\n\nexport interface InterpretWorkflowDraftInput<TDefinition> {\n  raw: unknown\n  /**\n   * The one definition parser. Injected rather than imported so this module\n   * stays pure and so no caller can end up on a second validator.\n   */\n  parseDefinition: (\n    value: unknown,\n  ) => { ok: true; definition: TDefinition } | { ok: false; messages: string[] }\n}\n\n/**\n * Map a model response onto a workflow definition.\n *\n * Two refusals, in escalating order, mirroring the Code view's gate: the object\n * does not match the generation contract at all (`malformedResponse`), or it\n * does but is not a workflow definition (`schemaError`). Both are NORMAL\n * outcomes a surface renders \u2014 never an exception, and never a partial apply.\n */\nexport function interpretWorkflowDraftObject<TDefinition>(\n  input: InterpretWorkflowDraftInput<TDefinition>,\n): WorkflowDraftInterpretation<TDefinition> {\n  const generation = workflowDraftGenerationSchema.safeParse(input.raw)\n  if (!generation.success) {\n    return {\n      ok: false,\n      reason: 'malformedResponse',\n      messages: generation.error.issues.map(\n        (issue) => `${issue.path.join('.') || '(root)'}: ${issue.message}`,\n      ),\n    }\n  }\n\n  const candidate: Record<string, unknown> = {\n    steps: generation.data.steps,\n    transitions: generation.data.transitions,\n  }\n  if (generation.data.contextSchema) candidate.contextSchema = generation.data.contextSchema\n\n  const parsed = input.parseDefinition(candidate)\n  if (!parsed.ok) return { ok: false, reason: 'schemaError', messages: parsed.messages }\n\n  return { ok: true, definition: parsed.definition, summary: generation.data.summary }\n}\n\n// ---------------------------------------------------------------------------\n// The checkpoint name\n// ---------------------------------------------------------------------------\n\nexport const AI_CHECKPOINT_LABEL_MAX_LENGTH = 64\n\n/**\n * Name the undo entry an AI edit pushes.\n *\n * `prefix` is supplied translated by the caller (`useT`), so this stays pure\n * while the label an author reads stays localized. Truncation happens on a word\n * boundary where one is available, because a label cut mid-word reads like a\n * bug rather than an abbreviation.\n */\nexport function buildAiCheckpointLabel(\n  prompt: string,\n  options: { prefix: string; maxLength?: number } = { prefix: 'AI' },\n): string {\n  const maxLength = options.maxLength ?? AI_CHECKPOINT_LABEL_MAX_LENGTH\n  const normalized = prompt.replace(/\\s+/g, ' ').trim()\n  if (!normalized) return options.prefix\n  const budget = Math.max(1, maxLength - options.prefix.length - 2)\n  if (normalized.length <= budget) return `${options.prefix}: ${normalized}`\n  const clipped = normalized.slice(0, budget)\n  const lastSpace = clipped.lastIndexOf(' ')\n  const body = lastSpace > budget / 2 ? clipped.slice(0, lastSpace) : clipped\n  return `${options.prefix}: ${body}\u2026`\n}\n\n// ---------------------------------------------------------------------------\n// Failure classification\n// ---------------------------------------------------------------------------\n\nexport type WorkflowDraftFailureKind = 'unavailable' | 'failed'\n\n/**\n * Error codes that mean \"there is no model to call here\", as opposed to \"the\n * call went wrong\".\n *\n * `no_provider_configured` / `api_key_missing` come from the AI model factory;\n * `agent_unknown` comes from the agent policy gate and is what a deployment\n * that has not run `yarn generate` answers. All three are the same thing to an\n * author: the feature is not set up, and the canvas is untouched.\n */\nconst UNAVAILABLE_ERROR_CODES = new Set([\n  'no_provider_configured',\n  'api_key_missing',\n  'agent_unknown',\n  'agent_features_denied',\n  'execution_mode_not_supported',\n])\n\n/**\n * Read the failure kind off a thrown value STRUCTURALLY, without importing the\n * AI runtime \u2014 this module is loaded by the browser bundle, and the runtime is\n * server-only and optional.\n */\nexport function classifyWorkflowDraftFailure(error: unknown): WorkflowDraftFailureKind {\n  if (error && typeof error === 'object') {\n    const code = (error as { code?: unknown }).code\n    if (typeof code === 'string' && UNAVAILABLE_ERROR_CODES.has(code)) return 'unavailable'\n  }\n  return 'failed'\n}\n"],
+  "mappings": "AA2CA,SAAS,SAAS;AAQX,MAAM,0BAA0B;AAEhC,MAAM,mCAAmC;AA2BhD,MAAM,sBAAsB,EAAE,OAAO;AAAA,EACnC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACrC,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACvC,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACvC,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAC1C,CAAC;AAED,MAAM,kBAAkB,EAAE,OAAO;AAAA,EAC/B,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACjC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACnC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;AAAA,EAClC,aAAa,EAAE,OAAO,EAAE,IAAI,GAAI,EAAE,SAAS;AAC7C,CAAC;AAED,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACvC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACrC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACnC,gBAAgB,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC7C,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;AAAA,EACjC,YAAY,EAAE,MAAM,mBAAmB,EAAE,SAAS;AACpD,CAAC;AAED,MAAM,0BAA0B,EAAE,OAAO;AAAA,EACvC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACtB,MAAM,EAAE,KAAK,CAAC,QAAQ,UAAU,WAAW,UAAU,MAAM,CAAC;AAAA,EAC5D,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,UAAU,EAAE,QAAQ,EAAE,SAAS;AACjC,CAAC;AAEM,MAAM,gCAAgC,EAAE,OAAO;AAAA,EACpD,SAAS,EACN,OAAO,EACP,IAAI,CAAC,EACL,IAAI,GAAG,EACP,SAAS,+DAA+D;AAAA,EAC3E,OAAO,EAAE,MAAM,eAAe,EAAE,IAAI,CAAC;AAAA,EACrC,aAAa,EAAE,MAAM,qBAAqB,EAAE,IAAI,CAAC;AAAA,EACjD,eAAe,EACZ,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,EAAE,CAAC,EAAE,CAAC,EACxE,SAAS;AACd,CAAC;AAgDM,MAAM,+BAA+B;AAErC,SAAS,0BACd,OACsB;AACtB,SAAO;AAAA,IACL,WAAW,CAAC,GAAG,MAAM,SAAS;AAAA,IAC9B,oBAAoB,CAAC,GAAG,MAAM,kBAAkB;AAAA,IAChD,eAAe,MAAM,cAClB,MAAM,GAAG,4BAA4B,EACrC,IAAI,CAAC,WAAW;AAAA,MACf,IAAI,MAAM;AAAA,MACV,GAAI,MAAM,iBAAiB,SAAY,CAAC,IAAI,EAAE,cAAc,MAAM,aAAa;AAAA,IACjF,EAAE;AAAA,IACJ,UAAU,MAAM,SACb,MAAM,GAAG,4BAA4B,EACrC,IAAI,CAAC,WAAW,EAAE,IAAI,MAAM,IAAI,GAAI,MAAM,QAAQ,EAAE,aAAa,MAAM,MAAM,IAAI,CAAC,EAAG,EAAE;AAAA,IAC1F,WAAW,MAAM,UACd,MAAM,GAAG,4BAA4B,EACrC,IAAI,CAAC,WAAW,EAAE,IAAI,MAAM,MAAM,GAAI,MAAM,QAAQ,EAAE,aAAa,MAAM,MAAM,IAAI,CAAC,EAAG,EAAE;AAAA,IAC5F,QAAQ,MAAM,OAAO,MAAM,GAAG,4BAA4B,EAAE,IAAI,CAAC,UAAU,MAAM,EAAE;AAAA,IACnF,SAAS,MAAM,UAAU,CAAC,GACvB,MAAM,GAAG,4BAA4B,EACrC,IAAI,CAAC,WAAW,EAAE,IAAI,MAAM,IAAI,GAAI,MAAM,QAAQ,EAAE,aAAa,MAAM,MAAM,IAAI,CAAC,EAAG,EAAE;AAAA,EAC5F;AACF;AAmBO,SAAS,yBAAyB,OAAyC;AAChF,QAAM,EAAE,QAAQ,QAAQ,IAAI;AAC5B,QAAM,kBACJ,QAAQ,OAAO,SAAS,IACpB,wKACA;AACN,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,OAAO,KAAK;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,IACA,KAAK,UAAU,OAAO;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AAGO,MAAM,qCAAqC;AAsB3C,SAAS,+BAA+B,OAA+C;AAC5F,MAAI;AACJ,MAAI;AACF,eAAW,KAAK,UAAU,MAAM,aAAa;AAAA,EAC/C,QAAQ;AACN,eAAW;AAAA,EACb;AACA,SAAO;AAAA,IACL,MAAM;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG,MAAM,SAAS,IAAI,CAAC,YAAY,KAAK,OAAO,EAAE;AAAA,IACjD;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AA8BO,SAAS,6BACd,OAC0C;AAC1C,QAAM,aAAa,8BAA8B,UAAU,MAAM,GAAG;AACpE,MAAI,CAAC,WAAW,SAAS;AACvB,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,QAAQ;AAAA,MACR,UAAU,WAAW,MAAM,OAAO;AAAA,QAChC,CAAC,UAAU,GAAG,MAAM,KAAK,KAAK,GAAG,KAAK,QAAQ,KAAK,MAAM,OAAO;AAAA,MAClE;AAAA,IACF;AAAA,EACF;AAEA,QAAM,YAAqC;AAAA,IACzC,OAAO,WAAW,KAAK;AAAA,IACvB,aAAa,WAAW,KAAK;AAAA,EAC/B;AACA,MAAI,WAAW,KAAK,cAAe,WAAU,gBAAgB,WAAW,KAAK;AAE7E,QAAM,SAAS,MAAM,gBAAgB,SAAS;AAC9C,MAAI,CAAC,OAAO,GAAI,QAAO,EAAE,IAAI,OAAO,QAAQ,eAAe,UAAU,OAAO,SAAS;AAErF,SAAO,EAAE,IAAI,MAAM,YAAY,OAAO,YAAY,SAAS,WAAW,KAAK,QAAQ;AACrF;AAMO,MAAM,iCAAiC;AAUvC,SAAS,uBACd,QACA,UAAkD,EAAE,QAAQ,KAAK,GACzD;AACR,QAAM,YAAY,QAAQ,aAAa;AACvC,QAAM,aAAa,OAAO,QAAQ,QAAQ,GAAG,EAAE,KAAK;AACpD,MAAI,CAAC,WAAY,QAAO,QAAQ;AAChC,QAAM,SAAS,KAAK,IAAI,GAAG,YAAY,QAAQ,OAAO,SAAS,CAAC;AAChE,MAAI,WAAW,UAAU,OAAQ,QAAO,GAAG,QAAQ,MAAM,KAAK,UAAU;AACxE,QAAM,UAAU,WAAW,MAAM,GAAG,MAAM;AAC1C,QAAM,YAAY,QAAQ,YAAY,GAAG;AACzC,QAAM,OAAO,YAAY,SAAS,IAAI,QAAQ,MAAM,GAAG,SAAS,IAAI;AACpE,SAAO,GAAG,QAAQ,MAAM,KAAK,IAAI;AACnC;AAiBA,MAAM,0BAA0B,oBAAI,IAAI;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAOM,SAAS,6BAA6B,OAA0C;AACrF,MAAI,SAAS,OAAO,UAAU,UAAU;AACtC,UAAM,OAAQ,MAA6B;AAC3C,QAAI,OAAO,SAAS,YAAY,wBAAwB,IAAI,IAAI,EAAG,QAAO;AAAA,EAC5E;AACA,SAAO;AACT;",
+  "names": []
+}

package/dist/modules/workflows/lib/ai-draft-runner.js

@@ -0,0 +1,43 @@
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("workflows");
+async function resolveWorkflowDraftRunner() {
+  let runtime;
+  let registry;
+  try {
+    runtime = await import("@open-mercato/ai-assistant/modules/ai_assistant/lib/agent-runtime");
+    registry = await import("@open-mercato/ai-assistant/modules/ai_assistant/lib/agent-registry");
+  } catch (error) {
+    logger.debug("AI assistant runtime is not installed; workflow draft authoring is unavailable", {
+      err: error
+    });
+    return null;
+  }
+  const runAiAgentObject = runtime.runAiAgentObject;
+  if (typeof runAiAgentObject !== "function") return null;
+  return async (input) => {
+    if (typeof registry.loadAgentRegistry === "function") await registry.loadAgentRegistry();
+    const result = await runAiAgentObject({
+      agentId: input.agentId,
+      input: input.prompt,
+      authContext: input.authContext,
+      container: input.container,
+      // Object-mode tool loop: the agent's one read-only tool
+      // (workflows.validate_workflow_definition) lets it self-correct against
+      // the real definition schema before returning. The runtime's `enableTools`
+      // branch still finalizes through `Output.object`, so `mode` stays
+      // 'generate' and the assertion below is unaffected.
+      enableTools: true,
+      output: { schemaName: input.schemaName, schema: input.schema, mode: "generate" }
+    });
+    if (result.mode !== "generate") {
+      throw Object.assign(new Error("[internal] Workflow draft agent must run in generate mode"), {
+        code: "execution_mode_not_supported"
+      });
+    }
+    return result.object;
+  };
+}
+export {
+  resolveWorkflowDraftRunner
+};
+//# sourceMappingURL=ai-draft-runner.js.map

package/dist/modules/workflows/lib/ai-draft-runner.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/workflows/lib/ai-draft-runner.ts"],
+  "sourcesContent": ["/**\n * The one seam between this module and the AI runtime (spec \u00A79).\n *\n * `@open-mercato/ai-assistant` is an OPTIONAL peer of `@open-mercato/core`: a\n * deployment can ship without it, and until `yarn generate` has run the agent\n * registry does not know this module's agent either. So the runtime is reached\n * through a DYNAMIC import inside a try/catch \u2014 the same shape\n * `agent_orchestrator` uses to reach this module's disposition task, and the\n * same rule `packages/core/AGENTS.md` states for an optional peer.\n *\n * Absence is a NORMAL outcome here, not an error: `resolveWorkflowDraftRunner`\n * answers `null`, the route reports \"AI authoring is not available\", and the\n * canvas is untouched. Tests stub THIS module rather than the AI package, so no\n * test path can reach a real model.\n *\n * SERVER ONLY. Never import from a client component.\n */\n\nimport type { AwilixContainer } from 'awilix'\nimport type { ZodTypeAny } from 'zod'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows')\n\nexport interface WorkflowDraftAuthContext {\n  tenantId: string | null\n  organizationId: string | null\n  userId: string\n  features: string[]\n  isSuperAdmin: boolean\n}\n\nexport interface WorkflowDraftRunnerInput {\n  agentId: string\n  prompt: string\n  schemaName: string\n  schema: ZodTypeAny\n  authContext: WorkflowDraftAuthContext\n  container: AwilixContainer\n}\n\n/** Whatever the model produced, unvalidated \u2014 the caller owns interpretation. */\nexport type WorkflowDraftRunner = (input: WorkflowDraftRunnerInput) => Promise<unknown>\n\ntype AgentRuntimeModule = {\n  runAiAgentObject?: (input: Record<string, unknown>) => Promise<{ mode: string; object: unknown }>\n}\n\ntype AgentRegistryModule = {\n  loadAgentRegistry?: () => Promise<unknown>\n}\n\n/**\n * Resolve the object-mode runner, or `null` when the AI runtime is not\n * installed. Never throws: a missing optional peer is a configuration fact, not\n * a failure to report as a stack trace.\n */\nexport async function resolveWorkflowDraftRunner(): Promise<WorkflowDraftRunner | null> {\n  let runtime: AgentRuntimeModule\n  let registry: AgentRegistryModule\n  try {\n    runtime = (await import(\n      '@open-mercato/ai-assistant/modules/ai_assistant/lib/agent-runtime'\n    )) as unknown as AgentRuntimeModule\n    registry = (await import(\n      '@open-mercato/ai-assistant/modules/ai_assistant/lib/agent-registry'\n    )) as unknown as AgentRegistryModule\n  } catch (error) {\n    logger.debug('AI assistant runtime is not installed; workflow draft authoring is unavailable', {\n      err: error,\n    })\n    return null\n  }\n\n  const runAiAgentObject = runtime.runAiAgentObject\n  if (typeof runAiAgentObject !== 'function') return null\n\n  return async (input) => {\n    // The generated agent registry is what makes this module's agent\n    // resolvable; without it the runtime answers `agent_unknown`, which the\n    // caller classifies as \"unavailable\".\n    if (typeof registry.loadAgentRegistry === 'function') await registry.loadAgentRegistry()\n\n    const result = await runAiAgentObject({\n      agentId: input.agentId,\n      input: input.prompt,\n      authContext: input.authContext,\n      container: input.container,\n      // Object-mode tool loop: the agent's one read-only tool\n      // (workflows.validate_workflow_definition) lets it self-correct against\n      // the real definition schema before returning. The runtime's `enableTools`\n      // branch still finalizes through `Output.object`, so `mode` stays\n      // 'generate' and the assertion below is unaffected.\n      enableTools: true,\n      output: { schemaName: input.schemaName, schema: input.schema, mode: 'generate' },\n    })\n\n    if (result.mode !== 'generate') {\n      throw Object.assign(new Error('[internal] Workflow draft agent must run in generate mode'), {\n        code: 'execution_mode_not_supported',\n      })\n    }\n    return result.object\n  }\n}\n"],
+  "mappings": "AAoBA,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAmCvC,eAAsB,6BAAkE;AACtF,MAAI;AACJ,MAAI;AACJ,MAAI;AACF,cAAW,MAAM,OACf,mEACF;AACA,eAAY,MAAM,OAChB,oEACF;AAAA,EACF,SAAS,OAAO;AACd,WAAO,MAAM,kFAAkF;AAAA,MAC7F,KAAK;AAAA,IACP,CAAC;AACD,WAAO;AAAA,EACT;AAEA,QAAM,mBAAmB,QAAQ;AACjC,MAAI,OAAO,qBAAqB,WAAY,QAAO;AAEnD,SAAO,OAAO,UAAU;AAItB,QAAI,OAAO,SAAS,sBAAsB,WAAY,OAAM,SAAS,kBAAkB;AAEvF,UAAM,SAAS,MAAM,iBAAiB;AAAA,MACpC,SAAS,MAAM;AAAA,MACf,OAAO,MAAM;AAAA,MACb,aAAa,MAAM;AAAA,MACnB,WAAW,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAMjB,aAAa;AAAA,MACb,QAAQ,EAAE,YAAY,MAAM,YAAY,QAAQ,MAAM,QAAQ,MAAM,WAAW;AAAA,IACjF,CAAC;AAED,QAAI,OAAO,SAAS,YAAY;AAC9B,YAAM,OAAO,OAAO,IAAI,MAAM,2DAA2D,GAAG;AAAA,QAC1F,MAAM;AAAA,MACR,CAAC;AAAA,IACH;AACA,WAAO,OAAO;AAAA,EAChB;AACF;",
+  "names": []
+}

package/dist/modules/workflows/lib/annotation-events.js

@@ -0,0 +1,10 @@
+const WORKFLOW_GROUP_TOGGLE_EVENT = "workflow-annotation:toggle-group";
+function requestWorkflowGroupToggle(nodeId) {
+  if (typeof window === "undefined") return;
+  window.dispatchEvent(new CustomEvent(WORKFLOW_GROUP_TOGGLE_EVENT, { detail: { nodeId } }));
+}
+export {
+  WORKFLOW_GROUP_TOGGLE_EVENT,
+  requestWorkflowGroupToggle
+};
+//# sourceMappingURL=annotation-events.js.map

package/dist/modules/workflows/lib/annotation-events.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/workflows/lib/annotation-events.ts"],
+  "sourcesContent": ["/**\n * Window bridge for annotation affordances rendered inside React Flow.\n *\n * Group collapse is toggled from a button inside the node, which React Flow\n * renders in its own transformed plane \u2014 the same reason the node delete button\n * and the route chips announce on `window` instead of bubbling a click the page\n * would have to reconstruct.\n */\n\nexport const WORKFLOW_GROUP_TOGGLE_EVENT = 'workflow-annotation:toggle-group'\n\nexport function requestWorkflowGroupToggle(nodeId: string): void {\n  if (typeof window === 'undefined') return\n  window.dispatchEvent(new CustomEvent(WORKFLOW_GROUP_TOGGLE_EVENT, { detail: { nodeId } }))\n}\n"],
+  "mappings": "AASO,MAAM,8BAA8B;AAEpC,SAAS,2BAA2B,QAAsB;AAC/D,MAAI,OAAO,WAAW,YAAa;AACnC,SAAO,cAAc,IAAI,YAAY,6BAA6B,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;AAC3F;",
+  "names": []
+}

package/dist/modules/workflows/lib/branching-routes.js

@@ -0,0 +1,182 @@
+const OTHERWISE_ROUTE_PRIORITY = 0;
+const FIRST_CASE_ROUTE_PRIORITY = 100;
+const CASE_ROUTE_PRIORITY_STEP = 10;
+function edgeData(edge) {
+  return edge.data ?? {};
+}
+function firstRuleId(preConditions) {
+  if (!Array.isArray(preConditions) || preConditions.length === 0) return null;
+  const [first] = preConditions;
+  if (typeof first === "string") return first;
+  if (first && typeof first === "object" && typeof first.ruleId === "string") {
+    return first.ruleId;
+  }
+  return null;
+}
+function asGroupCondition(value) {
+  if (!value || typeof value !== "object") return null;
+  const candidate = value;
+  if (typeof candidate.operator !== "string" || !Array.isArray(candidate.rules)) return null;
+  return value;
+}
+function readCaseValue(condition) {
+  const group = asGroupCondition(condition);
+  const rules = group ? group.rules : [];
+  const [firstRule] = rules;
+  if (!firstRule || typeof firstRule !== "object") return void 0;
+  const simple = firstRule;
+  if (simple.value === void 0 || simple.value === null) return void 0;
+  return String(simple.value);
+}
+function readCaseField(condition) {
+  const group = asGroupCondition(condition);
+  const rules = group ? group.rules : [];
+  const [firstRule] = rules;
+  if (!firstRule || typeof firstRule !== "object") return void 0;
+  const simple = firstRule;
+  return typeof simple.field === "string" && simple.field.length > 0 ? simple.field : void 0;
+}
+const BRANCHING_NODE_TYPES = ["ifElse", "switch"];
+function isBranchingNodeType(nodeType) {
+  return typeof nodeType === "string" && BRANCHING_NODE_TYPES.includes(nodeType);
+}
+function outgoingRouteEdges(edges, nodeId) {
+  return edges.filter((edge) => edge.source === nodeId && edge.type !== "workflowDataMapping");
+}
+function buildCaseCondition(field, caseValue) {
+  return {
+    operator: "AND",
+    rules: [{ field, operator: "==", value: caseValue }]
+  };
+}
+function readBranchingRoutes(edges, nodeId) {
+  return outgoingRouteEdges(edges, nodeId).map((edge) => {
+    const data = edgeData(edge);
+    const condition = asGroupCondition(data.condition);
+    const ruleId = firstRuleId(data.preConditions);
+    const kind = condition || ruleId ? "case" : "otherwise";
+    return {
+      transitionId: edge.id,
+      toStepId: edge.target,
+      kind,
+      caseLabel: data.caseLabel ?? data.transitionName ?? data.label ?? void 0,
+      caseValue: data.caseValue ?? readCaseValue(data.condition),
+      mode: ruleId ? "rule" : "inline",
+      condition,
+      ruleId
+    };
+  });
+}
+function readSwitchField(edges, nodeId) {
+  for (const edge of outgoingRouteEdges(edges, nodeId)) {
+    const field = readCaseField(edgeData(edge).condition);
+    if (field) return field;
+  }
+  return "";
+}
+function ensureOtherwiseRoute(routes) {
+  if (routes.length === 0) return routes;
+  let otherwiseIndex = -1;
+  for (let index = routes.length - 1; index >= 0; index -= 1) {
+    if (routes[index].kind === "otherwise") {
+      otherwiseIndex = index;
+      break;
+    }
+  }
+  const designatedIndex = otherwiseIndex >= 0 ? otherwiseIndex : routes.length - 1;
+  return routes.map(
+    (route, index) => index === designatedIndex ? { ...route, kind: "otherwise", condition: null, ruleId: null, caseValue: void 0 } : { ...route, kind: "case" }
+  );
+}
+function casePriority(caseIndex) {
+  return FIRST_CASE_ROUTE_PRIORITY - caseIndex * CASE_ROUTE_PRIORITY_STEP;
+}
+function applyRoutes(edges, nodeId, routes, options) {
+  const normalized = ensureOtherwiseRoute(routes);
+  const byTransitionId = new Map(normalized.map((route) => [route.transitionId, route]));
+  let caseIndex = 0;
+  const priorityByTransitionId = /* @__PURE__ */ new Map();
+  for (const route of normalized) {
+    if (route.kind === "otherwise") {
+      priorityByTransitionId.set(route.transitionId, OTHERWISE_ROUTE_PRIORITY);
+      continue;
+    }
+    priorityByTransitionId.set(route.transitionId, casePriority(caseIndex));
+    caseIndex += 1;
+  }
+  return edges.map((edge) => {
+    if (edge.source !== nodeId) return edge;
+    const route = byTransitionId.get(edge.id);
+    if (!route) return edge;
+    const data = { ...edge.data ?? {} };
+    data.priority = priorityByTransitionId.get(route.transitionId) ?? OTHERWISE_ROUTE_PRIORITY;
+    if (route.kind === "otherwise") {
+      delete data.condition;
+      delete data.caseValue;
+      data.preConditions = [];
+    } else if (route.mode === "rule") {
+      delete data.condition;
+      data.preConditions = route.ruleId ? [{ ruleId: route.ruleId, required: true }] : [];
+      if (route.caseValue !== void 0) data.caseValue = route.caseValue;
+    } else {
+      const condition = options.resolveCondition(route);
+      if (condition) data.condition = condition;
+      else delete data.condition;
+      data.preConditions = [];
+      if (route.caseValue !== void 0) data.caseValue = route.caseValue;
+    }
+    if (route.caseLabel !== void 0) {
+      data.caseLabel = route.caseLabel;
+      data.transitionName = route.caseLabel;
+      data.label = route.caseLabel;
+    }
+    return { ...edge, data };
+  });
+}
+function applyIfElseRoutes(edges, nodeId, routes) {
+  return applyRoutes(edges, nodeId, routes, {
+    resolveCondition: (route) => route.condition ?? null
+  });
+}
+function applySwitchRoutes(edges, nodeId, value) {
+  const field = value.field.trim();
+  return applyRoutes(edges, nodeId, value.routes, {
+    resolveCondition: (route) => {
+      const caseValue = (route.caseValue ?? "").trim();
+      if (!field || !caseValue) return null;
+      return buildCaseCondition(field, caseValue);
+    }
+  });
+}
+function collectDuplicateCaseValues(routes) {
+  const seen = /* @__PURE__ */ new Set();
+  const duplicates = /* @__PURE__ */ new Set();
+  for (const route of routes) {
+    if (route.kind !== "case") continue;
+    const caseValue = (route.caseValue ?? "").trim();
+    if (!caseValue) continue;
+    if (seen.has(caseValue)) duplicates.add(caseValue);
+    else seen.add(caseValue);
+  }
+  return [...duplicates];
+}
+function hasOtherwiseRoute(routes) {
+  return routes.some((route) => route.kind === "otherwise");
+}
+export {
+  BRANCHING_NODE_TYPES,
+  CASE_ROUTE_PRIORITY_STEP,
+  FIRST_CASE_ROUTE_PRIORITY,
+  OTHERWISE_ROUTE_PRIORITY,
+  applyIfElseRoutes,
+  applySwitchRoutes,
+  buildCaseCondition,
+  collectDuplicateCaseValues,
+  ensureOtherwiseRoute,
+  hasOtherwiseRoute,
+  isBranchingNodeType,
+  outgoingRouteEdges,
+  readBranchingRoutes,
+  readSwitchField
+};
+//# sourceMappingURL=branching-routes.js.map

package/dist/modules/workflows/lib/branching-routes.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/workflows/lib/branching-routes.ts"],
+  "sourcesContent": ["import type { Edge } from '@xyflow/react'\nimport type { ConditionExpression, GroupCondition } from '@open-mercato/core/modules/business_rules/components/utils/conditionValidation'\n\n/**\n * If/Else + Switch route compilation (spec\n * 2026-07-26-workflows-ux-redesign.md section 5.8).\n *\n * Branching nodes are pure transition sugar: the inspectors in this module's\n * editor never invent a storage shape. Everything an author configures becomes\n * an ordinary outgoing transition \u2014 an inline `condition` in the business_rules\n * expression language (or a business-rule reference through `preConditions`),\n * plus a `priority` that makes the engine's existing highest-priority-first\n * evaluation pick cases before the unconditioned \"otherwise\" route.\n *\n * Pure module: no React, no ORM, no DI. The only xyflow dependency is the\n * `Edge` type.\n */\n\nexport const OTHERWISE_ROUTE_PRIORITY = 0\nexport const FIRST_CASE_ROUTE_PRIORITY = 100\nexport const CASE_ROUTE_PRIORITY_STEP = 10\n\nexport type BranchingConditionMode = 'inline' | 'rule'\n\nexport interface BranchingRouteDraft {\n  transitionId: string\n  toStepId: string\n  kind: 'case' | 'otherwise'\n  caseLabel?: string\n  caseValue?: string\n  mode: BranchingConditionMode\n  condition?: GroupCondition | null\n  ruleId?: string | null\n}\n\nexport interface SwitchRoutesValue {\n  field: string\n  routes: BranchingRouteDraft[]\n}\n\ninterface EdgeDataLike {\n  condition?: unknown\n  preConditions?: unknown\n  transitionName?: string\n  label?: string\n  caseLabel?: string\n  caseValue?: string\n}\n\nfunction edgeData(edge: Edge): EdgeDataLike {\n  return (edge.data ?? {}) as EdgeDataLike\n}\n\nfunction firstRuleId(preConditions: unknown): string | null {\n  if (!Array.isArray(preConditions) || preConditions.length === 0) return null\n  const [first] = preConditions\n  if (typeof first === 'string') return first\n  if (first && typeof first === 'object' && typeof (first as { ruleId?: unknown }).ruleId === 'string') {\n    return (first as { ruleId: string }).ruleId\n  }\n  return null\n}\n\nfunction asGroupCondition(value: unknown): GroupCondition | null {\n  if (!value || typeof value !== 'object') return null\n  const candidate = value as { operator?: unknown; rules?: unknown }\n  if (typeof candidate.operator !== 'string' || !Array.isArray(candidate.rules)) return null\n  return value as GroupCondition\n}\n\nfunction readCaseValue(condition: unknown): string | undefined {\n  const group = asGroupCondition(condition)\n  const rules = group ? (group.rules as ConditionExpression[]) : []\n  const [firstRule] = rules\n  if (!firstRule || typeof firstRule !== 'object') return undefined\n  const simple = firstRule as { value?: unknown }\n  if (simple.value === undefined || simple.value === null) return undefined\n  return String(simple.value)\n}\n\nfunction readCaseField(condition: unknown): string | undefined {\n  const group = asGroupCondition(condition)\n  const rules = group ? (group.rules as ConditionExpression[]) : []\n  const [firstRule] = rules\n  if (!firstRule || typeof firstRule !== 'object') return undefined\n  const simple = firstRule as { field?: unknown }\n  return typeof simple.field === 'string' && simple.field.length > 0 ? simple.field : undefined\n}\n\nexport const BRANCHING_NODE_TYPES = ['ifElse', 'switch'] as const\n\nexport type BranchingNodeType = (typeof BRANCHING_NODE_TYPES)[number]\n\nexport function isBranchingNodeType(nodeType: string | undefined | null): nodeType is BranchingNodeType {\n  return typeof nodeType === 'string' && (BRANCHING_NODE_TYPES as readonly string[]).includes(nodeType)\n}\n\nexport function outgoingRouteEdges(edges: Edge[], nodeId: string): Edge[] {\n  return edges.filter((edge) => edge.source === nodeId && edge.type !== 'workflowDataMapping')\n}\n\n/**\n * Build the case condition for a Switch route: `field == value`, wrapped in the\n * single-rule AND group the ConditionBuilder and the rule evaluator both speak.\n */\nexport function buildCaseCondition(field: string, caseValue: string): GroupCondition {\n  return {\n    operator: 'AND',\n    rules: [{ field, operator: '==', value: caseValue }],\n  }\n}\n\n/**\n * Derive the inspector's view of a branching node's outgoing routes. A route\n * with neither an inline condition nor a business-rule reference IS the\n * otherwise route.\n */\nexport function readBranchingRoutes(edges: Edge[], nodeId: string): BranchingRouteDraft[] {\n  return outgoingRouteEdges(edges, nodeId).map((edge) => {\n    const data = edgeData(edge)\n    const condition = asGroupCondition(data.condition)\n    const ruleId = firstRuleId(data.preConditions)\n    const kind: BranchingRouteDraft['kind'] = condition || ruleId ? 'case' : 'otherwise'\n    return {\n      transitionId: edge.id,\n      toStepId: edge.target,\n      kind,\n      caseLabel: data.caseLabel ?? data.transitionName ?? data.label ?? undefined,\n      caseValue: data.caseValue ?? readCaseValue(data.condition),\n      mode: ruleId ? 'rule' : 'inline',\n      condition,\n      ruleId,\n    }\n  })\n}\n\n/**\n * Infer the switched field from the first case route that carries one, so the\n * inspector reopens on the field the author already picked.\n */\nexport function readSwitchField(edges: Edge[], nodeId: string): string {\n  for (const edge of outgoingRouteEdges(edges, nodeId)) {\n    const field = readCaseField(edgeData(edge).condition)\n    if (field) return field\n  }\n  return ''\n}\n\n/**\n * Guarantee exactly one unconditioned otherwise route. The last route is\n * promoted when the author has not designated one, which is what makes the\n * otherwise route \"auto-created\" as soon as a branching node has routes.\n */\nexport function ensureOtherwiseRoute(routes: BranchingRouteDraft[]): BranchingRouteDraft[] {\n  if (routes.length === 0) return routes\n  // Scan from the end so a freshly connected branching node \u2014 where every\n  // route still reads as unconditioned \u2014 keeps its FIRST connection as the\n  // case route and its last as the otherwise.\n  let otherwiseIndex = -1\n  for (let index = routes.length - 1; index >= 0; index -= 1) {\n    if (routes[index].kind === 'otherwise') {\n      otherwiseIndex = index\n      break\n    }\n  }\n  const designatedIndex = otherwiseIndex >= 0 ? otherwiseIndex : routes.length - 1\n  return routes.map((route, index) =>\n    index === designatedIndex\n      ? { ...route, kind: 'otherwise', condition: null, ruleId: null, caseValue: undefined }\n      : { ...route, kind: 'case' },\n  )\n}\n\nfunction casePriority(caseIndex: number): number {\n  return FIRST_CASE_ROUTE_PRIORITY - caseIndex * CASE_ROUTE_PRIORITY_STEP\n}\n\ninterface ApplyRoutesOptions {\n  resolveCondition: (route: BranchingRouteDraft) => GroupCondition | null\n}\n\nfunction applyRoutes(\n  edges: Edge[],\n  nodeId: string,\n  routes: BranchingRouteDraft[],\n  options: ApplyRoutesOptions,\n): Edge[] {\n  const normalized = ensureOtherwiseRoute(routes)\n  const byTransitionId = new Map(normalized.map((route) => [route.transitionId, route]))\n  let caseIndex = 0\n  const priorityByTransitionId = new Map<string, number>()\n  for (const route of normalized) {\n    if (route.kind === 'otherwise') {\n      priorityByTransitionId.set(route.transitionId, OTHERWISE_ROUTE_PRIORITY)\n      continue\n    }\n    priorityByTransitionId.set(route.transitionId, casePriority(caseIndex))\n    caseIndex += 1\n  }\n\n  return edges.map((edge) => {\n    if (edge.source !== nodeId) return edge\n    const route = byTransitionId.get(edge.id)\n    if (!route) return edge\n\n    const data = { ...(edge.data ?? {}) } as Record<string, unknown>\n    data.priority = priorityByTransitionId.get(route.transitionId) ?? OTHERWISE_ROUTE_PRIORITY\n\n    if (route.kind === 'otherwise') {\n      delete data.condition\n      delete data.caseValue\n      data.preConditions = []\n    } else if (route.mode === 'rule') {\n      delete data.condition\n      data.preConditions = route.ruleId ? [{ ruleId: route.ruleId, required: true }] : []\n      if (route.caseValue !== undefined) data.caseValue = route.caseValue\n    } else {\n      const condition = options.resolveCondition(route)\n      if (condition) data.condition = condition\n      else delete data.condition\n      data.preConditions = []\n      if (route.caseValue !== undefined) data.caseValue = route.caseValue\n    }\n\n    if (route.caseLabel !== undefined) {\n      data.caseLabel = route.caseLabel\n      data.transitionName = route.caseLabel\n      data.label = route.caseLabel\n    }\n\n    return { ...edge, data }\n  })\n}\n\n/**\n * Compile If/Else inspector state onto the node's outgoing edges. Case routes\n * keep whatever inline condition (or business-rule reference) the author chose;\n * the otherwise route is stripped of both.\n */\nexport function applyIfElseRoutes(edges: Edge[], nodeId: string, routes: BranchingRouteDraft[]): Edge[] {\n  return applyRoutes(edges, nodeId, routes, {\n    resolveCondition: (route) => route.condition ?? null,\n  })\n}\n\n/**\n * Compile Switch inspector state onto the node's outgoing edges: every case\n * value becomes a generated `field == value` condition.\n */\nexport function applySwitchRoutes(edges: Edge[], nodeId: string, value: SwitchRoutesValue): Edge[] {\n  const field = value.field.trim()\n  return applyRoutes(edges, nodeId, value.routes, {\n    resolveCondition: (route) => {\n      const caseValue = (route.caseValue ?? '').trim()\n      if (!field || !caseValue) return null\n      return buildCaseCondition(field, caseValue)\n    },\n  })\n}\n\n/**\n * Case values that appear on more than one route. Duplicates make the second\n * route unreachable, because the engine stops at the first matching priority.\n */\nexport function collectDuplicateCaseValues(routes: BranchingRouteDraft[]): string[] {\n  const seen = new Set<string>()\n  const duplicates = new Set<string>()\n  for (const route of routes) {\n    if (route.kind !== 'case') continue\n    const caseValue = (route.caseValue ?? '').trim()\n    if (!caseValue) continue\n    if (seen.has(caseValue)) duplicates.add(caseValue)\n    else seen.add(caseValue)\n  }\n  return [...duplicates]\n}\n\nexport function hasOtherwiseRoute(routes: BranchingRouteDraft[]): boolean {\n  return routes.some((route) => route.kind === 'otherwise')\n}\n"],
+  "mappings": "AAkBO,MAAM,2BAA2B;AACjC,MAAM,4BAA4B;AAClC,MAAM,2BAA2B;AA6BxC,SAAS,SAAS,MAA0B;AAC1C,SAAQ,KAAK,QAAQ,CAAC;AACxB;AAEA,SAAS,YAAY,eAAuC;AAC1D,MAAI,CAAC,MAAM,QAAQ,aAAa,KAAK,cAAc,WAAW,EAAG,QAAO;AACxE,QAAM,CAAC,KAAK,IAAI;AAChB,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI,SAAS,OAAO,UAAU,YAAY,OAAQ,MAA+B,WAAW,UAAU;AACpG,WAAQ,MAA6B;AAAA,EACvC;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,OAAuC;AAC/D,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,QAAM,YAAY;AAClB,MAAI,OAAO,UAAU,aAAa,YAAY,CAAC,MAAM,QAAQ,UAAU,KAAK,EAAG,QAAO;AACtF,SAAO;AACT;AAEA,SAAS,cAAc,WAAwC;AAC7D,QAAM,QAAQ,iBAAiB,SAAS;AACxC,QAAM,QAAQ,QAAS,MAAM,QAAkC,CAAC;AAChE,QAAM,CAAC,SAAS,IAAI;AACpB,MAAI,CAAC,aAAa,OAAO,cAAc,SAAU,QAAO;AACxD,QAAM,SAAS;AACf,MAAI,OAAO,UAAU,UAAa,OAAO,UAAU,KAAM,QAAO;AAChE,SAAO,OAAO,OAAO,KAAK;AAC5B;AAEA,SAAS,cAAc,WAAwC;AAC7D,QAAM,QAAQ,iBAAiB,SAAS;AACxC,QAAM,QAAQ,QAAS,MAAM,QAAkC,CAAC;AAChE,QAAM,CAAC,SAAS,IAAI;AACpB,MAAI,CAAC,aAAa,OAAO,cAAc,SAAU,QAAO;AACxD,QAAM,SAAS;AACf,SAAO,OAAO,OAAO,UAAU,YAAY,OAAO,MAAM,SAAS,IAAI,OAAO,QAAQ;AACtF;AAEO,MAAM,uBAAuB,CAAC,UAAU,QAAQ;AAIhD,SAAS,oBAAoB,UAAoE;AACtG,SAAO,OAAO,aAAa,YAAa,qBAA2C,SAAS,QAAQ;AACtG;AAEO,SAAS,mBAAmB,OAAe,QAAwB;AACxE,SAAO,MAAM,OAAO,CAAC,SAAS,KAAK,WAAW,UAAU,KAAK,SAAS,qBAAqB;AAC7F;AAMO,SAAS,mBAAmB,OAAe,WAAmC;AACnF,SAAO;AAAA,IACL,UAAU;AAAA,IACV,OAAO,CAAC,EAAE,OAAO,UAAU,MAAM,OAAO,UAAU,CAAC;AAAA,EACrD;AACF;AAOO,SAAS,oBAAoB,OAAe,QAAuC;AACxF,SAAO,mBAAmB,OAAO,MAAM,EAAE,IAAI,CAAC,SAAS;AACrD,UAAM,OAAO,SAAS,IAAI;AAC1B,UAAM,YAAY,iBAAiB,KAAK,SAAS;AACjD,UAAM,SAAS,YAAY,KAAK,aAAa;AAC7C,UAAM,OAAoC,aAAa,SAAS,SAAS;AACzE,WAAO;AAAA,MACL,cAAc,KAAK;AAAA,MACnB,UAAU,KAAK;AAAA,MACf;AAAA,MACA,WAAW,KAAK,aAAa,KAAK,kBAAkB,KAAK,SAAS;AAAA,MAClE,WAAW,KAAK,aAAa,cAAc,KAAK,SAAS;AAAA,MACzD,MAAM,SAAS,SAAS;AAAA,MACxB;AAAA,MACA;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAMO,SAAS,gBAAgB,OAAe,QAAwB;AACrE,aAAW,QAAQ,mBAAmB,OAAO,MAAM,GAAG;AACpD,UAAM,QAAQ,cAAc,SAAS,IAAI,EAAE,SAAS;AACpD,QAAI,MAAO,QAAO;AAAA,EACpB;AACA,SAAO;AACT;AAOO,SAAS,qBAAqB,QAAsD;AACzF,MAAI,OAAO,WAAW,EAAG,QAAO;AAIhC,MAAI,iBAAiB;AACrB,WAAS,QAAQ,OAAO,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG;AAC1D,QAAI,OAAO,KAAK,EAAE,SAAS,aAAa;AACtC,uBAAiB;AACjB;AAAA,IACF;AAAA,EACF;AACA,QAAM,kBAAkB,kBAAkB,IAAI,iBAAiB,OAAO,SAAS;AAC/E,SAAO,OAAO;AAAA,IAAI,CAAC,OAAO,UACxB,UAAU,kBACN,EAAE,GAAG,OAAO,MAAM,aAAa,WAAW,MAAM,QAAQ,MAAM,WAAW,OAAU,IACnF,EAAE,GAAG,OAAO,MAAM,OAAO;AAAA,EAC/B;AACF;AAEA,SAAS,aAAa,WAA2B;AAC/C,SAAO,4BAA4B,YAAY;AACjD;AAMA,SAAS,YACP,OACA,QACA,QACA,SACQ;AACR,QAAM,aAAa,qBAAqB,MAAM;AAC9C,QAAM,iBAAiB,IAAI,IAAI,WAAW,IAAI,CAAC,UAAU,CAAC,MAAM,cAAc,KAAK,CAAC,CAAC;AACrF,MAAI,YAAY;AAChB,QAAM,yBAAyB,oBAAI,IAAoB;AACvD,aAAW,SAAS,YAAY;AAC9B,QAAI,MAAM,SAAS,aAAa;AAC9B,6BAAuB,IAAI,MAAM,cAAc,wBAAwB;AACvE;AAAA,IACF;AACA,2BAAuB,IAAI,MAAM,cAAc,aAAa,SAAS,CAAC;AACtE,iBAAa;AAAA,EACf;AAEA,SAAO,MAAM,IAAI,CAAC,SAAS;AACzB,QAAI,KAAK,WAAW,OAAQ,QAAO;AACnC,UAAM,QAAQ,eAAe,IAAI,KAAK,EAAE;AACxC,QAAI,CAAC,MAAO,QAAO;AAEnB,UAAM,OAAO,EAAE,GAAI,KAAK,QAAQ,CAAC,EAAG;AACpC,SAAK,WAAW,uBAAuB,IAAI,MAAM,YAAY,KAAK;AAElE,QAAI,MAAM,SAAS,aAAa;AAC9B,aAAO,KAAK;AACZ,aAAO,KAAK;AACZ,WAAK,gBAAgB,CAAC;AAAA,IACxB,WAAW,MAAM,SAAS,QAAQ;AAChC,aAAO,KAAK;AACZ,WAAK,gBAAgB,MAAM,SAAS,CAAC,EAAE,QAAQ,MAAM,QAAQ,UAAU,KAAK,CAAC,IAAI,CAAC;AAClF,UAAI,MAAM,cAAc,OAAW,MAAK,YAAY,MAAM;AAAA,IAC5D,OAAO;AACL,YAAM,YAAY,QAAQ,iBAAiB,KAAK;AAChD,UAAI,UAAW,MAAK,YAAY;AAAA,UAC3B,QAAO,KAAK;AACjB,WAAK,gBAAgB,CAAC;AACtB,UAAI,MAAM,cAAc,OAAW,MAAK,YAAY,MAAM;AAAA,IAC5D;AAEA,QAAI,MAAM,cAAc,QAAW;AACjC,WAAK,YAAY,MAAM;AACvB,WAAK,iBAAiB,MAAM;AAC5B,WAAK,QAAQ,MAAM;AAAA,IACrB;AAEA,WAAO,EAAE,GAAG,MAAM,KAAK;AAAA,EACzB,CAAC;AACH;AAOO,SAAS,kBAAkB,OAAe,QAAgB,QAAuC;AACtG,SAAO,YAAY,OAAO,QAAQ,QAAQ;AAAA,IACxC,kBAAkB,CAAC,UAAU,MAAM,aAAa;AAAA,EAClD,CAAC;AACH;AAMO,SAAS,kBAAkB,OAAe,QAAgB,OAAkC;AACjG,QAAM,QAAQ,MAAM,MAAM,KAAK;AAC/B,SAAO,YAAY,OAAO,QAAQ,MAAM,QAAQ;AAAA,IAC9C,kBAAkB,CAAC,UAAU;AAC3B,YAAM,aAAa,MAAM,aAAa,IAAI,KAAK;AAC/C,UAAI,CAAC,SAAS,CAAC,UAAW,QAAO;AACjC,aAAO,mBAAmB,OAAO,SAAS;AAAA,IAC5C;AAAA,EACF,CAAC;AACH;AAMO,SAAS,2BAA2B,QAAyC;AAClF,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,aAAa,oBAAI,IAAY;AACnC,aAAW,SAAS,QAAQ;AAC1B,QAAI,MAAM,SAAS,OAAQ;AAC3B,UAAM,aAAa,MAAM,aAAa,IAAI,KAAK;AAC/C,QAAI,CAAC,UAAW;AAChB,QAAI,KAAK,IAAI,SAAS,EAAG,YAAW,IAAI,SAAS;AAAA,QAC5C,MAAK,IAAI,SAAS;AAAA,EACzB;AACA,SAAO,CAAC,GAAG,UAAU;AACvB;AAEO,SAAS,kBAAkB,QAAwC;AACxE,SAAO,OAAO,KAAK,CAAC,UAAU,MAAM,SAAS,WAAW;AAC1D;",
+  "names": []
+}

package/dist/modules/workflows/lib/breach-routing.js

@@ -0,0 +1,50 @@
+const SLA_BREACH_TRANSITION_KIND = "slaBreach";
+const SLA_BREACH_SOURCE_HANDLE_ID = "slaBreach";
+function isSlaBreachTransition(transition) {
+  return transition?.kind === SLA_BREACH_TRANSITION_KIND;
+}
+function excludeSlaBreachTransitions(transitions) {
+  return transitions.filter((transition) => !isSlaBreachTransition(transition));
+}
+function findSlaBreachTransition(definition, stepId) {
+  const candidates = (definition?.transitions ?? []).filter(
+    (transition) => transition.fromStepId === stepId && isSlaBreachTransition(transition)
+  );
+  if (candidates.length === 0) return null;
+  const ordered = [...candidates].sort((left, right) => (right.priority || 0) - (left.priority || 0));
+  return ordered[0] ?? null;
+}
+const UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function resolveBreachReassignTarget(reassignTo) {
+  const target = typeof reassignTo === "string" ? reassignTo.trim() : "";
+  if (!target.length) return null;
+  if (UUID_PATTERN.test(target)) return { assignedTo: target, assignedToRoles: null };
+  return { assignedTo: null, assignedToRoles: [target] };
+}
+function resolveTaskBreachHandling(definition, stepId, onBreach) {
+  const wired = findSlaBreachTransition(definition, stepId);
+  if (wired) return { kind: "route", transition: wired };
+  const action = onBreach?.action;
+  if (action === "route") {
+    const bound = (definition?.transitions ?? []).find(
+      (transition) => transition.transitionId === onBreach?.transitionId && transition.fromStepId === stepId
+    );
+    return bound ? { kind: "route", transition: bound } : { kind: "none" };
+  }
+  if (action === "reassign") {
+    const target = resolveBreachReassignTarget(onBreach?.reassignTo);
+    return target ? { kind: "reassign", ...target } : { kind: "none" };
+  }
+  if (action === "notify") return { kind: "notify" };
+  return { kind: "none" };
+}
+export {
+  SLA_BREACH_SOURCE_HANDLE_ID,
+  SLA_BREACH_TRANSITION_KIND,
+  excludeSlaBreachTransitions,
+  findSlaBreachTransition,
+  isSlaBreachTransition,
+  resolveBreachReassignTarget,
+  resolveTaskBreachHandling
+};
+//# sourceMappingURL=breach-routing.js.map

package/dist/modules/workflows/lib/breach-routing.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/workflows/lib/breach-routing.ts"],
+  "sourcesContent": ["/**\n * Workflows Module - SLA breach routing (pure)\n *\n * Resolves what happens to a run when a USER_TASK's deadline passes, from the\n * definition alone \u2014 deliberately shaped like `lib/error-routing.ts`, which\n * answers the same kind of question for a failed step:\n *\n *   1. an outgoing transition marked `kind: 'slaBreach'` wins \u2014 the canvas form\n *      of \"route the breach\";\n *   2. otherwise the step's `onBreach` action applies (`route` bound to a\n *      durable transition id, `reassign`, or `notify`);\n *   3. otherwise nothing routes, which is exactly today's behavior.\n *\n * Every fall-through is FAIL-SAFE: an `onBreach: { action: 'route' }` whose\n * transition no longer exists on this step resolves to `none`, never to\n * \"follow whichever route happens to be valid\". Auto-routing a breach would\n * advance the run past work the author never said could be skipped \u2014 the\n * opposite of what a deadline means.\n *\n * PURE: no ORM, DI, React or registry imports. Engine call sites pass the plain\n * definition JSON.\n */\n\nimport type { TaskOnBreach } from '../data/validators'\n\nexport const SLA_BREACH_TRANSITION_KIND = 'slaBreach'\n\n/**\n * Canvas handle id a USER_TASK node exposes for its SLA-breach output, mirroring\n * `ERROR_SOURCE_HANDLE_ID`. A connection drawn from it compiles to a transition\n * with `kind: 'slaBreach'`.\n */\nexport const SLA_BREACH_SOURCE_HANDLE_ID = 'slaBreach'\n\nexport interface BreachRoutingTransitionLike {\n  transitionId?: string\n  fromStepId?: string\n  toStepId?: string\n  kind?: string\n  priority?: number\n}\n\nexport interface BreachRoutingDefinitionLike {\n  transitions?: BreachRoutingTransitionLike[]\n}\n\nexport type TaskBreachHandling =\n  | { kind: 'route'; transition: BreachRoutingTransitionLike }\n  | { kind: 'reassign'; assignedTo: string | null; assignedToRoles: string[] | null }\n  | { kind: 'notify' }\n  | { kind: 'none' }\n\n/**\n * A transition authored as the SLA-breach route. The discriminator is the same\n * additive optional `kind` field error routes use, so every stored definition\n * keeps its current meaning.\n */\nexport function isSlaBreachTransition(\n  transition: BreachRoutingTransitionLike | null | undefined\n): boolean {\n  return transition?.kind === SLA_BREACH_TRANSITION_KIND\n}\n\n/**\n * SLA-breach routes must never be taken by normal routing \u2014 they are reachable\n * only from a breach, exactly like error routes. Every routing lookup filters\n * through this helper.\n */\nexport function excludeSlaBreachTransitions<T extends BreachRoutingTransitionLike>(\n  transitions: T[]\n): T[] {\n  return transitions.filter((transition) => !isSlaBreachTransition(transition))\n}\n\n/**\n * Highest-priority outgoing SLA-breach route of a step. Ties keep definition\n * order, mirroring how `findValidTransitions` orders normal routes.\n */\nexport function findSlaBreachTransition(\n  definition: BreachRoutingDefinitionLike | null | undefined,\n  stepId: string\n): BreachRoutingTransitionLike | null {\n  const candidates = (definition?.transitions ?? []).filter(\n    (transition) => transition.fromStepId === stepId && isSlaBreachTransition(transition)\n  )\n  if (candidates.length === 0) return null\n  const ordered = [...candidates].sort((left, right) => (right.priority || 0) - (left.priority || 0))\n  return ordered[0] ?? null\n}\n\nconst UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i\n\n/**\n * The inspector's \"Reassign to\" field accepts a user id OR a role, which is\n * what its placeholder promises. A UUID addresses one person (`assigned_to`\n * holds a bare user id); anything else is a role NAME, which is the vocabulary\n * `assigned_to_roles` has always spoken.\n */\nexport function resolveBreachReassignTarget(\n  reassignTo: string | null | undefined\n): { assignedTo: string | null; assignedToRoles: string[] | null } | null {\n  const target = typeof reassignTo === 'string' ? reassignTo.trim() : ''\n  if (!target.length) return null\n  if (UUID_PATTERN.test(target)) return { assignedTo: target, assignedToRoles: null }\n  return { assignedTo: null, assignedToRoles: [target] }\n}\n\n/**\n * The single decision point for a breached task, in precedence order:\n * wired SLA-breach route \u2192 the step's `onBreach` action \u2192 nothing.\n *\n * `none` is both the \"author configured nothing\" case and every malformed\n * configuration, so a definition that predates this feature \u2014 or one whose\n * breach route was deleted \u2014 behaves precisely as it did before.\n */\nexport function resolveTaskBreachHandling(\n  definition: BreachRoutingDefinitionLike | null | undefined,\n  stepId: string,\n  onBreach: TaskOnBreach | null | undefined\n): TaskBreachHandling {\n  const wired = findSlaBreachTransition(definition, stepId)\n  if (wired) return { kind: 'route', transition: wired }\n\n  const action = onBreach?.action\n  if (action === 'route') {\n    const bound = (definition?.transitions ?? []).find(\n      (transition) =>\n        transition.transitionId === onBreach?.transitionId &&\n        transition.fromStepId === stepId\n    )\n    return bound ? { kind: 'route', transition: bound } : { kind: 'none' }\n  }\n\n  if (action === 'reassign') {\n    const target = resolveBreachReassignTarget(onBreach?.reassignTo)\n    return target ? { kind: 'reassign', ...target } : { kind: 'none' }\n  }\n\n  if (action === 'notify') return { kind: 'notify' }\n\n  return { kind: 'none' }\n}\n"],
+  "mappings": "AAyBO,MAAM,6BAA6B;AAOnC,MAAM,8BAA8B;AAyBpC,SAAS,sBACd,YACS;AACT,SAAO,YAAY,SAAS;AAC9B;AAOO,SAAS,4BACd,aACK;AACL,SAAO,YAAY,OAAO,CAAC,eAAe,CAAC,sBAAsB,UAAU,CAAC;AAC9E;AAMO,SAAS,wBACd,YACA,QACoC;AACpC,QAAM,cAAc,YAAY,eAAe,CAAC,GAAG;AAAA,IACjD,CAAC,eAAe,WAAW,eAAe,UAAU,sBAAsB,UAAU;AAAA,EACtF;AACA,MAAI,WAAW,WAAW,EAAG,QAAO;AACpC,QAAM,UAAU,CAAC,GAAG,UAAU,EAAE,KAAK,CAAC,MAAM,WAAW,MAAM,YAAY,MAAM,KAAK,YAAY,EAAE;AAClG,SAAO,QAAQ,CAAC,KAAK;AACvB;AAEA,MAAM,eAAe;AAQd,SAAS,4BACd,YACwE;AACxE,QAAM,SAAS,OAAO,eAAe,WAAW,WAAW,KAAK,IAAI;AACpE,MAAI,CAAC,OAAO,OAAQ,QAAO;AAC3B,MAAI,aAAa,KAAK,MAAM,EAAG,QAAO,EAAE,YAAY,QAAQ,iBAAiB,KAAK;AAClF,SAAO,EAAE,YAAY,MAAM,iBAAiB,CAAC,MAAM,EAAE;AACvD;AAUO,SAAS,0BACd,YACA,QACA,UACoB;AACpB,QAAM,QAAQ,wBAAwB,YAAY,MAAM;AACxD,MAAI,MAAO,QAAO,EAAE,MAAM,SAAS,YAAY,MAAM;AAErD,QAAM,SAAS,UAAU;AACzB,MAAI,WAAW,SAAS;AACtB,UAAM,SAAS,YAAY,eAAe,CAAC,GAAG;AAAA,MAC5C,CAAC,eACC,WAAW,iBAAiB,UAAU,gBACtC,WAAW,eAAe;AAAA,IAC9B;AACA,WAAO,QAAQ,EAAE,MAAM,SAAS,YAAY,MAAM,IAAI,EAAE,MAAM,OAAO;AAAA,EACvE;AAEA,MAAI,WAAW,YAAY;AACzB,UAAM,SAAS,4BAA4B,UAAU,UAAU;AAC/D,WAAO,SAAS,EAAE,MAAM,YAAY,GAAG,OAAO,IAAI,EAAE,MAAM,OAAO;AAAA,EACnE;AAEA,MAAI,WAAW,SAAU,QAAO,EAAE,MAAM,SAAS;AAEjD,SAAO,EAAE,MAAM,OAAO;AACxB;",
+  "names": []
+}