@open-mercato/core 0.7.1-develop.7193.1.910a5b0a1e → 0.7.1-develop.7195.1.b5efd1d51a

package/dist/modules/workflows/api/definitions/generate/route.js

@@ -0,0 +1,233 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { zodToJsonSchema } from "@open-mercato/shared/lib/openapi";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { getDeclaredEvents } from "@open-mercato/shared/modules/events";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import {
+  transitionTriggerSchema,
+  workflowDefinitionDataSchema,
+  workflowStepTypeSchema
+} from "../../../data/validators.js";
+import { listActivityTypes } from "../../../lib/activity-registry.js";
+import "../../../lib/activity-registry-bootstrap.js";
+import {
+  WORKFLOW_DRAFT_AGENT_ID,
+  WORKFLOW_DRAFT_MAX_REPAIR_ATTEMPTS,
+  WORKFLOW_DRAFT_PROMPT_MAX_LENGTH,
+  buildWorkflowDraftCatalog,
+  buildWorkflowDraftPrompt,
+  buildWorkflowDraftRepairPrompt,
+  classifyWorkflowDraftFailure,
+  interpretWorkflowDraftObject,
+  workflowDraftGenerationSchema
+} from "../../../lib/ai-authoring.js";
+import { resolveWorkflowDraftRunner } from "../../../lib/ai-draft-runner.js";
+import {
+  computeDefinitionContextLedger,
+  warmContextLedgerResolvers
+} from "../../../lib/definition-context-schema.js";
+import { evaluateWorkflowDefinition } from "../../../lib/definition-evaluation.js";
+import { listWorkflowFunctions } from "../../../lib/workflow-function-registry.js";
+import { listWorkflowSafeCommands } from "../../../lib/workflow-safe-commands.js";
+import { workflowsTag, workflowErrorSchema } from "../../openapi.js";
+const logger = createLogger("workflows");
+const DEFINITIONS_CREATE = "workflows.definitions.create";
+const metadata = {
+  requireAuth: true,
+  requireFeatures: [DEFINITIONS_CREATE]
+};
+const generateDefinitionRequestSchema = z.object({
+  prompt: z.string().trim().min(1).max(WORKFLOW_DRAFT_PROMPT_MAX_LENGTH)
+});
+const generateDefinitionResponseSchema = z.object({
+  ok: z.boolean(),
+  reason: z.enum(["unavailable", "failed", "malformedResponse", "schemaError"]).optional(),
+  message: z.string().optional(),
+  messages: z.array(z.string()).optional(),
+  summary: z.string().optional(),
+  definition: z.record(z.string(), z.unknown()).optional(),
+  problems: z.array(z.record(z.string(), z.unknown())).optional(),
+  errorCount: z.number().int().nonnegative().optional(),
+  warningCount: z.number().int().nonnegative().optional()
+});
+async function resolveDraftAgents(container) {
+  let bridge;
+  try {
+    bridge = container.resolve("agentWorkflowBridge");
+  } catch {
+    return [];
+  }
+  if (!bridge || typeof bridge.listAgentOutcomeContracts !== "function") return [];
+  try {
+    const snapshots = await bridge.listAgentOutcomeContracts();
+    return snapshots.map((snapshot) => typeof snapshot.agentId === "string" ? { id: snapshot.agentId } : null).filter((entry) => entry !== null);
+  } catch {
+    return [];
+  }
+}
+async function tryComputeLedger(container, definition) {
+  try {
+    await warmContextLedgerResolvers(container);
+    return computeDefinitionContextLedger(definition);
+  } catch {
+    return null;
+  }
+}
+async function POST(request) {
+  try {
+    const container = await createRequestContainer();
+    const auth = await getAuthFromRequest(request);
+    if (!auth || !auth.sub) {
+      return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    }
+    const scope = await resolveOrganizationScopeForRequest({ container, auth, request });
+    const tenantId = auth.tenantId;
+    const organizationId = scope?.selectedId ?? auth.orgId ?? null;
+    if (!tenantId) {
+      return NextResponse.json({ error: "Missing tenant context" }, { status: 400 });
+    }
+    const rbacService = container.resolve("rbacService");
+    const hasPermission = await rbacService.userHasAllFeatures(auth.sub, [DEFINITIONS_CREATE], {
+      tenantId,
+      organizationId
+    });
+    if (!hasPermission) {
+      return NextResponse.json({ error: "Insufficient permissions" }, { status: 403 });
+    }
+    const body = await request.json();
+    const validation = generateDefinitionRequestSchema.safeParse(body);
+    if (!validation.success) {
+      return NextResponse.json(
+        { error: "Validation failed", details: validation.error.issues },
+        { status: 400 }
+      );
+    }
+    const runner = await resolveWorkflowDraftRunner();
+    if (!runner) {
+      return NextResponse.json({ ok: false, reason: "unavailable" });
+    }
+    const catalog = buildWorkflowDraftCatalog({
+      stepTypes: workflowStepTypeSchema.options,
+      transitionTriggers: transitionTriggerSchema.options,
+      activityTypes: listActivityTypes().map((entry) => ({
+        id: entry.id,
+        configSchema: zodToJsonSchema(entry.configSchema) ?? void 0
+      })),
+      commands: listWorkflowSafeCommands().map((entry) => ({ id: entry.commandId })),
+      functions: listWorkflowFunctions().map((entry) => ({
+        name: entry.name,
+        ...entry.description ? { label: entry.description } : {}
+      })),
+      events: getDeclaredEvents().filter((event) => !event.excludeFromTriggers).map((event) => ({ id: event.id })),
+      agents: await resolveDraftAgents(container)
+    });
+    const acl = await rbacService.loadAcl?.(auth.sub, { tenantId, organizationId }) ?? null;
+    const authContext = {
+      tenantId,
+      organizationId,
+      userId: auth.sub,
+      features: acl?.features ?? [],
+      isSuperAdmin: acl?.isSuperAdmin ?? false
+    };
+    const parseDefinition = (value) => {
+      const parsed = workflowDefinitionDataSchema.safeParse(value);
+      if (parsed.success) return { ok: true, definition: parsed.data };
+      return {
+        ok: false,
+        messages: parsed.error.issues.map(
+          (issue) => `${issue.path.join(".") || "(root)"}: ${issue.message}`
+        )
+      };
+    };
+    let prompt = buildWorkflowDraftPrompt({ prompt: validation.data.prompt, catalog });
+    let interpreted = null;
+    let repairAttempts = 0;
+    for (let attempt = 0; attempt <= WORKFLOW_DRAFT_MAX_REPAIR_ATTEMPTS; attempt += 1) {
+      let raw;
+      try {
+        raw = await runner({
+          agentId: WORKFLOW_DRAFT_AGENT_ID,
+          prompt,
+          schemaName: "WorkflowDraft",
+          schema: workflowDraftGenerationSchema,
+          authContext,
+          container
+        });
+      } catch (error) {
+        const kind = classifyWorkflowDraftFailure(error);
+        logger.warn("Workflow draft generation failed", { err: error, kind, attempt });
+        return NextResponse.json({
+          ok: false,
+          reason: kind,
+          ...kind === "failed" ? { message: error instanceof Error ? error.message : String(error) } : {}
+        });
+      }
+      interpreted = interpretWorkflowDraftObject({ raw, parseDefinition });
+      if (interpreted.ok) break;
+      if (attempt === WORKFLOW_DRAFT_MAX_REPAIR_ATTEMPTS) break;
+      repairAttempts += 1;
+      logger.info("Workflow draft rejected; asking the model to repair it", {
+        reason: interpreted.reason,
+        messageCount: interpreted.messages.length,
+        attempt: repairAttempts
+      });
+      prompt = buildWorkflowDraftRepairPrompt({
+        previousPrompt: prompt,
+        rejectedDraft: raw,
+        messages: interpreted.messages
+      });
+    }
+    if (!interpreted || !interpreted.ok) {
+      return NextResponse.json({
+        ok: false,
+        reason: interpreted?.reason ?? "malformedResponse",
+        messages: interpreted?.messages ?? [],
+        repairAttempts
+      });
+    }
+    const ledger = await tryComputeLedger(container, interpreted.definition);
+    const evaluation = evaluateWorkflowDefinition(interpreted.definition, { ledger });
+    return NextResponse.json({
+      ok: true,
+      summary: interpreted.summary,
+      definition: interpreted.definition,
+      problems: evaluation.problems,
+      errorCount: evaluation.errorCount,
+      warningCount: evaluation.warningCount
+    });
+  } catch (error) {
+    logger.error("Error generating workflow definition draft", { err: error });
+    return NextResponse.json({ error: "Failed to generate workflow draft" }, { status: 500 });
+  }
+}
+const openApi = {
+  tag: workflowsTag,
+  summary: "Generate a draft workflow definition from a prompt",
+  methods: {
+    POST: {
+      summary: "Author a draft workflow definition from natural language",
+      description: `Runs the propose-only workflows.workflow_author agent against this installation's activity, command, function and event catalogs and returns a draft definition plus the Problems-panel evaluation for it. Persists nothing: the draft is returned to the Studio for a human to apply, save and enable. Refusals ("unavailable" when no AI provider or agent registry is present, "failed" when the model call errored, "malformedResponse"/"schemaError" when the output is not a workflow definition) respond 200 with a structured body.`,
+      requestBody: { schema: generateDefinitionRequestSchema },
+      responses: [
+        {
+          status: 200,
+          description: "The generated draft with its Problems-panel evaluation, or a structured refusal",
+          schema: generateDefinitionResponseSchema
+        },
+        { status: 400, description: "Invalid request body", schema: workflowErrorSchema },
+        { status: 401, description: "Unauthorized", schema: workflowErrorSchema },
+        { status: 403, description: "Insufficient permissions", schema: workflowErrorSchema },
+        { status: 500, description: "Generation failed unexpectedly", schema: workflowErrorSchema }
+      ]
+    }
+  }
+};
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/workflows/api/definitions/generate/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/workflows/api/definitions/generate/route.ts"],
+  "sourcesContent": ["/**\n * Prompt-to-draft API (spec \u00A79, \"AI-assisted authoring\")\n *\n * Endpoint:\n * - POST /api/workflows/definitions/generate \u2014 natural language \u2192 draft definition\n *\n * ## This route PERSISTS NOTHING\n *\n * That is the whole trust model, and it is stronger than the `enabled: false`\n * row `workflows.create_definition` writes for external agents. There is no\n * `em.persist` on any path here: the generated definition is returned to the\n * Studio, the author reviews it on the canvas, and the ordinary Save + Enable\n * path \u2014 with its optimistic lock, its structural-edit guard and its publish\n * step \u2014 is the only way it ever becomes something the engine can run.\n *\n * ## Refusals are 200s\n *\n * \"No AI provider configured\", \"the model call failed\", \"the model produced\n * something that is not a workflow\" are all NORMAL authoring outcomes the\n * editor renders, exactly like the sibling test-step route's `{ refused: true }`\n * body. They respond 200 with a structured `{ ok: false, reason }` so the\n * surface can say what happened instead of showing a stack trace \u2014 this\n * module's recurring bug class is shipped behaviour that silently does nothing,\n * and a bare 500 is that bug wearing a status code.\n *\n * ## One evaluator\n *\n * The Problems pass is `evaluateWorkflowDefinition` \u2014 the same composer the\n * Studio's Problems panel and the definition API's 400 body come through. The\n * response carries its `problems`, `errorCount` and `warningCount` so the\n * author sees what is wrong with a draft BEFORE deciding to put it on a canvas.\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { zodToJsonSchema } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { getDeclaredEvents } from '@open-mercato/shared/modules/events'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { WorkflowDefinitionData } from '../../../data/entities'\nimport {\n  transitionTriggerSchema,\n  workflowDefinitionDataSchema,\n  workflowStepTypeSchema,\n} from '../../../data/validators'\nimport { listActivityTypes } from '../../../lib/activity-registry'\nimport '../../../lib/activity-registry-bootstrap'\nimport {\n  WORKFLOW_DRAFT_AGENT_ID,\n  WORKFLOW_DRAFT_MAX_REPAIR_ATTEMPTS,\n  WORKFLOW_DRAFT_PROMPT_MAX_LENGTH,\n  buildWorkflowDraftCatalog,\n  buildWorkflowDraftPrompt,\n  buildWorkflowDraftRepairPrompt,\n  classifyWorkflowDraftFailure,\n  interpretWorkflowDraftObject,\n  workflowDraftGenerationSchema,\n  type WorkflowDraftInterpretation,\n} from '../../../lib/ai-authoring'\nimport { resolveWorkflowDraftRunner } from '../../../lib/ai-draft-runner'\nimport {\n  computeDefinitionContextLedger,\n  warmContextLedgerResolvers,\n} from '../../../lib/definition-context-schema'\nimport { evaluateWorkflowDefinition } from '../../../lib/definition-evaluation'\nimport { listWorkflowFunctions } from '../../../lib/workflow-function-registry'\nimport { listWorkflowSafeCommands } from '../../../lib/workflow-safe-commands'\nimport { workflowsTag, workflowErrorSchema } from '../../openapi'\n\nconst logger = createLogger('workflows')\n\nconst DEFINITIONS_CREATE = 'workflows.definitions.create'\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: [DEFINITIONS_CREATE],\n}\n\nconst generateDefinitionRequestSchema = z.object({\n  prompt: z.string().trim().min(1).max(WORKFLOW_DRAFT_PROMPT_MAX_LENGTH),\n})\n\nconst generateDefinitionResponseSchema = z.object({\n  ok: z.boolean(),\n  reason: z.enum(['unavailable', 'failed', 'malformedResponse', 'schemaError']).optional(),\n  message: z.string().optional(),\n  messages: z.array(z.string()).optional(),\n  summary: z.string().optional(),\n  definition: z.record(z.string(), z.unknown()).optional(),\n  problems: z.array(z.record(z.string(), z.unknown())).optional(),\n  errorCount: z.number().int().nonnegative().optional(),\n  warningCount: z.number().int().nonnegative().optional(),\n})\n\ntype DraftAgentBridgeLike = {\n  listAgentOutcomeContracts?: () => Promise<Array<{ agentId?: unknown }>>\n}\n\n/**\n * The agents an `INVOKE_AGENT` draft may target, from the OPTIONAL\n * `agent_orchestrator` peer. Absent peer, missing method, or any failure \u21D2 an\n * empty list, which makes the catalog fail-closed: `buildWorkflowDraftPrompt`\n * then forbids `INVOKE_AGENT` outright rather than letting the model author an\n * agent step with no agent to run.\n */\nasync function resolveDraftAgents(\n  container: Awaited<ReturnType<typeof createRequestContainer>>,\n): Promise<{ id: string }[]> {\n  let bridge: DraftAgentBridgeLike | undefined\n  try {\n    bridge = container.resolve<DraftAgentBridgeLike>('agentWorkflowBridge')\n  } catch {\n    return []\n  }\n  if (!bridge || typeof bridge.listAgentOutcomeContracts !== 'function') return []\n  try {\n    const snapshots = await bridge.listAgentOutcomeContracts()\n    return snapshots\n      .map((snapshot) => (typeof snapshot.agentId === 'string' ? { id: snapshot.agentId } : null))\n      .filter((entry): entry is { id: string } => entry !== null)\n  } catch {\n    return []\n  }\n}\n\n/** Compute the ledger for the generated definition, tolerating a broken graph. */\nasync function tryComputeLedger(\n  container: Awaited<ReturnType<typeof createRequestContainer>>,\n  definition: WorkflowDefinitionData,\n) {\n  try {\n    await warmContextLedgerResolvers(container)\n    return computeDefinitionContextLedger(definition)\n  } catch {\n    return null\n  }\n}\n\nexport async function POST(request: NextRequest) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth || !auth.sub) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = scope?.selectedId ?? auth.orgId ?? null\n\n    if (!tenantId) {\n      return NextResponse.json({ error: 'Missing tenant context' }, { status: 400 })\n    }\n\n    const rbacService = container.resolve('rbacService') as {\n      userHasAllFeatures: (\n        userId: string,\n        features: string[],\n        scope: { tenantId: string | null; organizationId: string | null },\n      ) => Promise<boolean>\n      loadAcl?: (\n        userId: string,\n        scope: { tenantId: string | null; organizationId: string | null },\n      ) => Promise<{ features: string[]; isSuperAdmin: boolean }>\n    }\n\n    const hasPermission = await rbacService.userHasAllFeatures(auth.sub, [DEFINITIONS_CREATE], {\n      tenantId,\n      organizationId,\n    })\n    if (!hasPermission) {\n      return NextResponse.json({ error: 'Insufficient permissions' }, { status: 403 })\n    }\n\n    const body = await request.json()\n    const validation = generateDefinitionRequestSchema.safeParse(body)\n    if (!validation.success) {\n      return NextResponse.json(\n        { error: 'Validation failed', details: validation.error.issues },\n        { status: 400 },\n      )\n    }\n\n    const runner = await resolveWorkflowDraftRunner()\n    if (!runner) {\n      return NextResponse.json({ ok: false, reason: 'unavailable' })\n    }\n\n    // The catalogs the draft is authored against: the platform's own\n    // registries, never a hand-maintained list that could drift from them.\n    const catalog = buildWorkflowDraftCatalog({\n      stepTypes: workflowStepTypeSchema.options,\n      transitionTriggers: transitionTriggerSchema.options,\n      activityTypes: listActivityTypes().map((entry) => ({\n        id: entry.id,\n        configSchema: zodToJsonSchema(entry.configSchema) ?? undefined,\n      })),\n      commands: listWorkflowSafeCommands().map((entry) => ({ id: entry.commandId })),\n      functions: listWorkflowFunctions().map((entry) => ({\n        name: entry.name,\n        ...(entry.description ? { label: entry.description } : {}),\n      })),\n      events: getDeclaredEvents()\n        .filter((event) => !event.excludeFromTriggers)\n        .map((event) => ({ id: event.id })),\n      agents: await resolveDraftAgents(container),\n    })\n\n    const acl = (await rbacService.loadAcl?.(auth.sub, { tenantId, organizationId })) ?? null\n\n    const authContext = {\n      tenantId,\n      organizationId,\n      userId: auth.sub,\n      features: acl?.features ?? [],\n      isSuperAdmin: acl?.isSuperAdmin ?? false,\n    }\n    const parseDefinition = (value: unknown) => {\n      const parsed = workflowDefinitionDataSchema.safeParse(value)\n      if (parsed.success) return { ok: true as const, definition: parsed.data as WorkflowDefinitionData }\n      return {\n        ok: false as const,\n        messages: parsed.error.issues.map(\n          (issue) => `${issue.path.join('.') || '(root)'}: ${issue.message}`,\n        ),\n      }\n    }\n\n    // Bounded validate-and-repair. The validator's messages are precise enough\n    // to act on, so a rejected draft goes BACK to the model with them rather\n    // than to the human as a dead end. Bounded because an unbounded loop\n    // against a model that cannot fix its own output is just a slower dead end\n    // that costs tokens; after the last attempt the surface reports the final\n    // errors exactly as it always did.\n    let prompt = buildWorkflowDraftPrompt({ prompt: validation.data.prompt, catalog })\n    let interpreted: WorkflowDraftInterpretation<WorkflowDefinitionData> | null = null\n    let repairAttempts = 0\n\n    for (let attempt = 0; attempt <= WORKFLOW_DRAFT_MAX_REPAIR_ATTEMPTS; attempt += 1) {\n      let raw: unknown\n      try {\n        raw = await runner({\n          agentId: WORKFLOW_DRAFT_AGENT_ID,\n          prompt,\n          schemaName: 'WorkflowDraft',\n          schema: workflowDraftGenerationSchema,\n          authContext,\n          container,\n        })\n      } catch (error) {\n        const kind = classifyWorkflowDraftFailure(error)\n        logger.warn('Workflow draft generation failed', { err: error, kind, attempt })\n        return NextResponse.json({\n          ok: false,\n          reason: kind,\n          ...(kind === 'failed'\n            ? { message: error instanceof Error ? error.message : String(error) }\n            : {}),\n        })\n      }\n\n      interpreted = interpretWorkflowDraftObject<WorkflowDefinitionData>({ raw, parseDefinition })\n      if (interpreted.ok) break\n      if (attempt === WORKFLOW_DRAFT_MAX_REPAIR_ATTEMPTS) break\n\n      repairAttempts += 1\n      logger.info('Workflow draft rejected; asking the model to repair it', {\n        reason: interpreted.reason,\n        messageCount: interpreted.messages.length,\n        attempt: repairAttempts,\n      })\n      prompt = buildWorkflowDraftRepairPrompt({\n        previousPrompt: prompt,\n        rejectedDraft: raw,\n        messages: interpreted.messages,\n      })\n    }\n\n    if (!interpreted || !interpreted.ok) {\n      return NextResponse.json({\n        ok: false,\n        reason: interpreted?.reason ?? 'malformedResponse',\n        messages: interpreted?.messages ?? [],\n        repairAttempts,\n      })\n    }\n\n    const ledger = await tryComputeLedger(container, interpreted.definition)\n    const evaluation = evaluateWorkflowDefinition(interpreted.definition, { ledger })\n\n    // Nothing above wrote a row, and nothing below does either \u2014 this route\n    // never resolves an EntityManager, so a future write would be an obvious\n    // diff rather than a quiet line inside an existing block.\n    return NextResponse.json({\n      ok: true,\n      summary: interpreted.summary,\n      definition: interpreted.definition,\n      problems: evaluation.problems,\n      errorCount: evaluation.errorCount,\n      warningCount: evaluation.warningCount,\n    })\n  } catch (error) {\n    logger.error('Error generating workflow definition draft', { err: error })\n    return NextResponse.json({ error: 'Failed to generate workflow draft' }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: workflowsTag,\n  summary: 'Generate a draft workflow definition from a prompt',\n  methods: {\n    POST: {\n      summary: 'Author a draft workflow definition from natural language',\n      description:\n        'Runs the propose-only workflows.workflow_author agent against this installation\\'s activity, command, function and event catalogs and returns a draft definition plus the Problems-panel evaluation for it. Persists nothing: the draft is returned to the Studio for a human to apply, save and enable. Refusals (\"unavailable\" when no AI provider or agent registry is present, \"failed\" when the model call errored, \"malformedResponse\"/\"schemaError\" when the output is not a workflow definition) respond 200 with a structured body.',\n      requestBody: { schema: generateDefinitionRequestSchema },\n      responses: [\n        {\n          status: 200,\n          description:\n            'The generated draft with its Problems-panel evaluation, or a structured refusal',\n          schema: generateDefinitionResponseSchema,\n        },\n        { status: 400, description: 'Invalid request body', schema: workflowErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: workflowErrorSchema },\n        { status: 403, description: 'Insufficient permissions', schema: workflowErrorSchema },\n        { status: 500, description: 'Generation failed unexpectedly', schema: workflowErrorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAiCA,SAAsB,oBAAoB;AAC1C,SAAS,SAAS;AAElB,SAAS,uBAAuB;AAChC,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,yBAAyB;AAClC,SAAS,oBAAoB;AAC7B,SAAS,0CAA0C;AAEnD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,yBAAyB;AAClC,OAAO;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,kCAAkC;AAC3C;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,kCAAkC;AAC3C,SAAS,6BAA6B;AACtC,SAAS,gCAAgC;AACzC,SAAS,cAAc,2BAA2B;AAElD,MAAM,SAAS,aAAa,WAAW;AAEvC,MAAM,qBAAqB;AAEpB,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,kBAAkB;AACtC;AAEA,MAAM,kCAAkC,EAAE,OAAO;AAAA,EAC/C,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,gCAAgC;AACvE,CAAC;AAED,MAAM,mCAAmC,EAAE,OAAO;AAAA,EAChD,IAAI,EAAE,QAAQ;AAAA,EACd,QAAQ,EAAE,KAAK,CAAC,eAAe,UAAU,qBAAqB,aAAa,CAAC,EAAE,SAAS;AAAA,EACvF,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS;AAAA,EACvC,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACvD,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,CAAC,EAAE,SAAS;AAAA,EAC9D,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS;AAAA,EACpD,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS;AACxD,CAAC;AAaD,eAAe,mBACb,WAC2B;AAC3B,MAAI;AACJ,MAAI;AACF,aAAS,UAAU,QAA8B,qBAAqB;AAAA,EACxE,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACA,MAAI,CAAC,UAAU,OAAO,OAAO,8BAA8B,WAAY,QAAO,CAAC;AAC/E,MAAI;AACF,UAAM,YAAY,MAAM,OAAO,0BAA0B;AACzD,WAAO,UACJ,IAAI,CAAC,aAAc,OAAO,SAAS,YAAY,WAAW,EAAE,IAAI,SAAS,QAAQ,IAAI,IAAK,EAC1F,OAAO,CAAC,UAAmC,UAAU,IAAI;AAAA,EAC9D,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAGA,eAAe,iBACb,WACA,YACA;AACA,MAAI;AACF,UAAM,2BAA2B,SAAS;AAC1C,WAAO,+BAA+B,UAAU;AAAA,EAClD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,KAAK,SAAsB;AAC/C,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,QAAQ,CAAC,KAAK,KAAK;AACtB,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAE1D,QAAI,CAAC,UAAU;AACb,aAAO,aAAa,KAAK,EAAE,OAAO,yBAAyB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/E;AAEA,UAAM,cAAc,UAAU,QAAQ,aAAa;AAYnD,UAAM,gBAAgB,MAAM,YAAY,mBAAmB,KAAK,KAAK,CAAC,kBAAkB,GAAG;AAAA,MACzF;AAAA,MACA;AAAA,IACF,CAAC;AACD,QAAI,CAAC,eAAe;AAClB,aAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjF;AAEA,UAAM,OAAO,MAAM,QAAQ,KAAK;AAChC,UAAM,aAAa,gCAAgC,UAAU,IAAI;AACjE,QAAI,CAAC,WAAW,SAAS;AACvB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,qBAAqB,SAAS,WAAW,MAAM,OAAO;AAAA,QAC/D,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,SAAS,MAAM,2BAA2B;AAChD,QAAI,CAAC,QAAQ;AACX,aAAO,aAAa,KAAK,EAAE,IAAI,OAAO,QAAQ,cAAc,CAAC;AAAA,IAC/D;AAIA,UAAM,UAAU,0BAA0B;AAAA,MACxC,WAAW,uBAAuB;AAAA,MAClC,oBAAoB,wBAAwB;AAAA,MAC5C,eAAe,kBAAkB,EAAE,IAAI,CAAC,WAAW;AAAA,QACjD,IAAI,MAAM;AAAA,QACV,cAAc,gBAAgB,MAAM,YAAY,KAAK;AAAA,MACvD,EAAE;AAAA,MACF,UAAU,yBAAyB,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,MAAM,UAAU,EAAE;AAAA,MAC7E,WAAW,sBAAsB,EAAE,IAAI,CAAC,WAAW;AAAA,QACjD,MAAM,MAAM;AAAA,QACZ,GAAI,MAAM,cAAc,EAAE,OAAO,MAAM,YAAY,IAAI,CAAC;AAAA,MAC1D,EAAE;AAAA,MACF,QAAQ,kBAAkB,EACvB,OAAO,CAAC,UAAU,CAAC,MAAM,mBAAmB,EAC5C,IAAI,CAAC,WAAW,EAAE,IAAI,MAAM,GAAG,EAAE;AAAA,MACpC,QAAQ,MAAM,mBAAmB,SAAS;AAAA,IAC5C,CAAC;AAED,UAAM,MAAO,MAAM,YAAY,UAAU,KAAK,KAAK,EAAE,UAAU,eAAe,CAAC,KAAM;AAErF,UAAM,cAAc;AAAA,MAClB;AAAA,MACA;AAAA,MACA,QAAQ,KAAK;AAAA,MACb,UAAU,KAAK,YAAY,CAAC;AAAA,MAC5B,cAAc,KAAK,gBAAgB;AAAA,IACrC;AACA,UAAM,kBAAkB,CAAC,UAAmB;AAC1C,YAAM,SAAS,6BAA6B,UAAU,KAAK;AAC3D,UAAI,OAAO,QAAS,QAAO,EAAE,IAAI,MAAe,YAAY,OAAO,KAA+B;AAClG,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,UAAU,OAAO,MAAM,OAAO;AAAA,UAC5B,CAAC,UAAU,GAAG,MAAM,KAAK,KAAK,GAAG,KAAK,QAAQ,KAAK,MAAM,OAAO;AAAA,QAClE;AAAA,MACF;AAAA,IACF;AAQA,QAAI,SAAS,yBAAyB,EAAE,QAAQ,WAAW,KAAK,QAAQ,QAAQ,CAAC;AACjF,QAAI,cAA0E;AAC9E,QAAI,iBAAiB;AAErB,aAAS,UAAU,GAAG,WAAW,oCAAoC,WAAW,GAAG;AACjF,UAAI;AACJ,UAAI;AACF,cAAM,MAAM,OAAO;AAAA,UACjB,SAAS;AAAA,UACT;AAAA,UACA,YAAY;AAAA,UACZ,QAAQ;AAAA,UACR;AAAA,UACA;AAAA,QACF,CAAC;AAAA,MACH,SAAS,OAAO;AACd,cAAM,OAAO,6BAA6B,KAAK;AAC/C,eAAO,KAAK,oCAAoC,EAAE,KAAK,OAAO,MAAM,QAAQ,CAAC;AAC7E,eAAO,aAAa,KAAK;AAAA,UACvB,IAAI;AAAA,UACJ,QAAQ;AAAA,UACR,GAAI,SAAS,WACT,EAAE,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,IAClE,CAAC;AAAA,QACP,CAAC;AAAA,MACH;AAEA,oBAAc,6BAAqD,EAAE,KAAK,gBAAgB,CAAC;AAC3F,UAAI,YAAY,GAAI;AACpB,UAAI,YAAY,mCAAoC;AAEpD,wBAAkB;AAClB,aAAO,KAAK,0DAA0D;AAAA,QACpE,QAAQ,YAAY;AAAA,QACpB,cAAc,YAAY,SAAS;AAAA,QACnC,SAAS;AAAA,MACX,CAAC;AACD,eAAS,+BAA+B;AAAA,QACtC,gBAAgB;AAAA,QAChB,eAAe;AAAA,QACf,UAAU,YAAY;AAAA,MACxB,CAAC;AAAA,IACH;AAEA,QAAI,CAAC,eAAe,CAAC,YAAY,IAAI;AACnC,aAAO,aAAa,KAAK;AAAA,QACvB,IAAI;AAAA,QACJ,QAAQ,aAAa,UAAU;AAAA,QAC/B,UAAU,aAAa,YAAY,CAAC;AAAA,QACpC;AAAA,MACF,CAAC;AAAA,IACH;AAEA,UAAM,SAAS,MAAM,iBAAiB,WAAW,YAAY,UAAU;AACvE,UAAM,aAAa,2BAA2B,YAAY,YAAY,EAAE,OAAO,CAAC;AAKhF,WAAO,aAAa,KAAK;AAAA,MACvB,IAAI;AAAA,MACJ,SAAS,YAAY;AAAA,MACrB,YAAY,YAAY;AAAA,MACxB,UAAU,WAAW;AAAA,MACrB,YAAY,WAAW;AAAA,MACvB,cAAc,WAAW;AAAA,IAC3B,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,MAAM,8CAA8C,EAAE,KAAK,MAAM,CAAC;AACzE,WAAO,aAAa,KAAK,EAAE,OAAO,oCAAoC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1F;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aACE;AAAA,MACF,aAAa,EAAE,QAAQ,gCAAgC;AAAA,MACvD,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aACE;AAAA,UACF,QAAQ;AAAA,QACV;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,wBAAwB,QAAQ,oBAAoB;AAAA,QAChF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,oBAAoB;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,kCAAkC,QAAQ,oBAAoB;AAAA,MAC5F;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/workflows/api/definitions/route.js

@@ -1,3 +1,4 @@
+import { randomUUID } from "node:crypto";
 import { NextResponse } from "next/server";
 import { z } from "zod";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
@@ -7,11 +8,23 @@ import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/d
 import { resolveOrganizationScopeFilter } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import { WorkflowDefinition } from "../../data/entities.js";
 import {
-  createWorkflowDefinitionInputSchema
+  createWorkflowDefinitionInputSchema,
+  createWorkflowDefinitionInputCheckedSchema
 } from "../../data/validators.js";
 import { serializeWorkflowDefinition, serializeCodeWorkflowDefinition } from "./serialize.js";
+import {
+  workflowDefinitionListResponseSchema,
+  workflowDefinitionMutationResponseSchema,
+  workflowErrorSchema
+} from "../openapi.js";
 import { invalidateTriggerCache } from "../../lib/event-trigger-service.js";
+import { normalizeDefinitionValidationIssues } from "../../lib/definition-error-body.js";
 import { getAllCodeWorkflows } from "../../lib/code-registry.js";
+import {
+  authorizeWorkflowGrantChange,
+  normalizeGrantedFeatures,
+  syncWorkflowDefinitionPrincipal
+} from "../../lib/definition-grant.js";
 import { createLogger } from "@open-mercato/shared/lib/logger";
 const logger = createLogger("workflows");
 const metadata = {
@@ -19,6 +32,7 @@ const metadata = {
   requireFeatures: ["workflows.definitions.view"]
 };
 const WORKFLOW_ID_TENANT_UNIQUE_CONSTRAINT = "workflow_definitions_workflow_id_tenant_id_unique";
+const WORKFLOW_ID_VERSION_TENANT_UNIQUE_CONSTRAINT = "workflow_definitions_workflow_id_version_tenant_id_unique";
 function isWorkflowIdUniqueConstraintError(error) {
   if (!error || typeof error !== "object") {
     return false;
@@ -28,13 +42,13 @@ function isWorkflowIdUniqueConstraintError(error) {
   const code = value.code;
   const message = typeof value.message === "string" ? value.message : "";
   const detail = typeof value.detail === "string" ? value.detail : "";
-  if (constraint === WORKFLOW_ID_TENANT_UNIQUE_CONSTRAINT) {
+  if (constraint === WORKFLOW_ID_TENANT_UNIQUE_CONSTRAINT || constraint === WORKFLOW_ID_VERSION_TENANT_UNIQUE_CONSTRAINT) {
     return true;
   }
-  if (code === "23505" && detail.includes("(workflow_id, tenant_id)")) {
+  if (code === "23505" && (detail.includes("(workflow_id, tenant_id)") || detail.includes("(workflow_id, version, tenant_id)"))) {
     return true;
   }
-  return message.includes(WORKFLOW_ID_TENANT_UNIQUE_CONSTRAINT);
+  return message.includes(WORKFLOW_ID_TENANT_UNIQUE_CONSTRAINT) || message.includes(WORKFLOW_ID_VERSION_TENANT_UNIQUE_CONSTRAINT);
 }
 async function GET(request) {
   try {
@@ -51,6 +65,10 @@ async function GET(request) {
     const enabled = searchParams.get("enabled");
     const workflowId = searchParams.get("workflowId");
     const search = searchParams.get("search");
+    const kind = searchParams.get("kind");
+    const lifecycle = searchParams.get("lifecycle");
+    const versionParam = searchParams.get("version");
+    const version = versionParam !== null && /^\d+$/.test(versionParam) ? parseInt(versionParam, 10) : null;
     const limit = parseInt(searchParams.get("limit") || "50");
     const offset = parseInt(searchParams.get("offset") || "0");
     const where = {
@@ -64,6 +82,15 @@ async function GET(request) {
     if (workflowId) {
       where.workflowId = workflowId;
     }
+    if (kind) {
+      where.kind = kind;
+    }
+    if (lifecycle) {
+      where.lifecycle = lifecycle;
+    }
+    if (version !== null) {
+      where.version = version;
+    }
     if (search) {
       where.$or = [
         { workflowId: { $ilike: `%${escapeLikePattern(search)}%` } },
@@ -81,6 +108,9 @@ async function GET(request) {
       )).map((d) => d.workflowId)
     ) : /* @__PURE__ */ new Set();
     const codeOnly = getAllCodeWorkflows().filter((cw) => !shadowed.has(cw.workflowId)).filter((cw) => {
+      if (kind && kind !== "workflow") return false;
+      if (lifecycle && lifecycle !== "published") return false;
+      if (version !== null && cw.version !== version) return false;
       if (searchLower) {
         const matches = cw.workflowId.toLowerCase().includes(searchLower) || cw.workflowName.toLowerCase().includes(searchLower);
         if (!matches) return false;
@@ -145,21 +175,22 @@ async function POST(request) {
       );
     }
     const body = await request.json();
-    const validation = createWorkflowDefinitionInputSchema.safeParse(body);
+    const validation = createWorkflowDefinitionInputCheckedSchema.safeParse(body);
     if (!validation.success) {
       return NextResponse.json(
         {
           error: "Validation failed",
-          details: validation.error.issues
+          details: normalizeDefinitionValidationIssues(validation.error)
         },
         { status: 400 }
       );
     }
     const input = validation.data;
+    const definitionData = input.definition.interpolation ? input.definition : { ...input.definition, interpolation: "strict" };
     const existing = await em.findOne(WorkflowDefinition, {
       workflowId: input.workflowId,
       tenantId
-    });
+    }, { orderBy: { version: "DESC" } });
     if (existing) {
       return NextResponse.json(
         {
@@ -168,19 +199,34 @@ async function POST(request) {
         { status: 409 }
       );
     }
+    const grantedFeatures = normalizeGrantedFeatures(input.grantedFeatures);
+    const grantFailure = await authorizeWorkflowGrantChange(rbacService, {
+      userId: auth.sub,
+      scope: { tenantId, organizationId },
+      requested: grantedFeatures,
+      current: []
+    });
+    if (grantFailure) {
+      return NextResponse.json(grantFailure.body, { status: grantFailure.status });
+    }
     const definition = em.create(WorkflowDefinition, {
+      id: randomUUID(),
       workflowId: input.workflowId,
       workflowName: input.workflowName,
       description: input.description,
       version: input.version,
-      definition: input.definition,
+      definition: definitionData,
       metadata: input.metadata,
       enabled: input.enabled ?? true,
+      grantedFeatures: grantedFeatures.length ? grantedFeatures : null,
       tenantId,
       organizationId,
+      createdBy: auth.sub,
+      updatedBy: auth.sub,
       createdAt: /* @__PURE__ */ new Date(),
       updatedAt: /* @__PURE__ */ new Date()
     });
+    await syncWorkflowDefinitionPrincipal(container, definition);
     await em.persist(definition).flush();
     if (tenantId) invalidateTriggerCache(tenantId, organizationId ?? void 0);
     return NextResponse.json(
@@ -220,6 +266,7 @@ const openApi = {
         {
           status: 200,
           description: "List of workflow definitions with pagination",
+          schema: workflowDefinitionListResponseSchema,
           example: {
             data: [
               {
@@ -357,6 +404,7 @@ const openApi = {
         {
           status: 201,
           description: "Workflow definition created successfully",
+          schema: workflowDefinitionMutationResponseSchema,
           example: {
             data: {
               id: "123e4567-e89b-12d3-a456-426614174000",
@@ -412,13 +460,14 @@ const openApi = {
         {
           status: 400,
           description: "Validation error - invalid workflow structure",
+          schema: workflowErrorSchema,
           example: {
             error: "Validation failed",
             details: [
               {
-                code: "invalid_type",
-                message: "Workflow must have at least START and END steps",
-                path: ["definition", "steps"]
+                path: ["definition", "steps"],
+                code: "custom",
+                message: "Workflow must have at least START and END steps"
               }
             ]
           }
@@ -426,6 +475,7 @@ const openApi = {
         {
           status: 409,
           description: "Conflict - workflow with same ID and version already exists",
+          schema: workflowErrorSchema,
           example: {
             error: 'Workflow definition with ID "checkout-flow" and version 1 already exists'
           }
@@ -434,111 +484,9 @@ const openApi = {
     }
   }
 };
-const _openApiDetailedDocs = {
-  get: {
-    summary: "List workflow definitions",
-    description: "Get a list of workflow definitions with optional filters",
-    tags: ["Workflows"],
-    parameters: [
-      {
-        name: "enabled",
-        in: "query",
-        description: "Filter by enabled status",
-        schema: { type: "boolean" }
-      },
-      {
-        name: "workflowId",
-        in: "query",
-        description: "Filter by workflow ID",
-        schema: { type: "string" }
-      },
-      {
-        name: "search",
-        in: "query",
-        description: "Search in workflow ID and name",
-        schema: { type: "string" }
-      },
-      {
-        name: "limit",
-        in: "query",
-        description: "Number of results to return",
-        schema: { type: "integer", default: 50 }
-      },
-      {
-        name: "offset",
-        in: "query",
-        description: "Offset for pagination",
-        schema: { type: "integer", default: 0 }
-      }
-    ],
-    responses: {
-      200: {
-        description: "List of workflow definitions",
-        content: {
-          "application/json": {
-            schema: {
-              type: "object",
-              properties: {
-                data: {
-                  type: "array",
-                  items: { $ref: "#/components/schemas/WorkflowDefinition" }
-                },
-                pagination: {
-                  type: "object",
-                  properties: {
-                    total: { type: "integer" },
-                    limit: { type: "integer" },
-                    offset: { type: "integer" },
-                    hasMore: { type: "boolean" }
-                  }
-                }
-              }
-            }
-          }
-        }
-      }
-    }
-  },
-  post: {
-    summary: "Create workflow definition",
-    description: "Create a new workflow definition",
-    tags: ["Workflows"],
-    requestBody: {
-      required: true,
-      content: {
-        "application/json": {
-          schema: { $ref: "#/components/schemas/CreateWorkflowDefinition" }
-        }
-      }
-    },
-    responses: {
-      201: {
-        description: "Workflow definition created",
-        content: {
-          "application/json": {
-            schema: {
-              type: "object",
-              properties: {
-                data: { $ref: "#/components/schemas/WorkflowDefinition" },
-                message: { type: "string" }
-              }
-            }
-          }
-        }
-      },
-      400: {
-        description: "Validation error"
-      },
-      409: {
-        description: "Workflow definition already exists"
-      }
-    }
-  }
-};
 export {
   GET,
   POST,
-  _openApiDetailedDocs,
   metadata,
   openApi
 };