@open-mercato/core 0.7.1-develop.7193.1.910a5b0a1e → 0.7.1-develop.7195.1.b5efd1d51a

package/dist/modules/auth/lib/executionPrincipal.js

@@ -0,0 +1,140 @@
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { computeEmailHash } from "./emailHash.js";
+import { Role, RoleAcl, User, UserRole } from "../data/entities.js";
+const EXECUTION_PRINCIPAL_EMAIL_DOMAIN = "agent.internal";
+const DEFAULT_NAME_PREFIX = "principal";
+function slugifyPrincipalKey(principalKey) {
+  return principalKey.toLowerCase().replace(/[^a-z0-9._-]+/g, "-");
+}
+function executionPrincipalEmail(principalKey, organizationId, namePrefix = DEFAULT_NAME_PREFIX) {
+  return `${namePrefix}+${slugifyPrincipalKey(principalKey)}+${organizationId}@${EXECUTION_PRINCIPAL_EMAIL_DOMAIN}`;
+}
+function executionPrincipalRoleName(principalKey, namePrefix = DEFAULT_NAME_PREFIX) {
+  return `${namePrefix}:${principalKey}`;
+}
+function normalizeFeatureList(value) {
+  if (!Array.isArray(value)) return [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const entry of value) {
+    if (typeof entry !== "string") continue;
+    const trimmed = entry.trim();
+    if (trimmed) seen.add(trimmed);
+  }
+  return Array.from(seen).sort((a, b) => a.localeCompare(b));
+}
+async function provisionExecutionPrincipal(container, scope, input) {
+  const { tenantId, organizationId } = scope;
+  const principalKey = input.principalKey.trim();
+  if (!principalKey) throw new Error("[internal] execution principal requires a principalKey");
+  if (!tenantId || !organizationId) {
+    throw new Error("[internal] execution principal requires a tenant and organization scope");
+  }
+  const namePrefix = input.namePrefix ?? DEFAULT_NAME_PREFIX;
+  const kind = input.kind ?? "service";
+  const features = normalizeFeatureList(input.features);
+  const roleName = executionPrincipalRoleName(principalKey, namePrefix);
+  const principalEmail = executionPrincipalEmail(principalKey, organizationId, namePrefix);
+  const em = container.resolve("em").fork();
+  return em.transactional(async (trx) => {
+    let role = await findOneWithDecryption(
+      trx,
+      Role,
+      { name: roleName, tenantId },
+      {},
+      { tenantId, organizationId: null }
+    );
+    if (!role) {
+      role = trx.create(Role, { name: roleName, tenantId, minActiveHolders: 0, createdAt: /* @__PURE__ */ new Date() });
+      trx.persist(role);
+      await trx.flush();
+    }
+    const existingAcl = await findOneWithDecryption(
+      trx,
+      RoleAcl,
+      { role, tenantId },
+      {},
+      { tenantId, organizationId: null }
+    );
+    if (!existingAcl) {
+      trx.persist(
+        trx.create(RoleAcl, {
+          role,
+          tenantId,
+          featuresJson: features,
+          isSuperAdmin: false,
+          organizationsJson: [organizationId],
+          createdAt: /* @__PURE__ */ new Date()
+        })
+      );
+      await trx.flush();
+    } else {
+      const current = normalizeFeatureList(existingAcl.featuresJson);
+      const next = input.mergeFeatures ? normalizeFeatureList([...current, ...features]) : features;
+      if (existingAcl.isSuperAdmin || current.length !== next.length || current.some((feature, index) => feature !== next[index])) {
+        existingAcl.featuresJson = next;
+        existingAcl.isSuperAdmin = false;
+        existingAcl.organizationsJson = [organizationId];
+        trx.persist(existingAcl);
+        await trx.flush();
+      }
+    }
+    const emailHash = computeEmailHash(principalEmail);
+    let user = await findOneWithDecryption(
+      trx,
+      User,
+      { emailHash, tenantId, deletedAt: null },
+      {},
+      { tenantId, organizationId }
+    );
+    if (!user) {
+      user = trx.create(User, {
+        email: principalEmail,
+        emailHash,
+        passwordHash: null,
+        isConfirmed: false,
+        kind,
+        name: input.displayName ?? principalKey,
+        tenantId,
+        organizationId,
+        createdAt: /* @__PURE__ */ new Date()
+      });
+      trx.persist(user);
+      await trx.flush();
+    } else if (user.kind === "human") {
+      throw new Error("[internal] resolved a human User for an execution principal");
+    }
+    const existingLink = await findOneWithDecryption(
+      trx,
+      UserRole,
+      { user, role },
+      {},
+      { tenantId, organizationId: null }
+    );
+    if (!existingLink) {
+      trx.persist(trx.create(UserRole, { user, role, createdAt: /* @__PURE__ */ new Date() }));
+      await trx.flush();
+    }
+    return { userId: user.id, roleId: role.id };
+  });
+}
+async function resolveExecutionPrincipalUserId(em, principalKey, scope, namePrefix = DEFAULT_NAME_PREFIX) {
+  const { tenantId, organizationId } = scope;
+  if (!principalKey || !tenantId || !organizationId) return null;
+  const emailHash = computeEmailHash(executionPrincipalEmail(principalKey, organizationId, namePrefix));
+  const user = await findOneWithDecryption(
+    em,
+    User,
+    { emailHash, tenantId, deletedAt: null },
+    {},
+    { tenantId, organizationId }
+  );
+  return user?.id ?? null;
+}
+export {
+  executionPrincipalEmail,
+  executionPrincipalRoleName,
+  normalizeFeatureList,
+  provisionExecutionPrincipal,
+  resolveExecutionPrincipalUserId
+};
+//# sourceMappingURL=executionPrincipal.js.map

package/dist/modules/auth/lib/executionPrincipal.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/auth/lib/executionPrincipal.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { AwilixContainer } from 'awilix'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { computeEmailHash } from './emailHash'\nimport { Role, RoleAcl, User, UserRole, type UserKind } from '../data/entities'\n\n/**\n * A non-interactive execution principal: a login-less `User` plus a scoped\n * `Role` whose ACL carries EXACTLY the features that principal may use.\n *\n * This lives in `auth` because `User` / `Role` / `RoleAcl` / `UserRole` are this\n * module's entities. Any module that needs a machine identity to write under \u2014\n * an agentic task, a workflow definition declaring a grant, a future scheduled\n * job \u2014 provisions one here rather than reimplementing the four find-or-create\n * steps and the ACL replacement.\n *\n * The `enterprise` agent_orchestrator module owns an older copy of this logic\n * (`lib/identity/agentPrincipalService.ts`), which core MUST NOT import (an\n * optional peer). The naming knobs below exist so that copy can be migrated onto\n * this helper WITHOUT changing any provisioned row's identity: calling with\n * `{ namePrefix: 'agent', kind: 'agent', mergeFeatures: true }` reproduces its\n * email and role name byte-for-byte.\n */\nexport type ExecutionPrincipalScope = { tenantId: string; organizationId: string }\n\nexport type ResolvedExecutionPrincipal = {\n  userId: string\n  roleId: string\n}\n\nexport type ProvisionExecutionPrincipalInput = {\n  /**\n   * Namespaced, stable identity key \u2014 e.g. `workflow:<definitionId>`. It is the\n   * idempotency key: the deterministic email and role name are both derived from\n   * it, so re-provisioning resolves the same rows instead of creating new ones.\n   */\n  principalKey: string\n  displayName?: string\n  /** The principal's complete feature set. Replaces the role ACL unless `mergeFeatures`. */\n  features: string[]\n  /** Defaults to `service` \u2014 a machine principal that is not an AI agent. */\n  kind?: UserKind\n  /** Local-part / role-name prefix. Defaults to `principal`. */\n  namePrefix?: string\n  /**\n   * Merge into the existing ACL instead of replacing it. Default `false`:\n   * merging cannot NARROW a previously over-granted principal, which is the\n   * whole point of re-scoping on every save.\n   */\n  mergeFeatures?: boolean\n}\n\n/**\n * Non-routable internal domain. An execution principal never receives mail and\n * never logs in interactively, so this address is an identity key, not a mailbox.\n */\nconst EXECUTION_PRINCIPAL_EMAIL_DOMAIN = 'agent.internal'\nconst DEFAULT_NAME_PREFIX = 'principal'\n\nfunction slugifyPrincipalKey(principalKey: string): string {\n  return principalKey.toLowerCase().replace(/[^a-z0-9._-]+/g, '-')\n}\n\nexport function executionPrincipalEmail(\n  principalKey: string,\n  organizationId: string,\n  namePrefix: string = DEFAULT_NAME_PREFIX,\n): string {\n  return `${namePrefix}+${slugifyPrincipalKey(principalKey)}+${organizationId}@${EXECUTION_PRINCIPAL_EMAIL_DOMAIN}`\n}\n\nexport function executionPrincipalRoleName(\n  principalKey: string,\n  namePrefix: string = DEFAULT_NAME_PREFIX,\n): string {\n  return `${namePrefix}:${principalKey}`\n}\n\nexport function normalizeFeatureList(value: unknown): string[] {\n  if (!Array.isArray(value)) return []\n  const seen = new Set<string>()\n  for (const entry of value) {\n    if (typeof entry !== 'string') continue\n    const trimmed = entry.trim()\n    if (trimmed) seen.add(trimmed)\n  }\n  return Array.from(seen).sort((a, b) => a.localeCompare(b))\n}\n\n/**\n * Provisions \u2014 idempotently \u2014 the execution principal for `principalKey` and\n * pins its role ACL to exactly `features`.\n *\n * Non-interactive by construction: `passwordHash = null` + `isConfirmed = false`\n * leaves the password/SSO flow nothing to authenticate against. `isSuperAdmin`\n * is always false and the ACL's organization visibility is pinned to the\n * provisioning organization, so the principal can never out-scope its owner.\n */\nexport async function provisionExecutionPrincipal(\n  container: AwilixContainer,\n  scope: ExecutionPrincipalScope,\n  input: ProvisionExecutionPrincipalInput,\n): Promise<ResolvedExecutionPrincipal> {\n  const { tenantId, organizationId } = scope\n  const principalKey = input.principalKey.trim()\n  if (!principalKey) throw new Error('[internal] execution principal requires a principalKey')\n  if (!tenantId || !organizationId) {\n    throw new Error('[internal] execution principal requires a tenant and organization scope')\n  }\n\n  const namePrefix = input.namePrefix ?? DEFAULT_NAME_PREFIX\n  const kind: UserKind = input.kind ?? 'service'\n  const features = normalizeFeatureList(input.features)\n  const roleName = executionPrincipalRoleName(principalKey, namePrefix)\n  const principalEmail = executionPrincipalEmail(principalKey, organizationId, namePrefix)\n\n  const em = (container.resolve('em') as EntityManager).fork()\n\n  return em.transactional(async (trx) => {\n    let role = await findOneWithDecryption(\n      trx,\n      Role,\n      { name: roleName, tenantId },\n      {},\n      { tenantId, organizationId: null },\n    )\n    if (!role) {\n      role = trx.create(Role, { name: roleName, tenantId, minActiveHolders: 0, createdAt: new Date() })\n      trx.persist(role)\n      await trx.flush()\n    }\n\n    const existingAcl = await findOneWithDecryption(\n      trx,\n      RoleAcl,\n      { role, tenantId },\n      {},\n      { tenantId, organizationId: null },\n    )\n    if (!existingAcl) {\n      trx.persist(\n        trx.create(RoleAcl, {\n          role,\n          tenantId,\n          featuresJson: features,\n          isSuperAdmin: false,\n          organizationsJson: [organizationId],\n          createdAt: new Date(),\n        }),\n      )\n      await trx.flush()\n    } else {\n      const current = normalizeFeatureList(existingAcl.featuresJson)\n      const next = input.mergeFeatures ? normalizeFeatureList([...current, ...features]) : features\n      if (\n        existingAcl.isSuperAdmin ||\n        current.length !== next.length ||\n        current.some((feature, index) => feature !== next[index])\n      ) {\n        existingAcl.featuresJson = next\n        existingAcl.isSuperAdmin = false\n        existingAcl.organizationsJson = [organizationId]\n        trx.persist(existingAcl)\n        await trx.flush()\n      }\n    }\n\n    const emailHash = computeEmailHash(principalEmail)\n    let user = await findOneWithDecryption(\n      trx,\n      User,\n      { emailHash, tenantId, deletedAt: null },\n      {},\n      { tenantId, organizationId },\n    )\n    if (!user) {\n      user = trx.create(User, {\n        email: principalEmail,\n        emailHash,\n        passwordHash: null,\n        isConfirmed: false,\n        kind,\n        name: input.displayName ?? principalKey,\n        tenantId,\n        organizationId,\n        createdAt: new Date(),\n      })\n      trx.persist(user)\n      await trx.flush()\n    } else if (user.kind === 'human') {\n      // Defensive: a row resolved by the deterministic principal email must never\n      // be a human account. Never silently repurpose one.\n      throw new Error('[internal] resolved a human User for an execution principal')\n    }\n\n    const existingLink = await findOneWithDecryption(\n      trx,\n      UserRole,\n      { user, role },\n      {},\n      { tenantId, organizationId: null },\n    )\n    if (!existingLink) {\n      trx.persist(trx.create(UserRole, { user, role, createdAt: new Date() }))\n      await trx.flush()\n    }\n\n    return { userId: user.id, roleId: role.id }\n  })\n}\n\n/**\n * Resolves the `User` id of an already-provisioned execution principal without\n * writing anything. Returns null when it has not been provisioned (or was\n * soft-deleted) \u2014 callers MUST fail closed rather than fall back to a broader\n * identity.\n */\nexport async function resolveExecutionPrincipalUserId(\n  em: EntityManager,\n  principalKey: string,\n  scope: ExecutionPrincipalScope,\n  namePrefix: string = DEFAULT_NAME_PREFIX,\n): Promise<string | null> {\n  const { tenantId, organizationId } = scope\n  if (!principalKey || !tenantId || !organizationId) return null\n  const emailHash = computeEmailHash(executionPrincipalEmail(principalKey, organizationId, namePrefix))\n  const user = await findOneWithDecryption(\n    em,\n    User,\n    { emailHash, tenantId, deletedAt: null },\n    {},\n    { tenantId, organizationId },\n  )\n  return user?.id ?? null\n}\n"],
+  "mappings": "AAEA,SAAS,6BAA6B;AACtC,SAAS,wBAAwB;AACjC,SAAS,MAAM,SAAS,MAAM,gBAA+B;AAoD7D,MAAM,mCAAmC;AACzC,MAAM,sBAAsB;AAE5B,SAAS,oBAAoB,cAA8B;AACzD,SAAO,aAAa,YAAY,EAAE,QAAQ,kBAAkB,GAAG;AACjE;AAEO,SAAS,wBACd,cACA,gBACA,aAAqB,qBACb;AACR,SAAO,GAAG,UAAU,IAAI,oBAAoB,YAAY,CAAC,IAAI,cAAc,IAAI,gCAAgC;AACjH;AAEO,SAAS,2BACd,cACA,aAAqB,qBACb;AACR,SAAO,GAAG,UAAU,IAAI,YAAY;AACtC;AAEO,SAAS,qBAAqB,OAA0B;AAC7D,MAAI,CAAC,MAAM,QAAQ,KAAK,EAAG,QAAO,CAAC;AACnC,QAAM,OAAO,oBAAI,IAAY;AAC7B,aAAW,SAAS,OAAO;AACzB,QAAI,OAAO,UAAU,SAAU;AAC/B,UAAM,UAAU,MAAM,KAAK;AAC3B,QAAI,QAAS,MAAK,IAAI,OAAO;AAAA,EAC/B;AACA,SAAO,MAAM,KAAK,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;AAC3D;AAWA,eAAsB,4BACpB,WACA,OACA,OACqC;AACrC,QAAM,EAAE,UAAU,eAAe,IAAI;AACrC,QAAM,eAAe,MAAM,aAAa,KAAK;AAC7C,MAAI,CAAC,aAAc,OAAM,IAAI,MAAM,wDAAwD;AAC3F,MAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,UAAM,IAAI,MAAM,yEAAyE;AAAA,EAC3F;AAEA,QAAM,aAAa,MAAM,cAAc;AACvC,QAAM,OAAiB,MAAM,QAAQ;AACrC,QAAM,WAAW,qBAAqB,MAAM,QAAQ;AACpD,QAAM,WAAW,2BAA2B,cAAc,UAAU;AACpE,QAAM,iBAAiB,wBAAwB,cAAc,gBAAgB,UAAU;AAEvF,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAE3D,SAAO,GAAG,cAAc,OAAO,QAAQ;AACrC,QAAI,OAAO,MAAM;AAAA,MACf;AAAA,MACA;AAAA,MACA,EAAE,MAAM,UAAU,SAAS;AAAA,MAC3B,CAAC;AAAA,MACD,EAAE,UAAU,gBAAgB,KAAK;AAAA,IACnC;AACA,QAAI,CAAC,MAAM;AACT,aAAO,IAAI,OAAO,MAAM,EAAE,MAAM,UAAU,UAAU,kBAAkB,GAAG,WAAW,oBAAI,KAAK,EAAE,CAAC;AAChG,UAAI,QAAQ,IAAI;AAChB,YAAM,IAAI,MAAM;AAAA,IAClB;AAEA,UAAM,cAAc,MAAM;AAAA,MACxB;AAAA,MACA;AAAA,MACA,EAAE,MAAM,SAAS;AAAA,MACjB,CAAC;AAAA,MACD,EAAE,UAAU,gBAAgB,KAAK;AAAA,IACnC;AACA,QAAI,CAAC,aAAa;AAChB,UAAI;AAAA,QACF,IAAI,OAAO,SAAS;AAAA,UAClB;AAAA,UACA;AAAA,UACA,cAAc;AAAA,UACd,cAAc;AAAA,UACd,mBAAmB,CAAC,cAAc;AAAA,UAClC,WAAW,oBAAI,KAAK;AAAA,QACtB,CAAC;AAAA,MACH;AACA,YAAM,IAAI,MAAM;AAAA,IAClB,OAAO;AACL,YAAM,UAAU,qBAAqB,YAAY,YAAY;AAC7D,YAAM,OAAO,MAAM,gBAAgB,qBAAqB,CAAC,GAAG,SAAS,GAAG,QAAQ,CAAC,IAAI;AACrF,UACE,YAAY,gBACZ,QAAQ,WAAW,KAAK,UACxB,QAAQ,KAAK,CAAC,SAAS,UAAU,YAAY,KAAK,KAAK,CAAC,GACxD;AACA,oBAAY,eAAe;AAC3B,oBAAY,eAAe;AAC3B,oBAAY,oBAAoB,CAAC,cAAc;AAC/C,YAAI,QAAQ,WAAW;AACvB,cAAM,IAAI,MAAM;AAAA,MAClB;AAAA,IACF;AAEA,UAAM,YAAY,iBAAiB,cAAc;AACjD,QAAI,OAAO,MAAM;AAAA,MACf;AAAA,MACA;AAAA,MACA,EAAE,WAAW,UAAU,WAAW,KAAK;AAAA,MACvC,CAAC;AAAA,MACD,EAAE,UAAU,eAAe;AAAA,IAC7B;AACA,QAAI,CAAC,MAAM;AACT,aAAO,IAAI,OAAO,MAAM;AAAA,QACtB,OAAO;AAAA,QACP;AAAA,QACA,cAAc;AAAA,QACd,aAAa;AAAA,QACb;AAAA,QACA,MAAM,MAAM,eAAe;AAAA,QAC3B;AAAA,QACA;AAAA,QACA,WAAW,oBAAI,KAAK;AAAA,MACtB,CAAC;AACD,UAAI,QAAQ,IAAI;AAChB,YAAM,IAAI,MAAM;AAAA,IAClB,WAAW,KAAK,SAAS,SAAS;AAGhC,YAAM,IAAI,MAAM,6DAA6D;AAAA,IAC/E;AAEA,UAAM,eAAe,MAAM;AAAA,MACzB;AAAA,MACA;AAAA,MACA,EAAE,MAAM,KAAK;AAAA,MACb,CAAC;AAAA,MACD,EAAE,UAAU,gBAAgB,KAAK;AAAA,IACnC;AACA,QAAI,CAAC,cAAc;AACjB,UAAI,QAAQ,IAAI,OAAO,UAAU,EAAE,MAAM,MAAM,WAAW,oBAAI,KAAK,EAAE,CAAC,CAAC;AACvE,YAAM,IAAI,MAAM;AAAA,IAClB;AAEA,WAAO,EAAE,QAAQ,KAAK,IAAI,QAAQ,KAAK,GAAG;AAAA,EAC5C,CAAC;AACH;AAQA,eAAsB,gCACpB,IACA,cACA,OACA,aAAqB,qBACG;AACxB,QAAM,EAAE,UAAU,eAAe,IAAI;AACrC,MAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,eAAgB,QAAO;AAC1D,QAAM,YAAY,iBAAiB,wBAAwB,cAAc,gBAAgB,UAAU,CAAC;AACpG,QAAM,OAAO,MAAM;AAAA,IACjB;AAAA,IACA;AAAA,IACA,EAAE,WAAW,UAAU,WAAW,KAAK;AAAA,IACvC,CAAC;AAAA,IACD,EAAE,UAAU,eAAe;AAAA,EAC7B;AACA,SAAO,MAAM,MAAM;AACrB;",
+  "names": []
+}

package/dist/modules/auth/migrations/Migration20260625050000.js

@@ -0,0 +1,13 @@
+import { Migration } from "@mikro-orm/migrations";
+class Migration20260625050000 extends Migration {
+  up() {
+    this.addSql(`alter table "users" add column if not exists "kind" varchar(20) not null default 'human';`);
+  }
+  down() {
+    this.addSql(`alter table "users" drop column if exists "kind";`);
+  }
+}
+export {
+  Migration20260625050000
+};
+//# sourceMappingURL=Migration20260625050000.js.map

package/dist/modules/auth/migrations/Migration20260625050000.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/auth/migrations/Migration20260625050000.ts"],
+  "sourcesContent": ["import { Migration } from '@mikro-orm/migrations';\n\n// Add `kind` to `users` so an AI agent can be modeled as a first-class,\n// non-interactive principal (`kind='agent'`) attributed identically to a human\n// on every write (agent identity & on-behalf-of spec, Wave 4 Phase 1). The\n// column is additive and backward-compatible per BACKWARD_COMPATIBILITY.md\n// (DB schema is ADDITIVE-ONLY): NOT NULL with a server-side DEFAULT 'human', so\n// every existing row backfills to 'human' immediately and no existing reader of\n// `auth.User` breaks. The NOT NULL is safe online because the default fills the\n// value for legacy rows during the ALTER.\nexport class Migration20260625050000 extends Migration {\n\n  override up(): void | Promise<void> {\n    this.addSql(`alter table \"users\" add column if not exists \"kind\" varchar(20) not null default 'human';`);\n  }\n\n  override down(): void | Promise<void> {\n    this.addSql(`alter table \"users\" drop column if exists \"kind\";`);\n  }\n\n}\n"],
+  "mappings": "AAAA,SAAS,iBAAiB;AAUnB,MAAM,gCAAgC,UAAU;AAAA,EAE5C,KAA2B;AAClC,SAAK,OAAO,2FAA2F;AAAA,EACzG;AAAA,EAES,OAA6B;AACpC,SAAK,OAAO,mDAAmD;AAAA,EACjE;AAEF;",
+  "names": []
+}

package/dist/modules/business_rules/components/InlineRuleEditor.js

@@ -0,0 +1,154 @@
+"use client";
+import { jsx, jsxs } from "react/jsx-runtime";
+import * as React from "react";
+import { Dialog, DialogContent, DialogHeader, DialogTitle, DialogDescription } from "@open-mercato/ui/primitives/dialog";
+import { Button } from "@open-mercato/ui/primitives/button";
+import { Spinner } from "@open-mercato/ui/primitives/spinner";
+import { CrudForm } from "@open-mercato/ui/backend/CrudForm";
+import { apiFetch, withScopedApiHeaders } from "@open-mercato/ui/backend/utils/api";
+import { buildOptimisticLockHeader } from "@open-mercato/ui/backend/utils/optimisticLock";
+import { readJsonSafe } from "@open-mercato/ui/backend/utils/serverErrors";
+import { CrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { useT } from "@open-mercato/shared/lib/i18n/context";
+import { ConditionBuilder } from "./ConditionBuilder.js";
+import { ActionBuilder } from "./ActionBuilder.js";
+import {
+  businessRuleFormSchema,
+  createFieldDefinitions,
+  createFormGroups,
+  defaultFormValues
+} from "./formConfig.js";
+import { parseRuleToFormValues } from "./utils/formHelpers.js";
+function toRulePayload(values) {
+  return {
+    ruleId: values.ruleId,
+    ruleName: values.ruleName,
+    description: values.description || null,
+    ruleType: values.ruleType,
+    ruleCategory: values.ruleCategory || null,
+    entityType: values.entityType,
+    eventType: values.eventType || null,
+    conditionExpression: values.conditionExpression,
+    successActions: values.successActions || null,
+    failureActions: values.failureActions || null,
+    enabled: values.enabled,
+    priority: values.priority,
+    version: values.version,
+    effectiveFrom: values.effectiveFrom || null,
+    effectiveTo: values.effectiveTo || null
+  };
+}
+function InlineRuleEditor({
+  open,
+  onOpenChange,
+  recordId,
+  defaultEntityType,
+  defaultRuleType,
+  onSaved,
+  usagePanel
+}) {
+  const t = useT();
+  const isEdit = Boolean(recordId);
+  const [rule, setRule] = React.useState(null);
+  const [isLoading, setIsLoading] = React.useState(false);
+  const [loadError, setLoadError] = React.useState(null);
+  React.useEffect(() => {
+    if (!open) return;
+    if (!recordId) {
+      setRule(null);
+      setLoadError(null);
+      setIsLoading(false);
+      return;
+    }
+    let cancelled = false;
+    setIsLoading(true);
+    setLoadError(null);
+    const load = async () => {
+      try {
+        const response = await apiFetch(`/api/business_rules/rules/${recordId}`);
+        if (!response.ok) {
+          if (!cancelled) setLoadError(t("business_rules.errors.fetchFailed"));
+          return;
+        }
+        const body = await readJsonSafe(response) ?? null;
+        if (!cancelled) setRule(body);
+      } catch {
+        if (!cancelled) setLoadError(t("business_rules.errors.fetchFailed"));
+      } finally {
+        if (!cancelled) setIsLoading(false);
+      }
+    };
+    void load();
+    return () => {
+      cancelled = true;
+    };
+  }, [open, recordId, t]);
+  const initialValues = React.useMemo(() => {
+    if (isEdit) {
+      return rule ? parseRuleToFormValues(rule) : {};
+    }
+    return {
+      ...defaultFormValues,
+      ...defaultEntityType ? { entityType: defaultEntityType } : {},
+      ...defaultRuleType ? { ruleType: defaultRuleType } : {}
+    };
+  }, [defaultEntityType, defaultRuleType, isEdit, rule]);
+  const fields = React.useMemo(() => createFieldDefinitions(t), [t]);
+  const groups = React.useMemo(() => createFormGroups(t, ConditionBuilder, ActionBuilder), [t]);
+  const lockedUpdatedAt = rule?.updatedAt ?? rule?.updated_at ?? null;
+  const handleSubmit = React.useCallback(async (values) => {
+    const payload = toRulePayload(values);
+    const request = () => isEdit ? apiFetch("/api/business_rules/rules", {
+      method: "PUT",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ ...payload, id: recordId })
+    }) : apiFetch("/api/business_rules/rules", {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(payload)
+    });
+    const lockHeaders = isEdit ? buildOptimisticLockHeader(lockedUpdatedAt) : {};
+    const response = Object.keys(lockHeaders).length ? await withScopedApiHeaders(lockHeaders, request) : await request();
+    if (!response.ok) {
+      const body2 = await readJsonSafe(response) ?? {};
+      const message = typeof body2.error === "string" && body2.error || typeof body2.message === "string" && body2.message || t(isEdit ? "business_rules.errors.updateFailed" : "business_rules.errors.createFailed");
+      throw new CrudHttpError(response.status, { ...body2, error: message });
+    }
+    const body = await readJsonSafe(response) ?? {};
+    const savedId = (isEdit ? recordId : body.id) ?? "";
+    onSaved?.({ id: savedId, ruleId: values.ruleId, ruleName: values.ruleName });
+    onOpenChange(false);
+  }, [isEdit, lockedUpdatedAt, onOpenChange, onSaved, recordId, t]);
+  if (!open) return null;
+  return /* @__PURE__ */ jsx(Dialog, { open, onOpenChange, children: /* @__PURE__ */ jsxs(DialogContent, { className: "sm:max-w-4xl max-h-[90vh] overflow-hidden flex flex-col !p-0 [&_.grid]:!grid-cols-1", children: [
+    /* @__PURE__ */ jsxs(DialogHeader, { className: "flex-shrink-0 p-6 pb-4 border-b border-border/70", children: [
+      /* @__PURE__ */ jsx(DialogTitle, { children: t(isEdit ? "business_rules.rules.inline.editTitle" : "business_rules.rules.inline.createTitle") }),
+      /* @__PURE__ */ jsx(DialogDescription, { children: t(isEdit ? "business_rules.rules.inline.editDescription" : "business_rules.rules.inline.createDescription") })
+    ] }),
+    /* @__PURE__ */ jsxs("div", { className: "flex flex-1 min-h-0 gap-4 overflow-hidden px-6 pb-6", children: [
+      /* @__PURE__ */ jsx("div", { className: "min-h-0 flex-1 overflow-y-auto", children: isLoading ? /* @__PURE__ */ jsxs("div", { className: "flex flex-col items-center justify-center gap-2 py-12 text-muted-foreground", children: [
+        /* @__PURE__ */ jsx(Spinner, { className: "h-6 w-6" }),
+        /* @__PURE__ */ jsx("span", { className: "text-sm", children: t("business_rules.rules.edit.loading") })
+      ] }) : loadError ? /* @__PURE__ */ jsx("p", { className: "py-12 text-center text-sm text-status-error-text", children: loadError }) : /* @__PURE__ */ jsx(
+        CrudForm,
+        {
+          schema: businessRuleFormSchema,
+          fields,
+          groups,
+          initialValues,
+          optimisticLockUpdatedAt: lockedUpdatedAt,
+          onSubmit: handleSubmit,
+          embedded: true,
+          submitLabel: t(isEdit ? "business_rules.rules.form.update" : "business_rules.rules.form.create"),
+          extraActions: /* @__PURE__ */ jsx(Button, { type: "button", variant: "outline", onClick: () => onOpenChange(false), children: t("business_rules.rules.form.cancel") })
+        },
+        recordId ?? "create"
+      ) }),
+      usagePanel ? /* @__PURE__ */ jsx("div", { className: "hidden w-64 shrink-0 self-start overflow-y-auto lg:block", children: usagePanel }) : null
+    ] })
+  ] }) });
+}
+export {
+  InlineRuleEditor
+};
+//# sourceMappingURL=InlineRuleEditor.js.map

package/dist/modules/business_rules/components/InlineRuleEditor.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/business_rules/components/InlineRuleEditor.tsx"],
+  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport { Dialog, DialogContent, DialogHeader, DialogTitle, DialogDescription } from '@open-mercato/ui/primitives/dialog'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { Spinner } from '@open-mercato/ui/primitives/spinner'\nimport { CrudForm } from '@open-mercato/ui/backend/CrudForm'\nimport { apiFetch, withScopedApiHeaders } from '@open-mercato/ui/backend/utils/api'\nimport { buildOptimisticLockHeader } from '@open-mercato/ui/backend/utils/optimisticLock'\nimport { readJsonSafe } from '@open-mercato/ui/backend/utils/serverErrors'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { ConditionBuilder } from './ConditionBuilder'\nimport { ActionBuilder } from './ActionBuilder'\nimport {\n  businessRuleFormSchema,\n  createFieldDefinitions,\n  createFormGroups,\n  defaultFormValues,\n  type BusinessRuleFormValues,\n} from './formConfig'\nimport { parseRuleToFormValues } from './utils/formHelpers'\n\n/**\n * Identity of a rule the editor just persisted, handed back to the embedding\n * module so it can select/refresh without re-reading the API itself.\n */\nexport type InlineRuleEditorSavedRule = {\n  id: string\n  ruleId: string\n  ruleName: string\n}\n\nexport type InlineRuleEditorProps = {\n  open: boolean\n  onOpenChange: (open: boolean) => void\n  /** Existing rule UUID to edit. Omit (or pass null) to create a new rule. */\n  recordId?: string | null\n  /** Pre-fills `entityType` on create so a host can scope newly authored rules. */\n  defaultEntityType?: string\n  /** Pre-fills `ruleType` on create. */\n  defaultRuleType?: BusinessRuleFormValues['ruleType']\n  onSaved?: (rule: InlineRuleEditorSavedRule) => void\n  /**\n   * Dependency-visibility slot (\"used by: N workflows, M promotions\"). Rendered\n   * beside the form. business_rules owns the editor and the slot; each consuming\n   * module owns its own usage lookup and passes the rendered panel in \u2014 that is\n   * what keeps this component free of any consumer-module import.\n   */\n  usagePanel?: React.ReactNode\n}\n\ntype RuleRecord = Record<string, unknown> & { updatedAt?: string | null; updated_at?: string | null }\n\nfunction toRulePayload(values: BusinessRuleFormValues): Record<string, unknown> {\n  return {\n    ruleId: values.ruleId,\n    ruleName: values.ruleName,\n    description: values.description || null,\n    ruleType: values.ruleType,\n    ruleCategory: values.ruleCategory || null,\n    entityType: values.entityType,\n    eventType: values.eventType || null,\n    conditionExpression: values.conditionExpression,\n    successActions: values.successActions || null,\n    failureActions: values.failureActions || null,\n    enabled: values.enabled,\n    priority: values.priority,\n    version: values.version,\n    effectiveFrom: values.effectiveFrom || null,\n    effectiveTo: values.effectiveTo || null,\n  }\n}\n\n/**\n * InlineRuleEditor \u2014 create or edit a single business rule inside a dialog,\n * owned by `business_rules` and embeddable by any module (spec\n * 2026-07-26-workflows-ux-redesign.md team decision #5, issue #4236).\n *\n * It is the same CrudForm the standalone rule pages render, so validation,\n * condition/action builders and optimistic locking behave identically; the\n * difference is that it never navigates \u2014 it reports the saved rule through\n * `onSaved` and lets the host refresh its own pickers.\n */\nexport function InlineRuleEditor({\n  open,\n  onOpenChange,\n  recordId,\n  defaultEntityType,\n  defaultRuleType,\n  onSaved,\n  usagePanel,\n}: InlineRuleEditorProps) {\n  const t = useT()\n  const isEdit = Boolean(recordId)\n  const [rule, setRule] = React.useState<RuleRecord | null>(null)\n  const [isLoading, setIsLoading] = React.useState(false)\n  const [loadError, setLoadError] = React.useState<string | null>(null)\n\n  React.useEffect(() => {\n    if (!open) return\n    if (!recordId) {\n      setRule(null)\n      setLoadError(null)\n      setIsLoading(false)\n      return\n    }\n    let cancelled = false\n    setIsLoading(true)\n    setLoadError(null)\n    const load = async () => {\n      try {\n        const response = await apiFetch(`/api/business_rules/rules/${recordId}`)\n        if (!response.ok) {\n          if (!cancelled) setLoadError(t('business_rules.errors.fetchFailed'))\n          return\n        }\n        const body = (await readJsonSafe<RuleRecord>(response)) ?? null\n        if (!cancelled) setRule(body)\n      } catch {\n        if (!cancelled) setLoadError(t('business_rules.errors.fetchFailed'))\n      } finally {\n        if (!cancelled) setIsLoading(false)\n      }\n    }\n    void load()\n    return () => {\n      cancelled = true\n    }\n  }, [open, recordId, t])\n\n  const initialValues = React.useMemo<Partial<BusinessRuleFormValues>>(() => {\n    if (isEdit) {\n      return rule ? parseRuleToFormValues(rule) : {}\n    }\n    return {\n      ...defaultFormValues,\n      ...(defaultEntityType ? { entityType: defaultEntityType } : {}),\n      ...(defaultRuleType ? { ruleType: defaultRuleType } : {}),\n    }\n  }, [defaultEntityType, defaultRuleType, isEdit, rule])\n\n  const fields = React.useMemo(() => createFieldDefinitions(t), [t])\n  const groups = React.useMemo(() => createFormGroups(t, ConditionBuilder, ActionBuilder), [t])\n\n  const lockedUpdatedAt = (rule?.updatedAt ?? rule?.updated_at ?? null) as string | null\n\n  const handleSubmit = React.useCallback(async (values: BusinessRuleFormValues) => {\n    const payload = toRulePayload(values)\n    const request = () => (isEdit\n      ? apiFetch('/api/business_rules/rules', {\n          method: 'PUT',\n          headers: { 'Content-Type': 'application/json' },\n          body: JSON.stringify({ ...payload, id: recordId }),\n        })\n      : apiFetch('/api/business_rules/rules', {\n          method: 'POST',\n          headers: { 'Content-Type': 'application/json' },\n          body: JSON.stringify(payload),\n        }))\n\n    const lockHeaders = isEdit ? buildOptimisticLockHeader(lockedUpdatedAt) : {}\n    const response = Object.keys(lockHeaders).length\n      ? await withScopedApiHeaders(lockHeaders, request)\n      : await request()\n\n    if (!response.ok) {\n      const body = (await readJsonSafe<Record<string, unknown>>(response)) ?? {}\n      const message =\n        (typeof body.error === 'string' && body.error) ||\n        (typeof body.message === 'string' && body.message) ||\n        t(isEdit ? 'business_rules.errors.updateFailed' : 'business_rules.errors.createFailed')\n      throw new CrudHttpError(response.status, { ...body, error: message })\n    }\n\n    const body = (await readJsonSafe<{ id?: string }>(response)) ?? {}\n    const savedId = (isEdit ? recordId : body.id) ?? ''\n    onSaved?.({ id: savedId, ruleId: values.ruleId, ruleName: values.ruleName })\n    onOpenChange(false)\n  }, [isEdit, lockedUpdatedAt, onOpenChange, onSaved, recordId, t])\n\n  if (!open) return null\n\n  return (\n    <Dialog open={open} onOpenChange={onOpenChange}>\n      <DialogContent className=\"sm:max-w-4xl max-h-[90vh] overflow-hidden flex flex-col !p-0 [&_.grid]:!grid-cols-1\">\n        <DialogHeader className=\"flex-shrink-0 p-6 pb-4 border-b border-border/70\">\n          <DialogTitle>\n            {t(isEdit ? 'business_rules.rules.inline.editTitle' : 'business_rules.rules.inline.createTitle')}\n          </DialogTitle>\n          <DialogDescription>\n            {t(isEdit ? 'business_rules.rules.inline.editDescription' : 'business_rules.rules.inline.createDescription')}\n          </DialogDescription>\n        </DialogHeader>\n\n        <div className=\"flex flex-1 min-h-0 gap-4 overflow-hidden px-6 pb-6\">\n          <div className=\"min-h-0 flex-1 overflow-y-auto\">\n            {isLoading ? (\n              <div className=\"flex flex-col items-center justify-center gap-2 py-12 text-muted-foreground\">\n                <Spinner className=\"h-6 w-6\" />\n                <span className=\"text-sm\">{t('business_rules.rules.edit.loading')}</span>\n              </div>\n            ) : loadError ? (\n              <p className=\"py-12 text-center text-sm text-status-error-text\">{loadError}</p>\n            ) : (\n              <CrudForm\n                key={recordId ?? 'create'}\n                schema={businessRuleFormSchema}\n                fields={fields}\n                groups={groups}\n                initialValues={initialValues}\n                optimisticLockUpdatedAt={lockedUpdatedAt}\n                onSubmit={handleSubmit}\n                embedded\n                submitLabel={t(isEdit ? 'business_rules.rules.form.update' : 'business_rules.rules.form.create')}\n                extraActions={\n                  <Button type=\"button\" variant=\"outline\" onClick={() => onOpenChange(false)}>\n                    {t('business_rules.rules.form.cancel')}\n                  </Button>\n                }\n              />\n            )}\n          </div>\n          {usagePanel ? (\n            <div className=\"hidden w-64 shrink-0 self-start overflow-y-auto lg:block\">{usagePanel}</div>\n          ) : null}\n        </div>\n      </DialogContent>\n    </Dialog>\n  )\n}\n"],
+  "mappings": ";AA0LQ,SACE,KADF;AAxLR,YAAY,WAAW;AACvB,SAAS,QAAQ,eAAe,cAAc,aAAa,yBAAyB;AACpF,SAAS,cAAc;AACvB,SAAS,eAAe;AACxB,SAAS,gBAAgB;AACzB,SAAS,UAAU,4BAA4B;AAC/C,SAAS,iCAAiC;AAC1C,SAAS,oBAAoB;AAC7B,SAAS,qBAAqB;AAC9B,SAAS,YAAY;AACrB,SAAS,wBAAwB;AACjC,SAAS,qBAAqB;AAC9B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,6BAA6B;AAiCtC,SAAS,cAAc,QAAyD;AAC9E,SAAO;AAAA,IACL,QAAQ,OAAO;AAAA,IACf,UAAU,OAAO;AAAA,IACjB,aAAa,OAAO,eAAe;AAAA,IACnC,UAAU,OAAO;AAAA,IACjB,cAAc,OAAO,gBAAgB;AAAA,IACrC,YAAY,OAAO;AAAA,IACnB,WAAW,OAAO,aAAa;AAAA,IAC/B,qBAAqB,OAAO;AAAA,IAC5B,gBAAgB,OAAO,kBAAkB;AAAA,IACzC,gBAAgB,OAAO,kBAAkB;AAAA,IACzC,SAAS,OAAO;AAAA,IAChB,UAAU,OAAO;AAAA,IACjB,SAAS,OAAO;AAAA,IAChB,eAAe,OAAO,iBAAiB;AAAA,IACvC,aAAa,OAAO,eAAe;AAAA,EACrC;AACF;AAYO,SAAS,iBAAiB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAA0B;AACxB,QAAM,IAAI,KAAK;AACf,QAAM,SAAS,QAAQ,QAAQ;AAC/B,QAAM,CAAC,MAAM,OAAO,IAAI,MAAM,SAA4B,IAAI;AAC9D,QAAM,CAAC,WAAW,YAAY,IAAI,MAAM,SAAS,KAAK;AACtD,QAAM,CAAC,WAAW,YAAY,IAAI,MAAM,SAAwB,IAAI;AAEpE,QAAM,UAAU,MAAM;AACpB,QAAI,CAAC,KAAM;AACX,QAAI,CAAC,UAAU;AACb,cAAQ,IAAI;AACZ,mBAAa,IAAI;AACjB,mBAAa,KAAK;AAClB;AAAA,IACF;AACA,QAAI,YAAY;AAChB,iBAAa,IAAI;AACjB,iBAAa,IAAI;AACjB,UAAM,OAAO,YAAY;AACvB,UAAI;AACF,cAAM,WAAW,MAAM,SAAS,6BAA6B,QAAQ,EAAE;AACvE,YAAI,CAAC,SAAS,IAAI;AAChB,cAAI,CAAC,UAAW,cAAa,EAAE,mCAAmC,CAAC;AACnE;AAAA,QACF;AACA,cAAM,OAAQ,MAAM,aAAyB,QAAQ,KAAM;AAC3D,YAAI,CAAC,UAAW,SAAQ,IAAI;AAAA,MAC9B,QAAQ;AACN,YAAI,CAAC,UAAW,cAAa,EAAE,mCAAmC,CAAC;AAAA,MACrE,UAAE;AACA,YAAI,CAAC,UAAW,cAAa,KAAK;AAAA,MACpC;AAAA,IACF;AACA,SAAK,KAAK;AACV,WAAO,MAAM;AACX,kBAAY;AAAA,IACd;AAAA,EACF,GAAG,CAAC,MAAM,UAAU,CAAC,CAAC;AAEtB,QAAM,gBAAgB,MAAM,QAAyC,MAAM;AACzE,QAAI,QAAQ;AACV,aAAO,OAAO,sBAAsB,IAAI,IAAI,CAAC;AAAA,IAC/C;AACA,WAAO;AAAA,MACL,GAAG;AAAA,MACH,GAAI,oBAAoB,EAAE,YAAY,kBAAkB,IAAI,CAAC;AAAA,MAC7D,GAAI,kBAAkB,EAAE,UAAU,gBAAgB,IAAI,CAAC;AAAA,IACzD;AAAA,EACF,GAAG,CAAC,mBAAmB,iBAAiB,QAAQ,IAAI,CAAC;AAErD,QAAM,SAAS,MAAM,QAAQ,MAAM,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC;AACjE,QAAM,SAAS,MAAM,QAAQ,MAAM,iBAAiB,GAAG,kBAAkB,aAAa,GAAG,CAAC,CAAC,CAAC;AAE5F,QAAM,kBAAmB,MAAM,aAAa,MAAM,cAAc;AAEhE,QAAM,eAAe,MAAM,YAAY,OAAO,WAAmC;AAC/E,UAAM,UAAU,cAAc,MAAM;AACpC,UAAM,UAAU,MAAO,SACnB,SAAS,6BAA6B;AAAA,MACpC,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,MAAM,KAAK,UAAU,EAAE,GAAG,SAAS,IAAI,SAAS,CAAC;AAAA,IACnD,CAAC,IACD,SAAS,6BAA6B;AAAA,MACpC,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,MAAM,KAAK,UAAU,OAAO;AAAA,IAC9B,CAAC;AAEL,UAAM,cAAc,SAAS,0BAA0B,eAAe,IAAI,CAAC;AAC3E,UAAM,WAAW,OAAO,KAAK,WAAW,EAAE,SACtC,MAAM,qBAAqB,aAAa,OAAO,IAC/C,MAAM,QAAQ;AAElB,QAAI,CAAC,SAAS,IAAI;AAChB,YAAMA,QAAQ,MAAM,aAAsC,QAAQ,KAAM,CAAC;AACzE,YAAM,UACH,OAAOA,MAAK,UAAU,YAAYA,MAAK,SACvC,OAAOA,MAAK,YAAY,YAAYA,MAAK,WAC1C,EAAE,SAAS,uCAAuC,oCAAoC;AACxF,YAAM,IAAI,cAAc,SAAS,QAAQ,EAAE,GAAGA,OAAM,OAAO,QAAQ,CAAC;AAAA,IACtE;AAEA,UAAM,OAAQ,MAAM,aAA8B,QAAQ,KAAM,CAAC;AACjE,UAAM,WAAW,SAAS,WAAW,KAAK,OAAO;AACjD,cAAU,EAAE,IAAI,SAAS,QAAQ,OAAO,QAAQ,UAAU,OAAO,SAAS,CAAC;AAC3E,iBAAa,KAAK;AAAA,EACpB,GAAG,CAAC,QAAQ,iBAAiB,cAAc,SAAS,UAAU,CAAC,CAAC;AAEhE,MAAI,CAAC,KAAM,QAAO;AAElB,SACE,oBAAC,UAAO,MAAY,cAClB,+BAAC,iBAAc,WAAU,uFACvB;AAAA,yBAAC,gBAAa,WAAU,oDACtB;AAAA,0BAAC,eACE,YAAE,SAAS,0CAA0C,yCAAyC,GACjG;AAAA,MACA,oBAAC,qBACE,YAAE,SAAS,gDAAgD,+CAA+C,GAC7G;AAAA,OACF;AAAA,IAEA,qBAAC,SAAI,WAAU,uDACb;AAAA,0BAAC,SAAI,WAAU,kCACZ,sBACC,qBAAC,SAAI,WAAU,+EACb;AAAA,4BAAC,WAAQ,WAAU,WAAU;AAAA,QAC7B,oBAAC,UAAK,WAAU,WAAW,YAAE,mCAAmC,GAAE;AAAA,SACpE,IACE,YACF,oBAAC,OAAE,WAAU,oDAAoD,qBAAU,IAE3E;AAAA,QAAC;AAAA;AAAA,UAEC,QAAQ;AAAA,UACR;AAAA,UACA;AAAA,UACA;AAAA,UACA,yBAAyB;AAAA,UACzB,UAAU;AAAA,UACV,UAAQ;AAAA,UACR,aAAa,EAAE,SAAS,qCAAqC,kCAAkC;AAAA,UAC/F,cACE,oBAAC,UAAO,MAAK,UAAS,SAAQ,WAAU,SAAS,MAAM,aAAa,KAAK,GACtE,YAAE,kCAAkC,GACvC;AAAA;AAAA,QAZG,YAAY;AAAA,MAcnB,GAEJ;AAAA,MACC,aACC,oBAAC,SAAI,WAAU,4DAA4D,sBAAW,IACpF;AAAA,OACN;AAAA,KACF,GACF;AAEJ;",
+  "names": ["body"]
+}

package/dist/modules/business_rules/data/validators.js

@@ -254,6 +254,8 @@ const directRuleExecutionContextSchema = z.object({
   organizationId: z.uuid("organizationId must be a valid UUID"),
   executedBy: z.string().optional(),
   dryRun: z.boolean().optional(),
+  // See `ruleIdExecutionContextSchema.skipActions`.
+  skipActions: z.boolean().optional(),
   entityType: z.string().optional(),
   entityId: z.string().optional(),
   eventType: z.string().optional()
@@ -270,6 +272,10 @@ const ruleIdExecutionContextSchema = z.object({
   organizationId: z.uuid("organizationId must be a valid UUID"),
   executedBy: z.string().optional(),
   dryRun: z.boolean().optional(),
+  // Evaluate the conditions but do not run the rule's success/failure ACTIONS.
+  // `dryRun` only suppresses the execution LOG, so it is not the flag a caller
+  // that must produce no side effects can rely on.
+  skipActions: z.boolean().optional(),
   entityType: z.string().optional(),
   entityId: z.string().optional(),
   eventType: z.string().optional()

package/dist/modules/business_rules/data/validators.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/business_rules/data/validators.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport {\n  validateConditionExpressionForApi,\n  validateActionsForApi,\n  isSafeExpression,\n} from '../lib/payload-validation'\nimport type { TranslatorFn } from '../components/utils/conditionValidation'\n\n/**\n * Business Rules Module - Zod Validators\n */\n\nconst uuid = z.uuid()\n\n// Rule Types\nexport const ruleTypeSchema = z.enum(['GUARD', 'VALIDATION', 'CALCULATION', 'ACTION', 'ASSIGNMENT'])\nexport type RuleType = z.infer<typeof ruleTypeSchema>\n\n// Condition Types\nexport const conditionTypeSchema = z.enum(['EXPRESSION', 'GROUP'])\nexport type ConditionType = z.infer<typeof conditionTypeSchema>\n\n// Logical Operators\nexport const logicalOperatorSchema = z.enum(['AND', 'OR', 'NOT'])\nexport type LogicalOperator = z.infer<typeof logicalOperatorSchema>\n\n// Comparison Operators\nexport const comparisonOperatorSchema = z.enum([\n  '=',\n  '==',\n  '!=',\n  '>',\n  '>=',\n  '<',\n  '<=',\n  'IN',\n  'NOT_IN',\n  'CONTAINS',\n  'NOT_CONTAINS',\n  'STARTS_WITH',\n  'ENDS_WITH',\n  'MATCHES',\n  'IS_EMPTY',\n  'IS_NOT_EMPTY',\n])\nexport type ComparisonOperator = z.infer<typeof comparisonOperatorSchema>\n\n// Data Types\nexport const dataTypeSchema = z.enum(['STRING', 'NUMBER', 'BOOLEAN', 'DATE', 'ARRAY', 'OBJECT'])\nexport type DataType = z.infer<typeof dataTypeSchema>\n\n// Action Trigger\nexport const actionTriggerSchema = z.enum(['ON_SUCCESS', 'ON_FAILURE', 'ALWAYS'])\nexport type ActionTrigger = z.infer<typeof actionTriggerSchema>\n\n// Execution Result\nexport const executionResultSchema = z.enum(['SUCCESS', 'FAILURE', 'ERROR'])\nexport type ExecutionResult = z.infer<typeof executionResultSchema>\n\n// Condition Expression Schema with Validation\n// Uses runtime validation to check structure, nesting, and field paths\nfunction createConditionExpressionSchema(t?: TranslatorFn) {\n  return z.any()\n    .optional()\n    .nullable()\n    .superRefine((val, ctx) => {\n      // Null/undefined is allowed (optional field)\n      if (val === null || val === undefined) return\n\n      // Check for dangerous patterns first (DoS prevention)\n      if (!isSafeExpression(val)) {\n        ctx.addIssue({\n          code: z.ZodIssueCode.custom,\n          message: 'Condition expression exceeds safety limits (max depth: 10, max rules per group: 50, max field path length: 200)'\n        })\n        return\n      }\n\n      // Validate structure and content\n      const result = validateConditionExpressionForApi(val, t)\n      if (!result.valid) {\n        ctx.addIssue({\n          code: z.ZodIssueCode.custom,\n          message: result.error || 'Invalid condition expression'\n        })\n      }\n    })\n}\n\nexport const conditionExpressionSchema = createConditionExpressionSchema()\n\n// Action Schema with Validation\n// Validates action type and required config fields\nexport const actionSchema = z.object({\n  type: z.string().min(1),\n  config: z.record(z.string(), z.any()).optional(),\n})\n\nfunction createActionsArraySchema(t?: TranslatorFn) {\n  return z.array(actionSchema).optional().nullable()\n    .superRefine((val, ctx) => {\n      // Null/undefined/empty is allowed (optional field)\n      if (!val || (Array.isArray(val) && val.length === 0)) return\n\n      const result = validateActionsForApi(val, 'actions', t)\n      if (!result.valid) {\n        ctx.addIssue({\n          code: z.ZodIssueCode.custom,\n          message: result.error || 'Invalid actions'\n        })\n      }\n    })\n}\n\nexport const actionsArraySchema = createActionsArraySchema()\n\n// Date preprocessing helper\nconst dateOrNull = z.preprocess((value) => {\n  if (value === undefined || value === null || value === '') return null\n  const date = value instanceof Date ? value : new Date(String(value))\n  return Number.isNaN(date.getTime()) ? null : date\n}, z.date().nullable())\n\n// Cross-field refine: effectiveTo must be later than effectiveFrom when both are provided.\n// Accepts Date objects, ISO strings, or null/undefined so it works on both the\n// preprocessed server schemas and the string-based client form schema.\nexport const EFFECTIVE_DATE_RANGE_DEFAULT_MESSAGE =\n  'Effective To must be later than Effective From'\n\nfunction toDateOrNull(value: unknown): Date | null {\n  if (value === undefined || value === null || value === '') return null\n  if (value instanceof Date) return Number.isNaN(value.getTime()) ? null : value\n  const parsed = new Date(String(value))\n  return Number.isNaN(parsed.getTime()) ? null : parsed\n}\n\nexport function refineEffectiveDateRange(\n  data: { effectiveFrom?: unknown; effectiveTo?: unknown },\n  ctx: z.RefinementCtx,\n  message: string = EFFECTIVE_DATE_RANGE_DEFAULT_MESSAGE,\n): void {\n  const from = toDateOrNull(data.effectiveFrom)\n  const to = toDateOrNull(data.effectiveTo)\n  if (from === null || to === null) return\n  if (to.getTime() <= from.getTime()) {\n    ctx.addIssue({\n      code: z.ZodIssueCode.custom,\n      message,\n      path: ['effectiveTo'],\n    })\n  }\n}\n\n// BusinessRule base fields (without condition/action schemas)\nconst businessRuleBaseFields = {\n  ruleId: z.string().min(1).max(50),\n  ruleName: z.string().min(1).max(200),\n  description: z.string().max(5000).optional().nullable(),\n  ruleType: ruleTypeSchema,\n  ruleCategory: z.string().max(50).optional().nullable(),\n  entityType: z.string().min(1).max(50),\n  eventType: z.string().max(50).optional().nullable(),\n  enabled: z.boolean().optional().default(true),\n  priority: z.number().int().min(0).max(9999).optional().default(100),\n  version: z.number().int().min(1).optional().default(1),\n  effectiveFrom: dateOrNull.optional(),\n  effectiveTo: dateOrNull.optional(),\n  tenantId: uuid,\n  organizationId: uuid,\n  createdBy: z.string().max(50).optional().nullable(),\n} as const\n\n// Static schemas (without i18n \u2014 used for OpenAPI docs and non-route contexts)\nexport const createBusinessRuleSchema = z\n  .object({\n    ...businessRuleBaseFields,\n    conditionExpression: conditionExpressionSchema.optional().nullable(),\n    successActions: actionsArraySchema,\n    failureActions: actionsArraySchema,\n  })\n  .superRefine((data, ctx) => refineEffectiveDateRange(data, ctx))\n\nexport type CreateBusinessRuleInput = z.input<typeof createBusinessRuleSchema>\n\nexport const updateBusinessRuleSchema = z\n  .object({\n    ...businessRuleBaseFields,\n    conditionExpression: conditionExpressionSchema.optional().nullable(),\n    successActions: actionsArraySchema,\n    failureActions: actionsArraySchema,\n  })\n  .omit({ tenantId: true, organizationId: true, createdBy: true })\n  .partial()\n  .extend({ id: uuid })\n  .superRefine((data, ctx) => refineEffectiveDateRange(data, ctx))\n\nexport type UpdateBusinessRuleInput = z.input<typeof updateBusinessRuleSchema>\n\n// Factory functions for i18n-aware schemas (used in API routes with resolveTranslations)\nexport function createLocalizedBusinessRuleSchema(t: TranslatorFn) {\n  const conditionSchema = createConditionExpressionSchema(t)\n  const actionsSchema = createActionsArraySchema(t)\n  const message = t('business_rules.rules.form.errors.effectiveToBeforeFrom')\n  return z\n    .object({\n      ...businessRuleBaseFields,\n      conditionExpression: conditionSchema.optional().nullable(),\n      successActions: actionsSchema,\n      failureActions: actionsSchema,\n    })\n    .superRefine((data, ctx) => refineEffectiveDateRange(data, ctx, message))\n}\n\nexport function createLocalizedUpdateBusinessRuleSchema(t: TranslatorFn) {\n  const conditionSchema = createConditionExpressionSchema(t)\n  const actionsSchema = createActionsArraySchema(t)\n  const message = t('business_rules.rules.form.errors.effectiveToBeforeFrom')\n  return z\n    .object({\n      ...businessRuleBaseFields,\n      conditionExpression: conditionSchema.optional().nullable(),\n      successActions: actionsSchema,\n      failureActions: actionsSchema,\n    })\n    .omit({ tenantId: true, organizationId: true, createdBy: true })\n    .partial()\n    .extend({ id: uuid })\n    .superRefine((data, ctx) => refineEffectiveDateRange(data, ctx, message))\n}\n\n// Query/Filter Schema\nexport const businessRuleFilterSchema = z.object({\n  ruleId: z.string().optional(),\n  ruleName: z.string().optional(),\n  ruleType: ruleTypeSchema.optional(),\n  ruleCategory: z.string().optional(),\n  entityType: z.string().optional(),\n  eventType: z.string().optional(),\n  enabled: z.boolean().optional(),\n  tenantId: uuid.optional(),\n  organizationId: uuid.optional(),\n})\n\nexport type BusinessRuleFilter = z.infer<typeof businessRuleFilterSchema>\n\n// RuleExecutionLog Create Schema\nexport const createRuleExecutionLogSchema = z.object({\n  ruleId: uuid,\n  entityId: uuid,\n  entityType: z.string().min(1).max(50),\n  executionResult: executionResultSchema,\n  inputContext: z.any().optional().nullable(),\n  outputContext: z.any().optional().nullable(),\n  errorMessage: z.string().optional().nullable(),\n  executionTimeMs: z.number().int().min(0),\n  executedAt: z.date().optional(),\n  tenantId: uuid,\n  organizationId: uuid.optional().nullable(),\n  executedBy: z.string().max(50).optional().nullable(),\n})\n\nexport type CreateRuleExecutionLogInput = z.infer<typeof createRuleExecutionLogSchema>\n\n// RuleExecutionLog Query/Filter Schema\nexport const ruleExecutionLogFilterSchema = z.object({\n  ruleId: uuid.optional(),\n  entityId: uuid.optional(),\n  entityType: z.string().optional(),\n  executionResult: executionResultSchema.optional(),\n  tenantId: uuid.optional(),\n  organizationId: uuid.optional(),\n  executedBy: z.string().optional(),\n  executedAtFrom: z.date().optional(),\n  executedAtTo: z.date().optional(),\n})\n\nexport type RuleExecutionLogFilter = z.infer<typeof ruleExecutionLogFilterSchema>\n\n// RuleSet Create Schema\nexport const createRuleSetSchema = z.object({\n  setId: z.string().min(1).max(50),\n  setName: z.string().min(1).max(200),\n  description: z.string().max(5000).optional().nullable(),\n  enabled: z.boolean().optional().default(true),\n  tenantId: uuid,\n  organizationId: uuid,\n  createdBy: z.string().max(50).optional().nullable(),\n})\n\nexport type CreateRuleSetInput = z.infer<typeof createRuleSetSchema>\n\n// RuleSet Update Schema\nexport const updateRuleSetSchema = createRuleSetSchema\n  .omit({ tenantId: true, organizationId: true, createdBy: true })\n  .partial()\n  .extend({ id: uuid })\n\nexport type UpdateRuleSetInput = z.infer<typeof updateRuleSetSchema>\n\n// RuleSet Query/Filter Schema\nexport const ruleSetFilterSchema = z.object({\n  setId: z.string().optional(),\n  setName: z.string().optional(),\n  enabled: z.boolean().optional(),\n  tenantId: uuid.optional(),\n  organizationId: uuid.optional(),\n})\n\nexport type RuleSetFilter = z.infer<typeof ruleSetFilterSchema>\n\n// RuleSetMember Create Schema\nexport const createRuleSetMemberSchema = z.object({\n  ruleSetId: uuid,\n  ruleId: uuid,\n  sequence: z.number().int().min(0).optional().default(0),\n  enabled: z.boolean().optional().default(true),\n  tenantId: uuid,\n  organizationId: uuid,\n})\n\nexport type CreateRuleSetMemberInput = z.infer<typeof createRuleSetMemberSchema>\n\n// RuleSetMember Update Schema\nexport const updateRuleSetMemberSchema = z.object({\n  id: uuid,\n  sequence: z.number().int().min(0).optional(),\n  enabled: z.boolean().optional(),\n})\n\nexport type UpdateRuleSetMemberInput = z.infer<typeof updateRuleSetMemberSchema>\n\n// RuleSetMember Query/Filter Schema\nexport const ruleSetMemberFilterSchema = z.object({\n  ruleSetId: uuid.optional(),\n  ruleId: uuid.optional(),\n  enabled: z.boolean().optional(),\n  tenantId: uuid.optional(),\n  organizationId: uuid.optional(),\n})\n\nexport type RuleSetMemberFilter = z.infer<typeof ruleSetMemberFilterSchema>\n\n// Rule Engine Context Schema\nexport const ruleEngineContextSchema = z.looseObject({\n  entityType: z.string().min(1, 'entityType is required'),\n  entityId: z.string().optional(),\n  eventType: z.string().optional(),\n  data: z.any(),\n  user: z.looseObject({\n    id: z.string().optional(),\n    email: z.string().optional(),\n    role: z.string().optional(),\n  }).optional(),\n  tenant: z.looseObject({\n    id: z.string().optional(),\n  }).optional(),\n  organization: z.looseObject({\n    id: z.string().optional(),\n  }).optional(),\n  tenantId: z.uuid('tenantId must be a valid UUID'),\n  organizationId: z.uuid('organizationId must be a valid UUID'),\n  executedBy: z.string().optional(),\n  dryRun: z.boolean().optional(),\n})\n\nexport type RuleEngineContextInput = z.infer<typeof ruleEngineContextSchema>\n\n// Rule Discovery Options Schema\nexport const ruleDiscoveryOptionsSchema = z.object({\n  entityType: z.string().min(1, 'entityType is required'),\n  eventType: z.string().optional(),\n  tenantId: z.uuid('tenantId must be a valid UUID'),\n  organizationId: z.uuid('organizationId must be a valid UUID'),\n  ruleType: ruleTypeSchema.optional(),\n})\n\nexport type RuleDiscoveryOptionsInput = z.infer<typeof ruleDiscoveryOptionsSchema>\n\n// Direct Rule Execution Context Schema (for executing a specific rule by ID)\nexport const directRuleExecutionContextSchema = z.object({\n  ruleId: z.uuid('ruleId must be a valid UUID'),\n  data: z.any(),\n  user: z.looseObject({\n    id: z.string().optional(),\n    email: z.string().optional(),\n    role: z.string().optional(),\n  }).optional(),\n  tenantId: z.uuid('tenantId must be a valid UUID'),\n  organizationId: z.uuid('organizationId must be a valid UUID'),\n  executedBy: z.string().optional(),\n  dryRun: z.boolean().optional(),\n  entityType: z.string().optional(),\n  entityId: z.string().optional(),\n  eventType: z.string().optional(),\n})\n\nexport type DirectRuleExecutionContextInput = z.infer<typeof directRuleExecutionContextSchema>\n\n// Rule ID Execution Context Schema (for executing a specific rule by its string rule_id identifier)\nexport const ruleIdExecutionContextSchema = z.object({\n  ruleId: z.string().min(1, 'ruleId must be a non-empty string').max(50),\n  data: z.any(),\n  user: z.looseObject({\n    id: z.string().optional(),\n    email: z.string().optional(),\n    role: z.string().optional(),\n  }).optional(),\n  tenantId: z.uuid('tenantId must be a valid UUID'),\n  organizationId: z.uuid('organizationId must be a valid UUID'),\n  executedBy: z.string().optional(),\n  dryRun: z.boolean().optional(),\n  entityType: z.string().optional(),\n  entityId: z.string().optional(),\n  eventType: z.string().optional(),\n})\n\nexport type RuleIdExecutionContextInput = z.infer<typeof ruleIdExecutionContextSchema>\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAClB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAOP,MAAM,OAAO,EAAE,KAAK;AAGb,MAAM,iBAAiB,EAAE,KAAK,CAAC,SAAS,cAAc,eAAe,UAAU,YAAY,CAAC;AAI5F,MAAM,sBAAsB,EAAE,KAAK,CAAC,cAAc,OAAO,CAAC;AAI1D,MAAM,wBAAwB,EAAE,KAAK,CAAC,OAAO,MAAM,KAAK,CAAC;AAIzD,MAAM,2BAA2B,EAAE,KAAK;AAAA,EAC7C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAIM,MAAM,iBAAiB,EAAE,KAAK,CAAC,UAAU,UAAU,WAAW,QAAQ,SAAS,QAAQ,CAAC;AAIxF,MAAM,sBAAsB,EAAE,KAAK,CAAC,cAAc,cAAc,QAAQ,CAAC;AAIzE,MAAM,wBAAwB,EAAE,KAAK,CAAC,WAAW,WAAW,OAAO,CAAC;AAK3E,SAAS,gCAAgC,GAAkB;AACzD,SAAO,EAAE,IAAI,EACV,SAAS,EACT,SAAS,EACT,YAAY,CAAC,KAAK,QAAQ;AAEzB,QAAI,QAAQ,QAAQ,QAAQ,OAAW;AAGvC,QAAI,CAAC,iBAAiB,GAAG,GAAG;AAC1B,UAAI,SAAS;AAAA,QACX,MAAM,EAAE,aAAa;AAAA,QACrB,SAAS;AAAA,MACX,CAAC;AACD;AAAA,IACF;AAGA,UAAM,SAAS,kCAAkC,KAAK,CAAC;AACvD,QAAI,CAAC,OAAO,OAAO;AACjB,UAAI,SAAS;AAAA,QACX,MAAM,EAAE,aAAa;AAAA,QACrB,SAAS,OAAO,SAAS;AAAA,MAC3B,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AACL;AAEO,MAAM,4BAA4B,gCAAgC;AAIlE,MAAM,eAAe,EAAE,OAAO;AAAA,EACnC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACtB,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC,EAAE,SAAS;AACjD,CAAC;AAED,SAAS,yBAAyB,GAAkB;AAClD,SAAO,EAAE,MAAM,YAAY,EAAE,SAAS,EAAE,SAAS,EAC9C,YAAY,CAAC,KAAK,QAAQ;AAEzB,QAAI,CAAC,OAAQ,MAAM,QAAQ,GAAG,KAAK,IAAI,WAAW,EAAI;AAEtD,UAAM,SAAS,sBAAsB,KAAK,WAAW,CAAC;AACtD,QAAI,CAAC,OAAO,OAAO;AACjB,UAAI,SAAS;AAAA,QACX,MAAM,EAAE,aAAa;AAAA,QACrB,SAAS,OAAO,SAAS;AAAA,MAC3B,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AACL;AAEO,MAAM,qBAAqB,yBAAyB;AAG3D,MAAM,aAAa,EAAE,WAAW,CAAC,UAAU;AACzC,MAAI,UAAU,UAAa,UAAU,QAAQ,UAAU,GAAI,QAAO;AAClE,QAAM,OAAO,iBAAiB,OAAO,QAAQ,IAAI,KAAK,OAAO,KAAK,CAAC;AACnE,SAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,IAAI,OAAO;AAC/C,GAAG,EAAE,KAAK,EAAE,SAAS,CAAC;AAKf,MAAM,uCACX;AAEF,SAAS,aAAa,OAA6B;AACjD,MAAI,UAAU,UAAa,UAAU,QAAQ,UAAU,GAAI,QAAO;AAClE,MAAI,iBAAiB,KAAM,QAAO,OAAO,MAAM,MAAM,QAAQ,CAAC,IAAI,OAAO;AACzE,QAAM,SAAS,IAAI,KAAK,OAAO,KAAK,CAAC;AACrC,SAAO,OAAO,MAAM,OAAO,QAAQ,CAAC,IAAI,OAAO;AACjD;AAEO,SAAS,yBACd,MACA,KACA,UAAkB,sCACZ;AACN,QAAM,OAAO,aAAa,KAAK,aAAa;AAC5C,QAAM,KAAK,aAAa,KAAK,WAAW;AACxC,MAAI,SAAS,QAAQ,OAAO,KAAM;AAClC,MAAI,GAAG,QAAQ,KAAK,KAAK,QAAQ,GAAG;AAClC,QAAI,SAAS;AAAA,MACX,MAAM,EAAE,aAAa;AAAA,MACrB;AAAA,MACA,MAAM,CAAC,aAAa;AAAA,IACtB,CAAC;AAAA,EACH;AACF;AAGA,MAAM,yBAAyB;AAAA,EAC7B,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;AAAA,EAChC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACnC,aAAa,EAAE,OAAO,EAAE,IAAI,GAAI,EAAE,SAAS,EAAE,SAAS;AAAA,EACtD,UAAU;AAAA,EACV,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS;AAAA,EACrD,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;AAAA,EACpC,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS;AAAA,EAClD,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA,EAC5C,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,SAAS,EAAE,QAAQ,GAAG;AAAA,EAClE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC;AAAA,EACrD,eAAe,WAAW,SAAS;AAAA,EACnC,aAAa,WAAW,SAAS;AAAA,EACjC,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS;AACpD;AAGO,MAAM,2BAA2B,EACrC,OAAO;AAAA,EACN,GAAG;AAAA,EACH,qBAAqB,0BAA0B,SAAS,EAAE,SAAS;AAAA,EACnE,gBAAgB;AAAA,EAChB,gBAAgB;AAClB,CAAC,EACA,YAAY,CAAC,MAAM,QAAQ,yBAAyB,MAAM,GAAG,CAAC;AAI1D,MAAM,2BAA2B,EACrC,OAAO;AAAA,EACN,GAAG;AAAA,EACH,qBAAqB,0BAA0B,SAAS,EAAE,SAAS;AAAA,EACnE,gBAAgB;AAAA,EAChB,gBAAgB;AAClB,CAAC,EACA,KAAK,EAAE,UAAU,MAAM,gBAAgB,MAAM,WAAW,KAAK,CAAC,EAC9D,QAAQ,EACR,OAAO,EAAE,IAAI,KAAK,CAAC,EACnB,YAAY,CAAC,MAAM,QAAQ,yBAAyB,MAAM,GAAG,CAAC;AAK1D,SAAS,kCAAkC,GAAiB;AACjE,QAAM,kBAAkB,gCAAgC,CAAC;AACzD,QAAM,gBAAgB,yBAAyB,CAAC;AAChD,QAAM,UAAU,EAAE,wDAAwD;AAC1E,SAAO,EACJ,OAAO;AAAA,IACN,GAAG;AAAA,IACH,qBAAqB,gBAAgB,SAAS,EAAE,SAAS;AAAA,IACzD,gBAAgB;AAAA,IAChB,gBAAgB;AAAA,EAClB,CAAC,EACA,YAAY,CAAC,MAAM,QAAQ,yBAAyB,MAAM,KAAK,OAAO,CAAC;AAC5E;AAEO,SAAS,wCAAwC,GAAiB;AACvE,QAAM,kBAAkB,gCAAgC,CAAC;AACzD,QAAM,gBAAgB,yBAAyB,CAAC;AAChD,QAAM,UAAU,EAAE,wDAAwD;AAC1E,SAAO,EACJ,OAAO;AAAA,IACN,GAAG;AAAA,IACH,qBAAqB,gBAAgB,SAAS,EAAE,SAAS;AAAA,IACzD,gBAAgB;AAAA,IAChB,gBAAgB;AAAA,EAClB,CAAC,EACA,KAAK,EAAE,UAAU,MAAM,gBAAgB,MAAM,WAAW,KAAK,CAAC,EAC9D,QAAQ,EACR,OAAO,EAAE,IAAI,KAAK,CAAC,EACnB,YAAY,CAAC,MAAM,QAAQ,yBAAyB,MAAM,KAAK,OAAO,CAAC;AAC5E;AAGO,MAAM,2BAA2B,EAAE,OAAO;AAAA,EAC/C,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,UAAU,eAAe,SAAS;AAAA,EAClC,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,QAAQ,EAAE,SAAS;AAAA,EAC9B,UAAU,KAAK,SAAS;AAAA,EACxB,gBAAgB,KAAK,SAAS;AAChC,CAAC;AAKM,MAAM,+BAA+B,EAAE,OAAO;AAAA,EACnD,QAAQ;AAAA,EACR,UAAU;AAAA,EACV,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;AAAA,EACpC,iBAAiB;AAAA,EACjB,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1C,eAAe,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,EAC3C,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC7C,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,EACvC,YAAY,EAAE,KAAK,EAAE,SAAS;AAAA,EAC9B,UAAU;AAAA,EACV,gBAAgB,KAAK,SAAS,EAAE,SAAS;AAAA,EACzC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS;AACrD,CAAC;AAKM,MAAM,+BAA+B,EAAE,OAAO;AAAA,EACnD,QAAQ,KAAK,SAAS;AAAA,EACtB,UAAU,KAAK,SAAS;AAAA,EACxB,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,iBAAiB,sBAAsB,SAAS;AAAA,EAChD,UAAU,KAAK,SAAS;AAAA,EACxB,gBAAgB,KAAK,SAAS;AAAA,EAC9B,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,gBAAgB,EAAE,KAAK,EAAE,SAAS;AAAA,EAClC,cAAc,EAAE,KAAK,EAAE,SAAS;AAClC,CAAC;AAKM,MAAM,sBAAsB,EAAE,OAAO;AAAA,EAC1C,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;AAAA,EAC/B,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAClC,aAAa,EAAE,OAAO,EAAE,IAAI,GAAI,EAAE,SAAS,EAAE,SAAS;AAAA,EACtD,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA,EAC5C,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS;AACpD,CAAC;AAKM,MAAM,sBAAsB,oBAChC,KAAK,EAAE,UAAU,MAAM,gBAAgB,MAAM,WAAW,KAAK,CAAC,EAC9D,QAAQ,EACR,OAAO,EAAE,IAAI,KAAK,CAAC;AAKf,MAAM,sBAAsB,EAAE,OAAO;AAAA,EAC1C,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,SAAS,EAAE,QAAQ,EAAE,SAAS;AAAA,EAC9B,UAAU,KAAK,SAAS;AAAA,EACxB,gBAAgB,KAAK,SAAS;AAChC,CAAC;AAKM,MAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,WAAW;AAAA,EACX,QAAQ;AAAA,EACR,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC;AAAA,EACtD,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA,EAC5C,UAAU;AAAA,EACV,gBAAgB;AAClB,CAAC;AAKM,MAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,IAAI;AAAA,EACJ,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAC3C,SAAS,EAAE,QAAQ,EAAE,SAAS;AAChC,CAAC;AAKM,MAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,WAAW,KAAK,SAAS;AAAA,EACzB,QAAQ,KAAK,SAAS;AAAA,EACtB,SAAS,EAAE,QAAQ,EAAE,SAAS;AAAA,EAC9B,UAAU,KAAK,SAAS;AAAA,EACxB,gBAAgB,KAAK,SAAS;AAChC,CAAC;AAKM,MAAM,0BAA0B,EAAE,YAAY;AAAA,EACnD,YAAY,EAAE,OAAO,EAAE,IAAI,GAAG,wBAAwB;AAAA,EACtD,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,MAAM,EAAE,IAAI;AAAA,EACZ,MAAM,EAAE,YAAY;AAAA,IAClB,IAAI,EAAE,OAAO,EAAE,SAAS;AAAA,IACxB,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,IAC3B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,CAAC,EAAE,SAAS;AAAA,EACZ,QAAQ,EAAE,YAAY;AAAA,IACpB,IAAI,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,CAAC,EAAE,SAAS;AAAA,EACZ,cAAc,EAAE,YAAY;AAAA,IAC1B,IAAI,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,CAAC,EAAE,SAAS;AAAA,EACZ,UAAU,EAAE,KAAK,+BAA+B;AAAA,EAChD,gBAAgB,EAAE,KAAK,qCAAqC;AAAA,EAC5D,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,QAAQ,EAAE,QAAQ,EAAE,SAAS;AAC/B,CAAC;AAKM,MAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,YAAY,EAAE,OAAO,EAAE,IAAI,GAAG,wBAAwB;AAAA,EACtD,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,UAAU,EAAE,KAAK,+BAA+B;AAAA,EAChD,gBAAgB,EAAE,KAAK,qCAAqC;AAAA,EAC5D,UAAU,eAAe,SAAS;AACpC,CAAC;AAKM,MAAM,mCAAmC,EAAE,OAAO;AAAA,EACvD,QAAQ,EAAE,KAAK,6BAA6B;AAAA,EAC5C,MAAM,EAAE,IAAI;AAAA,EACZ,MAAM,EAAE,YAAY;AAAA,IAClB,IAAI,EAAE,OAAO,EAAE,SAAS;AAAA,IACxB,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,IAC3B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,CAAC,EAAE,SAAS;AAAA,EACZ,UAAU,EAAE,KAAK,+BAA+B;AAAA,EAChD,gBAAgB,EAAE,KAAK,qCAAqC;AAAA,EAC5D,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,QAAQ,EAAE,QAAQ,EAAE,SAAS;AAAA,EAC7B,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,WAAW,EAAE,OAAO,EAAE,SAAS;AACjC,CAAC;AAKM,MAAM,+BAA+B,EAAE,OAAO;AAAA,EACnD,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAG,mCAAmC,EAAE,IAAI,EAAE;AAAA,EACrE,MAAM,EAAE,IAAI;AAAA,EACZ,MAAM,EAAE,YAAY;AAAA,IAClB,IAAI,EAAE,OAAO,EAAE,SAAS;AAAA,IACxB,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,IAC3B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,CAAC,EAAE,SAAS;AAAA,EACZ,UAAU,EAAE,KAAK,+BAA+B;AAAA,EAChD,gBAAgB,EAAE,KAAK,qCAAqC;AAAA,EAC5D,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,QAAQ,EAAE,QAAQ,EAAE,SAAS;AAAA,EAC7B,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,WAAW,EAAE,OAAO,EAAE,SAAS;AACjC,CAAC;",
+  "sourcesContent": ["import { z } from 'zod'\nimport {\n  validateConditionExpressionForApi,\n  validateActionsForApi,\n  isSafeExpression,\n} from '../lib/payload-validation'\nimport type { TranslatorFn } from '../components/utils/conditionValidation'\n\n/**\n * Business Rules Module - Zod Validators\n */\n\nconst uuid = z.uuid()\n\n// Rule Types\nexport const ruleTypeSchema = z.enum(['GUARD', 'VALIDATION', 'CALCULATION', 'ACTION', 'ASSIGNMENT'])\nexport type RuleType = z.infer<typeof ruleTypeSchema>\n\n// Condition Types\nexport const conditionTypeSchema = z.enum(['EXPRESSION', 'GROUP'])\nexport type ConditionType = z.infer<typeof conditionTypeSchema>\n\n// Logical Operators\nexport const logicalOperatorSchema = z.enum(['AND', 'OR', 'NOT'])\nexport type LogicalOperator = z.infer<typeof logicalOperatorSchema>\n\n// Comparison Operators\nexport const comparisonOperatorSchema = z.enum([\n  '=',\n  '==',\n  '!=',\n  '>',\n  '>=',\n  '<',\n  '<=',\n  'IN',\n  'NOT_IN',\n  'CONTAINS',\n  'NOT_CONTAINS',\n  'STARTS_WITH',\n  'ENDS_WITH',\n  'MATCHES',\n  'IS_EMPTY',\n  'IS_NOT_EMPTY',\n])\nexport type ComparisonOperator = z.infer<typeof comparisonOperatorSchema>\n\n// Data Types\nexport const dataTypeSchema = z.enum(['STRING', 'NUMBER', 'BOOLEAN', 'DATE', 'ARRAY', 'OBJECT'])\nexport type DataType = z.infer<typeof dataTypeSchema>\n\n// Action Trigger\nexport const actionTriggerSchema = z.enum(['ON_SUCCESS', 'ON_FAILURE', 'ALWAYS'])\nexport type ActionTrigger = z.infer<typeof actionTriggerSchema>\n\n// Execution Result\nexport const executionResultSchema = z.enum(['SUCCESS', 'FAILURE', 'ERROR'])\nexport type ExecutionResult = z.infer<typeof executionResultSchema>\n\n// Condition Expression Schema with Validation\n// Uses runtime validation to check structure, nesting, and field paths\nfunction createConditionExpressionSchema(t?: TranslatorFn) {\n  return z.any()\n    .optional()\n    .nullable()\n    .superRefine((val, ctx) => {\n      // Null/undefined is allowed (optional field)\n      if (val === null || val === undefined) return\n\n      // Check for dangerous patterns first (DoS prevention)\n      if (!isSafeExpression(val)) {\n        ctx.addIssue({\n          code: z.ZodIssueCode.custom,\n          message: 'Condition expression exceeds safety limits (max depth: 10, max rules per group: 50, max field path length: 200)'\n        })\n        return\n      }\n\n      // Validate structure and content\n      const result = validateConditionExpressionForApi(val, t)\n      if (!result.valid) {\n        ctx.addIssue({\n          code: z.ZodIssueCode.custom,\n          message: result.error || 'Invalid condition expression'\n        })\n      }\n    })\n}\n\nexport const conditionExpressionSchema = createConditionExpressionSchema()\n\n// Action Schema with Validation\n// Validates action type and required config fields\nexport const actionSchema = z.object({\n  type: z.string().min(1),\n  config: z.record(z.string(), z.any()).optional(),\n})\n\nfunction createActionsArraySchema(t?: TranslatorFn) {\n  return z.array(actionSchema).optional().nullable()\n    .superRefine((val, ctx) => {\n      // Null/undefined/empty is allowed (optional field)\n      if (!val || (Array.isArray(val) && val.length === 0)) return\n\n      const result = validateActionsForApi(val, 'actions', t)\n      if (!result.valid) {\n        ctx.addIssue({\n          code: z.ZodIssueCode.custom,\n          message: result.error || 'Invalid actions'\n        })\n      }\n    })\n}\n\nexport const actionsArraySchema = createActionsArraySchema()\n\n// Date preprocessing helper\nconst dateOrNull = z.preprocess((value) => {\n  if (value === undefined || value === null || value === '') return null\n  const date = value instanceof Date ? value : new Date(String(value))\n  return Number.isNaN(date.getTime()) ? null : date\n}, z.date().nullable())\n\n// Cross-field refine: effectiveTo must be later than effectiveFrom when both are provided.\n// Accepts Date objects, ISO strings, or null/undefined so it works on both the\n// preprocessed server schemas and the string-based client form schema.\nexport const EFFECTIVE_DATE_RANGE_DEFAULT_MESSAGE =\n  'Effective To must be later than Effective From'\n\nfunction toDateOrNull(value: unknown): Date | null {\n  if (value === undefined || value === null || value === '') return null\n  if (value instanceof Date) return Number.isNaN(value.getTime()) ? null : value\n  const parsed = new Date(String(value))\n  return Number.isNaN(parsed.getTime()) ? null : parsed\n}\n\nexport function refineEffectiveDateRange(\n  data: { effectiveFrom?: unknown; effectiveTo?: unknown },\n  ctx: z.RefinementCtx,\n  message: string = EFFECTIVE_DATE_RANGE_DEFAULT_MESSAGE,\n): void {\n  const from = toDateOrNull(data.effectiveFrom)\n  const to = toDateOrNull(data.effectiveTo)\n  if (from === null || to === null) return\n  if (to.getTime() <= from.getTime()) {\n    ctx.addIssue({\n      code: z.ZodIssueCode.custom,\n      message,\n      path: ['effectiveTo'],\n    })\n  }\n}\n\n// BusinessRule base fields (without condition/action schemas)\nconst businessRuleBaseFields = {\n  ruleId: z.string().min(1).max(50),\n  ruleName: z.string().min(1).max(200),\n  description: z.string().max(5000).optional().nullable(),\n  ruleType: ruleTypeSchema,\n  ruleCategory: z.string().max(50).optional().nullable(),\n  entityType: z.string().min(1).max(50),\n  eventType: z.string().max(50).optional().nullable(),\n  enabled: z.boolean().optional().default(true),\n  priority: z.number().int().min(0).max(9999).optional().default(100),\n  version: z.number().int().min(1).optional().default(1),\n  effectiveFrom: dateOrNull.optional(),\n  effectiveTo: dateOrNull.optional(),\n  tenantId: uuid,\n  organizationId: uuid,\n  createdBy: z.string().max(50).optional().nullable(),\n} as const\n\n// Static schemas (without i18n \u2014 used for OpenAPI docs and non-route contexts)\nexport const createBusinessRuleSchema = z\n  .object({\n    ...businessRuleBaseFields,\n    conditionExpression: conditionExpressionSchema.optional().nullable(),\n    successActions: actionsArraySchema,\n    failureActions: actionsArraySchema,\n  })\n  .superRefine((data, ctx) => refineEffectiveDateRange(data, ctx))\n\nexport type CreateBusinessRuleInput = z.input<typeof createBusinessRuleSchema>\n\nexport const updateBusinessRuleSchema = z\n  .object({\n    ...businessRuleBaseFields,\n    conditionExpression: conditionExpressionSchema.optional().nullable(),\n    successActions: actionsArraySchema,\n    failureActions: actionsArraySchema,\n  })\n  .omit({ tenantId: true, organizationId: true, createdBy: true })\n  .partial()\n  .extend({ id: uuid })\n  .superRefine((data, ctx) => refineEffectiveDateRange(data, ctx))\n\nexport type UpdateBusinessRuleInput = z.input<typeof updateBusinessRuleSchema>\n\n// Factory functions for i18n-aware schemas (used in API routes with resolveTranslations)\nexport function createLocalizedBusinessRuleSchema(t: TranslatorFn) {\n  const conditionSchema = createConditionExpressionSchema(t)\n  const actionsSchema = createActionsArraySchema(t)\n  const message = t('business_rules.rules.form.errors.effectiveToBeforeFrom')\n  return z\n    .object({\n      ...businessRuleBaseFields,\n      conditionExpression: conditionSchema.optional().nullable(),\n      successActions: actionsSchema,\n      failureActions: actionsSchema,\n    })\n    .superRefine((data, ctx) => refineEffectiveDateRange(data, ctx, message))\n}\n\nexport function createLocalizedUpdateBusinessRuleSchema(t: TranslatorFn) {\n  const conditionSchema = createConditionExpressionSchema(t)\n  const actionsSchema = createActionsArraySchema(t)\n  const message = t('business_rules.rules.form.errors.effectiveToBeforeFrom')\n  return z\n    .object({\n      ...businessRuleBaseFields,\n      conditionExpression: conditionSchema.optional().nullable(),\n      successActions: actionsSchema,\n      failureActions: actionsSchema,\n    })\n    .omit({ tenantId: true, organizationId: true, createdBy: true })\n    .partial()\n    .extend({ id: uuid })\n    .superRefine((data, ctx) => refineEffectiveDateRange(data, ctx, message))\n}\n\n// Query/Filter Schema\nexport const businessRuleFilterSchema = z.object({\n  ruleId: z.string().optional(),\n  ruleName: z.string().optional(),\n  ruleType: ruleTypeSchema.optional(),\n  ruleCategory: z.string().optional(),\n  entityType: z.string().optional(),\n  eventType: z.string().optional(),\n  enabled: z.boolean().optional(),\n  tenantId: uuid.optional(),\n  organizationId: uuid.optional(),\n})\n\nexport type BusinessRuleFilter = z.infer<typeof businessRuleFilterSchema>\n\n// RuleExecutionLog Create Schema\nexport const createRuleExecutionLogSchema = z.object({\n  ruleId: uuid,\n  entityId: uuid,\n  entityType: z.string().min(1).max(50),\n  executionResult: executionResultSchema,\n  inputContext: z.any().optional().nullable(),\n  outputContext: z.any().optional().nullable(),\n  errorMessage: z.string().optional().nullable(),\n  executionTimeMs: z.number().int().min(0),\n  executedAt: z.date().optional(),\n  tenantId: uuid,\n  organizationId: uuid.optional().nullable(),\n  executedBy: z.string().max(50).optional().nullable(),\n})\n\nexport type CreateRuleExecutionLogInput = z.infer<typeof createRuleExecutionLogSchema>\n\n// RuleExecutionLog Query/Filter Schema\nexport const ruleExecutionLogFilterSchema = z.object({\n  ruleId: uuid.optional(),\n  entityId: uuid.optional(),\n  entityType: z.string().optional(),\n  executionResult: executionResultSchema.optional(),\n  tenantId: uuid.optional(),\n  organizationId: uuid.optional(),\n  executedBy: z.string().optional(),\n  executedAtFrom: z.date().optional(),\n  executedAtTo: z.date().optional(),\n})\n\nexport type RuleExecutionLogFilter = z.infer<typeof ruleExecutionLogFilterSchema>\n\n// RuleSet Create Schema\nexport const createRuleSetSchema = z.object({\n  setId: z.string().min(1).max(50),\n  setName: z.string().min(1).max(200),\n  description: z.string().max(5000).optional().nullable(),\n  enabled: z.boolean().optional().default(true),\n  tenantId: uuid,\n  organizationId: uuid,\n  createdBy: z.string().max(50).optional().nullable(),\n})\n\nexport type CreateRuleSetInput = z.infer<typeof createRuleSetSchema>\n\n// RuleSet Update Schema\nexport const updateRuleSetSchema = createRuleSetSchema\n  .omit({ tenantId: true, organizationId: true, createdBy: true })\n  .partial()\n  .extend({ id: uuid })\n\nexport type UpdateRuleSetInput = z.infer<typeof updateRuleSetSchema>\n\n// RuleSet Query/Filter Schema\nexport const ruleSetFilterSchema = z.object({\n  setId: z.string().optional(),\n  setName: z.string().optional(),\n  enabled: z.boolean().optional(),\n  tenantId: uuid.optional(),\n  organizationId: uuid.optional(),\n})\n\nexport type RuleSetFilter = z.infer<typeof ruleSetFilterSchema>\n\n// RuleSetMember Create Schema\nexport const createRuleSetMemberSchema = z.object({\n  ruleSetId: uuid,\n  ruleId: uuid,\n  sequence: z.number().int().min(0).optional().default(0),\n  enabled: z.boolean().optional().default(true),\n  tenantId: uuid,\n  organizationId: uuid,\n})\n\nexport type CreateRuleSetMemberInput = z.infer<typeof createRuleSetMemberSchema>\n\n// RuleSetMember Update Schema\nexport const updateRuleSetMemberSchema = z.object({\n  id: uuid,\n  sequence: z.number().int().min(0).optional(),\n  enabled: z.boolean().optional(),\n})\n\nexport type UpdateRuleSetMemberInput = z.infer<typeof updateRuleSetMemberSchema>\n\n// RuleSetMember Query/Filter Schema\nexport const ruleSetMemberFilterSchema = z.object({\n  ruleSetId: uuid.optional(),\n  ruleId: uuid.optional(),\n  enabled: z.boolean().optional(),\n  tenantId: uuid.optional(),\n  organizationId: uuid.optional(),\n})\n\nexport type RuleSetMemberFilter = z.infer<typeof ruleSetMemberFilterSchema>\n\n// Rule Engine Context Schema\nexport const ruleEngineContextSchema = z.looseObject({\n  entityType: z.string().min(1, 'entityType is required'),\n  entityId: z.string().optional(),\n  eventType: z.string().optional(),\n  data: z.any(),\n  user: z.looseObject({\n    id: z.string().optional(),\n    email: z.string().optional(),\n    role: z.string().optional(),\n  }).optional(),\n  tenant: z.looseObject({\n    id: z.string().optional(),\n  }).optional(),\n  organization: z.looseObject({\n    id: z.string().optional(),\n  }).optional(),\n  tenantId: z.uuid('tenantId must be a valid UUID'),\n  organizationId: z.uuid('organizationId must be a valid UUID'),\n  executedBy: z.string().optional(),\n  dryRun: z.boolean().optional(),\n})\n\nexport type RuleEngineContextInput = z.infer<typeof ruleEngineContextSchema>\n\n// Rule Discovery Options Schema\nexport const ruleDiscoveryOptionsSchema = z.object({\n  entityType: z.string().min(1, 'entityType is required'),\n  eventType: z.string().optional(),\n  tenantId: z.uuid('tenantId must be a valid UUID'),\n  organizationId: z.uuid('organizationId must be a valid UUID'),\n  ruleType: ruleTypeSchema.optional(),\n})\n\nexport type RuleDiscoveryOptionsInput = z.infer<typeof ruleDiscoveryOptionsSchema>\n\n// Direct Rule Execution Context Schema (for executing a specific rule by ID)\nexport const directRuleExecutionContextSchema = z.object({\n  ruleId: z.uuid('ruleId must be a valid UUID'),\n  data: z.any(),\n  user: z.looseObject({\n    id: z.string().optional(),\n    email: z.string().optional(),\n    role: z.string().optional(),\n  }).optional(),\n  tenantId: z.uuid('tenantId must be a valid UUID'),\n  organizationId: z.uuid('organizationId must be a valid UUID'),\n  executedBy: z.string().optional(),\n  dryRun: z.boolean().optional(),\n  // See `ruleIdExecutionContextSchema.skipActions`.\n  skipActions: z.boolean().optional(),\n  entityType: z.string().optional(),\n  entityId: z.string().optional(),\n  eventType: z.string().optional(),\n})\n\nexport type DirectRuleExecutionContextInput = z.infer<typeof directRuleExecutionContextSchema>\n\n// Rule ID Execution Context Schema (for executing a specific rule by its string rule_id identifier)\nexport const ruleIdExecutionContextSchema = z.object({\n  ruleId: z.string().min(1, 'ruleId must be a non-empty string').max(50),\n  data: z.any(),\n  user: z.looseObject({\n    id: z.string().optional(),\n    email: z.string().optional(),\n    role: z.string().optional(),\n  }).optional(),\n  tenantId: z.uuid('tenantId must be a valid UUID'),\n  organizationId: z.uuid('organizationId must be a valid UUID'),\n  executedBy: z.string().optional(),\n  dryRun: z.boolean().optional(),\n  // Evaluate the conditions but do not run the rule's success/failure ACTIONS.\n  // `dryRun` only suppresses the execution LOG, so it is not the flag a caller\n  // that must produce no side effects can rely on.\n  skipActions: z.boolean().optional(),\n  entityType: z.string().optional(),\n  entityId: z.string().optional(),\n  eventType: z.string().optional(),\n})\n\nexport type RuleIdExecutionContextInput = z.infer<typeof ruleIdExecutionContextSchema>\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAOP,MAAM,OAAO,EAAE,KAAK;AAGb,MAAM,iBAAiB,EAAE,KAAK,CAAC,SAAS,cAAc,eAAe,UAAU,YAAY,CAAC;AAI5F,MAAM,sBAAsB,EAAE,KAAK,CAAC,cAAc,OAAO,CAAC;AAI1D,MAAM,wBAAwB,EAAE,KAAK,CAAC,OAAO,MAAM,KAAK,CAAC;AAIzD,MAAM,2BAA2B,EAAE,KAAK;AAAA,EAC7C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAIM,MAAM,iBAAiB,EAAE,KAAK,CAAC,UAAU,UAAU,WAAW,QAAQ,SAAS,QAAQ,CAAC;AAIxF,MAAM,sBAAsB,EAAE,KAAK,CAAC,cAAc,cAAc,QAAQ,CAAC;AAIzE,MAAM,wBAAwB,EAAE,KAAK,CAAC,WAAW,WAAW,OAAO,CAAC;AAK3E,SAAS,gCAAgC,GAAkB;AACzD,SAAO,EAAE,IAAI,EACV,SAAS,EACT,SAAS,EACT,YAAY,CAAC,KAAK,QAAQ;AAEzB,QAAI,QAAQ,QAAQ,QAAQ,OAAW;AAGvC,QAAI,CAAC,iBAAiB,GAAG,GAAG;AAC1B,UAAI,SAAS;AAAA,QACX,MAAM,EAAE,aAAa;AAAA,QACrB,SAAS;AAAA,MACX,CAAC;AACD;AAAA,IACF;AAGA,UAAM,SAAS,kCAAkC,KAAK,CAAC;AACvD,QAAI,CAAC,OAAO,OAAO;AACjB,UAAI,SAAS;AAAA,QACX,MAAM,EAAE,aAAa;AAAA,QACrB,SAAS,OAAO,SAAS;AAAA,MAC3B,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AACL;AAEO,MAAM,4BAA4B,gCAAgC;AAIlE,MAAM,eAAe,EAAE,OAAO;AAAA,EACnC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACtB,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC,EAAE,SAAS;AACjD,CAAC;AAED,SAAS,yBAAyB,GAAkB;AAClD,SAAO,EAAE,MAAM,YAAY,EAAE,SAAS,EAAE,SAAS,EAC9C,YAAY,CAAC,KAAK,QAAQ;AAEzB,QAAI,CAAC,OAAQ,MAAM,QAAQ,GAAG,KAAK,IAAI,WAAW,EAAI;AAEtD,UAAM,SAAS,sBAAsB,KAAK,WAAW,CAAC;AACtD,QAAI,CAAC,OAAO,OAAO;AACjB,UAAI,SAAS;AAAA,QACX,MAAM,EAAE,aAAa;AAAA,QACrB,SAAS,OAAO,SAAS;AAAA,MAC3B,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AACL;AAEO,MAAM,qBAAqB,yBAAyB;AAG3D,MAAM,aAAa,EAAE,WAAW,CAAC,UAAU;AACzC,MAAI,UAAU,UAAa,UAAU,QAAQ,UAAU,GAAI,QAAO;AAClE,QAAM,OAAO,iBAAiB,OAAO,QAAQ,IAAI,KAAK,OAAO,KAAK,CAAC;AACnE,SAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,IAAI,OAAO;AAC/C,GAAG,EAAE,KAAK,EAAE,SAAS,CAAC;AAKf,MAAM,uCACX;AAEF,SAAS,aAAa,OAA6B;AACjD,MAAI,UAAU,UAAa,UAAU,QAAQ,UAAU,GAAI,QAAO;AAClE,MAAI,iBAAiB,KAAM,QAAO,OAAO,MAAM,MAAM,QAAQ,CAAC,IAAI,OAAO;AACzE,QAAM,SAAS,IAAI,KAAK,OAAO,KAAK,CAAC;AACrC,SAAO,OAAO,MAAM,OAAO,QAAQ,CAAC,IAAI,OAAO;AACjD;AAEO,SAAS,yBACd,MACA,KACA,UAAkB,sCACZ;AACN,QAAM,OAAO,aAAa,KAAK,aAAa;AAC5C,QAAM,KAAK,aAAa,KAAK,WAAW;AACxC,MAAI,SAAS,QAAQ,OAAO,KAAM;AAClC,MAAI,GAAG,QAAQ,KAAK,KAAK,QAAQ,GAAG;AAClC,QAAI,SAAS;AAAA,MACX,MAAM,EAAE,aAAa;AAAA,MACrB;AAAA,MACA,MAAM,CAAC,aAAa;AAAA,IACtB,CAAC;AAAA,EACH;AACF;AAGA,MAAM,yBAAyB;AAAA,EAC7B,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;AAAA,EAChC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACnC,aAAa,EAAE,OAAO,EAAE,IAAI,GAAI,EAAE,SAAS,EAAE,SAAS;AAAA,EACtD,UAAU;AAAA,EACV,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS;AAAA,EACrD,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;AAAA,EACpC,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS;AAAA,EAClD,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA,EAC5C,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,SAAS,EAAE,QAAQ,GAAG;AAAA,EAClE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC;AAAA,EACrD,eAAe,WAAW,SAAS;AAAA,EACnC,aAAa,WAAW,SAAS;AAAA,EACjC,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS;AACpD;AAGO,MAAM,2BAA2B,EACrC,OAAO;AAAA,EACN,GAAG;AAAA,EACH,qBAAqB,0BAA0B,SAAS,EAAE,SAAS;AAAA,EACnE,gBAAgB;AAAA,EAChB,gBAAgB;AAClB,CAAC,EACA,YAAY,CAAC,MAAM,QAAQ,yBAAyB,MAAM,GAAG,CAAC;AAI1D,MAAM,2BAA2B,EACrC,OAAO;AAAA,EACN,GAAG;AAAA,EACH,qBAAqB,0BAA0B,SAAS,EAAE,SAAS;AAAA,EACnE,gBAAgB;AAAA,EAChB,gBAAgB;AAClB,CAAC,EACA,KAAK,EAAE,UAAU,MAAM,gBAAgB,MAAM,WAAW,KAAK,CAAC,EAC9D,QAAQ,EACR,OAAO,EAAE,IAAI,KAAK,CAAC,EACnB,YAAY,CAAC,MAAM,QAAQ,yBAAyB,MAAM,GAAG,CAAC;AAK1D,SAAS,kCAAkC,GAAiB;AACjE,QAAM,kBAAkB,gCAAgC,CAAC;AACzD,QAAM,gBAAgB,yBAAyB,CAAC;AAChD,QAAM,UAAU,EAAE,wDAAwD;AAC1E,SAAO,EACJ,OAAO;AAAA,IACN,GAAG;AAAA,IACH,qBAAqB,gBAAgB,SAAS,EAAE,SAAS;AAAA,IACzD,gBAAgB;AAAA,IAChB,gBAAgB;AAAA,EAClB,CAAC,EACA,YAAY,CAAC,MAAM,QAAQ,yBAAyB,MAAM,KAAK,OAAO,CAAC;AAC5E;AAEO,SAAS,wCAAwC,GAAiB;AACvE,QAAM,kBAAkB,gCAAgC,CAAC;AACzD,QAAM,gBAAgB,yBAAyB,CAAC;AAChD,QAAM,UAAU,EAAE,wDAAwD;AAC1E,SAAO,EACJ,OAAO;AAAA,IACN,GAAG;AAAA,IACH,qBAAqB,gBAAgB,SAAS,EAAE,SAAS;AAAA,IACzD,gBAAgB;AAAA,IAChB,gBAAgB;AAAA,EAClB,CAAC,EACA,KAAK,EAAE,UAAU,MAAM,gBAAgB,MAAM,WAAW,KAAK,CAAC,EAC9D,QAAQ,EACR,OAAO,EAAE,IAAI,KAAK,CAAC,EACnB,YAAY,CAAC,MAAM,QAAQ,yBAAyB,MAAM,KAAK,OAAO,CAAC;AAC5E;AAGO,MAAM,2BAA2B,EAAE,OAAO;AAAA,EAC/C,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,UAAU,eAAe,SAAS;AAAA,EAClC,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,QAAQ,EAAE,SAAS;AAAA,EAC9B,UAAU,KAAK,SAAS;AAAA,EACxB,gBAAgB,KAAK,SAAS;AAChC,CAAC;AAKM,MAAM,+BAA+B,EAAE,OAAO;AAAA,EACnD,QAAQ;AAAA,EACR,UAAU;AAAA,EACV,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;AAAA,EACpC,iBAAiB;AAAA,EACjB,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1C,eAAe,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,EAC3C,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC7C,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,EACvC,YAAY,EAAE,KAAK,EAAE,SAAS;AAAA,EAC9B,UAAU;AAAA,EACV,gBAAgB,KAAK,SAAS,EAAE,SAAS;AAAA,EACzC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS;AACrD,CAAC;AAKM,MAAM,+BAA+B,EAAE,OAAO;AAAA,EACnD,QAAQ,KAAK,SAAS;AAAA,EACtB,UAAU,KAAK,SAAS;AAAA,EACxB,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,iBAAiB,sBAAsB,SAAS;AAAA,EAChD,UAAU,KAAK,SAAS;AAAA,EACxB,gBAAgB,KAAK,SAAS;AAAA,EAC9B,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,gBAAgB,EAAE,KAAK,EAAE,SAAS;AAAA,EAClC,cAAc,EAAE,KAAK,EAAE,SAAS;AAClC,CAAC;AAKM,MAAM,sBAAsB,EAAE,OAAO;AAAA,EAC1C,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;AAAA,EAC/B,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAClC,aAAa,EAAE,OAAO,EAAE,IAAI,GAAI,EAAE,SAAS,EAAE,SAAS;AAAA,EACtD,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA,EAC5C,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS;AACpD,CAAC;AAKM,MAAM,sBAAsB,oBAChC,KAAK,EAAE,UAAU,MAAM,gBAAgB,MAAM,WAAW,KAAK,CAAC,EAC9D,QAAQ,EACR,OAAO,EAAE,IAAI,KAAK,CAAC;AAKf,MAAM,sBAAsB,EAAE,OAAO;AAAA,EAC1C,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,SAAS,EAAE,QAAQ,EAAE,SAAS;AAAA,EAC9B,UAAU,KAAK,SAAS;AAAA,EACxB,gBAAgB,KAAK,SAAS;AAChC,CAAC;AAKM,MAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,WAAW;AAAA,EACX,QAAQ;AAAA,EACR,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC;AAAA,EACtD,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA,EAC5C,UAAU;AAAA,EACV,gBAAgB;AAClB,CAAC;AAKM,MAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,IAAI;AAAA,EACJ,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAC3C,SAAS,EAAE,QAAQ,EAAE,SAAS;AAChC,CAAC;AAKM,MAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,WAAW,KAAK,SAAS;AAAA,EACzB,QAAQ,KAAK,SAAS;AAAA,EACtB,SAAS,EAAE,QAAQ,EAAE,SAAS;AAAA,EAC9B,UAAU,KAAK,SAAS;AAAA,EACxB,gBAAgB,KAAK,SAAS;AAChC,CAAC;AAKM,MAAM,0BAA0B,EAAE,YAAY;AAAA,EACnD,YAAY,EAAE,OAAO,EAAE,IAAI,GAAG,wBAAwB;AAAA,EACtD,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,MAAM,EAAE,IAAI;AAAA,EACZ,MAAM,EAAE,YAAY;AAAA,IAClB,IAAI,EAAE,OAAO,EAAE,SAAS;AAAA,IACxB,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,IAC3B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,CAAC,EAAE,SAAS;AAAA,EACZ,QAAQ,EAAE,YAAY;AAAA,IACpB,IAAI,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,CAAC,EAAE,SAAS;AAAA,EACZ,cAAc,EAAE,YAAY;AAAA,IAC1B,IAAI,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,CAAC,EAAE,SAAS;AAAA,EACZ,UAAU,EAAE,KAAK,+BAA+B;AAAA,EAChD,gBAAgB,EAAE,KAAK,qCAAqC;AAAA,EAC5D,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,QAAQ,EAAE,QAAQ,EAAE,SAAS;AAC/B,CAAC;AAKM,MAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,YAAY,EAAE,OAAO,EAAE,IAAI,GAAG,wBAAwB;AAAA,EACtD,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,UAAU,EAAE,KAAK,+BAA+B;AAAA,EAChD,gBAAgB,EAAE,KAAK,qCAAqC;AAAA,EAC5D,UAAU,eAAe,SAAS;AACpC,CAAC;AAKM,MAAM,mCAAmC,EAAE,OAAO;AAAA,EACvD,QAAQ,EAAE,KAAK,6BAA6B;AAAA,EAC5C,MAAM,EAAE,IAAI;AAAA,EACZ,MAAM,EAAE,YAAY;AAAA,IAClB,IAAI,EAAE,OAAO,EAAE,SAAS;AAAA,IACxB,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,IAC3B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,CAAC,EAAE,SAAS;AAAA,EACZ,UAAU,EAAE,KAAK,+BAA+B;AAAA,EAChD,gBAAgB,EAAE,KAAK,qCAAqC;AAAA,EAC5D,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,QAAQ,EAAE,QAAQ,EAAE,SAAS;AAAA;AAAA,EAE7B,aAAa,EAAE,QAAQ,EAAE,SAAS;AAAA,EAClC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,WAAW,EAAE,OAAO,EAAE,SAAS;AACjC,CAAC;AAKM,MAAM,+BAA+B,EAAE,OAAO;AAAA,EACnD,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAG,mCAAmC,EAAE,IAAI,EAAE;AAAA,EACrE,MAAM,EAAE,IAAI;AAAA,EACZ,MAAM,EAAE,YAAY;AAAA,IAClB,IAAI,EAAE,OAAO,EAAE,SAAS;AAAA,IACxB,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,IAC3B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,CAAC,EAAE,SAAS;AAAA,EACZ,UAAU,EAAE,KAAK,+BAA+B;AAAA,EAChD,gBAAgB,EAAE,KAAK,qCAAqC;AAAA,EAC5D,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,QAAQ,EAAE,QAAQ,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA,EAI7B,aAAa,EAAE,QAAQ,EAAE,SAAS;AAAA,EAClC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,WAAW,EAAE,OAAO,EAAE,SAAS;AACjC,CAAC;",
   "names": []
 }

package/dist/modules/business_rules/lib/rule-engine.js

@@ -258,7 +258,7 @@ async function executeSingleRule(em, rule, context, options = {}) {
       }
       const actions = result.conditionsPassed ? rule.successActions : rule.failureActions;
       let actionsExecuted = null;
-      if (actions && Array.isArray(actions) && actions.length > 0) {
+      if (actions && Array.isArray(actions) && actions.length > 0 && !context.skipActions) {
         const actionContext = {
           ...evalContext,
           data: context.data,
@@ -451,7 +451,8 @@ async function executeRuleById(em, context) {
     tenantId: context.tenantId,
     organizationId: context.organizationId,
     executedBy: context.executedBy,
-    dryRun: context.dryRun
+    dryRun: context.dryRun,
+    skipActions: context.skipActions
   };
   const result = await executeSingleRule(em, rule, engineContext);
   return {
@@ -541,7 +542,8 @@ async function executeRuleByRuleId(em, context) {
     tenantId: context.tenantId,
     organizationId: context.organizationId,
     executedBy: context.executedBy,
-    dryRun: context.dryRun
+    dryRun: context.dryRun,
+    skipActions: context.skipActions
   };
   const result = await executeSingleRule(em, rule, engineContext);
   return {