@open-mercato/core 0.8.1-develop.7296.1.2111d779db → 0.9.0

package/dist/modules/workflows/api/instances/[id]/advance/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/workflows/api/instances/%5Bid%5D/advance/route.ts"],
-  "sourcesContent": ["/**\n * POST /api/workflows/instances/:id/advance\n *\n * Manually advance a workflow instance to the next step\n * Useful for:\n * - Manual workflow progression in demos\n * - Step-by-step testing\n * - User-triggered transitions\n * - Manual approval flows\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { WorkflowInstance } from '../../../../data/entities'\nimport * as workflowExecutor from '../../../../lib/workflow-executor'\nimport * as stepHandler from '../../../../lib/step-handler'\nimport * as transitionHandler from '../../../../lib/transition-handler'\nimport { z } from 'zod'\nimport {\n  workflowsTag,\n  advanceWorkflowRequestSchema,\n  advanceWorkflowResponseSchema,\n  workflowErrorSchema,\n} from '../../../openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows')\n\n// Validation schema\nconst advanceWorkflowSchema = z.object({\n  toStepId: z.string().optional(), // Optional - will auto-select if not provided\n  triggerData: z.record(z.string(), z.any()).optional(), // Optional trigger data\n  contextUpdates: z.record(z.string(), z.any()).optional(), // Optional context updates\n})\n\ntype AdvanceWorkflowInput = z.infer<typeof advanceWorkflowSchema>\n\ninterface RouteContext {\n  params: Promise<{\n    id: string\n  }>\n}\n\n/**\n * POST /api/workflows/instances/:id/advance\n *\n * Advance workflow to next step\n */\nexport async function POST(request: NextRequest, context: RouteContext) {\n  try {\n    const container = await createRequestContainer()\n    const em = container.resolve<EntityManager>('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = scope?.selectedId ?? auth.orgId\n\n    if (!tenantId || !organizationId) {\n      return NextResponse.json(\n        { error: 'Missing tenant or organization context' },\n        { status: 400 }\n      )\n    }\n\n    // Get instance ID from params\n    const params = await context.params\n    const instanceId = params.id\n\n    // Load and verify instance\n    const instance = await em.findOne(WorkflowInstance, {\n      id: instanceId,\n      tenantId,\n      organizationId,\n    })\n\n    if (!instance) {\n      return NextResponse.json(\n        { error: 'Workflow instance not found' },\n        { status: 404 }\n      )\n    }\n\n    // Check permission\n    const rbacService = container.resolve('rbacService')\n    const hasPermission = await rbacService.userHasAllFeatures(\n      auth.sub,\n      ['workflows.instances.create'], // Using create permission for advancing\n      { tenantId, organizationId }\n    )\n\n    if (!hasPermission) {\n      return NextResponse.json(\n        { error: 'Insufficient permissions' },\n        { status: 403 }\n      )\n    }\n\n    // Parse request body\n    const body = await request.json().catch(() => ({}))\n    const validation = advanceWorkflowSchema.safeParse(body)\n\n    if (!validation.success) {\n      return NextResponse.json(\n        {\n          error: 'Validation failed',\n          details: validation.error.issues,\n        },\n        { status: 400 }\n      )\n    }\n\n    const input: AdvanceWorkflowInput = validation.data\n\n    // Check workflow status\n    if (instance.status === 'COMPLETED') {\n      return NextResponse.json(\n        { error: 'Workflow already completed' },\n        { status: 400 }\n      )\n    }\n\n    if (instance.status === 'CANCELLED') {\n      return NextResponse.json(\n        { error: 'Workflow is cancelled' },\n        { status: 400 }\n      )\n    }\n\n    if (instance.status === 'FAILED') {\n      return NextResponse.json(\n        { error: 'Workflow has failed. Use retry endpoint to retry.' },\n        { status: 400 }\n      )\n    }\n\n    // Apply context updates if provided\n    if (input.contextUpdates) {\n      await workflowExecutor.updateWorkflowContext(\n        em,\n        instanceId,\n        input.contextUpdates\n      )\n      await em.flush()\n    }\n\n    // Build evaluation context\n    const evalContext: transitionHandler.TransitionEvaluationContext = {\n      workflowContext: instance.context,\n      userId: auth.sub,\n      triggerData: input.triggerData,\n    }\n\n    // Find valid transitions from current step\n    const validTransitions = await transitionHandler.findValidTransitions(\n      em,\n      instance,\n      instance.currentStepId!,\n      evalContext\n    )\n\n    const validTransitionsList = validTransitions.filter((t) => t.isValid)\n\n    if (validTransitionsList.length === 0) {\n      return NextResponse.json(\n        {\n          error: 'No valid transitions available',\n          currentStepId: instance.currentStepId,\n          reason: 'All transitions blocked by conditions or business rules',\n        },\n        { status: 400 }\n      )\n    }\n\n    // Select transition\n    let selectedTransition: any\n    if (input.toStepId) {\n      // User specified target step\n      const matchingTransition = validTransitionsList.find(\n        (t) => t.transition?.toStepId === input.toStepId\n      )\n\n      if (!matchingTransition) {\n        return NextResponse.json(\n          {\n            error: `No valid transition to step '${input.toStepId}'`,\n            availableTransitions: validTransitionsList.map((t) => ({\n              toStepId: t.transition?.toStepId,\n              toStepName: t.transition?.toStepName,\n            })),\n          },\n          { status: 400 }\n        )\n      }\n\n      selectedTransition = matchingTransition.transition\n    } else {\n      // Auto-select first valid transition\n      selectedTransition = validTransitionsList[0].transition\n    }\n\n    // Execute transition\n    const execContext: transitionHandler.TransitionExecutionContext = {\n      workflowContext: instance.context,\n      userId: auth.sub,\n      triggerData: input.triggerData,\n    }\n\n    const transitionResult = await transitionHandler.executeTransition(\n      em,\n      container,\n      instance,\n      selectedTransition.fromStepId,\n      selectedTransition.toStepId,\n      execContext\n    )\n\n    if (!transitionResult.success) {\n      return NextResponse.json(\n        {\n          error: 'Transition failed',\n          reason: transitionResult.error || 'Unknown error',\n        },\n        { status: 400 }\n      )\n    }\n\n    // Reload instance to get updated state\n    await em.refresh(instance)\n\n    // Execute workflow to check if we can auto-progress further\n    const executionResult = await workflowExecutor.executeWorkflow(\n      em,\n      container,\n      instanceId,\n      {\n        userId: auth.sub,\n      }\n    )\n\n    return NextResponse.json(\n      {\n        data: {\n          instance: {\n            id: instance.id,\n            status: instance.status,\n            currentStepId: instance.currentStepId,\n            previousStepId: selectedTransition.fromStepId,\n            transitionFired: selectedTransition.transitionId,\n            context: instance.context,\n          },\n          execution: executionResult,\n        },\n        message: 'Workflow advanced successfully',\n      },\n      { status: 200 }\n    )\n  } catch (error) {\n    logger.error('Error advancing workflow', { err: error })\n\n    if (error instanceof Error) {\n      return NextResponse.json(\n        {\n          error: 'Failed to advance workflow',\n          message: error.message,\n        },\n        { status: 500 }\n      )\n    }\n\n    return NextResponse.json(\n      { error: 'Failed to advance workflow' },\n      { status: 500 }\n    )\n  }\n}\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.instances.create'],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: workflowsTag,\n  summary: 'Advance workflow instance',\n  methods: {\n    POST: {\n      summary: 'Manually advance workflow to next step',\n      description: 'Manually advance a workflow instance to the next step. Useful for manual progression, step-by-step testing, user-triggered transitions, and approval flows. Validates transitions and auto-progresses if possible.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: advanceWorkflowRequestSchema,\n      },\n      responses: [\n        { status: 200, description: 'Workflow advanced successfully', schema: advanceWorkflowResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid request, no valid transitions, or workflow already completed/cancelled/failed', schema: workflowErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: workflowErrorSchema },\n        { status: 403, description: 'Insufficient permissions', schema: workflowErrorSchema },\n        { status: 404, description: 'Workflow instance not found', schema: workflowErrorSchema },\n        { status: 500, description: 'Internal server error', schema: workflowErrorSchema },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAWA,SAAsB,oBAAoB;AAE1C,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AAEnD,SAAS,wBAAwB;AACjC,YAAY,sBAAsB;AAElC,YAAY,uBAAuB;AACnC,SAAS,SAAS;AAClB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAGvC,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAC9B,aAAa,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA;AAAA,EACpD,gBAAgB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA;AACzD,CAAC;AAeD,eAAsB,KAAK,SAAsB,SAAuB;AACtE,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAuB,IAAI;AAChD,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,OAAO,cAAc,KAAK;AAEjD,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,yCAAyC;AAAA,QAClD,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,SAAS,MAAM,QAAQ;AAC7B,UAAM,aAAa,OAAO;AAG1B,UAAM,WAAW,MAAM,GAAG,QAAQ,kBAAkB;AAAA,MAClD,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,IACF,CAAC;AAED,QAAI,CAAC,UAAU;AACb,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,8BAA8B;AAAA,QACvC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,gBAAgB,MAAM,YAAY;AAAA,MACtC,KAAK;AAAA,MACL,CAAC,4BAA4B;AAAA;AAAA,MAC7B,EAAE,UAAU,eAAe;AAAA,IAC7B;AAEA,QAAI,CAAC,eAAe;AAClB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,2BAA2B;AAAA,QACpC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,OAAO,MAAM,QAAQ,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAClD,UAAM,aAAa,sBAAsB,UAAU,IAAI;AAEvD,QAAI,CAAC,WAAW,SAAS;AACvB,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO;AAAA,UACP,SAAS,WAAW,MAAM;AAAA,QAC5B;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,QAA8B,WAAW;AAG/C,QAAI,SAAS,WAAW,aAAa;AACnC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,6BAA6B;AAAA,QACtC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,QAAI,SAAS,WAAW,aAAa;AACnC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,wBAAwB;AAAA,QACjC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,QAAI,SAAS,WAAW,UAAU;AAChC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,oDAAoD;AAAA,QAC7D,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,QAAI,MAAM,gBAAgB;AACxB,YAAM,iBAAiB;AAAA,QACrB;AAAA,QACA;AAAA,QACA,MAAM;AAAA,MACR;AACA,YAAM,GAAG,MAAM;AAAA,IACjB;AAGA,UAAM,cAA6D;AAAA,MACjE,iBAAiB,SAAS;AAAA,MAC1B,QAAQ,KAAK;AAAA,MACb,aAAa,MAAM;AAAA,IACrB;AAGA,UAAM,mBAAmB,MAAM,kBAAkB;AAAA,MAC/C;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT;AAAA,IACF;AAEA,UAAM,uBAAuB,iBAAiB,OAAO,CAAC,MAAM,EAAE,OAAO;AAErE,QAAI,qBAAqB,WAAW,GAAG;AACrC,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO;AAAA,UACP,eAAe,SAAS;AAAA,UACxB,QAAQ;AAAA,QACV;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,QAAI;AACJ,QAAI,MAAM,UAAU;AAElB,YAAM,qBAAqB,qBAAqB;AAAA,QAC9C,CAAC,MAAM,EAAE,YAAY,aAAa,MAAM;AAAA,MAC1C;AAEA,UAAI,CAAC,oBAAoB;AACvB,eAAO,aAAa;AAAA,UAClB;AAAA,YACE,OAAO,gCAAgC,MAAM,QAAQ;AAAA,YACrD,sBAAsB,qBAAqB,IAAI,CAAC,OAAO;AAAA,cACrD,UAAU,EAAE,YAAY;AAAA,cACxB,YAAY,EAAE,YAAY;AAAA,YAC5B,EAAE;AAAA,UACJ;AAAA,UACA,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAEA,2BAAqB,mBAAmB;AAAA,IAC1C,OAAO;AAEL,2BAAqB,qBAAqB,CAAC,EAAE;AAAA,IAC/C;AAGA,UAAM,cAA4D;AAAA,MAChE,iBAAiB,SAAS;AAAA,MAC1B,QAAQ,KAAK;AAAA,MACb,aAAa,MAAM;AAAA,IACrB;AAEA,UAAM,mBAAmB,MAAM,kBAAkB;AAAA,MAC/C;AAAA,MACA;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,mBAAmB;AAAA,MACnB;AAAA,IACF;AAEA,QAAI,CAAC,iBAAiB,SAAS;AAC7B,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO;AAAA,UACP,QAAQ,iBAAiB,SAAS;AAAA,QACpC;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,GAAG,QAAQ,QAAQ;AAGzB,UAAM,kBAAkB,MAAM,iBAAiB;AAAA,MAC7C;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,QACE,QAAQ,KAAK;AAAA,MACf;AAAA,IACF;AAEA,WAAO,aAAa;AAAA,MAClB;AAAA,QACE,MAAM;AAAA,UACJ,UAAU;AAAA,YACR,IAAI,SAAS;AAAA,YACb,QAAQ,SAAS;AAAA,YACjB,eAAe,SAAS;AAAA,YACxB,gBAAgB,mBAAmB;AAAA,YACnC,iBAAiB,mBAAmB;AAAA,YACpC,SAAS,SAAS;AAAA,UACpB;AAAA,UACA,WAAW;AAAA,QACb;AAAA,QACA,SAAS;AAAA,MACX;AAAA,MACA,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF,SAAS,OAAO;AACd,WAAO,MAAM,4BAA4B,EAAE,KAAK,MAAM,CAAC;AAEvD,QAAI,iBAAiB,OAAO;AAC1B,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO;AAAA,UACP,SAAS,MAAM;AAAA,QACjB;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,6BAA6B;AAAA,MACtC,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,4BAA4B;AAChD;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,kCAAkC,QAAQ,8BAA8B;AAAA,MACtG;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,yFAAyF,QAAQ,oBAAoB;AAAA,QACjJ,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,oBAAoB;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,+BAA+B,QAAQ,oBAAoB;AAAA,QACvF,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,oBAAoB;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["/**\n * POST /api/workflows/instances/:id/advance\n *\n * Manually advance a workflow instance to the next step\n * Useful for:\n * - Manual workflow progression in demos\n * - Step-by-step testing\n * - User-triggered transitions\n * - Manual approval flows\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveSingleOrganizationIdOrDeny } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { WorkflowInstance } from '../../../../data/entities'\nimport * as workflowExecutor from '../../../../lib/workflow-executor'\nimport * as stepHandler from '../../../../lib/step-handler'\nimport * as transitionHandler from '../../../../lib/transition-handler'\nimport { z } from 'zod'\nimport {\n  workflowsTag,\n  advanceWorkflowRequestSchema,\n  advanceWorkflowResponseSchema,\n  workflowErrorSchema,\n} from '../../../openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\n\nconst logger = createLogger('workflows')\n\n// Validation schema\nconst advanceWorkflowSchema = z.object({\n  toStepId: z.string().optional(), // Optional - will auto-select if not provided\n  triggerData: z.record(z.string(), z.any()).optional(), // Optional trigger data\n  contextUpdates: z.record(z.string(), z.any()).optional(), // Optional context updates\n})\n\ntype AdvanceWorkflowInput = z.infer<typeof advanceWorkflowSchema>\n\ninterface RouteContext {\n  params: Promise<{\n    id: string\n  }>\n}\n\n/**\n * POST /api/workflows/instances/:id/advance\n *\n * Advance workflow to next step\n */\nexport async function POST(request: NextRequest, context: RouteContext) {\n  try {\n    const container = await createRequestContainer()\n    const em = container.resolve<EntityManager>('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = resolveSingleOrganizationIdOrDeny(scope, auth)\n\n    if (!tenantId || !organizationId) {\n      return NextResponse.json(\n        { error: 'Missing tenant or organization context' },\n        { status: 400 }\n      )\n    }\n\n    // Get instance ID from params\n    const params = await context.params\n    const instanceId = params.id\n\n    // Load and verify instance\n    const instance = await em.findOne(WorkflowInstance, {\n      id: instanceId,\n      tenantId,\n      organizationId,\n    })\n\n    if (!instance) {\n      return NextResponse.json(\n        { error: 'Workflow instance not found' },\n        { status: 404 }\n      )\n    }\n\n    // Check permission\n    const rbacService = container.resolve('rbacService')\n    const hasPermission = await rbacService.userHasAllFeatures(\n      auth.sub,\n      ['workflows.instances.create'], // Using create permission for advancing\n      { tenantId, organizationId }\n    )\n\n    if (!hasPermission) {\n      return NextResponse.json(\n        { error: 'Insufficient permissions' },\n        { status: 403 }\n      )\n    }\n\n    // Parse request body\n    const body = await request.json().catch(() => ({}))\n    const validation = advanceWorkflowSchema.safeParse(body)\n\n    if (!validation.success) {\n      return NextResponse.json(\n        {\n          error: 'Validation failed',\n          details: validation.error.issues,\n        },\n        { status: 400 }\n      )\n    }\n\n    const input: AdvanceWorkflowInput = validation.data\n\n    // Check workflow status\n    if (instance.status === 'COMPLETED') {\n      return NextResponse.json(\n        { error: 'Workflow already completed' },\n        { status: 400 }\n      )\n    }\n\n    if (instance.status === 'CANCELLED') {\n      return NextResponse.json(\n        { error: 'Workflow is cancelled' },\n        { status: 400 }\n      )\n    }\n\n    if (instance.status === 'FAILED') {\n      return NextResponse.json(\n        { error: 'Workflow has failed. Use retry endpoint to retry.' },\n        { status: 400 }\n      )\n    }\n\n    // Apply context updates if provided\n    if (input.contextUpdates) {\n      await workflowExecutor.updateWorkflowContext(\n        em,\n        instanceId,\n        input.contextUpdates\n      )\n      await em.flush()\n    }\n\n    // Build evaluation context\n    const evalContext: transitionHandler.TransitionEvaluationContext = {\n      workflowContext: instance.context,\n      userId: auth.sub,\n      triggerData: input.triggerData,\n    }\n\n    // Find valid transitions from current step\n    const validTransitions = await transitionHandler.findValidTransitions(\n      em,\n      instance,\n      instance.currentStepId!,\n      evalContext\n    )\n\n    const validTransitionsList = validTransitions.filter((t) => t.isValid)\n\n    if (validTransitionsList.length === 0) {\n      return NextResponse.json(\n        {\n          error: 'No valid transitions available',\n          currentStepId: instance.currentStepId,\n          reason: 'All transitions blocked by conditions or business rules',\n        },\n        { status: 400 }\n      )\n    }\n\n    // Select transition\n    let selectedTransition: any\n    if (input.toStepId) {\n      // User specified target step\n      const matchingTransition = validTransitionsList.find(\n        (t) => t.transition?.toStepId === input.toStepId\n      )\n\n      if (!matchingTransition) {\n        return NextResponse.json(\n          {\n            error: `No valid transition to step '${input.toStepId}'`,\n            availableTransitions: validTransitionsList.map((t) => ({\n              toStepId: t.transition?.toStepId,\n              toStepName: t.transition?.toStepName,\n            })),\n          },\n          { status: 400 }\n        )\n      }\n\n      selectedTransition = matchingTransition.transition\n    } else {\n      // Auto-select first valid transition\n      selectedTransition = validTransitionsList[0].transition\n    }\n\n    // Execute transition\n    const execContext: transitionHandler.TransitionExecutionContext = {\n      workflowContext: instance.context,\n      userId: auth.sub,\n      triggerData: input.triggerData,\n    }\n\n    const transitionResult = await transitionHandler.executeTransition(\n      em,\n      container,\n      instance,\n      selectedTransition.fromStepId,\n      selectedTransition.toStepId,\n      execContext\n    )\n\n    if (!transitionResult.success) {\n      return NextResponse.json(\n        {\n          error: 'Transition failed',\n          reason: transitionResult.error || 'Unknown error',\n        },\n        { status: 400 }\n      )\n    }\n\n    // Reload instance to get updated state\n    await em.refresh(instance)\n\n    // Execute workflow to check if we can auto-progress further\n    const executionResult = await workflowExecutor.executeWorkflow(\n      em,\n      container,\n      instanceId,\n      {\n        userId: auth.sub,\n      }\n    )\n\n    return NextResponse.json(\n      {\n        data: {\n          instance: {\n            id: instance.id,\n            status: instance.status,\n            currentStepId: instance.currentStepId,\n            previousStepId: selectedTransition.fromStepId,\n            transitionFired: selectedTransition.transitionId,\n            context: instance.context,\n          },\n          execution: executionResult,\n        },\n        message: 'Workflow advanced successfully',\n      },\n      { status: 200 }\n    )\n  } catch (error) {\n    if (isCrudHttpError(error)) return NextResponse.json(error.body, { status: error.status })\n    logger.error('Error advancing workflow', { err: error })\n\n    if (error instanceof Error) {\n      return NextResponse.json(\n        {\n          error: 'Failed to advance workflow',\n          message: error.message,\n        },\n        { status: 500 }\n      )\n    }\n\n    return NextResponse.json(\n      { error: 'Failed to advance workflow' },\n      { status: 500 }\n    )\n  }\n}\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.instances.create'],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: workflowsTag,\n  summary: 'Advance workflow instance',\n  methods: {\n    POST: {\n      summary: 'Manually advance workflow to next step',\n      description: 'Manually advance a workflow instance to the next step. Useful for manual progression, step-by-step testing, user-triggered transitions, and approval flows. Validates transitions and auto-progresses if possible.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: advanceWorkflowRequestSchema,\n      },\n      responses: [\n        { status: 200, description: 'Workflow advanced successfully', schema: advanceWorkflowResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid request, no valid transitions, or workflow already completed/cancelled/failed', schema: workflowErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: workflowErrorSchema },\n        { status: 403, description: 'Insufficient permissions', schema: workflowErrorSchema },\n        { status: 404, description: 'Workflow instance not found', schema: workflowErrorSchema },\n        { status: 500, description: 'Internal server error', schema: workflowErrorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAWA,SAAsB,oBAAoB;AAE1C,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,yCAAyC;AAElD,SAAS,wBAAwB;AACjC,YAAY,sBAAsB;AAElC,YAAY,uBAAuB;AACnC,SAAS,SAAS;AAClB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAC7B,SAAS,uBAAuB;AAEhC,MAAM,SAAS,aAAa,WAAW;AAGvC,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAC9B,aAAa,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA;AAAA,EACpD,gBAAgB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA;AACzD,CAAC;AAeD,eAAsB,KAAK,SAAsB,SAAuB;AACtE,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAuB,IAAI;AAChD,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,kCAAkC,OAAO,IAAI;AAEpE,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,yCAAyC;AAAA,QAClD,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,SAAS,MAAM,QAAQ;AAC7B,UAAM,aAAa,OAAO;AAG1B,UAAM,WAAW,MAAM,GAAG,QAAQ,kBAAkB;AAAA,MAClD,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,IACF,CAAC;AAED,QAAI,CAAC,UAAU;AACb,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,8BAA8B;AAAA,QACvC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,gBAAgB,MAAM,YAAY;AAAA,MACtC,KAAK;AAAA,MACL,CAAC,4BAA4B;AAAA;AAAA,MAC7B,EAAE,UAAU,eAAe;AAAA,IAC7B;AAEA,QAAI,CAAC,eAAe;AAClB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,2BAA2B;AAAA,QACpC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,OAAO,MAAM,QAAQ,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAClD,UAAM,aAAa,sBAAsB,UAAU,IAAI;AAEvD,QAAI,CAAC,WAAW,SAAS;AACvB,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO;AAAA,UACP,SAAS,WAAW,MAAM;AAAA,QAC5B;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,QAA8B,WAAW;AAG/C,QAAI,SAAS,WAAW,aAAa;AACnC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,6BAA6B;AAAA,QACtC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,QAAI,SAAS,WAAW,aAAa;AACnC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,wBAAwB;AAAA,QACjC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,QAAI,SAAS,WAAW,UAAU;AAChC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,oDAAoD;AAAA,QAC7D,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,QAAI,MAAM,gBAAgB;AACxB,YAAM,iBAAiB;AAAA,QACrB;AAAA,QACA;AAAA,QACA,MAAM;AAAA,MACR;AACA,YAAM,GAAG,MAAM;AAAA,IACjB;AAGA,UAAM,cAA6D;AAAA,MACjE,iBAAiB,SAAS;AAAA,MAC1B,QAAQ,KAAK;AAAA,MACb,aAAa,MAAM;AAAA,IACrB;AAGA,UAAM,mBAAmB,MAAM,kBAAkB;AAAA,MAC/C;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT;AAAA,IACF;AAEA,UAAM,uBAAuB,iBAAiB,OAAO,CAAC,MAAM,EAAE,OAAO;AAErE,QAAI,qBAAqB,WAAW,GAAG;AACrC,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO;AAAA,UACP,eAAe,SAAS;AAAA,UACxB,QAAQ;AAAA,QACV;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,QAAI;AACJ,QAAI,MAAM,UAAU;AAElB,YAAM,qBAAqB,qBAAqB;AAAA,QAC9C,CAAC,MAAM,EAAE,YAAY,aAAa,MAAM;AAAA,MAC1C;AAEA,UAAI,CAAC,oBAAoB;AACvB,eAAO,aAAa;AAAA,UAClB;AAAA,YACE,OAAO,gCAAgC,MAAM,QAAQ;AAAA,YACrD,sBAAsB,qBAAqB,IAAI,CAAC,OAAO;AAAA,cACrD,UAAU,EAAE,YAAY;AAAA,cACxB,YAAY,EAAE,YAAY;AAAA,YAC5B,EAAE;AAAA,UACJ;AAAA,UACA,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAEA,2BAAqB,mBAAmB;AAAA,IAC1C,OAAO;AAEL,2BAAqB,qBAAqB,CAAC,EAAE;AAAA,IAC/C;AAGA,UAAM,cAA4D;AAAA,MAChE,iBAAiB,SAAS;AAAA,MAC1B,QAAQ,KAAK;AAAA,MACb,aAAa,MAAM;AAAA,IACrB;AAEA,UAAM,mBAAmB,MAAM,kBAAkB;AAAA,MAC/C;AAAA,MACA;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,mBAAmB;AAAA,MACnB;AAAA,IACF;AAEA,QAAI,CAAC,iBAAiB,SAAS;AAC7B,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO;AAAA,UACP,QAAQ,iBAAiB,SAAS;AAAA,QACpC;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,GAAG,QAAQ,QAAQ;AAGzB,UAAM,kBAAkB,MAAM,iBAAiB;AAAA,MAC7C;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,QACE,QAAQ,KAAK;AAAA,MACf;AAAA,IACF;AAEA,WAAO,aAAa;AAAA,MAClB;AAAA,QACE,MAAM;AAAA,UACJ,UAAU;AAAA,YACR,IAAI,SAAS;AAAA,YACb,QAAQ,SAAS;AAAA,YACjB,eAAe,SAAS;AAAA,YACxB,gBAAgB,mBAAmB;AAAA,YACnC,iBAAiB,mBAAmB;AAAA,YACpC,SAAS,SAAS;AAAA,UACpB;AAAA,UACA,WAAW;AAAA,QACb;AAAA,QACA,SAAS;AAAA,MACX;AAAA,MACA,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,EAAG,QAAO,aAAa,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AACzF,WAAO,MAAM,4BAA4B,EAAE,KAAK,MAAM,CAAC;AAEvD,QAAI,iBAAiB,OAAO;AAC1B,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO;AAAA,UACP,SAAS,MAAM;AAAA,QACjB;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,6BAA6B;AAAA,MACtC,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,4BAA4B;AAChD;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,kCAAkC,QAAQ,8BAA8B;AAAA,MACtG;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,yFAAyF,QAAQ,oBAAoB;AAAA,QACjJ,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,oBAAoB;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,+BAA+B,QAAQ,oBAAoB;AAAA,QACvF,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,oBAAoB;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/workflows/api/instances/[id]/cancel/route.js

@@ -3,10 +3,12 @@ import { z } from "zod";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { resolveSingleOrganizationIdOrDeny } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import { WorkflowInstance } from "../../../../data/entities.js";
 import * as workflowExecutor from "../../../../lib/workflow-executor.js";
 import { workflowInstanceResponseSchema } from "../../../openapi.js";
 import { createLogger } from "@open-mercato/shared/lib/logger";
+import { isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 const logger = createLogger("workflows");
 const metadata = {
   requireAuth: true,
@@ -23,7 +25,7 @@ async function POST(request, context) {
     }
     const scope = await resolveOrganizationScopeForRequest({ container, auth, request });
     const tenantId = auth.tenantId;
-    const organizationId = scope?.selectedId ?? auth.orgId;
+    const organizationId = resolveSingleOrganizationIdOrDeny(scope, auth);
     if (!tenantId || !organizationId) {
       return NextResponse.json(
         { error: "Missing tenant or organization context" },
@@ -71,6 +73,7 @@ async function POST(request, context) {
       message: "Workflow cancelled successfully"
     });
   } catch (error) {
+    if (isCrudHttpError(error)) return NextResponse.json(error.body, { status: error.status });
     logger.error("Error cancelling workflow instance", { err: error });
     return NextResponse.json(
       { error: "Failed to cancel workflow instance" },

package/dist/modules/workflows/api/instances/[id]/cancel/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/workflows/api/instances/%5Bid%5D/cancel/route.ts"],
-  "sourcesContent": ["/**\n * Cancel Workflow Instance API\n *\n * Endpoint:\n * - POST /api/workflows/instances/[id]/cancel - Cancel a running workflow instance\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { WorkflowInstance } from '../../../../data/entities'\nimport * as workflowExecutor from '../../../../lib/workflow-executor'\nimport { workflowInstanceResponseSchema } from '../../../openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows')\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.instances.cancel'],\n}\n\ninterface RouteContext {\n  params: Promise<{\n    id: string\n  }>\n}\n\n/**\n * POST /api/workflows/instances/[id]/cancel\n *\n * Cancel a running workflow instance\n */\nexport async function POST(\n  request: NextRequest,\n  context: RouteContext\n) {\n  try {\n    const params = await context.params\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = scope?.selectedId ?? auth.orgId\n\n    if (!tenantId || !organizationId) {\n      return NextResponse.json(\n        { error: 'Missing tenant or organization context' },\n        { status: 400 }\n      )\n    }\n\n    // Check cancel permission\n    const rbacService = container.resolve('rbacService')\n    const hasPermission = await rbacService.userHasAllFeatures(\n      auth.sub,\n      ['workflows.instances.cancel'],\n      {\n        tenantId,\n        organizationId,\n      }\n    )\n\n    if (!hasPermission) {\n      return NextResponse.json(\n        { error: 'Insufficient permissions' },\n        { status: 403 }\n      )\n    }\n\n    const instance = await em.findOne(WorkflowInstance, {\n      id: params.id,\n      tenantId,\n      organizationId,\n    })\n\n    if (!instance) {\n      return NextResponse.json(\n        { error: 'Workflow instance not found' },\n        { status: 404 }\n      )\n    }\n\n    // Check if instance can be cancelled\n    if (instance.status !== 'RUNNING' && instance.status !== 'PAUSED') {\n      return NextResponse.json(\n        {\n          error: `Cannot cancel workflow in ${instance.status} status. Only RUNNING or PAUSED workflows can be cancelled.`,\n        },\n        { status: 400 }\n      )\n    }\n\n    // Cancel the workflow\n    await workflowExecutor.completeWorkflow(em, container, params.id, 'CANCELLED')\n\n    // Reload instance to get updated state\n    await em.refresh(instance)\n\n    return NextResponse.json({\n      data: instance,\n      message: 'Workflow cancelled successfully',\n    })\n  } catch (error) {\n    logger.error('Error cancelling workflow instance', { err: error })\n    return NextResponse.json(\n      { error: 'Failed to cancel workflow instance' },\n      { status: 500 }\n    )\n  }\n}\n\nexport const openApi = {\n  methods: {\n    POST: {\n      summary: 'Cancel workflow instance',\n      description: 'Cancel a running or paused workflow instance. The workflow will be marked as CANCELLED and will not execute further.',\n      tags: ['Workflows'],\n      params: z.object({\n        id: z.string().uuid(),\n      }),\n      responses: [\n        {\n          status: 200,\n          description: 'Workflow cancelled successfully',\n          schema: z.object({\n            data: workflowInstanceResponseSchema,\n            message: z.string(),\n          }),\n        },\n        {\n          status: 400,\n          description: 'Bad request - Workflow cannot be cancelled in current status',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 401,\n          description: 'Unauthorized',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 403,\n          description: 'Forbidden - Insufficient permissions',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 404,\n          description: 'Workflow instance not found',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 500,\n          description: 'Internal server error',\n          schema: z.object({ error: z.string() }),\n        },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAOA,SAAsB,oBAAoB;AAC1C,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,wBAAwB;AACjC,YAAY,sBAAsB;AAClC,SAAS,sCAAsC;AAC/C,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,4BAA4B;AAChD;AAaA,eAAsB,KACpB,SACA,SACA;AACA,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAC7B,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,OAAO,cAAc,KAAK;AAEjD,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,yCAAyC;AAAA,QAClD,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,gBAAgB,MAAM,YAAY;AAAA,MACtC,KAAK;AAAA,MACL,CAAC,4BAA4B;AAAA,MAC7B;AAAA,QACE;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,eAAe;AAClB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,2BAA2B;AAAA,QACpC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,GAAG,QAAQ,kBAAkB;AAAA,MAClD,IAAI,OAAO;AAAA,MACX;AAAA,MACA;AAAA,IACF,CAAC;AAED,QAAI,CAAC,UAAU;AACb,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,8BAA8B;AAAA,QACvC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,QAAI,SAAS,WAAW,aAAa,SAAS,WAAW,UAAU;AACjE,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO,6BAA6B,SAAS,MAAM;AAAA,QACrD;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,iBAAiB,iBAAiB,IAAI,WAAW,OAAO,IAAI,WAAW;AAG7E,UAAM,GAAG,QAAQ,QAAQ;AAEzB,WAAO,aAAa,KAAK;AAAA,MACvB,MAAM;AAAA,MACN,SAAS;AAAA,IACX,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,MAAM,sCAAsC,EAAE,KAAK,MAAM,CAAC;AACjE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,qCAAqC;AAAA,MAC9C,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,MAAM,CAAC,WAAW;AAAA,MAClB,QAAQ,EAAE,OAAO;AAAA,QACf,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,MACtB,CAAC;AAAA,MACD,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,MAAM;AAAA,YACN,SAAS,EAAE,OAAO;AAAA,UACpB,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["/**\n * Cancel Workflow Instance API\n *\n * Endpoint:\n * - POST /api/workflows/instances/[id]/cancel - Cancel a running workflow instance\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveSingleOrganizationIdOrDeny } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { WorkflowInstance } from '../../../../data/entities'\nimport * as workflowExecutor from '../../../../lib/workflow-executor'\nimport { workflowInstanceResponseSchema } from '../../../openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\n\nconst logger = createLogger('workflows')\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.instances.cancel'],\n}\n\ninterface RouteContext {\n  params: Promise<{\n    id: string\n  }>\n}\n\n/**\n * POST /api/workflows/instances/[id]/cancel\n *\n * Cancel a running workflow instance\n */\nexport async function POST(\n  request: NextRequest,\n  context: RouteContext\n) {\n  try {\n    const params = await context.params\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = resolveSingleOrganizationIdOrDeny(scope, auth)\n\n    if (!tenantId || !organizationId) {\n      return NextResponse.json(\n        { error: 'Missing tenant or organization context' },\n        { status: 400 }\n      )\n    }\n\n    // Check cancel permission\n    const rbacService = container.resolve('rbacService')\n    const hasPermission = await rbacService.userHasAllFeatures(\n      auth.sub,\n      ['workflows.instances.cancel'],\n      {\n        tenantId,\n        organizationId,\n      }\n    )\n\n    if (!hasPermission) {\n      return NextResponse.json(\n        { error: 'Insufficient permissions' },\n        { status: 403 }\n      )\n    }\n\n    const instance = await em.findOne(WorkflowInstance, {\n      id: params.id,\n      tenantId,\n      organizationId,\n    })\n\n    if (!instance) {\n      return NextResponse.json(\n        { error: 'Workflow instance not found' },\n        { status: 404 }\n      )\n    }\n\n    // Check if instance can be cancelled\n    if (instance.status !== 'RUNNING' && instance.status !== 'PAUSED') {\n      return NextResponse.json(\n        {\n          error: `Cannot cancel workflow in ${instance.status} status. Only RUNNING or PAUSED workflows can be cancelled.`,\n        },\n        { status: 400 }\n      )\n    }\n\n    // Cancel the workflow\n    await workflowExecutor.completeWorkflow(em, container, params.id, 'CANCELLED')\n\n    // Reload instance to get updated state\n    await em.refresh(instance)\n\n    return NextResponse.json({\n      data: instance,\n      message: 'Workflow cancelled successfully',\n    })\n  } catch (error) {\n    if (isCrudHttpError(error)) return NextResponse.json(error.body, { status: error.status })\n    logger.error('Error cancelling workflow instance', { err: error })\n    return NextResponse.json(\n      { error: 'Failed to cancel workflow instance' },\n      { status: 500 }\n    )\n  }\n}\n\nexport const openApi = {\n  methods: {\n    POST: {\n      summary: 'Cancel workflow instance',\n      description: 'Cancel a running or paused workflow instance. The workflow will be marked as CANCELLED and will not execute further.',\n      tags: ['Workflows'],\n      params: z.object({\n        id: z.string().uuid(),\n      }),\n      responses: [\n        {\n          status: 200,\n          description: 'Workflow cancelled successfully',\n          schema: z.object({\n            data: workflowInstanceResponseSchema,\n            message: z.string(),\n          }),\n        },\n        {\n          status: 400,\n          description: 'Bad request - Workflow cannot be cancelled in current status',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 401,\n          description: 'Unauthorized',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 403,\n          description: 'Forbidden - Insufficient permissions',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 404,\n          description: 'Workflow instance not found',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 500,\n          description: 'Internal server error',\n          schema: z.object({ error: z.string() }),\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAOA,SAAsB,oBAAoB;AAC1C,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,yCAAyC;AAClD,SAAS,wBAAwB;AACjC,YAAY,sBAAsB;AAClC,SAAS,sCAAsC;AAC/C,SAAS,oBAAoB;AAC7B,SAAS,uBAAuB;AAEhC,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,4BAA4B;AAChD;AAaA,eAAsB,KACpB,SACA,SACA;AACA,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAC7B,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,kCAAkC,OAAO,IAAI;AAEpE,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,yCAAyC;AAAA,QAClD,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,gBAAgB,MAAM,YAAY;AAAA,MACtC,KAAK;AAAA,MACL,CAAC,4BAA4B;AAAA,MAC7B;AAAA,QACE;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,eAAe;AAClB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,2BAA2B;AAAA,QACpC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,GAAG,QAAQ,kBAAkB;AAAA,MAClD,IAAI,OAAO;AAAA,MACX;AAAA,MACA;AAAA,IACF,CAAC;AAED,QAAI,CAAC,UAAU;AACb,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,8BAA8B;AAAA,QACvC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,QAAI,SAAS,WAAW,aAAa,SAAS,WAAW,UAAU;AACjE,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO,6BAA6B,SAAS,MAAM;AAAA,QACrD;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,iBAAiB,iBAAiB,IAAI,WAAW,OAAO,IAAI,WAAW;AAG7E,UAAM,GAAG,QAAQ,QAAQ;AAEzB,WAAO,aAAa,KAAK;AAAA,MACvB,MAAM;AAAA,MACN,SAAS;AAAA,IACX,CAAC;AAAA,EACH,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,EAAG,QAAO,aAAa,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AACzF,WAAO,MAAM,sCAAsC,EAAE,KAAK,MAAM,CAAC;AACjE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,qCAAqC;AAAA,MAC9C,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,MAAM,CAAC,WAAW;AAAA,MAClB,QAAQ,EAAE,OAAO;AAAA,QACf,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,MACtB,CAAC;AAAA,MACD,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,MAAM;AAAA,YACN,SAAS,EAAE,OAAO;AAAA,UACpB,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/workflows/api/instances/[id]/context/route.js

@@ -3,6 +3,7 @@ import { z } from "zod";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { resolveSingleOrganizationIdOrDeny } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import { isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 import { enforceCommandOptimisticLockWithGuards } from "@open-mercato/shared/lib/crud/optimistic-lock-command";
 import {
@@ -44,7 +45,7 @@ async function PATCH(request, context) {
     }
     const scope = await resolveOrganizationScopeForRequest({ container, auth, request });
     const tenantId = auth.tenantId;
-    const organizationId = scope?.selectedId ?? auth.orgId;
+    const organizationId = resolveSingleOrganizationIdOrDeny(scope, auth);
     if (!tenantId || !organizationId) {
       return NextResponse.json({ error: "Missing tenant or organization context" }, { status: 400 });
     }

package/dist/modules/workflows/api/instances/[id]/context/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/workflows/api/instances/%5Bid%5D/context/route.ts"],
-  "sourcesContent": ["import { NextRequest, NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { enforceCommandOptimisticLockWithGuards } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport {\n  bridgeLegacyGuard,\n  runMutationGuards,\n  type MutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard-registry'\nimport { getAllMutationGuardInstances } from '@open-mercato/shared/lib/crud/mutation-guard-store'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { updateWorkflowContextScoped } from '../../../../lib/workflow-executor'\nimport { wakeConditionWaiters } from '../../../../lib/condition-handler'\nimport {\n  workflowsTag,\n  workflowErrorSchema,\n  updateInstanceContextRequestSchema,\n  updateInstanceContextResponseSchema,\n} from '../../../openapi'\n\nconst logger = createLogger('workflows')\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.instances.update_context'],\n}\n\nconst CONTEXT_RESOURCE_KIND = 'workflows.instance'\n\nconst updateContextSchema = z.object({\n  context: z.record(z.string(), z.any()),\n})\n\ninterface RouteContext {\n  params: Promise<{ id: string }>\n}\n\nfunction resolveUserFeatures(auth: unknown): string[] {\n  const features = (auth as { features?: unknown })?.features\n  if (!Array.isArray(features)) return []\n  return features.filter((value): value is string => typeof value === 'string')\n}\n\n/**\n * PATCH /api/workflows/instances/[id]/context\n *\n * Merge a partial context patch into a running instance and wake any\n * WAIT_FOR_CONDITION waiters whose predicate now holds. This is the\n * event-driven fast path; the per-waiter poll job remains the durability\n * backstop, so a missed call here only costs latency, never correctness.\n */\nexport async function PATCH(request: NextRequest, context: RouteContext) {\n  try {\n    const params = await context.params\n\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = scope?.selectedId ?? auth.orgId\n\n    if (!tenantId || !organizationId) {\n      return NextResponse.json({ error: 'Missing tenant or organization context' }, { status: 400 })\n    }\n\n    const rbacService = container.resolve('rbacService')\n    const hasPermission = await rbacService.userHasAllFeatures(\n      auth.sub,\n      ['workflows.instances.update_context'],\n      { tenantId, organizationId }\n    )\n    if (!hasPermission) {\n      return NextResponse.json({ error: 'Insufficient permissions' }, { status: 403 })\n    }\n\n    const body = await request.json()\n    const input = updateContextSchema.parse(body)\n\n    const legacyGuard = bridgeLegacyGuard(container)\n    const guards: MutationGuard[] = [...getAllMutationGuardInstances()]\n    if (legacyGuard) guards.push(legacyGuard)\n\n    const guardInput = {\n      tenantId,\n      organizationId,\n      userId: auth.sub ?? '',\n      resourceKind: CONTEXT_RESOURCE_KIND,\n      resourceId: params.id,\n      operation: 'update' as const,\n      requestMethod: request.method,\n      requestHeaders: request.headers,\n    }\n\n    const guardResult = await runMutationGuards(guards, guardInput, {\n      userFeatures: resolveUserFeatures(auth),\n    })\n    if (!guardResult.ok) {\n      return NextResponse.json(\n        guardResult.errorBody ?? { error: 'Operation blocked by guard' },\n        { status: guardResult.errorStatus ?? 422 }\n      )\n    }\n\n    const instance = await updateWorkflowContextScoped(em, {\n      instanceId: params.id,\n      tenantId,\n      organizationId,\n      updates: input.context,\n      // The optimistic-lock compare must run against the freshly loaded row and\n      // BEFORE the merge is flushed, so the scoped helper takes it as a hook.\n      assertVersion: (current: Date | null | undefined) =>\n        enforceCommandOptimisticLockWithGuards(container, {\n          resourceKind: CONTEXT_RESOURCE_KIND,\n          resourceId: params.id,\n          current,\n          request,\n        }),\n    })\n\n    const { woken } = await wakeConditionWaiters(em, container, {\n      instanceId: instance.id,\n      tenantId,\n      organizationId,\n      userId: auth.sub,\n    })\n\n    for (const callback of guardResult.afterSuccessCallbacks) {\n      if (!callback.guard.afterSuccess) continue\n      try {\n        await callback.guard.afterSuccess({ ...guardInput, metadata: callback.metadata ?? null })\n      } catch (callbackError) {\n        logger.error('Mutation guard afterSuccess callback failed', {\n          component: 'instance-context',\n          guardId: callback.guard.id,\n          err: callbackError,\n        })\n      }\n    }\n\n    return NextResponse.json({ ok: true, instanceId: instance.id, woken })\n  } catch (error: any) {\n    if (isCrudHttpError(error)) {\n      return NextResponse.json(error.body, { status: error.status })\n    }\n\n    if (error?.name === 'ZodError') {\n      return NextResponse.json(\n        { error: 'Invalid request body', details: error.errors },\n        { status: 400 }\n      )\n    }\n\n    if (error?.code === 'RESERVED_CONTEXT_KEY') {\n      return NextResponse.json(\n        { error: error.message, details: error.details },\n        { status: 400 }\n      )\n    }\n    if (error?.code === 'INSTANCE_NOT_FOUND') {\n      return NextResponse.json({ error: error.message }, { status: 404 })\n    }\n    if (error?.code === 'INSTANCE_NOT_UPDATABLE') {\n      return NextResponse.json({ error: error.message }, { status: 409 })\n    }\n\n    logger.error('Workflow context patch failed', { component: 'instance-context', err: error })\n\n    return NextResponse.json(\n      { error: error?.message || 'Failed to update workflow context' },\n      { status: 500 }\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: workflowsTag,\n  summary: 'Patch workflow instance context',\n  methods: {\n    PATCH: {\n      summary: 'Merge a context patch and wake condition waiters',\n      description:\n        'Shallow-merges a partial context patch into a RUNNING/PAUSED/FORKED workflow instance, then re-evaluates every WAIT_FOR_CONDITION waiter in that instance and resumes the ones whose predicate now holds. Reserved engine keys are rejected. Requires the workflows.instances.update_context feature.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: updateInstanceContextRequestSchema,\n      },\n      responses: [\n        {\n          status: 200,\n          description: 'Context merged; woken lists the resumed step ids',\n          schema: updateInstanceContextResponseSchema,\n        },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid body or reserved context key', schema: workflowErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: workflowErrorSchema },\n        { status: 403, description: 'Insufficient permissions', schema: workflowErrorSchema },\n        { status: 404, description: 'Instance not found in the caller scope', schema: workflowErrorSchema },\n        { status: 409, description: 'Instance not updatable or stale version', schema: workflowErrorSchema },\n        { status: 500, description: 'Internal server error', schema: workflowErrorSchema },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAsB,oBAAoB;AAC1C,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,uBAAuB;AAChC,SAAS,8CAA8C;AACvD;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,SAAS,oCAAoC;AAC7C,SAAS,oBAAoB;AAC7B,SAAS,mCAAmC;AAC5C,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,oCAAoC;AACxD;AAEA,MAAM,wBAAwB;AAE9B,MAAM,sBAAsB,EAAE,OAAO;AAAA,EACnC,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC;AACvC,CAAC;AAMD,SAAS,oBAAoB,MAAyB;AACpD,QAAM,WAAY,MAAiC;AACnD,MAAI,CAAC,MAAM,QAAQ,QAAQ,EAAG,QAAO,CAAC;AACtC,SAAO,SAAS,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ;AAC9E;AAUA,eAAsB,MAAM,SAAsB,SAAuB;AACvE,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAE7B,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,OAAO,cAAc,KAAK;AAEjD,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,aAAO,aAAa,KAAK,EAAE,OAAO,yCAAyC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/F;AAEA,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,gBAAgB,MAAM,YAAY;AAAA,MACtC,KAAK;AAAA,MACL,CAAC,oCAAoC;AAAA,MACrC,EAAE,UAAU,eAAe;AAAA,IAC7B;AACA,QAAI,CAAC,eAAe;AAClB,aAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjF;AAEA,UAAM,OAAO,MAAM,QAAQ,KAAK;AAChC,UAAM,QAAQ,oBAAoB,MAAM,IAAI;AAE5C,UAAM,cAAc,kBAAkB,SAAS;AAC/C,UAAM,SAA0B,CAAC,GAAG,6BAA6B,CAAC;AAClE,QAAI,YAAa,QAAO,KAAK,WAAW;AAExC,UAAM,aAAa;AAAA,MACjB;AAAA,MACA;AAAA,MACA,QAAQ,KAAK,OAAO;AAAA,MACpB,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,WAAW;AAAA,MACX,eAAe,QAAQ;AAAA,MACvB,gBAAgB,QAAQ;AAAA,IAC1B;AAEA,UAAM,cAAc,MAAM,kBAAkB,QAAQ,YAAY;AAAA,MAC9D,cAAc,oBAAoB,IAAI;AAAA,IACxC,CAAC;AACD,QAAI,CAAC,YAAY,IAAI;AACnB,aAAO,aAAa;AAAA,QAClB,YAAY,aAAa,EAAE,OAAO,6BAA6B;AAAA,QAC/D,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,MAC3C;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,4BAA4B,IAAI;AAAA,MACrD,YAAY,OAAO;AAAA,MACnB;AAAA,MACA;AAAA,MACA,SAAS,MAAM;AAAA;AAAA;AAAA,MAGf,eAAe,CAAC,YACd,uCAAuC,WAAW;AAAA,QAChD,cAAc;AAAA,QACd,YAAY,OAAO;AAAA,QACnB;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACL,CAAC;AAED,UAAM,EAAE,MAAM,IAAI,MAAM,qBAAqB,IAAI,WAAW;AAAA,MAC1D,YAAY,SAAS;AAAA,MACrB;AAAA,MACA;AAAA,MACA,QAAQ,KAAK;AAAA,IACf,CAAC;AAED,eAAW,YAAY,YAAY,uBAAuB;AACxD,UAAI,CAAC,SAAS,MAAM,aAAc;AAClC,UAAI;AACF,cAAM,SAAS,MAAM,aAAa,EAAE,GAAG,YAAY,UAAU,SAAS,YAAY,KAAK,CAAC;AAAA,MAC1F,SAAS,eAAe;AACtB,eAAO,MAAM,+CAA+C;AAAA,UAC1D,WAAW;AAAA,UACX,SAAS,SAAS,MAAM;AAAA,UACxB,KAAK;AAAA,QACP,CAAC;AAAA,MACH;AAAA,IACF;AAEA,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,YAAY,SAAS,IAAI,MAAM,CAAC;AAAA,EACvE,SAAS,OAAY;AACnB,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,aAAa,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC/D;AAEA,QAAI,OAAO,SAAS,YAAY;AAC9B,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,wBAAwB,SAAS,MAAM,OAAO;AAAA,QACvD,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,QAAI,OAAO,SAAS,wBAAwB;AAC1C,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,MAAM,SAAS,SAAS,MAAM,QAAQ;AAAA,QAC/C,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,QAAI,OAAO,SAAS,sBAAsB;AACxC,aAAO,aAAa,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpE;AACA,QAAI,OAAO,SAAS,0BAA0B;AAC5C,aAAO,aAAa,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpE;AAEA,WAAO,MAAM,iCAAiC,EAAE,WAAW,oBAAoB,KAAK,MAAM,CAAC;AAE3F,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,OAAO,WAAW,oCAAoC;AAAA,MAC/D,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,OAAO;AAAA,MACL,SAAS;AAAA,MACT,aACE;AAAA,MACF,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,wCAAwC,QAAQ,oBAAoB;AAAA,QAChG,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,oBAAoB;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,0CAA0C,QAAQ,oBAAoB;AAAA,QAClG,EAAE,QAAQ,KAAK,aAAa,2CAA2C,QAAQ,oBAAoB;AAAA,QACnG,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,oBAAoB;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextRequest, NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveSingleOrganizationIdOrDeny } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { enforceCommandOptimisticLockWithGuards } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport {\n  bridgeLegacyGuard,\n  runMutationGuards,\n  type MutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard-registry'\nimport { getAllMutationGuardInstances } from '@open-mercato/shared/lib/crud/mutation-guard-store'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { updateWorkflowContextScoped } from '../../../../lib/workflow-executor'\nimport { wakeConditionWaiters } from '../../../../lib/condition-handler'\nimport {\n  workflowsTag,\n  workflowErrorSchema,\n  updateInstanceContextRequestSchema,\n  updateInstanceContextResponseSchema,\n} from '../../../openapi'\n\nconst logger = createLogger('workflows')\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.instances.update_context'],\n}\n\nconst CONTEXT_RESOURCE_KIND = 'workflows.instance'\n\nconst updateContextSchema = z.object({\n  context: z.record(z.string(), z.any()),\n})\n\ninterface RouteContext {\n  params: Promise<{ id: string }>\n}\n\nfunction resolveUserFeatures(auth: unknown): string[] {\n  const features = (auth as { features?: unknown })?.features\n  if (!Array.isArray(features)) return []\n  return features.filter((value): value is string => typeof value === 'string')\n}\n\n/**\n * PATCH /api/workflows/instances/[id]/context\n *\n * Merge a partial context patch into a running instance and wake any\n * WAIT_FOR_CONDITION waiters whose predicate now holds. This is the\n * event-driven fast path; the per-waiter poll job remains the durability\n * backstop, so a missed call here only costs latency, never correctness.\n */\nexport async function PATCH(request: NextRequest, context: RouteContext) {\n  try {\n    const params = await context.params\n\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = resolveSingleOrganizationIdOrDeny(scope, auth)\n\n    if (!tenantId || !organizationId) {\n      return NextResponse.json({ error: 'Missing tenant or organization context' }, { status: 400 })\n    }\n\n    const rbacService = container.resolve('rbacService')\n    const hasPermission = await rbacService.userHasAllFeatures(\n      auth.sub,\n      ['workflows.instances.update_context'],\n      { tenantId, organizationId }\n    )\n    if (!hasPermission) {\n      return NextResponse.json({ error: 'Insufficient permissions' }, { status: 403 })\n    }\n\n    const body = await request.json()\n    const input = updateContextSchema.parse(body)\n\n    const legacyGuard = bridgeLegacyGuard(container)\n    const guards: MutationGuard[] = [...getAllMutationGuardInstances()]\n    if (legacyGuard) guards.push(legacyGuard)\n\n    const guardInput = {\n      tenantId,\n      organizationId,\n      userId: auth.sub ?? '',\n      resourceKind: CONTEXT_RESOURCE_KIND,\n      resourceId: params.id,\n      operation: 'update' as const,\n      requestMethod: request.method,\n      requestHeaders: request.headers,\n    }\n\n    const guardResult = await runMutationGuards(guards, guardInput, {\n      userFeatures: resolveUserFeatures(auth),\n    })\n    if (!guardResult.ok) {\n      return NextResponse.json(\n        guardResult.errorBody ?? { error: 'Operation blocked by guard' },\n        { status: guardResult.errorStatus ?? 422 }\n      )\n    }\n\n    const instance = await updateWorkflowContextScoped(em, {\n      instanceId: params.id,\n      tenantId,\n      organizationId,\n      updates: input.context,\n      // The optimistic-lock compare must run against the freshly loaded row and\n      // BEFORE the merge is flushed, so the scoped helper takes it as a hook.\n      assertVersion: (current: Date | null | undefined) =>\n        enforceCommandOptimisticLockWithGuards(container, {\n          resourceKind: CONTEXT_RESOURCE_KIND,\n          resourceId: params.id,\n          current,\n          request,\n        }),\n    })\n\n    const { woken } = await wakeConditionWaiters(em, container, {\n      instanceId: instance.id,\n      tenantId,\n      organizationId,\n      userId: auth.sub,\n    })\n\n    for (const callback of guardResult.afterSuccessCallbacks) {\n      if (!callback.guard.afterSuccess) continue\n      try {\n        await callback.guard.afterSuccess({ ...guardInput, metadata: callback.metadata ?? null })\n      } catch (callbackError) {\n        logger.error('Mutation guard afterSuccess callback failed', {\n          component: 'instance-context',\n          guardId: callback.guard.id,\n          err: callbackError,\n        })\n      }\n    }\n\n    return NextResponse.json({ ok: true, instanceId: instance.id, woken })\n  } catch (error: any) {\n    if (isCrudHttpError(error)) {\n      return NextResponse.json(error.body, { status: error.status })\n    }\n\n    if (error?.name === 'ZodError') {\n      return NextResponse.json(\n        { error: 'Invalid request body', details: error.errors },\n        { status: 400 }\n      )\n    }\n\n    if (error?.code === 'RESERVED_CONTEXT_KEY') {\n      return NextResponse.json(\n        { error: error.message, details: error.details },\n        { status: 400 }\n      )\n    }\n    if (error?.code === 'INSTANCE_NOT_FOUND') {\n      return NextResponse.json({ error: error.message }, { status: 404 })\n    }\n    if (error?.code === 'INSTANCE_NOT_UPDATABLE') {\n      return NextResponse.json({ error: error.message }, { status: 409 })\n    }\n\n    logger.error('Workflow context patch failed', { component: 'instance-context', err: error })\n\n    return NextResponse.json(\n      { error: error?.message || 'Failed to update workflow context' },\n      { status: 500 }\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: workflowsTag,\n  summary: 'Patch workflow instance context',\n  methods: {\n    PATCH: {\n      summary: 'Merge a context patch and wake condition waiters',\n      description:\n        'Shallow-merges a partial context patch into a RUNNING/PAUSED/FORKED workflow instance, then re-evaluates every WAIT_FOR_CONDITION waiter in that instance and resumes the ones whose predicate now holds. Reserved engine keys are rejected. Requires the workflows.instances.update_context feature.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: updateInstanceContextRequestSchema,\n      },\n      responses: [\n        {\n          status: 200,\n          description: 'Context merged; woken lists the resumed step ids',\n          schema: updateInstanceContextResponseSchema,\n        },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid body or reserved context key', schema: workflowErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: workflowErrorSchema },\n        { status: 403, description: 'Insufficient permissions', schema: workflowErrorSchema },\n        { status: 404, description: 'Instance not found in the caller scope', schema: workflowErrorSchema },\n        { status: 409, description: 'Instance not updatable or stale version', schema: workflowErrorSchema },\n        { status: 500, description: 'Internal server error', schema: workflowErrorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAsB,oBAAoB;AAC1C,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,yCAAyC;AAClD,SAAS,uBAAuB;AAChC,SAAS,8CAA8C;AACvD;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,SAAS,oCAAoC;AAC7C,SAAS,oBAAoB;AAC7B,SAAS,mCAAmC;AAC5C,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,oCAAoC;AACxD;AAEA,MAAM,wBAAwB;AAE9B,MAAM,sBAAsB,EAAE,OAAO;AAAA,EACnC,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC;AACvC,CAAC;AAMD,SAAS,oBAAoB,MAAyB;AACpD,QAAM,WAAY,MAAiC;AACnD,MAAI,CAAC,MAAM,QAAQ,QAAQ,EAAG,QAAO,CAAC;AACtC,SAAO,SAAS,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ;AAC9E;AAUA,eAAsB,MAAM,SAAsB,SAAuB;AACvE,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAE7B,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,kCAAkC,OAAO,IAAI;AAEpE,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,aAAO,aAAa,KAAK,EAAE,OAAO,yCAAyC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/F;AAEA,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,gBAAgB,MAAM,YAAY;AAAA,MACtC,KAAK;AAAA,MACL,CAAC,oCAAoC;AAAA,MACrC,EAAE,UAAU,eAAe;AAAA,IAC7B;AACA,QAAI,CAAC,eAAe;AAClB,aAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjF;AAEA,UAAM,OAAO,MAAM,QAAQ,KAAK;AAChC,UAAM,QAAQ,oBAAoB,MAAM,IAAI;AAE5C,UAAM,cAAc,kBAAkB,SAAS;AAC/C,UAAM,SAA0B,CAAC,GAAG,6BAA6B,CAAC;AAClE,QAAI,YAAa,QAAO,KAAK,WAAW;AAExC,UAAM,aAAa;AAAA,MACjB;AAAA,MACA;AAAA,MACA,QAAQ,KAAK,OAAO;AAAA,MACpB,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,WAAW;AAAA,MACX,eAAe,QAAQ;AAAA,MACvB,gBAAgB,QAAQ;AAAA,IAC1B;AAEA,UAAM,cAAc,MAAM,kBAAkB,QAAQ,YAAY;AAAA,MAC9D,cAAc,oBAAoB,IAAI;AAAA,IACxC,CAAC;AACD,QAAI,CAAC,YAAY,IAAI;AACnB,aAAO,aAAa;AAAA,QAClB,YAAY,aAAa,EAAE,OAAO,6BAA6B;AAAA,QAC/D,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,MAC3C;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,4BAA4B,IAAI;AAAA,MACrD,YAAY,OAAO;AAAA,MACnB;AAAA,MACA;AAAA,MACA,SAAS,MAAM;AAAA;AAAA;AAAA,MAGf,eAAe,CAAC,YACd,uCAAuC,WAAW;AAAA,QAChD,cAAc;AAAA,QACd,YAAY,OAAO;AAAA,QACnB;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACL,CAAC;AAED,UAAM,EAAE,MAAM,IAAI,MAAM,qBAAqB,IAAI,WAAW;AAAA,MAC1D,YAAY,SAAS;AAAA,MACrB;AAAA,MACA;AAAA,MACA,QAAQ,KAAK;AAAA,IACf,CAAC;AAED,eAAW,YAAY,YAAY,uBAAuB;AACxD,UAAI,CAAC,SAAS,MAAM,aAAc;AAClC,UAAI;AACF,cAAM,SAAS,MAAM,aAAa,EAAE,GAAG,YAAY,UAAU,SAAS,YAAY,KAAK,CAAC;AAAA,MAC1F,SAAS,eAAe;AACtB,eAAO,MAAM,+CAA+C;AAAA,UAC1D,WAAW;AAAA,UACX,SAAS,SAAS,MAAM;AAAA,UACxB,KAAK;AAAA,QACP,CAAC;AAAA,MACH;AAAA,IACF;AAEA,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,YAAY,SAAS,IAAI,MAAM,CAAC;AAAA,EACvE,SAAS,OAAY;AACnB,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,aAAa,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC/D;AAEA,QAAI,OAAO,SAAS,YAAY;AAC9B,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,wBAAwB,SAAS,MAAM,OAAO;AAAA,QACvD,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,QAAI,OAAO,SAAS,wBAAwB;AAC1C,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,MAAM,SAAS,SAAS,MAAM,QAAQ;AAAA,QAC/C,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,QAAI,OAAO,SAAS,sBAAsB;AACxC,aAAO,aAAa,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpE;AACA,QAAI,OAAO,SAAS,0BAA0B;AAC5C,aAAO,aAAa,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpE;AAEA,WAAO,MAAM,iCAAiC,EAAE,WAAW,oBAAoB,KAAK,MAAM,CAAC;AAE3F,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,OAAO,WAAW,oCAAoC;AAAA,MAC/D,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,OAAO;AAAA,MACL,SAAS;AAAA,MACT,aACE;AAAA,MACF,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,wCAAwC,QAAQ,oBAAoB;AAAA,QAChG,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,oBAAoB;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,0CAA0C,QAAQ,oBAAoB;AAAA,QAClG,EAAE,QAAQ,KAAK,aAAa,2CAA2C,QAAQ,oBAAoB;AAAA,QACnG,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,oBAAoB;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/workflows/api/instances/[id]/rerun-step/route.js

@@ -3,6 +3,7 @@ import { z } from "zod";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { resolveSingleOrganizationIdOrDeny } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
 import { WorkflowInstance, StepInstance } from "../../../../data/entities.js";
 import { findDefinitionForInstance } from "../../../../lib/find-definition.js";
@@ -11,6 +12,7 @@ import { computeContextDiff, resolveRerunEligibility } from "../../../../lib/rer
 import * as workflowExecutor from "../../../../lib/workflow-executor.js";
 import { workflowInstanceResponseSchema } from "../../../openapi.js";
 import { createLogger } from "@open-mercato/shared/lib/logger";
+import { isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 const logger = createLogger("workflows");
 const metadata = {
   requireAuth: true,
@@ -31,7 +33,7 @@ async function POST(request, context) {
     }
     const scope = await resolveOrganizationScopeForRequest({ container, auth, request });
     const tenantId = auth.tenantId;
-    const organizationId = scope?.selectedId ?? auth.orgId;
+    const organizationId = resolveSingleOrganizationIdOrDeny(scope, auth);
     if (!tenantId || !organizationId) {
       return NextResponse.json({ error: "Missing tenant or organization context" }, { status: 400 });
     }
@@ -130,6 +132,7 @@ async function POST(request, context) {
       message: "Step rerun started."
     });
   } catch (error) {
+    if (isCrudHttpError(error)) return NextResponse.json(error.body, { status: error.status });
     logger.error("Error rerunning workflow step", { err: error });
     if (error instanceof workflowExecutor.WorkflowExecutionError) {
       return NextResponse.json({ error: error.message }, { status: 400 });

package/dist/modules/workflows/api/instances/[id]/rerun-step/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/workflows/api/instances/%5Bid%5D/rerun-step/route.ts"],
-  "sourcesContent": ["/**\n * Rerun from step (spec \u00A78.4)\n *\n * Endpoint:\n * - POST /api/workflows/instances/[id]/rerun-step  { stepId, contextPatch? }\n *\n * **No step-state-machine change.** The terminal `StepInstance` of the previous\n * attempt is read (for its recorded `stepType`) and then left untouched; the\n * new attempt gets a FRESH row, because `stepHandler.enterStep` creates one\n * unconditionally on every entry. Both attempts stay in the audit trail and no\n * status is ever set out of order.\n *\n * The cursor move plus `executeStep` is the same shape the definition-level\n * error handler already uses (`enterErrorHandlerStep`), so no transition record\n * is invented either.\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { WorkflowInstance, StepInstance } from '../../../../data/entities'\nimport { findDefinitionForInstance } from '../../../../lib/find-definition'\nimport { logWorkflowEvent, WorkflowEventTypes } from '../../../../lib/event-logger'\nimport { computeContextDiff, resolveRerunEligibility } from '../../../../lib/rerun-from-step'\nimport * as workflowExecutor from '../../../../lib/workflow-executor'\nimport { workflowInstanceResponseSchema } from '../../../openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows')\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.instances.rerun_step'],\n}\n\nconst requestSchema = z.object({\n  stepId: z.string().min(1),\n  contextPatch: z.record(z.string(), z.unknown()).optional(),\n})\n\ninterface RouteContext {\n  params: Promise<{ id: string }>\n}\n\nexport async function POST(request: NextRequest, context: RouteContext) {\n  try {\n    const params = await context.params\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = scope?.selectedId ?? auth.orgId\n\n    if (!tenantId || !organizationId) {\n      return NextResponse.json({ error: 'Missing tenant or organization context' }, { status: 400 })\n    }\n\n    const rbacService = container.resolve('rbacService')\n    const hasPermission = await rbacService.userHasAllFeatures(\n      auth.sub,\n      ['workflows.instances.rerun_step'],\n      { tenantId, organizationId }\n    )\n    if (!hasPermission) {\n      return NextResponse.json({ error: 'Insufficient permissions' }, { status: 403 })\n    }\n\n    const parsed = requestSchema.safeParse(await readJsonSafe(request))\n    if (!parsed.success) {\n      return NextResponse.json({ error: 'Invalid payload' }, { status: 400 })\n    }\n\n    const instance = await em.findOne(WorkflowInstance, {\n      id: params.id,\n      tenantId,\n      organizationId,\n    })\n    if (!instance) {\n      return NextResponse.json({ error: 'Workflow instance not found' }, { status: 404 })\n    }\n\n    const definition = await findDefinitionForInstance(em, instance)\n    if (!definition) {\n      return NextResponse.json({ error: 'Workflow definition not found' }, { status: 404 })\n    }\n\n    const stepExecutions = (await em.find(StepInstance, {\n      workflowInstanceId: instance.id,\n      stepId: parsed.data.stepId,\n      tenantId,\n      organizationId,\n    })) as StepInstance[]\n\n    const eligibility = resolveRerunEligibility({\n      instanceStatus: instance.status,\n      stepId: parsed.data.stepId,\n      definitionSteps: definition.definition.steps.map((step: { stepId: string; stepType: string }) => ({\n        stepId: step.stepId,\n        stepType: step.stepType,\n      })),\n      stepExecutions: stepExecutions.map((execution) => ({\n        id: execution.id,\n        stepId: execution.stepId,\n        stepType: execution.stepType,\n        status: execution.status,\n        enteredAt: execution.enteredAt ?? null,\n        createdAt: execution.createdAt,\n      })),\n    })\n\n    if (!eligibility.ok) {\n      return NextResponse.json({ error: eligibility.message, code: eligibility.code }, { status: 409 })\n    }\n\n    const editedContextDiff = computeContextDiff(instance.context, parsed.data.contextPatch)\n    const now = new Date()\n\n    // Every rerun logs a workflow event \u2014 the terminal StepInstance is never\n    // touched, so the event log is what links the two attempts.\n    await logWorkflowEvent(em, {\n      workflowInstanceId: instance.id,\n      eventType: WorkflowEventTypes.STEP_RERUN,\n      eventData: {\n        stepId: parsed.data.stepId,\n        editedContextDiff,\n        by: auth.sub,\n        supersededStepInstanceId: eligibility.supersededStepInstanceId,\n        previousStatus: instance.status,\n      },\n      userId: auth.sub,\n      tenantId,\n      organizationId,\n    })\n\n    if (parsed.data.contextPatch) {\n      instance.context = { ...(instance.context || {}), ...parsed.data.contextPatch }\n    }\n    // Leaving the failure queue is exactly the marker going away.\n    if (instance.metadata?.attention) {\n      instance.metadata = { ...instance.metadata, attention: null }\n    }\n    instance.pendingTransition = null\n    instance.currentStepId = parsed.data.stepId\n    instance.status = 'RUNNING'\n    instance.retryCount = (instance.retryCount || 0) + 1\n    instance.errorMessage = null\n    instance.errorDetails = null\n    instance.updatedAt = now\n    await em.flush()\n\n    const { executeStep } = await import('../../../../lib/step-handler')\n    await executeStep(\n      em,\n      instance,\n      parsed.data.stepId,\n      { workflowContext: instance.context || {}, userId: auth.sub },\n      container\n    )\n\n    // Drive the run forward from the replayed step, exactly as any other\n    // advance would.\n    const execution = await workflowExecutor.executeWorkflow(em, container, instance.id)\n    await em.refresh(instance)\n\n    return NextResponse.json({\n      data: { instance, execution, editedContextDiff },\n      message: 'Step rerun started.',\n    })\n  } catch (error) {\n    logger.error('Error rerunning workflow step', { err: error })\n    if (error instanceof workflowExecutor.WorkflowExecutionError) {\n      return NextResponse.json({ error: error.message }, { status: 400 })\n    }\n    return NextResponse.json({ error: 'Failed to rerun the workflow step' }, { status: 500 })\n  }\n}\n\nexport const openApi = {\n  methods: {\n    POST: {\n      summary: 'Rerun a workflow instance from a step',\n      description:\n        'Replay a FAILED or PAUSED instance from one of its executed steps, optionally with an edited context patch. The previous attempt keeps its terminal step-instance row; the replay gets a fresh one, and the rerun is audited as a STEP_RERUN workflow event.',\n      tags: ['Workflows'],\n      params: z.object({ id: z.string().uuid() }),\n      requestBody: {\n        contentType: 'application/json',\n        schema: requestSchema,\n        description: 'Step to replay and an optional context patch applied before it runs.',\n      },\n      responses: [\n        {\n          status: 200,\n          description: 'Rerun started',\n          schema: z.object({\n            data: z.object({\n              instance: workflowInstanceResponseSchema,\n              execution: z.unknown(),\n              editedContextDiff: z.record(z.string(), z.unknown()),\n            }),\n            message: z.string(),\n          }),\n        },\n        { status: 400, description: 'Invalid payload', schema: z.object({ error: z.string() }) },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n        { status: 403, description: 'Insufficient permissions', schema: z.object({ error: z.string() }) },\n        { status: 404, description: 'Workflow instance not found', schema: z.object({ error: z.string() }) },\n        {\n          status: 409,\n          description: 'The step cannot be rerun (still parked, changed type, or the instance is not rerunnable)',\n          schema: z.object({ error: z.string(), code: z.string() }),\n        },\n        { status: 500, description: 'Internal server error', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAiBA,SAAsB,oBAAoB;AAC1C,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,oBAAoB;AAC7B,SAAS,kBAAkB,oBAAoB;AAC/C,SAAS,iCAAiC;AAC1C,SAAS,kBAAkB,0BAA0B;AACrD,SAAS,oBAAoB,+BAA+B;AAC5D,YAAY,sBAAsB;AAClC,SAAS,sCAAsC;AAC/C,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,gCAAgC;AACpD;AAEA,MAAM,gBAAgB,EAAE,OAAO;AAAA,EAC7B,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACxB,cAAc,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAC3D,CAAC;AAMD,eAAsB,KAAK,SAAsB,SAAuB;AACtE,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAC7B,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,OAAO,cAAc,KAAK;AAEjD,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,aAAO,aAAa,KAAK,EAAE,OAAO,yCAAyC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/F;AAEA,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,gBAAgB,MAAM,YAAY;AAAA,MACtC,KAAK;AAAA,MACL,CAAC,gCAAgC;AAAA,MACjC,EAAE,UAAU,eAAe;AAAA,IAC7B;AACA,QAAI,CAAC,eAAe;AAClB,aAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjF;AAEA,UAAM,SAAS,cAAc,UAAU,MAAM,aAAa,OAAO,CAAC;AAClE,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,kBAAkB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACxE;AAEA,UAAM,WAAW,MAAM,GAAG,QAAQ,kBAAkB;AAAA,MAClD,IAAI,OAAO;AAAA,MACX;AAAA,MACA;AAAA,IACF,CAAC;AACD,QAAI,CAAC,UAAU;AACb,aAAO,aAAa,KAAK,EAAE,OAAO,8BAA8B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpF;AAEA,UAAM,aAAa,MAAM,0BAA0B,IAAI,QAAQ;AAC/D,QAAI,CAAC,YAAY;AACf,aAAO,aAAa,KAAK,EAAE,OAAO,gCAAgC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACtF;AAEA,UAAM,iBAAkB,MAAM,GAAG,KAAK,cAAc;AAAA,MAClD,oBAAoB,SAAS;AAAA,MAC7B,QAAQ,OAAO,KAAK;AAAA,MACpB;AAAA,MACA;AAAA,IACF,CAAC;AAED,UAAM,cAAc,wBAAwB;AAAA,MAC1C,gBAAgB,SAAS;AAAA,MACzB,QAAQ,OAAO,KAAK;AAAA,MACpB,iBAAiB,WAAW,WAAW,MAAM,IAAI,CAAC,UAAgD;AAAA,QAChG,QAAQ,KAAK;AAAA,QACb,UAAU,KAAK;AAAA,MACjB,EAAE;AAAA,MACF,gBAAgB,eAAe,IAAI,CAACA,gBAAe;AAAA,QACjD,IAAIA,WAAU;AAAA,QACd,QAAQA,WAAU;AAAA,QAClB,UAAUA,WAAU;AAAA,QACpB,QAAQA,WAAU;AAAA,QAClB,WAAWA,WAAU,aAAa;AAAA,QAClC,WAAWA,WAAU;AAAA,MACvB,EAAE;AAAA,IACJ,CAAC;AAED,QAAI,CAAC,YAAY,IAAI;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,YAAY,SAAS,MAAM,YAAY,KAAK,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClG;AAEA,UAAM,oBAAoB,mBAAmB,SAAS,SAAS,OAAO,KAAK,YAAY;AACvF,UAAM,MAAM,oBAAI,KAAK;AAIrB,UAAM,iBAAiB,IAAI;AAAA,MACzB,oBAAoB,SAAS;AAAA,MAC7B,WAAW,mBAAmB;AAAA,MAC9B,WAAW;AAAA,QACT,QAAQ,OAAO,KAAK;AAAA,QACpB;AAAA,QACA,IAAI,KAAK;AAAA,QACT,0BAA0B,YAAY;AAAA,QACtC,gBAAgB,SAAS;AAAA,MAC3B;AAAA,MACA,QAAQ,KAAK;AAAA,MACb;AAAA,MACA;AAAA,IACF,CAAC;AAED,QAAI,OAAO,KAAK,cAAc;AAC5B,eAAS,UAAU,EAAE,GAAI,SAAS,WAAW,CAAC,GAAI,GAAG,OAAO,KAAK,aAAa;AAAA,IAChF;AAEA,QAAI,SAAS,UAAU,WAAW;AAChC,eAAS,WAAW,EAAE,GAAG,SAAS,UAAU,WAAW,KAAK;AAAA,IAC9D;AACA,aAAS,oBAAoB;AAC7B,aAAS,gBAAgB,OAAO,KAAK;AACrC,aAAS,SAAS;AAClB,aAAS,cAAc,SAAS,cAAc,KAAK;AACnD,aAAS,eAAe;AACxB,aAAS,eAAe;AACxB,aAAS,YAAY;AACrB,UAAM,GAAG,MAAM;AAEf,UAAM,EAAE,YAAY,IAAI,MAAM,OAAO,8BAA8B;AACnE,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA,OAAO,KAAK;AAAA,MACZ,EAAE,iBAAiB,SAAS,WAAW,CAAC,GAAG,QAAQ,KAAK,IAAI;AAAA,MAC5D;AAAA,IACF;AAIA,UAAM,YAAY,MAAM,iBAAiB,gBAAgB,IAAI,WAAW,SAAS,EAAE;AACnF,UAAM,GAAG,QAAQ,QAAQ;AAEzB,WAAO,aAAa,KAAK;AAAA,MACvB,MAAM,EAAE,UAAU,WAAW,kBAAkB;AAAA,MAC/C,SAAS;AAAA,IACX,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,MAAM,iCAAiC,EAAE,KAAK,MAAM,CAAC;AAC5D,QAAI,iBAAiB,iBAAiB,wBAAwB;AAC5D,aAAO,aAAa,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpE;AACA,WAAO,aAAa,KAAK,EAAE,OAAO,oCAAoC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1F;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aACE;AAAA,MACF,MAAM,CAAC,WAAW;AAAA,MAClB,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,MAC1C,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,QACR,aAAa;AAAA,MACf;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,MAAM,EAAE,OAAO;AAAA,cACb,UAAU;AAAA,cACV,WAAW,EAAE,QAAQ;AAAA,cACrB,mBAAmB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,YACrD,CAAC;AAAA,YACD,SAAS,EAAE,OAAO;AAAA,UACpB,CAAC;AAAA,QACH;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACvF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QAChG,EAAE,QAAQ,KAAK,aAAa,+BAA+B,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACnG;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,EAAE,OAAO,EAAE,CAAC;AAAA,QAC1D;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MAC/F;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["/**\n * Rerun from step (spec \u00A78.4)\n *\n * Endpoint:\n * - POST /api/workflows/instances/[id]/rerun-step  { stepId, contextPatch? }\n *\n * **No step-state-machine change.** The terminal `StepInstance` of the previous\n * attempt is read (for its recorded `stepType`) and then left untouched; the\n * new attempt gets a FRESH row, because `stepHandler.enterStep` creates one\n * unconditionally on every entry. Both attempts stay in the audit trail and no\n * status is ever set out of order.\n *\n * The cursor move plus `executeStep` is the same shape the definition-level\n * error handler already uses (`enterErrorHandlerStep`), so no transition record\n * is invented either.\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveSingleOrganizationIdOrDeny } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { WorkflowInstance, StepInstance } from '../../../../data/entities'\nimport { findDefinitionForInstance } from '../../../../lib/find-definition'\nimport { logWorkflowEvent, WorkflowEventTypes } from '../../../../lib/event-logger'\nimport { computeContextDiff, resolveRerunEligibility } from '../../../../lib/rerun-from-step'\nimport * as workflowExecutor from '../../../../lib/workflow-executor'\nimport { workflowInstanceResponseSchema } from '../../../openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\n\nconst logger = createLogger('workflows')\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.instances.rerun_step'],\n}\n\nconst requestSchema = z.object({\n  stepId: z.string().min(1),\n  contextPatch: z.record(z.string(), z.unknown()).optional(),\n})\n\ninterface RouteContext {\n  params: Promise<{ id: string }>\n}\n\nexport async function POST(request: NextRequest, context: RouteContext) {\n  try {\n    const params = await context.params\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = resolveSingleOrganizationIdOrDeny(scope, auth)\n\n    if (!tenantId || !organizationId) {\n      return NextResponse.json({ error: 'Missing tenant or organization context' }, { status: 400 })\n    }\n\n    const rbacService = container.resolve('rbacService')\n    const hasPermission = await rbacService.userHasAllFeatures(\n      auth.sub,\n      ['workflows.instances.rerun_step'],\n      { tenantId, organizationId }\n    )\n    if (!hasPermission) {\n      return NextResponse.json({ error: 'Insufficient permissions' }, { status: 403 })\n    }\n\n    const parsed = requestSchema.safeParse(await readJsonSafe(request))\n    if (!parsed.success) {\n      return NextResponse.json({ error: 'Invalid payload' }, { status: 400 })\n    }\n\n    const instance = await em.findOne(WorkflowInstance, {\n      id: params.id,\n      tenantId,\n      organizationId,\n    })\n    if (!instance) {\n      return NextResponse.json({ error: 'Workflow instance not found' }, { status: 404 })\n    }\n\n    const definition = await findDefinitionForInstance(em, instance)\n    if (!definition) {\n      return NextResponse.json({ error: 'Workflow definition not found' }, { status: 404 })\n    }\n\n    const stepExecutions = (await em.find(StepInstance, {\n      workflowInstanceId: instance.id,\n      stepId: parsed.data.stepId,\n      tenantId,\n      organizationId,\n    })) as StepInstance[]\n\n    const eligibility = resolveRerunEligibility({\n      instanceStatus: instance.status,\n      stepId: parsed.data.stepId,\n      definitionSteps: definition.definition.steps.map((step: { stepId: string; stepType: string }) => ({\n        stepId: step.stepId,\n        stepType: step.stepType,\n      })),\n      stepExecutions: stepExecutions.map((execution) => ({\n        id: execution.id,\n        stepId: execution.stepId,\n        stepType: execution.stepType,\n        status: execution.status,\n        enteredAt: execution.enteredAt ?? null,\n        createdAt: execution.createdAt,\n      })),\n    })\n\n    if (!eligibility.ok) {\n      return NextResponse.json({ error: eligibility.message, code: eligibility.code }, { status: 409 })\n    }\n\n    const editedContextDiff = computeContextDiff(instance.context, parsed.data.contextPatch)\n    const now = new Date()\n\n    // Every rerun logs a workflow event \u2014 the terminal StepInstance is never\n    // touched, so the event log is what links the two attempts.\n    await logWorkflowEvent(em, {\n      workflowInstanceId: instance.id,\n      eventType: WorkflowEventTypes.STEP_RERUN,\n      eventData: {\n        stepId: parsed.data.stepId,\n        editedContextDiff,\n        by: auth.sub,\n        supersededStepInstanceId: eligibility.supersededStepInstanceId,\n        previousStatus: instance.status,\n      },\n      userId: auth.sub,\n      tenantId,\n      organizationId,\n    })\n\n    if (parsed.data.contextPatch) {\n      instance.context = { ...(instance.context || {}), ...parsed.data.contextPatch }\n    }\n    // Leaving the failure queue is exactly the marker going away.\n    if (instance.metadata?.attention) {\n      instance.metadata = { ...instance.metadata, attention: null }\n    }\n    instance.pendingTransition = null\n    instance.currentStepId = parsed.data.stepId\n    instance.status = 'RUNNING'\n    instance.retryCount = (instance.retryCount || 0) + 1\n    instance.errorMessage = null\n    instance.errorDetails = null\n    instance.updatedAt = now\n    await em.flush()\n\n    const { executeStep } = await import('../../../../lib/step-handler')\n    await executeStep(\n      em,\n      instance,\n      parsed.data.stepId,\n      { workflowContext: instance.context || {}, userId: auth.sub },\n      container\n    )\n\n    // Drive the run forward from the replayed step, exactly as any other\n    // advance would.\n    const execution = await workflowExecutor.executeWorkflow(em, container, instance.id)\n    await em.refresh(instance)\n\n    return NextResponse.json({\n      data: { instance, execution, editedContextDiff },\n      message: 'Step rerun started.',\n    })\n  } catch (error) {\n    if (isCrudHttpError(error)) return NextResponse.json(error.body, { status: error.status })\n    logger.error('Error rerunning workflow step', { err: error })\n    if (error instanceof workflowExecutor.WorkflowExecutionError) {\n      return NextResponse.json({ error: error.message }, { status: 400 })\n    }\n    return NextResponse.json({ error: 'Failed to rerun the workflow step' }, { status: 500 })\n  }\n}\n\nexport const openApi = {\n  methods: {\n    POST: {\n      summary: 'Rerun a workflow instance from a step',\n      description:\n        'Replay a FAILED or PAUSED instance from one of its executed steps, optionally with an edited context patch. The previous attempt keeps its terminal step-instance row; the replay gets a fresh one, and the rerun is audited as a STEP_RERUN workflow event.',\n      tags: ['Workflows'],\n      params: z.object({ id: z.string().uuid() }),\n      requestBody: {\n        contentType: 'application/json',\n        schema: requestSchema,\n        description: 'Step to replay and an optional context patch applied before it runs.',\n      },\n      responses: [\n        {\n          status: 200,\n          description: 'Rerun started',\n          schema: z.object({\n            data: z.object({\n              instance: workflowInstanceResponseSchema,\n              execution: z.unknown(),\n              editedContextDiff: z.record(z.string(), z.unknown()),\n            }),\n            message: z.string(),\n          }),\n        },\n        { status: 400, description: 'Invalid payload', schema: z.object({ error: z.string() }) },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n        { status: 403, description: 'Insufficient permissions', schema: z.object({ error: z.string() }) },\n        { status: 404, description: 'Workflow instance not found', schema: z.object({ error: z.string() }) },\n        {\n          status: 409,\n          description: 'The step cannot be rerun (still parked, changed type, or the instance is not rerunnable)',\n          schema: z.object({ error: z.string(), code: z.string() }),\n        },\n        { status: 500, description: 'Internal server error', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAiBA,SAAsB,oBAAoB;AAC1C,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,yCAAyC;AAClD,SAAS,oBAAoB;AAC7B,SAAS,kBAAkB,oBAAoB;AAC/C,SAAS,iCAAiC;AAC1C,SAAS,kBAAkB,0BAA0B;AACrD,SAAS,oBAAoB,+BAA+B;AAC5D,YAAY,sBAAsB;AAClC,SAAS,sCAAsC;AAC/C,SAAS,oBAAoB;AAC7B,SAAS,uBAAuB;AAEhC,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,gCAAgC;AACpD;AAEA,MAAM,gBAAgB,EAAE,OAAO;AAAA,EAC7B,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACxB,cAAc,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAC3D,CAAC;AAMD,eAAsB,KAAK,SAAsB,SAAuB;AACtE,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAC7B,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,kCAAkC,OAAO,IAAI;AAEpE,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,aAAO,aAAa,KAAK,EAAE,OAAO,yCAAyC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/F;AAEA,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,gBAAgB,MAAM,YAAY;AAAA,MACtC,KAAK;AAAA,MACL,CAAC,gCAAgC;AAAA,MACjC,EAAE,UAAU,eAAe;AAAA,IAC7B;AACA,QAAI,CAAC,eAAe;AAClB,aAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjF;AAEA,UAAM,SAAS,cAAc,UAAU,MAAM,aAAa,OAAO,CAAC;AAClE,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,kBAAkB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACxE;AAEA,UAAM,WAAW,MAAM,GAAG,QAAQ,kBAAkB;AAAA,MAClD,IAAI,OAAO;AAAA,MACX;AAAA,MACA;AAAA,IACF,CAAC;AACD,QAAI,CAAC,UAAU;AACb,aAAO,aAAa,KAAK,EAAE,OAAO,8BAA8B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpF;AAEA,UAAM,aAAa,MAAM,0BAA0B,IAAI,QAAQ;AAC/D,QAAI,CAAC,YAAY;AACf,aAAO,aAAa,KAAK,EAAE,OAAO,gCAAgC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACtF;AAEA,UAAM,iBAAkB,MAAM,GAAG,KAAK,cAAc;AAAA,MAClD,oBAAoB,SAAS;AAAA,MAC7B,QAAQ,OAAO,KAAK;AAAA,MACpB;AAAA,MACA;AAAA,IACF,CAAC;AAED,UAAM,cAAc,wBAAwB;AAAA,MAC1C,gBAAgB,SAAS;AAAA,MACzB,QAAQ,OAAO,KAAK;AAAA,MACpB,iBAAiB,WAAW,WAAW,MAAM,IAAI,CAAC,UAAgD;AAAA,QAChG,QAAQ,KAAK;AAAA,QACb,UAAU,KAAK;AAAA,MACjB,EAAE;AAAA,MACF,gBAAgB,eAAe,IAAI,CAACA,gBAAe;AAAA,QACjD,IAAIA,WAAU;AAAA,QACd,QAAQA,WAAU;AAAA,QAClB,UAAUA,WAAU;AAAA,QACpB,QAAQA,WAAU;AAAA,QAClB,WAAWA,WAAU,aAAa;AAAA,QAClC,WAAWA,WAAU;AAAA,MACvB,EAAE;AAAA,IACJ,CAAC;AAED,QAAI,CAAC,YAAY,IAAI;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,YAAY,SAAS,MAAM,YAAY,KAAK,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClG;AAEA,UAAM,oBAAoB,mBAAmB,SAAS,SAAS,OAAO,KAAK,YAAY;AACvF,UAAM,MAAM,oBAAI,KAAK;AAIrB,UAAM,iBAAiB,IAAI;AAAA,MACzB,oBAAoB,SAAS;AAAA,MAC7B,WAAW,mBAAmB;AAAA,MAC9B,WAAW;AAAA,QACT,QAAQ,OAAO,KAAK;AAAA,QACpB;AAAA,QACA,IAAI,KAAK;AAAA,QACT,0BAA0B,YAAY;AAAA,QACtC,gBAAgB,SAAS;AAAA,MAC3B;AAAA,MACA,QAAQ,KAAK;AAAA,MACb;AAAA,MACA;AAAA,IACF,CAAC;AAED,QAAI,OAAO,KAAK,cAAc;AAC5B,eAAS,UAAU,EAAE,GAAI,SAAS,WAAW,CAAC,GAAI,GAAG,OAAO,KAAK,aAAa;AAAA,IAChF;AAEA,QAAI,SAAS,UAAU,WAAW;AAChC,eAAS,WAAW,EAAE,GAAG,SAAS,UAAU,WAAW,KAAK;AAAA,IAC9D;AACA,aAAS,oBAAoB;AAC7B,aAAS,gBAAgB,OAAO,KAAK;AACrC,aAAS,SAAS;AAClB,aAAS,cAAc,SAAS,cAAc,KAAK;AACnD,aAAS,eAAe;AACxB,aAAS,eAAe;AACxB,aAAS,YAAY;AACrB,UAAM,GAAG,MAAM;AAEf,UAAM,EAAE,YAAY,IAAI,MAAM,OAAO,8BAA8B;AACnE,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA,OAAO,KAAK;AAAA,MACZ,EAAE,iBAAiB,SAAS,WAAW,CAAC,GAAG,QAAQ,KAAK,IAAI;AAAA,MAC5D;AAAA,IACF;AAIA,UAAM,YAAY,MAAM,iBAAiB,gBAAgB,IAAI,WAAW,SAAS,EAAE;AACnF,UAAM,GAAG,QAAQ,QAAQ;AAEzB,WAAO,aAAa,KAAK;AAAA,MACvB,MAAM,EAAE,UAAU,WAAW,kBAAkB;AAAA,MAC/C,SAAS;AAAA,IACX,CAAC;AAAA,EACH,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,EAAG,QAAO,aAAa,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AACzF,WAAO,MAAM,iCAAiC,EAAE,KAAK,MAAM,CAAC;AAC5D,QAAI,iBAAiB,iBAAiB,wBAAwB;AAC5D,aAAO,aAAa,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpE;AACA,WAAO,aAAa,KAAK,EAAE,OAAO,oCAAoC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1F;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aACE;AAAA,MACF,MAAM,CAAC,WAAW;AAAA,MAClB,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,MAC1C,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,QACR,aAAa;AAAA,MACf;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,MAAM,EAAE,OAAO;AAAA,cACb,UAAU;AAAA,cACV,WAAW,EAAE,QAAQ;AAAA,cACrB,mBAAmB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,YACrD,CAAC;AAAA,YACD,SAAS,EAAE,OAAO;AAAA,UACpB,CAAC;AAAA,QACH;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACvF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QAChG,EAAE,QAAQ,KAAK,aAAa,+BAA+B,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACnG;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,EAAE,OAAO,EAAE,CAAC;AAAA,QAC1D;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MAC/F;AAAA,IACF;AAAA,EACF;AACF;",
   "names": ["execution"]
 }

package/dist/modules/workflows/api/instances/[id]/retry/route.js

@@ -3,12 +3,14 @@ import { z } from "zod";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { resolveSingleOrganizationIdOrDeny } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
 import { WorkflowInstance } from "../../../../data/entities.js";
 import * as workflowExecutor from "../../../../lib/workflow-executor.js";
 import { isRetryableRunOutcome } from "../../../../lib/run-outcome.js";
 import { workflowInstanceResponseSchema, workflowExecutionResultSchema } from "../../../openapi.js";
 import { createLogger } from "@open-mercato/shared/lib/logger";
+import { isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 const logger = createLogger("workflows");
 const metadata = {
   requireAuth: true,
@@ -25,7 +27,7 @@ async function POST(request, context) {
     }
     const scope = await resolveOrganizationScopeForRequest({ container, auth, request });
     const tenantId = auth.tenantId;
-    const organizationId = scope?.selectedId ?? auth.orgId;
+    const organizationId = resolveSingleOrganizationIdOrDeny(scope, auth);
     if (!tenantId || !organizationId) {
       return NextResponse.json(
         { error: "Missing tenant or organization context" },
@@ -103,6 +105,7 @@ async function POST(request, context) {
       message: "Workflow retry initiated successfully"
     });
   } catch (error) {
+    if (isCrudHttpError(error)) return NextResponse.json(error.body, { status: error.status });
     logger.error("Error retrying workflow instance", { err: error });
     if (error instanceof workflowExecutor.WorkflowExecutionError) {
       return NextResponse.json(

package/dist/modules/workflows/api/instances/[id]/retry/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/workflows/api/instances/%5Bid%5D/retry/route.ts"],
-  "sourcesContent": ["/**\n * Retry Workflow Instance API\n *\n * Endpoint:\n * - POST /api/workflows/instances/[id]/retry - Retry a failed workflow instance\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { WorkflowInstance } from '../../../../data/entities'\nimport * as workflowExecutor from '../../../../lib/workflow-executor'\nimport { isRetryableRunOutcome } from '../../../../lib/run-outcome'\nimport { workflowInstanceResponseSchema, workflowExecutionResultSchema } from '../../../openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows')\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.instances.retry'],\n}\n\ninterface RouteContext {\n  params: Promise<{\n    id: string\n  }>\n}\n\n/**\n * POST /api/workflows/instances/[id]/retry\n *\n * Retry a failed workflow instance\n */\nexport async function POST(\n  request: NextRequest,\n  context: RouteContext\n) {\n  try {\n    const params = await context.params\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = scope?.selectedId ?? auth.orgId\n\n    if (!tenantId || !organizationId) {\n      return NextResponse.json(\n        { error: 'Missing tenant or organization context' },\n        { status: 400 }\n      )\n    }\n\n    // Check retry permission\n    const rbacService = container.resolve('rbacService')\n    const hasPermission = await rbacService.userHasAllFeatures(\n      auth.sub,\n      ['workflows.instances.retry'],\n      {\n        tenantId,\n        organizationId,\n      }\n    )\n\n    if (!hasPermission) {\n      return NextResponse.json(\n        { error: 'Insufficient permissions' },\n        { status: 403 }\n      )\n    }\n\n    const instance = await findOneWithDecryption(em, WorkflowInstance, {\n      id: params.id,\n      tenantId,\n      organizationId,\n    })\n\n    if (!instance) {\n      return NextResponse.json(\n        { error: 'Workflow instance not found' },\n        { status: 404 }\n      )\n    }\n\n    // A `partial_failure` reached END: replaying the graph would re-run every\n    // part that already succeeded in order to re-attempt the parts that did\n    // not (maintainer decision, 2026-07-30). Its status is COMPLETED, so the\n    // status guard below already refuses it \u2014 this runs FIRST so the operator\n    // gets the actionable remedy instead of the generic status message.\n    if (instance.outcome != null && !isRetryableRunOutcome(instance.outcome)) {\n      return NextResponse.json(\n        {\n          error: `Cannot retry a run whose outcome is ${instance.outcome}. Rerun the specific failed step instead.`,\n          code: 'WORKFLOW_RUN_OUTCOME_NOT_RETRYABLE',\n        },\n        { status: 400 }\n      )\n    }\n\n    // Check if instance can be retried\n    if (instance.status !== 'FAILED') {\n      return NextResponse.json(\n        {\n          error: `Cannot retry workflow in ${instance.status} status. Only FAILED workflows can be retried.`,\n        },\n        { status: 400 }\n      )\n    }\n\n    const previousErrorMessage = instance.errorMessage\n    const previousErrorDetails = instance.errorDetails\n\n    instance.status = 'RUNNING'\n    instance.retryCount = (instance.retryCount || 0) + 1\n    instance.errorMessage = null\n    instance.errorDetails = null\n    instance.updatedAt = new Date()\n\n    await em.flush()\n\n    let result\n    try {\n      result = await workflowExecutor.executeWorkflow(em, container, instance.id)\n    } catch (executionError) {\n      instance.status = 'FAILED'\n      instance.errorMessage = previousErrorMessage\n      instance.errorDetails = previousErrorDetails\n      instance.updatedAt = new Date()\n      await em.flush()\n      throw executionError\n    }\n\n    await em.refresh(instance)\n\n    return NextResponse.json({\n      data: {\n        instance,\n        execution: result,\n      },\n      message: 'Workflow retry initiated successfully',\n    })\n  } catch (error) {\n    logger.error('Error retrying workflow instance', { err: error })\n\n    // Handle specific errors\n    if (error instanceof workflowExecutor.WorkflowExecutionError) {\n      return NextResponse.json(\n        { error: error.message },\n        { status: 400 }\n      )\n    }\n\n    return NextResponse.json(\n      { error: 'Failed to retry workflow instance' },\n      { status: 500 }\n    )\n  }\n}\n\nexport const openApi = {\n  methods: {\n    POST: {\n      summary: 'Retry failed workflow instance',\n      description: 'Retry a failed workflow instance from its current step. The workflow will be reset to RUNNING status and execution will continue.',\n      tags: ['Workflows'],\n      params: z.object({\n        id: z.string().uuid(),\n      }),\n      responses: [\n        {\n          status: 200,\n          description: 'Workflow retry initiated successfully',\n          schema: z.object({\n            data: z.object({\n              instance: workflowInstanceResponseSchema,\n              execution: workflowExecutionResultSchema,\n            }),\n            message: z.string(),\n          }),\n        },\n        {\n          status: 400,\n          description: 'Bad request - Workflow cannot be retried in its current status or with its current outcome, or execution error',\n          schema: z.object({ error: z.string(), code: z.string().optional() }),\n        },\n        {\n          status: 401,\n          description: 'Unauthorized',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 403,\n          description: 'Forbidden - Insufficient permissions',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 404,\n          description: 'Workflow instance not found',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 500,\n          description: 'Internal server error',\n          schema: z.object({ error: z.string() }),\n        },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAOA,SAAsB,oBAAoB;AAC1C,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,6BAA6B;AACtC,SAAS,wBAAwB;AACjC,YAAY,sBAAsB;AAClC,SAAS,6BAA6B;AACtC,SAAS,gCAAgC,qCAAqC;AAC9E,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,2BAA2B;AAC/C;AAaA,eAAsB,KACpB,SACA,SACA;AACA,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAC7B,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,OAAO,cAAc,KAAK;AAEjD,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,yCAAyC;AAAA,QAClD,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,gBAAgB,MAAM,YAAY;AAAA,MACtC,KAAK;AAAA,MACL,CAAC,2BAA2B;AAAA,MAC5B;AAAA,QACE;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,eAAe;AAClB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,2BAA2B;AAAA,QACpC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,sBAAsB,IAAI,kBAAkB;AAAA,MACjE,IAAI,OAAO;AAAA,MACX;AAAA,MACA;AAAA,IACF,CAAC;AAED,QAAI,CAAC,UAAU;AACb,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,8BAA8B;AAAA,QACvC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAOA,QAAI,SAAS,WAAW,QAAQ,CAAC,sBAAsB,SAAS,OAAO,GAAG;AACxE,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO,uCAAuC,SAAS,OAAO;AAAA,UAC9D,MAAM;AAAA,QACR;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,QAAI,SAAS,WAAW,UAAU;AAChC,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO,4BAA4B,SAAS,MAAM;AAAA,QACpD;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,uBAAuB,SAAS;AACtC,UAAM,uBAAuB,SAAS;AAEtC,aAAS,SAAS;AAClB,aAAS,cAAc,SAAS,cAAc,KAAK;AACnD,aAAS,eAAe;AACxB,aAAS,eAAe;AACxB,aAAS,YAAY,oBAAI,KAAK;AAE9B,UAAM,GAAG,MAAM;AAEf,QAAI;AACJ,QAAI;AACF,eAAS,MAAM,iBAAiB,gBAAgB,IAAI,WAAW,SAAS,EAAE;AAAA,IAC5E,SAAS,gBAAgB;AACvB,eAAS,SAAS;AAClB,eAAS,eAAe;AACxB,eAAS,eAAe;AACxB,eAAS,YAAY,oBAAI,KAAK;AAC9B,YAAM,GAAG,MAAM;AACf,YAAM;AAAA,IACR;AAEA,UAAM,GAAG,QAAQ,QAAQ;AAEzB,WAAO,aAAa,KAAK;AAAA,MACvB,MAAM;AAAA,QACJ;AAAA,QACA,WAAW;AAAA,MACb;AAAA,MACA,SAAS;AAAA,IACX,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,MAAM,oCAAoC,EAAE,KAAK,MAAM,CAAC;AAG/D,QAAI,iBAAiB,iBAAiB,wBAAwB;AAC5D,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,MAAM,QAAQ;AAAA,QACvB,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,oCAAoC;AAAA,MAC7C,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,MAAM,CAAC,WAAW;AAAA,MAClB,QAAQ,EAAE,OAAO;AAAA,QACf,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,MACtB,CAAC;AAAA,MACD,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,MAAM,EAAE,OAAO;AAAA,cACb,UAAU;AAAA,cACV,WAAW;AAAA,YACb,CAAC;AAAA,YACD,SAAS,EAAE,OAAO;AAAA,UACpB,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AAAA,QACrE;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["/**\n * Retry Workflow Instance API\n *\n * Endpoint:\n * - POST /api/workflows/instances/[id]/retry - Retry a failed workflow instance\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveSingleOrganizationIdOrDeny } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { WorkflowInstance } from '../../../../data/entities'\nimport * as workflowExecutor from '../../../../lib/workflow-executor'\nimport { isRetryableRunOutcome } from '../../../../lib/run-outcome'\nimport { workflowInstanceResponseSchema, workflowExecutionResultSchema } from '../../../openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\n\nconst logger = createLogger('workflows')\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.instances.retry'],\n}\n\ninterface RouteContext {\n  params: Promise<{\n    id: string\n  }>\n}\n\n/**\n * POST /api/workflows/instances/[id]/retry\n *\n * Retry a failed workflow instance\n */\nexport async function POST(\n  request: NextRequest,\n  context: RouteContext\n) {\n  try {\n    const params = await context.params\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = resolveSingleOrganizationIdOrDeny(scope, auth)\n\n    if (!tenantId || !organizationId) {\n      return NextResponse.json(\n        { error: 'Missing tenant or organization context' },\n        { status: 400 }\n      )\n    }\n\n    // Check retry permission\n    const rbacService = container.resolve('rbacService')\n    const hasPermission = await rbacService.userHasAllFeatures(\n      auth.sub,\n      ['workflows.instances.retry'],\n      {\n        tenantId,\n        organizationId,\n      }\n    )\n\n    if (!hasPermission) {\n      return NextResponse.json(\n        { error: 'Insufficient permissions' },\n        { status: 403 }\n      )\n    }\n\n    const instance = await findOneWithDecryption(em, WorkflowInstance, {\n      id: params.id,\n      tenantId,\n      organizationId,\n    })\n\n    if (!instance) {\n      return NextResponse.json(\n        { error: 'Workflow instance not found' },\n        { status: 404 }\n      )\n    }\n\n    // A `partial_failure` reached END: replaying the graph would re-run every\n    // part that already succeeded in order to re-attempt the parts that did\n    // not (maintainer decision, 2026-07-30). Its status is COMPLETED, so the\n    // status guard below already refuses it \u2014 this runs FIRST so the operator\n    // gets the actionable remedy instead of the generic status message.\n    if (instance.outcome != null && !isRetryableRunOutcome(instance.outcome)) {\n      return NextResponse.json(\n        {\n          error: `Cannot retry a run whose outcome is ${instance.outcome}. Rerun the specific failed step instead.`,\n          code: 'WORKFLOW_RUN_OUTCOME_NOT_RETRYABLE',\n        },\n        { status: 400 }\n      )\n    }\n\n    // Check if instance can be retried\n    if (instance.status !== 'FAILED') {\n      return NextResponse.json(\n        {\n          error: `Cannot retry workflow in ${instance.status} status. Only FAILED workflows can be retried.`,\n        },\n        { status: 400 }\n      )\n    }\n\n    const previousErrorMessage = instance.errorMessage\n    const previousErrorDetails = instance.errorDetails\n\n    instance.status = 'RUNNING'\n    instance.retryCount = (instance.retryCount || 0) + 1\n    instance.errorMessage = null\n    instance.errorDetails = null\n    instance.updatedAt = new Date()\n\n    await em.flush()\n\n    let result\n    try {\n      result = await workflowExecutor.executeWorkflow(em, container, instance.id)\n    } catch (executionError) {\n      instance.status = 'FAILED'\n      instance.errorMessage = previousErrorMessage\n      instance.errorDetails = previousErrorDetails\n      instance.updatedAt = new Date()\n      await em.flush()\n      throw executionError\n    }\n\n    await em.refresh(instance)\n\n    return NextResponse.json({\n      data: {\n        instance,\n        execution: result,\n      },\n      message: 'Workflow retry initiated successfully',\n    })\n  } catch (error) {\n    if (isCrudHttpError(error)) return NextResponse.json(error.body, { status: error.status })\n    logger.error('Error retrying workflow instance', { err: error })\n\n    // Handle specific errors\n    if (error instanceof workflowExecutor.WorkflowExecutionError) {\n      return NextResponse.json(\n        { error: error.message },\n        { status: 400 }\n      )\n    }\n\n    return NextResponse.json(\n      { error: 'Failed to retry workflow instance' },\n      { status: 500 }\n    )\n  }\n}\n\nexport const openApi = {\n  methods: {\n    POST: {\n      summary: 'Retry failed workflow instance',\n      description: 'Retry a failed workflow instance from its current step. The workflow will be reset to RUNNING status and execution will continue.',\n      tags: ['Workflows'],\n      params: z.object({\n        id: z.string().uuid(),\n      }),\n      responses: [\n        {\n          status: 200,\n          description: 'Workflow retry initiated successfully',\n          schema: z.object({\n            data: z.object({\n              instance: workflowInstanceResponseSchema,\n              execution: workflowExecutionResultSchema,\n            }),\n            message: z.string(),\n          }),\n        },\n        {\n          status: 400,\n          description: 'Bad request - Workflow cannot be retried in its current status or with its current outcome, or execution error',\n          schema: z.object({ error: z.string(), code: z.string().optional() }),\n        },\n        {\n          status: 401,\n          description: 'Unauthorized',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 403,\n          description: 'Forbidden - Insufficient permissions',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 404,\n          description: 'Workflow instance not found',\n          schema: z.object({ error: z.string() }),\n        },\n        {\n          status: 500,\n          description: 'Internal server error',\n          schema: z.object({ error: z.string() }),\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAOA,SAAsB,oBAAoB;AAC1C,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,yCAAyC;AAClD,SAAS,6BAA6B;AACtC,SAAS,wBAAwB;AACjC,YAAY,sBAAsB;AAClC,SAAS,6BAA6B;AACtC,SAAS,gCAAgC,qCAAqC;AAC9E,SAAS,oBAAoB;AAC7B,SAAS,uBAAuB;AAEhC,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,2BAA2B;AAC/C;AAaA,eAAsB,KACpB,SACA,SACA;AACA,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAC7B,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,kCAAkC,OAAO,IAAI;AAEpE,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,yCAAyC;AAAA,QAClD,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,gBAAgB,MAAM,YAAY;AAAA,MACtC,KAAK;AAAA,MACL,CAAC,2BAA2B;AAAA,MAC5B;AAAA,QACE;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,eAAe;AAClB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,2BAA2B;AAAA,QACpC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,sBAAsB,IAAI,kBAAkB;AAAA,MACjE,IAAI,OAAO;AAAA,MACX;AAAA,MACA;AAAA,IACF,CAAC;AAED,QAAI,CAAC,UAAU;AACb,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,8BAA8B;AAAA,QACvC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAOA,QAAI,SAAS,WAAW,QAAQ,CAAC,sBAAsB,SAAS,OAAO,GAAG;AACxE,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO,uCAAuC,SAAS,OAAO;AAAA,UAC9D,MAAM;AAAA,QACR;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,QAAI,SAAS,WAAW,UAAU;AAChC,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO,4BAA4B,SAAS,MAAM;AAAA,QACpD;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,uBAAuB,SAAS;AACtC,UAAM,uBAAuB,SAAS;AAEtC,aAAS,SAAS;AAClB,aAAS,cAAc,SAAS,cAAc,KAAK;AACnD,aAAS,eAAe;AACxB,aAAS,eAAe;AACxB,aAAS,YAAY,oBAAI,KAAK;AAE9B,UAAM,GAAG,MAAM;AAEf,QAAI;AACJ,QAAI;AACF,eAAS,MAAM,iBAAiB,gBAAgB,IAAI,WAAW,SAAS,EAAE;AAAA,IAC5E,SAAS,gBAAgB;AACvB,eAAS,SAAS;AAClB,eAAS,eAAe;AACxB,eAAS,eAAe;AACxB,eAAS,YAAY,oBAAI,KAAK;AAC9B,YAAM,GAAG,MAAM;AACf,YAAM;AAAA,IACR;AAEA,UAAM,GAAG,QAAQ,QAAQ;AAEzB,WAAO,aAAa,KAAK;AAAA,MACvB,MAAM;AAAA,QACJ;AAAA,QACA,WAAW;AAAA,MACb;AAAA,MACA,SAAS;AAAA,IACX,CAAC;AAAA,EACH,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,EAAG,QAAO,aAAa,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AACzF,WAAO,MAAM,oCAAoC,EAAE,KAAK,MAAM,CAAC;AAG/D,QAAI,iBAAiB,iBAAiB,wBAAwB;AAC5D,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,MAAM,QAAQ;AAAA,QACvB,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,oCAAoC;AAAA,MAC7C,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,MAAM,CAAC,WAAW;AAAA,MAClB,QAAQ,EAAE,OAAO;AAAA,QACf,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,MACtB,CAAC;AAAA,MACD,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,MAAM,EAAE,OAAO;AAAA,cACb,UAAU;AAAA,cACV,WAAW;AAAA,YACb,CAAC;AAAA,YACD,SAAS,EAAE,OAAO;AAAA,UACpB,CAAC;AAAA,QACH;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AAAA,QACrE;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/workflows/api/instances/[id]/signal/route.js

@@ -2,6 +2,7 @@ import { NextResponse } from "next/server";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { resolveSingleOrganizationIdOrDeny } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import { z } from "zod";
 import { sendSignal } from "../../../../lib/signal-handler.js";
 import {
@@ -11,6 +12,7 @@ import {
   workflowErrorSchema
 } from "../../../openapi.js";
 import { createLogger } from "@open-mercato/shared/lib/logger";
+import { isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 const logger = createLogger("workflows");
 const metadata = {
   requireAuth: true,
@@ -31,7 +33,7 @@ async function POST(request, context) {
     }
     const scope = await resolveOrganizationScopeForRequest({ container, auth, request });
     const tenantId = auth.tenantId;
-    const organizationId = scope?.selectedId ?? auth.orgId;
+    const organizationId = resolveSingleOrganizationIdOrDeny(scope, auth);
     if (!tenantId || !organizationId) {
       return NextResponse.json(
         { error: "Missing tenant or organization context" },
@@ -68,6 +70,7 @@ async function POST(request, context) {
       message: "Signal sent successfully"
     });
   } catch (error) {
+    if (isCrudHttpError(error)) return NextResponse.json(error.body, { status: error.status });
     logger.error("Signal request failed", { component: "signal", err: error });
     if (error.name === "ZodError") {
       return NextResponse.json(

package/dist/modules/workflows/api/instances/[id]/signal/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/workflows/api/instances/%5Bid%5D/signal/route.ts"],
-  "sourcesContent": ["import { NextRequest, NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { z } from 'zod'\nimport { sendSignal } from '../../../../lib/signal-handler'\nimport {\n  workflowsTag,\n  sendSignalRequestSchema,\n  sendSignalResponseSchema,\n  workflowErrorSchema,\n} from '../../../openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows')\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.instances.signal'],\n}\n\nconst sendSignalSchema = z.object({\n  signalName: z.string().min(1, 'Signal name required'),\n  payload: z.record(z.string(), z.any()).optional(),\n})\n\ninterface RouteContext {\n  params: Promise<{\n    id: string\n  }>\n}\n\n/**\n * POST /api/workflows/instances/[id]/signal\n *\n * Send signal to workflow instance\n */\nexport async function POST(request: NextRequest, context: RouteContext) {\n  try {\n    const params = await context.params\n\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = scope?.selectedId ?? auth.orgId\n\n    if (!tenantId || !organizationId) {\n      return NextResponse.json(\n        { error: 'Missing tenant or organization context' },\n        { status: 400 }\n      )\n    }\n\n    logger.debug('Signal auth context resolved', {\n      component: 'signal',\n      userId: auth.sub,\n      tenantId,\n      organizationId,\n    })\n\n    // Check permission\n    const rbacService = container.resolve('rbacService')\n    const hasPermission = await rbacService.userHasAllFeatures(\n      auth.sub,\n      ['workflows.instances.signal'],\n      { tenantId, organizationId }\n    )\n\n    if (!hasPermission) {\n      return NextResponse.json({ error: 'Insufficient permissions' }, { status: 403 })\n    }\n\n    const body = await request.json()\n\n    const input = sendSignalSchema.parse(body)\n\n    await sendSignal(em, container, {\n      instanceId: params.id,\n      signalName: input.signalName,\n      payload: input.payload,\n      userId: auth.sub,\n      tenantId,\n      organizationId,\n    })\n\n    return NextResponse.json({\n      success: true,\n      message: 'Signal sent successfully',\n    })\n  } catch (error: any) {\n    logger.error('Signal request failed', { component: 'signal', err: error })\n\n    // Handle Zod validation errors\n    if (error.name === 'ZodError') {\n      return NextResponse.json(\n        { error: 'Invalid request body', details: error.errors },\n        { status: 400 }\n      )\n    }\n\n    // Handle SignalError custom errors\n    if (error.code === 'INSTANCE_NOT_FOUND') {\n      return NextResponse.json({ error: error.message }, { status: 404 })\n    }\n    if (error.code === 'WORKFLOW_NOT_PAUSED' || error.code === 'NOT_WAITING_FOR_SIGNAL') {\n      return NextResponse.json({ error: error.message }, { status: 409 })\n    }\n    if (error.code === 'SIGNAL_NAME_MISMATCH') {\n      return NextResponse.json({ error: error.message }, { status: 400 })\n    }\n    if (error.code === 'DEFINITION_NOT_FOUND') {\n      return NextResponse.json({ error: error.message }, { status: 404 })\n    }\n    if (error.code === 'TRANSITION_FAILED') {\n      return NextResponse.json({ error: error.message }, { status: 500 })\n    }\n\n    // Generic error handler\n    return NextResponse.json(\n      {\n        error: error.message || 'Failed to send signal',\n        details: error.details || undefined,\n      },\n      { status: 500 }\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: workflowsTag,\n  summary: 'Send signal to workflow instance',\n  methods: {\n    POST: {\n      summary: 'Send signal to specific workflow',\n      description: 'Sends a signal to a specific workflow instance waiting for a signal. The workflow must be in PAUSED status and waiting for the specified signal.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: sendSignalRequestSchema,\n      },\n      responses: [\n        { status: 200, description: 'Signal sent successfully', schema: sendSignalResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid request body or signal name mismatch', schema: workflowErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: workflowErrorSchema },\n        { status: 403, description: 'Insufficient permissions', schema: workflowErrorSchema },\n        { status: 404, description: 'Instance or definition not found', schema: workflowErrorSchema },\n        { status: 409, description: 'Workflow not paused or not waiting for signal', schema: workflowErrorSchema },\n        { status: 500, description: 'Internal server error or transition failed', schema: workflowErrorSchema },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAsB,oBAAoB;AAE1C,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,SAAS;AAClB,SAAS,kBAAkB;AAC3B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,4BAA4B;AAChD;AAEA,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,YAAY,EAAE,OAAO,EAAE,IAAI,GAAG,sBAAsB;AAAA,EACpD,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC,EAAE,SAAS;AAClD,CAAC;AAaD,eAAsB,KAAK,SAAsB,SAAuB;AACtE,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAE7B,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,OAAO,cAAc,KAAK;AAEjD,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,yCAAyC;AAAA,QAClD,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,WAAO,MAAM,gCAAgC;AAAA,MAC3C,WAAW;AAAA,MACX,QAAQ,KAAK;AAAA,MACb;AAAA,MACA;AAAA,IACF,CAAC;AAGD,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,gBAAgB,MAAM,YAAY;AAAA,MACtC,KAAK;AAAA,MACL,CAAC,4BAA4B;AAAA,MAC7B,EAAE,UAAU,eAAe;AAAA,IAC7B;AAEA,QAAI,CAAC,eAAe;AAClB,aAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjF;AAEA,UAAM,OAAO,MAAM,QAAQ,KAAK;AAEhC,UAAM,QAAQ,iBAAiB,MAAM,IAAI;AAEzC,UAAM,WAAW,IAAI,WAAW;AAAA,MAC9B,YAAY,OAAO;AAAA,MACnB,YAAY,MAAM;AAAA,MAClB,SAAS,MAAM;AAAA,MACf,QAAQ,KAAK;AAAA,MACb;AAAA,MACA;AAAA,IACF,CAAC;AAED,WAAO,aAAa,KAAK;AAAA,MACvB,SAAS;AAAA,MACT,SAAS;AAAA,IACX,CAAC;AAAA,EACH,SAAS,OAAY;AACnB,WAAO,MAAM,yBAAyB,EAAE,WAAW,UAAU,KAAK,MAAM,CAAC;AAGzE,QAAI,MAAM,SAAS,YAAY;AAC7B,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,wBAAwB,SAAS,MAAM,OAAO;AAAA,QACvD,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,QAAI,MAAM,SAAS,sBAAsB;AACvC,aAAO,aAAa,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpE;AACA,QAAI,MAAM,SAAS,yBAAyB,MAAM,SAAS,0BAA0B;AACnF,aAAO,aAAa,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpE;AACA,QAAI,MAAM,SAAS,wBAAwB;AACzC,aAAO,aAAa,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpE;AACA,QAAI,MAAM,SAAS,wBAAwB;AACzC,aAAO,aAAa,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpE;AACA,QAAI,MAAM,SAAS,qBAAqB;AACtC,aAAO,aAAa,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpE;AAGA,WAAO,aAAa;AAAA,MAClB;AAAA,QACE,OAAO,MAAM,WAAW;AAAA,QACxB,SAAS,MAAM,WAAW;AAAA,MAC5B;AAAA,MACA,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,yBAAyB;AAAA,MAC3F;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,gDAAgD,QAAQ,oBAAoB;AAAA,QACxG,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,oBAAoB;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,oCAAoC,QAAQ,oBAAoB;AAAA,QAC5F,EAAE,QAAQ,KAAK,aAAa,iDAAiD,QAAQ,oBAAoB;AAAA,QACzG,EAAE,QAAQ,KAAK,aAAa,8CAA8C,QAAQ,oBAAoB;AAAA,MACxG;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextRequest, NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveSingleOrganizationIdOrDeny } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { z } from 'zod'\nimport { sendSignal } from '../../../../lib/signal-handler'\nimport {\n  workflowsTag,\n  sendSignalRequestSchema,\n  sendSignalResponseSchema,\n  workflowErrorSchema,\n} from '../../../openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\n\nconst logger = createLogger('workflows')\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.instances.signal'],\n}\n\nconst sendSignalSchema = z.object({\n  signalName: z.string().min(1, 'Signal name required'),\n  payload: z.record(z.string(), z.any()).optional(),\n})\n\ninterface RouteContext {\n  params: Promise<{\n    id: string\n  }>\n}\n\n/**\n * POST /api/workflows/instances/[id]/signal\n *\n * Send signal to workflow instance\n */\nexport async function POST(request: NextRequest, context: RouteContext) {\n  try {\n    const params = await context.params\n\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = resolveSingleOrganizationIdOrDeny(scope, auth)\n\n    if (!tenantId || !organizationId) {\n      return NextResponse.json(\n        { error: 'Missing tenant or organization context' },\n        { status: 400 }\n      )\n    }\n\n    logger.debug('Signal auth context resolved', {\n      component: 'signal',\n      userId: auth.sub,\n      tenantId,\n      organizationId,\n    })\n\n    // Check permission\n    const rbacService = container.resolve('rbacService')\n    const hasPermission = await rbacService.userHasAllFeatures(\n      auth.sub,\n      ['workflows.instances.signal'],\n      { tenantId, organizationId }\n    )\n\n    if (!hasPermission) {\n      return NextResponse.json({ error: 'Insufficient permissions' }, { status: 403 })\n    }\n\n    const body = await request.json()\n\n    const input = sendSignalSchema.parse(body)\n\n    await sendSignal(em, container, {\n      instanceId: params.id,\n      signalName: input.signalName,\n      payload: input.payload,\n      userId: auth.sub,\n      tenantId,\n      organizationId,\n    })\n\n    return NextResponse.json({\n      success: true,\n      message: 'Signal sent successfully',\n    })\n  } catch (error: any) {\n    if (isCrudHttpError(error)) return NextResponse.json(error.body, { status: error.status })\n    logger.error('Signal request failed', { component: 'signal', err: error })\n\n    // Handle Zod validation errors\n    if (error.name === 'ZodError') {\n      return NextResponse.json(\n        { error: 'Invalid request body', details: error.errors },\n        { status: 400 }\n      )\n    }\n\n    // Handle SignalError custom errors\n    if (error.code === 'INSTANCE_NOT_FOUND') {\n      return NextResponse.json({ error: error.message }, { status: 404 })\n    }\n    if (error.code === 'WORKFLOW_NOT_PAUSED' || error.code === 'NOT_WAITING_FOR_SIGNAL') {\n      return NextResponse.json({ error: error.message }, { status: 409 })\n    }\n    if (error.code === 'SIGNAL_NAME_MISMATCH') {\n      return NextResponse.json({ error: error.message }, { status: 400 })\n    }\n    if (error.code === 'DEFINITION_NOT_FOUND') {\n      return NextResponse.json({ error: error.message }, { status: 404 })\n    }\n    if (error.code === 'TRANSITION_FAILED') {\n      return NextResponse.json({ error: error.message }, { status: 500 })\n    }\n\n    // Generic error handler\n    return NextResponse.json(\n      {\n        error: error.message || 'Failed to send signal',\n        details: error.details || undefined,\n      },\n      { status: 500 }\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: workflowsTag,\n  summary: 'Send signal to workflow instance',\n  methods: {\n    POST: {\n      summary: 'Send signal to specific workflow',\n      description: 'Sends a signal to a specific workflow instance waiting for a signal. The workflow must be in PAUSED status and waiting for the specified signal.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: sendSignalRequestSchema,\n      },\n      responses: [\n        { status: 200, description: 'Signal sent successfully', schema: sendSignalResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid request body or signal name mismatch', schema: workflowErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: workflowErrorSchema },\n        { status: 403, description: 'Insufficient permissions', schema: workflowErrorSchema },\n        { status: 404, description: 'Instance or definition not found', schema: workflowErrorSchema },\n        { status: 409, description: 'Workflow not paused or not waiting for signal', schema: workflowErrorSchema },\n        { status: 500, description: 'Internal server error or transition failed', schema: workflowErrorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAsB,oBAAoB;AAE1C,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,yCAAyC;AAClD,SAAS,SAAS;AAClB,SAAS,kBAAkB;AAC3B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAC7B,SAAS,uBAAuB;AAEhC,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,4BAA4B;AAChD;AAEA,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,YAAY,EAAE,OAAO,EAAE,IAAI,GAAG,sBAAsB;AAAA,EACpD,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC,EAAE,SAAS;AAClD,CAAC;AAaD,eAAsB,KAAK,SAAsB,SAAuB;AACtE,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAE7B,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,kCAAkC,OAAO,IAAI;AAEpE,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,yCAAyC;AAAA,QAClD,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,WAAO,MAAM,gCAAgC;AAAA,MAC3C,WAAW;AAAA,MACX,QAAQ,KAAK;AAAA,MACb;AAAA,MACA;AAAA,IACF,CAAC;AAGD,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,gBAAgB,MAAM,YAAY;AAAA,MACtC,KAAK;AAAA,MACL,CAAC,4BAA4B;AAAA,MAC7B,EAAE,UAAU,eAAe;AAAA,IAC7B;AAEA,QAAI,CAAC,eAAe;AAClB,aAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjF;AAEA,UAAM,OAAO,MAAM,QAAQ,KAAK;AAEhC,UAAM,QAAQ,iBAAiB,MAAM,IAAI;AAEzC,UAAM,WAAW,IAAI,WAAW;AAAA,MAC9B,YAAY,OAAO;AAAA,MACnB,YAAY,MAAM;AAAA,MAClB,SAAS,MAAM;AAAA,MACf,QAAQ,KAAK;AAAA,MACb;AAAA,MACA;AAAA,IACF,CAAC;AAED,WAAO,aAAa,KAAK;AAAA,MACvB,SAAS;AAAA,MACT,SAAS;AAAA,IACX,CAAC;AAAA,EACH,SAAS,OAAY;AACnB,QAAI,gBAAgB,KAAK,EAAG,QAAO,aAAa,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AACzF,WAAO,MAAM,yBAAyB,EAAE,WAAW,UAAU,KAAK,MAAM,CAAC;AAGzE,QAAI,MAAM,SAAS,YAAY;AAC7B,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,wBAAwB,SAAS,MAAM,OAAO;AAAA,QACvD,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,QAAI,MAAM,SAAS,sBAAsB;AACvC,aAAO,aAAa,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpE;AACA,QAAI,MAAM,SAAS,yBAAyB,MAAM,SAAS,0BAA0B;AACnF,aAAO,aAAa,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpE;AACA,QAAI,MAAM,SAAS,wBAAwB;AACzC,aAAO,aAAa,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpE;AACA,QAAI,MAAM,SAAS,wBAAwB;AACzC,aAAO,aAAa,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpE;AACA,QAAI,MAAM,SAAS,qBAAqB;AACtC,aAAO,aAAa,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpE;AAGA,WAAO,aAAa;AAAA,MAClB;AAAA,QACE,OAAO,MAAM,WAAW;AAAA,QACxB,SAAS,MAAM,WAAW;AAAA,MAC5B;AAAA,MACA,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,yBAAyB;AAAA,MAC3F;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,gDAAgD,QAAQ,oBAAoB;AAAA,QACxG,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,oBAAoB;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,oCAAoC,QAAQ,oBAAoB;AAAA,QAC5F,EAAE,QAAQ,KAAK,aAAa,iDAAiD,QAAQ,oBAAoB;AAAA,QACzG,EAAE,QAAQ,KAAK,aAAa,8CAA8C,QAAQ,oBAAoB;AAAA,MACxG;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/workflows/api/instances/[id]/step-through/route.js

@@ -3,7 +3,7 @@ import { z } from "zod";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
-import { resolveOrganizationScopeFilter } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
+import { resolveOrganizationScopeFilter, resolveSingleOrganizationIdOrDeny } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import { WorkflowInstance } from "../../../../data/entities.js";
 import * as workflowExecutor from "../../../../lib/workflow-executor.js";
 import { logWorkflowEvent } from "../../../../lib/event-logger.js";
@@ -14,6 +14,7 @@ import {
 } from "../../../../lib/step-through.js";
 import { workflowsTag, workflowErrorSchema } from "../../../openapi.js";
 import { createLogger } from "@open-mercato/shared/lib/logger";
+import { isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 const logger = createLogger("workflows");
 const metadata = {
   requireAuth: true,
@@ -33,7 +34,7 @@ async function POST(request, context) {
     }
     const scope = await resolveOrganizationScopeForRequest({ container, auth, request });
     const tenantId = auth.tenantId;
-    const organizationId = scope?.selectedId ?? auth.orgId ?? null;
+    const organizationId = resolveSingleOrganizationIdOrDeny(scope, auth) ?? null;
     const orgFilter = resolveOrganizationScopeFilter(scope, auth);
     if (!tenantId) {
       return NextResponse.json({ error: "Missing tenant context" }, { status: 400 });
@@ -107,6 +108,7 @@ async function POST(request, context) {
       }
     });
   } catch (error) {
+    if (isCrudHttpError(error)) return NextResponse.json(error.body, { status: error.status });
     logger.error("Error advancing step-through run", { err: error });
     return NextResponse.json({ error: "Failed to advance step-through run" }, { status: 500 });
   }