@open-mercato/core 0.8.1-develop.7296.1.2111d779db → 0.9.0

package/dist/modules/workflows/lib/activity-types.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/workflows/lib/activity-types.ts"],
-  "sourcesContent": ["/**\n * Workflows Module - Built-in Activity Types\n *\n * Registers the built-in activity types with the Activity Registry (spec\n * 2026-07-26-workflows-ux-redesign.md section 3.2). Each entry delegates to\n * the existing STABLE executeX handlers in activity-executor.ts \u2014 the\n * handlers keep their exported signatures; the registry only adapts them to\n * the uniform (config, ctx, deps) shape.\n *\n * The executor is reached through a runtime binding seam instead of any\n * import: this module sits on the registry bootstrap chain that validators.ts\n * and the visual editor import, and even a dynamic import('./activity-executor')\n * gets chunked into the client bundle by Turbopack, dragging queue/bullmq and\n * node builtins into contexts that forbid them. activity-executor.ts binds its\n * own handlers via bindActivityExecutor() when it loads on the server, so the\n * closures below resolve them without the bundler ever seeing an edge.\n * Registration itself needs only the schemas, form specs, and metadata. WAIT\n * is the exception: its pure delay executes inline so the timer is scheduled\n * synchronously (matching executeWait's observable behavior under fake\n * timers).\n */\n\nimport { z, type ZodTypeAny } from 'zod'\nimport { commandRegistry } from '@open-mercato/shared/lib/commands/registry'\nimport { getActivityType, registerActivityType } from './activity-registry'\nimport { calculateWaitDelayMs } from './duration'\nimport {\n  callApiConfigSchema,\n  callWebhookConfigSchema,\n  emitEventConfigSchema,\n  executeFunctionConfigSchema,\n  invokeAgentConfigSchema,\n  sendEmailConfigSchema,\n  setVariableConfigSchema,\n  updateEntityConfigSchema,\n  waitConfigSchema,\n  type SetVariableConfig,\n  type WaitConfig,\n} from '../data/activity-config-schemas'\n\nconst BUILTIN_ACTIVITY_TYPE_IDS = [\n  'SEND_EMAIL',\n  'EMIT_EVENT',\n  'UPDATE_ENTITY',\n  'CALL_WEBHOOK',\n  'EXECUTE_FUNCTION',\n  'WAIT',\n  'CALL_API',\n  'SET_VARIABLE',\n  'INVOKE_AGENT',\n] as const\n\nconst i18nKeyFor = (id: string): string => `workflows.activities.types.${id}`\n\nexport type ActivityExecutorBinding = Pick<\n  typeof import('./activity-executor'),\n  | 'executeSendEmail'\n  | 'executeEmitEvent'\n  | 'executeUpdateEntity'\n  | 'executeCallWebhook'\n  | 'executeFunction'\n  | 'executeCallApi'\n  | 'executeSetVariable'\n  | 'executeInvokeAgent'\n>\n\nlet boundExecutor: ActivityExecutorBinding | null = null\n\nexport function bindActivityExecutor(executor: ActivityExecutorBinding): void {\n  boundExecutor = executor\n}\n\nconst loadExecutor = async (): Promise<ActivityExecutorBinding> => {\n  if (!boundExecutor) {\n    throw new Error('[internal] Activity executor is not bound in this runtime')\n  }\n  return boundExecutor\n}\n\n/**\n * UPDATE_ENTITY does NOT put the command's return value into context \u2014 it puts\n * `executeUpdateEntity`'s envelope there (`{ executed, commandId, result,\n * logEntryId }`, activity-executor.ts), and the command's own output sits under\n * `result`. Both merge paths carry that envelope verbatim: the sync transition\n * route namespaces it under `activityName || activityType`, the async route\n * under `${activityId}_result`. So the contract has to be the envelope, exactly\n * as INVOKE_AGENT's is \u2014 a contract naming the command's bare keys advertises\n * `<activity>.dealId` for a context that only ever holds\n * `<activity>.result.dealId`.\n */\nconst updateEntityEnvelopeShape = {\n  executed: z.boolean(),\n  commandId: z.string(),\n  logEntryId: z.string(),\n}\n\n/**\n * Resolves UPDATE_ENTITY's output contract from the command registry (import\n * is UI-safe: `commands/registry` pulls in only the logger, no ORM). The\n * lookup is sync over already-registered handlers; a missing or not-yet-loaded\n * handler \u2014 or one without an `outputSchema` \u2014 degrades honestly to 'unknown',\n * which prefix-resolves every ref under the activity key and so stays exactly\n * as permissive as it was before the envelope was modelled.\n */\nconst resolveCommandOutputContract = (config: unknown): ZodTypeAny | 'unknown' => {\n  if (typeof config !== 'object' || config === null) return 'unknown'\n  const commandId = (config as Record<string, unknown>).commandId\n  if (typeof commandId !== 'string' || commandId.length === 0) return 'unknown'\n  const outputSchema = commandRegistry.outputSchemaOf(commandId)\n  if (!outputSchema) return 'unknown'\n  return z.object({ ...updateEntityEnvelopeShape, result: outputSchema })\n}\n\n/**\n * CALL_API's output contract resolves the picked endpoint's declared response\n * schema from the in-process endpoint catalog (lib/endpoint-catalog.ts).\n * That helper is server-only, so \u2014 like the executor \u2014 it is reached through\n * a runtime binding seam: server-output-contract.ts binds the resolver when\n * it loads. Unbound runtimes (the browser), unmatched or free-text endpoints,\n * and templated methods all degrade honestly to 'unknown'.\n */\nexport type CallApiResponseSchemaResolver = (endpoint: string, method: string) => ZodTypeAny | 'unknown'\n\nlet boundCallApiResponseSchemaResolver: CallApiResponseSchemaResolver | null = null\n\nexport function bindCallApiResponseSchemaResolver(resolver: CallApiResponseSchemaResolver): void {\n  boundCallApiResponseSchemaResolver = resolver\n}\n\nconst resolveCallApiOutputContract = (config: unknown): ZodTypeAny | 'unknown' => {\n  if (!boundCallApiResponseSchemaResolver) return 'unknown'\n  if (typeof config !== 'object' || config === null) return 'unknown'\n  const record = config as Record<string, unknown>\n  const endpoint = record.endpoint\n  if (typeof endpoint !== 'string' || endpoint.length === 0) return 'unknown'\n  const rawMethod = record.method\n  if (rawMethod !== undefined && typeof rawMethod !== 'string') return 'unknown'\n  const method = typeof rawMethod === 'string' && rawMethod.length > 0 ? rawMethod : 'GET'\n  if (method.includes('{{')) return 'unknown'\n  return boundCallApiResponseSchemaResolver(endpoint, method)\n}\n\n/**\n * INVOKE_AGENT's output contract describes the normalized agent-result envelope\n * that `mapAgentResultToContext` reads its `outputMapping` source paths from.\n * The envelope keys are the platform's own contract; the OUTCOME shape under\n * `data` (researcher agents) or `proposalPayload` (proposal agents) belongs\n * to the selected agent and lives in the OPTIONAL agent_orchestrator peer, so it\n * arrives through a runtime binding seam \u2014 core never imports enterprise.\n * server-output-contract.ts binds a resolver backed by the peer's DI bridge;\n * unbound runtimes (the browser), a missing peer, a templated or unknown agent\n * id, and agents without a declared OUTCOME all degrade honestly to 'unknown'.\n */\nexport type AgentOutcomeContract = {\n  resultKind: 'research' | 'proposal'\n  schema: ZodTypeAny\n}\n\nexport type AgentOutcomeSchemaResolver = (agentId: string) => AgentOutcomeContract | 'unknown'\n\nlet boundAgentOutcomeSchemaResolver: AgentOutcomeSchemaResolver | null = null\n\nexport function bindAgentOutcomeSchemaResolver(resolver: AgentOutcomeSchemaResolver): void {\n  boundAgentOutcomeSchemaResolver = resolver\n}\n\nconst agentEnvelopeShape = {\n  kind: z.string(),\n  disposition: z.string(),\n  agentId: z.string(),\n  proposalId: z.string(),\n}\n\nconst resolveInvokeAgentOutputContract = (config: unknown): ZodTypeAny | 'unknown' => {\n  if (!boundAgentOutcomeSchemaResolver) return 'unknown'\n  if (typeof config !== 'object' || config === null) return 'unknown'\n  const agentId = (config as Record<string, unknown>).agentId\n  if (typeof agentId !== 'string' || agentId.length === 0 || agentId.includes('{{')) return 'unknown'\n  const outcome = boundAgentOutcomeSchemaResolver(agentId)\n  if (outcome === 'unknown') return 'unknown'\n  const outcomeKey = outcome.resultKind === 'research' ? 'data' : 'proposalPayload'\n  return z.object({ ...agentEnvelopeShape, [outcomeKey]: outcome.schema })\n}\n\n/**\n * Would-do mocks receive raw (possibly still-templated) config, so they read\n * keys defensively instead of trusting a schema parse: callers like the\n * test-step route interpolate before invoking, but nothing guarantees it.\n */\nconst asConfigRecord = (config: unknown): Record<string, unknown> =>\n  typeof config === 'object' && config !== null ? (config as Record<string, unknown>) : {}\n\n/**\n * INVOKE_AGENT's would-do payload (spec section 8.2).\n *\n * It names the agent and the disposition the step would REQUEST \u2014 never a\n * fabricated outcome. A real run's disposition is decided by the model's\n * confidence against `onResult.autoApproveThreshold`, and a simulation has no\n * confidence, so the honest answer is the one `dispositionService` already\n * gives for a missing confidence: fail closed to human review. The envelope\n * deliberately does NOT reuse the runtime `kind` vocabulary\n * (`auto_approved` / `researcher` / `user_task`) so nothing downstream can\n * mistake a simulation for a disposition that actually happened.\n */\nconst buildInvokeAgentWouldDo = (config: unknown): Record<string, unknown> => {\n  const record = asConfigRecord(config)\n  const onResult = asConfigRecord(record.onResult)\n  const threshold = typeof onResult.autoApproveThreshold === 'number'\n    ? onResult.autoApproveThreshold\n    : null\n  return {\n    simulated: true,\n    invoked: false,\n    kind: 'would_invoke',\n    wouldInvokeAgent: typeof record.agentId === 'string' ? record.agentId : null,\n    wouldRequestDisposition: 'human_review',\n    reason: onResult.alwaysAsk === true ? 'alwaysAsk' : 'noConfidenceInSimulation',\n    autoApproveThreshold: threshold,\n  }\n}\n\nexport function registerBuiltinActivityTypes(): void {\n  if (BUILTIN_ACTIVITY_TYPE_IDS.every((id) => getActivityType(id) != null)) return\n\n  registerActivityType({\n    id: 'SEND_EMAIL',\n    icon: 'Mail',\n    i18nKey: i18nKeyFor('SEND_EMAIL'),\n    configSchema: sendEmailConfigSchema,\n    form: [\n      { id: 'to', component: 'text', required: true },\n      { id: 'subject', component: 'text', required: true },\n      { id: 'template', component: 'text' },\n      { id: 'body', component: 'textarea' },\n    ],\n    execute: async (config, ctx, deps) => (await loadExecutor()).executeSendEmail(config, ctx, deps.container),\n    async: { capable: true },\n    mock: (config) => {\n      const record = asConfigRecord(config)\n      return { sent: false, simulated: true, wouldSendTo: record.to, subject: record.subject }\n    },\n  })\n\n  registerActivityType({\n    id: 'EMIT_EVENT',\n    icon: 'Radio',\n    i18nKey: i18nKeyFor('EMIT_EVENT'),\n    configSchema: emitEventConfigSchema,\n    form: [\n      { id: 'eventName', component: 'eventName', required: true },\n      { id: 'payload', component: 'json' },\n    ],\n    execute: async (config, ctx, deps) => (await loadExecutor()).executeEmitEvent(config, ctx, deps.container),\n    async: { capable: true },\n    mock: (config) => {\n      const record = asConfigRecord(config)\n      return { emitted: false, simulated: true, eventName: record.eventName }\n    },\n  })\n\n  registerActivityType({\n    id: 'UPDATE_ENTITY',\n    icon: 'Database',\n    i18nKey: i18nKeyFor('UPDATE_ENTITY'),\n    configSchema: updateEntityConfigSchema,\n    form: [\n      {\n        id: 'commandId',\n        component: 'commandId',\n        required: true,\n        descriptionKey: 'workflows.activityConfig.UPDATE_ENTITY.commandIdHint',\n      },\n      { id: 'input', component: 'json', required: true },\n      { id: 'statusDictionary', component: 'text' },\n    ],\n    execute: async (config, ctx, deps) => (await loadExecutor()).executeUpdateEntity(deps.em, config, ctx, deps.container),\n    async: { capable: true },\n    outputContract: resolveCommandOutputContract,\n    mock: (config) => {\n      const record = asConfigRecord(config)\n      return { executed: false, simulated: true, commandId: record.commandId }\n    },\n  })\n\n  registerActivityType({\n    id: 'CALL_WEBHOOK',\n    icon: 'Webhook',\n    i18nKey: i18nKeyFor('CALL_WEBHOOK'),\n    configSchema: callWebhookConfigSchema,\n    form: [\n      {\n        id: 'url',\n        component: 'text',\n        required: true,\n        descriptionKey: 'workflows.activityConfig.CALL_WEBHOOK.urlHint',\n      },\n      { id: 'method', component: 'select' },\n      { id: 'headers', component: 'keyValue' },\n      { id: 'body', component: 'json' },\n    ],\n    execute: async (config, ctx, deps) => (await loadExecutor()).executeCallWebhook(config, ctx, { signal: deps.signal }),\n    async: { capable: true },\n    mock: (config) => {\n      const record = asConfigRecord(config)\n      return { simulated: true, wouldCall: { url: record.url, method: record.method ?? 'POST' } }\n    },\n  })\n\n  registerActivityType({\n    id: 'EXECUTE_FUNCTION',\n    icon: 'FunctionSquare',\n    i18nKey: i18nKeyFor('EXECUTE_FUNCTION'),\n    configSchema: executeFunctionConfigSchema,\n    form: [\n      {\n        id: 'functionName',\n        component: 'functionName',\n        required: true,\n        descriptionKey: 'workflows.activityConfig.EXECUTE_FUNCTION.functionNameHint',\n      },\n      { id: 'args', component: 'json' },\n    ],\n    execute: async (config, ctx, deps) => (await loadExecutor()).executeFunction(config, ctx, deps.container),\n    async: { capable: true },\n    mock: 'refuse',\n  })\n\n  registerActivityType<WaitConfig>({\n    id: 'WAIT',\n    icon: 'Clock',\n    i18nKey: i18nKeyFor('WAIT'),\n    configSchema: waitConfigSchema,\n    form: [\n      { id: 'duration', component: 'duration' },\n      { id: 'until', component: 'datetime' },\n    ],\n    execute: (config) => {\n      const durationMs = calculateWaitDelayMs(config)\n      return new Promise((resolve) => {\n        setTimeout(() => resolve({ waited: true, durationMs }), durationMs)\n      })\n    },\n    executeAsync: async () => ({ waited: true, async: true }),\n    async: { capable: true },\n    enqueueDelayMs: (config) =>\n      config.duration || config.until ? calculateWaitDelayMs(config) : null,\n    mock: () => ({ waited: true, simulated: true }),\n  })\n\n  registerActivityType({\n    id: 'CALL_API',\n    icon: 'Globe',\n    i18nKey: i18nKeyFor('CALL_API'),\n    configSchema: callApiConfigSchema,\n    form: [\n      {\n        id: 'endpoint',\n        component: 'endpoint',\n        required: true,\n        descriptionKey: 'workflows.activityConfig.CALL_API.endpointHint',\n      },\n      { id: 'method', component: 'select' },\n      { id: 'headers', component: 'keyValue' },\n      { id: 'body', component: 'json' },\n      { id: 'validateTenantMatch', component: 'checkbox' },\n    ],\n    execute: async (config, ctx, deps) => (await loadExecutor()).executeCallApi(deps.em, config, ctx, deps.container, deps.signal),\n    async: { capable: false, reason: 'mintsPerRequestKey' },\n    outputContract: resolveCallApiOutputContract,\n    mock: 'refuse',\n  })\n\n  registerActivityType<SetVariableConfig>({\n    id: 'SET_VARIABLE',\n    icon: 'Variable',\n    i18nKey: i18nKeyFor('SET_VARIABLE'),\n    configSchema: setVariableConfigSchema,\n    form: [\n      {\n        id: 'assignments',\n        component: 'assignments',\n        required: true,\n        descriptionKey: 'workflows.activityConfig.SET_VARIABLE.assignmentsHint',\n      },\n    ],\n    execute: async (config, ctx) => (await loadExecutor()).executeSetVariable(config, ctx),\n    async: { capable: false, reason: 'asyncResumeMergeDoesNotApplyAssignments' },\n    mock: (config) => ({ simulated: true, assignments: config.assignments }),\n  })\n\n  registerActivityType({\n    id: 'INVOKE_AGENT',\n    icon: 'Bot',\n    i18nKey: i18nKeyFor('INVOKE_AGENT'),\n    configSchema: invokeAgentConfigSchema,\n    form: [\n      { id: 'agentId', component: 'text', required: true },\n      { id: 'input', component: 'json' },\n      { id: 'onResult', component: 'json', required: true },\n      { id: 'outputMapping', component: 'json' },\n    ],\n    // SYNC-dispatched by design: execute() enqueues an 'invoke_agent' job onto\n    // the dedicated workflow-invoke-agent queue and returns a `__park` marker so\n    // the step handler PAUSES the instance on INVOKE_AGENT_SIGNAL_NAME. The job\n    // rides its own queue and resumes via sendSignal \u2014 not the generic\n    // resumeWorkflowAfterActivities path \u2014 so the activity is not async-capable\n    // in the registry's sense.\n    execute: async (config, ctx, deps) => (await loadExecutor()).executeInvokeAgent(config, ctx, deps.container),\n    async: { capable: false, reason: 'parksOnDedicatedQueue' },\n    mock: buildInvokeAgentWouldDo,\n    outputContract: resolveInvokeAgentOutputContract,\n  })\n}\n\nregisterBuiltinActivityTypes()\n"],
-  "mappings": "AAsBA,SAAS,SAA0B;AACnC,SAAS,uBAAuB;AAChC,SAAS,iBAAiB,4BAA4B;AACtD,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AAEP,MAAM,4BAA4B;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,MAAM,aAAa,CAAC,OAAuB,8BAA8B,EAAE;AAc3E,IAAI,gBAAgD;AAE7C,SAAS,qBAAqB,UAAyC;AAC5E,kBAAgB;AAClB;AAEA,MAAM,eAAe,YAA8C;AACjE,MAAI,CAAC,eAAe;AAClB,UAAM,IAAI,MAAM,2DAA2D;AAAA,EAC7E;AACA,SAAO;AACT;AAaA,MAAM,4BAA4B;AAAA,EAChC,UAAU,EAAE,QAAQ;AAAA,EACpB,WAAW,EAAE,OAAO;AAAA,EACpB,YAAY,EAAE,OAAO;AACvB;AAUA,MAAM,+BAA+B,CAAC,WAA4C;AAChF,MAAI,OAAO,WAAW,YAAY,WAAW,KAAM,QAAO;AAC1D,QAAM,YAAa,OAAmC;AACtD,MAAI,OAAO,cAAc,YAAY,UAAU,WAAW,EAAG,QAAO;AACpE,QAAM,eAAe,gBAAgB,eAAe,SAAS;AAC7D,MAAI,CAAC,aAAc,QAAO;AAC1B,SAAO,EAAE,OAAO,EAAE,GAAG,2BAA2B,QAAQ,aAAa,CAAC;AACxE;AAYA,IAAI,qCAA2E;AAExE,SAAS,kCAAkC,UAA+C;AAC/F,uCAAqC;AACvC;AAEA,MAAM,+BAA+B,CAAC,WAA4C;AAChF,MAAI,CAAC,mCAAoC,QAAO;AAChD,MAAI,OAAO,WAAW,YAAY,WAAW,KAAM,QAAO;AAC1D,QAAM,SAAS;AACf,QAAM,WAAW,OAAO;AACxB,MAAI,OAAO,aAAa,YAAY,SAAS,WAAW,EAAG,QAAO;AAClE,QAAM,YAAY,OAAO;AACzB,MAAI,cAAc,UAAa,OAAO,cAAc,SAAU,QAAO;AACrE,QAAM,SAAS,OAAO,cAAc,YAAY,UAAU,SAAS,IAAI,YAAY;AACnF,MAAI,OAAO,SAAS,IAAI,EAAG,QAAO;AAClC,SAAO,mCAAmC,UAAU,MAAM;AAC5D;AAoBA,IAAI,kCAAqE;AAElE,SAAS,+BAA+B,UAA4C;AACzF,oCAAkC;AACpC;AAEA,MAAM,qBAAqB;AAAA,EACzB,MAAM,EAAE,OAAO;AAAA,EACf,aAAa,EAAE,OAAO;AAAA,EACtB,SAAS,EAAE,OAAO;AAAA,EAClB,YAAY,EAAE,OAAO;AACvB;AAEA,MAAM,mCAAmC,CAAC,WAA4C;AACpF,MAAI,CAAC,gCAAiC,QAAO;AAC7C,MAAI,OAAO,WAAW,YAAY,WAAW,KAAM,QAAO;AAC1D,QAAM,UAAW,OAAmC;AACpD,MAAI,OAAO,YAAY,YAAY,QAAQ,WAAW,KAAK,QAAQ,SAAS,IAAI,EAAG,QAAO;AAC1F,QAAM,UAAU,gCAAgC,OAAO;AACvD,MAAI,YAAY,UAAW,QAAO;AAClC,QAAM,aAAa,QAAQ,eAAe,aAAa,SAAS;AAChE,SAAO,EAAE,OAAO,EAAE,GAAG,oBAAoB,CAAC,UAAU,GAAG,QAAQ,OAAO,CAAC;AACzE;AAOA,MAAM,iBAAiB,CAAC,WACtB,OAAO,WAAW,YAAY,WAAW,OAAQ,SAAqC,CAAC;AAczF,MAAM,0BAA0B,CAAC,WAA6C;AAC5E,QAAM,SAAS,eAAe,MAAM;AACpC,QAAM,WAAW,eAAe,OAAO,QAAQ;AAC/C,QAAM,YAAY,OAAO,SAAS,yBAAyB,WACvD,SAAS,uBACT;AACJ,SAAO;AAAA,IACL,WAAW;AAAA,IACX,SAAS;AAAA,IACT,MAAM;AAAA,IACN,kBAAkB,OAAO,OAAO,YAAY,WAAW,OAAO,UAAU;AAAA,IACxE,yBAAyB;AAAA,IACzB,QAAQ,SAAS,cAAc,OAAO,cAAc;AAAA,IACpD,sBAAsB;AAAA,EACxB;AACF;AAEO,SAAS,+BAAqC;AACnD,MAAI,0BAA0B,MAAM,CAAC,OAAO,gBAAgB,EAAE,KAAK,IAAI,EAAG;AAE1E,uBAAqB;AAAA,IACnB,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS,WAAW,YAAY;AAAA,IAChC,cAAc;AAAA,IACd,MAAM;AAAA,MACJ,EAAE,IAAI,MAAM,WAAW,QAAQ,UAAU,KAAK;AAAA,MAC9C,EAAE,IAAI,WAAW,WAAW,QAAQ,UAAU,KAAK;AAAA,MACnD,EAAE,IAAI,YAAY,WAAW,OAAO;AAAA,MACpC,EAAE,IAAI,QAAQ,WAAW,WAAW;AAAA,IACtC;AAAA,IACA,SAAS,OAAO,QAAQ,KAAK,UAAU,MAAM,aAAa,GAAG,iBAAiB,QAAQ,KAAK,KAAK,SAAS;AAAA,IACzG,OAAO,EAAE,SAAS,KAAK;AAAA,IACvB,MAAM,CAAC,WAAW;AAChB,YAAM,SAAS,eAAe,MAAM;AACpC,aAAO,EAAE,MAAM,OAAO,WAAW,MAAM,aAAa,OAAO,IAAI,SAAS,OAAO,QAAQ;AAAA,IACzF;AAAA,EACF,CAAC;AAED,uBAAqB;AAAA,IACnB,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS,WAAW,YAAY;AAAA,IAChC,cAAc;AAAA,IACd,MAAM;AAAA,MACJ,EAAE,IAAI,aAAa,WAAW,aAAa,UAAU,KAAK;AAAA,MAC1D,EAAE,IAAI,WAAW,WAAW,OAAO;AAAA,IACrC;AAAA,IACA,SAAS,OAAO,QAAQ,KAAK,UAAU,MAAM,aAAa,GAAG,iBAAiB,QAAQ,KAAK,KAAK,SAAS;AAAA,IACzG,OAAO,EAAE,SAAS,KAAK;AAAA,IACvB,MAAM,CAAC,WAAW;AAChB,YAAM,SAAS,eAAe,MAAM;AACpC,aAAO,EAAE,SAAS,OAAO,WAAW,MAAM,WAAW,OAAO,UAAU;AAAA,IACxE;AAAA,EACF,CAAC;AAED,uBAAqB;AAAA,IACnB,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS,WAAW,eAAe;AAAA,IACnC,cAAc;AAAA,IACd,MAAM;AAAA,MACJ;AAAA,QACE,IAAI;AAAA,QACJ,WAAW;AAAA,QACX,UAAU;AAAA,QACV,gBAAgB;AAAA,MAClB;AAAA,MACA,EAAE,IAAI,SAAS,WAAW,QAAQ,UAAU,KAAK;AAAA,MACjD,EAAE,IAAI,oBAAoB,WAAW,OAAO;AAAA,IAC9C;AAAA,IACA,SAAS,OAAO,QAAQ,KAAK,UAAU,MAAM,aAAa,GAAG,oBAAoB,KAAK,IAAI,QAAQ,KAAK,KAAK,SAAS;AAAA,IACrH,OAAO,EAAE,SAAS,KAAK;AAAA,IACvB,gBAAgB;AAAA,IAChB,MAAM,CAAC,WAAW;AAChB,YAAM,SAAS,eAAe,MAAM;AACpC,aAAO,EAAE,UAAU,OAAO,WAAW,MAAM,WAAW,OAAO,UAAU;AAAA,IACzE;AAAA,EACF,CAAC;AAED,uBAAqB;AAAA,IACnB,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS,WAAW,cAAc;AAAA,IAClC,cAAc;AAAA,IACd,MAAM;AAAA,MACJ;AAAA,QACE,IAAI;AAAA,QACJ,WAAW;AAAA,QACX,UAAU;AAAA,QACV,gBAAgB;AAAA,MAClB;AAAA,MACA,EAAE,IAAI,UAAU,WAAW,SAAS;AAAA,MACpC,EAAE,IAAI,WAAW,WAAW,WAAW;AAAA,MACvC,EAAE,IAAI,QAAQ,WAAW,OAAO;AAAA,IAClC;AAAA,IACA,SAAS,OAAO,QAAQ,KAAK,UAAU,MAAM,aAAa,GAAG,mBAAmB,QAAQ,KAAK,EAAE,QAAQ,KAAK,OAAO,CAAC;AAAA,IACpH,OAAO,EAAE,SAAS,KAAK;AAAA,IACvB,MAAM,CAAC,WAAW;AAChB,YAAM,SAAS,eAAe,MAAM;AACpC,aAAO,EAAE,WAAW,MAAM,WAAW,EAAE,KAAK,OAAO,KAAK,QAAQ,OAAO,UAAU,OAAO,EAAE;AAAA,IAC5F;AAAA,EACF,CAAC;AAED,uBAAqB;AAAA,IACnB,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS,WAAW,kBAAkB;AAAA,IACtC,cAAc;AAAA,IACd,MAAM;AAAA,MACJ;AAAA,QACE,IAAI;AAAA,QACJ,WAAW;AAAA,QACX,UAAU;AAAA,QACV,gBAAgB;AAAA,MAClB;AAAA,MACA,EAAE,IAAI,QAAQ,WAAW,OAAO;AAAA,IAClC;AAAA,IACA,SAAS,OAAO,QAAQ,KAAK,UAAU,MAAM,aAAa,GAAG,gBAAgB,QAAQ,KAAK,KAAK,SAAS;AAAA,IACxG,OAAO,EAAE,SAAS,KAAK;AAAA,IACvB,MAAM;AAAA,EACR,CAAC;AAED,uBAAiC;AAAA,IAC/B,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS,WAAW,MAAM;AAAA,IAC1B,cAAc;AAAA,IACd,MAAM;AAAA,MACJ,EAAE,IAAI,YAAY,WAAW,WAAW;AAAA,MACxC,EAAE,IAAI,SAAS,WAAW,WAAW;AAAA,IACvC;AAAA,IACA,SAAS,CAAC,WAAW;AACnB,YAAM,aAAa,qBAAqB,MAAM;AAC9C,aAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,mBAAW,MAAM,QAAQ,EAAE,QAAQ,MAAM,WAAW,CAAC,GAAG,UAAU;AAAA,MACpE,CAAC;AAAA,IACH;AAAA,IACA,cAAc,aAAa,EAAE,QAAQ,MAAM,OAAO,KAAK;AAAA,IACvD,OAAO,EAAE,SAAS,KAAK;AAAA,IACvB,gBAAgB,CAAC,WACf,OAAO,YAAY,OAAO,QAAQ,qBAAqB,MAAM,IAAI;AAAA,IACnE,MAAM,OAAO,EAAE,QAAQ,MAAM,WAAW,KAAK;AAAA,EAC/C,CAAC;AAED,uBAAqB;AAAA,IACnB,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS,WAAW,UAAU;AAAA,IAC9B,cAAc;AAAA,IACd,MAAM;AAAA,MACJ;AAAA,QACE,IAAI;AAAA,QACJ,WAAW;AAAA,QACX,UAAU;AAAA,QACV,gBAAgB;AAAA,MAClB;AAAA,MACA,EAAE,IAAI,UAAU,WAAW,SAAS;AAAA,MACpC,EAAE,IAAI,WAAW,WAAW,WAAW;AAAA,MACvC,EAAE,IAAI,QAAQ,WAAW,OAAO;AAAA,MAChC,EAAE,IAAI,uBAAuB,WAAW,WAAW;AAAA,IACrD;AAAA,IACA,SAAS,OAAO,QAAQ,KAAK,UAAU,MAAM,aAAa,GAAG,eAAe,KAAK,IAAI,QAAQ,KAAK,KAAK,WAAW,KAAK,MAAM;AAAA,IAC7H,OAAO,EAAE,SAAS,OAAO,QAAQ,qBAAqB;AAAA,IACtD,gBAAgB;AAAA,IAChB,MAAM;AAAA,EACR,CAAC;AAED,uBAAwC;AAAA,IACtC,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS,WAAW,cAAc;AAAA,IAClC,cAAc;AAAA,IACd,MAAM;AAAA,MACJ;AAAA,QACE,IAAI;AAAA,QACJ,WAAW;AAAA,QACX,UAAU;AAAA,QACV,gBAAgB;AAAA,MAClB;AAAA,IACF;AAAA,IACA,SAAS,OAAO,QAAQ,SAAS,MAAM,aAAa,GAAG,mBAAmB,QAAQ,GAAG;AAAA,IACrF,OAAO,EAAE,SAAS,OAAO,QAAQ,0CAA0C;AAAA,IAC3E,MAAM,CAAC,YAAY,EAAE,WAAW,MAAM,aAAa,OAAO,YAAY;AAAA,EACxE,CAAC;AAED,uBAAqB;AAAA,IACnB,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS,WAAW,cAAc;AAAA,IAClC,cAAc;AAAA,IACd,MAAM;AAAA,MACJ,EAAE,IAAI,WAAW,WAAW,QAAQ,UAAU,KAAK;AAAA,MACnD,EAAE,IAAI,SAAS,WAAW,OAAO;AAAA,MACjC,EAAE,IAAI,YAAY,WAAW,QAAQ,UAAU,KAAK;AAAA,MACpD,EAAE,IAAI,iBAAiB,WAAW,OAAO;AAAA,IAC3C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOA,SAAS,OAAO,QAAQ,KAAK,UAAU,MAAM,aAAa,GAAG,mBAAmB,QAAQ,KAAK,KAAK,SAAS;AAAA,IAC3G,OAAO,EAAE,SAAS,OAAO,QAAQ,wBAAwB;AAAA,IACzD,MAAM;AAAA,IACN,gBAAgB;AAAA,EAClB,CAAC;AACH;AAEA,6BAA6B;",
+  "sourcesContent": ["/**\n * Workflows Module - Built-in Activity Types\n *\n * Registers the built-in activity types with the Activity Registry (spec\n * 2026-07-26-workflows-ux-redesign.md section 3.2). Each entry delegates to\n * the existing STABLE executeX handlers in activity-executor.ts \u2014 the\n * handlers keep their exported signatures; the registry only adapts them to\n * the uniform (config, ctx, deps) shape.\n *\n * The executor is reached through a runtime binding seam instead of any\n * import: this module sits on the registry bootstrap chain that validators.ts\n * and the visual editor import, and even a dynamic import('./activity-executor')\n * gets chunked into the client bundle by Turbopack, dragging queue/bullmq and\n * node builtins into contexts that forbid them. activity-executor.ts binds its\n * own handlers via bindActivityExecutor() when it loads on the server, so the\n * closures below resolve them without the bundler ever seeing an edge.\n * Registration itself needs only the schemas, form specs, and metadata. WAIT\n * is the exception: its pure delay executes inline so the timer is scheduled\n * synchronously (matching executeWait's observable behavior under fake\n * timers).\n */\n\nimport { z, type ZodTypeAny } from 'zod'\nimport { commandRegistry } from '@open-mercato/shared/lib/commands/registry'\nimport { getActivityType, registerActivityType } from './activity-registry'\nimport { calculateWaitDelayMs } from './duration'\nimport {\n  callApiConfigSchema,\n  callWebhookConfigSchema,\n  emitEventConfigSchema,\n  executeFunctionConfigSchema,\n  invokeAgentConfigSchema,\n  sendEmailConfigSchema,\n  setVariableConfigSchema,\n  updateEntityConfigSchema,\n  waitConfigSchema,\n  type SetVariableConfig,\n  type WaitConfig,\n} from '../data/activity-config-schemas'\n\nconst BUILTIN_ACTIVITY_TYPE_IDS = [\n  'SEND_EMAIL',\n  'EMIT_EVENT',\n  'UPDATE_ENTITY',\n  'CALL_WEBHOOK',\n  'EXECUTE_FUNCTION',\n  'WAIT',\n  'CALL_API',\n  'SET_VARIABLE',\n  'INVOKE_AGENT',\n] as const\n\nconst i18nKeyFor = (id: string): string => `workflows.activities.types.${id}`\n\nexport type ActivityExecutorBinding = Pick<\n  typeof import('./activity-executor'),\n  | 'executeSendEmail'\n  | 'executeEmitEvent'\n  | 'executeUpdateEntity'\n  | 'executeCallWebhook'\n  | 'executeFunction'\n  | 'executeCallApi'\n  | 'executeSetVariable'\n  | 'executeInvokeAgent'\n>\n\nlet boundExecutor: ActivityExecutorBinding | null = null\n\nexport function bindActivityExecutor(executor: ActivityExecutorBinding): void {\n  boundExecutor = executor\n}\n\nconst loadExecutor = async (): Promise<ActivityExecutorBinding> => {\n  if (!boundExecutor) {\n    throw new Error('[internal] Activity executor is not bound in this runtime')\n  }\n  return boundExecutor\n}\n\n/**\n * UPDATE_ENTITY does NOT put the command's return value into context \u2014 it puts\n * `executeUpdateEntity`'s envelope there (`{ executed, commandId, result,\n * logEntryId }`, activity-executor.ts), and the command's own output sits under\n * `result`. Both merge paths carry that envelope verbatim: the sync transition\n * route namespaces it under `activityName || activityType`, the async route\n * under `${activityId}_result`. So the contract has to be the envelope, exactly\n * as INVOKE_AGENT's is \u2014 a contract naming the command's bare keys advertises\n * `<activity>.dealId` for a context that only ever holds\n * `<activity>.result.dealId`.\n */\nconst updateEntityEnvelopeShape = {\n  executed: z.boolean(),\n  commandId: z.string(),\n  logEntryId: z.string(),\n}\n\n/**\n * Resolves UPDATE_ENTITY's output contract from the command registry (import\n * is UI-safe: `commands/registry` pulls in only the logger, no ORM). The\n * lookup is sync over already-registered handlers; a missing or not-yet-loaded\n * handler \u2014 or one without an `outputSchema` \u2014 degrades honestly to 'unknown',\n * which prefix-resolves every ref under the activity key and so stays exactly\n * as permissive as it was before the envelope was modelled.\n */\nconst resolveCommandOutputContract = (config: unknown): ZodTypeAny | 'unknown' => {\n  if (typeof config !== 'object' || config === null) return 'unknown'\n  const commandId = (config as Record<string, unknown>).commandId\n  if (typeof commandId !== 'string' || commandId.length === 0) return 'unknown'\n  const outputSchema = commandRegistry.outputSchemaOf(commandId)\n  if (!outputSchema) return 'unknown'\n  return z.object({ ...updateEntityEnvelopeShape, result: outputSchema })\n}\n\n/**\n * CALL_API's output contract resolves the picked endpoint's declared response\n * schema from the in-process endpoint catalog (lib/endpoint-catalog.ts).\n * That helper is server-only, so \u2014 like the executor \u2014 it is reached through\n * a runtime binding seam: server-output-contract.ts binds the resolver when\n * it loads. Unbound runtimes (the browser), unmatched or free-text endpoints,\n * and templated methods all degrade honestly to 'unknown'.\n */\nexport type CallApiResponseSchemaResolver = (endpoint: string, method: string) => ZodTypeAny | 'unknown'\n\nlet boundCallApiResponseSchemaResolver: CallApiResponseSchemaResolver | null = null\n\nexport function bindCallApiResponseSchemaResolver(resolver: CallApiResponseSchemaResolver): void {\n  boundCallApiResponseSchemaResolver = resolver\n}\n\nconst resolveCallApiOutputContract = (config: unknown): ZodTypeAny | 'unknown' => {\n  if (!boundCallApiResponseSchemaResolver) return 'unknown'\n  if (typeof config !== 'object' || config === null) return 'unknown'\n  const record = config as Record<string, unknown>\n  const endpoint = record.endpoint\n  if (typeof endpoint !== 'string' || endpoint.length === 0) return 'unknown'\n  const rawMethod = record.method\n  if (rawMethod !== undefined && typeof rawMethod !== 'string') return 'unknown'\n  const method = typeof rawMethod === 'string' && rawMethod.length > 0 ? rawMethod : 'GET'\n  if (method.includes('{{')) return 'unknown'\n  return boundCallApiResponseSchemaResolver(endpoint, method)\n}\n\n/**\n * INVOKE_AGENT's output contract describes the normalized agent-result envelope\n * that `mapAgentResultToContext` reads its `outputMapping` source paths from.\n * The envelope keys are the platform's own contract; the OUTCOME shape under\n * `data` (researcher agents) or `proposalPayload` (proposal agents) belongs\n * to the selected agent and lives in the OPTIONAL agent_orchestrator peer, so it\n * arrives through a runtime binding seam \u2014 core never imports enterprise.\n * server-output-contract.ts binds a resolver backed by the peer's DI bridge;\n * unbound runtimes (the browser), a missing peer, a templated or unknown agent\n * id, and agents without a declared OUTCOME all degrade honestly to 'unknown'.\n */\nexport type AgentOutcomeContract = {\n  resultKind: 'research' | 'proposal'\n  schema: ZodTypeAny\n}\n\nexport type AgentOutcomeSchemaResolver = (agentId: string) => AgentOutcomeContract | 'unknown'\n\nlet boundAgentOutcomeSchemaResolver: AgentOutcomeSchemaResolver | null = null\n\nexport function bindAgentOutcomeSchemaResolver(resolver: AgentOutcomeSchemaResolver): void {\n  boundAgentOutcomeSchemaResolver = resolver\n}\n\nconst agentEnvelopeShape = {\n  kind: z.string(),\n  disposition: z.string(),\n  agentId: z.string(),\n  proposalId: z.string(),\n}\n\nconst resolveInvokeAgentOutputContract = (config: unknown): ZodTypeAny | 'unknown' => {\n  if (!boundAgentOutcomeSchemaResolver) return 'unknown'\n  if (typeof config !== 'object' || config === null) return 'unknown'\n  const agentId = (config as Record<string, unknown>).agentId\n  if (typeof agentId !== 'string' || agentId.length === 0 || agentId.includes('{{')) return 'unknown'\n  const outcome = boundAgentOutcomeSchemaResolver(agentId)\n  if (outcome === 'unknown') return 'unknown'\n  const outcomeKey = outcome.resultKind === 'research' ? 'data' : 'proposalPayload'\n  return z.object({ ...agentEnvelopeShape, [outcomeKey]: outcome.schema })\n}\n\n/**\n * Would-do mocks receive raw (possibly still-templated) config, so they read\n * keys defensively instead of trusting a schema parse: callers like the\n * test-step route interpolate before invoking, but nothing guarantees it.\n */\nconst asConfigRecord = (config: unknown): Record<string, unknown> =>\n  typeof config === 'object' && config !== null ? (config as Record<string, unknown>) : {}\n\n/**\n * INVOKE_AGENT's would-do payload (spec section 8.2).\n *\n * It names the agent and the disposition the step would REQUEST \u2014 never a\n * fabricated outcome. A real run's disposition is decided by the model's\n * confidence against `onResult.autoApproveThreshold`, and a simulation has no\n * confidence, so the honest answer is the one `dispositionService` already\n * gives for a missing confidence: fail closed to human review. The envelope\n * deliberately does NOT reuse the runtime `kind` vocabulary\n * (`auto_approved` / `researcher` / `user_task`) so nothing downstream can\n * mistake a simulation for a disposition that actually happened.\n */\nconst buildInvokeAgentWouldDo = (config: unknown): Record<string, unknown> => {\n  const record = asConfigRecord(config)\n  const onResult = asConfigRecord(record.onResult)\n  const threshold = typeof onResult.autoApproveThreshold === 'number'\n    ? onResult.autoApproveThreshold\n    : null\n  return {\n    simulated: true,\n    invoked: false,\n    kind: 'would_invoke',\n    wouldInvokeAgent: typeof record.agentId === 'string' ? record.agentId : null,\n    wouldRequestDisposition: 'human_review',\n    reason: onResult.alwaysAsk === true ? 'alwaysAsk' : 'noConfidenceInSimulation',\n    autoApproveThreshold: threshold,\n  }\n}\n\nexport function registerBuiltinActivityTypes(): void {\n  if (BUILTIN_ACTIVITY_TYPE_IDS.every((id) => getActivityType(id) != null)) return\n\n  registerActivityType({\n    id: 'SEND_EMAIL',\n    icon: 'Mail',\n    i18nKey: i18nKeyFor('SEND_EMAIL'),\n    configSchema: sendEmailConfigSchema,\n    form: [\n      { id: 'to', component: 'text', required: true },\n      { id: 'subject', component: 'text', required: true },\n      { id: 'template', component: 'text' },\n      { id: 'body', component: 'textarea' },\n    ],\n    execute: async (config, ctx, deps) =>\n      (await loadExecutor()).executeSendEmail(config, ctx, deps.container, deps.signal),\n    async: { capable: true },\n    mock: (config) => {\n      const record = asConfigRecord(config)\n      return { sent: false, simulated: true, wouldSendTo: record.to, subject: record.subject }\n    },\n  })\n\n  registerActivityType({\n    id: 'EMIT_EVENT',\n    icon: 'Radio',\n    i18nKey: i18nKeyFor('EMIT_EVENT'),\n    configSchema: emitEventConfigSchema,\n    form: [\n      { id: 'eventName', component: 'eventName', required: true },\n      { id: 'payload', component: 'json' },\n    ],\n    execute: async (config, ctx, deps) =>\n      (await loadExecutor()).executeEmitEvent(config, ctx, deps.container, deps.signal),\n    async: { capable: true },\n    mock: (config) => {\n      const record = asConfigRecord(config)\n      return { emitted: false, simulated: true, eventName: record.eventName }\n    },\n  })\n\n  registerActivityType({\n    id: 'UPDATE_ENTITY',\n    icon: 'Database',\n    i18nKey: i18nKeyFor('UPDATE_ENTITY'),\n    configSchema: updateEntityConfigSchema,\n    form: [\n      {\n        id: 'commandId',\n        component: 'commandId',\n        required: true,\n        descriptionKey: 'workflows.activityConfig.UPDATE_ENTITY.commandIdHint',\n      },\n      { id: 'input', component: 'json', required: true },\n      { id: 'statusDictionary', component: 'text' },\n    ],\n    execute: async (config, ctx, deps) =>\n      (await loadExecutor()).executeUpdateEntity(deps.em, config, ctx, deps.container, deps.signal),\n    async: { capable: true },\n    outputContract: resolveCommandOutputContract,\n    mock: (config) => {\n      const record = asConfigRecord(config)\n      return { executed: false, simulated: true, commandId: record.commandId }\n    },\n  })\n\n  registerActivityType({\n    id: 'CALL_WEBHOOK',\n    icon: 'Webhook',\n    i18nKey: i18nKeyFor('CALL_WEBHOOK'),\n    configSchema: callWebhookConfigSchema,\n    form: [\n      {\n        id: 'url',\n        component: 'text',\n        required: true,\n        descriptionKey: 'workflows.activityConfig.CALL_WEBHOOK.urlHint',\n      },\n      { id: 'method', component: 'select' },\n      { id: 'headers', component: 'keyValue' },\n      { id: 'body', component: 'json' },\n    ],\n    execute: async (config, ctx, deps) => (await loadExecutor()).executeCallWebhook(config, ctx, { signal: deps.signal }),\n    async: { capable: true },\n    mock: (config) => {\n      const record = asConfigRecord(config)\n      return { simulated: true, wouldCall: { url: record.url, method: record.method ?? 'POST' } }\n    },\n  })\n\n  registerActivityType({\n    id: 'EXECUTE_FUNCTION',\n    icon: 'FunctionSquare',\n    i18nKey: i18nKeyFor('EXECUTE_FUNCTION'),\n    configSchema: executeFunctionConfigSchema,\n    form: [\n      {\n        id: 'functionName',\n        component: 'functionName',\n        required: true,\n        descriptionKey: 'workflows.activityConfig.EXECUTE_FUNCTION.functionNameHint',\n      },\n      { id: 'args', component: 'json' },\n    ],\n    execute: async (config, ctx, deps) =>\n      (await loadExecutor()).executeFunction(config, ctx, deps.container, deps.signal),\n    async: { capable: true },\n    mock: 'refuse',\n  })\n\n  registerActivityType<WaitConfig>({\n    id: 'WAIT',\n    icon: 'Clock',\n    i18nKey: i18nKeyFor('WAIT'),\n    configSchema: waitConfigSchema,\n    form: [\n      { id: 'duration', component: 'duration' },\n      { id: 'until', component: 'datetime' },\n    ],\n    execute: (config) => {\n      const durationMs = calculateWaitDelayMs(config)\n      return new Promise((resolve) => {\n        setTimeout(() => resolve({ waited: true, durationMs }), durationMs)\n      })\n    },\n    executeAsync: async () => ({ waited: true, async: true }),\n    async: { capable: true },\n    enqueueDelayMs: (config) =>\n      config.duration || config.until ? calculateWaitDelayMs(config) : null,\n    mock: () => ({ waited: true, simulated: true }),\n  })\n\n  registerActivityType({\n    id: 'CALL_API',\n    icon: 'Globe',\n    i18nKey: i18nKeyFor('CALL_API'),\n    configSchema: callApiConfigSchema,\n    form: [\n      {\n        id: 'endpoint',\n        component: 'endpoint',\n        required: true,\n        descriptionKey: 'workflows.activityConfig.CALL_API.endpointHint',\n      },\n      { id: 'method', component: 'select' },\n      { id: 'headers', component: 'keyValue' },\n      { id: 'body', component: 'json' },\n      { id: 'validateTenantMatch', component: 'checkbox' },\n    ],\n    execute: async (config, ctx, deps) => (await loadExecutor()).executeCallApi(deps.em, config, ctx, deps.container, deps.signal),\n    async: { capable: false, reason: 'mintsPerRequestKey' },\n    outputContract: resolveCallApiOutputContract,\n    mock: 'refuse',\n  })\n\n  registerActivityType<SetVariableConfig>({\n    id: 'SET_VARIABLE',\n    icon: 'Variable',\n    i18nKey: i18nKeyFor('SET_VARIABLE'),\n    configSchema: setVariableConfigSchema,\n    form: [\n      {\n        id: 'assignments',\n        component: 'assignments',\n        required: true,\n        descriptionKey: 'workflows.activityConfig.SET_VARIABLE.assignmentsHint',\n      },\n    ],\n    execute: async (config, ctx) => (await loadExecutor()).executeSetVariable(config, ctx),\n    async: { capable: false, reason: 'asyncResumeMergeDoesNotApplyAssignments' },\n    mock: (config) => ({ simulated: true, assignments: config.assignments }),\n  })\n\n  registerActivityType({\n    id: 'INVOKE_AGENT',\n    icon: 'Bot',\n    i18nKey: i18nKeyFor('INVOKE_AGENT'),\n    configSchema: invokeAgentConfigSchema,\n    form: [\n      { id: 'agentId', component: 'text', required: true },\n      { id: 'input', component: 'json' },\n      { id: 'onResult', component: 'json', required: true },\n      { id: 'outputMapping', component: 'json' },\n    ],\n    // SYNC-dispatched by design: execute() enqueues an 'invoke_agent' job onto\n    // the dedicated workflow-invoke-agent queue and returns a `__park` marker so\n    // the step handler PAUSES the instance on INVOKE_AGENT_SIGNAL_NAME. The job\n    // rides its own queue and resumes via sendSignal \u2014 not the generic\n    // resumeWorkflowAfterActivities path \u2014 so the activity is not async-capable\n    // in the registry's sense.\n    execute: async (config, ctx, deps) => (await loadExecutor()).executeInvokeAgent(config, ctx, deps.container),\n    async: { capable: false, reason: 'parksOnDedicatedQueue' },\n    mock: buildInvokeAgentWouldDo,\n    outputContract: resolveInvokeAgentOutputContract,\n  })\n}\n\nregisterBuiltinActivityTypes()\n"],
+  "mappings": "AAsBA,SAAS,SAA0B;AACnC,SAAS,uBAAuB;AAChC,SAAS,iBAAiB,4BAA4B;AACtD,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AAEP,MAAM,4BAA4B;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,MAAM,aAAa,CAAC,OAAuB,8BAA8B,EAAE;AAc3E,IAAI,gBAAgD;AAE7C,SAAS,qBAAqB,UAAyC;AAC5E,kBAAgB;AAClB;AAEA,MAAM,eAAe,YAA8C;AACjE,MAAI,CAAC,eAAe;AAClB,UAAM,IAAI,MAAM,2DAA2D;AAAA,EAC7E;AACA,SAAO;AACT;AAaA,MAAM,4BAA4B;AAAA,EAChC,UAAU,EAAE,QAAQ;AAAA,EACpB,WAAW,EAAE,OAAO;AAAA,EACpB,YAAY,EAAE,OAAO;AACvB;AAUA,MAAM,+BAA+B,CAAC,WAA4C;AAChF,MAAI,OAAO,WAAW,YAAY,WAAW,KAAM,QAAO;AAC1D,QAAM,YAAa,OAAmC;AACtD,MAAI,OAAO,cAAc,YAAY,UAAU,WAAW,EAAG,QAAO;AACpE,QAAM,eAAe,gBAAgB,eAAe,SAAS;AAC7D,MAAI,CAAC,aAAc,QAAO;AAC1B,SAAO,EAAE,OAAO,EAAE,GAAG,2BAA2B,QAAQ,aAAa,CAAC;AACxE;AAYA,IAAI,qCAA2E;AAExE,SAAS,kCAAkC,UAA+C;AAC/F,uCAAqC;AACvC;AAEA,MAAM,+BAA+B,CAAC,WAA4C;AAChF,MAAI,CAAC,mCAAoC,QAAO;AAChD,MAAI,OAAO,WAAW,YAAY,WAAW,KAAM,QAAO;AAC1D,QAAM,SAAS;AACf,QAAM,WAAW,OAAO;AACxB,MAAI,OAAO,aAAa,YAAY,SAAS,WAAW,EAAG,QAAO;AAClE,QAAM,YAAY,OAAO;AACzB,MAAI,cAAc,UAAa,OAAO,cAAc,SAAU,QAAO;AACrE,QAAM,SAAS,OAAO,cAAc,YAAY,UAAU,SAAS,IAAI,YAAY;AACnF,MAAI,OAAO,SAAS,IAAI,EAAG,QAAO;AAClC,SAAO,mCAAmC,UAAU,MAAM;AAC5D;AAoBA,IAAI,kCAAqE;AAElE,SAAS,+BAA+B,UAA4C;AACzF,oCAAkC;AACpC;AAEA,MAAM,qBAAqB;AAAA,EACzB,MAAM,EAAE,OAAO;AAAA,EACf,aAAa,EAAE,OAAO;AAAA,EACtB,SAAS,EAAE,OAAO;AAAA,EAClB,YAAY,EAAE,OAAO;AACvB;AAEA,MAAM,mCAAmC,CAAC,WAA4C;AACpF,MAAI,CAAC,gCAAiC,QAAO;AAC7C,MAAI,OAAO,WAAW,YAAY,WAAW,KAAM,QAAO;AAC1D,QAAM,UAAW,OAAmC;AACpD,MAAI,OAAO,YAAY,YAAY,QAAQ,WAAW,KAAK,QAAQ,SAAS,IAAI,EAAG,QAAO;AAC1F,QAAM,UAAU,gCAAgC,OAAO;AACvD,MAAI,YAAY,UAAW,QAAO;AAClC,QAAM,aAAa,QAAQ,eAAe,aAAa,SAAS;AAChE,SAAO,EAAE,OAAO,EAAE,GAAG,oBAAoB,CAAC,UAAU,GAAG,QAAQ,OAAO,CAAC;AACzE;AAOA,MAAM,iBAAiB,CAAC,WACtB,OAAO,WAAW,YAAY,WAAW,OAAQ,SAAqC,CAAC;AAczF,MAAM,0BAA0B,CAAC,WAA6C;AAC5E,QAAM,SAAS,eAAe,MAAM;AACpC,QAAM,WAAW,eAAe,OAAO,QAAQ;AAC/C,QAAM,YAAY,OAAO,SAAS,yBAAyB,WACvD,SAAS,uBACT;AACJ,SAAO;AAAA,IACL,WAAW;AAAA,IACX,SAAS;AAAA,IACT,MAAM;AAAA,IACN,kBAAkB,OAAO,OAAO,YAAY,WAAW,OAAO,UAAU;AAAA,IACxE,yBAAyB;AAAA,IACzB,QAAQ,SAAS,cAAc,OAAO,cAAc;AAAA,IACpD,sBAAsB;AAAA,EACxB;AACF;AAEO,SAAS,+BAAqC;AACnD,MAAI,0BAA0B,MAAM,CAAC,OAAO,gBAAgB,EAAE,KAAK,IAAI,EAAG;AAE1E,uBAAqB;AAAA,IACnB,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS,WAAW,YAAY;AAAA,IAChC,cAAc;AAAA,IACd,MAAM;AAAA,MACJ,EAAE,IAAI,MAAM,WAAW,QAAQ,UAAU,KAAK;AAAA,MAC9C,EAAE,IAAI,WAAW,WAAW,QAAQ,UAAU,KAAK;AAAA,MACnD,EAAE,IAAI,YAAY,WAAW,OAAO;AAAA,MACpC,EAAE,IAAI,QAAQ,WAAW,WAAW;AAAA,IACtC;AAAA,IACA,SAAS,OAAO,QAAQ,KAAK,UAC1B,MAAM,aAAa,GAAG,iBAAiB,QAAQ,KAAK,KAAK,WAAW,KAAK,MAAM;AAAA,IAClF,OAAO,EAAE,SAAS,KAAK;AAAA,IACvB,MAAM,CAAC,WAAW;AAChB,YAAM,SAAS,eAAe,MAAM;AACpC,aAAO,EAAE,MAAM,OAAO,WAAW,MAAM,aAAa,OAAO,IAAI,SAAS,OAAO,QAAQ;AAAA,IACzF;AAAA,EACF,CAAC;AAED,uBAAqB;AAAA,IACnB,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS,WAAW,YAAY;AAAA,IAChC,cAAc;AAAA,IACd,MAAM;AAAA,MACJ,EAAE,IAAI,aAAa,WAAW,aAAa,UAAU,KAAK;AAAA,MAC1D,EAAE,IAAI,WAAW,WAAW,OAAO;AAAA,IACrC;AAAA,IACA,SAAS,OAAO,QAAQ,KAAK,UAC1B,MAAM,aAAa,GAAG,iBAAiB,QAAQ,KAAK,KAAK,WAAW,KAAK,MAAM;AAAA,IAClF,OAAO,EAAE,SAAS,KAAK;AAAA,IACvB,MAAM,CAAC,WAAW;AAChB,YAAM,SAAS,eAAe,MAAM;AACpC,aAAO,EAAE,SAAS,OAAO,WAAW,MAAM,WAAW,OAAO,UAAU;AAAA,IACxE;AAAA,EACF,CAAC;AAED,uBAAqB;AAAA,IACnB,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS,WAAW,eAAe;AAAA,IACnC,cAAc;AAAA,IACd,MAAM;AAAA,MACJ;AAAA,QACE,IAAI;AAAA,QACJ,WAAW;AAAA,QACX,UAAU;AAAA,QACV,gBAAgB;AAAA,MAClB;AAAA,MACA,EAAE,IAAI,SAAS,WAAW,QAAQ,UAAU,KAAK;AAAA,MACjD,EAAE,IAAI,oBAAoB,WAAW,OAAO;AAAA,IAC9C;AAAA,IACA,SAAS,OAAO,QAAQ,KAAK,UAC1B,MAAM,aAAa,GAAG,oBAAoB,KAAK,IAAI,QAAQ,KAAK,KAAK,WAAW,KAAK,MAAM;AAAA,IAC9F,OAAO,EAAE,SAAS,KAAK;AAAA,IACvB,gBAAgB;AAAA,IAChB,MAAM,CAAC,WAAW;AAChB,YAAM,SAAS,eAAe,MAAM;AACpC,aAAO,EAAE,UAAU,OAAO,WAAW,MAAM,WAAW,OAAO,UAAU;AAAA,IACzE;AAAA,EACF,CAAC;AAED,uBAAqB;AAAA,IACnB,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS,WAAW,cAAc;AAAA,IAClC,cAAc;AAAA,IACd,MAAM;AAAA,MACJ;AAAA,QACE,IAAI;AAAA,QACJ,WAAW;AAAA,QACX,UAAU;AAAA,QACV,gBAAgB;AAAA,MAClB;AAAA,MACA,EAAE,IAAI,UAAU,WAAW,SAAS;AAAA,MACpC,EAAE,IAAI,WAAW,WAAW,WAAW;AAAA,MACvC,EAAE,IAAI,QAAQ,WAAW,OAAO;AAAA,IAClC;AAAA,IACA,SAAS,OAAO,QAAQ,KAAK,UAAU,MAAM,aAAa,GAAG,mBAAmB,QAAQ,KAAK,EAAE,QAAQ,KAAK,OAAO,CAAC;AAAA,IACpH,OAAO,EAAE,SAAS,KAAK;AAAA,IACvB,MAAM,CAAC,WAAW;AAChB,YAAM,SAAS,eAAe,MAAM;AACpC,aAAO,EAAE,WAAW,MAAM,WAAW,EAAE,KAAK,OAAO,KAAK,QAAQ,OAAO,UAAU,OAAO,EAAE;AAAA,IAC5F;AAAA,EACF,CAAC;AAED,uBAAqB;AAAA,IACnB,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS,WAAW,kBAAkB;AAAA,IACtC,cAAc;AAAA,IACd,MAAM;AAAA,MACJ;AAAA,QACE,IAAI;AAAA,QACJ,WAAW;AAAA,QACX,UAAU;AAAA,QACV,gBAAgB;AAAA,MAClB;AAAA,MACA,EAAE,IAAI,QAAQ,WAAW,OAAO;AAAA,IAClC;AAAA,IACA,SAAS,OAAO,QAAQ,KAAK,UAC1B,MAAM,aAAa,GAAG,gBAAgB,QAAQ,KAAK,KAAK,WAAW,KAAK,MAAM;AAAA,IACjF,OAAO,EAAE,SAAS,KAAK;AAAA,IACvB,MAAM;AAAA,EACR,CAAC;AAED,uBAAiC;AAAA,IAC/B,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS,WAAW,MAAM;AAAA,IAC1B,cAAc;AAAA,IACd,MAAM;AAAA,MACJ,EAAE,IAAI,YAAY,WAAW,WAAW;AAAA,MACxC,EAAE,IAAI,SAAS,WAAW,WAAW;AAAA,IACvC;AAAA,IACA,SAAS,CAAC,WAAW;AACnB,YAAM,aAAa,qBAAqB,MAAM;AAC9C,aAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,mBAAW,MAAM,QAAQ,EAAE,QAAQ,MAAM,WAAW,CAAC,GAAG,UAAU;AAAA,MACpE,CAAC;AAAA,IACH;AAAA,IACA,cAAc,aAAa,EAAE,QAAQ,MAAM,OAAO,KAAK;AAAA,IACvD,OAAO,EAAE,SAAS,KAAK;AAAA,IACvB,gBAAgB,CAAC,WACf,OAAO,YAAY,OAAO,QAAQ,qBAAqB,MAAM,IAAI;AAAA,IACnE,MAAM,OAAO,EAAE,QAAQ,MAAM,WAAW,KAAK;AAAA,EAC/C,CAAC;AAED,uBAAqB;AAAA,IACnB,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS,WAAW,UAAU;AAAA,IAC9B,cAAc;AAAA,IACd,MAAM;AAAA,MACJ;AAAA,QACE,IAAI;AAAA,QACJ,WAAW;AAAA,QACX,UAAU;AAAA,QACV,gBAAgB;AAAA,MAClB;AAAA,MACA,EAAE,IAAI,UAAU,WAAW,SAAS;AAAA,MACpC,EAAE,IAAI,WAAW,WAAW,WAAW;AAAA,MACvC,EAAE,IAAI,QAAQ,WAAW,OAAO;AAAA,MAChC,EAAE,IAAI,uBAAuB,WAAW,WAAW;AAAA,IACrD;AAAA,IACA,SAAS,OAAO,QAAQ,KAAK,UAAU,MAAM,aAAa,GAAG,eAAe,KAAK,IAAI,QAAQ,KAAK,KAAK,WAAW,KAAK,MAAM;AAAA,IAC7H,OAAO,EAAE,SAAS,OAAO,QAAQ,qBAAqB;AAAA,IACtD,gBAAgB;AAAA,IAChB,MAAM;AAAA,EACR,CAAC;AAED,uBAAwC;AAAA,IACtC,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS,WAAW,cAAc;AAAA,IAClC,cAAc;AAAA,IACd,MAAM;AAAA,MACJ;AAAA,QACE,IAAI;AAAA,QACJ,WAAW;AAAA,QACX,UAAU;AAAA,QACV,gBAAgB;AAAA,MAClB;AAAA,IACF;AAAA,IACA,SAAS,OAAO,QAAQ,SAAS,MAAM,aAAa,GAAG,mBAAmB,QAAQ,GAAG;AAAA,IACrF,OAAO,EAAE,SAAS,OAAO,QAAQ,0CAA0C;AAAA,IAC3E,MAAM,CAAC,YAAY,EAAE,WAAW,MAAM,aAAa,OAAO,YAAY;AAAA,EACxE,CAAC;AAED,uBAAqB;AAAA,IACnB,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS,WAAW,cAAc;AAAA,IAClC,cAAc;AAAA,IACd,MAAM;AAAA,MACJ,EAAE,IAAI,WAAW,WAAW,QAAQ,UAAU,KAAK;AAAA,MACnD,EAAE,IAAI,SAAS,WAAW,OAAO;AAAA,MACjC,EAAE,IAAI,YAAY,WAAW,QAAQ,UAAU,KAAK;AAAA,MACpD,EAAE,IAAI,iBAAiB,WAAW,OAAO;AAAA,IAC3C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOA,SAAS,OAAO,QAAQ,KAAK,UAAU,MAAM,aAAa,GAAG,mBAAmB,QAAQ,KAAK,KAAK,SAAS;AAAA,IAC3G,OAAO,EAAE,SAAS,OAAO,QAAQ,wBAAwB;AAAA,IACzD,MAAM;AAAA,IACN,gBAAgB;AAAA,EAClB,CAAC;AACH;AAEA,6BAA6B;",
   "names": []
 }

package/dist/modules/workflows/lib/activity-worker-handler.js

@@ -146,20 +146,25 @@ function createActivityWorkerHandler(em, container) {
         userId: payload.userId
       };
       let result;
-      const executeActivityByType = async () => executeRegistryActivity(payload, activityContext, {
+      const executeActivityByType = (signal) => executeRegistryActivity(payload, activityContext, {
         em,
-        container
+        container,
+        signal
       });
       if (payload.timeoutMs) {
-        result = await Promise.race([
-          executeActivityByType(),
-          new Promise(
-            (_, reject) => setTimeout(
-              () => reject(new Error(`Activity timeout after ${payload.timeoutMs}ms`)),
-              payload.timeoutMs
-            )
-          )
-        ]);
+        const ac = new AbortController();
+        let timerId;
+        const timeoutPromise = new Promise((_, reject) => {
+          timerId = setTimeout(() => {
+            ac.abort();
+            reject(new Error(`Activity timeout after ${payload.timeoutMs}ms`));
+          }, payload.timeoutMs);
+        });
+        try {
+          result = await Promise.race([executeActivityByType(ac.signal), timeoutPromise]);
+        } finally {
+          clearTimeout(timerId);
+        }
       } else {
         result = await executeActivityByType();
       }

package/dist/modules/workflows/lib/activity-worker-handler.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/workflows/lib/activity-worker-handler.ts"],
-  "sourcesContent": ["/**\n * Workflow Activity Worker Handler\n *\n * Background worker that processes async activities from the queue.\n * Executes activities with timeout, logs events, and triggers workflow resume.\n */\n\nimport { JobHandler } from '@open-mercato/queue'\nimport {\n  WorkflowActivityJob,\n  WorkflowActivityJobActivity,\n  WorkflowActivityJobInvokeAgent,\n  WorkflowActivityJobResumeSubWorkflowParent,\n} from './activity-queue-types'\nimport { mapAgentResultToContext } from './agent-result-mapping'\nimport type { AgentDispositionReview } from './agent-disposition-task'\nimport {\n  WORKFLOW_GUARDRAIL_BLOCK_CONTEXT_KEY,\n  isGuardrailBlockedError,\n  listWiredOutcomes,\n  readGuardrailBlockEvidenceRef,\n  type AgentOutcomeKind,\n  type OutcomeRoutingDefinitionLike,\n} from './outcome-routing'\nimport { WORKFLOW_ERROR_CONTEXT_KEY, buildErrorContextEntry } from './error-routing'\nimport { EntityManager, LockMode } from '@mikro-orm/core'\nimport type { EntityManager as PostgreSqlEntityManager } from '@mikro-orm/postgresql'\nimport type { AwilixContainer } from 'awilix'\nimport { WorkflowDefinition, WorkflowInstance, StepInstance } from '../data/entities'\nimport type { StepInstanceStatus } from '../data/entities'\nimport type { WorkflowIoContract } from '../data/validators'\nimport { logWorkflowEvent } from './event-logger'\nimport './activity-registry-bootstrap'\nimport type { ActivityContext } from './activity-executor'\nimport { SUB_WORKFLOW_SIGNAL_NAME } from './activity-executor'\nimport { getActivityType, type ActivityExecuteDeps } from './activity-registry'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows').child({ component: 'activity-worker' })\nconst INVOKE_AGENT_QUEUE_MAX_ATTEMPTS = 3\n\n/**\n * Shared async dispatch through the Activity Registry \u2014 the single lookup\n * path for every queue consumer (this handler and the auto-discovered\n * workers/workflow-activities.worker.ts). Importing this module also\n * guarantees the registry bootstrap and the executor handler binding are in\n * place, so callers never need their own side-effect imports.\n */\nexport async function executeRegistryActivity(\n  payload: Pick<WorkflowActivityJobActivity, 'activityType' | 'activityConfig'>,\n  activityContext: ActivityContext,\n  deps: ActivityExecuteDeps\n): Promise<unknown> {\n  const entry = getActivityType(payload.activityType)\n  if (!entry) {\n    throw new Error(`Unsupported activity type: ${payload.activityType}`)\n  }\n  if (entry.async.capable === false) {\n    throw new Error(\n      `[internal] Activity type ${payload.activityType} cannot run asynchronously (${entry.async.reason})`\n    )\n  }\n  const runActivity = entry.executeAsync ?? entry.execute\n  return await runActivity(payload.activityConfig, activityContext, deps)\n}\n\n/**\n * Create activity worker handler for queue processing\n *\n * @param em - Entity manager\n * @param container - DI container\n * @returns JobHandler function\n */\nexport function createActivityWorkerHandler(\n  em: EntityManager,\n  container: AwilixContainer\n): JobHandler<WorkflowActivityJob> {\n  return async (job, ctx) => {\n    const { payload } = job\n    const startTime = Date.now()\n\n    // Timer jobs (kind: 'timer') are a distinct flow \u2014 they resume a paused\n    // workflow instance rather than executing an activity. Handle them first.\n    if (payload.kind === 'timer') {\n      logger.debug('Firing timer for instance', { instanceId: payload.workflowInstanceId, jobId: ctx.jobId })\n      try {\n        const { fireTimer } = await import('./timer-handler')\n        await fireTimer(em, container, {\n          instanceId: payload.workflowInstanceId,\n          stepInstanceId: payload.stepInstanceId,\n          tenantId: payload.tenantId,\n          organizationId: payload.organizationId,\n          userId: payload.userId,\n        })\n      } catch (error: any) {\n        logger.error('Failed to fire timer for instance', { instanceId: payload.workflowInstanceId, err: error })\n        throw error\n      }\n      return\n    }\n\n    // Condition jobs are the durability backstop for WAIT_FOR_CONDITION steps:\n    // they re-evaluate the predicate and enforce the absolute deadline. A job\n    // whose waiter was already resumed by the event-driven path is a no-op.\n    if (payload.kind === 'condition') {\n      logger.debug('Evaluating wait condition', {\n        instanceId: payload.workflowInstanceId,\n        stepInstanceId: payload.stepInstanceId,\n        attempt: payload.attempt,\n        jobId: ctx.jobId,\n      })\n      try {\n        const { evaluateWaitCondition } = await import('./condition-handler')\n        await evaluateWaitCondition(em, container, {\n          instanceId: payload.workflowInstanceId,\n          stepInstanceId: payload.stepInstanceId,\n          branchInstanceId: payload.branchInstanceId,\n          deadlineAt: payload.deadlineAt,\n          attempt: payload.attempt,\n          tenantId: payload.tenantId,\n          organizationId: payload.organizationId,\n          userId: payload.userId,\n        })\n      } catch (error: unknown) {\n        logger.error('Failed to evaluate wait condition', {\n          instanceId: payload.workflowInstanceId,\n          err: error,\n        })\n        throw error\n      }\n      return\n    }\n\n    // Task SLA jobs fire a reminder or the deadline breach for a USER_TASK. The\n    // deadline is absolute on the payload and the handler is idempotent, so an\n    // at-least-once delivery still breaches exactly once.\n    if (payload.kind === 'task_sla') {\n      logger.debug('Running task SLA job', {\n        instanceId: payload.workflowInstanceId,\n        userTaskId: payload.userTaskId,\n        phase: payload.phase,\n        jobId: ctx.jobId,\n      })\n      try {\n        const { runTaskSlaJob } = await import('./task-sla')\n        await runTaskSlaJob(em, container, {\n          userTaskId: payload.userTaskId,\n          stepInstanceId: payload.stepInstanceId,\n          workflowInstanceId: payload.workflowInstanceId,\n          branchInstanceId: payload.branchInstanceId,\n          phase: payload.phase,\n          deadlineAt: payload.deadlineAt,\n          tenantId: payload.tenantId,\n          organizationId: payload.organizationId,\n          userId: payload.userId,\n        })\n      } catch (error: unknown) {\n        logger.error('Failed to run task SLA job', {\n          instanceId: payload.workflowInstanceId,\n          userTaskId: payload.userTaskId,\n          err: error,\n        })\n        throw error\n      }\n      return\n    }\n\n    // Invoke-agent jobs run an INVOKE_AGENT step's agent OUTSIDE the workflow\n    // transaction, then resume the parked step (see handleInvokeAgentJob).\n    if (payload.kind === 'invoke_agent') {\n      await handleInvokeAgentJob(em, container, payload, {\n        attemptNumber: ctx.attemptNumber,\n        maxAttempts: INVOKE_AGENT_QUEUE_MAX_ATTEMPTS,\n      })\n      return\n    }\n\n    // Resume-parent jobs resume a parent instance parked on a SUB_WORKFLOW step\n    // after its child reached a terminal state (see resumeParentAfterSubWorkflow).\n    if (payload.kind === 'resume_subworkflow_parent') {\n      await resumeParentAfterSubWorkflow(em, container, payload)\n      return\n    }\n\n    // Workflow-level error handler jobs start the designated handler workflow\n    // for a failed instance, outside the transaction that recorded the failure.\n    if (payload.kind === 'workflow_error_handler') {\n      logger.debug('Starting workflow error handler', {\n        instanceId: payload.workflowInstanceId,\n        handlerWorkflowId: payload.handlerWorkflowId,\n        jobId: ctx.jobId,\n      })\n      const { runWorkflowErrorHandler } = await import('./error-handler')\n      await runWorkflowErrorHandler(em, container, payload)\n      return\n    }\n\n    logger.debug('Processing activity', { activityId: payload.activityId, jobId: ctx.jobId })\n\n    try {\n      // Fetch workflow instance\n      const instance = await em.findOne(WorkflowInstance, {\n        id: payload.workflowInstanceId,\n        tenantId: payload.tenantId,\n        organizationId: payload.organizationId,\n      })\n\n      if (!instance) {\n        throw new Error(`Workflow instance ${payload.workflowInstanceId} not found`)\n      }\n\n      // Build activity context\n      const activityContext = {\n        workflowInstance: instance,\n        workflowContext: payload.workflowContext,\n        stepContext: payload.stepContext,\n        stepInstanceId: payload.stepInstanceId,\n        userId: payload.userId,\n      }\n\n      // Execute activity by type (with timeout if specified)\n      let result: any\n\n      const executeActivityByType = async () =>\n        executeRegistryActivity(payload, activityContext, {\n          em: em as PostgreSqlEntityManager,\n          container,\n        })\n\n      // Apply timeout if specified\n      if (payload.timeoutMs) {\n        result = await Promise.race([\n          executeActivityByType(),\n          new Promise((_, reject) =>\n            setTimeout(\n              () => reject(new Error(`Activity timeout after ${payload.timeoutMs}ms`)),\n              payload.timeoutMs\n            )\n          ),\n        ])\n      } else {\n        result = await executeActivityByType()\n      }\n\n      const executionTimeMs = Date.now() - startTime\n\n      // Log success event\n      await logWorkflowEvent(em, {\n        workflowInstanceId: payload.workflowInstanceId,\n        stepInstanceId: payload.stepInstanceId,\n        eventType: 'ACTIVITY_COMPLETED',\n        eventData: {\n          activityId: payload.activityId,\n          activityName: payload.activityName,\n          async: true,\n          jobId: ctx.jobId,\n          attemptNumber: ctx.attemptNumber,\n          executionTimeMs,\n          output: result,\n        },\n        userId: payload.userId,\n        tenantId: payload.tenantId,\n        organizationId: payload.organizationId,\n      })\n\n      logger.debug('Activity completed', { activityId: payload.activityId, executionTimeMs })\n\n      // Trigger workflow resume check (via event or direct call)\n      await checkAndResumeWorkflow(em, container, payload.workflowInstanceId)\n    } catch (error: any) {\n      const executionTimeMs = Date.now() - startTime\n\n      logger.error('Activity failed', { activityId: payload.activityId, err: error })\n\n      // Log failure event\n      await logWorkflowEvent(em, {\n        workflowInstanceId: payload.workflowInstanceId,\n        stepInstanceId: payload.stepInstanceId,\n        eventType: 'ACTIVITY_FAILED',\n        eventData: {\n          activityId: payload.activityId,\n          activityName: payload.activityName,\n          async: true,\n          jobId: ctx.jobId,\n          attemptNumber: ctx.attemptNumber,\n          error: error.message,\n          executionTimeMs,\n        },\n        userId: payload.userId,\n        tenantId: payload.tenantId,\n        organizationId: payload.organizationId,\n      })\n\n      // Check if this was final attempt (BullMQ handles retries automatically)\n      if (ctx.attemptNumber >= (payload.retryPolicy?.maxAttempts || 1)) {\n        // Final failure - fail workflow\n        await checkAndResumeWorkflow(em, container, payload.workflowInstanceId)\n      }\n\n      // Re-throw to let BullMQ handle retry\n      throw error\n    }\n  }\n}\n\n/**\n * Structural retryable-error marker. The agent runtime raises transient\n * capacity rejections (e.g. `AgentCapacityError`) carrying `retryable: true`;\n * core cannot import enterprise error classes, so the contract is duck-typed on\n * that marker (mirrors how the bridge itself is resolved by DI key).\n */\nfunction isRetryableError(err: unknown): boolean {\n  return typeof err === 'object' && err !== null && (err as { retryable?: unknown }).retryable === true\n}\n\n/**\n * Minimal surface of the optional agent_orchestrator bridge consumed here.\n * Resolved by DI key so @open-mercato/core does not import the enterprise module.\n */\ntype AgentWorkflowBridgeLike = {\n  invokeAgentForWorkflow: (args: {\n    agentId: string\n    input: unknown\n    onResult: { autoApproveThreshold: number; autoApproveMargin?: number } | { alwaysAsk: true }\n    ctx: {\n      tenantId: string\n      organizationId: string\n      userId?: string\n      workflowInstanceId: string\n      stepId: string\n      /**\n       * The step-attempt id. With the instance and the step it IS this\n       * invocation's identity, so the run it produces can be correlated by name\n       * rather than by \"the newest run for this agent since now\".\n       */\n      invocationId?: string\n      // Optional interpolated business-record descriptor (invokeAgentConfigSchema.subject).\n      subject?: unknown\n      // Optional already-resolved Review section (spec 7.5); see the identical\n      // declaration in `lib/activity-executor.ts`.\n      review?: AgentDispositionReview\n    }\n  }) => Promise<\n    | { kind: 'research'; data: unknown }\n    | { kind: 'auto_approved'; proposalId: string; payload: unknown }\n    | { kind: 'user_task'; proposalId: string }\n    // The agent proposed nothing: terminal like `research`, never parked.\n    | { kind: 'none_proposed'; proposalId: string; payload: unknown }\n    // The agent PRODUCED files. Terminal and non-mutating, so it routes onto the\n    // same governance handle as a research result: the five outcome handles are a\n    // vocabulary of DECISIONS, and \"it made a document\" is not one of them.\n    | { kind: 'artifact'; artifacts: unknown[]; summary?: string }\n  >\n}\n\n/**\n * Step-attempt statuses that mean THIS invocation is over. The step attempt\n * (`step_instances` row) is the invocation's identity \u2014 one row per entry into\n * the step \u2014 so a job addressed to a resolved attempt is a duplicate delivery\n * and must be dropped. That is the idempotency the invoke_agent guard exists\n * for, and unlike an equality check on `instance.currentStepId` it stays correct\n * when a loop re-enters the same step id under a NEW attempt.\n */\nconst RESOLVED_STEP_ATTEMPT_STATUSES: ReadonlySet<StepInstanceStatus> = new Set<StepInstanceStatus>([\n  'COMPLETED',\n  'FAILED',\n  'SKIPPED',\n  'CANCELLED',\n])\n\n/**\n * Block until the transaction that parks the step has committed.\n *\n * `executeInvokeAgent` enqueues this job from INSIDE the workflow execution\n * transaction, so the worker \u2014 reading on its own connection \u2014 can observe a\n * snapshot taken before the step was ever entered. The executor holds a\n * `PESSIMISTIC_WRITE` lock on the instance row for the whole of that\n * transaction (`getWorkflowInstanceForExecution`) and has already written the\n * advanced `current_step_id` to it before the step's activities run, so\n * requesting the SAME lock here waits for that transaction to finish and then\n * reads its committed result. No polling, no sleep, no timing window: the lock\n * IS the happens-before edge between \"the step parked\" and \"the agent may run\".\n *\n * The lock is released immediately (the transaction only reads), so the agent\n * run itself never holds it. A no-op when the entity manager cannot open a\n * transaction, or is already inside one \u2014 an outer transaction has a fixed\n * snapshot the barrier could not refresh anyway, and holding a row lock for the\n * length of an LLM run would be far worse than the race it guards.\n */\nasync function awaitStepParkingCommit(em: EntityManager, instanceId: string): Promise<void> {\n  const scopedEm = em as EntityManager & {\n    transactional?: <TResult>(callback: (trx: EntityManager) => Promise<TResult>) => Promise<TResult>\n    isInTransaction?: () => boolean\n  }\n  if (typeof scopedEm.transactional !== 'function') return\n  if (typeof scopedEm.isInTransaction === 'function' && scopedEm.isInTransaction()) return\n  await scopedEm.transactional(async (trx) => {\n    await trx.findOne(WorkflowInstance, { id: instanceId }, { lockMode: LockMode.PESSIMISTIC_WRITE })\n  })\n}\n\n/**\n * Run an INVOKE_AGENT step's agent OUTSIDE the workflow transaction, then resume\n * the parked step.\n *\n * The step parked on `agent_orchestrator.proposal.ready` (committing the workflow\n * transaction) before this job runs, so the agent \u2014 and all of its own\n * bookkeeping writes \u2014 execute on this worker's independent connection. That is\n * what stops a failing or cross-process (OpenCode) agent run from aborting the\n * workflow transaction, and lets the separate mcp:serve-http process see the\n * committed per-run session rows it needs to authenticate submit_outcome.\n *\n * Idempotency: the agent must run exactly once and only after the step parks.\n * The guard below enforces both, keyed on the STEP ATTEMPT the job was enqueued\n * for (skip when that attempt already resolved; retry while it is not visible or\n * the instance is not parked yet) after `awaitStepParkingCommit` has made the\n * parking transaction's result observable. Once the agent has run, a resume\n * failure is logged rather than rethrown so the job is NOT retried \u2014 re-running\n * an auto_approved agent would re-execute its effector.\n */\nexport async function handleInvokeAgentJob(\n  em: EntityManager,\n  container: AwilixContainer,\n  payload: WorkflowActivityJobInvokeAgent,\n  attempt: { attemptNumber: number; maxAttempts: number } = {\n    attemptNumber: 1,\n    maxAttempts: INVOKE_AGENT_QUEUE_MAX_ATTEMPTS,\n  },\n): Promise<void> {\n  await awaitStepParkingCommit(em, payload.workflowInstanceId)\n\n  const instance = await em.findOne(WorkflowInstance, {\n    id: payload.workflowInstanceId,\n    tenantId: payload.tenantId,\n    organizationId: payload.organizationId,\n  })\n  if (!instance) {\n    // The parking transaction may not be visible yet \u2014 retry.\n    throw new Error(\n      `Workflow instance ${payload.workflowInstanceId} not found for invoke_agent job`\n    )\n  }\n\n  // The step attempt is this invocation's identity. Its ABSENCE means the\n  // parking transaction is still not observable (the instance has not reached\n  // the step yet) \u2014 a re-delivery, never a drop. `instance.currentStepId` cannot\n  // make that distinction: it reads the same on \"not arrived yet\" as on \"already\n  // moved past\", and dropping the job in the first case parks the instance\n  // forever waiting for work that will never run (issue #5986).\n  const stepAttempt = await em.findOne(StepInstance, {\n    id: payload.stepInstanceId,\n    workflowInstanceId: payload.workflowInstanceId,\n    tenantId: payload.tenantId,\n    organizationId: payload.organizationId,\n  })\n  if (!stepAttempt) {\n    throw new Error(\n      `invoke_agent: step attempt ${payload.stepInstanceId} for step ${payload.stepId} is not visible yet ` +\n      `(parking transaction not committed); retrying`\n    )\n  }\n  if (RESOLVED_STEP_ATTEMPT_STATUSES.has(stepAttempt.status)) {\n    logger.info('invoke_agent job skipped \u2014 this step attempt already resolved', {\n      workflowInstanceId: payload.workflowInstanceId,\n      stepInstanceId: payload.stepInstanceId,\n      stepId: payload.stepId,\n      stepAttemptStatus: stepAttempt.status,\n      currentStepId: instance.currentStepId,\n    })\n    return\n  }\n  if (instance.status !== 'PAUSED') {\n    // Parking transaction has not committed yet; retry before running the agent.\n    throw new Error(\n      `invoke_agent: instance ${payload.workflowInstanceId} not parked yet (status=${instance.status}); retrying`\n    )\n  }\n\n  let bridge: AgentWorkflowBridgeLike\n  try {\n    bridge = container.resolve<AgentWorkflowBridgeLike>('agentWorkflowBridge')\n  } catch {\n    throw new Error('[internal] agent_orchestrator not installed (agentWorkflowBridge unavailable)')\n  }\n\n  let outcome: Awaited<ReturnType<AgentWorkflowBridgeLike['invokeAgentForWorkflow']>>\n  try {\n    outcome = await bridge.invokeAgentForWorkflow({\n      agentId: payload.agentId,\n      input: payload.input,\n      onResult: payload.onResult,\n      ctx: {\n        tenantId: payload.tenantId,\n        organizationId: payload.organizationId,\n        userId: payload.userId,\n        workflowInstanceId: instance.id,\n        stepId: payload.stepId,\n        // The step-attempt row the job was enqueued for \u2014 the invocation's own\n        // identity, carried across the process boundary on the job itself.\n        invocationId: payload.stepInstanceId,\n        ...(payload.subject ? { subject: payload.subject } : {}),\n        ...(payload.review ? { review: payload.review } : {}),\n      },\n    })\n  } catch (agentError: unknown) {\n    // Transient capacity rejection (structural `retryable: true`, e.g. the\n    // enterprise AgentCapacityError): the agent never ran, so rethrow and let\n    // the queue's retry/backoff re-attempt instead of fail-stopping the step.\n    // The terminal attempt becomes the declarative `error` outcome when this\n    // step opted into outcome routing; legacy steps keep their fail-stop.\n    if (isRetryableError(agentError) && attempt.attemptNumber < attempt.maxAttempts) {\n      logger.warn('invoke_agent rejected by capacity; rethrowing for queue retry', {\n        agentId: payload.agentId,\n        workflowInstanceId: payload.workflowInstanceId,\n        error: agentError instanceof Error ? agentError.message : String(agentError),\n      })\n      throw agentError\n    }\n    // Guardrail escalation (spec 7.3). A guardrail `block` is a GOVERNANCE\n    // outcome, not an infra failure: when the step wired the `guardrailBlocked`\n    // handle, resume it down that route (typically \u2192 a review task carrying the\n    // guardrail evidence REFERENCE \u2014 never the evidence blob, which stays on the\n    // AgentGuardrailCheck row). A step that wired no such route keeps the\n    // fail-stop below byte-for-byte, so nothing changes until an author opts in.\n    if (isGuardrailBlockedError(agentError)) {\n      const routed = await resumeInvokeAgentWithGuardrailBlock(em, container, instance, payload, agentError)\n      if (routed) return\n    } else {\n      const routed = await resumeInvokeAgentWithError(em, container, instance, payload, agentError)\n      if (routed) return\n    }\n\n    // Fail-stop: an INVOKE_AGENT step whose agent cannot produce an outcome\n    // (unknown agent id, run error, an unwired guardrail block) must HALT the\n    // instance, not\n    // silently retry the job forever while the step stays parked. Mark the parked\n    // step + instance FAILED so progression stops and the failure is visible, and\n    // do NOT rethrow \u2014 a retry would never succeed and would re-run any partial\n    // agent work. (A genuine human-review pause is the `user_task` branch below,\n    // which is unaffected.)\n    await failInvokeAgentStep(em, container, instance, payload, agentError)\n    return\n  }\n\n  // user_task: leave the step parked \u2014 agent_orchestrator's human dispose path\n  // fires the same proposal-ready signal to resume it (unchanged behavior).\n  if (outcome.kind === 'user_task') {\n    logger.info('invoke_agent routed to human; leaving instance parked', {\n      agentId: payload.agentId,\n      proposalId: outcome.proposalId,\n      workflowInstanceId: payload.workflowInstanceId,\n    })\n    return\n  }\n\n  // research / auto_approved: resume the parked step by firing the signal. The\n  // payload is merged into workflow context (top-level), mirroring the prior\n  // inline-resolution behavior so the outgoing transition can branch. When the\n  // activity declared an outputMapping, route the result into the chosen keys;\n  // otherwise fall back to the legacy fixed-key payload.\n  // `auto_approved` and `none_proposed` both carry a proposal; `researcher`\n  // carries agent data and `artifact` carries a file list. Narrowed explicitly\n  // rather than through a boolean, which the discriminated union does not follow.\n  const proposalOutcome =\n    outcome.kind === 'auto_approved' || outcome.kind === 'none_proposed' ? outcome : null\n  const mappedPayload = mapAgentResultToContext(\n    {\n      kind: outcome.kind,\n      agentId: payload.agentId,\n      proposalId: proposalOutcome?.proposalId,\n      proposalPayload: proposalOutcome?.payload,\n      data: outcome.kind === 'research' ? outcome.data : undefined,\n      artifacts: outcome.kind === 'artifact' ? outcome.artifacts : undefined,\n    },\n    payload.outputMapping\n  )\n  const signalPayload =\n    mappedPayload ??\n    (proposalOutcome\n      ? {\n          disposition: proposalOutcome.kind,\n          agentId: payload.agentId,\n          agentProposalId: proposalOutcome.proposalId,\n          proposalPayload: proposalOutcome.payload,\n        }\n      : {\n          disposition: 'researcher',\n          agentId: payload.agentId,\n          [`${payload.stepId}_agent`]:\n            outcome.kind === 'research'\n              ? outcome.data\n              : outcome.kind === 'artifact'\n                ? { artifacts: outcome.artifacts, summary: outcome.summary }\n                : undefined,\n        })\n\n  try {\n    const { sendSignal } = await import('./signal-handler')\n    await sendSignal(em, container, {\n      instanceId: payload.workflowInstanceId,\n      signalName: payload.signalName,\n      payload: signalPayload,\n      // `none_proposed` and `artifact` both take the researcher handle \u2014 the agent\n      // reported something rather than deciding something, which is what that\n      // route means.\n      agentOutcome: outcome.kind === 'auto_approved' ? 'approved' : 'researcher',\n      agentProposalId: proposalOutcome?.proposalId,\n      userId: payload.userId,\n      tenantId: payload.tenantId,\n      organizationId: payload.organizationId,\n    })\n  } catch (resumeError: unknown) {\n    // The agent already ran (and, for auto_approved, its effector already\n    // executed). Re-running on retry would double-execute, so do NOT rethrow:\n    // log and leave the instance parked (resumable via a manual signal).\n    logger.error('invoke_agent ran but resume failed; left parked', {\n      agentId: payload.agentId,\n      workflowInstanceId: payload.workflowInstanceId,\n      error: resumeError instanceof Error ? resumeError.message : String(resumeError),\n    })\n  }\n}\n\n/**\n * Resume a parent instance parked on a SUB_WORKFLOW step after its child reached\n * a terminal state. Modelled on `handleInvokeAgentJob`:\n *\n * Idempotency / ordering guards (mirror handleInvokeAgentJob):\n *   - parent not found \u2192 throw (parking txn may not be visible yet; retry)\n *   - parent.currentStepId !== parentStepId \u2192 already advanced or never parked\n *     here (synchronous fast path) \u2192 skip (no retry)\n *   - parent.status !== 'PAUSED' \u2192 not parked yet \u2192 throw (retry)\n *\n * A COMPLETED child maps its output (shared mapSubWorkflowOutput helper) and\n * resumes via `sendSignal`. A FAILED child fails the parent. Once the resume work\n * has run, a resume failure is logged rather than rethrown so a retry cannot\n * double-execute side effects.\n */\nexport async function resumeParentAfterSubWorkflow(\n  em: EntityManager,\n  container: AwilixContainer,\n  payload: WorkflowActivityJobResumeSubWorkflowParent\n): Promise<void> {\n  const { parentInstanceId, parentStepId, parentStepInstanceId, childInstanceId, childStatus, tenantId, organizationId } =\n    payload\n\n  const parent = await em.findOne(WorkflowInstance, {\n    id: parentInstanceId,\n    tenantId,\n    organizationId,\n  })\n  if (!parent) {\n    // The parking transaction may not be visible yet \u2014 retry.\n    throw new Error(`Parent workflow instance ${parentInstanceId} not found for resume_subworkflow_parent job`)\n  }\n\n  if (parent.currentStepId !== parentStepId) {\n    logger.info(\n      'resume_subworkflow_parent skipped \u2014 parent is on a different step (already resolved or synchronous fast path)',\n      { parentInstanceId, currentStepId: parent.currentStepId, parentStepId },\n    )\n    return\n  }\n  if (parent.status !== 'PAUSED') {\n    // Parking transaction has not committed yet; retry before resuming.\n    throw new Error(\n      `resume_subworkflow_parent: parent ${parentInstanceId} not parked yet (status=${parent.status}); retrying`\n    )\n  }\n\n  const { completeWorkflow } = await import('./workflow-executor')\n\n  const failParent = async (error: string): Promise<void> => {\n    const activeStep = await em.findOne(StepInstance, {\n      workflowInstanceId: parentInstanceId,\n      stepId: parentStepId,\n      status: 'ACTIVE',\n    })\n    if (activeStep) {\n      const now = new Date()\n      activeStep.status = 'FAILED'\n      activeStep.errorData = { error }\n      activeStep.exitedAt = now\n      activeStep.updatedAt = now\n      await em.flush()\n    }\n    await completeWorkflow(em, container, parentInstanceId, 'FAILED', { error })\n  }\n\n  if (childStatus === 'FAILED') {\n    const message = `Sub-workflow child ${childInstanceId} failed`\n    await logWorkflowEvent(em, {\n      workflowInstanceId: parentInstanceId,\n      stepInstanceId: parentStepInstanceId,\n      eventType: 'SUB_WORKFLOW_FAILED',\n      eventData: { childInstanceId, error: message },\n      tenantId,\n      organizationId,\n    })\n    await failParent(message)\n    return\n  }\n\n  // COMPLETED child: map its output against the SUB_WORKFLOW step's outputMapping\n  // and the child's declared io output ports.\n  const parentDefinition = await em.findOne(WorkflowDefinition, { id: parent.definitionId })\n  const stepDef = parentDefinition?.definition.steps.find((s: any) => s.stepId === parentStepId)\n  const { subWorkflowId, outputMapping, version } = (stepDef?.config || {}) as {\n    subWorkflowId?: string\n    outputMapping?: Record<string, string>\n    version?: number\n  }\n\n  const childInstance = await em.findOne(WorkflowInstance, {\n    id: childInstanceId,\n    tenantId,\n    organizationId,\n  })\n  if (!childInstance) {\n    throw new Error(`Child workflow instance ${childInstanceId} not found for resume_subworkflow_parent job`)\n  }\n\n  const { findWorkflowDefinition } = await import('./find-definition')\n  const childDefinition = subWorkflowId\n    ? await findWorkflowDefinition(em, { workflowId: subWorkflowId, version, tenantId, organizationId })\n    : null\n  const ioContract = (childDefinition?.definition as { io?: WorkflowIoContract } | undefined)?.io\n\n  const { mapSubWorkflowOutput } = await import('./step-handler')\n  const mapped = mapSubWorkflowOutput(childInstance.context || {}, outputMapping || {}, ioContract)\n\n  if (mapped.error) {\n    await logWorkflowEvent(em, {\n      workflowInstanceId: parentInstanceId,\n      stepInstanceId: parentStepInstanceId,\n      eventType: 'SUB_WORKFLOW_FAILED',\n      eventData: { childInstanceId, reason: 'OUTPUT_VALIDATION', error: mapped.error },\n      tenantId,\n      organizationId,\n    })\n    await failParent(mapped.error)\n    return\n  }\n\n  const outputData = mapped.outputData\n\n  await logWorkflowEvent(em, {\n    workflowInstanceId: parentInstanceId,\n    stepInstanceId: parentStepInstanceId,\n    eventType: 'SUB_WORKFLOW_COMPLETED',\n    eventData: { childInstanceId, outputData },\n    tenantId,\n    organizationId,\n  })\n\n  // Resume the parent via sendSignal: merges outputData into context, exits the\n  // active SUB_WORKFLOW step, runs the auto transition out of it, and resumes\n  // executeWorkflow(parent). After this side-effecting work, a failure is logged\n  // rather than rethrown to avoid double-execution on retry.\n  try {\n    const { sendSignal } = await import('./signal-handler')\n    await sendSignal(em, container, {\n      instanceId: parentInstanceId,\n      signalName: SUB_WORKFLOW_SIGNAL_NAME,\n      payload: outputData,\n      userId: payload.userId,\n      tenantId,\n      organizationId,\n    })\n  } catch (resumeError: unknown) {\n    logger.error('resume_subworkflow_parent: child completed but resuming parent failed; left parked', {\n      childInstanceId,\n      parentInstanceId,\n      error: resumeError instanceof Error ? resumeError.message : String(resumeError),\n    })\n  }\n}\n\n/**\n * Resume a parked agent step through declarative outcome handling.\n *\n * Returns false \u2014 leaving the caller's legacy fail-stop to run \u2014 when the step\n * declares no outcome routing at all. Once a step opts in, an unwired outcome\n * is still resumed so the executor can apply the inherited error directive.\n */\nasync function resumeInvokeAgentWithOutcome(\n  em: EntityManager,\n  container: AwilixContainer,\n  instance: WorkflowInstance,\n  payload: WorkflowActivityJobInvokeAgent,\n  outcome: AgentOutcomeKind,\n  contextPayload: Record<string, unknown>,\n): Promise<boolean> {\n  let definition: { definition?: OutcomeRoutingDefinitionLike } | null = null\n  try {\n    const { findDefinitionForInstance } = await import('./find-definition')\n    definition = await findDefinitionForInstance(em, instance)\n  } catch {\n    return false\n  }\n  if (!definition?.definition) return false\n  if (listWiredOutcomes(definition.definition, payload.stepId).length === 0) return false\n\n  try {\n    const { sendSignal } = await import('./signal-handler')\n    await sendSignal(em, container, {\n      instanceId: payload.workflowInstanceId,\n      signalName: payload.signalName,\n      payload: contextPayload,\n      agentOutcome: outcome,\n      userId: payload.userId,\n      tenantId: payload.tenantId,\n      organizationId: payload.organizationId,\n    })\n    return true\n  } catch (resumeError: unknown) {\n    logger.error('invoke_agent outcome could not be routed; falling back to fail-stop', {\n      agentId: payload.agentId,\n      outcome,\n      workflowInstanceId: payload.workflowInstanceId,\n      error: resumeError instanceof Error ? resumeError.message : String(resumeError),\n    })\n    return false\n  }\n}\n\nasync function resumeInvokeAgentWithGuardrailBlock(\n  em: EntityManager,\n  container: AwilixContainer,\n  instance: WorkflowInstance,\n  payload: WorkflowActivityJobInvokeAgent,\n  agentError: unknown,\n): Promise<boolean> {\n  const evidenceRef = readGuardrailBlockEvidenceRef(agentError)\n  return resumeInvokeAgentWithOutcome(em, container, instance, payload, 'guardrailBlocked', {\n    disposition: 'guardrail_blocked',\n    agentId: payload.agentId,\n    [WORKFLOW_GUARDRAIL_BLOCK_CONTEXT_KEY]: { stepId: payload.stepId, ...evidenceRef },\n  })\n}\n\nasync function resumeInvokeAgentWithError(\n  em: EntityManager,\n  container: AwilixContainer,\n  instance: WorkflowInstance,\n  payload: WorkflowActivityJobInvokeAgent,\n  agentError: unknown,\n): Promise<boolean> {\n  const message = agentError instanceof Error ? agentError.message : String(agentError)\n  return resumeInvokeAgentWithOutcome(em, container, instance, payload, 'error', {\n    agentId: payload.agentId,\n    [WORKFLOW_ERROR_CONTEXT_KEY]: buildErrorContextEntry(payload.stepId, message),\n  })\n}\n\nasync function failInvokeAgentStep(\n  em: EntityManager,\n  container: AwilixContainer,\n  instance: WorkflowInstance,\n  payload: WorkflowActivityJobInvokeAgent,\n  agentError: unknown,\n): Promise<void> {\n  const message = agentError instanceof Error ? agentError.message : String(agentError)\n  logger.error('invoke_agent failed; failing instance', {\n    agentId: payload.agentId,\n    workflowInstanceId: payload.workflowInstanceId,\n    error: message,\n  })\n  try {\n    const { StepInstance } = await import('../data/entities')\n    const stepInstance = await em.findOne(StepInstance, {\n      id: payload.stepInstanceId,\n      tenantId: payload.tenantId,\n      organizationId: payload.organizationId,\n    })\n    if (stepInstance && stepInstance.status === 'ACTIVE') {\n      stepInstance.status = 'FAILED'\n      stepInstance.errorData = { agentId: payload.agentId, error: message }\n      stepInstance.exitedAt = new Date()\n      await em.flush()\n    }\n\n    const { completeWorkflow } = await import('./workflow-executor')\n    await completeWorkflow(em, container, payload.workflowInstanceId, 'FAILED', {\n      error: `INVOKE_AGENT step ${payload.stepId} failed: ${message}`,\n      details: { agentId: payload.agentId, stepId: payload.stepId },\n    })\n  } catch (failError: any) {\n    logger.error('invoke_agent: could not mark instance FAILED', {\n      agentId: payload.agentId,\n      workflowInstanceId: payload.workflowInstanceId,\n      error: failError?.message ?? String(failError),\n    })\n  }\n}\n\n/**\n * Helper to check if workflow can resume after activities complete/fail\n */\nasync function checkAndResumeWorkflow(\n  em: EntityManager,\n  container: AwilixContainer,\n  workflowInstanceId: string\n): Promise<void> {\n  // Import here to avoid circular dependency\n  const { resumeWorkflowAfterActivities } = await import('./workflow-executor')\n\n\n  try {\n    await resumeWorkflowAfterActivities(em, container, workflowInstanceId)\n  } catch (error: any) {\n    // Ignore error if workflow not ready to resume yet\n    if (!error.message?.includes('Activities still pending')) {\n      logger.error('Failed to resume workflow', { instanceId: workflowInstanceId, err: error })\n    }\n  }\n}\n"],
-  "mappings": "AAcA,SAAS,+BAA+B;AAExC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP,SAAS,4BAA4B,8BAA8B;AACnE,SAAwB,gBAAgB;AAGxC,SAAS,oBAAoB,kBAAkB,oBAAoB;AAGnE,SAAS,wBAAwB;AACjC,OAAO;AAEP,SAAS,gCAAgC;AACzC,SAAS,uBAAiD;AAC1D,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,kBAAkB,CAAC;AAC/E,MAAM,kCAAkC;AASxC,eAAsB,wBACpB,SACA,iBACA,MACkB;AAClB,QAAM,QAAQ,gBAAgB,QAAQ,YAAY;AAClD,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,MAAM,8BAA8B,QAAQ,YAAY,EAAE;AAAA,EACtE;AACA,MAAI,MAAM,MAAM,YAAY,OAAO;AACjC,UAAM,IAAI;AAAA,MACR,4BAA4B,QAAQ,YAAY,+BAA+B,MAAM,MAAM,MAAM;AAAA,IACnG;AAAA,EACF;AACA,QAAM,cAAc,MAAM,gBAAgB,MAAM;AAChD,SAAO,MAAM,YAAY,QAAQ,gBAAgB,iBAAiB,IAAI;AACxE;AASO,SAAS,4BACd,IACA,WACiC;AACjC,SAAO,OAAO,KAAK,QAAQ;AACzB,UAAM,EAAE,QAAQ,IAAI;AACpB,UAAM,YAAY,KAAK,IAAI;AAI3B,QAAI,QAAQ,SAAS,SAAS;AAC5B,aAAO,MAAM,6BAA6B,EAAE,YAAY,QAAQ,oBAAoB,OAAO,IAAI,MAAM,CAAC;AACtG,UAAI;AACF,cAAM,EAAE,UAAU,IAAI,MAAM,OAAO,iBAAiB;AACpD,cAAM,UAAU,IAAI,WAAW;AAAA,UAC7B,YAAY,QAAQ;AAAA,UACpB,gBAAgB,QAAQ;AAAA,UACxB,UAAU,QAAQ;AAAA,UAClB,gBAAgB,QAAQ;AAAA,UACxB,QAAQ,QAAQ;AAAA,QAClB,CAAC;AAAA,MACH,SAAS,OAAY;AACnB,eAAO,MAAM,qCAAqC,EAAE,YAAY,QAAQ,oBAAoB,KAAK,MAAM,CAAC;AACxG,cAAM;AAAA,MACR;AACA;AAAA,IACF;AAKA,QAAI,QAAQ,SAAS,aAAa;AAChC,aAAO,MAAM,6BAA6B;AAAA,QACxC,YAAY,QAAQ;AAAA,QACpB,gBAAgB,QAAQ;AAAA,QACxB,SAAS,QAAQ;AAAA,QACjB,OAAO,IAAI;AAAA,MACb,CAAC;AACD,UAAI;AACF,cAAM,EAAE,sBAAsB,IAAI,MAAM,OAAO,qBAAqB;AACpE,cAAM,sBAAsB,IAAI,WAAW;AAAA,UACzC,YAAY,QAAQ;AAAA,UACpB,gBAAgB,QAAQ;AAAA,UACxB,kBAAkB,QAAQ;AAAA,UAC1B,YAAY,QAAQ;AAAA,UACpB,SAAS,QAAQ;AAAA,UACjB,UAAU,QAAQ;AAAA,UAClB,gBAAgB,QAAQ;AAAA,UACxB,QAAQ,QAAQ;AAAA,QAClB,CAAC;AAAA,MACH,SAAS,OAAgB;AACvB,eAAO,MAAM,qCAAqC;AAAA,UAChD,YAAY,QAAQ;AAAA,UACpB,KAAK;AAAA,QACP,CAAC;AACD,cAAM;AAAA,MACR;AACA;AAAA,IACF;AAKA,QAAI,QAAQ,SAAS,YAAY;AAC/B,aAAO,MAAM,wBAAwB;AAAA,QACnC,YAAY,QAAQ;AAAA,QACpB,YAAY,QAAQ;AAAA,QACpB,OAAO,QAAQ;AAAA,QACf,OAAO,IAAI;AAAA,MACb,CAAC;AACD,UAAI;AACF,cAAM,EAAE,cAAc,IAAI,MAAM,OAAO,YAAY;AACnD,cAAM,cAAc,IAAI,WAAW;AAAA,UACjC,YAAY,QAAQ;AAAA,UACpB,gBAAgB,QAAQ;AAAA,UACxB,oBAAoB,QAAQ;AAAA,UAC5B,kBAAkB,QAAQ;AAAA,UAC1B,OAAO,QAAQ;AAAA,UACf,YAAY,QAAQ;AAAA,UACpB,UAAU,QAAQ;AAAA,UAClB,gBAAgB,QAAQ;AAAA,UACxB,QAAQ,QAAQ;AAAA,QAClB,CAAC;AAAA,MACH,SAAS,OAAgB;AACvB,eAAO,MAAM,8BAA8B;AAAA,UACzC,YAAY,QAAQ;AAAA,UACpB,YAAY,QAAQ;AAAA,UACpB,KAAK;AAAA,QACP,CAAC;AACD,cAAM;AAAA,MACR;AACA;AAAA,IACF;AAIA,QAAI,QAAQ,SAAS,gBAAgB;AACnC,YAAM,qBAAqB,IAAI,WAAW,SAAS;AAAA,QACjD,eAAe,IAAI;AAAA,QACnB,aAAa;AAAA,MACf,CAAC;AACD;AAAA,IACF;AAIA,QAAI,QAAQ,SAAS,6BAA6B;AAChD,YAAM,6BAA6B,IAAI,WAAW,OAAO;AACzD;AAAA,IACF;AAIA,QAAI,QAAQ,SAAS,0BAA0B;AAC7C,aAAO,MAAM,mCAAmC;AAAA,QAC9C,YAAY,QAAQ;AAAA,QACpB,mBAAmB,QAAQ;AAAA,QAC3B,OAAO,IAAI;AAAA,MACb,CAAC;AACD,YAAM,EAAE,wBAAwB,IAAI,MAAM,OAAO,iBAAiB;AAClE,YAAM,wBAAwB,IAAI,WAAW,OAAO;AACpD;AAAA,IACF;AAEA,WAAO,MAAM,uBAAuB,EAAE,YAAY,QAAQ,YAAY,OAAO,IAAI,MAAM,CAAC;AAExF,QAAI;AAEF,YAAM,WAAW,MAAM,GAAG,QAAQ,kBAAkB;AAAA,QAClD,IAAI,QAAQ;AAAA,QACZ,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ;AAAA,MAC1B,CAAC;AAED,UAAI,CAAC,UAAU;AACb,cAAM,IAAI,MAAM,qBAAqB,QAAQ,kBAAkB,YAAY;AAAA,MAC7E;AAGA,YAAM,kBAAkB;AAAA,QACtB,kBAAkB;AAAA,QAClB,iBAAiB,QAAQ;AAAA,QACzB,aAAa,QAAQ;AAAA,QACrB,gBAAgB,QAAQ;AAAA,QACxB,QAAQ,QAAQ;AAAA,MAClB;AAGA,UAAI;AAEJ,YAAM,wBAAwB,YAC5B,wBAAwB,SAAS,iBAAiB;AAAA,QAChD;AAAA,QACA;AAAA,MACF,CAAC;AAGH,UAAI,QAAQ,WAAW;AACrB,iBAAS,MAAM,QAAQ,KAAK;AAAA,UAC1B,sBAAsB;AAAA,UACtB,IAAI;AAAA,YAAQ,CAAC,GAAG,WACd;AAAA,cACE,MAAM,OAAO,IAAI,MAAM,0BAA0B,QAAQ,SAAS,IAAI,CAAC;AAAA,cACvE,QAAQ;AAAA,YACV;AAAA,UACF;AAAA,QACF,CAAC;AAAA,MACH,OAAO;AACL,iBAAS,MAAM,sBAAsB;AAAA,MACvC;AAEA,YAAM,kBAAkB,KAAK,IAAI,IAAI;AAGrC,YAAM,iBAAiB,IAAI;AAAA,QACzB,oBAAoB,QAAQ;AAAA,QAC5B,gBAAgB,QAAQ;AAAA,QACxB,WAAW;AAAA,QACX,WAAW;AAAA,UACT,YAAY,QAAQ;AAAA,UACpB,cAAc,QAAQ;AAAA,UACtB,OAAO;AAAA,UACP,OAAO,IAAI;AAAA,UACX,eAAe,IAAI;AAAA,UACnB;AAAA,UACA,QAAQ;AAAA,QACV;AAAA,QACA,QAAQ,QAAQ;AAAA,QAChB,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ;AAAA,MAC1B,CAAC;AAED,aAAO,MAAM,sBAAsB,EAAE,YAAY,QAAQ,YAAY,gBAAgB,CAAC;AAGtF,YAAM,uBAAuB,IAAI,WAAW,QAAQ,kBAAkB;AAAA,IACxE,SAAS,OAAY;AACnB,YAAM,kBAAkB,KAAK,IAAI,IAAI;AAErC,aAAO,MAAM,mBAAmB,EAAE,YAAY,QAAQ,YAAY,KAAK,MAAM,CAAC;AAG9E,YAAM,iBAAiB,IAAI;AAAA,QACzB,oBAAoB,QAAQ;AAAA,QAC5B,gBAAgB,QAAQ;AAAA,QACxB,WAAW;AAAA,QACX,WAAW;AAAA,UACT,YAAY,QAAQ;AAAA,UACpB,cAAc,QAAQ;AAAA,UACtB,OAAO;AAAA,UACP,OAAO,IAAI;AAAA,UACX,eAAe,IAAI;AAAA,UACnB,OAAO,MAAM;AAAA,UACb;AAAA,QACF;AAAA,QACA,QAAQ,QAAQ;AAAA,QAChB,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ;AAAA,MAC1B,CAAC;AAGD,UAAI,IAAI,kBAAkB,QAAQ,aAAa,eAAe,IAAI;AAEhE,cAAM,uBAAuB,IAAI,WAAW,QAAQ,kBAAkB;AAAA,MACxE;AAGA,YAAM;AAAA,IACR;AAAA,EACF;AACF;AAQA,SAAS,iBAAiB,KAAuB;AAC/C,SAAO,OAAO,QAAQ,YAAY,QAAQ,QAAS,IAAgC,cAAc;AACnG;AAkDA,MAAM,iCAAkE,oBAAI,IAAwB;AAAA,EAClG;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAqBD,eAAe,uBAAuB,IAAmB,YAAmC;AAC1F,QAAM,WAAW;AAIjB,MAAI,OAAO,SAAS,kBAAkB,WAAY;AAClD,MAAI,OAAO,SAAS,oBAAoB,cAAc,SAAS,gBAAgB,EAAG;AAClF,QAAM,SAAS,cAAc,OAAO,QAAQ;AAC1C,UAAM,IAAI,QAAQ,kBAAkB,EAAE,IAAI,WAAW,GAAG,EAAE,UAAU,SAAS,kBAAkB,CAAC;AAAA,EAClG,CAAC;AACH;AAqBA,eAAsB,qBACpB,IACA,WACA,SACA,UAA0D;AAAA,EACxD,eAAe;AAAA,EACf,aAAa;AACf,GACe;AACf,QAAM,uBAAuB,IAAI,QAAQ,kBAAkB;AAE3D,QAAM,WAAW,MAAM,GAAG,QAAQ,kBAAkB;AAAA,IAClD,IAAI,QAAQ;AAAA,IACZ,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ;AAAA,EAC1B,CAAC;AACD,MAAI,CAAC,UAAU;AAEb,UAAM,IAAI;AAAA,MACR,qBAAqB,QAAQ,kBAAkB;AAAA,IACjD;AAAA,EACF;AAQA,QAAM,cAAc,MAAM,GAAG,QAAQ,cAAc;AAAA,IACjD,IAAI,QAAQ;AAAA,IACZ,oBAAoB,QAAQ;AAAA,IAC5B,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ;AAAA,EAC1B,CAAC;AACD,MAAI,CAAC,aAAa;AAChB,UAAM,IAAI;AAAA,MACR,8BAA8B,QAAQ,cAAc,aAAa,QAAQ,MAAM;AAAA,IAEjF;AAAA,EACF;AACA,MAAI,+BAA+B,IAAI,YAAY,MAAM,GAAG;AAC1D,WAAO,KAAK,sEAAiE;AAAA,MAC3E,oBAAoB,QAAQ;AAAA,MAC5B,gBAAgB,QAAQ;AAAA,MACxB,QAAQ,QAAQ;AAAA,MAChB,mBAAmB,YAAY;AAAA,MAC/B,eAAe,SAAS;AAAA,IAC1B,CAAC;AACD;AAAA,EACF;AACA,MAAI,SAAS,WAAW,UAAU;AAEhC,UAAM,IAAI;AAAA,MACR,0BAA0B,QAAQ,kBAAkB,2BAA2B,SAAS,MAAM;AAAA,IAChG;AAAA,EACF;AAEA,MAAI;AACJ,MAAI;AACF,aAAS,UAAU,QAAiC,qBAAqB;AAAA,EAC3E,QAAQ;AACN,UAAM,IAAI,MAAM,+EAA+E;AAAA,EACjG;AAEA,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,OAAO,uBAAuB;AAAA,MAC5C,SAAS,QAAQ;AAAA,MACjB,OAAO,QAAQ;AAAA,MACf,UAAU,QAAQ;AAAA,MAClB,KAAK;AAAA,QACH,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ;AAAA,QACxB,QAAQ,QAAQ;AAAA,QAChB,oBAAoB,SAAS;AAAA,QAC7B,QAAQ,QAAQ;AAAA;AAAA;AAAA,QAGhB,cAAc,QAAQ;AAAA,QACtB,GAAI,QAAQ,UAAU,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;AAAA,QACtD,GAAI,QAAQ,SAAS,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;AAAA,MACrD;AAAA,IACF,CAAC;AAAA,EACH,SAAS,YAAqB;AAM5B,QAAI,iBAAiB,UAAU,KAAK,QAAQ,gBAAgB,QAAQ,aAAa;AAC/E,aAAO,KAAK,iEAAiE;AAAA,QAC3E,SAAS,QAAQ;AAAA,QACjB,oBAAoB,QAAQ;AAAA,QAC5B,OAAO,sBAAsB,QAAQ,WAAW,UAAU,OAAO,UAAU;AAAA,MAC7E,CAAC;AACD,YAAM;AAAA,IACR;AAOA,QAAI,wBAAwB,UAAU,GAAG;AACvC,YAAM,SAAS,MAAM,oCAAoC,IAAI,WAAW,UAAU,SAAS,UAAU;AACrG,UAAI,OAAQ;AAAA,IACd,OAAO;AACL,YAAM,SAAS,MAAM,2BAA2B,IAAI,WAAW,UAAU,SAAS,UAAU;AAC5F,UAAI,OAAQ;AAAA,IACd;AAUA,UAAM,oBAAoB,IAAI,WAAW,UAAU,SAAS,UAAU;AACtE;AAAA,EACF;AAIA,MAAI,QAAQ,SAAS,aAAa;AAChC,WAAO,KAAK,yDAAyD;AAAA,MACnE,SAAS,QAAQ;AAAA,MACjB,YAAY,QAAQ;AAAA,MACpB,oBAAoB,QAAQ;AAAA,IAC9B,CAAC;AACD;AAAA,EACF;AAUA,QAAM,kBACJ,QAAQ,SAAS,mBAAmB,QAAQ,SAAS,kBAAkB,UAAU;AACnF,QAAM,gBAAgB;AAAA,IACpB;AAAA,MACE,MAAM,QAAQ;AAAA,MACd,SAAS,QAAQ;AAAA,MACjB,YAAY,iBAAiB;AAAA,MAC7B,iBAAiB,iBAAiB;AAAA,MAClC,MAAM,QAAQ,SAAS,aAAa,QAAQ,OAAO;AAAA,MACnD,WAAW,QAAQ,SAAS,aAAa,QAAQ,YAAY;AAAA,IAC/D;AAAA,IACA,QAAQ;AAAA,EACV;AACA,QAAM,gBACJ,kBACC,kBACG;AAAA,IACE,aAAa,gBAAgB;AAAA,IAC7B,SAAS,QAAQ;AAAA,IACjB,iBAAiB,gBAAgB;AAAA,IACjC,iBAAiB,gBAAgB;AAAA,EACnC,IACA;AAAA,IACE,aAAa;AAAA,IACb,SAAS,QAAQ;AAAA,IACjB,CAAC,GAAG,QAAQ,MAAM,QAAQ,GACxB,QAAQ,SAAS,aACb,QAAQ,OACR,QAAQ,SAAS,aACf,EAAE,WAAW,QAAQ,WAAW,SAAS,QAAQ,QAAQ,IACzD;AAAA,EACV;AAEN,MAAI;AACF,UAAM,EAAE,WAAW,IAAI,MAAM,OAAO,kBAAkB;AACtD,UAAM,WAAW,IAAI,WAAW;AAAA,MAC9B,YAAY,QAAQ;AAAA,MACpB,YAAY,QAAQ;AAAA,MACpB,SAAS;AAAA;AAAA;AAAA;AAAA,MAIT,cAAc,QAAQ,SAAS,kBAAkB,aAAa;AAAA,MAC9D,iBAAiB,iBAAiB;AAAA,MAClC,QAAQ,QAAQ;AAAA,MAChB,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,IAC1B,CAAC;AAAA,EACH,SAAS,aAAsB;AAI7B,WAAO,MAAM,mDAAmD;AAAA,MAC9D,SAAS,QAAQ;AAAA,MACjB,oBAAoB,QAAQ;AAAA,MAC5B,OAAO,uBAAuB,QAAQ,YAAY,UAAU,OAAO,WAAW;AAAA,IAChF,CAAC;AAAA,EACH;AACF;AAiBA,eAAsB,6BACpB,IACA,WACA,SACe;AACf,QAAM,EAAE,kBAAkB,cAAc,sBAAsB,iBAAiB,aAAa,UAAU,eAAe,IACnH;AAEF,QAAM,SAAS,MAAM,GAAG,QAAQ,kBAAkB;AAAA,IAChD,IAAI;AAAA,IACJ;AAAA,IACA;AAAA,EACF,CAAC;AACD,MAAI,CAAC,QAAQ;AAEX,UAAM,IAAI,MAAM,4BAA4B,gBAAgB,8CAA8C;AAAA,EAC5G;AAEA,MAAI,OAAO,kBAAkB,cAAc;AACzC,WAAO;AAAA,MACL;AAAA,MACA,EAAE,kBAAkB,eAAe,OAAO,eAAe,aAAa;AAAA,IACxE;AACA;AAAA,EACF;AACA,MAAI,OAAO,WAAW,UAAU;AAE9B,UAAM,IAAI;AAAA,MACR,qCAAqC,gBAAgB,2BAA2B,OAAO,MAAM;AAAA,IAC/F;AAAA,EACF;AAEA,QAAM,EAAE,iBAAiB,IAAI,MAAM,OAAO,qBAAqB;AAE/D,QAAM,aAAa,OAAO,UAAiC;AACzD,UAAM,aAAa,MAAM,GAAG,QAAQ,cAAc;AAAA,MAChD,oBAAoB;AAAA,MACpB,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV,CAAC;AACD,QAAI,YAAY;AACd,YAAM,MAAM,oBAAI,KAAK;AACrB,iBAAW,SAAS;AACpB,iBAAW,YAAY,EAAE,MAAM;AAC/B,iBAAW,WAAW;AACtB,iBAAW,YAAY;AACvB,YAAM,GAAG,MAAM;AAAA,IACjB;AACA,UAAM,iBAAiB,IAAI,WAAW,kBAAkB,UAAU,EAAE,MAAM,CAAC;AAAA,EAC7E;AAEA,MAAI,gBAAgB,UAAU;AAC5B,UAAM,UAAU,sBAAsB,eAAe;AACrD,UAAM,iBAAiB,IAAI;AAAA,MACzB,oBAAoB;AAAA,MACpB,gBAAgB;AAAA,MAChB,WAAW;AAAA,MACX,WAAW,EAAE,iBAAiB,OAAO,QAAQ;AAAA,MAC7C;AAAA,MACA;AAAA,IACF,CAAC;AACD,UAAM,WAAW,OAAO;AACxB;AAAA,EACF;AAIA,QAAM,mBAAmB,MAAM,GAAG,QAAQ,oBAAoB,EAAE,IAAI,OAAO,aAAa,CAAC;AACzF,QAAM,UAAU,kBAAkB,WAAW,MAAM,KAAK,CAAC,MAAW,EAAE,WAAW,YAAY;AAC7F,QAAM,EAAE,eAAe,eAAe,QAAQ,IAAK,SAAS,UAAU,CAAC;AAMvE,QAAM,gBAAgB,MAAM,GAAG,QAAQ,kBAAkB;AAAA,IACvD,IAAI;AAAA,IACJ;AAAA,IACA;AAAA,EACF,CAAC;AACD,MAAI,CAAC,eAAe;AAClB,UAAM,IAAI,MAAM,2BAA2B,eAAe,8CAA8C;AAAA,EAC1G;AAEA,QAAM,EAAE,uBAAuB,IAAI,MAAM,OAAO,mBAAmB;AACnE,QAAM,kBAAkB,gBACpB,MAAM,uBAAuB,IAAI,EAAE,YAAY,eAAe,SAAS,UAAU,eAAe,CAAC,IACjG;AACJ,QAAM,aAAc,iBAAiB,YAAwD;AAE7F,QAAM,EAAE,qBAAqB,IAAI,MAAM,OAAO,gBAAgB;AAC9D,QAAM,SAAS,qBAAqB,cAAc,WAAW,CAAC,GAAG,iBAAiB,CAAC,GAAG,UAAU;AAEhG,MAAI,OAAO,OAAO;AAChB,UAAM,iBAAiB,IAAI;AAAA,MACzB,oBAAoB;AAAA,MACpB,gBAAgB;AAAA,MAChB,WAAW;AAAA,MACX,WAAW,EAAE,iBAAiB,QAAQ,qBAAqB,OAAO,OAAO,MAAM;AAAA,MAC/E;AAAA,MACA;AAAA,IACF,CAAC;AACD,UAAM,WAAW,OAAO,KAAK;AAC7B;AAAA,EACF;AAEA,QAAM,aAAa,OAAO;AAE1B,QAAM,iBAAiB,IAAI;AAAA,IACzB,oBAAoB;AAAA,IACpB,gBAAgB;AAAA,IAChB,WAAW;AAAA,IACX,WAAW,EAAE,iBAAiB,WAAW;AAAA,IACzC;AAAA,IACA;AAAA,EACF,CAAC;AAMD,MAAI;AACF,UAAM,EAAE,WAAW,IAAI,MAAM,OAAO,kBAAkB;AACtD,UAAM,WAAW,IAAI,WAAW;AAAA,MAC9B,YAAY;AAAA,MACZ,YAAY;AAAA,MACZ,SAAS;AAAA,MACT,QAAQ,QAAQ;AAAA,MAChB;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH,SAAS,aAAsB;AAC7B,WAAO,MAAM,sFAAsF;AAAA,MACjG;AAAA,MACA;AAAA,MACA,OAAO,uBAAuB,QAAQ,YAAY,UAAU,OAAO,WAAW;AAAA,IAChF,CAAC;AAAA,EACH;AACF;AASA,eAAe,6BACb,IACA,WACA,UACA,SACA,SACA,gBACkB;AAClB,MAAI,aAAmE;AACvE,MAAI;AACF,UAAM,EAAE,0BAA0B,IAAI,MAAM,OAAO,mBAAmB;AACtE,iBAAa,MAAM,0BAA0B,IAAI,QAAQ;AAAA,EAC3D,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI,CAAC,YAAY,WAAY,QAAO;AACpC,MAAI,kBAAkB,WAAW,YAAY,QAAQ,MAAM,EAAE,WAAW,EAAG,QAAO;AAElF,MAAI;AACF,UAAM,EAAE,WAAW,IAAI,MAAM,OAAO,kBAAkB;AACtD,UAAM,WAAW,IAAI,WAAW;AAAA,MAC9B,YAAY,QAAQ;AAAA,MACpB,YAAY,QAAQ;AAAA,MACpB,SAAS;AAAA,MACT,cAAc;AAAA,MACd,QAAQ,QAAQ;AAAA,MAChB,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,IAC1B,CAAC;AACD,WAAO;AAAA,EACT,SAAS,aAAsB;AAC7B,WAAO,MAAM,uEAAuE;AAAA,MAClF,SAAS,QAAQ;AAAA,MACjB;AAAA,MACA,oBAAoB,QAAQ;AAAA,MAC5B,OAAO,uBAAuB,QAAQ,YAAY,UAAU,OAAO,WAAW;AAAA,IAChF,CAAC;AACD,WAAO;AAAA,EACT;AACF;AAEA,eAAe,oCACb,IACA,WACA,UACA,SACA,YACkB;AAClB,QAAM,cAAc,8BAA8B,UAAU;AAC5D,SAAO,6BAA6B,IAAI,WAAW,UAAU,SAAS,oBAAoB;AAAA,IACxF,aAAa;AAAA,IACb,SAAS,QAAQ;AAAA,IACjB,CAAC,oCAAoC,GAAG,EAAE,QAAQ,QAAQ,QAAQ,GAAG,YAAY;AAAA,EACnF,CAAC;AACH;AAEA,eAAe,2BACb,IACA,WACA,UACA,SACA,YACkB;AAClB,QAAM,UAAU,sBAAsB,QAAQ,WAAW,UAAU,OAAO,UAAU;AACpF,SAAO,6BAA6B,IAAI,WAAW,UAAU,SAAS,SAAS;AAAA,IAC7E,SAAS,QAAQ;AAAA,IACjB,CAAC,0BAA0B,GAAG,uBAAuB,QAAQ,QAAQ,OAAO;AAAA,EAC9E,CAAC;AACH;AAEA,eAAe,oBACb,IACA,WACA,UACA,SACA,YACe;AACf,QAAM,UAAU,sBAAsB,QAAQ,WAAW,UAAU,OAAO,UAAU;AACpF,SAAO,MAAM,yCAAyC;AAAA,IACpD,SAAS,QAAQ;AAAA,IACjB,oBAAoB,QAAQ;AAAA,IAC5B,OAAO;AAAA,EACT,CAAC;AACD,MAAI;AACF,UAAM,EAAE,cAAAA,cAAa,IAAI,MAAM,OAAO,kBAAkB;AACxD,UAAM,eAAe,MAAM,GAAG,QAAQA,eAAc;AAAA,MAClD,IAAI,QAAQ;AAAA,MACZ,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,IAC1B,CAAC;AACD,QAAI,gBAAgB,aAAa,WAAW,UAAU;AACpD,mBAAa,SAAS;AACtB,mBAAa,YAAY,EAAE,SAAS,QAAQ,SAAS,OAAO,QAAQ;AACpE,mBAAa,WAAW,oBAAI,KAAK;AACjC,YAAM,GAAG,MAAM;AAAA,IACjB;AAEA,UAAM,EAAE,iBAAiB,IAAI,MAAM,OAAO,qBAAqB;AAC/D,UAAM,iBAAiB,IAAI,WAAW,QAAQ,oBAAoB,UAAU;AAAA,MAC1E,OAAO,qBAAqB,QAAQ,MAAM,YAAY,OAAO;AAAA,MAC7D,SAAS,EAAE,SAAS,QAAQ,SAAS,QAAQ,QAAQ,OAAO;AAAA,IAC9D,CAAC;AAAA,EACH,SAAS,WAAgB;AACvB,WAAO,MAAM,gDAAgD;AAAA,MAC3D,SAAS,QAAQ;AAAA,MACjB,oBAAoB,QAAQ;AAAA,MAC5B,OAAO,WAAW,WAAW,OAAO,SAAS;AAAA,IAC/C,CAAC;AAAA,EACH;AACF;AAKA,eAAe,uBACb,IACA,WACA,oBACe;AAEf,QAAM,EAAE,8BAA8B,IAAI,MAAM,OAAO,qBAAqB;AAG5E,MAAI;AACF,UAAM,8BAA8B,IAAI,WAAW,kBAAkB;AAAA,EACvE,SAAS,OAAY;AAEnB,QAAI,CAAC,MAAM,SAAS,SAAS,0BAA0B,GAAG;AACxD,aAAO,MAAM,6BAA6B,EAAE,YAAY,oBAAoB,KAAK,MAAM,CAAC;AAAA,IAC1F;AAAA,EACF;AACF;",
+  "sourcesContent": ["/**\n * Workflow Activity Worker Handler\n *\n * Background worker that processes async activities from the queue.\n * Executes activities with timeout, logs events, and triggers workflow resume.\n */\n\nimport { JobHandler } from '@open-mercato/queue'\nimport {\n  WorkflowActivityJob,\n  WorkflowActivityJobActivity,\n  WorkflowActivityJobInvokeAgent,\n  WorkflowActivityJobResumeSubWorkflowParent,\n} from './activity-queue-types'\nimport { mapAgentResultToContext } from './agent-result-mapping'\nimport type { AgentDispositionReview } from './agent-disposition-task'\nimport {\n  WORKFLOW_GUARDRAIL_BLOCK_CONTEXT_KEY,\n  isGuardrailBlockedError,\n  listWiredOutcomes,\n  readGuardrailBlockEvidenceRef,\n  type AgentOutcomeKind,\n  type OutcomeRoutingDefinitionLike,\n} from './outcome-routing'\nimport { WORKFLOW_ERROR_CONTEXT_KEY, buildErrorContextEntry } from './error-routing'\nimport { EntityManager, LockMode } from '@mikro-orm/core'\nimport type { EntityManager as PostgreSqlEntityManager } from '@mikro-orm/postgresql'\nimport type { AwilixContainer } from 'awilix'\nimport { WorkflowDefinition, WorkflowInstance, StepInstance } from '../data/entities'\nimport type { StepInstanceStatus } from '../data/entities'\nimport type { WorkflowIoContract } from '../data/validators'\nimport { logWorkflowEvent } from './event-logger'\nimport './activity-registry-bootstrap'\nimport type { ActivityContext } from './activity-executor'\nimport { SUB_WORKFLOW_SIGNAL_NAME } from './activity-executor'\nimport { getActivityType, type ActivityExecuteDeps } from './activity-registry'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows').child({ component: 'activity-worker' })\nconst INVOKE_AGENT_QUEUE_MAX_ATTEMPTS = 3\n\n/**\n * Shared async dispatch through the Activity Registry \u2014 the single lookup\n * path for every queue consumer (this handler and the auto-discovered\n * workers/workflow-activities.worker.ts). Importing this module also\n * guarantees the registry bootstrap and the executor handler binding are in\n * place, so callers never need their own side-effect imports.\n */\nexport async function executeRegistryActivity(\n  payload: Pick<WorkflowActivityJobActivity, 'activityType' | 'activityConfig'>,\n  activityContext: ActivityContext,\n  deps: ActivityExecuteDeps\n): Promise<unknown> {\n  const entry = getActivityType(payload.activityType)\n  if (!entry) {\n    throw new Error(`Unsupported activity type: ${payload.activityType}`)\n  }\n  if (entry.async.capable === false) {\n    throw new Error(\n      `[internal] Activity type ${payload.activityType} cannot run asynchronously (${entry.async.reason})`\n    )\n  }\n  const runActivity = entry.executeAsync ?? entry.execute\n  return await runActivity(payload.activityConfig, activityContext, deps)\n}\n\n/**\n * Create activity worker handler for queue processing\n *\n * @param em - Entity manager\n * @param container - DI container\n * @returns JobHandler function\n */\nexport function createActivityWorkerHandler(\n  em: EntityManager,\n  container: AwilixContainer\n): JobHandler<WorkflowActivityJob> {\n  return async (job, ctx) => {\n    const { payload } = job\n    const startTime = Date.now()\n\n    // Timer jobs (kind: 'timer') are a distinct flow \u2014 they resume a paused\n    // workflow instance rather than executing an activity. Handle them first.\n    if (payload.kind === 'timer') {\n      logger.debug('Firing timer for instance', { instanceId: payload.workflowInstanceId, jobId: ctx.jobId })\n      try {\n        const { fireTimer } = await import('./timer-handler')\n        await fireTimer(em, container, {\n          instanceId: payload.workflowInstanceId,\n          stepInstanceId: payload.stepInstanceId,\n          tenantId: payload.tenantId,\n          organizationId: payload.organizationId,\n          userId: payload.userId,\n        })\n      } catch (error: any) {\n        logger.error('Failed to fire timer for instance', { instanceId: payload.workflowInstanceId, err: error })\n        throw error\n      }\n      return\n    }\n\n    // Condition jobs are the durability backstop for WAIT_FOR_CONDITION steps:\n    // they re-evaluate the predicate and enforce the absolute deadline. A job\n    // whose waiter was already resumed by the event-driven path is a no-op.\n    if (payload.kind === 'condition') {\n      logger.debug('Evaluating wait condition', {\n        instanceId: payload.workflowInstanceId,\n        stepInstanceId: payload.stepInstanceId,\n        attempt: payload.attempt,\n        jobId: ctx.jobId,\n      })\n      try {\n        const { evaluateWaitCondition } = await import('./condition-handler')\n        await evaluateWaitCondition(em, container, {\n          instanceId: payload.workflowInstanceId,\n          stepInstanceId: payload.stepInstanceId,\n          branchInstanceId: payload.branchInstanceId,\n          deadlineAt: payload.deadlineAt,\n          attempt: payload.attempt,\n          tenantId: payload.tenantId,\n          organizationId: payload.organizationId,\n          userId: payload.userId,\n        })\n      } catch (error: unknown) {\n        logger.error('Failed to evaluate wait condition', {\n          instanceId: payload.workflowInstanceId,\n          err: error,\n        })\n        throw error\n      }\n      return\n    }\n\n    // Task SLA jobs fire a reminder or the deadline breach for a USER_TASK. The\n    // deadline is absolute on the payload and the handler is idempotent, so an\n    // at-least-once delivery still breaches exactly once.\n    if (payload.kind === 'task_sla') {\n      logger.debug('Running task SLA job', {\n        instanceId: payload.workflowInstanceId,\n        userTaskId: payload.userTaskId,\n        phase: payload.phase,\n        jobId: ctx.jobId,\n      })\n      try {\n        const { runTaskSlaJob } = await import('./task-sla')\n        await runTaskSlaJob(em, container, {\n          userTaskId: payload.userTaskId,\n          stepInstanceId: payload.stepInstanceId,\n          workflowInstanceId: payload.workflowInstanceId,\n          branchInstanceId: payload.branchInstanceId,\n          phase: payload.phase,\n          deadlineAt: payload.deadlineAt,\n          tenantId: payload.tenantId,\n          organizationId: payload.organizationId,\n          userId: payload.userId,\n        })\n      } catch (error: unknown) {\n        logger.error('Failed to run task SLA job', {\n          instanceId: payload.workflowInstanceId,\n          userTaskId: payload.userTaskId,\n          err: error,\n        })\n        throw error\n      }\n      return\n    }\n\n    // Invoke-agent jobs run an INVOKE_AGENT step's agent OUTSIDE the workflow\n    // transaction, then resume the parked step (see handleInvokeAgentJob).\n    if (payload.kind === 'invoke_agent') {\n      await handleInvokeAgentJob(em, container, payload, {\n        attemptNumber: ctx.attemptNumber,\n        maxAttempts: INVOKE_AGENT_QUEUE_MAX_ATTEMPTS,\n      })\n      return\n    }\n\n    // Resume-parent jobs resume a parent instance parked on a SUB_WORKFLOW step\n    // after its child reached a terminal state (see resumeParentAfterSubWorkflow).\n    if (payload.kind === 'resume_subworkflow_parent') {\n      await resumeParentAfterSubWorkflow(em, container, payload)\n      return\n    }\n\n    // Workflow-level error handler jobs start the designated handler workflow\n    // for a failed instance, outside the transaction that recorded the failure.\n    if (payload.kind === 'workflow_error_handler') {\n      logger.debug('Starting workflow error handler', {\n        instanceId: payload.workflowInstanceId,\n        handlerWorkflowId: payload.handlerWorkflowId,\n        jobId: ctx.jobId,\n      })\n      const { runWorkflowErrorHandler } = await import('./error-handler')\n      await runWorkflowErrorHandler(em, container, payload)\n      return\n    }\n\n    logger.debug('Processing activity', { activityId: payload.activityId, jobId: ctx.jobId })\n\n    try {\n      // Fetch workflow instance\n      const instance = await em.findOne(WorkflowInstance, {\n        id: payload.workflowInstanceId,\n        tenantId: payload.tenantId,\n        organizationId: payload.organizationId,\n      })\n\n      if (!instance) {\n        throw new Error(`Workflow instance ${payload.workflowInstanceId} not found`)\n      }\n\n      // Build activity context\n      const activityContext = {\n        workflowInstance: instance,\n        workflowContext: payload.workflowContext,\n        stepContext: payload.stepContext,\n        stepInstanceId: payload.stepInstanceId,\n        userId: payload.userId,\n      }\n\n      // Execute activity by type (with timeout and abort signal if specified)\n      let result: any\n\n      const executeActivityByType = (signal?: AbortSignal) =>\n        executeRegistryActivity(payload, activityContext, {\n          em: em as PostgreSqlEntityManager,\n          container,\n          signal,\n        })\n\n      if (payload.timeoutMs) {\n        const ac = new AbortController()\n        let timerId: NodeJS.Timeout\n        const timeoutPromise = new Promise<never>((_, reject) => {\n          timerId = setTimeout(() => {\n            ac.abort()\n            reject(new Error(`Activity timeout after ${payload.timeoutMs}ms`))\n          }, payload.timeoutMs)\n        })\n        try {\n          result = await Promise.race([executeActivityByType(ac.signal), timeoutPromise])\n        } finally {\n          clearTimeout(timerId!)\n        }\n      } else {\n        result = await executeActivityByType()\n      }\n\n      const executionTimeMs = Date.now() - startTime\n\n      // Log success event\n      await logWorkflowEvent(em, {\n        workflowInstanceId: payload.workflowInstanceId,\n        stepInstanceId: payload.stepInstanceId,\n        eventType: 'ACTIVITY_COMPLETED',\n        eventData: {\n          activityId: payload.activityId,\n          activityName: payload.activityName,\n          async: true,\n          jobId: ctx.jobId,\n          attemptNumber: ctx.attemptNumber,\n          executionTimeMs,\n          output: result,\n        },\n        userId: payload.userId,\n        tenantId: payload.tenantId,\n        organizationId: payload.organizationId,\n      })\n\n      logger.debug('Activity completed', { activityId: payload.activityId, executionTimeMs })\n\n      // Trigger workflow resume check (via event or direct call)\n      await checkAndResumeWorkflow(em, container, payload.workflowInstanceId)\n    } catch (error: any) {\n      const executionTimeMs = Date.now() - startTime\n\n      logger.error('Activity failed', { activityId: payload.activityId, err: error })\n\n      // Log failure event\n      await logWorkflowEvent(em, {\n        workflowInstanceId: payload.workflowInstanceId,\n        stepInstanceId: payload.stepInstanceId,\n        eventType: 'ACTIVITY_FAILED',\n        eventData: {\n          activityId: payload.activityId,\n          activityName: payload.activityName,\n          async: true,\n          jobId: ctx.jobId,\n          attemptNumber: ctx.attemptNumber,\n          error: error.message,\n          executionTimeMs,\n        },\n        userId: payload.userId,\n        tenantId: payload.tenantId,\n        organizationId: payload.organizationId,\n      })\n\n      // Check if this was final attempt (BullMQ handles retries automatically)\n      if (ctx.attemptNumber >= (payload.retryPolicy?.maxAttempts || 1)) {\n        // Final failure - fail workflow\n        await checkAndResumeWorkflow(em, container, payload.workflowInstanceId)\n      }\n\n      // Re-throw to let BullMQ handle retry\n      throw error\n    }\n  }\n}\n\n/**\n * Structural retryable-error marker. The agent runtime raises transient\n * capacity rejections (e.g. `AgentCapacityError`) carrying `retryable: true`;\n * core cannot import enterprise error classes, so the contract is duck-typed on\n * that marker (mirrors how the bridge itself is resolved by DI key).\n */\nfunction isRetryableError(err: unknown): boolean {\n  return typeof err === 'object' && err !== null && (err as { retryable?: unknown }).retryable === true\n}\n\n/**\n * Minimal surface of the optional agent_orchestrator bridge consumed here.\n * Resolved by DI key so @open-mercato/core does not import the enterprise module.\n */\ntype AgentWorkflowBridgeLike = {\n  invokeAgentForWorkflow: (args: {\n    agentId: string\n    input: unknown\n    onResult: { autoApproveThreshold: number; autoApproveMargin?: number } | { alwaysAsk: true }\n    ctx: {\n      tenantId: string\n      organizationId: string\n      userId?: string\n      workflowInstanceId: string\n      stepId: string\n      /**\n       * The step-attempt id. With the instance and the step it IS this\n       * invocation's identity, so the run it produces can be correlated by name\n       * rather than by \"the newest run for this agent since now\".\n       */\n      invocationId?: string\n      // Optional interpolated business-record descriptor (invokeAgentConfigSchema.subject).\n      subject?: unknown\n      // Optional already-resolved Review section (spec 7.5); see the identical\n      // declaration in `lib/activity-executor.ts`.\n      review?: AgentDispositionReview\n    }\n  }) => Promise<\n    | { kind: 'research'; data: unknown }\n    | { kind: 'auto_approved'; proposalId: string; payload: unknown }\n    | { kind: 'user_task'; proposalId: string }\n    // The agent proposed nothing: terminal like `research`, never parked.\n    | { kind: 'none_proposed'; proposalId: string; payload: unknown }\n    // The agent PRODUCED files. Terminal and non-mutating, so it routes onto the\n    // same governance handle as a research result: the five outcome handles are a\n    // vocabulary of DECISIONS, and \"it made a document\" is not one of them.\n    | { kind: 'artifact'; artifacts: unknown[]; summary?: string }\n  >\n}\n\n/**\n * Step-attempt statuses that mean THIS invocation is over. The step attempt\n * (`step_instances` row) is the invocation's identity \u2014 one row per entry into\n * the step \u2014 so a job addressed to a resolved attempt is a duplicate delivery\n * and must be dropped. That is the idempotency the invoke_agent guard exists\n * for, and unlike an equality check on `instance.currentStepId` it stays correct\n * when a loop re-enters the same step id under a NEW attempt.\n */\nconst RESOLVED_STEP_ATTEMPT_STATUSES: ReadonlySet<StepInstanceStatus> = new Set<StepInstanceStatus>([\n  'COMPLETED',\n  'FAILED',\n  'SKIPPED',\n  'CANCELLED',\n])\n\n/**\n * Block until the transaction that parks the step has committed.\n *\n * `executeInvokeAgent` enqueues this job from INSIDE the workflow execution\n * transaction, so the worker \u2014 reading on its own connection \u2014 can observe a\n * snapshot taken before the step was ever entered. The executor holds a\n * `PESSIMISTIC_WRITE` lock on the instance row for the whole of that\n * transaction (`getWorkflowInstanceForExecution`) and has already written the\n * advanced `current_step_id` to it before the step's activities run, so\n * requesting the SAME lock here waits for that transaction to finish and then\n * reads its committed result. No polling, no sleep, no timing window: the lock\n * IS the happens-before edge between \"the step parked\" and \"the agent may run\".\n *\n * The lock is released immediately (the transaction only reads), so the agent\n * run itself never holds it. A no-op when the entity manager cannot open a\n * transaction, or is already inside one \u2014 an outer transaction has a fixed\n * snapshot the barrier could not refresh anyway, and holding a row lock for the\n * length of an LLM run would be far worse than the race it guards.\n */\nasync function awaitStepParkingCommit(em: EntityManager, instanceId: string): Promise<void> {\n  const scopedEm = em as EntityManager & {\n    transactional?: <TResult>(callback: (trx: EntityManager) => Promise<TResult>) => Promise<TResult>\n    isInTransaction?: () => boolean\n  }\n  if (typeof scopedEm.transactional !== 'function') return\n  if (typeof scopedEm.isInTransaction === 'function' && scopedEm.isInTransaction()) return\n  await scopedEm.transactional(async (trx) => {\n    await trx.findOne(WorkflowInstance, { id: instanceId }, { lockMode: LockMode.PESSIMISTIC_WRITE })\n  })\n}\n\n/**\n * Run an INVOKE_AGENT step's agent OUTSIDE the workflow transaction, then resume\n * the parked step.\n *\n * The step parked on `agent_orchestrator.proposal.ready` (committing the workflow\n * transaction) before this job runs, so the agent \u2014 and all of its own\n * bookkeeping writes \u2014 execute on this worker's independent connection. That is\n * what stops a failing or cross-process (OpenCode) agent run from aborting the\n * workflow transaction, and lets the separate mcp:serve-http process see the\n * committed per-run session rows it needs to authenticate submit_outcome.\n *\n * Idempotency: the agent must run exactly once and only after the step parks.\n * The guard below enforces both, keyed on the STEP ATTEMPT the job was enqueued\n * for (skip when that attempt already resolved; retry while it is not visible or\n * the instance is not parked yet) after `awaitStepParkingCommit` has made the\n * parking transaction's result observable. Once the agent has run, a resume\n * failure is logged rather than rethrown so the job is NOT retried \u2014 re-running\n * an auto_approved agent would re-execute its effector.\n */\nexport async function handleInvokeAgentJob(\n  em: EntityManager,\n  container: AwilixContainer,\n  payload: WorkflowActivityJobInvokeAgent,\n  attempt: { attemptNumber: number; maxAttempts: number } = {\n    attemptNumber: 1,\n    maxAttempts: INVOKE_AGENT_QUEUE_MAX_ATTEMPTS,\n  },\n): Promise<void> {\n  await awaitStepParkingCommit(em, payload.workflowInstanceId)\n\n  const instance = await em.findOne(WorkflowInstance, {\n    id: payload.workflowInstanceId,\n    tenantId: payload.tenantId,\n    organizationId: payload.organizationId,\n  })\n  if (!instance) {\n    // The parking transaction may not be visible yet \u2014 retry.\n    throw new Error(\n      `Workflow instance ${payload.workflowInstanceId} not found for invoke_agent job`\n    )\n  }\n\n  // The step attempt is this invocation's identity. Its ABSENCE means the\n  // parking transaction is still not observable (the instance has not reached\n  // the step yet) \u2014 a re-delivery, never a drop. `instance.currentStepId` cannot\n  // make that distinction: it reads the same on \"not arrived yet\" as on \"already\n  // moved past\", and dropping the job in the first case parks the instance\n  // forever waiting for work that will never run (issue #5986).\n  const stepAttempt = await em.findOne(StepInstance, {\n    id: payload.stepInstanceId,\n    workflowInstanceId: payload.workflowInstanceId,\n    tenantId: payload.tenantId,\n    organizationId: payload.organizationId,\n  })\n  if (!stepAttempt) {\n    throw new Error(\n      `invoke_agent: step attempt ${payload.stepInstanceId} for step ${payload.stepId} is not visible yet ` +\n      `(parking transaction not committed); retrying`\n    )\n  }\n  if (RESOLVED_STEP_ATTEMPT_STATUSES.has(stepAttempt.status)) {\n    logger.info('invoke_agent job skipped \u2014 this step attempt already resolved', {\n      workflowInstanceId: payload.workflowInstanceId,\n      stepInstanceId: payload.stepInstanceId,\n      stepId: payload.stepId,\n      stepAttemptStatus: stepAttempt.status,\n      currentStepId: instance.currentStepId,\n    })\n    return\n  }\n  if (instance.status !== 'PAUSED') {\n    // Parking transaction has not committed yet; retry before running the agent.\n    throw new Error(\n      `invoke_agent: instance ${payload.workflowInstanceId} not parked yet (status=${instance.status}); retrying`\n    )\n  }\n\n  let bridge: AgentWorkflowBridgeLike\n  try {\n    bridge = container.resolve<AgentWorkflowBridgeLike>('agentWorkflowBridge')\n  } catch {\n    throw new Error('[internal] agent_orchestrator not installed (agentWorkflowBridge unavailable)')\n  }\n\n  let outcome: Awaited<ReturnType<AgentWorkflowBridgeLike['invokeAgentForWorkflow']>>\n  try {\n    outcome = await bridge.invokeAgentForWorkflow({\n      agentId: payload.agentId,\n      input: payload.input,\n      onResult: payload.onResult,\n      ctx: {\n        tenantId: payload.tenantId,\n        organizationId: payload.organizationId,\n        userId: payload.userId,\n        workflowInstanceId: instance.id,\n        stepId: payload.stepId,\n        // The step-attempt row the job was enqueued for \u2014 the invocation's own\n        // identity, carried across the process boundary on the job itself.\n        invocationId: payload.stepInstanceId,\n        ...(payload.subject ? { subject: payload.subject } : {}),\n        ...(payload.review ? { review: payload.review } : {}),\n      },\n    })\n  } catch (agentError: unknown) {\n    // Transient capacity rejection (structural `retryable: true`, e.g. the\n    // enterprise AgentCapacityError): the agent never ran, so rethrow and let\n    // the queue's retry/backoff re-attempt instead of fail-stopping the step.\n    // The terminal attempt becomes the declarative `error` outcome when this\n    // step opted into outcome routing; legacy steps keep their fail-stop.\n    if (isRetryableError(agentError) && attempt.attemptNumber < attempt.maxAttempts) {\n      logger.warn('invoke_agent rejected by capacity; rethrowing for queue retry', {\n        agentId: payload.agentId,\n        workflowInstanceId: payload.workflowInstanceId,\n        error: agentError instanceof Error ? agentError.message : String(agentError),\n      })\n      throw agentError\n    }\n    // Guardrail escalation (spec 7.3). A guardrail `block` is a GOVERNANCE\n    // outcome, not an infra failure: when the step wired the `guardrailBlocked`\n    // handle, resume it down that route (typically \u2192 a review task carrying the\n    // guardrail evidence REFERENCE \u2014 never the evidence blob, which stays on the\n    // AgentGuardrailCheck row). A step that wired no such route keeps the\n    // fail-stop below byte-for-byte, so nothing changes until an author opts in.\n    if (isGuardrailBlockedError(agentError)) {\n      const routed = await resumeInvokeAgentWithGuardrailBlock(em, container, instance, payload, agentError)\n      if (routed) return\n    } else {\n      const routed = await resumeInvokeAgentWithError(em, container, instance, payload, agentError)\n      if (routed) return\n    }\n\n    // Fail-stop: an INVOKE_AGENT step whose agent cannot produce an outcome\n    // (unknown agent id, run error, an unwired guardrail block) must HALT the\n    // instance, not\n    // silently retry the job forever while the step stays parked. Mark the parked\n    // step + instance FAILED so progression stops and the failure is visible, and\n    // do NOT rethrow \u2014 a retry would never succeed and would re-run any partial\n    // agent work. (A genuine human-review pause is the `user_task` branch below,\n    // which is unaffected.)\n    await failInvokeAgentStep(em, container, instance, payload, agentError)\n    return\n  }\n\n  // user_task: leave the step parked \u2014 agent_orchestrator's human dispose path\n  // fires the same proposal-ready signal to resume it (unchanged behavior).\n  if (outcome.kind === 'user_task') {\n    logger.info('invoke_agent routed to human; leaving instance parked', {\n      agentId: payload.agentId,\n      proposalId: outcome.proposalId,\n      workflowInstanceId: payload.workflowInstanceId,\n    })\n    return\n  }\n\n  // research / auto_approved: resume the parked step by firing the signal. The\n  // payload is merged into workflow context (top-level), mirroring the prior\n  // inline-resolution behavior so the outgoing transition can branch. When the\n  // activity declared an outputMapping, route the result into the chosen keys;\n  // otherwise fall back to the legacy fixed-key payload.\n  // `auto_approved` and `none_proposed` both carry a proposal; `researcher`\n  // carries agent data and `artifact` carries a file list. Narrowed explicitly\n  // rather than through a boolean, which the discriminated union does not follow.\n  const proposalOutcome =\n    outcome.kind === 'auto_approved' || outcome.kind === 'none_proposed' ? outcome : null\n  const mappedPayload = mapAgentResultToContext(\n    {\n      kind: outcome.kind,\n      agentId: payload.agentId,\n      proposalId: proposalOutcome?.proposalId,\n      proposalPayload: proposalOutcome?.payload,\n      data: outcome.kind === 'research' ? outcome.data : undefined,\n      artifacts: outcome.kind === 'artifact' ? outcome.artifacts : undefined,\n    },\n    payload.outputMapping\n  )\n  const signalPayload =\n    mappedPayload ??\n    (proposalOutcome\n      ? {\n          disposition: proposalOutcome.kind,\n          agentId: payload.agentId,\n          agentProposalId: proposalOutcome.proposalId,\n          proposalPayload: proposalOutcome.payload,\n        }\n      : {\n          disposition: 'researcher',\n          agentId: payload.agentId,\n          [`${payload.stepId}_agent`]:\n            outcome.kind === 'research'\n              ? outcome.data\n              : outcome.kind === 'artifact'\n                ? { artifacts: outcome.artifacts, summary: outcome.summary }\n                : undefined,\n        })\n\n  try {\n    const { sendSignal } = await import('./signal-handler')\n    await sendSignal(em, container, {\n      instanceId: payload.workflowInstanceId,\n      signalName: payload.signalName,\n      payload: signalPayload,\n      // `none_proposed` and `artifact` both take the researcher handle \u2014 the agent\n      // reported something rather than deciding something, which is what that\n      // route means.\n      agentOutcome: outcome.kind === 'auto_approved' ? 'approved' : 'researcher',\n      agentProposalId: proposalOutcome?.proposalId,\n      userId: payload.userId,\n      tenantId: payload.tenantId,\n      organizationId: payload.organizationId,\n    })\n  } catch (resumeError: unknown) {\n    // The agent already ran (and, for auto_approved, its effector already\n    // executed). Re-running on retry would double-execute, so do NOT rethrow:\n    // log and leave the instance parked (resumable via a manual signal).\n    logger.error('invoke_agent ran but resume failed; left parked', {\n      agentId: payload.agentId,\n      workflowInstanceId: payload.workflowInstanceId,\n      error: resumeError instanceof Error ? resumeError.message : String(resumeError),\n    })\n  }\n}\n\n/**\n * Resume a parent instance parked on a SUB_WORKFLOW step after its child reached\n * a terminal state. Modelled on `handleInvokeAgentJob`:\n *\n * Idempotency / ordering guards (mirror handleInvokeAgentJob):\n *   - parent not found \u2192 throw (parking txn may not be visible yet; retry)\n *   - parent.currentStepId !== parentStepId \u2192 already advanced or never parked\n *     here (synchronous fast path) \u2192 skip (no retry)\n *   - parent.status !== 'PAUSED' \u2192 not parked yet \u2192 throw (retry)\n *\n * A COMPLETED child maps its output (shared mapSubWorkflowOutput helper) and\n * resumes via `sendSignal`. A FAILED child fails the parent. Once the resume work\n * has run, a resume failure is logged rather than rethrown so a retry cannot\n * double-execute side effects.\n */\nexport async function resumeParentAfterSubWorkflow(\n  em: EntityManager,\n  container: AwilixContainer,\n  payload: WorkflowActivityJobResumeSubWorkflowParent\n): Promise<void> {\n  const { parentInstanceId, parentStepId, parentStepInstanceId, childInstanceId, childStatus, tenantId, organizationId } =\n    payload\n\n  const parent = await em.findOne(WorkflowInstance, {\n    id: parentInstanceId,\n    tenantId,\n    organizationId,\n  })\n  if (!parent) {\n    // The parking transaction may not be visible yet \u2014 retry.\n    throw new Error(`Parent workflow instance ${parentInstanceId} not found for resume_subworkflow_parent job`)\n  }\n\n  if (parent.currentStepId !== parentStepId) {\n    logger.info(\n      'resume_subworkflow_parent skipped \u2014 parent is on a different step (already resolved or synchronous fast path)',\n      { parentInstanceId, currentStepId: parent.currentStepId, parentStepId },\n    )\n    return\n  }\n  if (parent.status !== 'PAUSED') {\n    // Parking transaction has not committed yet; retry before resuming.\n    throw new Error(\n      `resume_subworkflow_parent: parent ${parentInstanceId} not parked yet (status=${parent.status}); retrying`\n    )\n  }\n\n  const { completeWorkflow } = await import('./workflow-executor')\n\n  const failParent = async (error: string): Promise<void> => {\n    const activeStep = await em.findOne(StepInstance, {\n      workflowInstanceId: parentInstanceId,\n      stepId: parentStepId,\n      status: 'ACTIVE',\n    })\n    if (activeStep) {\n      const now = new Date()\n      activeStep.status = 'FAILED'\n      activeStep.errorData = { error }\n      activeStep.exitedAt = now\n      activeStep.updatedAt = now\n      await em.flush()\n    }\n    await completeWorkflow(em, container, parentInstanceId, 'FAILED', { error })\n  }\n\n  if (childStatus === 'FAILED') {\n    const message = `Sub-workflow child ${childInstanceId} failed`\n    await logWorkflowEvent(em, {\n      workflowInstanceId: parentInstanceId,\n      stepInstanceId: parentStepInstanceId,\n      eventType: 'SUB_WORKFLOW_FAILED',\n      eventData: { childInstanceId, error: message },\n      tenantId,\n      organizationId,\n    })\n    await failParent(message)\n    return\n  }\n\n  // COMPLETED child: map its output against the SUB_WORKFLOW step's outputMapping\n  // and the child's declared io output ports.\n  const parentDefinition = await em.findOne(WorkflowDefinition, { id: parent.definitionId })\n  const stepDef = parentDefinition?.definition.steps.find((s: any) => s.stepId === parentStepId)\n  const { subWorkflowId, outputMapping, version } = (stepDef?.config || {}) as {\n    subWorkflowId?: string\n    outputMapping?: Record<string, string>\n    version?: number\n  }\n\n  const childInstance = await em.findOne(WorkflowInstance, {\n    id: childInstanceId,\n    tenantId,\n    organizationId,\n  })\n  if (!childInstance) {\n    throw new Error(`Child workflow instance ${childInstanceId} not found for resume_subworkflow_parent job`)\n  }\n\n  const { findWorkflowDefinition } = await import('./find-definition')\n  const childDefinition = subWorkflowId\n    ? await findWorkflowDefinition(em, { workflowId: subWorkflowId, version, tenantId, organizationId })\n    : null\n  const ioContract = (childDefinition?.definition as { io?: WorkflowIoContract } | undefined)?.io\n\n  const { mapSubWorkflowOutput } = await import('./step-handler')\n  const mapped = mapSubWorkflowOutput(childInstance.context || {}, outputMapping || {}, ioContract)\n\n  if (mapped.error) {\n    await logWorkflowEvent(em, {\n      workflowInstanceId: parentInstanceId,\n      stepInstanceId: parentStepInstanceId,\n      eventType: 'SUB_WORKFLOW_FAILED',\n      eventData: { childInstanceId, reason: 'OUTPUT_VALIDATION', error: mapped.error },\n      tenantId,\n      organizationId,\n    })\n    await failParent(mapped.error)\n    return\n  }\n\n  const outputData = mapped.outputData\n\n  await logWorkflowEvent(em, {\n    workflowInstanceId: parentInstanceId,\n    stepInstanceId: parentStepInstanceId,\n    eventType: 'SUB_WORKFLOW_COMPLETED',\n    eventData: { childInstanceId, outputData },\n    tenantId,\n    organizationId,\n  })\n\n  // Resume the parent via sendSignal: merges outputData into context, exits the\n  // active SUB_WORKFLOW step, runs the auto transition out of it, and resumes\n  // executeWorkflow(parent). After this side-effecting work, a failure is logged\n  // rather than rethrown to avoid double-execution on retry.\n  try {\n    const { sendSignal } = await import('./signal-handler')\n    await sendSignal(em, container, {\n      instanceId: parentInstanceId,\n      signalName: SUB_WORKFLOW_SIGNAL_NAME,\n      payload: outputData,\n      userId: payload.userId,\n      tenantId,\n      organizationId,\n    })\n  } catch (resumeError: unknown) {\n    logger.error('resume_subworkflow_parent: child completed but resuming parent failed; left parked', {\n      childInstanceId,\n      parentInstanceId,\n      error: resumeError instanceof Error ? resumeError.message : String(resumeError),\n    })\n  }\n}\n\n/**\n * Resume a parked agent step through declarative outcome handling.\n *\n * Returns false \u2014 leaving the caller's legacy fail-stop to run \u2014 when the step\n * declares no outcome routing at all. Once a step opts in, an unwired outcome\n * is still resumed so the executor can apply the inherited error directive.\n */\nasync function resumeInvokeAgentWithOutcome(\n  em: EntityManager,\n  container: AwilixContainer,\n  instance: WorkflowInstance,\n  payload: WorkflowActivityJobInvokeAgent,\n  outcome: AgentOutcomeKind,\n  contextPayload: Record<string, unknown>,\n): Promise<boolean> {\n  let definition: { definition?: OutcomeRoutingDefinitionLike } | null = null\n  try {\n    const { findDefinitionForInstance } = await import('./find-definition')\n    definition = await findDefinitionForInstance(em, instance)\n  } catch {\n    return false\n  }\n  if (!definition?.definition) return false\n  if (listWiredOutcomes(definition.definition, payload.stepId).length === 0) return false\n\n  try {\n    const { sendSignal } = await import('./signal-handler')\n    await sendSignal(em, container, {\n      instanceId: payload.workflowInstanceId,\n      signalName: payload.signalName,\n      payload: contextPayload,\n      agentOutcome: outcome,\n      userId: payload.userId,\n      tenantId: payload.tenantId,\n      organizationId: payload.organizationId,\n    })\n    return true\n  } catch (resumeError: unknown) {\n    logger.error('invoke_agent outcome could not be routed; falling back to fail-stop', {\n      agentId: payload.agentId,\n      outcome,\n      workflowInstanceId: payload.workflowInstanceId,\n      error: resumeError instanceof Error ? resumeError.message : String(resumeError),\n    })\n    return false\n  }\n}\n\nasync function resumeInvokeAgentWithGuardrailBlock(\n  em: EntityManager,\n  container: AwilixContainer,\n  instance: WorkflowInstance,\n  payload: WorkflowActivityJobInvokeAgent,\n  agentError: unknown,\n): Promise<boolean> {\n  const evidenceRef = readGuardrailBlockEvidenceRef(agentError)\n  return resumeInvokeAgentWithOutcome(em, container, instance, payload, 'guardrailBlocked', {\n    disposition: 'guardrail_blocked',\n    agentId: payload.agentId,\n    [WORKFLOW_GUARDRAIL_BLOCK_CONTEXT_KEY]: { stepId: payload.stepId, ...evidenceRef },\n  })\n}\n\nasync function resumeInvokeAgentWithError(\n  em: EntityManager,\n  container: AwilixContainer,\n  instance: WorkflowInstance,\n  payload: WorkflowActivityJobInvokeAgent,\n  agentError: unknown,\n): Promise<boolean> {\n  const message = agentError instanceof Error ? agentError.message : String(agentError)\n  return resumeInvokeAgentWithOutcome(em, container, instance, payload, 'error', {\n    agentId: payload.agentId,\n    [WORKFLOW_ERROR_CONTEXT_KEY]: buildErrorContextEntry(payload.stepId, message),\n  })\n}\n\nasync function failInvokeAgentStep(\n  em: EntityManager,\n  container: AwilixContainer,\n  instance: WorkflowInstance,\n  payload: WorkflowActivityJobInvokeAgent,\n  agentError: unknown,\n): Promise<void> {\n  const message = agentError instanceof Error ? agentError.message : String(agentError)\n  logger.error('invoke_agent failed; failing instance', {\n    agentId: payload.agentId,\n    workflowInstanceId: payload.workflowInstanceId,\n    error: message,\n  })\n  try {\n    const { StepInstance } = await import('../data/entities')\n    const stepInstance = await em.findOne(StepInstance, {\n      id: payload.stepInstanceId,\n      tenantId: payload.tenantId,\n      organizationId: payload.organizationId,\n    })\n    if (stepInstance && stepInstance.status === 'ACTIVE') {\n      stepInstance.status = 'FAILED'\n      stepInstance.errorData = { agentId: payload.agentId, error: message }\n      stepInstance.exitedAt = new Date()\n      await em.flush()\n    }\n\n    const { completeWorkflow } = await import('./workflow-executor')\n    await completeWorkflow(em, container, payload.workflowInstanceId, 'FAILED', {\n      error: `INVOKE_AGENT step ${payload.stepId} failed: ${message}`,\n      details: { agentId: payload.agentId, stepId: payload.stepId },\n    })\n  } catch (failError: any) {\n    logger.error('invoke_agent: could not mark instance FAILED', {\n      agentId: payload.agentId,\n      workflowInstanceId: payload.workflowInstanceId,\n      error: failError?.message ?? String(failError),\n    })\n  }\n}\n\n/**\n * Helper to check if workflow can resume after activities complete/fail\n */\nasync function checkAndResumeWorkflow(\n  em: EntityManager,\n  container: AwilixContainer,\n  workflowInstanceId: string\n): Promise<void> {\n  // Import here to avoid circular dependency\n  const { resumeWorkflowAfterActivities } = await import('./workflow-executor')\n\n\n  try {\n    await resumeWorkflowAfterActivities(em, container, workflowInstanceId)\n  } catch (error: any) {\n    // Ignore error if workflow not ready to resume yet\n    if (!error.message?.includes('Activities still pending')) {\n      logger.error('Failed to resume workflow', { instanceId: workflowInstanceId, err: error })\n    }\n  }\n}\n"],
+  "mappings": "AAcA,SAAS,+BAA+B;AAExC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP,SAAS,4BAA4B,8BAA8B;AACnE,SAAwB,gBAAgB;AAGxC,SAAS,oBAAoB,kBAAkB,oBAAoB;AAGnE,SAAS,wBAAwB;AACjC,OAAO;AAEP,SAAS,gCAAgC;AACzC,SAAS,uBAAiD;AAC1D,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,kBAAkB,CAAC;AAC/E,MAAM,kCAAkC;AASxC,eAAsB,wBACpB,SACA,iBACA,MACkB;AAClB,QAAM,QAAQ,gBAAgB,QAAQ,YAAY;AAClD,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,MAAM,8BAA8B,QAAQ,YAAY,EAAE;AAAA,EACtE;AACA,MAAI,MAAM,MAAM,YAAY,OAAO;AACjC,UAAM,IAAI;AAAA,MACR,4BAA4B,QAAQ,YAAY,+BAA+B,MAAM,MAAM,MAAM;AAAA,IACnG;AAAA,EACF;AACA,QAAM,cAAc,MAAM,gBAAgB,MAAM;AAChD,SAAO,MAAM,YAAY,QAAQ,gBAAgB,iBAAiB,IAAI;AACxE;AASO,SAAS,4BACd,IACA,WACiC;AACjC,SAAO,OAAO,KAAK,QAAQ;AACzB,UAAM,EAAE,QAAQ,IAAI;AACpB,UAAM,YAAY,KAAK,IAAI;AAI3B,QAAI,QAAQ,SAAS,SAAS;AAC5B,aAAO,MAAM,6BAA6B,EAAE,YAAY,QAAQ,oBAAoB,OAAO,IAAI,MAAM,CAAC;AACtG,UAAI;AACF,cAAM,EAAE,UAAU,IAAI,MAAM,OAAO,iBAAiB;AACpD,cAAM,UAAU,IAAI,WAAW;AAAA,UAC7B,YAAY,QAAQ;AAAA,UACpB,gBAAgB,QAAQ;AAAA,UACxB,UAAU,QAAQ;AAAA,UAClB,gBAAgB,QAAQ;AAAA,UACxB,QAAQ,QAAQ;AAAA,QAClB,CAAC;AAAA,MACH,SAAS,OAAY;AACnB,eAAO,MAAM,qCAAqC,EAAE,YAAY,QAAQ,oBAAoB,KAAK,MAAM,CAAC;AACxG,cAAM;AAAA,MACR;AACA;AAAA,IACF;AAKA,QAAI,QAAQ,SAAS,aAAa;AAChC,aAAO,MAAM,6BAA6B;AAAA,QACxC,YAAY,QAAQ;AAAA,QACpB,gBAAgB,QAAQ;AAAA,QACxB,SAAS,QAAQ;AAAA,QACjB,OAAO,IAAI;AAAA,MACb,CAAC;AACD,UAAI;AACF,cAAM,EAAE,sBAAsB,IAAI,MAAM,OAAO,qBAAqB;AACpE,cAAM,sBAAsB,IAAI,WAAW;AAAA,UACzC,YAAY,QAAQ;AAAA,UACpB,gBAAgB,QAAQ;AAAA,UACxB,kBAAkB,QAAQ;AAAA,UAC1B,YAAY,QAAQ;AAAA,UACpB,SAAS,QAAQ;AAAA,UACjB,UAAU,QAAQ;AAAA,UAClB,gBAAgB,QAAQ;AAAA,UACxB,QAAQ,QAAQ;AAAA,QAClB,CAAC;AAAA,MACH,SAAS,OAAgB;AACvB,eAAO,MAAM,qCAAqC;AAAA,UAChD,YAAY,QAAQ;AAAA,UACpB,KAAK;AAAA,QACP,CAAC;AACD,cAAM;AAAA,MACR;AACA;AAAA,IACF;AAKA,QAAI,QAAQ,SAAS,YAAY;AAC/B,aAAO,MAAM,wBAAwB;AAAA,QACnC,YAAY,QAAQ;AAAA,QACpB,YAAY,QAAQ;AAAA,QACpB,OAAO,QAAQ;AAAA,QACf,OAAO,IAAI;AAAA,MACb,CAAC;AACD,UAAI;AACF,cAAM,EAAE,cAAc,IAAI,MAAM,OAAO,YAAY;AACnD,cAAM,cAAc,IAAI,WAAW;AAAA,UACjC,YAAY,QAAQ;AAAA,UACpB,gBAAgB,QAAQ;AAAA,UACxB,oBAAoB,QAAQ;AAAA,UAC5B,kBAAkB,QAAQ;AAAA,UAC1B,OAAO,QAAQ;AAAA,UACf,YAAY,QAAQ;AAAA,UACpB,UAAU,QAAQ;AAAA,UAClB,gBAAgB,QAAQ;AAAA,UACxB,QAAQ,QAAQ;AAAA,QAClB,CAAC;AAAA,MACH,SAAS,OAAgB;AACvB,eAAO,MAAM,8BAA8B;AAAA,UACzC,YAAY,QAAQ;AAAA,UACpB,YAAY,QAAQ;AAAA,UACpB,KAAK;AAAA,QACP,CAAC;AACD,cAAM;AAAA,MACR;AACA;AAAA,IACF;AAIA,QAAI,QAAQ,SAAS,gBAAgB;AACnC,YAAM,qBAAqB,IAAI,WAAW,SAAS;AAAA,QACjD,eAAe,IAAI;AAAA,QACnB,aAAa;AAAA,MACf,CAAC;AACD;AAAA,IACF;AAIA,QAAI,QAAQ,SAAS,6BAA6B;AAChD,YAAM,6BAA6B,IAAI,WAAW,OAAO;AACzD;AAAA,IACF;AAIA,QAAI,QAAQ,SAAS,0BAA0B;AAC7C,aAAO,MAAM,mCAAmC;AAAA,QAC9C,YAAY,QAAQ;AAAA,QACpB,mBAAmB,QAAQ;AAAA,QAC3B,OAAO,IAAI;AAAA,MACb,CAAC;AACD,YAAM,EAAE,wBAAwB,IAAI,MAAM,OAAO,iBAAiB;AAClE,YAAM,wBAAwB,IAAI,WAAW,OAAO;AACpD;AAAA,IACF;AAEA,WAAO,MAAM,uBAAuB,EAAE,YAAY,QAAQ,YAAY,OAAO,IAAI,MAAM,CAAC;AAExF,QAAI;AAEF,YAAM,WAAW,MAAM,GAAG,QAAQ,kBAAkB;AAAA,QAClD,IAAI,QAAQ;AAAA,QACZ,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ;AAAA,MAC1B,CAAC;AAED,UAAI,CAAC,UAAU;AACb,cAAM,IAAI,MAAM,qBAAqB,QAAQ,kBAAkB,YAAY;AAAA,MAC7E;AAGA,YAAM,kBAAkB;AAAA,QACtB,kBAAkB;AAAA,QAClB,iBAAiB,QAAQ;AAAA,QACzB,aAAa,QAAQ;AAAA,QACrB,gBAAgB,QAAQ;AAAA,QACxB,QAAQ,QAAQ;AAAA,MAClB;AAGA,UAAI;AAEJ,YAAM,wBAAwB,CAAC,WAC7B,wBAAwB,SAAS,iBAAiB;AAAA,QAChD;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AAEH,UAAI,QAAQ,WAAW;AACrB,cAAM,KAAK,IAAI,gBAAgB;AAC/B,YAAI;AACJ,cAAM,iBAAiB,IAAI,QAAe,CAAC,GAAG,WAAW;AACvD,oBAAU,WAAW,MAAM;AACzB,eAAG,MAAM;AACT,mBAAO,IAAI,MAAM,0BAA0B,QAAQ,SAAS,IAAI,CAAC;AAAA,UACnE,GAAG,QAAQ,SAAS;AAAA,QACtB,CAAC;AACD,YAAI;AACF,mBAAS,MAAM,QAAQ,KAAK,CAAC,sBAAsB,GAAG,MAAM,GAAG,cAAc,CAAC;AAAA,QAChF,UAAE;AACA,uBAAa,OAAQ;AAAA,QACvB;AAAA,MACF,OAAO;AACL,iBAAS,MAAM,sBAAsB;AAAA,MACvC;AAEA,YAAM,kBAAkB,KAAK,IAAI,IAAI;AAGrC,YAAM,iBAAiB,IAAI;AAAA,QACzB,oBAAoB,QAAQ;AAAA,QAC5B,gBAAgB,QAAQ;AAAA,QACxB,WAAW;AAAA,QACX,WAAW;AAAA,UACT,YAAY,QAAQ;AAAA,UACpB,cAAc,QAAQ;AAAA,UACtB,OAAO;AAAA,UACP,OAAO,IAAI;AAAA,UACX,eAAe,IAAI;AAAA,UACnB;AAAA,UACA,QAAQ;AAAA,QACV;AAAA,QACA,QAAQ,QAAQ;AAAA,QAChB,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ;AAAA,MAC1B,CAAC;AAED,aAAO,MAAM,sBAAsB,EAAE,YAAY,QAAQ,YAAY,gBAAgB,CAAC;AAGtF,YAAM,uBAAuB,IAAI,WAAW,QAAQ,kBAAkB;AAAA,IACxE,SAAS,OAAY;AACnB,YAAM,kBAAkB,KAAK,IAAI,IAAI;AAErC,aAAO,MAAM,mBAAmB,EAAE,YAAY,QAAQ,YAAY,KAAK,MAAM,CAAC;AAG9E,YAAM,iBAAiB,IAAI;AAAA,QACzB,oBAAoB,QAAQ;AAAA,QAC5B,gBAAgB,QAAQ;AAAA,QACxB,WAAW;AAAA,QACX,WAAW;AAAA,UACT,YAAY,QAAQ;AAAA,UACpB,cAAc,QAAQ;AAAA,UACtB,OAAO;AAAA,UACP,OAAO,IAAI;AAAA,UACX,eAAe,IAAI;AAAA,UACnB,OAAO,MAAM;AAAA,UACb;AAAA,QACF;AAAA,QACA,QAAQ,QAAQ;AAAA,QAChB,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ;AAAA,MAC1B,CAAC;AAGD,UAAI,IAAI,kBAAkB,QAAQ,aAAa,eAAe,IAAI;AAEhE,cAAM,uBAAuB,IAAI,WAAW,QAAQ,kBAAkB;AAAA,MACxE;AAGA,YAAM;AAAA,IACR;AAAA,EACF;AACF;AAQA,SAAS,iBAAiB,KAAuB;AAC/C,SAAO,OAAO,QAAQ,YAAY,QAAQ,QAAS,IAAgC,cAAc;AACnG;AAkDA,MAAM,iCAAkE,oBAAI,IAAwB;AAAA,EAClG;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAqBD,eAAe,uBAAuB,IAAmB,YAAmC;AAC1F,QAAM,WAAW;AAIjB,MAAI,OAAO,SAAS,kBAAkB,WAAY;AAClD,MAAI,OAAO,SAAS,oBAAoB,cAAc,SAAS,gBAAgB,EAAG;AAClF,QAAM,SAAS,cAAc,OAAO,QAAQ;AAC1C,UAAM,IAAI,QAAQ,kBAAkB,EAAE,IAAI,WAAW,GAAG,EAAE,UAAU,SAAS,kBAAkB,CAAC;AAAA,EAClG,CAAC;AACH;AAqBA,eAAsB,qBACpB,IACA,WACA,SACA,UAA0D;AAAA,EACxD,eAAe;AAAA,EACf,aAAa;AACf,GACe;AACf,QAAM,uBAAuB,IAAI,QAAQ,kBAAkB;AAE3D,QAAM,WAAW,MAAM,GAAG,QAAQ,kBAAkB;AAAA,IAClD,IAAI,QAAQ;AAAA,IACZ,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ;AAAA,EAC1B,CAAC;AACD,MAAI,CAAC,UAAU;AAEb,UAAM,IAAI;AAAA,MACR,qBAAqB,QAAQ,kBAAkB;AAAA,IACjD;AAAA,EACF;AAQA,QAAM,cAAc,MAAM,GAAG,QAAQ,cAAc;AAAA,IACjD,IAAI,QAAQ;AAAA,IACZ,oBAAoB,QAAQ;AAAA,IAC5B,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ;AAAA,EAC1B,CAAC;AACD,MAAI,CAAC,aAAa;AAChB,UAAM,IAAI;AAAA,MACR,8BAA8B,QAAQ,cAAc,aAAa,QAAQ,MAAM;AAAA,IAEjF;AAAA,EACF;AACA,MAAI,+BAA+B,IAAI,YAAY,MAAM,GAAG;AAC1D,WAAO,KAAK,sEAAiE;AAAA,MAC3E,oBAAoB,QAAQ;AAAA,MAC5B,gBAAgB,QAAQ;AAAA,MACxB,QAAQ,QAAQ;AAAA,MAChB,mBAAmB,YAAY;AAAA,MAC/B,eAAe,SAAS;AAAA,IAC1B,CAAC;AACD;AAAA,EACF;AACA,MAAI,SAAS,WAAW,UAAU;AAEhC,UAAM,IAAI;AAAA,MACR,0BAA0B,QAAQ,kBAAkB,2BAA2B,SAAS,MAAM;AAAA,IAChG;AAAA,EACF;AAEA,MAAI;AACJ,MAAI;AACF,aAAS,UAAU,QAAiC,qBAAqB;AAAA,EAC3E,QAAQ;AACN,UAAM,IAAI,MAAM,+EAA+E;AAAA,EACjG;AAEA,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,OAAO,uBAAuB;AAAA,MAC5C,SAAS,QAAQ;AAAA,MACjB,OAAO,QAAQ;AAAA,MACf,UAAU,QAAQ;AAAA,MAClB,KAAK;AAAA,QACH,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ;AAAA,QACxB,QAAQ,QAAQ;AAAA,QAChB,oBAAoB,SAAS;AAAA,QAC7B,QAAQ,QAAQ;AAAA;AAAA;AAAA,QAGhB,cAAc,QAAQ;AAAA,QACtB,GAAI,QAAQ,UAAU,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;AAAA,QACtD,GAAI,QAAQ,SAAS,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;AAAA,MACrD;AAAA,IACF,CAAC;AAAA,EACH,SAAS,YAAqB;AAM5B,QAAI,iBAAiB,UAAU,KAAK,QAAQ,gBAAgB,QAAQ,aAAa;AAC/E,aAAO,KAAK,iEAAiE;AAAA,QAC3E,SAAS,QAAQ;AAAA,QACjB,oBAAoB,QAAQ;AAAA,QAC5B,OAAO,sBAAsB,QAAQ,WAAW,UAAU,OAAO,UAAU;AAAA,MAC7E,CAAC;AACD,YAAM;AAAA,IACR;AAOA,QAAI,wBAAwB,UAAU,GAAG;AACvC,YAAM,SAAS,MAAM,oCAAoC,IAAI,WAAW,UAAU,SAAS,UAAU;AACrG,UAAI,OAAQ;AAAA,IACd,OAAO;AACL,YAAM,SAAS,MAAM,2BAA2B,IAAI,WAAW,UAAU,SAAS,UAAU;AAC5F,UAAI,OAAQ;AAAA,IACd;AAUA,UAAM,oBAAoB,IAAI,WAAW,UAAU,SAAS,UAAU;AACtE;AAAA,EACF;AAIA,MAAI,QAAQ,SAAS,aAAa;AAChC,WAAO,KAAK,yDAAyD;AAAA,MACnE,SAAS,QAAQ;AAAA,MACjB,YAAY,QAAQ;AAAA,MACpB,oBAAoB,QAAQ;AAAA,IAC9B,CAAC;AACD;AAAA,EACF;AAUA,QAAM,kBACJ,QAAQ,SAAS,mBAAmB,QAAQ,SAAS,kBAAkB,UAAU;AACnF,QAAM,gBAAgB;AAAA,IACpB;AAAA,MACE,MAAM,QAAQ;AAAA,MACd,SAAS,QAAQ;AAAA,MACjB,YAAY,iBAAiB;AAAA,MAC7B,iBAAiB,iBAAiB;AAAA,MAClC,MAAM,QAAQ,SAAS,aAAa,QAAQ,OAAO;AAAA,MACnD,WAAW,QAAQ,SAAS,aAAa,QAAQ,YAAY;AAAA,IAC/D;AAAA,IACA,QAAQ;AAAA,EACV;AACA,QAAM,gBACJ,kBACC,kBACG;AAAA,IACE,aAAa,gBAAgB;AAAA,IAC7B,SAAS,QAAQ;AAAA,IACjB,iBAAiB,gBAAgB;AAAA,IACjC,iBAAiB,gBAAgB;AAAA,EACnC,IACA;AAAA,IACE,aAAa;AAAA,IACb,SAAS,QAAQ;AAAA,IACjB,CAAC,GAAG,QAAQ,MAAM,QAAQ,GACxB,QAAQ,SAAS,aACb,QAAQ,OACR,QAAQ,SAAS,aACf,EAAE,WAAW,QAAQ,WAAW,SAAS,QAAQ,QAAQ,IACzD;AAAA,EACV;AAEN,MAAI;AACF,UAAM,EAAE,WAAW,IAAI,MAAM,OAAO,kBAAkB;AACtD,UAAM,WAAW,IAAI,WAAW;AAAA,MAC9B,YAAY,QAAQ;AAAA,MACpB,YAAY,QAAQ;AAAA,MACpB,SAAS;AAAA;AAAA;AAAA;AAAA,MAIT,cAAc,QAAQ,SAAS,kBAAkB,aAAa;AAAA,MAC9D,iBAAiB,iBAAiB;AAAA,MAClC,QAAQ,QAAQ;AAAA,MAChB,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,IAC1B,CAAC;AAAA,EACH,SAAS,aAAsB;AAI7B,WAAO,MAAM,mDAAmD;AAAA,MAC9D,SAAS,QAAQ;AAAA,MACjB,oBAAoB,QAAQ;AAAA,MAC5B,OAAO,uBAAuB,QAAQ,YAAY,UAAU,OAAO,WAAW;AAAA,IAChF,CAAC;AAAA,EACH;AACF;AAiBA,eAAsB,6BACpB,IACA,WACA,SACe;AACf,QAAM,EAAE,kBAAkB,cAAc,sBAAsB,iBAAiB,aAAa,UAAU,eAAe,IACnH;AAEF,QAAM,SAAS,MAAM,GAAG,QAAQ,kBAAkB;AAAA,IAChD,IAAI;AAAA,IACJ;AAAA,IACA;AAAA,EACF,CAAC;AACD,MAAI,CAAC,QAAQ;AAEX,UAAM,IAAI,MAAM,4BAA4B,gBAAgB,8CAA8C;AAAA,EAC5G;AAEA,MAAI,OAAO,kBAAkB,cAAc;AACzC,WAAO;AAAA,MACL;AAAA,MACA,EAAE,kBAAkB,eAAe,OAAO,eAAe,aAAa;AAAA,IACxE;AACA;AAAA,EACF;AACA,MAAI,OAAO,WAAW,UAAU;AAE9B,UAAM,IAAI;AAAA,MACR,qCAAqC,gBAAgB,2BAA2B,OAAO,MAAM;AAAA,IAC/F;AAAA,EACF;AAEA,QAAM,EAAE,iBAAiB,IAAI,MAAM,OAAO,qBAAqB;AAE/D,QAAM,aAAa,OAAO,UAAiC;AACzD,UAAM,aAAa,MAAM,GAAG,QAAQ,cAAc;AAAA,MAChD,oBAAoB;AAAA,MACpB,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV,CAAC;AACD,QAAI,YAAY;AACd,YAAM,MAAM,oBAAI,KAAK;AACrB,iBAAW,SAAS;AACpB,iBAAW,YAAY,EAAE,MAAM;AAC/B,iBAAW,WAAW;AACtB,iBAAW,YAAY;AACvB,YAAM,GAAG,MAAM;AAAA,IACjB;AACA,UAAM,iBAAiB,IAAI,WAAW,kBAAkB,UAAU,EAAE,MAAM,CAAC;AAAA,EAC7E;AAEA,MAAI,gBAAgB,UAAU;AAC5B,UAAM,UAAU,sBAAsB,eAAe;AACrD,UAAM,iBAAiB,IAAI;AAAA,MACzB,oBAAoB;AAAA,MACpB,gBAAgB;AAAA,MAChB,WAAW;AAAA,MACX,WAAW,EAAE,iBAAiB,OAAO,QAAQ;AAAA,MAC7C;AAAA,MACA;AAAA,IACF,CAAC;AACD,UAAM,WAAW,OAAO;AACxB;AAAA,EACF;AAIA,QAAM,mBAAmB,MAAM,GAAG,QAAQ,oBAAoB,EAAE,IAAI,OAAO,aAAa,CAAC;AACzF,QAAM,UAAU,kBAAkB,WAAW,MAAM,KAAK,CAAC,MAAW,EAAE,WAAW,YAAY;AAC7F,QAAM,EAAE,eAAe,eAAe,QAAQ,IAAK,SAAS,UAAU,CAAC;AAMvE,QAAM,gBAAgB,MAAM,GAAG,QAAQ,kBAAkB;AAAA,IACvD,IAAI;AAAA,IACJ;AAAA,IACA;AAAA,EACF,CAAC;AACD,MAAI,CAAC,eAAe;AAClB,UAAM,IAAI,MAAM,2BAA2B,eAAe,8CAA8C;AAAA,EAC1G;AAEA,QAAM,EAAE,uBAAuB,IAAI,MAAM,OAAO,mBAAmB;AACnE,QAAM,kBAAkB,gBACpB,MAAM,uBAAuB,IAAI,EAAE,YAAY,eAAe,SAAS,UAAU,eAAe,CAAC,IACjG;AACJ,QAAM,aAAc,iBAAiB,YAAwD;AAE7F,QAAM,EAAE,qBAAqB,IAAI,MAAM,OAAO,gBAAgB;AAC9D,QAAM,SAAS,qBAAqB,cAAc,WAAW,CAAC,GAAG,iBAAiB,CAAC,GAAG,UAAU;AAEhG,MAAI,OAAO,OAAO;AAChB,UAAM,iBAAiB,IAAI;AAAA,MACzB,oBAAoB;AAAA,MACpB,gBAAgB;AAAA,MAChB,WAAW;AAAA,MACX,WAAW,EAAE,iBAAiB,QAAQ,qBAAqB,OAAO,OAAO,MAAM;AAAA,MAC/E;AAAA,MACA;AAAA,IACF,CAAC;AACD,UAAM,WAAW,OAAO,KAAK;AAC7B;AAAA,EACF;AAEA,QAAM,aAAa,OAAO;AAE1B,QAAM,iBAAiB,IAAI;AAAA,IACzB,oBAAoB;AAAA,IACpB,gBAAgB;AAAA,IAChB,WAAW;AAAA,IACX,WAAW,EAAE,iBAAiB,WAAW;AAAA,IACzC;AAAA,IACA;AAAA,EACF,CAAC;AAMD,MAAI;AACF,UAAM,EAAE,WAAW,IAAI,MAAM,OAAO,kBAAkB;AACtD,UAAM,WAAW,IAAI,WAAW;AAAA,MAC9B,YAAY;AAAA,MACZ,YAAY;AAAA,MACZ,SAAS;AAAA,MACT,QAAQ,QAAQ;AAAA,MAChB;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH,SAAS,aAAsB;AAC7B,WAAO,MAAM,sFAAsF;AAAA,MACjG;AAAA,MACA;AAAA,MACA,OAAO,uBAAuB,QAAQ,YAAY,UAAU,OAAO,WAAW;AAAA,IAChF,CAAC;AAAA,EACH;AACF;AASA,eAAe,6BACb,IACA,WACA,UACA,SACA,SACA,gBACkB;AAClB,MAAI,aAAmE;AACvE,MAAI;AACF,UAAM,EAAE,0BAA0B,IAAI,MAAM,OAAO,mBAAmB;AACtE,iBAAa,MAAM,0BAA0B,IAAI,QAAQ;AAAA,EAC3D,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI,CAAC,YAAY,WAAY,QAAO;AACpC,MAAI,kBAAkB,WAAW,YAAY,QAAQ,MAAM,EAAE,WAAW,EAAG,QAAO;AAElF,MAAI;AACF,UAAM,EAAE,WAAW,IAAI,MAAM,OAAO,kBAAkB;AACtD,UAAM,WAAW,IAAI,WAAW;AAAA,MAC9B,YAAY,QAAQ;AAAA,MACpB,YAAY,QAAQ;AAAA,MACpB,SAAS;AAAA,MACT,cAAc;AAAA,MACd,QAAQ,QAAQ;AAAA,MAChB,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,IAC1B,CAAC;AACD,WAAO;AAAA,EACT,SAAS,aAAsB;AAC7B,WAAO,MAAM,uEAAuE;AAAA,MAClF,SAAS,QAAQ;AAAA,MACjB;AAAA,MACA,oBAAoB,QAAQ;AAAA,MAC5B,OAAO,uBAAuB,QAAQ,YAAY,UAAU,OAAO,WAAW;AAAA,IAChF,CAAC;AACD,WAAO;AAAA,EACT;AACF;AAEA,eAAe,oCACb,IACA,WACA,UACA,SACA,YACkB;AAClB,QAAM,cAAc,8BAA8B,UAAU;AAC5D,SAAO,6BAA6B,IAAI,WAAW,UAAU,SAAS,oBAAoB;AAAA,IACxF,aAAa;AAAA,IACb,SAAS,QAAQ;AAAA,IACjB,CAAC,oCAAoC,GAAG,EAAE,QAAQ,QAAQ,QAAQ,GAAG,YAAY;AAAA,EACnF,CAAC;AACH;AAEA,eAAe,2BACb,IACA,WACA,UACA,SACA,YACkB;AAClB,QAAM,UAAU,sBAAsB,QAAQ,WAAW,UAAU,OAAO,UAAU;AACpF,SAAO,6BAA6B,IAAI,WAAW,UAAU,SAAS,SAAS;AAAA,IAC7E,SAAS,QAAQ;AAAA,IACjB,CAAC,0BAA0B,GAAG,uBAAuB,QAAQ,QAAQ,OAAO;AAAA,EAC9E,CAAC;AACH;AAEA,eAAe,oBACb,IACA,WACA,UACA,SACA,YACe;AACf,QAAM,UAAU,sBAAsB,QAAQ,WAAW,UAAU,OAAO,UAAU;AACpF,SAAO,MAAM,yCAAyC;AAAA,IACpD,SAAS,QAAQ;AAAA,IACjB,oBAAoB,QAAQ;AAAA,IAC5B,OAAO;AAAA,EACT,CAAC;AACD,MAAI;AACF,UAAM,EAAE,cAAAA,cAAa,IAAI,MAAM,OAAO,kBAAkB;AACxD,UAAM,eAAe,MAAM,GAAG,QAAQA,eAAc;AAAA,MAClD,IAAI,QAAQ;AAAA,MACZ,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,IAC1B,CAAC;AACD,QAAI,gBAAgB,aAAa,WAAW,UAAU;AACpD,mBAAa,SAAS;AACtB,mBAAa,YAAY,EAAE,SAAS,QAAQ,SAAS,OAAO,QAAQ;AACpE,mBAAa,WAAW,oBAAI,KAAK;AACjC,YAAM,GAAG,MAAM;AAAA,IACjB;AAEA,UAAM,EAAE,iBAAiB,IAAI,MAAM,OAAO,qBAAqB;AAC/D,UAAM,iBAAiB,IAAI,WAAW,QAAQ,oBAAoB,UAAU;AAAA,MAC1E,OAAO,qBAAqB,QAAQ,MAAM,YAAY,OAAO;AAAA,MAC7D,SAAS,EAAE,SAAS,QAAQ,SAAS,QAAQ,QAAQ,OAAO;AAAA,IAC9D,CAAC;AAAA,EACH,SAAS,WAAgB;AACvB,WAAO,MAAM,gDAAgD;AAAA,MAC3D,SAAS,QAAQ;AAAA,MACjB,oBAAoB,QAAQ;AAAA,MAC5B,OAAO,WAAW,WAAW,OAAO,SAAS;AAAA,IAC/C,CAAC;AAAA,EACH;AACF;AAKA,eAAe,uBACb,IACA,WACA,oBACe;AAEf,QAAM,EAAE,8BAA8B,IAAI,MAAM,OAAO,qBAAqB;AAG5E,MAAI;AACF,UAAM,8BAA8B,IAAI,WAAW,kBAAkB;AAAA,EACvE,SAAS,OAAY;AAEnB,QAAI,CAAC,MAAM,SAAS,SAAS,0BAA0B,GAAG;AACxD,aAAO,MAAM,6BAA6B,EAAE,YAAY,oBAAoB,KAAK,MAAM,CAAC;AAAA,IAC1F;AAAA,EACF;AACF;",
   "names": ["StepInstance"]
 }

package/dist/modules/workflows/lib/event-trigger-service.js

@@ -247,9 +247,16 @@ async function loadEmbeddedTriggers(em, tenantId, organizationId) {
   );
   const triggers = [];
   const workflowIds = /* @__PURE__ */ new Set();
+  const resolvedVersions = /* @__PURE__ */ new Map();
   for (const def of definitions) {
     workflowIds.add(def.workflowId);
-    if (!def.enabled) continue;
+    if (!def.enabled || def.lifecycle !== "published") continue;
+    const resolved = resolvedVersions.get(def.workflowId);
+    if (!resolved || def.version > resolved.version) {
+      resolvedVersions.set(def.workflowId, def);
+    }
+  }
+  for (const def of resolvedVersions.values()) {
     const embeddedTriggers = def.definition?.triggers;
     if (!embeddedTriggers || embeddedTriggers.length === 0) continue;
     for (const trigger of embeddedTriggers) {