@open-mercato/core 0.8.1-develop.7296.1.2111d779db → 0.9.0

package/dist/modules/workflows/lib/event-trigger-service.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/workflows/lib/event-trigger-service.ts"],
-  "sourcesContent": ["/**\n * Workflows Module - Event Trigger Service\n *\n * Core service for evaluating and processing workflow event triggers.\n * Handles pattern matching, filter evaluation, context mapping, and workflow starting.\n */\n\nimport type { EntityManager } from '@mikro-orm/core'\nimport type { EntityManager as PostgreSqlEntityManager } from '@mikro-orm/postgresql'\nimport type { AwilixContainer } from 'awilix'\nimport type { CacheService } from '@open-mercato/cache'\nimport { matchEventPattern } from '@open-mercato/shared/lib/events/patterns'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { testLinearRegex } from '@open-mercato/shared/lib/regex/linear'\nimport {\n  WorkflowEventTrigger,\n  WorkflowDefinition,\n  WorkflowInstance,\n  type TriggerFilterCondition,\n  type TriggerContextMapping,\n  type WorkflowEventTriggerConfig,\n  type WorkflowDefinitionTrigger,\n} from '../data/entities'\nimport { startWorkflow, executeWorkflow } from './workflow-executor'\nimport { getAllCodeWorkflows } from './code-registry'\nimport { codeWorkflowUuid } from './find-definition'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows').child({ component: 'event-trigger' })\n\n// ============================================================================\n// Types\n// ============================================================================\n\nexport interface EventTriggerContext {\n  eventName: string\n  payload: Record<string, unknown>\n  tenantId: string\n  organizationId: string\n}\n\nexport interface ProcessTriggersResult {\n  triggered: number\n  skipped: number\n  errors: Array<{ triggerId: string; error: string }>\n  instances: Array<{ triggerId: string; instanceId: string }>\n}\n\n/**\n * Unified trigger interface for both legacy (entity) and embedded (definition) triggers\n */\nexport interface UnifiedTrigger {\n  id: string  // For legacy: entity ID, for embedded: `${definitionId}:${triggerId}`\n  triggerId: string\n  name: string\n  description?: string | null\n  eventPattern: string\n  config: WorkflowEventTriggerConfig | null\n  enabled: boolean\n  priority: number\n  workflowDefinitionId: string\n  workflowId: string\n  workflowVersion: number\n  source: 'legacy' | 'embedded' | 'code'\n  tenantId: string\n  organizationId: string\n}\n\ninterface CachedTriggers {\n  triggers: UnifiedTrigger[]\n  cachedAt: number\n}\n\n// Cache TTL: 5 minutes\nconst TRIGGER_CACHE_TTL = 5 * 60 * 1000\n\nfunction readEventActorUserId(payload: Record<string, unknown>): string | null {\n  const candidate = payload.userId ?? payload.actorUserId\n  if (typeof candidate !== 'string') return null\n  const trimmed = candidate.trim()\n  return trimmed.length > 0 && !trimmed.startsWith('trigger:') ? trimmed : null\n}\n\n// ============================================================================\n// Pattern Matching\n// ============================================================================\n\n// ============================================================================\n// Filter Evaluation\n// ============================================================================\n\nconst MAX_WORKFLOW_REGEX_PATTERN_LENGTH = 200\nconst MAX_WORKFLOW_REGEX_INPUT_LENGTH = 10_000\n\n/**\n * Get a nested value from an object using dot notation.\n */\nfunction getNestedValue(obj: unknown, path: string): unknown {\n  if (obj === null || obj === undefined) return undefined\n\n  const parts = path.split('.')\n  let current: unknown = obj\n\n  for (const part of parts) {\n    if (current === null || current === undefined) return undefined\n    if (typeof current !== 'object') return undefined\n    current = (current as Record<string, unknown>)[part]\n  }\n\n  return current\n}\n\nfunction getQuantifierEnd(pattern: string, index: number): number | null {\n  const char = pattern[index]\n  if (char === '*' || char === '+' || char === '?') return index\n  if (char !== '{') return null\n\n  const closeIndex = pattern.indexOf('}', index + 1)\n  if (closeIndex === -1) return null\n\n  const body = pattern.slice(index + 1, closeIndex)\n  return /^[0-9]+(?:,[0-9]*)?$/.test(body) ? closeIndex : null\n}\n\ninterface RegexGroupFrame {\n  hasAlternation: boolean\n  hasQuantifier: boolean\n}\n\nfunction isSafeWorkflowRegexPattern(pattern: string): boolean {\n  if (pattern.length > MAX_WORKFLOW_REGEX_PATTERN_LENGTH) return false\n\n  const groupStack: RegexGroupFrame[] = [{ hasAlternation: false, hasQuantifier: false }]\n  let inCharClass = false\n  let lastClosedGroup: RegexGroupFrame | null = null\n  let lastAtomWasQuantified = false\n\n  // Hand-written single-pass lexer: `index` is intentionally advanced inside the\n  // loop body (escape pairs, `(?:` prefixes, multi-char quantifiers, lazy `?`) on\n  // top of the `index += 1` update clause. Do not \"simplify\" these in-body writes.\n  for (let index = 0; index < pattern.length; index += 1) {\n    const char = pattern[index]\n\n    if (char === '\\\\') {\n      const next = pattern[index + 1]\n      if (!inCharClass && (/[1-9]/.test(next ?? '') || (next === 'k' && pattern[index + 2] === '<'))) {\n        return false\n      }\n      index += 1\n      lastClosedGroup = null\n      lastAtomWasQuantified = false\n      continue\n    }\n\n    if (inCharClass) {\n      if (char === ']') {\n        inCharClass = false\n        lastAtomWasQuantified = false\n      }\n      lastClosedGroup = null\n      continue\n    }\n\n    if (char === '[') {\n      inCharClass = true\n      lastClosedGroup = null\n      lastAtomWasQuantified = false\n      continue\n    }\n\n    if (char === '(') {\n      if (pattern[index + 1] === '?') {\n        if (pattern[index + 2] !== ':') return false\n        index += 2\n      }\n\n      groupStack.push({ hasAlternation: false, hasQuantifier: false })\n      lastClosedGroup = null\n      lastAtomWasQuantified = false\n      continue\n    }\n\n    if (char === ')') {\n      if (groupStack.length === 1) return false\n      lastClosedGroup = groupStack.pop()!\n      lastAtomWasQuantified = false\n      continue\n    }\n\n    if (char === '|') {\n      groupStack[groupStack.length - 1].hasAlternation = true\n      lastClosedGroup = null\n      lastAtomWasQuantified = false\n      continue\n    }\n\n    const quantifierEnd = getQuantifierEnd(pattern, index)\n    if (quantifierEnd !== null) {\n      if (lastAtomWasQuantified) return false\n      if (lastClosedGroup?.hasAlternation || lastClosedGroup?.hasQuantifier) return false\n\n      groupStack[groupStack.length - 1].hasQuantifier = true\n      lastClosedGroup = null\n      lastAtomWasQuantified = true\n      index = quantifierEnd\n\n      if (pattern[index + 1] === '?') {\n        index += 1\n      }\n\n      continue\n    }\n\n    lastClosedGroup = null\n    lastAtomWasQuantified = false\n  }\n\n  return groupStack.length === 1 && !inCharClass\n}\n\n/**\n * Evaluate a single filter condition against the event payload.\n */\nfunction evaluateCondition(condition: TriggerFilterCondition, payload: Record<string, unknown>): boolean {\n  const value = getNestedValue(payload, condition.field)\n  const expected = condition.value\n\n  switch (condition.operator) {\n    case 'eq':\n      return value === expected\n\n    case 'neq':\n      return value !== expected\n\n    case 'gt':\n      return typeof value === 'number' && typeof expected === 'number' && value > expected\n\n    case 'gte':\n      return typeof value === 'number' && typeof expected === 'number' && value >= expected\n\n    case 'lt':\n      return typeof value === 'number' && typeof expected === 'number' && value < expected\n\n    case 'lte':\n      return typeof value === 'number' && typeof expected === 'number' && value <= expected\n\n    case 'contains':\n      if (typeof value === 'string' && typeof expected === 'string') {\n        return value.includes(expected)\n      }\n      if (Array.isArray(value)) {\n        return value.includes(expected)\n      }\n      return false\n\n    case 'startsWith':\n      return typeof value === 'string' && typeof expected === 'string' && value.startsWith(expected)\n\n    case 'endsWith':\n      return typeof value === 'string' && typeof expected === 'string' && value.endsWith(expected)\n\n    case 'in':\n      return Array.isArray(expected) && expected.includes(value)\n\n    case 'notIn':\n      return Array.isArray(expected) && !expected.includes(value)\n\n    case 'exists':\n      return value !== undefined && value !== null\n\n    case 'notExists':\n      return value === undefined || value === null\n\n    case 'regex':\n      if (typeof value !== 'string' || typeof expected !== 'string') return false\n      if (value.length > MAX_WORKFLOW_REGEX_INPUT_LENGTH) return false\n      if (!isSafeWorkflowRegexPattern(expected)) return false\n      {\n        const result = testLinearRegex(expected, value, {\n          maxPatternLength: MAX_WORKFLOW_REGEX_PATTERN_LENGTH,\n          maxInputLength: MAX_WORKFLOW_REGEX_INPUT_LENGTH,\n        })\n        return result.ok ? result.matched : false\n      }\n\n    default:\n      return false\n  }\n}\n\n/**\n * Evaluate all filter conditions against the event payload.\n * All conditions must pass (AND logic).\n */\nexport function evaluateFilterConditions(\n  conditions: TriggerFilterCondition[] | undefined,\n  payload: Record<string, unknown>\n): boolean {\n  if (!conditions || conditions.length === 0) return true\n\n  return conditions.every(condition => evaluateCondition(condition, payload))\n}\n\n// ============================================================================\n// Context Mapping\n// ============================================================================\n\n/**\n * Map event payload to workflow initial context.\n */\nexport function mapEventToContext(\n  mapping: TriggerContextMapping[] | undefined,\n  payload: Record<string, unknown>\n): Record<string, unknown> {\n  const context: Record<string, unknown> = {}\n\n  if (!mapping || mapping.length === 0) return context\n\n  for (const item of mapping) {\n    const value = getNestedValue(payload, item.sourceExpression)\n    context[item.targetKey] = value !== undefined ? value : item.defaultValue\n  }\n\n  return context\n}\n\n// ============================================================================\n// Trigger Loading with Caching\n// ============================================================================\n\n// In-memory cache for triggers (per tenant/org).\n// Park the Map on globalThis so the same compiled module loaded under two\n// paths (a Next.js server chunk vs. a worker resolving the file through a\n// different import root) shares one cache. Without this,\n// `invalidateTriggerCache(...)` called from the PUT /api/workflows/definitions\n// route clears its own copy while the wildcard event-trigger subscriber keeps\n// reading a stale copy populated before the trigger was added \u2014 newly added\n// triggers stay invisible for up to TRIGGER_CACHE_TTL. Mirrors the same\n// workaround used by the modules registry and `getDiRegistrars()`.\nconst GLOBAL_TRIGGER_CACHE_KEY = '__openMercatoWorkflowTriggerCache__'\n\nfunction getTriggerCache(): Map<string, CachedTriggers> {\n  const existing = (globalThis as any)[GLOBAL_TRIGGER_CACHE_KEY] as\n    | Map<string, CachedTriggers>\n    | undefined\n  if (existing) return existing\n  const created = new Map<string, CachedTriggers>()\n  ;(globalThis as any)[GLOBAL_TRIGGER_CACHE_KEY] = created\n  return created\n}\n\nfunction getCacheKey(tenantId: string, organizationId: string): string {\n  return `${tenantId}:${organizationId}`\n}\n\n/**\n * Load legacy triggers from WorkflowEventTrigger entity table.\n * For backward compatibility with existing triggers.\n */\nasync function loadLegacyTriggers(\n  em: EntityManager,\n  tenantId: string,\n  organizationId: string\n): Promise<UnifiedTrigger[]> {\n  const postgresEm = em as unknown as PostgreSqlEntityManager\n  const legacyTriggers = await findWithDecryption(\n    postgresEm,\n    WorkflowEventTrigger,\n    {\n      tenantId,\n      organizationId,\n      enabled: true,\n      deletedAt: null,\n    },\n    {\n      orderBy: { priority: 'DESC', createdAt: 'ASC' },\n    },\n    { tenantId, organizationId },\n  )\n\n  // Get definitions for these triggers to get workflowId\n  const definitionIds = [...new Set(legacyTriggers.map(t => t.workflowDefinitionId))]\n  const definitions = definitionIds.length > 0 ? await findWithDecryption(postgresEm, WorkflowDefinition, {\n    id: { $in: definitionIds },\n    tenantId,\n    organizationId,\n    enabled: true,\n    deletedAt: null,\n  }, {}, { tenantId, organizationId }) : []\n  const definitionMap = new Map(definitions.map(d => [d.id, d]))\n\n  return legacyTriggers\n    .filter(t => definitionMap.has(t.workflowDefinitionId))\n    .map(t => {\n      const def = definitionMap.get(t.workflowDefinitionId)!\n      return {\n        id: t.id,\n        triggerId: t.id,\n        name: t.name,\n        description: t.description,\n        eventPattern: t.eventPattern,\n        config: t.config ?? null,\n        enabled: t.enabled,\n        priority: t.priority,\n        workflowDefinitionId: t.workflowDefinitionId,\n        workflowId: def.workflowId,\n        workflowVersion: def.version,\n        source: 'legacy' as const,\n        tenantId: t.tenantId,\n        organizationId: t.organizationId,\n      }\n    })\n}\n\n/**\n * Load embedded triggers from workflow definitions.\n * New triggers are embedded directly in the definition JSONB.\n *\n * Also returns the set of every non-deleted DB definition's `workflowId` \u2014 even\n * those with no triggers \u2014 so the caller can let a materialized (customized)\n * definition suppress its code-registry counterpart regardless of whether the\n * customization kept any triggers (#4425).\n */\nasync function loadEmbeddedTriggers(\n  em: EntityManager,\n  tenantId: string,\n  organizationId: string\n): Promise<{ triggers: UnifiedTrigger[]; workflowIds: Set<string> }> {\n  const postgresEm = em as unknown as PostgreSqlEntityManager\n  // Load all definitions so disabled customizations still shadow their code\n  // counterpart. Only enabled definitions contribute embedded triggers below.\n  const definitions = await findWithDecryption(\n    postgresEm,\n    WorkflowDefinition,\n    {\n      tenantId,\n      organizationId,\n      deletedAt: null,\n    },\n    {},\n    { tenantId, organizationId },\n  )\n\n  const triggers: UnifiedTrigger[] = []\n  const workflowIds = new Set<string>()\n\n  for (const def of definitions) {\n    workflowIds.add(def.workflowId)\n    if (!def.enabled) continue\n\n    const embeddedTriggers = def.definition?.triggers as WorkflowDefinitionTrigger[] | undefined\n    if (!embeddedTriggers || embeddedTriggers.length === 0) continue\n\n    for (const trigger of embeddedTriggers) {\n      if (!trigger.enabled) continue\n\n      triggers.push({\n        id: `${def.id}:${trigger.triggerId}`,\n        triggerId: trigger.triggerId,\n        name: trigger.name,\n        description: trigger.description ?? null,\n        eventPattern: trigger.eventPattern,\n        config: trigger.config ?? null,\n        enabled: trigger.enabled,\n        priority: trigger.priority,\n        workflowDefinitionId: def.id,\n        workflowId: def.workflowId,\n        workflowVersion: def.version,\n        source: 'embedded' as const,\n        tenantId,\n        organizationId,\n      })\n    }\n  }\n\n  return { triggers, workflowIds }\n}\n\n/**\n * Project triggers declared on code-defined workflows into UnifiedTriggers.\n *\n * Code workflows live only in the in-memory registry, so their `triggers`\n * arrays never reached the DB-backed loaders \u2014 a code-declared trigger was inert\n * until an operator ran `POST \u2026/code:<id>/customize` to materialize the\n * definition into a `workflow_definitions` row (#4425). This projects them\n * directly. It is synchronous (no DB) and scoped to the caller's tenant/org via\n * the deterministic virtual definition id, matching what `startWorkflow`\n * persists as the instance's `definitionId` so the concurrency limit counts\n * correctly.\n *\n * `dbBackedWorkflowIds` are workflowIds already contributed by the legacy or\n * embedded (DB) sources; a code workflow whose id appears there is skipped so a\n * customized DB override wins and its trigger is not double-registered.\n */\nexport function loadCodeTriggers(\n  tenantId: string,\n  organizationId: string,\n  dbBackedWorkflowIds: Set<string>,\n): UnifiedTrigger[] {\n  const triggers: UnifiedTrigger[] = []\n\n  for (const codeDef of getAllCodeWorkflows()) {\n    if (!codeDef.enabled) continue\n    if (dbBackedWorkflowIds.has(codeDef.workflowId)) continue\n\n    const embeddedTriggers = codeDef.definition?.triggers\n    if (!embeddedTriggers || embeddedTriggers.length === 0) continue\n\n    const definitionId = codeWorkflowUuid(codeDef.workflowId)\n    for (const trigger of embeddedTriggers) {\n      if (!trigger.enabled) continue\n\n      triggers.push({\n        id: `code:${codeDef.workflowId}:${trigger.triggerId}`,\n        triggerId: trigger.triggerId,\n        name: trigger.name,\n        description: trigger.description ?? null,\n        eventPattern: trigger.eventPattern,\n        config: (trigger.config ?? null) as WorkflowEventTriggerConfig | null,\n        enabled: trigger.enabled,\n        priority: trigger.priority,\n        workflowDefinitionId: definitionId,\n        workflowId: codeDef.workflowId,\n        workflowVersion: codeDef.version,\n        source: 'code' as const,\n        tenantId,\n        organizationId,\n      })\n    }\n  }\n\n  return triggers\n}\n\n/**\n * Load all enabled triggers for a tenant/organization with caching.\n * Merges legacy (entity), embedded (definition), and code-registry triggers;\n * a DB-backed source for a given workflowId takes precedence over its code\n * trigger so `customize` semantics are preserved.\n */\nexport async function loadTriggersForTenant(\n  em: EntityManager,\n  tenantId: string,\n  organizationId: string,\n  cacheService?: CacheService\n): Promise<UnifiedTrigger[]> {\n  const cacheKey = getCacheKey(tenantId, organizationId)\n  const cache = getTriggerCache()\n\n  // Check in-memory cache\n  const cached = cache.get(cacheKey)\n  if (cached && Date.now() - cached.cachedAt < TRIGGER_CACHE_TTL) {\n    return cached.triggers\n  }\n\n  // Load from both DB sources\n  const [legacyTriggers, embedded] = await Promise.all([\n    loadLegacyTriggers(em, tenantId, organizationId),\n    loadEmbeddedTriggers(em, tenantId, organizationId),\n  ])\n  const embeddedTriggers = embedded.triggers\n\n  // Project code-registry triggers, letting any DB-backed definition for the\n  // same workflowId win (preserves `customize` override semantics \u2014 including\n  // a customization that removed its triggers).\n  const dbBackedWorkflowIds = new Set<string>([\n    ...embedded.workflowIds,\n    ...legacyTriggers.map((t) => t.workflowId),\n  ])\n  const codeTriggers = loadCodeTriggers(tenantId, organizationId, dbBackedWorkflowIds)\n\n  // Merge and sort by priority (higher first)\n  const allTriggers = [...legacyTriggers, ...embeddedTriggers, ...codeTriggers]\n    .sort((a, b) => b.priority - a.priority)\n\n  // Update cache\n  cache.set(cacheKey, {\n    triggers: allTriggers,\n    cachedAt: Date.now(),\n  })\n\n  return allTriggers\n}\n\n/**\n * Invalidate trigger cache for a tenant/organization.\n * Call this when:\n * - Legacy triggers are created/updated/deleted\n * - Workflow definitions with embedded triggers are created/updated/deleted\n */\nexport function invalidateTriggerCache(tenantId: string, organizationId?: string): void {\n  const cache = getTriggerCache()\n  if (organizationId) {\n    // Invalidate specific org\n    const cacheKey = getCacheKey(tenantId, organizationId)\n    cache.delete(cacheKey)\n  } else {\n    // Invalidate all orgs for tenant\n    for (const key of cache.keys()) {\n      if (key.startsWith(`${tenantId}:`)) {\n        cache.delete(key)\n      }\n    }\n  }\n}\n\n// ============================================================================\n// Trigger Matching\n// ============================================================================\n\n/**\n * Find all triggers that match an event.\n */\nexport async function findMatchingTriggers(\n  em: EntityManager,\n  context: EventTriggerContext\n): Promise<UnifiedTrigger[]> {\n  const triggers = await loadTriggersForTenant(\n    em,\n    context.tenantId,\n    context.organizationId\n  )\n\n  return triggers.filter(trigger => {\n    // Check event pattern\n    if (!matchEventPattern(context.eventName, trigger.eventPattern)) {\n      return false\n    }\n\n    // Check filter conditions\n    if (!evaluateFilterConditions(trigger.config?.filterConditions, context.payload)) {\n      return false\n    }\n\n    return true\n  })\n}\n\n// ============================================================================\n// Trigger Processing\n// ============================================================================\n\n// Open debounce windows for triggers configured with `debounceMs`, keyed by\n// tenant/org/trigger/entity and holding the timestamp each window closes at.\n// Parked on globalThis for the same reason as the trigger cache above: the\n// compiled module can be loaded under two import roots (a Next.js server chunk\n// vs. a worker), and a module-local Map would debounce each copy separately \u2014\n// halving the effective window whenever both copies see the same event stream.\n// The state is still per process: a deployment running several app or worker\n// processes debounces independently in each one, so the guard bounds trigger\n// storms per process rather than cluster-wide.\nconst GLOBAL_TRIGGER_DEBOUNCE_KEY = '__openMercatoWorkflowTriggerDebounce__'\n\n// Cap on tracked keys so a long-lived worker cannot grow the Map without bound;\n// mirrors the prune step in query_index's `markAutoReindexScheduled`.\nconst TRIGGER_DEBOUNCE_MAX_KEYS = 5000\n\ntype GlobalWithTriggerDebounce = typeof globalThis & {\n  [GLOBAL_TRIGGER_DEBOUNCE_KEY]?: Map<string, number>\n}\n\nfunction getTriggerDebounceState(): Map<string, number> {\n  const globalScope = globalThis as GlobalWithTriggerDebounce\n  if (!globalScope[GLOBAL_TRIGGER_DEBOUNCE_KEY]) {\n    globalScope[GLOBAL_TRIGGER_DEBOUNCE_KEY] = new Map<string, number>()\n  }\n  return globalScope[GLOBAL_TRIGGER_DEBOUNCE_KEY]\n}\n\n// Entries store their own expiry rather than their start, so pruning never has\n// to assume one shared window length: `debounceMs` is per trigger and ranges\n// from 0 to the validator's one-hour ceiling, and expiring a one-hour window\n// because a 100 ms trigger happened to run the prune would silently reopen it.\nfunction pruneTriggerDebounceState(state: Map<string, number>, now: number): void {\n  if (state.size < TRIGGER_DEBOUNCE_MAX_KEYS) return\n\n  for (const [key, expiresAt] of state) {\n    if (expiresAt <= now) state.delete(key)\n  }\n\n  if (state.size < TRIGGER_DEBOUNCE_MAX_KEYS) return\n\n  const oldestKey = state.keys().next().value\n  if (oldestKey !== undefined) state.delete(oldestKey)\n}\n\n/**\n * Resolve the debounce window a trigger/event pair shares, or `null` when the\n * trigger has no debounce configured.\n *\n * The key includes the event payload's `id` so the window is per trigger *and*\n * per entity \u2014 rapid updates to two different records still start two\n * workflows. Tenant and organization are part of the key because code-defined\n * triggers reuse one id across every tenant.\n */\nfunction resolveTriggerDebounceWindow(\n  trigger: UnifiedTrigger,\n  payload: Record<string, unknown>,\n): { key: string; debounceMs: number } | null {\n  const debounceMs = trigger.config?.debounceMs\n\n  if (!debounceMs || debounceMs <= 0) return null\n\n  // Accept numeric ids too: falling back to the shared `*` bucket would collapse\n  // every record under one key and suppress workflows for unrelated entities.\n  const rawPayloadId = payload?.id\n  const payloadId =\n    typeof rawPayloadId === 'string' ? rawPayloadId\n    : typeof rawPayloadId === 'number' ? String(rawPayloadId)\n    : null\n\n  return { key: `${trigger.tenantId}:${trigger.organizationId}:${trigger.id}:${payloadId ?? '*'}`, debounceMs }\n}\n\n/**\n * Check whether this event falls inside the trigger's debounce window, opening\n * a fresh window when it does not.\n *\n * Leading-edge semantics: the first event fires the workflow and opens the\n * window; repeats inside it are dropped. This matches the two other\n * `debounceMs` implementations in the codebase (`markAutoReindexScheduled` in\n * query_index, `NotificationDispatcher.shouldDebounce` in the UI package) and\n * needs no timer that would have to survive a process restart.\n *\n * The window is opened here rather than after the workflow starts so that\n * nothing awaits between reading and writing it \u2014 two events racing through\n * `processEventTriggers` must not both observe an empty window. An attempt that\n * does not go on to start a workflow closes its window again via\n * `releaseTriggerDebounceWindow`, so only a real start keeps one open.\n */\nfunction shouldDebounceTrigger(trigger: UnifiedTrigger, payload: Record<string, unknown>): boolean {\n  const debounceWindow = resolveTriggerDebounceWindow(trigger, payload)\n\n  if (!debounceWindow) return false\n\n  const state = getTriggerDebounceState()\n  const now = Date.now()\n  const expiresAt = state.get(debounceWindow.key)\n\n  if (expiresAt !== undefined && now < expiresAt) return true\n\n  pruneTriggerDebounceState(state, now)\n  state.delete(debounceWindow.key)\n  state.set(debounceWindow.key, now + debounceWindow.debounceMs)\n  return false\n}\n\n/**\n * Close a window `shouldDebounceTrigger` opened for an event that never started\n * a workflow \u2014 the concurrency limit blocked it, or mapping/starting threw.\n * Leaving it open would let one blocked or failed attempt suppress every later\n * event for the same record until the window elapsed, which at the validator's\n * one-hour ceiling means an hour of silently dropped starts.\n */\nfunction releaseTriggerDebounceWindow(trigger: UnifiedTrigger, payload: Record<string, unknown>): void {\n  const debounceWindow = resolveTriggerDebounceWindow(trigger, payload)\n\n  if (!debounceWindow) return\n\n  getTriggerDebounceState().delete(debounceWindow.key)\n}\n\n/**\n * Clear all debounce windows. Test-only seam \u2014 production code relies on the\n * windows expiring on their own.\n */\nexport function resetTriggerDebounceState(): void {\n  getTriggerDebounceState().clear()\n}\n\n/**\n * Check if max concurrent instances limit is reached.\n */\nasync function checkConcurrencyLimit(\n  em: EntityManager,\n  trigger: UnifiedTrigger\n): Promise<boolean> {\n  const maxInstances = trigger.config?.maxConcurrentInstances\n\n  if (!maxInstances) return true // No limit\n\n  // Count running instances for this trigger's workflow definition\n  const runningCount = await em.count(WorkflowInstance, {\n    definitionId: trigger.workflowDefinitionId,\n    status: { $in: ['RUNNING', 'WAITING_FOR_ACTIVITIES'] },\n    tenantId: trigger.tenantId,\n    organizationId: trigger.organizationId,\n    deletedAt: null,\n  })\n\n  return runningCount < maxInstances\n}\n\n/**\n * Process all matching triggers for an event and start workflows.\n */\nexport async function processEventTriggers(\n  em: EntityManager,\n  container: AwilixContainer,\n  context: EventTriggerContext\n): Promise<ProcessTriggersResult> {\n  const result: ProcessTriggersResult = {\n    triggered: 0,\n    skipped: 0,\n    errors: [],\n    instances: [],\n  }\n\n  // Find matching triggers\n  const triggers = await findMatchingTriggers(em, context)\n\n  if (triggers.length === 0) {\n    return result\n  }\n\n  // Process each trigger (definitions already validated during loading)\n  for (const trigger of triggers) {\n    let startedWorkflow = false\n    try {\n      // Check debounce window before any DB work\n      if (shouldDebounceTrigger(trigger, context.payload)) {\n        logger.debug('Skipping trigger: inside debounce window', { triggerId: trigger.id, triggerName: trigger.name, debounceMs: trigger.config?.debounceMs })\n        result.skipped++\n        continue\n      }\n\n      // Check concurrency limit\n      const canStart = await checkConcurrencyLimit(em, trigger)\n      if (!canStart) {\n        logger.debug('Skipping trigger: max concurrent instances reached', { triggerId: trigger.id, triggerName: trigger.name })\n        releaseTriggerDebounceWindow(trigger, context.payload)\n        result.skipped++\n        continue\n      }\n\n      // Map event payload to workflow context\n      const mappedContext = mapEventToContext(trigger.config?.contextMapping, context.payload)\n\n      // Extract entity info from payload for metadata\n      const payloadId = context.payload?.id as string | undefined\n      const payloadEntityType = context.payload?.entityType as string | undefined\n      const actorUserId = readEventActorUserId(context.payload)\n\n      // Include event metadata and payload in context\n      const initialContext = {\n        // Include raw event payload fields (e.g., id, organizationId, tenantId)\n        ...context.payload,\n        // Override with explicit mappings if provided\n        ...mappedContext,\n        __trigger: {\n          triggerId: trigger.id,\n          triggerName: trigger.name,\n          eventName: context.eventName,\n          eventPayload: context.payload,\n          triggeredAt: new Date().toISOString(),\n          source: trigger.source,\n        },\n      }\n\n      // Start workflow\n      const instance = await startWorkflow(em, {\n        workflowId: trigger.workflowId,\n        version: trigger.workflowVersion,\n        initialContext,\n        metadata: {\n          initiatedBy: actorUserId ?? `trigger:${trigger.id}`,\n          // Include entityId and entityType for widget discovery\n          entityId: payloadId,\n          entityType: payloadEntityType || trigger.config?.entityType,\n          labels: {\n            trigger_id: trigger.id,\n            trigger_name: trigger.name,\n            event_name: context.eventName,\n            trigger_source: trigger.source,\n          },\n        },\n        tenantId: context.tenantId,\n        organizationId: context.organizationId,\n      })\n\n      startedWorkflow = true\n      result.triggered++\n      result.instances.push({\n        triggerId: trigger.id,\n        instanceId: instance.id,\n      })\n\n      // Execute workflow asynchronously (don't wait)\n      executeWorkflow(\n        em.fork(),\n        container,\n        instance.id,\n        actorUserId ? { userId: actorUserId } : undefined\n      ).catch(err => {\n        logger.error('Error executing workflow', { instanceId: instance.id, err })\n      })\n\n    } catch (error) {\n      const errorMessage = error instanceof Error ? error.message : String(error)\n      logger.error('Error processing trigger', { triggerId: trigger.id, triggerName: trigger.name, err: error })\n      if (!startedWorkflow) releaseTriggerDebounceWindow(trigger, context.payload)\n      result.errors.push({\n        triggerId: trigger.id,\n        error: errorMessage,\n      })\n    }\n  }\n\n  return result\n}\n"],
-  "mappings": "AAWA,SAAS,yBAAyB;AAClC,SAAS,0BAA0B;AACnC,SAAS,uBAAuB;AAChC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAKK;AACP,SAAS,eAAe,uBAAuB;AAC/C,SAAS,2BAA2B;AACpC,SAAS,wBAAwB;AACjC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,gBAAgB,CAAC;AA8C7E,MAAM,oBAAoB,IAAI,KAAK;AAEnC,SAAS,qBAAqB,SAAiD;AAC7E,QAAM,YAAY,QAAQ,UAAU,QAAQ;AAC5C,MAAI,OAAO,cAAc,SAAU,QAAO;AAC1C,QAAM,UAAU,UAAU,KAAK;AAC/B,SAAO,QAAQ,SAAS,KAAK,CAAC,QAAQ,WAAW,UAAU,IAAI,UAAU;AAC3E;AAUA,MAAM,oCAAoC;AAC1C,MAAM,kCAAkC;AAKxC,SAAS,eAAe,KAAc,MAAuB;AAC3D,MAAI,QAAQ,QAAQ,QAAQ,OAAW,QAAO;AAE9C,QAAM,QAAQ,KAAK,MAAM,GAAG;AAC5B,MAAI,UAAmB;AAEvB,aAAW,QAAQ,OAAO;AACxB,QAAI,YAAY,QAAQ,YAAY,OAAW,QAAO;AACtD,QAAI,OAAO,YAAY,SAAU,QAAO;AACxC,cAAW,QAAoC,IAAI;AAAA,EACrD;AAEA,SAAO;AACT;AAEA,SAAS,iBAAiB,SAAiB,OAA8B;AACvE,QAAM,OAAO,QAAQ,KAAK;AAC1B,MAAI,SAAS,OAAO,SAAS,OAAO,SAAS,IAAK,QAAO;AACzD,MAAI,SAAS,IAAK,QAAO;AAEzB,QAAM,aAAa,QAAQ,QAAQ,KAAK,QAAQ,CAAC;AACjD,MAAI,eAAe,GAAI,QAAO;AAE9B,QAAM,OAAO,QAAQ,MAAM,QAAQ,GAAG,UAAU;AAChD,SAAO,uBAAuB,KAAK,IAAI,IAAI,aAAa;AAC1D;AAOA,SAAS,2BAA2B,SAA0B;AAC5D,MAAI,QAAQ,SAAS,kCAAmC,QAAO;AAE/D,QAAM,aAAgC,CAAC,EAAE,gBAAgB,OAAO,eAAe,MAAM,CAAC;AACtF,MAAI,cAAc;AAClB,MAAI,kBAA0C;AAC9C,MAAI,wBAAwB;AAK5B,WAAS,QAAQ,GAAG,QAAQ,QAAQ,QAAQ,SAAS,GAAG;AACtD,UAAM,OAAO,QAAQ,KAAK;AAE1B,QAAI,SAAS,MAAM;AACjB,YAAM,OAAO,QAAQ,QAAQ,CAAC;AAC9B,UAAI,CAAC,gBAAgB,QAAQ,KAAK,QAAQ,EAAE,KAAM,SAAS,OAAO,QAAQ,QAAQ,CAAC,MAAM,MAAO;AAC9F,eAAO;AAAA,MACT;AACA,eAAS;AACT,wBAAkB;AAClB,8BAAwB;AACxB;AAAA,IACF;AAEA,QAAI,aAAa;AACf,UAAI,SAAS,KAAK;AAChB,sBAAc;AACd,gCAAwB;AAAA,MAC1B;AACA,wBAAkB;AAClB;AAAA,IACF;AAEA,QAAI,SAAS,KAAK;AAChB,oBAAc;AACd,wBAAkB;AAClB,8BAAwB;AACxB;AAAA,IACF;AAEA,QAAI,SAAS,KAAK;AAChB,UAAI,QAAQ,QAAQ,CAAC,MAAM,KAAK;AAC9B,YAAI,QAAQ,QAAQ,CAAC,MAAM,IAAK,QAAO;AACvC,iBAAS;AAAA,MACX;AAEA,iBAAW,KAAK,EAAE,gBAAgB,OAAO,eAAe,MAAM,CAAC;AAC/D,wBAAkB;AAClB,8BAAwB;AACxB;AAAA,IACF;AAEA,QAAI,SAAS,KAAK;AAChB,UAAI,WAAW,WAAW,EAAG,QAAO;AACpC,wBAAkB,WAAW,IAAI;AACjC,8BAAwB;AACxB;AAAA,IACF;AAEA,QAAI,SAAS,KAAK;AAChB,iBAAW,WAAW,SAAS,CAAC,EAAE,iBAAiB;AACnD,wBAAkB;AAClB,8BAAwB;AACxB;AAAA,IACF;AAEA,UAAM,gBAAgB,iBAAiB,SAAS,KAAK;AACrD,QAAI,kBAAkB,MAAM;AAC1B,UAAI,sBAAuB,QAAO;AAClC,UAAI,iBAAiB,kBAAkB,iBAAiB,cAAe,QAAO;AAE9E,iBAAW,WAAW,SAAS,CAAC,EAAE,gBAAgB;AAClD,wBAAkB;AAClB,8BAAwB;AACxB,cAAQ;AAER,UAAI,QAAQ,QAAQ,CAAC,MAAM,KAAK;AAC9B,iBAAS;AAAA,MACX;AAEA;AAAA,IACF;AAEA,sBAAkB;AAClB,4BAAwB;AAAA,EAC1B;AAEA,SAAO,WAAW,WAAW,KAAK,CAAC;AACrC;AAKA,SAAS,kBAAkB,WAAmC,SAA2C;AACvG,QAAM,QAAQ,eAAe,SAAS,UAAU,KAAK;AACrD,QAAM,WAAW,UAAU;AAE3B,UAAQ,UAAU,UAAU;AAAA,IAC1B,KAAK;AACH,aAAO,UAAU;AAAA,IAEnB,KAAK;AACH,aAAO,UAAU;AAAA,IAEnB,KAAK;AACH,aAAO,OAAO,UAAU,YAAY,OAAO,aAAa,YAAY,QAAQ;AAAA,IAE9E,KAAK;AACH,aAAO,OAAO,UAAU,YAAY,OAAO,aAAa,YAAY,SAAS;AAAA,IAE/E,KAAK;AACH,aAAO,OAAO,UAAU,YAAY,OAAO,aAAa,YAAY,QAAQ;AAAA,IAE9E,KAAK;AACH,aAAO,OAAO,UAAU,YAAY,OAAO,aAAa,YAAY,SAAS;AAAA,IAE/E,KAAK;AACH,UAAI,OAAO,UAAU,YAAY,OAAO,aAAa,UAAU;AAC7D,eAAO,MAAM,SAAS,QAAQ;AAAA,MAChC;AACA,UAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,eAAO,MAAM,SAAS,QAAQ;AAAA,MAChC;AACA,aAAO;AAAA,IAET,KAAK;AACH,aAAO,OAAO,UAAU,YAAY,OAAO,aAAa,YAAY,MAAM,WAAW,QAAQ;AAAA,IAE/F,KAAK;AACH,aAAO,OAAO,UAAU,YAAY,OAAO,aAAa,YAAY,MAAM,SAAS,QAAQ;AAAA,IAE7F,KAAK;AACH,aAAO,MAAM,QAAQ,QAAQ,KAAK,SAAS,SAAS,KAAK;AAAA,IAE3D,KAAK;AACH,aAAO,MAAM,QAAQ,QAAQ,KAAK,CAAC,SAAS,SAAS,KAAK;AAAA,IAE5D,KAAK;AACH,aAAO,UAAU,UAAa,UAAU;AAAA,IAE1C,KAAK;AACH,aAAO,UAAU,UAAa,UAAU;AAAA,IAE1C,KAAK;AACH,UAAI,OAAO,UAAU,YAAY,OAAO,aAAa,SAAU,QAAO;AACtE,UAAI,MAAM,SAAS,gCAAiC,QAAO;AAC3D,UAAI,CAAC,2BAA2B,QAAQ,EAAG,QAAO;AAClD;AACE,cAAM,SAAS,gBAAgB,UAAU,OAAO;AAAA,UAC9C,kBAAkB;AAAA,UAClB,gBAAgB;AAAA,QAClB,CAAC;AACD,eAAO,OAAO,KAAK,OAAO,UAAU;AAAA,MACtC;AAAA,IAEF;AACE,aAAO;AAAA,EACX;AACF;AAMO,SAAS,yBACd,YACA,SACS;AACT,MAAI,CAAC,cAAc,WAAW,WAAW,EAAG,QAAO;AAEnD,SAAO,WAAW,MAAM,eAAa,kBAAkB,WAAW,OAAO,CAAC;AAC5E;AASO,SAAS,kBACd,SACA,SACyB;AACzB,QAAM,UAAmC,CAAC;AAE1C,MAAI,CAAC,WAAW,QAAQ,WAAW,EAAG,QAAO;AAE7C,aAAW,QAAQ,SAAS;AAC1B,UAAM,QAAQ,eAAe,SAAS,KAAK,gBAAgB;AAC3D,YAAQ,KAAK,SAAS,IAAI,UAAU,SAAY,QAAQ,KAAK;AAAA,EAC/D;AAEA,SAAO;AACT;AAeA,MAAM,2BAA2B;AAEjC,SAAS,kBAA+C;AACtD,QAAM,WAAY,WAAmB,wBAAwB;AAG7D,MAAI,SAAU,QAAO;AACrB,QAAM,UAAU,oBAAI,IAA4B;AAC/C,EAAC,WAAmB,wBAAwB,IAAI;AACjD,SAAO;AACT;AAEA,SAAS,YAAY,UAAkB,gBAAgC;AACrE,SAAO,GAAG,QAAQ,IAAI,cAAc;AACtC;AAMA,eAAe,mBACb,IACA,UACA,gBAC2B;AAC3B,QAAM,aAAa;AACnB,QAAM,iBAAiB,MAAM;AAAA,IAC3B;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT,WAAW;AAAA,IACb;AAAA,IACA;AAAA,MACE,SAAS,EAAE,UAAU,QAAQ,WAAW,MAAM;AAAA,IAChD;AAAA,IACA,EAAE,UAAU,eAAe;AAAA,EAC7B;AAGA,QAAM,gBAAgB,CAAC,GAAG,IAAI,IAAI,eAAe,IAAI,OAAK,EAAE,oBAAoB,CAAC,CAAC;AAClF,QAAM,cAAc,cAAc,SAAS,IAAI,MAAM,mBAAmB,YAAY,oBAAoB;AAAA,IACtG,IAAI,EAAE,KAAK,cAAc;AAAA,IACzB;AAAA,IACA;AAAA,IACA,SAAS;AAAA,IACT,WAAW;AAAA,EACb,GAAG,CAAC,GAAG,EAAE,UAAU,eAAe,CAAC,IAAI,CAAC;AACxC,QAAM,gBAAgB,IAAI,IAAI,YAAY,IAAI,OAAK,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AAE7D,SAAO,eACJ,OAAO,OAAK,cAAc,IAAI,EAAE,oBAAoB,CAAC,EACrD,IAAI,OAAK;AACR,UAAM,MAAM,cAAc,IAAI,EAAE,oBAAoB;AACpD,WAAO;AAAA,MACL,IAAI,EAAE;AAAA,MACN,WAAW,EAAE;AAAA,MACb,MAAM,EAAE;AAAA,MACR,aAAa,EAAE;AAAA,MACf,cAAc,EAAE;AAAA,MAChB,QAAQ,EAAE,UAAU;AAAA,MACpB,SAAS,EAAE;AAAA,MACX,UAAU,EAAE;AAAA,MACZ,sBAAsB,EAAE;AAAA,MACxB,YAAY,IAAI;AAAA,MAChB,iBAAiB,IAAI;AAAA,MACrB,QAAQ;AAAA,MACR,UAAU,EAAE;AAAA,MACZ,gBAAgB,EAAE;AAAA,IACpB;AAAA,EACF,CAAC;AACL;AAWA,eAAe,qBACb,IACA,UACA,gBACmE;AACnE,QAAM,aAAa;AAGnB,QAAM,cAAc,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA;AAAA,MACA,WAAW;AAAA,IACb;AAAA,IACA,CAAC;AAAA,IACD,EAAE,UAAU,eAAe;AAAA,EAC7B;AAEA,QAAM,WAA6B,CAAC;AACpC,QAAM,cAAc,oBAAI,IAAY;AAEpC,aAAW,OAAO,aAAa;AAC7B,gBAAY,IAAI,IAAI,UAAU;AAC9B,QAAI,CAAC,IAAI,QAAS;AAElB,UAAM,mBAAmB,IAAI,YAAY;AACzC,QAAI,CAAC,oBAAoB,iBAAiB,WAAW,EAAG;AAExD,eAAW,WAAW,kBAAkB;AACtC,UAAI,CAAC,QAAQ,QAAS;AAEtB,eAAS,KAAK;AAAA,QACZ,IAAI,GAAG,IAAI,EAAE,IAAI,QAAQ,SAAS;AAAA,QAClC,WAAW,QAAQ;AAAA,QACnB,MAAM,QAAQ;AAAA,QACd,aAAa,QAAQ,eAAe;AAAA,QACpC,cAAc,QAAQ;AAAA,QACtB,QAAQ,QAAQ,UAAU;AAAA,QAC1B,SAAS,QAAQ;AAAA,QACjB,UAAU,QAAQ;AAAA,QAClB,sBAAsB,IAAI;AAAA,QAC1B,YAAY,IAAI;AAAA,QAChB,iBAAiB,IAAI;AAAA,QACrB,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO,EAAE,UAAU,YAAY;AACjC;AAkBO,SAAS,iBACd,UACA,gBACA,qBACkB;AAClB,QAAM,WAA6B,CAAC;AAEpC,aAAW,WAAW,oBAAoB,GAAG;AAC3C,QAAI,CAAC,QAAQ,QAAS;AACtB,QAAI,oBAAoB,IAAI,QAAQ,UAAU,EAAG;AAEjD,UAAM,mBAAmB,QAAQ,YAAY;AAC7C,QAAI,CAAC,oBAAoB,iBAAiB,WAAW,EAAG;AAExD,UAAM,eAAe,iBAAiB,QAAQ,UAAU;AACxD,eAAW,WAAW,kBAAkB;AACtC,UAAI,CAAC,QAAQ,QAAS;AAEtB,eAAS,KAAK;AAAA,QACZ,IAAI,QAAQ,QAAQ,UAAU,IAAI,QAAQ,SAAS;AAAA,QACnD,WAAW,QAAQ;AAAA,QACnB,MAAM,QAAQ;AAAA,QACd,aAAa,QAAQ,eAAe;AAAA,QACpC,cAAc,QAAQ;AAAA,QACtB,QAAS,QAAQ,UAAU;AAAA,QAC3B,SAAS,QAAQ;AAAA,QACjB,UAAU,QAAQ;AAAA,QAClB,sBAAsB;AAAA,QACtB,YAAY,QAAQ;AAAA,QACpB,iBAAiB,QAAQ;AAAA,QACzB,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO;AACT;AAQA,eAAsB,sBACpB,IACA,UACA,gBACA,cAC2B;AAC3B,QAAM,WAAW,YAAY,UAAU,cAAc;AACrD,QAAM,QAAQ,gBAAgB;AAG9B,QAAM,SAAS,MAAM,IAAI,QAAQ;AACjC,MAAI,UAAU,KAAK,IAAI,IAAI,OAAO,WAAW,mBAAmB;AAC9D,WAAO,OAAO;AAAA,EAChB;AAGA,QAAM,CAAC,gBAAgB,QAAQ,IAAI,MAAM,QAAQ,IAAI;AAAA,IACnD,mBAAmB,IAAI,UAAU,cAAc;AAAA,IAC/C,qBAAqB,IAAI,UAAU,cAAc;AAAA,EACnD,CAAC;AACD,QAAM,mBAAmB,SAAS;AAKlC,QAAM,sBAAsB,oBAAI,IAAY;AAAA,IAC1C,GAAG,SAAS;AAAA,IACZ,GAAG,eAAe,IAAI,CAAC,MAAM,EAAE,UAAU;AAAA,EAC3C,CAAC;AACD,QAAM,eAAe,iBAAiB,UAAU,gBAAgB,mBAAmB;AAGnF,QAAM,cAAc,CAAC,GAAG,gBAAgB,GAAG,kBAAkB,GAAG,YAAY,EACzE,KAAK,CAAC,GAAG,MAAM,EAAE,WAAW,EAAE,QAAQ;AAGzC,QAAM,IAAI,UAAU;AAAA,IAClB,UAAU;AAAA,IACV,UAAU,KAAK,IAAI;AAAA,EACrB,CAAC;AAED,SAAO;AACT;AAQO,SAAS,uBAAuB,UAAkB,gBAA+B;AACtF,QAAM,QAAQ,gBAAgB;AAC9B,MAAI,gBAAgB;AAElB,UAAM,WAAW,YAAY,UAAU,cAAc;AACrD,UAAM,OAAO,QAAQ;AAAA,EACvB,OAAO;AAEL,eAAW,OAAO,MAAM,KAAK,GAAG;AAC9B,UAAI,IAAI,WAAW,GAAG,QAAQ,GAAG,GAAG;AAClC,cAAM,OAAO,GAAG;AAAA,MAClB;AAAA,IACF;AAAA,EACF;AACF;AASA,eAAsB,qBACpB,IACA,SAC2B;AAC3B,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AAEA,SAAO,SAAS,OAAO,aAAW;AAEhC,QAAI,CAAC,kBAAkB,QAAQ,WAAW,QAAQ,YAAY,GAAG;AAC/D,aAAO;AAAA,IACT;AAGA,QAAI,CAAC,yBAAyB,QAAQ,QAAQ,kBAAkB,QAAQ,OAAO,GAAG;AAChF,aAAO;AAAA,IACT;AAEA,WAAO;AAAA,EACT,CAAC;AACH;AAeA,MAAM,8BAA8B;AAIpC,MAAM,4BAA4B;AAMlC,SAAS,0BAA+C;AACtD,QAAM,cAAc;AACpB,MAAI,CAAC,YAAY,2BAA2B,GAAG;AAC7C,gBAAY,2BAA2B,IAAI,oBAAI,IAAoB;AAAA,EACrE;AACA,SAAO,YAAY,2BAA2B;AAChD;AAMA,SAAS,0BAA0B,OAA4B,KAAmB;AAChF,MAAI,MAAM,OAAO,0BAA2B;AAE5C,aAAW,CAAC,KAAK,SAAS,KAAK,OAAO;AACpC,QAAI,aAAa,IAAK,OAAM,OAAO,GAAG;AAAA,EACxC;AAEA,MAAI,MAAM,OAAO,0BAA2B;AAE5C,QAAM,YAAY,MAAM,KAAK,EAAE,KAAK,EAAE;AACtC,MAAI,cAAc,OAAW,OAAM,OAAO,SAAS;AACrD;AAWA,SAAS,6BACP,SACA,SAC4C;AAC5C,QAAM,aAAa,QAAQ,QAAQ;AAEnC,MAAI,CAAC,cAAc,cAAc,EAAG,QAAO;AAI3C,QAAM,eAAe,SAAS;AAC9B,QAAM,YACJ,OAAO,iBAAiB,WAAW,eACjC,OAAO,iBAAiB,WAAW,OAAO,YAAY,IACtD;AAEJ,SAAO,EAAE,KAAK,GAAG,QAAQ,QAAQ,IAAI,QAAQ,cAAc,IAAI,QAAQ,EAAE,IAAI,aAAa,GAAG,IAAI,WAAW;AAC9G;AAkBA,SAAS,sBAAsB,SAAyB,SAA2C;AACjG,QAAM,iBAAiB,6BAA6B,SAAS,OAAO;AAEpE,MAAI,CAAC,eAAgB,QAAO;AAE5B,QAAM,QAAQ,wBAAwB;AACtC,QAAM,MAAM,KAAK,IAAI;AACrB,QAAM,YAAY,MAAM,IAAI,eAAe,GAAG;AAE9C,MAAI,cAAc,UAAa,MAAM,UAAW,QAAO;AAEvD,4BAA0B,OAAO,GAAG;AACpC,QAAM,OAAO,eAAe,GAAG;AAC/B,QAAM,IAAI,eAAe,KAAK,MAAM,eAAe,UAAU;AAC7D,SAAO;AACT;AASA,SAAS,6BAA6B,SAAyB,SAAwC;AACrG,QAAM,iBAAiB,6BAA6B,SAAS,OAAO;AAEpE,MAAI,CAAC,eAAgB;AAErB,0BAAwB,EAAE,OAAO,eAAe,GAAG;AACrD;AAMO,SAAS,4BAAkC;AAChD,0BAAwB,EAAE,MAAM;AAClC;AAKA,eAAe,sBACb,IACA,SACkB;AAClB,QAAM,eAAe,QAAQ,QAAQ;AAErC,MAAI,CAAC,aAAc,QAAO;AAG1B,QAAM,eAAe,MAAM,GAAG,MAAM,kBAAkB;AAAA,IACpD,cAAc,QAAQ;AAAA,IACtB,QAAQ,EAAE,KAAK,CAAC,WAAW,wBAAwB,EAAE;AAAA,IACrD,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ;AAAA,IACxB,WAAW;AAAA,EACb,CAAC;AAED,SAAO,eAAe;AACxB;AAKA,eAAsB,qBACpB,IACA,WACA,SACgC;AAChC,QAAM,SAAgC;AAAA,IACpC,WAAW;AAAA,IACX,SAAS;AAAA,IACT,QAAQ,CAAC;AAAA,IACT,WAAW,CAAC;AAAA,EACd;AAGA,QAAM,WAAW,MAAM,qBAAqB,IAAI,OAAO;AAEvD,MAAI,SAAS,WAAW,GAAG;AACzB,WAAO;AAAA,EACT;AAGA,aAAW,WAAW,UAAU;AAC9B,QAAI,kBAAkB;AACtB,QAAI;AAEF,UAAI,sBAAsB,SAAS,QAAQ,OAAO,GAAG;AACnD,eAAO,MAAM,4CAA4C,EAAE,WAAW,QAAQ,IAAI,aAAa,QAAQ,MAAM,YAAY,QAAQ,QAAQ,WAAW,CAAC;AACrJ,eAAO;AACP;AAAA,MACF;AAGA,YAAM,WAAW,MAAM,sBAAsB,IAAI,OAAO;AACxD,UAAI,CAAC,UAAU;AACb,eAAO,MAAM,sDAAsD,EAAE,WAAW,QAAQ,IAAI,aAAa,QAAQ,KAAK,CAAC;AACvH,qCAA6B,SAAS,QAAQ,OAAO;AACrD,eAAO;AACP;AAAA,MACF;AAGA,YAAM,gBAAgB,kBAAkB,QAAQ,QAAQ,gBAAgB,QAAQ,OAAO;AAGvF,YAAM,YAAY,QAAQ,SAAS;AACnC,YAAM,oBAAoB,QAAQ,SAAS;AAC3C,YAAM,cAAc,qBAAqB,QAAQ,OAAO;AAGxD,YAAM,iBAAiB;AAAA;AAAA,QAErB,GAAG,QAAQ;AAAA;AAAA,QAEX,GAAG;AAAA,QACH,WAAW;AAAA,UACT,WAAW,QAAQ;AAAA,UACnB,aAAa,QAAQ;AAAA,UACrB,WAAW,QAAQ;AAAA,UACnB,cAAc,QAAQ;AAAA,UACtB,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,UACpC,QAAQ,QAAQ;AAAA,QAClB;AAAA,MACF;AAGA,YAAM,WAAW,MAAM,cAAc,IAAI;AAAA,QACvC,YAAY,QAAQ;AAAA,QACpB,SAAS,QAAQ;AAAA,QACjB;AAAA,QACA,UAAU;AAAA,UACR,aAAa,eAAe,WAAW,QAAQ,EAAE;AAAA;AAAA,UAEjD,UAAU;AAAA,UACV,YAAY,qBAAqB,QAAQ,QAAQ;AAAA,UACjD,QAAQ;AAAA,YACN,YAAY,QAAQ;AAAA,YACpB,cAAc,QAAQ;AAAA,YACtB,YAAY,QAAQ;AAAA,YACpB,gBAAgB,QAAQ;AAAA,UAC1B;AAAA,QACF;AAAA,QACA,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ;AAAA,MAC1B,CAAC;AAED,wBAAkB;AAClB,aAAO;AACP,aAAO,UAAU,KAAK;AAAA,QACpB,WAAW,QAAQ;AAAA,QACnB,YAAY,SAAS;AAAA,MACvB,CAAC;AAGD;AAAA,QACE,GAAG,KAAK;AAAA,QACR;AAAA,QACA,SAAS;AAAA,QACT,cAAc,EAAE,QAAQ,YAAY,IAAI;AAAA,MAC1C,EAAE,MAAM,SAAO;AACb,eAAO,MAAM,4BAA4B,EAAE,YAAY,SAAS,IAAI,IAAI,CAAC;AAAA,MAC3E,CAAC;AAAA,IAEH,SAAS,OAAO;AACd,YAAM,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC1E,aAAO,MAAM,4BAA4B,EAAE,WAAW,QAAQ,IAAI,aAAa,QAAQ,MAAM,KAAK,MAAM,CAAC;AACzG,UAAI,CAAC,gBAAiB,8BAA6B,SAAS,QAAQ,OAAO;AAC3E,aAAO,OAAO,KAAK;AAAA,QACjB,WAAW,QAAQ;AAAA,QACnB,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO;AACT;",
+  "sourcesContent": ["/**\n * Workflows Module - Event Trigger Service\n *\n * Core service for evaluating and processing workflow event triggers.\n * Handles pattern matching, filter evaluation, context mapping, and workflow starting.\n */\n\nimport type { EntityManager } from '@mikro-orm/core'\nimport type { EntityManager as PostgreSqlEntityManager } from '@mikro-orm/postgresql'\nimport type { AwilixContainer } from 'awilix'\nimport type { CacheService } from '@open-mercato/cache'\nimport { matchEventPattern } from '@open-mercato/shared/lib/events/patterns'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { testLinearRegex } from '@open-mercato/shared/lib/regex/linear'\nimport {\n  WorkflowEventTrigger,\n  WorkflowDefinition,\n  WorkflowInstance,\n  type TriggerFilterCondition,\n  type TriggerContextMapping,\n  type WorkflowEventTriggerConfig,\n  type WorkflowDefinitionTrigger,\n} from '../data/entities'\nimport { startWorkflow, executeWorkflow } from './workflow-executor'\nimport { getAllCodeWorkflows } from './code-registry'\nimport { codeWorkflowUuid } from './find-definition'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows').child({ component: 'event-trigger' })\n\n// ============================================================================\n// Types\n// ============================================================================\n\nexport interface EventTriggerContext {\n  eventName: string\n  payload: Record<string, unknown>\n  tenantId: string\n  organizationId: string\n}\n\nexport interface ProcessTriggersResult {\n  triggered: number\n  skipped: number\n  errors: Array<{ triggerId: string; error: string }>\n  instances: Array<{ triggerId: string; instanceId: string }>\n}\n\n/**\n * Unified trigger interface for both legacy (entity) and embedded (definition) triggers\n */\nexport interface UnifiedTrigger {\n  id: string  // For legacy: entity ID, for embedded: `${definitionId}:${triggerId}`\n  triggerId: string\n  name: string\n  description?: string | null\n  eventPattern: string\n  config: WorkflowEventTriggerConfig | null\n  enabled: boolean\n  priority: number\n  workflowDefinitionId: string\n  workflowId: string\n  workflowVersion: number\n  source: 'legacy' | 'embedded' | 'code'\n  tenantId: string\n  organizationId: string\n}\n\ninterface CachedTriggers {\n  triggers: UnifiedTrigger[]\n  cachedAt: number\n}\n\n// Cache TTL: 5 minutes\nconst TRIGGER_CACHE_TTL = 5 * 60 * 1000\n\nfunction readEventActorUserId(payload: Record<string, unknown>): string | null {\n  const candidate = payload.userId ?? payload.actorUserId\n  if (typeof candidate !== 'string') return null\n  const trimmed = candidate.trim()\n  return trimmed.length > 0 && !trimmed.startsWith('trigger:') ? trimmed : null\n}\n\n// ============================================================================\n// Pattern Matching\n// ============================================================================\n\n// ============================================================================\n// Filter Evaluation\n// ============================================================================\n\nconst MAX_WORKFLOW_REGEX_PATTERN_LENGTH = 200\nconst MAX_WORKFLOW_REGEX_INPUT_LENGTH = 10_000\n\n/**\n * Get a nested value from an object using dot notation.\n */\nfunction getNestedValue(obj: unknown, path: string): unknown {\n  if (obj === null || obj === undefined) return undefined\n\n  const parts = path.split('.')\n  let current: unknown = obj\n\n  for (const part of parts) {\n    if (current === null || current === undefined) return undefined\n    if (typeof current !== 'object') return undefined\n    current = (current as Record<string, unknown>)[part]\n  }\n\n  return current\n}\n\nfunction getQuantifierEnd(pattern: string, index: number): number | null {\n  const char = pattern[index]\n  if (char === '*' || char === '+' || char === '?') return index\n  if (char !== '{') return null\n\n  const closeIndex = pattern.indexOf('}', index + 1)\n  if (closeIndex === -1) return null\n\n  const body = pattern.slice(index + 1, closeIndex)\n  return /^[0-9]+(?:,[0-9]*)?$/.test(body) ? closeIndex : null\n}\n\ninterface RegexGroupFrame {\n  hasAlternation: boolean\n  hasQuantifier: boolean\n}\n\nfunction isSafeWorkflowRegexPattern(pattern: string): boolean {\n  if (pattern.length > MAX_WORKFLOW_REGEX_PATTERN_LENGTH) return false\n\n  const groupStack: RegexGroupFrame[] = [{ hasAlternation: false, hasQuantifier: false }]\n  let inCharClass = false\n  let lastClosedGroup: RegexGroupFrame | null = null\n  let lastAtomWasQuantified = false\n\n  // Hand-written single-pass lexer: `index` is intentionally advanced inside the\n  // loop body (escape pairs, `(?:` prefixes, multi-char quantifiers, lazy `?`) on\n  // top of the `index += 1` update clause. Do not \"simplify\" these in-body writes.\n  for (let index = 0; index < pattern.length; index += 1) {\n    const char = pattern[index]\n\n    if (char === '\\\\') {\n      const next = pattern[index + 1]\n      if (!inCharClass && (/[1-9]/.test(next ?? '') || (next === 'k' && pattern[index + 2] === '<'))) {\n        return false\n      }\n      index += 1\n      lastClosedGroup = null\n      lastAtomWasQuantified = false\n      continue\n    }\n\n    if (inCharClass) {\n      if (char === ']') {\n        inCharClass = false\n        lastAtomWasQuantified = false\n      }\n      lastClosedGroup = null\n      continue\n    }\n\n    if (char === '[') {\n      inCharClass = true\n      lastClosedGroup = null\n      lastAtomWasQuantified = false\n      continue\n    }\n\n    if (char === '(') {\n      if (pattern[index + 1] === '?') {\n        if (pattern[index + 2] !== ':') return false\n        index += 2\n      }\n\n      groupStack.push({ hasAlternation: false, hasQuantifier: false })\n      lastClosedGroup = null\n      lastAtomWasQuantified = false\n      continue\n    }\n\n    if (char === ')') {\n      if (groupStack.length === 1) return false\n      lastClosedGroup = groupStack.pop()!\n      lastAtomWasQuantified = false\n      continue\n    }\n\n    if (char === '|') {\n      groupStack[groupStack.length - 1].hasAlternation = true\n      lastClosedGroup = null\n      lastAtomWasQuantified = false\n      continue\n    }\n\n    const quantifierEnd = getQuantifierEnd(pattern, index)\n    if (quantifierEnd !== null) {\n      if (lastAtomWasQuantified) return false\n      if (lastClosedGroup?.hasAlternation || lastClosedGroup?.hasQuantifier) return false\n\n      groupStack[groupStack.length - 1].hasQuantifier = true\n      lastClosedGroup = null\n      lastAtomWasQuantified = true\n      index = quantifierEnd\n\n      if (pattern[index + 1] === '?') {\n        index += 1\n      }\n\n      continue\n    }\n\n    lastClosedGroup = null\n    lastAtomWasQuantified = false\n  }\n\n  return groupStack.length === 1 && !inCharClass\n}\n\n/**\n * Evaluate a single filter condition against the event payload.\n */\nfunction evaluateCondition(condition: TriggerFilterCondition, payload: Record<string, unknown>): boolean {\n  const value = getNestedValue(payload, condition.field)\n  const expected = condition.value\n\n  switch (condition.operator) {\n    case 'eq':\n      return value === expected\n\n    case 'neq':\n      return value !== expected\n\n    case 'gt':\n      return typeof value === 'number' && typeof expected === 'number' && value > expected\n\n    case 'gte':\n      return typeof value === 'number' && typeof expected === 'number' && value >= expected\n\n    case 'lt':\n      return typeof value === 'number' && typeof expected === 'number' && value < expected\n\n    case 'lte':\n      return typeof value === 'number' && typeof expected === 'number' && value <= expected\n\n    case 'contains':\n      if (typeof value === 'string' && typeof expected === 'string') {\n        return value.includes(expected)\n      }\n      if (Array.isArray(value)) {\n        return value.includes(expected)\n      }\n      return false\n\n    case 'startsWith':\n      return typeof value === 'string' && typeof expected === 'string' && value.startsWith(expected)\n\n    case 'endsWith':\n      return typeof value === 'string' && typeof expected === 'string' && value.endsWith(expected)\n\n    case 'in':\n      return Array.isArray(expected) && expected.includes(value)\n\n    case 'notIn':\n      return Array.isArray(expected) && !expected.includes(value)\n\n    case 'exists':\n      return value !== undefined && value !== null\n\n    case 'notExists':\n      return value === undefined || value === null\n\n    case 'regex':\n      if (typeof value !== 'string' || typeof expected !== 'string') return false\n      if (value.length > MAX_WORKFLOW_REGEX_INPUT_LENGTH) return false\n      if (!isSafeWorkflowRegexPattern(expected)) return false\n      {\n        const result = testLinearRegex(expected, value, {\n          maxPatternLength: MAX_WORKFLOW_REGEX_PATTERN_LENGTH,\n          maxInputLength: MAX_WORKFLOW_REGEX_INPUT_LENGTH,\n        })\n        return result.ok ? result.matched : false\n      }\n\n    default:\n      return false\n  }\n}\n\n/**\n * Evaluate all filter conditions against the event payload.\n * All conditions must pass (AND logic).\n */\nexport function evaluateFilterConditions(\n  conditions: TriggerFilterCondition[] | undefined,\n  payload: Record<string, unknown>\n): boolean {\n  if (!conditions || conditions.length === 0) return true\n\n  return conditions.every(condition => evaluateCondition(condition, payload))\n}\n\n// ============================================================================\n// Context Mapping\n// ============================================================================\n\n/**\n * Map event payload to workflow initial context.\n */\nexport function mapEventToContext(\n  mapping: TriggerContextMapping[] | undefined,\n  payload: Record<string, unknown>\n): Record<string, unknown> {\n  const context: Record<string, unknown> = {}\n\n  if (!mapping || mapping.length === 0) return context\n\n  for (const item of mapping) {\n    const value = getNestedValue(payload, item.sourceExpression)\n    context[item.targetKey] = value !== undefined ? value : item.defaultValue\n  }\n\n  return context\n}\n\n// ============================================================================\n// Trigger Loading with Caching\n// ============================================================================\n\n// In-memory cache for triggers (per tenant/org).\n// Park the Map on globalThis so the same compiled module loaded under two\n// paths (a Next.js server chunk vs. a worker resolving the file through a\n// different import root) shares one cache. Without this,\n// `invalidateTriggerCache(...)` called from the PUT /api/workflows/definitions\n// route clears its own copy while the wildcard event-trigger subscriber keeps\n// reading a stale copy populated before the trigger was added \u2014 newly added\n// triggers stay invisible for up to TRIGGER_CACHE_TTL. Mirrors the same\n// workaround used by the modules registry and `getDiRegistrars()`.\nconst GLOBAL_TRIGGER_CACHE_KEY = '__openMercatoWorkflowTriggerCache__'\n\nfunction getTriggerCache(): Map<string, CachedTriggers> {\n  const existing = (globalThis as any)[GLOBAL_TRIGGER_CACHE_KEY] as\n    | Map<string, CachedTriggers>\n    | undefined\n  if (existing) return existing\n  const created = new Map<string, CachedTriggers>()\n  ;(globalThis as any)[GLOBAL_TRIGGER_CACHE_KEY] = created\n  return created\n}\n\nfunction getCacheKey(tenantId: string, organizationId: string): string {\n  return `${tenantId}:${organizationId}`\n}\n\n/**\n * Load legacy triggers from WorkflowEventTrigger entity table.\n * For backward compatibility with existing triggers.\n */\nasync function loadLegacyTriggers(\n  em: EntityManager,\n  tenantId: string,\n  organizationId: string\n): Promise<UnifiedTrigger[]> {\n  const postgresEm = em as unknown as PostgreSqlEntityManager\n  const legacyTriggers = await findWithDecryption(\n    postgresEm,\n    WorkflowEventTrigger,\n    {\n      tenantId,\n      organizationId,\n      enabled: true,\n      deletedAt: null,\n    },\n    {\n      orderBy: { priority: 'DESC', createdAt: 'ASC' },\n    },\n    { tenantId, organizationId },\n  )\n\n  // Get definitions for these triggers to get workflowId\n  const definitionIds = [...new Set(legacyTriggers.map(t => t.workflowDefinitionId))]\n  const definitions = definitionIds.length > 0 ? await findWithDecryption(postgresEm, WorkflowDefinition, {\n    id: { $in: definitionIds },\n    tenantId,\n    organizationId,\n    enabled: true,\n    deletedAt: null,\n  }, {}, { tenantId, organizationId }) : []\n  const definitionMap = new Map(definitions.map(d => [d.id, d]))\n\n  return legacyTriggers\n    .filter(t => definitionMap.has(t.workflowDefinitionId))\n    .map(t => {\n      const def = definitionMap.get(t.workflowDefinitionId)!\n      return {\n        id: t.id,\n        triggerId: t.id,\n        name: t.name,\n        description: t.description,\n        eventPattern: t.eventPattern,\n        config: t.config ?? null,\n        enabled: t.enabled,\n        priority: t.priority,\n        workflowDefinitionId: t.workflowDefinitionId,\n        workflowId: def.workflowId,\n        workflowVersion: def.version,\n        source: 'legacy' as const,\n        tenantId: t.tenantId,\n        organizationId: t.organizationId,\n      }\n    })\n}\n\n/**\n * Load embedded triggers from workflow definitions.\n * New triggers are embedded directly in the definition JSONB.\n *\n * Also returns the set of every non-deleted DB definition's `workflowId` \u2014 even\n * those with no triggers \u2014 so the caller can let a materialized (customized)\n * definition suppress its code-registry counterpart regardless of whether the\n * customization kept any triggers (#4425).\n *\n * Versions of a workflow coexist as separate rows, and publishing copies the\n * triggers into the new row while the previous one stays enabled for the\n * instances and pinned callers still running it. Triggers are therefore taken\n * only from the database row an unpinned start resolves to\n * (`findWorkflowDefinition`): the highest enabled, published version. Projecting every enabled row would\n * start one instance per version for a single event.\n */\nasync function loadEmbeddedTriggers(\n  em: EntityManager,\n  tenantId: string,\n  organizationId: string\n): Promise<{ triggers: UnifiedTrigger[]; workflowIds: Set<string> }> {\n  const postgresEm = em as unknown as PostgreSqlEntityManager\n  // Load all definitions so disabled customizations still shadow their code\n  // counterpart. Only the resolved version of each workflow contributes\n  // embedded triggers below.\n  const definitions = await findWithDecryption(\n    postgresEm,\n    WorkflowDefinition,\n    {\n      tenantId,\n      organizationId,\n      deletedAt: null,\n    },\n    {},\n    { tenantId, organizationId },\n  )\n\n  const triggers: UnifiedTrigger[] = []\n  const workflowIds = new Set<string>()\n  const resolvedVersions = new Map<string, WorkflowDefinition>()\n\n  for (const def of definitions) {\n    workflowIds.add(def.workflowId)\n    if (!def.enabled || def.lifecycle !== 'published') continue\n\n    const resolved = resolvedVersions.get(def.workflowId)\n    if (!resolved || def.version > resolved.version) {\n      resolvedVersions.set(def.workflowId, def)\n    }\n  }\n\n  for (const def of resolvedVersions.values()) {\n    const embeddedTriggers = def.definition?.triggers as WorkflowDefinitionTrigger[] | undefined\n    if (!embeddedTriggers || embeddedTriggers.length === 0) continue\n\n    for (const trigger of embeddedTriggers) {\n      if (!trigger.enabled) continue\n\n      triggers.push({\n        id: `${def.id}:${trigger.triggerId}`,\n        triggerId: trigger.triggerId,\n        name: trigger.name,\n        description: trigger.description ?? null,\n        eventPattern: trigger.eventPattern,\n        config: trigger.config ?? null,\n        enabled: trigger.enabled,\n        priority: trigger.priority,\n        workflowDefinitionId: def.id,\n        workflowId: def.workflowId,\n        workflowVersion: def.version,\n        source: 'embedded' as const,\n        tenantId,\n        organizationId,\n      })\n    }\n  }\n\n  return { triggers, workflowIds }\n}\n\n/**\n * Project triggers declared on code-defined workflows into UnifiedTriggers.\n *\n * Code workflows live only in the in-memory registry, so their `triggers`\n * arrays never reached the DB-backed loaders \u2014 a code-declared trigger was inert\n * until an operator ran `POST \u2026/code:<id>/customize` to materialize the\n * definition into a `workflow_definitions` row (#4425). This projects them\n * directly. It is synchronous (no DB) and scoped to the caller's tenant/org via\n * the deterministic virtual definition id, matching what `startWorkflow`\n * persists as the instance's `definitionId` so the concurrency limit counts\n * correctly.\n *\n * `dbBackedWorkflowIds` are workflowIds already contributed by the legacy or\n * embedded (DB) sources; a code workflow whose id appears there is skipped so a\n * customized DB override wins and its trigger is not double-registered.\n */\nexport function loadCodeTriggers(\n  tenantId: string,\n  organizationId: string,\n  dbBackedWorkflowIds: Set<string>,\n): UnifiedTrigger[] {\n  const triggers: UnifiedTrigger[] = []\n\n  for (const codeDef of getAllCodeWorkflows()) {\n    if (!codeDef.enabled) continue\n    if (dbBackedWorkflowIds.has(codeDef.workflowId)) continue\n\n    const embeddedTriggers = codeDef.definition?.triggers\n    if (!embeddedTriggers || embeddedTriggers.length === 0) continue\n\n    const definitionId = codeWorkflowUuid(codeDef.workflowId)\n    for (const trigger of embeddedTriggers) {\n      if (!trigger.enabled) continue\n\n      triggers.push({\n        id: `code:${codeDef.workflowId}:${trigger.triggerId}`,\n        triggerId: trigger.triggerId,\n        name: trigger.name,\n        description: trigger.description ?? null,\n        eventPattern: trigger.eventPattern,\n        config: (trigger.config ?? null) as WorkflowEventTriggerConfig | null,\n        enabled: trigger.enabled,\n        priority: trigger.priority,\n        workflowDefinitionId: definitionId,\n        workflowId: codeDef.workflowId,\n        workflowVersion: codeDef.version,\n        source: 'code' as const,\n        tenantId,\n        organizationId,\n      })\n    }\n  }\n\n  return triggers\n}\n\n/**\n * Load all enabled triggers for a tenant/organization with caching.\n * Merges legacy (entity), embedded (definition), and code-registry triggers;\n * a DB-backed source for a given workflowId takes precedence over its code\n * trigger so `customize` semantics are preserved.\n */\nexport async function loadTriggersForTenant(\n  em: EntityManager,\n  tenantId: string,\n  organizationId: string,\n  cacheService?: CacheService\n): Promise<UnifiedTrigger[]> {\n  const cacheKey = getCacheKey(tenantId, organizationId)\n  const cache = getTriggerCache()\n\n  // Check in-memory cache\n  const cached = cache.get(cacheKey)\n  if (cached && Date.now() - cached.cachedAt < TRIGGER_CACHE_TTL) {\n    return cached.triggers\n  }\n\n  // Load from both DB sources\n  const [legacyTriggers, embedded] = await Promise.all([\n    loadLegacyTriggers(em, tenantId, organizationId),\n    loadEmbeddedTriggers(em, tenantId, organizationId),\n  ])\n  const embeddedTriggers = embedded.triggers\n\n  // Project code-registry triggers, letting any DB-backed definition for the\n  // same workflowId win (preserves `customize` override semantics \u2014 including\n  // a customization that removed its triggers).\n  const dbBackedWorkflowIds = new Set<string>([\n    ...embedded.workflowIds,\n    ...legacyTriggers.map((t) => t.workflowId),\n  ])\n  const codeTriggers = loadCodeTriggers(tenantId, organizationId, dbBackedWorkflowIds)\n\n  // Merge and sort by priority (higher first)\n  const allTriggers = [...legacyTriggers, ...embeddedTriggers, ...codeTriggers]\n    .sort((a, b) => b.priority - a.priority)\n\n  // Update cache\n  cache.set(cacheKey, {\n    triggers: allTriggers,\n    cachedAt: Date.now(),\n  })\n\n  return allTriggers\n}\n\n/**\n * Invalidate trigger cache for a tenant/organization.\n * Call this when:\n * - Legacy triggers are created/updated/deleted\n * - Workflow definitions with embedded triggers are created/updated/deleted\n */\nexport function invalidateTriggerCache(tenantId: string, organizationId?: string): void {\n  const cache = getTriggerCache()\n  if (organizationId) {\n    // Invalidate specific org\n    const cacheKey = getCacheKey(tenantId, organizationId)\n    cache.delete(cacheKey)\n  } else {\n    // Invalidate all orgs for tenant\n    for (const key of cache.keys()) {\n      if (key.startsWith(`${tenantId}:`)) {\n        cache.delete(key)\n      }\n    }\n  }\n}\n\n// ============================================================================\n// Trigger Matching\n// ============================================================================\n\n/**\n * Find all triggers that match an event.\n */\nexport async function findMatchingTriggers(\n  em: EntityManager,\n  context: EventTriggerContext\n): Promise<UnifiedTrigger[]> {\n  const triggers = await loadTriggersForTenant(\n    em,\n    context.tenantId,\n    context.organizationId\n  )\n\n  return triggers.filter(trigger => {\n    // Check event pattern\n    if (!matchEventPattern(context.eventName, trigger.eventPattern)) {\n      return false\n    }\n\n    // Check filter conditions\n    if (!evaluateFilterConditions(trigger.config?.filterConditions, context.payload)) {\n      return false\n    }\n\n    return true\n  })\n}\n\n// ============================================================================\n// Trigger Processing\n// ============================================================================\n\n// Open debounce windows for triggers configured with `debounceMs`, keyed by\n// tenant/org/trigger/entity and holding the timestamp each window closes at.\n// Parked on globalThis for the same reason as the trigger cache above: the\n// compiled module can be loaded under two import roots (a Next.js server chunk\n// vs. a worker), and a module-local Map would debounce each copy separately \u2014\n// halving the effective window whenever both copies see the same event stream.\n// The state is still per process: a deployment running several app or worker\n// processes debounces independently in each one, so the guard bounds trigger\n// storms per process rather than cluster-wide.\nconst GLOBAL_TRIGGER_DEBOUNCE_KEY = '__openMercatoWorkflowTriggerDebounce__'\n\n// Cap on tracked keys so a long-lived worker cannot grow the Map without bound;\n// mirrors the prune step in query_index's `markAutoReindexScheduled`.\nconst TRIGGER_DEBOUNCE_MAX_KEYS = 5000\n\ntype GlobalWithTriggerDebounce = typeof globalThis & {\n  [GLOBAL_TRIGGER_DEBOUNCE_KEY]?: Map<string, number>\n}\n\nfunction getTriggerDebounceState(): Map<string, number> {\n  const globalScope = globalThis as GlobalWithTriggerDebounce\n  if (!globalScope[GLOBAL_TRIGGER_DEBOUNCE_KEY]) {\n    globalScope[GLOBAL_TRIGGER_DEBOUNCE_KEY] = new Map<string, number>()\n  }\n  return globalScope[GLOBAL_TRIGGER_DEBOUNCE_KEY]\n}\n\n// Entries store their own expiry rather than their start, so pruning never has\n// to assume one shared window length: `debounceMs` is per trigger and ranges\n// from 0 to the validator's one-hour ceiling, and expiring a one-hour window\n// because a 100 ms trigger happened to run the prune would silently reopen it.\nfunction pruneTriggerDebounceState(state: Map<string, number>, now: number): void {\n  if (state.size < TRIGGER_DEBOUNCE_MAX_KEYS) return\n\n  for (const [key, expiresAt] of state) {\n    if (expiresAt <= now) state.delete(key)\n  }\n\n  if (state.size < TRIGGER_DEBOUNCE_MAX_KEYS) return\n\n  const oldestKey = state.keys().next().value\n  if (oldestKey !== undefined) state.delete(oldestKey)\n}\n\n/**\n * Resolve the debounce window a trigger/event pair shares, or `null` when the\n * trigger has no debounce configured.\n *\n * The key includes the event payload's `id` so the window is per trigger *and*\n * per entity \u2014 rapid updates to two different records still start two\n * workflows. Tenant and organization are part of the key because code-defined\n * triggers reuse one id across every tenant.\n */\nfunction resolveTriggerDebounceWindow(\n  trigger: UnifiedTrigger,\n  payload: Record<string, unknown>,\n): { key: string; debounceMs: number } | null {\n  const debounceMs = trigger.config?.debounceMs\n\n  if (!debounceMs || debounceMs <= 0) return null\n\n  // Accept numeric ids too: falling back to the shared `*` bucket would collapse\n  // every record under one key and suppress workflows for unrelated entities.\n  const rawPayloadId = payload?.id\n  const payloadId =\n    typeof rawPayloadId === 'string' ? rawPayloadId\n    : typeof rawPayloadId === 'number' ? String(rawPayloadId)\n    : null\n\n  return { key: `${trigger.tenantId}:${trigger.organizationId}:${trigger.id}:${payloadId ?? '*'}`, debounceMs }\n}\n\n/**\n * Check whether this event falls inside the trigger's debounce window, opening\n * a fresh window when it does not.\n *\n * Leading-edge semantics: the first event fires the workflow and opens the\n * window; repeats inside it are dropped. This matches the two other\n * `debounceMs` implementations in the codebase (`markAutoReindexScheduled` in\n * query_index, `NotificationDispatcher.shouldDebounce` in the UI package) and\n * needs no timer that would have to survive a process restart.\n *\n * The window is opened here rather than after the workflow starts so that\n * nothing awaits between reading and writing it \u2014 two events racing through\n * `processEventTriggers` must not both observe an empty window. An attempt that\n * does not go on to start a workflow closes its window again via\n * `releaseTriggerDebounceWindow`, so only a real start keeps one open.\n */\nfunction shouldDebounceTrigger(trigger: UnifiedTrigger, payload: Record<string, unknown>): boolean {\n  const debounceWindow = resolveTriggerDebounceWindow(trigger, payload)\n\n  if (!debounceWindow) return false\n\n  const state = getTriggerDebounceState()\n  const now = Date.now()\n  const expiresAt = state.get(debounceWindow.key)\n\n  if (expiresAt !== undefined && now < expiresAt) return true\n\n  pruneTriggerDebounceState(state, now)\n  state.delete(debounceWindow.key)\n  state.set(debounceWindow.key, now + debounceWindow.debounceMs)\n  return false\n}\n\n/**\n * Close a window `shouldDebounceTrigger` opened for an event that never started\n * a workflow \u2014 the concurrency limit blocked it, or mapping/starting threw.\n * Leaving it open would let one blocked or failed attempt suppress every later\n * event for the same record until the window elapsed, which at the validator's\n * one-hour ceiling means an hour of silently dropped starts.\n */\nfunction releaseTriggerDebounceWindow(trigger: UnifiedTrigger, payload: Record<string, unknown>): void {\n  const debounceWindow = resolveTriggerDebounceWindow(trigger, payload)\n\n  if (!debounceWindow) return\n\n  getTriggerDebounceState().delete(debounceWindow.key)\n}\n\n/**\n * Clear all debounce windows. Test-only seam \u2014 production code relies on the\n * windows expiring on their own.\n */\nexport function resetTriggerDebounceState(): void {\n  getTriggerDebounceState().clear()\n}\n\n/**\n * Check if max concurrent instances limit is reached.\n */\nasync function checkConcurrencyLimit(\n  em: EntityManager,\n  trigger: UnifiedTrigger\n): Promise<boolean> {\n  const maxInstances = trigger.config?.maxConcurrentInstances\n\n  if (!maxInstances) return true // No limit\n\n  // Count running instances for this trigger's workflow definition\n  const runningCount = await em.count(WorkflowInstance, {\n    definitionId: trigger.workflowDefinitionId,\n    status: { $in: ['RUNNING', 'WAITING_FOR_ACTIVITIES'] },\n    tenantId: trigger.tenantId,\n    organizationId: trigger.organizationId,\n    deletedAt: null,\n  })\n\n  return runningCount < maxInstances\n}\n\n/**\n * Process all matching triggers for an event and start workflows.\n */\nexport async function processEventTriggers(\n  em: EntityManager,\n  container: AwilixContainer,\n  context: EventTriggerContext\n): Promise<ProcessTriggersResult> {\n  const result: ProcessTriggersResult = {\n    triggered: 0,\n    skipped: 0,\n    errors: [],\n    instances: [],\n  }\n\n  // Find matching triggers\n  const triggers = await findMatchingTriggers(em, context)\n\n  if (triggers.length === 0) {\n    return result\n  }\n\n  // Process each trigger (definitions already validated during loading)\n  for (const trigger of triggers) {\n    let startedWorkflow = false\n    try {\n      // Check debounce window before any DB work\n      if (shouldDebounceTrigger(trigger, context.payload)) {\n        logger.debug('Skipping trigger: inside debounce window', { triggerId: trigger.id, triggerName: trigger.name, debounceMs: trigger.config?.debounceMs })\n        result.skipped++\n        continue\n      }\n\n      // Check concurrency limit\n      const canStart = await checkConcurrencyLimit(em, trigger)\n      if (!canStart) {\n        logger.debug('Skipping trigger: max concurrent instances reached', { triggerId: trigger.id, triggerName: trigger.name })\n        releaseTriggerDebounceWindow(trigger, context.payload)\n        result.skipped++\n        continue\n      }\n\n      // Map event payload to workflow context\n      const mappedContext = mapEventToContext(trigger.config?.contextMapping, context.payload)\n\n      // Extract entity info from payload for metadata\n      const payloadId = context.payload?.id as string | undefined\n      const payloadEntityType = context.payload?.entityType as string | undefined\n      const actorUserId = readEventActorUserId(context.payload)\n\n      // Include event metadata and payload in context\n      const initialContext = {\n        // Include raw event payload fields (e.g., id, organizationId, tenantId)\n        ...context.payload,\n        // Override with explicit mappings if provided\n        ...mappedContext,\n        __trigger: {\n          triggerId: trigger.id,\n          triggerName: trigger.name,\n          eventName: context.eventName,\n          eventPayload: context.payload,\n          triggeredAt: new Date().toISOString(),\n          source: trigger.source,\n        },\n      }\n\n      // Start workflow\n      const instance = await startWorkflow(em, {\n        workflowId: trigger.workflowId,\n        version: trigger.workflowVersion,\n        initialContext,\n        metadata: {\n          initiatedBy: actorUserId ?? `trigger:${trigger.id}`,\n          // Include entityId and entityType for widget discovery\n          entityId: payloadId,\n          entityType: payloadEntityType || trigger.config?.entityType,\n          labels: {\n            trigger_id: trigger.id,\n            trigger_name: trigger.name,\n            event_name: context.eventName,\n            trigger_source: trigger.source,\n          },\n        },\n        tenantId: context.tenantId,\n        organizationId: context.organizationId,\n      })\n\n      startedWorkflow = true\n      result.triggered++\n      result.instances.push({\n        triggerId: trigger.id,\n        instanceId: instance.id,\n      })\n\n      // Execute workflow asynchronously (don't wait)\n      executeWorkflow(\n        em.fork(),\n        container,\n        instance.id,\n        actorUserId ? { userId: actorUserId } : undefined\n      ).catch(err => {\n        logger.error('Error executing workflow', { instanceId: instance.id, err })\n      })\n\n    } catch (error) {\n      const errorMessage = error instanceof Error ? error.message : String(error)\n      logger.error('Error processing trigger', { triggerId: trigger.id, triggerName: trigger.name, err: error })\n      if (!startedWorkflow) releaseTriggerDebounceWindow(trigger, context.payload)\n      result.errors.push({\n        triggerId: trigger.id,\n        error: errorMessage,\n      })\n    }\n  }\n\n  return result\n}\n"],
+  "mappings": "AAWA,SAAS,yBAAyB;AAClC,SAAS,0BAA0B;AACnC,SAAS,uBAAuB;AAChC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAKK;AACP,SAAS,eAAe,uBAAuB;AAC/C,SAAS,2BAA2B;AACpC,SAAS,wBAAwB;AACjC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,gBAAgB,CAAC;AA8C7E,MAAM,oBAAoB,IAAI,KAAK;AAEnC,SAAS,qBAAqB,SAAiD;AAC7E,QAAM,YAAY,QAAQ,UAAU,QAAQ;AAC5C,MAAI,OAAO,cAAc,SAAU,QAAO;AAC1C,QAAM,UAAU,UAAU,KAAK;AAC/B,SAAO,QAAQ,SAAS,KAAK,CAAC,QAAQ,WAAW,UAAU,IAAI,UAAU;AAC3E;AAUA,MAAM,oCAAoC;AAC1C,MAAM,kCAAkC;AAKxC,SAAS,eAAe,KAAc,MAAuB;AAC3D,MAAI,QAAQ,QAAQ,QAAQ,OAAW,QAAO;AAE9C,QAAM,QAAQ,KAAK,MAAM,GAAG;AAC5B,MAAI,UAAmB;AAEvB,aAAW,QAAQ,OAAO;AACxB,QAAI,YAAY,QAAQ,YAAY,OAAW,QAAO;AACtD,QAAI,OAAO,YAAY,SAAU,QAAO;AACxC,cAAW,QAAoC,IAAI;AAAA,EACrD;AAEA,SAAO;AACT;AAEA,SAAS,iBAAiB,SAAiB,OAA8B;AACvE,QAAM,OAAO,QAAQ,KAAK;AAC1B,MAAI,SAAS,OAAO,SAAS,OAAO,SAAS,IAAK,QAAO;AACzD,MAAI,SAAS,IAAK,QAAO;AAEzB,QAAM,aAAa,QAAQ,QAAQ,KAAK,QAAQ,CAAC;AACjD,MAAI,eAAe,GAAI,QAAO;AAE9B,QAAM,OAAO,QAAQ,MAAM,QAAQ,GAAG,UAAU;AAChD,SAAO,uBAAuB,KAAK,IAAI,IAAI,aAAa;AAC1D;AAOA,SAAS,2BAA2B,SAA0B;AAC5D,MAAI,QAAQ,SAAS,kCAAmC,QAAO;AAE/D,QAAM,aAAgC,CAAC,EAAE,gBAAgB,OAAO,eAAe,MAAM,CAAC;AACtF,MAAI,cAAc;AAClB,MAAI,kBAA0C;AAC9C,MAAI,wBAAwB;AAK5B,WAAS,QAAQ,GAAG,QAAQ,QAAQ,QAAQ,SAAS,GAAG;AACtD,UAAM,OAAO,QAAQ,KAAK;AAE1B,QAAI,SAAS,MAAM;AACjB,YAAM,OAAO,QAAQ,QAAQ,CAAC;AAC9B,UAAI,CAAC,gBAAgB,QAAQ,KAAK,QAAQ,EAAE,KAAM,SAAS,OAAO,QAAQ,QAAQ,CAAC,MAAM,MAAO;AAC9F,eAAO;AAAA,MACT;AACA,eAAS;AACT,wBAAkB;AAClB,8BAAwB;AACxB;AAAA,IACF;AAEA,QAAI,aAAa;AACf,UAAI,SAAS,KAAK;AAChB,sBAAc;AACd,gCAAwB;AAAA,MAC1B;AACA,wBAAkB;AAClB;AAAA,IACF;AAEA,QAAI,SAAS,KAAK;AAChB,oBAAc;AACd,wBAAkB;AAClB,8BAAwB;AACxB;AAAA,IACF;AAEA,QAAI,SAAS,KAAK;AAChB,UAAI,QAAQ,QAAQ,CAAC,MAAM,KAAK;AAC9B,YAAI,QAAQ,QAAQ,CAAC,MAAM,IAAK,QAAO;AACvC,iBAAS;AAAA,MACX;AAEA,iBAAW,KAAK,EAAE,gBAAgB,OAAO,eAAe,MAAM,CAAC;AAC/D,wBAAkB;AAClB,8BAAwB;AACxB;AAAA,IACF;AAEA,QAAI,SAAS,KAAK;AAChB,UAAI,WAAW,WAAW,EAAG,QAAO;AACpC,wBAAkB,WAAW,IAAI;AACjC,8BAAwB;AACxB;AAAA,IACF;AAEA,QAAI,SAAS,KAAK;AAChB,iBAAW,WAAW,SAAS,CAAC,EAAE,iBAAiB;AACnD,wBAAkB;AAClB,8BAAwB;AACxB;AAAA,IACF;AAEA,UAAM,gBAAgB,iBAAiB,SAAS,KAAK;AACrD,QAAI,kBAAkB,MAAM;AAC1B,UAAI,sBAAuB,QAAO;AAClC,UAAI,iBAAiB,kBAAkB,iBAAiB,cAAe,QAAO;AAE9E,iBAAW,WAAW,SAAS,CAAC,EAAE,gBAAgB;AAClD,wBAAkB;AAClB,8BAAwB;AACxB,cAAQ;AAER,UAAI,QAAQ,QAAQ,CAAC,MAAM,KAAK;AAC9B,iBAAS;AAAA,MACX;AAEA;AAAA,IACF;AAEA,sBAAkB;AAClB,4BAAwB;AAAA,EAC1B;AAEA,SAAO,WAAW,WAAW,KAAK,CAAC;AACrC;AAKA,SAAS,kBAAkB,WAAmC,SAA2C;AACvG,QAAM,QAAQ,eAAe,SAAS,UAAU,KAAK;AACrD,QAAM,WAAW,UAAU;AAE3B,UAAQ,UAAU,UAAU;AAAA,IAC1B,KAAK;AACH,aAAO,UAAU;AAAA,IAEnB,KAAK;AACH,aAAO,UAAU;AAAA,IAEnB,KAAK;AACH,aAAO,OAAO,UAAU,YAAY,OAAO,aAAa,YAAY,QAAQ;AAAA,IAE9E,KAAK;AACH,aAAO,OAAO,UAAU,YAAY,OAAO,aAAa,YAAY,SAAS;AAAA,IAE/E,KAAK;AACH,aAAO,OAAO,UAAU,YAAY,OAAO,aAAa,YAAY,QAAQ;AAAA,IAE9E,KAAK;AACH,aAAO,OAAO,UAAU,YAAY,OAAO,aAAa,YAAY,SAAS;AAAA,IAE/E,KAAK;AACH,UAAI,OAAO,UAAU,YAAY,OAAO,aAAa,UAAU;AAC7D,eAAO,MAAM,SAAS,QAAQ;AAAA,MAChC;AACA,UAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,eAAO,MAAM,SAAS,QAAQ;AAAA,MAChC;AACA,aAAO;AAAA,IAET,KAAK;AACH,aAAO,OAAO,UAAU,YAAY,OAAO,aAAa,YAAY,MAAM,WAAW,QAAQ;AAAA,IAE/F,KAAK;AACH,aAAO,OAAO,UAAU,YAAY,OAAO,aAAa,YAAY,MAAM,SAAS,QAAQ;AAAA,IAE7F,KAAK;AACH,aAAO,MAAM,QAAQ,QAAQ,KAAK,SAAS,SAAS,KAAK;AAAA,IAE3D,KAAK;AACH,aAAO,MAAM,QAAQ,QAAQ,KAAK,CAAC,SAAS,SAAS,KAAK;AAAA,IAE5D,KAAK;AACH,aAAO,UAAU,UAAa,UAAU;AAAA,IAE1C,KAAK;AACH,aAAO,UAAU,UAAa,UAAU;AAAA,IAE1C,KAAK;AACH,UAAI,OAAO,UAAU,YAAY,OAAO,aAAa,SAAU,QAAO;AACtE,UAAI,MAAM,SAAS,gCAAiC,QAAO;AAC3D,UAAI,CAAC,2BAA2B,QAAQ,EAAG,QAAO;AAClD;AACE,cAAM,SAAS,gBAAgB,UAAU,OAAO;AAAA,UAC9C,kBAAkB;AAAA,UAClB,gBAAgB;AAAA,QAClB,CAAC;AACD,eAAO,OAAO,KAAK,OAAO,UAAU;AAAA,MACtC;AAAA,IAEF;AACE,aAAO;AAAA,EACX;AACF;AAMO,SAAS,yBACd,YACA,SACS;AACT,MAAI,CAAC,cAAc,WAAW,WAAW,EAAG,QAAO;AAEnD,SAAO,WAAW,MAAM,eAAa,kBAAkB,WAAW,OAAO,CAAC;AAC5E;AASO,SAAS,kBACd,SACA,SACyB;AACzB,QAAM,UAAmC,CAAC;AAE1C,MAAI,CAAC,WAAW,QAAQ,WAAW,EAAG,QAAO;AAE7C,aAAW,QAAQ,SAAS;AAC1B,UAAM,QAAQ,eAAe,SAAS,KAAK,gBAAgB;AAC3D,YAAQ,KAAK,SAAS,IAAI,UAAU,SAAY,QAAQ,KAAK;AAAA,EAC/D;AAEA,SAAO;AACT;AAeA,MAAM,2BAA2B;AAEjC,SAAS,kBAA+C;AACtD,QAAM,WAAY,WAAmB,wBAAwB;AAG7D,MAAI,SAAU,QAAO;AACrB,QAAM,UAAU,oBAAI,IAA4B;AAC/C,EAAC,WAAmB,wBAAwB,IAAI;AACjD,SAAO;AACT;AAEA,SAAS,YAAY,UAAkB,gBAAgC;AACrE,SAAO,GAAG,QAAQ,IAAI,cAAc;AACtC;AAMA,eAAe,mBACb,IACA,UACA,gBAC2B;AAC3B,QAAM,aAAa;AACnB,QAAM,iBAAiB,MAAM;AAAA,IAC3B;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT,WAAW;AAAA,IACb;AAAA,IACA;AAAA,MACE,SAAS,EAAE,UAAU,QAAQ,WAAW,MAAM;AAAA,IAChD;AAAA,IACA,EAAE,UAAU,eAAe;AAAA,EAC7B;AAGA,QAAM,gBAAgB,CAAC,GAAG,IAAI,IAAI,eAAe,IAAI,OAAK,EAAE,oBAAoB,CAAC,CAAC;AAClF,QAAM,cAAc,cAAc,SAAS,IAAI,MAAM,mBAAmB,YAAY,oBAAoB;AAAA,IACtG,IAAI,EAAE,KAAK,cAAc;AAAA,IACzB;AAAA,IACA;AAAA,IACA,SAAS;AAAA,IACT,WAAW;AAAA,EACb,GAAG,CAAC,GAAG,EAAE,UAAU,eAAe,CAAC,IAAI,CAAC;AACxC,QAAM,gBAAgB,IAAI,IAAI,YAAY,IAAI,OAAK,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AAE7D,SAAO,eACJ,OAAO,OAAK,cAAc,IAAI,EAAE,oBAAoB,CAAC,EACrD,IAAI,OAAK;AACR,UAAM,MAAM,cAAc,IAAI,EAAE,oBAAoB;AACpD,WAAO;AAAA,MACL,IAAI,EAAE;AAAA,MACN,WAAW,EAAE;AAAA,MACb,MAAM,EAAE;AAAA,MACR,aAAa,EAAE;AAAA,MACf,cAAc,EAAE;AAAA,MAChB,QAAQ,EAAE,UAAU;AAAA,MACpB,SAAS,EAAE;AAAA,MACX,UAAU,EAAE;AAAA,MACZ,sBAAsB,EAAE;AAAA,MACxB,YAAY,IAAI;AAAA,MAChB,iBAAiB,IAAI;AAAA,MACrB,QAAQ;AAAA,MACR,UAAU,EAAE;AAAA,MACZ,gBAAgB,EAAE;AAAA,IACpB;AAAA,EACF,CAAC;AACL;AAkBA,eAAe,qBACb,IACA,UACA,gBACmE;AACnE,QAAM,aAAa;AAInB,QAAM,cAAc,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA;AAAA,MACA,WAAW;AAAA,IACb;AAAA,IACA,CAAC;AAAA,IACD,EAAE,UAAU,eAAe;AAAA,EAC7B;AAEA,QAAM,WAA6B,CAAC;AACpC,QAAM,cAAc,oBAAI,IAAY;AACpC,QAAM,mBAAmB,oBAAI,IAAgC;AAE7D,aAAW,OAAO,aAAa;AAC7B,gBAAY,IAAI,IAAI,UAAU;AAC9B,QAAI,CAAC,IAAI,WAAW,IAAI,cAAc,YAAa;AAEnD,UAAM,WAAW,iBAAiB,IAAI,IAAI,UAAU;AACpD,QAAI,CAAC,YAAY,IAAI,UAAU,SAAS,SAAS;AAC/C,uBAAiB,IAAI,IAAI,YAAY,GAAG;AAAA,IAC1C;AAAA,EACF;AAEA,aAAW,OAAO,iBAAiB,OAAO,GAAG;AAC3C,UAAM,mBAAmB,IAAI,YAAY;AACzC,QAAI,CAAC,oBAAoB,iBAAiB,WAAW,EAAG;AAExD,eAAW,WAAW,kBAAkB;AACtC,UAAI,CAAC,QAAQ,QAAS;AAEtB,eAAS,KAAK;AAAA,QACZ,IAAI,GAAG,IAAI,EAAE,IAAI,QAAQ,SAAS;AAAA,QAClC,WAAW,QAAQ;AAAA,QACnB,MAAM,QAAQ;AAAA,QACd,aAAa,QAAQ,eAAe;AAAA,QACpC,cAAc,QAAQ;AAAA,QACtB,QAAQ,QAAQ,UAAU;AAAA,QAC1B,SAAS,QAAQ;AAAA,QACjB,UAAU,QAAQ;AAAA,QAClB,sBAAsB,IAAI;AAAA,QAC1B,YAAY,IAAI;AAAA,QAChB,iBAAiB,IAAI;AAAA,QACrB,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO,EAAE,UAAU,YAAY;AACjC;AAkBO,SAAS,iBACd,UACA,gBACA,qBACkB;AAClB,QAAM,WAA6B,CAAC;AAEpC,aAAW,WAAW,oBAAoB,GAAG;AAC3C,QAAI,CAAC,QAAQ,QAAS;AACtB,QAAI,oBAAoB,IAAI,QAAQ,UAAU,EAAG;AAEjD,UAAM,mBAAmB,QAAQ,YAAY;AAC7C,QAAI,CAAC,oBAAoB,iBAAiB,WAAW,EAAG;AAExD,UAAM,eAAe,iBAAiB,QAAQ,UAAU;AACxD,eAAW,WAAW,kBAAkB;AACtC,UAAI,CAAC,QAAQ,QAAS;AAEtB,eAAS,KAAK;AAAA,QACZ,IAAI,QAAQ,QAAQ,UAAU,IAAI,QAAQ,SAAS;AAAA,QACnD,WAAW,QAAQ;AAAA,QACnB,MAAM,QAAQ;AAAA,QACd,aAAa,QAAQ,eAAe;AAAA,QACpC,cAAc,QAAQ;AAAA,QACtB,QAAS,QAAQ,UAAU;AAAA,QAC3B,SAAS,QAAQ;AAAA,QACjB,UAAU,QAAQ;AAAA,QAClB,sBAAsB;AAAA,QACtB,YAAY,QAAQ;AAAA,QACpB,iBAAiB,QAAQ;AAAA,QACzB,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO;AACT;AAQA,eAAsB,sBACpB,IACA,UACA,gBACA,cAC2B;AAC3B,QAAM,WAAW,YAAY,UAAU,cAAc;AACrD,QAAM,QAAQ,gBAAgB;AAG9B,QAAM,SAAS,MAAM,IAAI,QAAQ;AACjC,MAAI,UAAU,KAAK,IAAI,IAAI,OAAO,WAAW,mBAAmB;AAC9D,WAAO,OAAO;AAAA,EAChB;AAGA,QAAM,CAAC,gBAAgB,QAAQ,IAAI,MAAM,QAAQ,IAAI;AAAA,IACnD,mBAAmB,IAAI,UAAU,cAAc;AAAA,IAC/C,qBAAqB,IAAI,UAAU,cAAc;AAAA,EACnD,CAAC;AACD,QAAM,mBAAmB,SAAS;AAKlC,QAAM,sBAAsB,oBAAI,IAAY;AAAA,IAC1C,GAAG,SAAS;AAAA,IACZ,GAAG,eAAe,IAAI,CAAC,MAAM,EAAE,UAAU;AAAA,EAC3C,CAAC;AACD,QAAM,eAAe,iBAAiB,UAAU,gBAAgB,mBAAmB;AAGnF,QAAM,cAAc,CAAC,GAAG,gBAAgB,GAAG,kBAAkB,GAAG,YAAY,EACzE,KAAK,CAAC,GAAG,MAAM,EAAE,WAAW,EAAE,QAAQ;AAGzC,QAAM,IAAI,UAAU;AAAA,IAClB,UAAU;AAAA,IACV,UAAU,KAAK,IAAI;AAAA,EACrB,CAAC;AAED,SAAO;AACT;AAQO,SAAS,uBAAuB,UAAkB,gBAA+B;AACtF,QAAM,QAAQ,gBAAgB;AAC9B,MAAI,gBAAgB;AAElB,UAAM,WAAW,YAAY,UAAU,cAAc;AACrD,UAAM,OAAO,QAAQ;AAAA,EACvB,OAAO;AAEL,eAAW,OAAO,MAAM,KAAK,GAAG;AAC9B,UAAI,IAAI,WAAW,GAAG,QAAQ,GAAG,GAAG;AAClC,cAAM,OAAO,GAAG;AAAA,MAClB;AAAA,IACF;AAAA,EACF;AACF;AASA,eAAsB,qBACpB,IACA,SAC2B;AAC3B,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AAEA,SAAO,SAAS,OAAO,aAAW;AAEhC,QAAI,CAAC,kBAAkB,QAAQ,WAAW,QAAQ,YAAY,GAAG;AAC/D,aAAO;AAAA,IACT;AAGA,QAAI,CAAC,yBAAyB,QAAQ,QAAQ,kBAAkB,QAAQ,OAAO,GAAG;AAChF,aAAO;AAAA,IACT;AAEA,WAAO;AAAA,EACT,CAAC;AACH;AAeA,MAAM,8BAA8B;AAIpC,MAAM,4BAA4B;AAMlC,SAAS,0BAA+C;AACtD,QAAM,cAAc;AACpB,MAAI,CAAC,YAAY,2BAA2B,GAAG;AAC7C,gBAAY,2BAA2B,IAAI,oBAAI,IAAoB;AAAA,EACrE;AACA,SAAO,YAAY,2BAA2B;AAChD;AAMA,SAAS,0BAA0B,OAA4B,KAAmB;AAChF,MAAI,MAAM,OAAO,0BAA2B;AAE5C,aAAW,CAAC,KAAK,SAAS,KAAK,OAAO;AACpC,QAAI,aAAa,IAAK,OAAM,OAAO,GAAG;AAAA,EACxC;AAEA,MAAI,MAAM,OAAO,0BAA2B;AAE5C,QAAM,YAAY,MAAM,KAAK,EAAE,KAAK,EAAE;AACtC,MAAI,cAAc,OAAW,OAAM,OAAO,SAAS;AACrD;AAWA,SAAS,6BACP,SACA,SAC4C;AAC5C,QAAM,aAAa,QAAQ,QAAQ;AAEnC,MAAI,CAAC,cAAc,cAAc,EAAG,QAAO;AAI3C,QAAM,eAAe,SAAS;AAC9B,QAAM,YACJ,OAAO,iBAAiB,WAAW,eACjC,OAAO,iBAAiB,WAAW,OAAO,YAAY,IACtD;AAEJ,SAAO,EAAE,KAAK,GAAG,QAAQ,QAAQ,IAAI,QAAQ,cAAc,IAAI,QAAQ,EAAE,IAAI,aAAa,GAAG,IAAI,WAAW;AAC9G;AAkBA,SAAS,sBAAsB,SAAyB,SAA2C;AACjG,QAAM,iBAAiB,6BAA6B,SAAS,OAAO;AAEpE,MAAI,CAAC,eAAgB,QAAO;AAE5B,QAAM,QAAQ,wBAAwB;AACtC,QAAM,MAAM,KAAK,IAAI;AACrB,QAAM,YAAY,MAAM,IAAI,eAAe,GAAG;AAE9C,MAAI,cAAc,UAAa,MAAM,UAAW,QAAO;AAEvD,4BAA0B,OAAO,GAAG;AACpC,QAAM,OAAO,eAAe,GAAG;AAC/B,QAAM,IAAI,eAAe,KAAK,MAAM,eAAe,UAAU;AAC7D,SAAO;AACT;AASA,SAAS,6BAA6B,SAAyB,SAAwC;AACrG,QAAM,iBAAiB,6BAA6B,SAAS,OAAO;AAEpE,MAAI,CAAC,eAAgB;AAErB,0BAAwB,EAAE,OAAO,eAAe,GAAG;AACrD;AAMO,SAAS,4BAAkC;AAChD,0BAAwB,EAAE,MAAM;AAClC;AAKA,eAAe,sBACb,IACA,SACkB;AAClB,QAAM,eAAe,QAAQ,QAAQ;AAErC,MAAI,CAAC,aAAc,QAAO;AAG1B,QAAM,eAAe,MAAM,GAAG,MAAM,kBAAkB;AAAA,IACpD,cAAc,QAAQ;AAAA,IACtB,QAAQ,EAAE,KAAK,CAAC,WAAW,wBAAwB,EAAE;AAAA,IACrD,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ;AAAA,IACxB,WAAW;AAAA,EACb,CAAC;AAED,SAAO,eAAe;AACxB;AAKA,eAAsB,qBACpB,IACA,WACA,SACgC;AAChC,QAAM,SAAgC;AAAA,IACpC,WAAW;AAAA,IACX,SAAS;AAAA,IACT,QAAQ,CAAC;AAAA,IACT,WAAW,CAAC;AAAA,EACd;AAGA,QAAM,WAAW,MAAM,qBAAqB,IAAI,OAAO;AAEvD,MAAI,SAAS,WAAW,GAAG;AACzB,WAAO;AAAA,EACT;AAGA,aAAW,WAAW,UAAU;AAC9B,QAAI,kBAAkB;AACtB,QAAI;AAEF,UAAI,sBAAsB,SAAS,QAAQ,OAAO,GAAG;AACnD,eAAO,MAAM,4CAA4C,EAAE,WAAW,QAAQ,IAAI,aAAa,QAAQ,MAAM,YAAY,QAAQ,QAAQ,WAAW,CAAC;AACrJ,eAAO;AACP;AAAA,MACF;AAGA,YAAM,WAAW,MAAM,sBAAsB,IAAI,OAAO;AACxD,UAAI,CAAC,UAAU;AACb,eAAO,MAAM,sDAAsD,EAAE,WAAW,QAAQ,IAAI,aAAa,QAAQ,KAAK,CAAC;AACvH,qCAA6B,SAAS,QAAQ,OAAO;AACrD,eAAO;AACP;AAAA,MACF;AAGA,YAAM,gBAAgB,kBAAkB,QAAQ,QAAQ,gBAAgB,QAAQ,OAAO;AAGvF,YAAM,YAAY,QAAQ,SAAS;AACnC,YAAM,oBAAoB,QAAQ,SAAS;AAC3C,YAAM,cAAc,qBAAqB,QAAQ,OAAO;AAGxD,YAAM,iBAAiB;AAAA;AAAA,QAErB,GAAG,QAAQ;AAAA;AAAA,QAEX,GAAG;AAAA,QACH,WAAW;AAAA,UACT,WAAW,QAAQ;AAAA,UACnB,aAAa,QAAQ;AAAA,UACrB,WAAW,QAAQ;AAAA,UACnB,cAAc,QAAQ;AAAA,UACtB,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,UACpC,QAAQ,QAAQ;AAAA,QAClB;AAAA,MACF;AAGA,YAAM,WAAW,MAAM,cAAc,IAAI;AAAA,QACvC,YAAY,QAAQ;AAAA,QACpB,SAAS,QAAQ;AAAA,QACjB;AAAA,QACA,UAAU;AAAA,UACR,aAAa,eAAe,WAAW,QAAQ,EAAE;AAAA;AAAA,UAEjD,UAAU;AAAA,UACV,YAAY,qBAAqB,QAAQ,QAAQ;AAAA,UACjD,QAAQ;AAAA,YACN,YAAY,QAAQ;AAAA,YACpB,cAAc,QAAQ;AAAA,YACtB,YAAY,QAAQ;AAAA,YACpB,gBAAgB,QAAQ;AAAA,UAC1B;AAAA,QACF;AAAA,QACA,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ;AAAA,MAC1B,CAAC;AAED,wBAAkB;AAClB,aAAO;AACP,aAAO,UAAU,KAAK;AAAA,QACpB,WAAW,QAAQ;AAAA,QACnB,YAAY,SAAS;AAAA,MACvB,CAAC;AAGD;AAAA,QACE,GAAG,KAAK;AAAA,QACR;AAAA,QACA,SAAS;AAAA,QACT,cAAc,EAAE,QAAQ,YAAY,IAAI;AAAA,MAC1C,EAAE,MAAM,SAAO;AACb,eAAO,MAAM,4BAA4B,EAAE,YAAY,SAAS,IAAI,IAAI,CAAC;AAAA,MAC3E,CAAC;AAAA,IAEH,SAAS,OAAO;AACd,YAAM,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC1E,aAAO,MAAM,4BAA4B,EAAE,WAAW,QAAQ,IAAI,aAAa,QAAQ,MAAM,KAAK,MAAM,CAAC;AACzG,UAAI,CAAC,gBAAiB,8BAA6B,SAAS,QAAQ,OAAO;AAC3E,aAAO,OAAO,KAAK;AAAA,QACjB,WAAW,QAAQ;AAAA,QACnB,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO;AACT;",
   "names": []
 }

package/dist/modules/workflows/lib/step-handler.js

@@ -1124,15 +1124,15 @@ function mapOutputData(childContext, mapping) {
   return Object.keys(result).length > 0 ? result : childContext;
 }
 function mapSubWorkflowOutput(childContext, outputMapping, ioContract) {
-  let outputData = mapOutputData(childContext, outputMapping || {});
+  let childOutput = childContext;
   if (ioContract?.outputs?.length) {
-    const { coerced, errors } = validateAgainstPorts(outputData, ioContract.outputs);
+    const { coerced, errors } = validateAgainstPorts(childContext, ioContract.outputs);
     if (errors.length > 0) {
       return { error: `Sub-workflow output validation failed: ${errors.map((e) => e.message).join("; ")}` };
     }
-    outputData = coerced;
+    childOutput = coerced;
   }
-  return { outputData };
+  return { outputData: mapOutputData(childOutput, outputMapping || {}) };
 }
 export {
   StepExecutionError,