@continuous-excellence/ze-great-dashboard-aws 0.31.28 → 0.31.30

package/dist/cli.js

@@ -86,6 +86,28 @@ var positionSchema = z2.union([
 ]);
 var panelDensities = ["auto", "comfortable", "compact"];
 var panelDensitySchema = z2.enum(panelDensities);
+var githubActionsBuildEvents = [
+  "push",
+  "pull_request",
+  "pull_request_target",
+  "pull_request_review",
+  "pull_request_review_comment",
+  "workflow_dispatch",
+  "workflow_run",
+  "merge_group"
+];
+var githubActionsBuildEventSchema = z2.enum(githubActionsBuildEvents);
+var githubActionsBuildEventsSchema = z2.array(githubActionsBuildEventSchema).min(1).superRefine((events, ctx) => {
+  events.forEach((event, index) => {
+    if (events.indexOf(event) !== index)
+      ctx.addIssue({
+        code: "custom",
+        path: [index],
+        message: `duplicate build event "${event}"`,
+        params: { constraint: "Use each build event at most once." }
+      });
+  });
+});
 var attentionTreatments = ["beacon", "alarm", "steady"];
 var attentionTreatmentSchema = z2.enum(attentionTreatments);
 var httpValueJsonPathSchema = z2.string().regex(/^\$(?:\.[A-Za-z_][A-Za-z0-9_]*|\[\d+\])*$/, "must be a simple JSON path");
@@ -146,7 +168,9 @@ var panelSchema = z2.looseObject({
   /** Small, deliberate JSON path subset: $.version, $.deployment.version, or $.response.docs[0].latestVersion. */
   json_path: httpValueJsonPathSchema.optional(),
   /** Up to four independently fetched source-agnostic readings in one visual panel. */
-  facts: httpValueGroupedPanelSchema.shape.facts.optional()
+  facts: httpValueGroupedPanelSchema.shape.facts.optional(),
+  /** Optional GitHub Actions-only restriction on which workflow triggers count as build evidence. */
+  build_events: githubActionsBuildEventsSchema.optional()
 }).superRefine((panel, ctx) => {
   if ("display" in panel) {
     ctx.addIssue({
@@ -388,6 +412,16 @@ var boardConfigSchema = z2.object({
   for (const [boardName, board] of Object.entries(config.boards)) {
     board.panels.forEach((panel, panelIndex) => {
       const source = panel.source ? config.sources[panel.source] : void 0;
+      if (panel.build_events !== void 0 && (panel.type !== "pull-request-health" || source?.type !== "github-actions")) {
+        ctx.addIssue({
+          code: "custom",
+          path: ["boards", boardName, "panels", panelIndex, "build_events"],
+          message: "build_events is available only on pull-request-health panels using a github-actions source",
+          params: {
+            constraint: "Configure build_events only for GitHub Actions pull-request health panels."
+          }
+        });
+      }
       if (panel.type !== "pipeline-status" || source?.type !== "azure-devops") return;
       if (typeof panel.pipeline !== "number" || !Number.isInteger(panel.pipeline) || panel.pipeline <= 0) {
         ctx.addIssue({
@@ -656,7 +690,8 @@ var pullRequestHealthPanelSchema = z7.object({
       branch_prefixes: z7.array(z7.string().min(1)).min(1)
     })
   ).min(1),
-  build_workflow: z7.string().min(1)
+  build_workflow: z7.string().min(1),
+  build_events: githubActionsBuildEventsSchema.optional()
 });
 var runSchema = z7.object({
   id: z7.number().int().positive().optional(),
@@ -664,6 +699,8 @@ var runSchema = z7.object({
   conclusion: z7.string().nullable(),
   name: z7.string().min(1),
   html_url: z7.url(),
+  /** The GitHub Actions trigger that started this run. */
+  event: z7.string().min(1).optional(),
   /** The branch that produced this run; absent for some event types. */
   head_branch: z7.string().min(1).nullable().optional(),
   // Timestamp quality should only remove timing advice, never make an otherwise useful run unreadable.

package/dist/index.js

@@ -767,6 +767,28 @@ var positionSchema = z2.union([
 ]);
 var panelDensities = ["auto", "comfortable", "compact"];
 var panelDensitySchema = z2.enum(panelDensities);
+var githubActionsBuildEvents = [
+  "push",
+  "pull_request",
+  "pull_request_target",
+  "pull_request_review",
+  "pull_request_review_comment",
+  "workflow_dispatch",
+  "workflow_run",
+  "merge_group"
+];
+var githubActionsBuildEventSchema = z2.enum(githubActionsBuildEvents);
+var githubActionsBuildEventsSchema = z2.array(githubActionsBuildEventSchema).min(1).superRefine((events, ctx) => {
+  events.forEach((event, index) => {
+    if (events.indexOf(event) !== index)
+      ctx.addIssue({
+        code: "custom",
+        path: [index],
+        message: `duplicate build event "${event}"`,
+        params: { constraint: "Use each build event at most once." }
+      });
+  });
+});
 var attentionTreatments = ["beacon", "alarm", "steady"];
 var attentionTreatmentSchema = z2.enum(attentionTreatments);
 var httpValueJsonPathSchema = z2.string().regex(/^\$(?:\.[A-Za-z_][A-Za-z0-9_]*|\[\d+\])*$/, "must be a simple JSON path");
@@ -827,7 +849,9 @@ var panelSchema = z2.looseObject({
   /** Small, deliberate JSON path subset: $.version, $.deployment.version, or $.response.docs[0].latestVersion. */
   json_path: httpValueJsonPathSchema.optional(),
   /** Up to four independently fetched source-agnostic readings in one visual panel. */
-  facts: httpValueGroupedPanelSchema.shape.facts.optional()
+  facts: httpValueGroupedPanelSchema.shape.facts.optional(),
+  /** Optional GitHub Actions-only restriction on which workflow triggers count as build evidence. */
+  build_events: githubActionsBuildEventsSchema.optional()
 }).superRefine((panel, ctx) => {
   if ("display" in panel) {
     ctx.addIssue({
@@ -1069,6 +1093,16 @@ var boardConfigSchema = z2.object({
   for (const [boardName, board] of Object.entries(config.boards)) {
     board.panels.forEach((panel, panelIndex) => {
       const source = panel.source ? config.sources[panel.source] : void 0;
+      if (panel.build_events !== void 0 && (panel.type !== "pull-request-health" || source?.type !== "github-actions")) {
+        ctx.addIssue({
+          code: "custom",
+          path: ["boards", boardName, "panels", panelIndex, "build_events"],
+          message: "build_events is available only on pull-request-health panels using a github-actions source",
+          params: {
+            constraint: "Configure build_events only for GitHub Actions pull-request health panels."
+          }
+        });
+      }
       if (panel.type !== "pipeline-status" || source?.type !== "azure-devops") return;
       if (typeof panel.pipeline !== "number" || !Number.isInteger(panel.pipeline) || panel.pipeline <= 0) {
         ctx.addIssue({
@@ -1337,7 +1371,8 @@ var pullRequestHealthPanelSchema = z7.object({
       branch_prefixes: z7.array(z7.string().min(1)).min(1)
     })
   ).min(1),
-  build_workflow: z7.string().min(1)
+  build_workflow: z7.string().min(1),
+  build_events: githubActionsBuildEventsSchema.optional()
 });
 var runSchema = z7.object({
   id: z7.number().int().positive().optional(),
@@ -1345,6 +1380,8 @@ var runSchema = z7.object({
   conclusion: z7.string().nullable(),
   name: z7.string().min(1),
   html_url: z7.url(),
+  /** The GitHub Actions trigger that started this run. */
+  event: z7.string().min(1).optional(),
   /** The branch that produced this run; absent for some event types. */
   head_branch: z7.string().min(1).nullable().optional(),
   // Timestamp quality should only remove timing advice, never make an otherwise useful run unreadable.

package/dist/lambda.mjs

@@ -460,7 +460,7 @@ var require_dist_cjs = __commonJS({
       FieldPosition3[FieldPosition3["HEADER"] = 0] = "HEADER";
       FieldPosition3[FieldPosition3["TRAILER"] = 1] = "TRAILER";
     })(FieldPosition2 || (FieldPosition2 = {}));
-    var SMITHY_CONTEXT_KEY3 = "__smithy_context";
+    var SMITHY_CONTEXT_KEY4 = "__smithy_context";
     var IniSectionType4;
     (function(IniSectionType5) {
       IniSectionType5["PROFILE"] = "profile";
@@ -480,7 +480,7 @@ var require_dist_cjs = __commonJS({
     exports.HttpAuthLocation = HttpAuthLocation;
     exports.IniSectionType = IniSectionType4;
     exports.RequestHandlerProtocol = RequestHandlerProtocol;
-    exports.SMITHY_CONTEXT_KEY = SMITHY_CONTEXT_KEY3;
+    exports.SMITHY_CONTEXT_KEY = SMITHY_CONTEXT_KEY4;
     exports.getDefaultClientConfiguration = getDefaultClientConfiguration2;
     exports.resolveDefaultRuntimeConfig = resolveDefaultRuntimeConfig2;
   }
@@ -13700,10 +13700,11 @@ var init_utils3 = __esm({
 });
 
 // node_modules/@aws-sdk/core/dist-es/submodules/httpAuthSchemes/aws_sdk/AwsSdkSigV4Signer.js
-var throwSigningPropertyError, validateSigningProperties, AwsSdkSigV4Signer, AWSSDKSigV4Signer;
+var import_types25, throwSigningPropertyError, hasEventStreamOutput, validateSigningProperties, AwsSdkSigV4Signer, AWSSDKSigV4Signer;
 var init_AwsSdkSigV4Signer = __esm({
   "node_modules/@aws-sdk/core/dist-es/submodules/httpAuthSchemes/aws_sdk/AwsSdkSigV4Signer.js"() {
     init_protocols();
+    import_types25 = __toESM(require_dist_cjs());
     init_utils3();
     throwSigningPropertyError = (name, property) => {
       if (!property) {
@@ -13711,6 +13712,11 @@ var init_AwsSdkSigV4Signer = __esm({
       }
       return property;
     };
+    hasEventStreamOutput = (signingProperties) => {
+      const context = signingProperties.context;
+      const eventStream = context?.[import_types25.SMITHY_CONTEXT_KEY]?.eventStream;
+      return eventStream?.output === true;
+    };
     validateSigningProperties = async (signingProperties) => {
       const context = throwSigningPropertyError("context", signingProperties.context);
       const config2 = throwSigningPropertyError("config", signingProperties.config);
@@ -13746,7 +13752,9 @@ var init_AwsSdkSigV4Signer = __esm({
         }
         const noSkewCorrection = await config2.disableClockSkewCorrection?.() === true;
         signingProperties._disableClockSkewCorrection = noSkewCorrection;
-        if (!noSkewCorrection) {
+        const skipSkewSampling = noSkewCorrection || hasEventStreamOutput(signingProperties);
+        signingProperties._skipClockSkewSampling = skipSkewSampling;
+        if (!skipSkewSampling) {
           signingProperties._preRequestSystemClockOffset = config2.systemClockOffset;
           signingProperties._requestSentAt = Date.now();
         }
@@ -13760,7 +13768,7 @@ var init_AwsSdkSigV4Signer = __esm({
       errorHandler(signingProperties) {
         return (error63) => {
           const errorException = error63;
-          if (!signingProperties._disableClockSkewCorrection) {
+          if (!signingProperties._skipClockSkewSampling && !signingProperties._disableClockSkewCorrection) {
             const serverTime = errorException.ServerTime ?? getDateHeader(errorException.$response);
             if (serverTime) {
               const config2 = throwSigningPropertyError("config", signingProperties.config);
@@ -13781,7 +13789,7 @@ var init_AwsSdkSigV4Signer = __esm({
         };
       }
       successHandler(httpResponse, signingProperties) {
-        if (signingProperties._disableClockSkewCorrection) {
+        if (signingProperties._skipClockSkewSampling || signingProperties._disableClockSkewCorrection) {
           return;
         }
         const dateHeader = getDateHeader(httpResponse);
@@ -16107,7 +16115,7 @@ var init_package = __esm({
   "node_modules/@aws-sdk/nested-clients/package.json"() {
     package_default = {
       name: "@aws-sdk/nested-clients",
-      version: "3.997.47",
+      version: "3.997.48",
       description: "Nested clients for AWS SDK packages.",
       homepage: "https://github.com/aws/aws-sdk-js-v3/tree/main/packages/nested-clients",
       license: "Apache-2.0",
@@ -16207,7 +16215,7 @@ var init_package = __esm({
         "test:watch": "yarn g:vitest watch"
       },
       dependencies: {
-        "@aws-sdk/core": "^3.978.2",
+        "@aws-sdk/core": "^3.978.3",
         "@aws-sdk/signature-v4-multi-region": "^3.996.48",
         "@aws-sdk/types": "^3.974.6",
         "@smithy/core": "^3.35.2",
@@ -26166,7 +26174,7 @@ var require_dist_cjs16 = __commonJS({
       Region: { type: "builtInParams", name: "region" },
       UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" }
     };
-    var version2 = "3.1148.0";
+    var version2 = "3.1149.0";
     var packageInfo = {
       version: version2
     };
@@ -27957,7 +27965,7 @@ var require_dist_cjs17 = __commonJS({
       Region: { type: "builtInParams", name: "region" },
       UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" }
     };
-    var version2 = "3.1148.0";
+    var version2 = "3.1149.0";
     var packageInfo = {
       version: version2
     };
@@ -52237,7 +52245,7 @@ ${content.join("\n")}
 var version = {
   major: 4,
   minor: 6,
-  patch: 6
+  patch: 7
 };
 
 // node_modules/zod/v4/core/schemas.js
@@ -69381,6 +69389,28 @@ var positionSchema = external_exports.union([
 ]);
 var panelDensities = ["auto", "comfortable", "compact"];
 var panelDensitySchema = external_exports.enum(panelDensities);
+var githubActionsBuildEvents = [
+  "push",
+  "pull_request",
+  "pull_request_target",
+  "pull_request_review",
+  "pull_request_review_comment",
+  "workflow_dispatch",
+  "workflow_run",
+  "merge_group"
+];
+var githubActionsBuildEventSchema = external_exports.enum(githubActionsBuildEvents);
+var githubActionsBuildEventsSchema = external_exports.array(githubActionsBuildEventSchema).min(1).superRefine((events, ctx) => {
+  events.forEach((event, index) => {
+    if (events.indexOf(event) !== index)
+      ctx.addIssue({
+        code: "custom",
+        path: [index],
+        message: `duplicate build event "${event}"`,
+        params: { constraint: "Use each build event at most once." }
+      });
+  });
+});
 var attentionTreatments = ["beacon", "alarm", "steady"];
 var attentionTreatmentSchema = external_exports.enum(attentionTreatments);
 var httpValueJsonPathSchema = external_exports.string().regex(/^\$(?:\.[A-Za-z_][A-Za-z0-9_]*|\[\d+\])*$/, "must be a simple JSON path");
@@ -69441,7 +69471,9 @@ var panelSchema = external_exports.looseObject({
   /** Small, deliberate JSON path subset: $.version, $.deployment.version, or $.response.docs[0].latestVersion. */
   json_path: httpValueJsonPathSchema.optional(),
   /** Up to four independently fetched source-agnostic readings in one visual panel. */
-  facts: httpValueGroupedPanelSchema.shape.facts.optional()
+  facts: httpValueGroupedPanelSchema.shape.facts.optional(),
+  /** Optional GitHub Actions-only restriction on which workflow triggers count as build evidence. */
+  build_events: githubActionsBuildEventsSchema.optional()
 }).superRefine((panel, ctx) => {
   if ("display" in panel) {
     ctx.addIssue({
@@ -69688,6 +69720,16 @@ var boardConfigSchema = external_exports.object({
   for (const [boardName, board] of Object.entries(config2.boards)) {
     board.panels.forEach((panel, panelIndex) => {
       const source = panel.source ? config2.sources[panel.source] : void 0;
+      if (panel.build_events !== void 0 && (panel.type !== "pull-request-health" || source?.type !== "github-actions")) {
+        ctx.addIssue({
+          code: "custom",
+          path: ["boards", boardName, "panels", panelIndex, "build_events"],
+          message: "build_events is available only on pull-request-health panels using a github-actions source",
+          params: {
+            constraint: "Configure build_events only for GitHub Actions pull-request health panels."
+          }
+        });
+      }
       if (panel.type !== "pipeline-status" || source?.type !== "azure-devops") return;
       if (typeof panel.pipeline !== "number" || !Number.isInteger(panel.pipeline) || panel.pipeline <= 0) {
         ctx.addIssue({
@@ -70465,7 +70507,8 @@ var pullRequestHealthPanelSchema = external_exports.object({
       branch_prefixes: external_exports.array(external_exports.string().min(1)).min(1)
     })
   ).min(1),
-  build_workflow: external_exports.string().min(1)
+  build_workflow: external_exports.string().min(1),
+  build_events: githubActionsBuildEventsSchema.optional()
 });
 var runSchema = external_exports.object({
   id: external_exports.number().int().positive().optional(),
@@ -70473,6 +70516,8 @@ var runSchema = external_exports.object({
   conclusion: external_exports.string().nullable(),
   name: external_exports.string().min(1),
   html_url: external_exports.url(),
+  /** The GitHub Actions trigger that started this run. */
+  event: external_exports.string().min(1).optional(),
   /** The branch that produced this run; absent for some event types. */
   head_branch: external_exports.string().min(1).nullable().optional(),
   // Timestamp quality should only remove timing advice, never make an otherwise useful run unreadable.
@@ -70590,9 +70635,19 @@ async function fetchGithubActionsPullRequestBuild(args) {
   return githubObservation(
     args,
     source,
-    githubRunsCall(source, panel.build_workflow, args.branch, "pull_request"),
+    githubRunsCall(
+      source,
+      panel.build_workflow,
+      args.branch,
+      void 0,
+      panel.build_events ? 100 : 1
+    ),
     (value, observedAt4) => {
-      const run = runsSchema.parse(value).workflow_runs[0];
+      const run = runsSchema.parse(value).workflow_runs.find((candidate) => {
+        if (!panel.build_events) return true;
+        const event = githubActionsBuildEventSchema.safeParse(candidate.event);
+        return event.success && panel.build_events.includes(event.data);
+      });
       return {
         panelId: panel.id,
         state: "ok",
@@ -70601,7 +70656,7 @@ async function fetchGithubActionsPullRequestBuild(args) {
         signal: {
           type: "pull-request-build",
           branch: args.branch,
-          item: healthItem(args.branch, run, args.branch)
+          item: healthItem(args.branch, run, args.branch, void 0, true)
         }
       };
     }
@@ -70688,11 +70743,11 @@ function githubRunsCall(source, workflow, branch, event, perPage = 1, created) {
   url2.searchParams.set("per_page", String(perPage));
   return { url: url2.toString(), headers: new Headers() };
 }
-function healthItem(label, run, detail, link) {
+function healthItem(label, run, detail, link, includeEvent = false) {
   return {
     label,
     status: run ? normalizeStatus2(run.status, run.conclusion) : "unknown",
-    detail: run ? `${detail} \xB7 ${run.conclusion ?? run.status}` : `${detail} \xB7 No run found`,
+    detail: run ? `${detail}${includeEvent ? ` \xB7 ${run.event ?? "unknown trigger"}` : ""} \xB7 ${run.conclusion ?? run.status}` : `${detail} \xB7 No run found`,
     link: link ?? run?.html_url ?? null
   };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@continuous-excellence/ze-great-dashboard-aws",
-  "version": "0.31.28",
+  "version": "0.31.30",
   "type": "module",
   "description": "AWS server runtime and CloudFormation deployment tooling for Ze Great Dashboard.",
   "keywords": [
@@ -36,7 +36,7 @@
   "dependencies": {
     "fflate": "^0.8.3",
     "yaml": "^2.9.1",
-    "zod": "^4.6.6"
+    "zod": "^4.6.7"
   },
   "devDependencies": {
     "esbuild": "^0.28.2",