@dudousxd/nestjs-durable-dashboard 0.51.0 → 0.51.1

package/dist/server/index.d.cts

@@ -199,8 +199,12 @@ declare class DashboardService {
     }) | null>;
     /**
      * Deliver a `ctx.webhook()` callback: turn an inbound POST (token + body) into the signal the
-     * waiting run is parked on. Returns the run result, or `null` if no run waits on that token (a
-     * stale/duplicate callback) — a safe no-op the controller maps to 404. Control-plane-only.
+     * run is (or will be) parked on. A callback that arrives BEFORE the run reaches `wait()` (the url
+     * was handed out and the run is still busy or sleeping) is buffered, and `wait()` consumes it, so
+     * the result is the run's current status. Returns `null` — mapped to 404 by the controller — for a
+     * token that is not a webhook token, whose run doesn't exist or is terminal, or whose wait already
+     * resolved (a duplicate): nothing is buffered for those, so a public endpoint can't leave junk
+     * rows behind or signal non-webhook tokens. Control-plane-only.
      */
     deliverWebhook(token: string, body: unknown): Promise<RunResult | null>;
     /** Side-effect-free read of a value a run published via `ctx.setEvent` (a live query). Control-plane-only. */

package/dist/server/index.d.ts

@@ -199,8 +199,12 @@ declare class DashboardService {
     }) | null>;
     /**
      * Deliver a `ctx.webhook()` callback: turn an inbound POST (token + body) into the signal the
-     * waiting run is parked on. Returns the run result, or `null` if no run waits on that token (a
-     * stale/duplicate callback) — a safe no-op the controller maps to 404. Control-plane-only.
+     * run is (or will be) parked on. A callback that arrives BEFORE the run reaches `wait()` (the url
+     * was handed out and the run is still busy or sleeping) is buffered, and `wait()` consumes it, so
+     * the result is the run's current status. Returns `null` — mapped to 404 by the controller — for a
+     * token that is not a webhook token, whose run doesn't exist or is terminal, or whose wait already
+     * resolved (a duplicate): nothing is buffered for those, so a public endpoint can't leave junk
+     * rows behind or signal non-webhook tokens. Control-plane-only.
      */
     deliverWebhook(token: string, body: unknown): Promise<RunResult | null>;
     /** Side-effect-free read of a value a run published via `ctx.setEvent` (a live query). Control-plane-only. */

package/dist/server/index.js

@@ -2,7 +2,7 @@ var __defProp = Object.defineProperty;
 var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
 
 // src/server/dashboard.service.ts
-import { RunGateway, STATE_STORE_CANONICAL, WorkflowEngine, collectMetrics } from "@dudousxd/nestjs-durable-core";
+import { RunGateway, STATE_STORE_CANONICAL, TERMINAL_RUN_STATUSES, WorkflowEngine, collectMetrics, parseWebhookToken } from "@dudousxd/nestjs-durable-core";
 import { Inject, Injectable, Optional } from "@nestjs/common";
 import { Observable } from "rxjs";
 function _ts_decorate(decorators, target, key, desc) {
@@ -211,11 +211,30 @@ var DashboardService = class {
   }
   /**
   * Deliver a `ctx.webhook()` callback: turn an inbound POST (token + body) into the signal the
-  * waiting run is parked on. Returns the run result, or `null` if no run waits on that token (a
-  * stale/duplicate callback) — a safe no-op the controller maps to 404. Control-plane-only.
+  * run is (or will be) parked on. A callback that arrives BEFORE the run reaches `wait()` (the url
+  * was handed out and the run is still busy or sleeping) is buffered, and `wait()` consumes it, so
+  * the result is the run's current status. Returns `null` — mapped to 404 by the controller — for a
+  * token that is not a webhook token, whose run doesn't exist or is terminal, or whose wait already
+  * resolved (a duplicate): nothing is buffered for those, so a public endpoint can't leave junk
+  * rows behind or signal non-webhook tokens. Control-plane-only.
   */
   async deliverWebhook(token, body) {
-    return this.controlPlane().engine.signal(token, body);
+    const { store, engine } = this.controlPlane();
+    const parsed = parseWebhookToken(token);
+    if (!parsed) return null;
+    const run = await store.getRun(parsed.runId);
+    if (!run || TERMINAL_RUN_STATUSES.includes(run.status)) return null;
+    const resolved = await store.getCheckpoint(parsed.runId, parsed.seq);
+    if (resolved?.status === "completed") return null;
+    const delivered = await engine.signal(token, body);
+    if (delivered) return delivered;
+    const now = await store.getCheckpoint(parsed.runId, parsed.seq);
+    if (now?.status === "completed" && await store.takeBufferedSignal(token)) return null;
+    const fresh = await store.getRun(parsed.runId);
+    return {
+      runId: run.id,
+      status: fresh?.status ?? run.status
+    };
   }
   /** Side-effect-free read of a value a run published via `ctx.setEvent` (a live query). Control-plane-only. */
   async getEvent(runId, key) {
@@ -1277,7 +1296,7 @@ var DurableApiController = class {
   */
   async webhook(token, body) {
     const result = await this.dashboard.deliverWebhook(token, body);
-    if (!result) throw new NotFoundException(`no run is waiting on webhook ${token}`);
+    if (!result) throw new NotFoundException(`no live run is waiting for webhook ${token}`);
     return result;
   }
   /** Live query: the latest value a run published for `key` via `ctx.setEvent` (no side effect). */