@hexabot-ai/api 3.2.7 → 3.3.0

package/dist/workflow/services/workflow-run.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"workflow-run.service.js","sourceRoot":"","sources":["../../../src/workflow/services/workflow-run.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAMA,iDAA2E;AAE3E,2CAA4C;AAC5C,qCAA6B;AAE7B,4EAAmE;AAGnE,qFAAgF;AAOhF,MAAM,4BAA4B,GAAG;IACnC,4BAAkB,CAAC,IAAI;IACvB,4BAAkB,CAAC,OAAO;IAC1B,4BAAkB,CAAC,SAAS;CAC7B,CAAC;AAGK,IAAM,kBAAkB,GAAxB,MAAM,kBAAmB,SAAQ,iCAAoC;IAM1E,YAAqB,UAAiC;QACpD,KAAK,CAAC,UAAU,CAAC,CAAC;QADC,eAAU,GAAV,UAAU,CAAuB;IAEtD,CAAC;IASD,KAAK,CAAC,WAAW,CACf,KAAa,EACb,OAAmD;QAEnD,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE;YACjC,MAAM,EAAE,SAAS;YACjB,GAAG,OAAO;SACX,CAAC,CAAC;IACL,CAAC;IASD,KAAK,CAAC,aAAa,CACjB,KAAa,EACb,OASe;QAEf,MAAM,EACJ,MAAM,EACN,MAAM,EACN,IAAI,EACJ,UAAU,EACV,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,cAAc,EACd,GAAG,KAAK,EACT,GAAG,OAAO,CAAC;QAEZ,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE;YACjC,MAAM,EAAE,WAAW;YACnB,aAAa,EAAE,MAAM,IAAI,IAAI;YAC7B,gBAAgB,EAAE,MAAM,IAAI,IAAI;YAChC,cAAc,EAAE,IAAI;YACpB,oBAAoB,EAAE,UAAU,IAAI,IAAI;YACxC,eAAe,EAAE,YAAY,IAAI,IAAI;YACrC,aAAa,EAAE,UAAU,IAAI,IAAI;YACjC,sBAAsB,EAAE,YAAY,IAAI,IAAI;YAC5C,cAAc;YACd,WAAW,EAAE,IAAI,IAAI,EAAE;YACvB,GAAG,KAAK;SACT,CAAC,CAAC;IACL,CAAC;IASD,KAAK,CAAC,YAAY,CAChB,KAAa,EACb,OAAkE;QAElE,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE;YACjC,MAAM,EAAE,UAAU;YAClB,UAAU,EAAE,IAAI,IAAI,EAAE;YACtB,GAAG,OAAO;SACX,CAAC,CAAC;IACL,CAAC;IASD,KAAK,CAAC,UAAU,CACd,KAAa,EACb,OAAgD;QAEhD,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE;YACjC,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,IAAI,IAAI,EAAE;YACpB,GAAG,OAAO;SACX,CAAC,CAAC;IACL,CAAC;IAgBD,KAAK,CAAC,2BAA2B,CAC/B,aAAqB,EACrB,QAAiB,EACjB,UAAmB;QAEnB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC;YACtC,KAAK,EAAE;gBACL,WAAW,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE;gBAClC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,MAAM,EAAE,IAAA,YAAE,EAAC,4BAA4B,CAAC;aACzC;YACD,KAAK,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE;SAClD,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QAC3D,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,IAAI;aACD,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;aAC9C,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CACjE,CAAC;QAIF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/D,MAAM,UAAU,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;aACnD,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,4BAAkB,CAAC,SAAS,CAAC;aAC5D,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CACd,UAAU;YACR,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,CAAC;YACtD,CAAC,CAAC,IAAI,CACT,CAAC;QAEJ,OAAO,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC5D,CAAC;IAEO,YAAY,CAClB,GAAuD;QAEvD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,OAAO,GAAG,CAAC;QACb,CAAC;QAED,OAAO,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC;IACzB,CAAC;IAEO,oBAAoB,CAC1B,GAAoB,EACpB,UAAkB,EAClB,QAAsC;QAEtC,IAAI,OAAO,GAAgC,GAAG,CAAC;QAC/C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAElC,OAAO,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACxB,IAAI,OAAO,CAAC,QAAQ,CAAC,EAAE,KAAK,UAAU,EAAE,CAAC;gBACvC,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACzD,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAChE,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,uBAAuB,CAC7B,IAAuB,EACvB,QAAsC;QAEtC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,QAAQ,GAAG,CAAC,GAAoB,EAAU,EAAE;YAChD,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,IAAI,OAAO,GAAgC,GAAG,CAAC;YAC/C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;YAElC,OAAO,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC3C,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBACxB,KAAK,IAAI,CAAC,CAAC;gBACX,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBACzD,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,CAAC;YAED,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,CAAC,KAA4B,EAAU,EAAE;YACvD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,CAAC,CAAC;YACX,CAAC;YAED,MAAM,IAAI,GAAG,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAEjC,OAAO,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACjD,CAAC,CAAC;QAEF,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YAC7B,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC5C,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;gBACpB,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,OAAO,CACL,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC;gBAC/C,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAC5C,CAAC;QACJ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACR,CAAC;CACF,CAAA;AA9OY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,mBAAU,GAAE;qCAOsB,+CAAqB;GAN3C,kBAAkB,CA8O9B"}
+{"version":3,"file":"workflow-run.service.js","sourceRoot":"","sources":["../../../src/workflow/services/workflow-run.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAMA,iDAA2E;AAE3E,2CAA4C;AAC5C,qCAA6B;AAE7B,4EAAmE;AAGnE,qFAAgF;AAOhF,MAAM,4BAA4B,GAAG;IACnC,4BAAkB,CAAC,IAAI;IACvB,4BAAkB,CAAC,OAAO;IAC1B,4BAAkB,CAAC,SAAS;CAC7B,CAAC;AAGK,IAAM,kBAAkB,GAAxB,MAAM,kBAAmB,SAAQ,iCAAoC;IAM1E,YAAqB,UAAiC;QACpD,KAAK,CAAC,UAAU,CAAC,CAAC;QADC,eAAU,GAAV,UAAU,CAAuB;IAEtD,CAAC;IASD,KAAK,CAAC,WAAW,CACf,KAAa,EACb,OAAmD;QAEnD,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE;YACjC,MAAM,EAAE,SAAS;YACjB,GAAG,OAAO;SACX,CAAC,CAAC;IACL,CAAC;IASD,KAAK,CAAC,aAAa,CACjB,KAAa,EACb,OASe;QAEf,MAAM,EACJ,MAAM,EACN,MAAM,EACN,IAAI,EACJ,UAAU,EACV,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,cAAc,EACd,GAAG,KAAK,EACT,GAAG,OAAO,CAAC;QAEZ,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE;YACjC,MAAM,EAAE,WAAW;YACnB,aAAa,EAAE,MAAM,IAAI,IAAI;YAC7B,gBAAgB,EAAE,MAAM,IAAI,IAAI;YAChC,cAAc,EAAE,IAAI;YACpB,oBAAoB,EAAE,UAAU,IAAI,IAAI;YACxC,eAAe,EAAE,YAAY,IAAI,IAAI;YACrC,aAAa,EAAE,UAAU,IAAI,IAAI;YACjC,sBAAsB,EAAE,YAAY,IAAI,IAAI;YAC5C,cAAc;YACd,WAAW,EAAE,IAAI,IAAI,EAAE;YACvB,GAAG,KAAK;SACT,CAAC,CAAC;IACL,CAAC;IASD,KAAK,CAAC,YAAY,CAChB,KAAa,EACb,OAAkE;QAElE,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE;YACjC,MAAM,EAAE,UAAU;YAClB,UAAU,EAAE,IAAI,IAAI,EAAE;YACtB,GAAG,OAAO;SACX,CAAC,CAAC;IACL,CAAC;IASD,KAAK,CAAC,UAAU,CACd,KAAa,EACb,OAAgD;QAEhD,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE;YACjC,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,IAAI,IAAI,EAAE;YACpB,GAAG,OAAO;SACX,CAAC,CAAC;IACL,CAAC;IAgBD,KAAK,CAAC,2BAA2B,CAC/B,aAAqB,EACrB,QAAiB,EACjB,UAAmB;QAEnB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC;YACtC,KAAK,EAAE;gBACL,WAAW,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE;gBAClC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,MAAM,EAAE,IAAA,YAAE,EAAC,4BAA4B,CAAC;aACzC;YACD,KAAK,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE;SAClD,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QAC3D,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,IAAI;aACD,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;aAC9C,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CACjE,CAAC;QAIF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/D,MAAM,UAAU,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;aACnD,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,4BAAkB,CAAC,SAAS,CAAC;aAC5D,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CACd,UAAU;YACR,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,CAAC;YACtD,CAAC,CAAC,IAAI,CACT,CAAC;QAEJ,OAAO,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC5D,CAAC;IAEO,YAAY,CAClB,GAAuD;QAEvD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,OAAO,GAAG,CAAC;QACb,CAAC;QAED,OAAO,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC;IACzB,CAAC;IAEO,oBAAoB,CAC1B,GAAoB,EACpB,UAAkB,EAClB,QAAsC;QAEtC,IAAI,OAAO,GAAgC,GAAG,CAAC;QAC/C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAElC,OAAO,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACxB,IAAI,OAAO,CAAC,QAAQ,CAAC,EAAE,KAAK,UAAU,EAAE,CAAC;gBACvC,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACzD,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAChE,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,uBAAuB,CAC7B,IAAuB,EACvB,QAAsC;QAEtC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,QAAQ,GAAG,CAAC,GAAoB,EAAU,EAAE;YAChD,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,IAAI,OAAO,GAAgC,GAAG,CAAC;YAC/C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;YAElC,OAAO,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC3C,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBACxB,KAAK,IAAI,CAAC,CAAC;gBACX,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBACzD,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,CAAC;YAED,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,CAAC,KAA4B,EAAU,EAAE;YACvD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,CAAC,CAAC;YACX,CAAC;YAED,MAAM,IAAI,GAAG,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAEjC,OAAO,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACjD,CAAC,CAAC;QAEF,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YAC7B,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC5C,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;gBACpB,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,OAAO,CACL,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC;gBAC/C,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAC5C,CAAC;QACJ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACR,CAAC;IAQD,KAAK,CAAC,wBAAwB,CAAC,QAAgB;QAC7C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC;YACjC,KAAK,EAAE;gBACL,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE;gBACxB,MAAM,EAAE,IAAA,YAAE,EAAC,4BAA4B,CAAC;aACzC;SACF,CAAC,CAAC;QAEH,MAAM,OAAO,CAAC,GAAG,CACf,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACrB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CACxD,CACF,CAAC;IACJ,CAAC;CACF,CAAA;AAnQY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,mBAAU,GAAE;qCAOsB,+CAAqB;GAN3C,kBAAkB,CAmQ9B"}

package/dist/workflow/workflow.module.js

@@ -8,6 +8,7 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.WorkflowModule = void 0;
 const common_1 = require("@nestjs/common");
+const jwt_1 = require("@nestjs/jwt");
 const schedule_1 = require("@nestjs/schedule");
 const typeorm_1 = require("@nestjs/typeorm");
 const chat_module_1 = require("../chat/chat.module");
@@ -29,6 +30,7 @@ const memory_record_entity_1 = require("./entities/memory-record.entity");
 const workflow_run_entity_1 = require("./entities/workflow-run.entity");
 const workflow_version_entity_1 = require("./entities/workflow-version.entity");
 const workflow_entity_1 = require("./entities/workflow.entity");
+const webhook_trigger_guard_1 = require("./guards/webhook-trigger.guard");
 const mcp_server_repository_1 = require("./repositories/mcp-server.repository");
 const memory_definition_repository_1 = require("./repositories/memory-definition.repository");
 const memory_record_repository_1 = require("./repositories/memory-record.repository");
@@ -43,6 +45,7 @@ const mcp_server_service_1 = require("./services/mcp-server.service");
 const memory_definition_service_1 = require("./services/memory-definition.service");
 const memory_record_service_1 = require("./services/memory-record.service");
 const memory_service_1 = require("./services/memory.service");
+const webhook_trigger_service_1 = require("./services/webhook-trigger.service");
 const workflow_run_service_1 = require("./services/workflow-run.service");
 const workflow_scheduler_service_1 = require("./services/workflow-scheduler.service");
 const workflow_version_service_1 = require("./services/workflow-version.service");
@@ -66,6 +69,7 @@ exports.WorkflowModule = WorkflowModule = __decorate([
             (0, common_1.forwardRef)(() => cms_module_1.CmsModule),
             (0, common_1.forwardRef)(() => chat_module_1.ChatModule),
             user_module_1.UserModule,
+            jwt_1.JwtModule.register({}),
         ],
         controllers: [
             workflow_controller_1.WorkflowController,
@@ -98,6 +102,8 @@ exports.WorkflowModule = WorkflowModule = __decorate([
             scheduled_workflow_context_1.ScheduledWorkflowContext,
             workflow_context_factory_1.WorkflowContextFactory,
             agentic_service_1.AgenticService,
+            webhook_trigger_service_1.WebhookTriggerService,
+            webhook_trigger_guard_1.WebhookTriggerGuard,
             { provide: types_1.WORKFLOW_CALL_SERVICE, useExisting: agentic_service_1.AgenticService },
         ],
         exports: [
@@ -117,6 +123,8 @@ exports.WorkflowModule = WorkflowModule = __decorate([
             mcp_client_pool_service_1.McpClientPoolService,
             conversational_workflow_context_1.ConversationalWorkflowContext,
             agentic_service_1.AgenticService,
+            webhook_trigger_service_1.WebhookTriggerService,
+            webhook_trigger_guard_1.WebhookTriggerGuard,
             types_1.WORKFLOW_CALL_SERVICE,
         ],
     })

package/dist/workflow/workflow.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"workflow.module.js","sourceRoot":"","sources":["../../src/workflow/workflow.module.ts"],"names":[],"mappings":";;;;;;;;;AAMA,2CAAoD;AACpD,+CAAqD;AACrD,6CAAgD;AAEhD,qDAAgD;AAChD,kEAAgE;AAChE,kDAA6C;AAC7C,qDAAgD;AAEhD,gGAA2F;AAC3F,gFAA2E;AAC3E,sFAAiF;AACjF,kFAA6E;AAC7E,+EAA0E;AAC1E,6FAAwF;AACxF,mFAA8E;AAC9E,2FAAsF;AACtF,2EAAuE;AACvE,oEAAkE;AAClE,kFAAgF;AAChF,0EAAwE;AACxE,wEAAsE;AACtE,gFAA8E;AAC9E,gEAA+D;AAC/D,gFAA2E;AAC3E,8FAAyF;AACzF,sFAAiF;AACjF,oFAA+E;AAC/E,4FAAuF;AACvF,4EAAwE;AACxE,2EAAwE;AACxE,yDAAuD;AACvD,gEAA4D;AAC5D,gFAA0E;AAC1E,sEAAiE;AACjE,oFAA+E;AAC/E,4EAAuE;AACvE,8DAA0D;AAC1D,0EAAqE;AACrE,sFAAiF;AACjF,kFAA6E;AAC7E,kEAA8D;AAC9D,mCAAgD;AAsEzC,IAAM,cAAc,GAApB,MAAM,cAAc;CAAG,CAAA;AAAjB,wCAAc;yBAAd,cAAc;IApE1B,IAAA,eAAM,EAAC;QACN,OAAO,EAAE;YACP,uBAAa,CAAC,UAAU,CAAC;gBACvB,mCAAiB;gBACjB,kDAAwB;gBACxB,0CAAoB;gBACpB,oDAAyB;gBACzB,4CAAqB;gBACrB,sCAAkB;gBAClB,+BAAe;aAChB,CAAC;YACF,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,sBAAS,CAAC;YAC3B,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,wBAAU,CAAC;YAC5B,wBAAU;SACX;QACD,WAAW,EAAE;YACX,wCAAkB;YAClB,uDAAyB;YACzB,+CAAqB;YACrB,yDAA0B;YAC1B,2CAAmB;SACpB;QACD,SAAS,EAAE;YACT,wCAAkB;YAClB,uDAAyB;YACzB,+CAAqB;YACrB,yDAA0B;YAC1B,iDAAsB;YACtB,2CAAmB;YACnB,+CAAsB;YACtB,8BAAc;YACd,kCAAe;YACf,iDAAsB;YACtB,yCAAkB;YAClB,mDAAuB;YACvB,2CAAmB;YACnB,8BAAa;YACb,qCAAgB;YAChB,8CAAoB;YACpB,4BAAiB;YACjB,qDAAwB;YACxB,+DAA6B;YAC7B,+CAAqB;YACrB,qDAAwB;YACxB,iDAAsB;YACtB,gCAAc;YACd,EAAE,OAAO,EAAE,6BAAqB,EAAE,WAAW,EAAE,gCAAc,EAAE;SAChE;QACD,OAAO,EAAE;YACP,wCAAkB;YAClB,uDAAyB;YACzB,+CAAqB;YACrB,yDAA0B;YAC1B,iDAAsB;YACtB,2CAAmB;YACnB,kCAAe;YACf,iDAAsB;YACtB,yCAAkB;YAClB,mDAAuB;YACvB,2CAAmB;YACnB,8BAAa;YACb,qCAAgB;YAChB,8CAAoB;YACpB,+DAA6B;YAC7B,gCAAc;YACd,6BAAqB;SACtB;KACF,CAAC;GACW,cAAc,CAAG"}
+{"version":3,"file":"workflow.module.js","sourceRoot":"","sources":["../../src/workflow/workflow.module.ts"],"names":[],"mappings":";;;;;;;;;AAMA,2CAAoD;AACpD,qCAAwC;AACxC,+CAAqD;AACrD,6CAAgD;AAEhD,qDAAgD;AAChD,kEAAgE;AAChE,kDAA6C;AAC7C,qDAAgD;AAEhD,gGAA2F;AAC3F,gFAA2E;AAC3E,sFAAiF;AACjF,kFAA6E;AAC7E,+EAA0E;AAC1E,6FAAwF;AACxF,mFAA8E;AAC9E,2FAAsF;AACtF,2EAAuE;AACvE,oEAAkE;AAClE,kFAAgF;AAChF,0EAAwE;AACxE,wEAAsE;AACtE,gFAA8E;AAC9E,gEAA+D;AAC/D,0EAAqE;AACrE,gFAA2E;AAC3E,8FAAyF;AACzF,sFAAiF;AACjF,oFAA+E;AAC/E,4FAAuF;AACvF,4EAAwE;AACxE,2EAAwE;AACxE,yDAAuD;AACvD,gEAA4D;AAC5D,gFAA0E;AAC1E,sEAAiE;AACjE,oFAA+E;AAC/E,4EAAuE;AACvE,8DAA0D;AAC1D,gFAA2E;AAC3E,0EAAqE;AACrE,sFAAiF;AACjF,kFAA6E;AAC7E,kEAA8D;AAC9D,mCAAgD;AA2EzC,IAAM,cAAc,GAApB,MAAM,cAAc;CAAG,CAAA;AAAjB,wCAAc;yBAAd,cAAc;IAzE1B,IAAA,eAAM,EAAC;QACN,OAAO,EAAE;YACP,uBAAa,CAAC,UAAU,CAAC;gBACvB,mCAAiB;gBACjB,kDAAwB;gBACxB,0CAAoB;gBACpB,oDAAyB;gBACzB,4CAAqB;gBACrB,sCAAkB;gBAClB,+BAAe;aAChB,CAAC;YACF,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,sBAAS,CAAC;YAC3B,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,wBAAU,CAAC;YAC5B,wBAAU;YACV,eAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;SACvB;QACD,WAAW,EAAE;YACX,wCAAkB;YAClB,uDAAyB;YACzB,+CAAqB;YACrB,yDAA0B;YAC1B,2CAAmB;SACpB;QACD,SAAS,EAAE;YACT,wCAAkB;YAClB,uDAAyB;YACzB,+CAAqB;YACrB,yDAA0B;YAC1B,iDAAsB;YACtB,2CAAmB;YACnB,+CAAsB;YACtB,8BAAc;YACd,kCAAe;YACf,iDAAsB;YACtB,yCAAkB;YAClB,mDAAuB;YACvB,2CAAmB;YACnB,8BAAa;YACb,qCAAgB;YAChB,8CAAoB;YACpB,4BAAiB;YACjB,qDAAwB;YACxB,+DAA6B;YAC7B,+CAAqB;YACrB,qDAAwB;YACxB,iDAAsB;YACtB,gCAAc;YACd,+CAAqB;YACrB,2CAAmB;YACnB,EAAE,OAAO,EAAE,6BAAqB,EAAE,WAAW,EAAE,gCAAc,EAAE;SAChE;QACD,OAAO,EAAE;YACP,wCAAkB;YAClB,uDAAyB;YACzB,+CAAqB;YACrB,yDAA0B;YAC1B,iDAAsB;YACtB,2CAAmB;YACnB,kCAAe;YACf,iDAAsB;YACtB,yCAAkB;YAClB,mDAAuB;YACvB,2CAAmB;YACnB,8BAAa;YACb,qCAAgB;YAChB,8CAAoB;YACpB,+DAA6B;YAC7B,gCAAc;YACd,+CAAqB;YACrB,2CAAmB;YACnB,6BAAqB;SACtB;KACF,CAAC;GACW,cAAc,CAAG"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@hexabot-ai/api",
   "private": false,
-  "version": "3.2.7",
+  "version": "3.3.0",
   "description": "Hexabot is a solution for creating and managing chatbots across multiple channels, leveraging AI for advanced conversational capabilities. It provides a user-friendly interface for building, training, and deploying chatbots with integrated support for various messaging platforms.",
   "author": "Hexastack",
   "license": "FCL-1.0-ALv2",
@@ -93,14 +93,15 @@
     "typeorm": "^0.3.29",
     "yaml": "^2.8.3",
     "zod": "^4.3.6",
-    "@hexabot-ai/agentic": "3.1.7",
-    "@hexabot-ai/types": "3.0.7"
+    "@hexabot-ai/agentic": "3.2.0",
+    "@hexabot-ai/types": "3.1.0"
   },
   "devDependencies": {
     "@compodoc/compodoc": "^1.2.1",
     "@nestjs/cli": "^11.0.21",
     "@nestjs/schematics": "^11.1.0",
     "@nestjs/testing": "^11.1.19",
+    "@swc/cli": "^0.8.1",
     "@swc/core": "^1.15.32",
     "@swc/jest": "^0.2.39",
     "@types/cookie-parser": "^1.4.9",
@@ -115,7 +116,6 @@
     "@types/module-alias": "^2.0.4",
     "@types/multer": "^2.0.0",
     "@types/node": "^20.3.1",
-    "@types/node-fetch": "^2.6.13",
     "@types/nodemailer": "^8.0.0",
     "@types/papaparse": "^5.3.16",
     "@types/passport-anonymous": "^1.0.5",
@@ -132,7 +132,6 @@
     "eslint-plugin-header": "^3.1.1",
     "eslint-plugin-import": "^2.32.0",
     "eslint-plugin-prettier": "^5.5.4",
-    "husky": "^8.0.0",
     "jest": "^30.2.0",
     "lint-staged": "^15.3.0",
     "prettier": "^3.6.2",
@@ -144,7 +143,7 @@
     "tsconfig-paths": "^4.2.0",
     "tsconfig-paths-jest": "^0.0.1",
     "typescript": "^5.8.3",
-    "@hexabot-ai/frontend": "3.2.7"
+    "@hexabot-ai/frontend": "3.3.0"
   },
   "optionalDependencies": {
     "@css-inline/css-inline-linux-arm64-musl": "^0.14.1",

package/src/channel/README.md

@@ -33,6 +33,7 @@ At request time:
 
 `WebhookController` is mounted at `/webhook` (effective path is `/api/webhook/*` because of the global `/api` prefix):
 
+- `POST /api/webhook/:id/trigger`
 - `GET /api/webhook/:sourceRef`
 - `POST /api/webhook/:sourceRef`
 - `GET /api/webhook/:sourceRef/:workflowId`
@@ -40,6 +41,22 @@ At request time:
 - `GET /api/webhook/:sourceRef/download/:name?t=<jwt>`
 - `GET /api/webhook/:sourceRef/not-found`
 
+### Manual Workflow Trigger
+
+`POST /api/webhook/:id/trigger` runs a manual workflow from an external caller.
+It is declared before the `:sourceRef/:workflowId` catch-all so it wins route
+resolution. The endpoint is CSRF-exempt like the rest of `/webhook/*`.
+
+- `WebhookTriggerGuard` (workflow module) authorizes the call: the workflow
+  must exist, be `manual`, have `webhookTrigger.enabled`, and the request must
+  satisfy the configured auth (`none`, `basic`, `header`, or `jwt`). Workflows
+  that are not exposed as webhooks respond `404` without disclosing existence.
+- The JSON request body is the workflow input and is validated against the
+  workflow `inputSchema` (`400` on mismatch).
+- The run executes synchronously; the `200` response carries the outcome:
+  `{ runId, status, output, error }`. When no run could be started the endpoint
+  responds `422`.
+
 Also available:
 
 - `GET /api/channel` returns channel metadata (`name`, `visibility`, settings JSON schema).

package/src/channel/channel.module.ts

@@ -13,6 +13,7 @@ import { InjectDynamicProviders } from 'nestjs-dynamic-providers';
 import { AttachmentModule } from '@/attachment/attachment.module';
 import { ChatModule } from '@/chat/chat.module';
 import { CmsModule } from '@/cms/cms.module';
+import { UserModule } from '@/user/user.module';
 import { WorkflowOrmEntity } from '@/workflow/entities/workflow.entity';
 import { WorkflowModule } from '@/workflow/workflow.module';
 
@@ -51,6 +52,9 @@ export interface ChannelModuleOptions {
     JwtModule,
     TypeOrmModule.forFeature([SourceOrmEntity, WorkflowOrmEntity]),
     forwardRef(() => WorkflowModule),
+    // WebhookTriggerGuard is instantiated in this module's context (the
+    // trigger route lives on WebhookController) and needs CredentialService.
+    UserModule,
   ],
   controllers: [WebhookController, ChannelController, SourceController],
   providers: [

package/src/channel/webhook.controller.ts

@@ -4,12 +4,28 @@
  * Full terms: see LICENSE.md.
  */
 
-import { Controller, Get, Param, Post, Query, Req, Res } from '@nestjs/common';
+import {
+  Body,
+  Controller,
+  Get,
+  HttpCode,
+  Param,
+  Post,
+  Query,
+  Req,
+  Res,
+  UseGuards,
+} from '@nestjs/common';
 import { Request, Response } from 'express';
 
 import { LoggerService } from '@/logger/logger.service';
 import { UuidParam } from '@/utils';
 import { Roles } from '@/utils/decorators/roles.decorator';
+import { WebhookTriggerGuard } from '@/workflow/guards/webhook-trigger.guard';
+import {
+  WebhookTriggerService,
+  WorkflowTriggerResult,
+} from '@/workflow/services/webhook-trigger.service';
 
 import { ChannelService } from './channel.service';
 import { ChannelDownloadService } from './services/channel-download.service';
@@ -19,9 +35,38 @@ export class WebhookController {
   constructor(
     private readonly channelService: ChannelService,
     private readonly channelDownloadService: ChannelDownloadService,
+    private readonly webhookTriggerService: WebhookTriggerService,
     private readonly logger: LoggerService,
   ) {}
 
+  /**
+   * Public webhook endpoint that triggers a manual workflow run.
+   *
+   * {@link WebhookTriggerGuard} authenticates the request; this handler only
+   * forwards the workflow ID and payload to the service. The run executes
+   * synchronously and the response carries its final status and output.
+   *
+   * The whole request body is the workflow input, so third-party services
+   * that emit fixed body shapes can call the endpoint directly.
+   *
+   * Declared before the `:sourceRef/:workflowId` catch-all so `POST
+   * /webhook/:id/trigger` is matched first: NestJS registers routes in method
+   * definition order and Express 5 resolves overlapping dynamic routes by
+   * registration order.
+   *
+   * @param input - Optional workflow input payload (the request body).
+   */
+  @Roles('public')
+  @UseGuards(WebhookTriggerGuard)
+  @Post(':id/trigger')
+  @HttpCode(200)
+  async trigger(
+    @UuidParam('id') id: string,
+    @Body() input: unknown = {},
+  ): Promise<WorkflowTriggerResult> {
+    return await this.webhookTriggerService.trigger(id, input);
+  }
+
   @Roles('public')
   @Get(':sourceRef/download/:name')
   async handleDownload(

package/src/chat/services/chat.service.ts

@@ -6,7 +6,7 @@
 
 import { forwardRef, Inject, Injectable } from '@nestjs/common';
 import { EventEmitter2, OnEvent } from '@nestjs/event-emitter';
-import { In } from 'typeorm';
+import { Between, In } from 'typeorm';
 
 import { StatsType } from '@/analytics/entities/stats.entity';
 import { MessageInboundEvent } from '@/channel/lib/inbound-events';
@@ -183,9 +183,10 @@ export class ChatService {
       try {
         await this.messageService.updateMany(
           {
-            // @ts-expect-error Invesstigate why this is causing a ts error
-            recipient: subscriber.id,
-            createdAt: { $lte: watermark, $gte: start },
+            where: {
+              recipient: { id: subscriber.id },
+              createdAt: Between(start, watermark),
+            },
           },
           {
             delivery: true,

package/src/chat/services/thread.service.ts

@@ -218,7 +218,7 @@ export class ThreadService extends BaseOrmService<ThreadOrmEntity> {
       }
 
       if (explicit.status === 'closed') {
-        return await this.reopenThread(explicit.id, now);
+        return await this.createThread(subscriberId, null, sourceId);
       }
 
       await this.touchThread(explicit.id, now);
@@ -286,7 +286,15 @@ export class ThreadService extends BaseOrmService<ThreadOrmEntity> {
         );
       }
 
-      return explicit;
+      if (explicit.status !== 'closed') {
+        return explicit;
+      }
+      // Explicit thread is closed; fall through to the latest open thread
+      // so callers (subscribe/history flows) don't serve stale history.
+      const latestOpenAfterClose =
+        await this.repository.findLatestOpenThreadForSubscriber(subscriberId);
+
+      return latestOpenAfterClose ?? null;
     }
 
     const latestOpen =

package/src/mcp/README.md

@@ -160,8 +160,7 @@ Workflow YAML is validated with `parseWorkflowDefinition()` before a version is
 created. Coding agents can call `hexabot_workflow_yaml_validate` first to get
 structured validation errors without mutating workflow state. Commits inherit
 the workflow's current version as their parent unless `parentVersion` is
-explicitly supplied. `hexabot_workflow_rollback` and
-`hexabot_workflow_version_restore` both create a new current restore snapshot;
+explicitly supplied. `hexabot_workflow_rollback` creates a new current restore snapshot;
 publish that snapshot with `hexabot_workflow_publish` when it should become the
 published version.
 
@@ -178,7 +177,7 @@ version checksum and total byte length so clients can verify reconstruction.
 | `hexabot_workflow_version_search`  | `workflowversion:read`   | List compact version metadata for a workflow.                                                   |
 | `hexabot_workflow_version_get`     | `workflowversion:read`   | Read compact version metadata.                                                                  |
 | `hexabot_workflow_version_update`  | `workflowversion:update` | Update workflow version metadata.                                                               |
-| `hexabot_workflow_version_restore` | `workflowversion:create` | Restore a previous version by creating a new snapshot.                                          |
+| `hexabot_workflow_rollback`        | `workflowversion:create` | Restore a previous version by creating a new snapshot.                                          |
 | `hexabot_workflow_run_search`      | `workflowrun:read`       | Search workflow runs by workflow and status.                                                    |
 | `hexabot_workflow_run_get`         | `workflowrun:read`       | Read one workflow run with populated workflow metadata but no nested YAML body.                 |
 | `hexabot_workflow_run_debug`       | `workflowrun:read`       | Inspect one workflow run with execution state and parent/child run context for troubleshooting. |

package/src/mcp/tools/hexabot-mcp-tool.base.ts

@@ -49,16 +49,6 @@ export abstract class HexabotMcpToolBase {
     return Like(`%${value}%`);
   }
 
-  protected resolveRelationId(
-    relation: string | { id?: string | null } | null | undefined,
-  ): string | null {
-    if (typeof relation === 'string') {
-      return relation;
-    }
-
-    return relation?.id ?? null;
-  }
-
   protected getActor(request?: HexabotMcpRequest): User {
     const actor = request?.hexabotUser ?? request?.user;
     if (!actor?.id) {

package/src/mcp/tools/hexabot-mcp.utils.ts

@@ -27,3 +27,13 @@ export const omitKeysDeep = <T>(value: T, keys: readonly string[]): T => {
       .map(([key, nestedValue]) => [key, omitKeysDeep(nestedValue, keys)]),
   ) as T;
 };
+
+export const resolveRelationId = (
+  relation: string | { id?: string | null } | null | undefined,
+): string | null => {
+  if (typeof relation === 'string') {
+    return relation;
+  }
+
+  return relation?.id ?? null;
+};

package/src/mcp/tools/workflow-mcp.helper.ts

@@ -21,6 +21,8 @@ import { WorkflowVersionService } from '@/workflow/services/workflow-version.ser
 import { WorkflowService } from '@/workflow/services/workflow.service';
 import { WorkflowVersionAction } from '@/workflow/types';
 
+import { resolveRelationId } from './hexabot-mcp.utils';
+
 type WorkflowVersionLike = WorkflowVersion | WorkflowVersionFull;
 
 type WorkflowVersionSummary = Pick<
@@ -85,7 +87,7 @@ export class HexabotWorkflowMcpHelper {
     }
     const parentVersion =
       params.parentVersion === undefined
-        ? this.resolveRelationId(workflow.currentVersion)
+        ? resolveRelationId(workflow.currentVersion)
         : params.parentVersion;
     const payload: WorkflowNewVersionDto = {
       workflow: params.workflowId,
@@ -206,14 +208,4 @@ export class HexabotWorkflowMcpHelper {
       Object.entries(summary).filter(([, value]) => value !== undefined),
     ) as WorkflowVersionSummary;
   }
-
-  private resolveRelationId(
-    relation: string | { id?: string | null } | null | undefined,
-  ): string | null {
-    if (typeof relation === 'string') {
-      return relation;
-    }
-
-    return relation?.id ?? null;
-  }
 }

package/src/mcp/tools/workflow-run-mcp.tools.ts

@@ -39,7 +39,7 @@ import {
   paginationSchema,
   uuidSchema,
 } from './hexabot-mcp.schemas';
-import { omitKeysDeep } from './hexabot-mcp.utils';
+import { omitKeysDeep, resolveRelationId } from './hexabot-mcp.utils';
 
 const WORKFLOW_DEFINITION_RESPONSE_KEYS = ['definitionYml'] as const;
 
@@ -175,7 +175,7 @@ export class HexabotWorkflowRunMcpTools extends HexabotMcpToolBase {
 
     const includeRelatedRuns = args.includeRelatedRuns ?? true;
     const childRunsLimit = args.childRunsLimit ?? 10;
-    const parentRunId = this.resolveRelationId(run.parentRun);
+    const parentRunId = resolveRelationId(run.parentRun);
     const childWhere = { parentRun: { id: run.id } } as any;
     const [parentRun, childRuns, childRunTotal] = includeRelatedRuns
       ? await Promise.all([

package/src/mcp/tools/workflow-version-mcp.tools.ts

@@ -34,6 +34,7 @@ import {
   paginationSchema,
   uuidSchema,
 } from './hexabot-mcp.schemas';
+import { resolveRelationId } from './hexabot-mcp.utils';
 import { HexabotWorkflowMcpHelper } from './workflow-mcp.helper';
 
 @Injectable()
@@ -199,7 +200,7 @@ export class HexabotWorkflowVersionMcpTools extends HexabotMcpToolBase {
     const limit = args.limit ?? 16000;
     const { chunk, chunkByteLength, endOffset, totalByteLength } =
       this.sliceUtf8Chunk(definitionYml, offset, limit);
-    const workflowId = this.resolveRelationId(version.workflow);
+    const workflowId = resolveRelationId(version.workflow);
 
     return {
       workflowId,
@@ -243,33 +244,6 @@ export class HexabotWorkflowVersionMcpTools extends HexabotMcpToolBase {
     });
   }
 
-  @McpPermission('workflowversion', Action.CREATE)
-  @ToolGuards([McpPermissionGuard])
-  @Tool({
-    name: 'hexabot_workflow_version_restore',
-    description:
-      'Restore a workflow to a previous YAML version by creating a new restore snapshot.',
-    parameters: z.object({
-      workflowId: uuidSchema,
-      versionId: uuidSchema,
-      message: z.string().optional(),
-    }),
-  })
-  async restoreWorkflowVersion(
-    args: { workflowId: string; versionId: string; message?: string },
-    _context: unknown,
-    request?: HexabotMcpRequest,
-  ) {
-    const version = await this.workflowHelper.restoreWorkflowVersionSnapshot(
-      args,
-      this.getActorId(request),
-    );
-
-    return this.workflowHelper.summarizeWorkflowVersion(version, {
-      includeDefinitionYmlByteLength: true,
-    });
-  }
-
   @McpPermission('workflowversion', Action.CREATE)
   @ToolGuards([McpPermissionGuard])
   @Tool({
@@ -342,7 +316,7 @@ export class HexabotWorkflowVersionMcpTools extends HexabotMcpToolBase {
       );
     }
     const workflow = await this.workflowHelper.requireWorkflow(workflowId);
-    const currentVersionId = this.resolveRelationId(workflow.currentVersion);
+    const currentVersionId = resolveRelationId(workflow.currentVersion);
     if (!currentVersionId) {
       throw new NotFoundException(
         `Workflow ${workflowId} has no current version`,

package/src/user/services/passwordReset.service.ts

@@ -9,7 +9,6 @@ import {
   Inject,
   Injectable,
   InternalServerErrorException,
-  NotFoundException,
   UnauthorizedException,
 } from '@nestjs/common';
 import { JwtService, JwtSignOptions, JwtVerifyOptions } from '@nestjs/jwt';
@@ -54,7 +53,15 @@ export class PasswordResetService {
       where: { email: dto.email },
     });
     if (!user) {
-      throw new NotFoundException('User not found');
+      // Do not disclose whether an account exists for the given email.
+      // Returning silently prevents user/account enumeration (CWE-204) via
+      // the public, unauthenticated password-reset endpoint.
+      this.logger.log(
+        `Password reset requested for a non-existent email`,
+        'PasswordResetService',
+      );
+
+      return;
     }
     const jwt = await this.sign({ ...dto });
 

package/src/workflow/controllers/workflow.controller.ts

@@ -27,7 +27,6 @@ import { DeleteResult } from 'typeorm/driver/mongodb/typings';
 
 import { ActionService } from '@/actions/actions.service';
 import { I18nService } from '@/i18n/services/i18n.service';
-import { UserService } from '@/user/services/user.service';
 import { UuidParam } from '@/utils/decorators/uuid-param.decorator';
 import { BaseOrmController } from '@/utils/generics/base-orm.controller';
 import { PopulatePipe } from '@/utils/pipes/populate.pipe';
@@ -40,7 +39,10 @@ import {
   ManualEventWrapper,
   ScheduledEventWrapper,
 } from '../lib/trigger-event-wrapper';
-import { AgenticService } from '../services/agentic.service';
+import {
+  WebhookTokenResult,
+  WebhookTriggerService,
+} from '../services/webhook-trigger.service';
 import { WorkflowService } from '../services/workflow.service';
 import { WorkflowType } from '../types';
 
@@ -48,8 +50,7 @@ import { WorkflowType } from '../types';
 export class WorkflowController extends BaseOrmController<WorkflowOrmEntity> {
   constructor(
     private readonly workflowService: WorkflowService,
-    private readonly agenticService: AgenticService,
-    private readonly userService: UserService,
+    private readonly webhookTriggerService: WebhookTriggerService,
     private readonly actionService: ActionService,
     private readonly runtimeBindingsService: RuntimeBindingsService,
     private readonly i18nService: I18nService,
@@ -120,7 +121,7 @@ export class WorkflowController extends BaseOrmController<WorkflowOrmEntity> {
    * @returns Action metadata with JSON schemas.
    */
   @Get('actions{/:type}')
-  findActions(@Param('type') type?: WorkflowType) {
+  findActions(@Param('type') type?: WorkflowType | undefined) {
     if (type && !Object.values(WorkflowType).includes(type)) {
       throw new BadRequestException(`Invalid workflow type "${type}"`);
     }
@@ -298,7 +299,7 @@ export class WorkflowController extends BaseOrmController<WorkflowOrmEntity> {
       );
     }
 
-    const workflow = await this.workflowService.findOne(id);
+    const workflow = await this.workflowService.findOneAndPopulate(id);
     if (!workflow) {
       this.logger.warn(`Unable to run Workflow by id ${id}`);
       throw new NotFoundException(`Workflow with ID ${id} not found`);
@@ -327,12 +328,37 @@ export class WorkflowController extends BaseOrmController<WorkflowOrmEntity> {
             triggeredAt: new Date(),
           })
         : new ManualEventWrapper(manualInput, userId);
-    const initiator = await this.userService.findOne(userId);
-    event.setInitiator(initiator!);
-    event.setWorkflowId(workflow.id);
 
-    await this.agenticService.handleEvent(event);
+    await this.webhookTriggerService.dispatchTriggerEvent(
+      workflow,
+      event,
+      userId,
+    );
 
     return { accepted: true };
   }
+
+  /**
+   * Issues a webhook trigger token signed with the workflow's JWT secret so
+   * callers do not have to craft tokens themselves. Tokens carry no expiry;
+   * rotating the signing secret credential revokes them.
+   *
+   * @param id - The workflow ID the token is scoped to.
+   * @param req - Express request containing the authenticated session.
+   */
+  @Post(':id/webhook-token')
+  @HttpCode(201)
+  async generateWebhookToken(
+    @UuidParam('id') id: string,
+    @Req() req: Request,
+  ): Promise<WebhookTokenResult> {
+    const userId = req.session?.passport?.user?.id;
+    if (!userId) {
+      throw new UnauthorizedException(
+        'Only authenticated users can generate webhook tokens',
+      );
+    }
+
+    return await this.webhookTriggerService.generateToken(id);
+  }
 }

package/src/workflow/dto/workflow.dto.ts

@@ -6,6 +6,8 @@
 
 import {
   createWorkflowFullSchema as createTypesWorkflowFullSchema,
+  WebhookTriggerConfig,
+  webhookTriggerSchema,
   workflowSchema,
 } from '@hexabot-ai/types';
 import {
@@ -80,6 +82,16 @@ export class WorkflowCreateDto {
   @Validate(WorkflowInputSchemaValidator)
   inputSchema?: JsonSchema;
 
+  @ApiPropertyOptional({
+    description:
+      'Webhook trigger configuration (manual workflows only). Enables a public ' +
+      'trigger URL and defines how incoming calls authenticate.',
+    type: Object,
+  })
+  @IsOptional()
+  @Validate(webhookTriggerSchema)
+  webhookTrigger?: WebhookTriggerConfig | null;
+
   @ApiPropertyOptional({
     description: 'Indicates if the workflow is built-in',
     type: Boolean,

package/src/workflow/entities/workflow.entity.ts

@@ -11,7 +11,7 @@ import {
   DEFAULT_RETRY_SETTINGS,
   DEFAULT_TIMEOUT_MS,
 } from '@hexabot-ai/agentic';
-import { workflowSchema } from '@hexabot-ai/types';
+import { WebhookTriggerConfig, workflowSchema } from '@hexabot-ai/types';
 import { CronJob } from 'cron';
 import { JSONSchema7 as JsonSchema } from 'json-schema';
 import {
@@ -90,6 +90,16 @@ export class WorkflowOrmEntity extends BaseOrmEntity<WorkflowDto> {
   @JsonColumn({ name: 'input_schema' })
   inputSchema!: JsonSchema;
 
+  /**
+   * Optional webhook trigger configuration for manual workflows. When enabled,
+   * exposes a public URL that authenticates incoming calls before running the
+   * workflow. Stored as JSON; secrets are referenced by credential ID, never
+   * inline. The JSON carries no foreign key, so referential integrity is
+   * enforced at the guard: a dangling credential reference fails auth (401).
+   */
+  @JsonColumn({ name: 'webhook_trigger', nullable: true })
+  webhookTrigger?: WebhookTriggerConfig | null;
+
   /** Indicates if the workflow is built-in and protected from deletion. */
   @Column({ default: false })
   builtin!: boolean;