@nodetool-ai/websocket 0.7.0-rc.23 → 0.8.2

package/dist/triggers/file-watch.js

@@ -0,0 +1,405 @@
+/**
+ * File-watch adapter — the host-owned ingestion adapter for `file_watch`
+ * registrations (compiled from `FileWatchTriggerNode`s, see
+ * `registration-sync.ts`).
+ *
+ * File events arrive live through `fs.watch`, unlike the scheduler's poll
+ * sweep — so the sweep timer here only reconciles *which* registrations are
+ * watched: it opens a watcher for every enabled `file_watch` registration
+ * that isn't already watched with the current config (skipping — and
+ * recording `last_error` for — paths that don't exist), and closes the
+ * watcher for any registration that is no longer enabled, no longer exists,
+ * or whose watched path/recursion setting changed. Pattern/ignore-pattern
+ * matching and debounce reuse `FileWatchTriggerNode`'s own logic via the
+ * shared `@nodetool-ai/automation-nodes` helper, so the adapter and the
+ * in-editor live-test path can never drift apart.
+ *
+ * Follows `scheduler.ts`'s shape: a pure-ish sweep function callers can drive
+ * directly in tests, a thin `setInterval` wrapper for production, and a stop
+ * handle. The one difference is unavoidable statefulness — `fs.watch` handles
+ * must persist across sweeps — so the sweep function takes an explicit state
+ * map instead of being fully pure.
+ */
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { createLogger } from "@nodetool-ai/config";
+import { TriggerRegistration } from "@nodetool-ai/models";
+import { FileWatchDebouncer, shouldEmitFileWatchEvent, shouldProcessFileWatchPath, isWatchedFileEvent } from "@nodetool-ai/automation-nodes";
+import { isFunctionValue, isString } from "../lib/wire-values.js";
+// Stryker disable next-line StringLiteral: logger name is a diagnostic label, not a behavioural contract
+const log = createLogger("nodetool.websocket.triggers.file-watch");
+const DEFAULT_SWEEP_INTERVAL_MS = 5_000;
+/**
+ * Downtime catch-up (`config_json.catch_up: true`). `fs.watch` has no
+ * history, so the only way to notice a change made while the adapter wasn't
+ * running is to compare a snapshot taken before stopping against a fresh
+ * scan on the next start. Capped so a huge tree can't make shutdown/startup
+ * hang or bloat the `cursor` column — `last_error` records when the cap was
+ * hit so the truncation is visible, not silent.
+ */
+const CATCH_UP_SNAPSHOT_CAP = 10_000;
+export function createFileWatchState() {
+    return new Map();
+}
+function readString(config, key, fallback) {
+    const raw = config?.[key];
+    return isString(raw) ? raw : fallback;
+}
+function readBool(config, key, fallback) {
+    const raw = config?.[key];
+    return raw === undefined || raw === null ? fallback : Boolean(raw);
+}
+function readNumber(config, key, fallback) {
+    const raw = config?.[key];
+    if (raw === undefined || raw === null)
+        return fallback;
+    const value = Number(raw);
+    return Number.isFinite(value) ? value : fallback;
+}
+function readStringArray(config, key, fallback) {
+    const raw = config?.[key];
+    return Array.isArray(raw) ? raw.filter((v) => typeof v === "string") : fallback;
+}
+/** The same property names `FileWatchTriggerNode` snapshots into the
+ * registration on sync (`registration-sync.ts`). */
+function resolveWatchPath(config) {
+    return path.resolve(readString(config, "path", "."));
+}
+function configFilter(config) {
+    return {
+        patterns: readStringArray(config, "patterns", ["*"]),
+        ignorePatterns: readStringArray(config, "ignore_patterns", []),
+        events: readStringArray(config, "events", [
+            "created",
+            "modified",
+            "deleted",
+            "moved"
+        ])
+    };
+}
+function configSnapshotKey(config) {
+    return JSON.stringify({
+        path: resolveWatchPath(config),
+        recursive: readBool(config, "recursive", false)
+    });
+}
+async function deliverFileWatchEvent(registration, eventType, filePath, isDirectory, opts, inputId) {
+    const nowMs = (opts.now ?? Date.now)();
+    const payload = {
+        event: eventType,
+        path: filePath,
+        dest_path: "",
+        is_directory: isDirectory,
+        timestamp: new Date(nowMs).toISOString()
+    };
+    try {
+        await opts.wakeupService.deliverTriggerInput({
+            runId: registration.workflow_id,
+            nodeId: registration.node_id,
+            inputId,
+            payload
+        });
+    }
+    catch (err) {
+        const error = err instanceof Error ? err : new Error(String(err));
+        registration.last_error = error.message;
+        await registration.save();
+        log.warn(`File-watch registration ${registration.id} failed to deliver trigger input`, error);
+        return;
+    }
+    registration.last_fired_at = new Date(nowMs).toISOString();
+    registration.last_error = null;
+    await registration.save();
+    opts.notify?.({ registrationId: registration.id, inputId });
+}
+/**
+ * Attach an `fs.watch` handle for one registration. Mirrors
+ * `FileWatchTriggerNode.genProcess()`'s `watchDir`: `fs.watch` emits
+ * `"rename"` for create/delete and `"change"` for modify.
+ */
+function attachWatcher(registration, watchPath, recursive, filter, debouncer, opts) {
+    const eventCounter = { count: 0 };
+    const handleEvent = (eventType, filePath, isDirectory) => {
+        if (!shouldEmitFileWatchEvent(eventType, filePath, filter, debouncer)) {
+            return;
+        }
+        eventCounter.count += 1;
+        const nowMs = (opts.now ?? Date.now)();
+        const inputId = `${registration.id}:${nowMs}:${eventCounter.count}`;
+        void deliverFileWatchEvent(registration, eventType, filePath, isDirectory, opts, inputId);
+    };
+    const watch = opts.watch ?? fs.watch;
+    return watch(watchPath, { recursive, persistent: true }, (eventType, filename) => {
+        if (!filename)
+            return;
+        const fullPath = path.join(watchPath, filename.toString());
+        const exists = fs.existsSync(fullPath);
+        const isDirectory = exists && fs.statSync(fullPath).isDirectory();
+        if (eventType === "rename") {
+            if (exists) {
+                handleEvent("created", fullPath, isDirectory);
+            }
+            else {
+                handleEvent("deleted", fullPath, false);
+            }
+        }
+        else if (eventType === "change") {
+            // macOS can report a change for the watched directory itself using
+            // its basename. Joining that name to watchPath produces a nonexistent
+            // duplicate path, which is not a valid modified-file event.
+            if (!exists)
+                return;
+            handleEvent("modified", fullPath, isDirectory);
+        }
+    });
+}
+/**
+ * Scan `watchPath` for the files a watcher for `filter` would care about
+ * (directories are never diffed — only file mtimes), capped at
+ * `CATCH_UP_SNAPSHOT_CAP` entries. BFS order so a capped scan takes a
+ * deterministic, roughly breadth-first prefix of the tree rather than an
+ * arbitrary one that depends on `readdirSync` ordering across directories.
+ */
+function scanDirectorySnapshot(watchPath, recursive, filter) {
+    const entries = {};
+    let truncated = false;
+    const dirs = [watchPath];
+    while (dirs.length > 0 && !truncated) {
+        const dir = dirs.shift();
+        let dirents;
+        try {
+            dirents = fs.readdirSync(dir, { withFileTypes: true });
+        }
+        catch {
+            // Directory vanished mid-scan (e.g. concurrent delete) — skip it.
+            continue;
+        }
+        for (const dirent of dirents) {
+            const fullPath = path.join(dir, dirent.name);
+            if (dirent.isDirectory()) {
+                if (recursive)
+                    dirs.push(fullPath);
+                continue;
+            }
+            if (!dirent.isFile())
+                continue;
+            if (!shouldProcessFileWatchPath(fullPath, filter))
+                continue;
+            if (Object.keys(entries).length >= CATCH_UP_SNAPSHOT_CAP) {
+                truncated = true;
+                break;
+            }
+            try {
+                entries[fullPath] = fs.statSync(fullPath).mtimeMs;
+            }
+            catch {
+                // File vanished between readdir and stat — skip it.
+            }
+        }
+    }
+    return { snapshot: { entries }, truncated };
+}
+/**
+ * Diff a stored snapshot against a fresh scan: files whose mtime changed are
+ * `modified`, files absent from the old snapshot are `created`, files absent
+ * from the new scan are `deleted`.
+ */
+function diffSnapshots(previous, current) {
+    const changes = [];
+    for (const [filePath, mtimeMs] of Object.entries(current.entries)) {
+        const previousMtime = previous.entries[filePath];
+        if (previousMtime === undefined) {
+            changes.push({ event: "created", path: filePath, mtimeMs });
+        }
+        else if (previousMtime !== mtimeMs) {
+            changes.push({ event: "modified", path: filePath, mtimeMs });
+        }
+    }
+    for (const filePath of Object.keys(previous.entries)) {
+        if (!(filePath in current.entries)) {
+            changes.push({ event: "deleted", path: filePath, mtimeMs: 0 });
+        }
+    }
+    return changes;
+}
+/**
+ * Replay changes that happened while the adapter wasn't running, using the
+ * `{path -> mtime}` snapshot `stopFileWatch` persisted into `cursor`. Runs
+ * before `attachWatcher` so catch-up events are delivered ahead of anything
+ * the live watcher itself observes.
+ *
+ * `inputId` is deterministic — `<registrationId>:catchup:<event>:<path>:
+ * <mtimeMs>` — instead of timestamp-based like the live-event ids. If the
+ * server crashes twice in a row before a clean `stopFileWatch` ever runs
+ * again (so `cursor` still holds the same stale snapshot both times), both
+ * restarts diff against the identical baseline and recompute the identical
+ * change list, which produces the identical inputIds. `deliverTriggerInput`
+ * is idempotent by inputId — durably so, once wired to the DB-backed store
+ * (Task 3/11) whose `trigger_inputs.input_id` is uniquely indexed — so the
+ * replay from the second restart is rejected as a duplicate instead of
+ * dispatching the same catch-up event twice. A counter or wall-clock id
+ * would not have that property: it would mint a fresh id each replay and
+ * double-fire on the second crash-restart.
+ */
+async function runCatchUpEvents(registration, watchPath, recursive, filter, opts) {
+    const cursorRaw = registration.cursor;
+    if (!cursorRaw)
+        return;
+    let previous;
+    try {
+        const parsed = JSON.parse(cursorRaw);
+        previous = { entries: parsed.entries ?? {} };
+    }
+    catch {
+        // Cursor predates this format (or is corrupt) — nothing to replay.
+        return;
+    }
+    const { snapshot: current } = scanDirectorySnapshot(watchPath, recursive, filter);
+    const changes = diffSnapshots(previous, current);
+    for (const change of changes) {
+        if (!isWatchedFileEvent(change.event, filter.events))
+            continue;
+        const inputId = `${registration.id}:catchup:${change.event}:${change.path}:${change.mtimeMs}`;
+        await deliverFileWatchEvent(registration, change.event, change.path, false, opts, inputId);
+    }
+    // Consume the cursor: the live watcher takes over from here, and leaving
+    // the stale snapshot in place would replay the same diff on every future
+    // restart until the next clean stop overwrites it.
+    registration.cursor = null;
+    await registration.save();
+}
+/**
+ * Run one reconciliation sweep against the current set of enabled
+ * `file_watch` registrations: closes watchers for registrations that are no
+ * longer enabled/present/unchanged, and opens watchers for the rest. Skips —
+ * and records `last_error` for — a registration whose path does not exist.
+ */
+export async function runFileWatchSweepOnce(state, opts) {
+    const registrations = await TriggerRegistration.findEnabledByKind("file_watch");
+    const enabledIds = new Set(registrations.map((r) => r.id));
+    for (const [id, entry] of [...state.entries()]) {
+        if (!enabledIds.has(id)) {
+            entry.watcher.close();
+            state.delete(id);
+        }
+    }
+    for (const registration of registrations) {
+        const snapshot = configSnapshotKey(registration.config_json);
+        const existing = state.get(registration.id);
+        if (existing && existing.configSnapshot === snapshot)
+            continue;
+        if (existing) {
+            existing.watcher.close();
+            state.delete(registration.id);
+        }
+        const config = registration.config_json;
+        const watchPath = resolveWatchPath(config);
+        if (!fs.existsSync(watchPath)) {
+            registration.last_error = `Watch path does not exist: ${watchPath}`;
+            await registration.save();
+            continue;
+        }
+        const recursive = readBool(config, "recursive", false);
+        const debounceMs = readNumber(config, "debounce_seconds", 0.5) * 1000;
+        const filter = configFilter(config);
+        const debouncer = new FileWatchDebouncer(debounceMs, opts.now);
+        const catchUp = readBool(config, "catch_up", false);
+        if (catchUp) {
+            await runCatchUpEvents(registration, watchPath, recursive, filter, opts);
+        }
+        let watcher;
+        try {
+            watcher = attachWatcher(registration, watchPath, recursive, filter, debouncer, opts);
+        }
+        catch (err) {
+            const error = err instanceof Error ? err : new Error(String(err));
+            registration.last_error = `Failed to watch path: ${watchPath} (${error.message})`;
+            await registration.save();
+            log.warn(`File-watch registration ${registration.id} failed to attach a watcher`, error);
+            continue;
+        }
+        if (registration.last_error) {
+            registration.last_error = null;
+            await registration.save();
+        }
+        state.set(registration.id, {
+            watcher,
+            configSnapshot: snapshot,
+            registration,
+            watchPath,
+            recursive,
+            filter,
+            catchUp
+        });
+    }
+}
+/**
+ * Capture a `{path -> mtime}` snapshot for a catch-up-enabled registration
+ * and persist it into `cursor` so the next start can diff against it. Caps
+ * at `CATCH_UP_SNAPSHOT_CAP` entries and notes the truncation in
+ * `last_error` — a capped snapshot means changes to the excluded files while
+ * stopped may be missed, which is worth surfacing even though it doesn't
+ * block anything.
+ */
+async function captureCatchUpSnapshot(entry) {
+    if (!entry.catchUp)
+        return;
+    const { snapshot, truncated } = scanDirectorySnapshot(entry.watchPath, entry.recursive, entry.filter);
+    entry.registration.cursor = JSON.stringify(snapshot);
+    if (truncated) {
+        entry.registration.last_error = `File-watch catch-up snapshot capped at ${CATCH_UP_SNAPSHOT_CAP} entries; changes to excluded files while stopped may be missed.`;
+    }
+    try {
+        await entry.registration.save();
+    }
+    catch (err) {
+        const error = err instanceof Error ? err : new Error(String(err));
+        log.warn(`File-watch registration ${entry.registration.id} failed to persist catch-up snapshot`, error);
+    }
+}
+/** Close every watcher tracked by `state`, persisting a catch-up snapshot
+ * for each catch-up-enabled registration, and clear the state. */
+export async function stopFileWatch(state) {
+    for (const entry of state.values()) {
+        entry.watcher.close();
+        await captureCatchUpSnapshot(entry);
+    }
+    state.clear();
+}
+/**
+ * Start the file-watch adapter: an immediate sweep plus a periodic
+ * reconciliation timer (`startReaper`/`startScheduler` shape). File events
+ * themselves are not polled — they arrive live through each registration's
+ * `fs.watch` handle; only registration churn (new/disabled/changed) waits for
+ * the sweep.
+ */
+export function startFileWatch(opts) {
+    const intervalMs = opts.intervalMs ?? DEFAULT_SWEEP_INTERVAL_MS;
+    const state = createFileWatchState();
+    let sweepPromise = null;
+    const sweep = () => {
+        if (sweepPromise)
+            return;
+        sweepPromise = runFileWatchSweepOnce(state, opts)
+            .catch((err) => {
+            log.warn("File-watch sweep failed", err instanceof Error ? err : new Error(String(err)));
+        })
+            .finally(() => {
+            sweepPromise = null;
+        });
+    };
+    sweep();
+    const timer = setInterval(sweep, intervalMs);
+    if (isFunctionValue(timer.unref)) {
+        timer.unref();
+    }
+    return async () => {
+        clearInterval(timer);
+        // A sweep that was already running can attach watchers after this call
+        // begins. Wait for it before closing the state so the returned promise
+        // means that teardown is complete.
+        await sweepPromise;
+        await stopFileWatch(state);
+    };
+}
+//# sourceMappingURL=file-watch.js.map

package/dist/triggers/file-watch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-watch.js","sourceRoot":"","sources":["../../src/triggers/file-watch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,EACL,kBAAkB,EAClB,wBAAwB,EACxB,0BAA0B,EAC1B,kBAAkB,EAEnB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,eAAe,EACf,QAAQ,EACT,MAAM,uBAAuB,CAAC;AAE/B,yGAAyG;AACzG,MAAM,GAAG,GAAG,YAAY,CAAC,wCAAwC,CAAC,CAAC;AAEnE,MAAM,yBAAyB,GAAG,KAAK,CAAC;AAExC;;;;;;;GAOG;AACH,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAoErC,MAAM,UAAU,oBAAoB;IAClC,OAAO,IAAI,GAAG,EAAE,CAAC;AACnB,CAAC;AAED,SAAS,UAAU,CACjB,MAAsC,EACtC,GAAW,EACX,QAAgB;IAEhB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;IAC1B,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;AACxC,CAAC;AAED,SAAS,QAAQ,CACf,MAAsC,EACtC,GAAW,EACX,QAAiB;IAEjB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;IAC1B,OAAO,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,UAAU,CACjB,MAAsC,EACtC,GAAW,EACX,QAAgB;IAEhB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC;IACvD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;AACnD,CAAC;AAED,SAAS,eAAe,CACtB,MAAsC,EACtC,GAAW,EACX,QAAkB;IAElB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;IAC1B,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC/F,CAAC;AAED;oDACoD;AACpD,SAAS,gBAAgB,CAAC,MAAsC;IAC9D,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,YAAY,CAAC,MAAsC;IAC1D,OAAO;QACL,QAAQ,EAAE,eAAe,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC;QACpD,cAAc,EAAE,eAAe,CAAC,MAAM,EAAE,iBAAiB,EAAE,EAAE,CAAC;QAC9D,MAAM,EAAE,eAAe,CAAC,MAAM,EAAE,QAAQ,EAAE;YACxC,SAAS;YACT,UAAU;YACV,SAAS;YACT,OAAO;SACR,CAAC;KACH,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAsC;IAC/D,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,IAAI,EAAE,gBAAgB,CAAC,MAAM,CAAC;QAC9B,SAAS,EAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC;KAChD,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,YAAiC,EACjC,SAAiB,EACjB,QAAgB,EAChB,WAAoB,EACpB,IAA8B,EAC9B,OAAe;IAEf,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG;QACd,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,EAAE;QACb,YAAY,EAAE,WAAW;QACzB,SAAS,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE;KACzC,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC;YAC3C,KAAK,EAAE,YAAY,CAAC,WAAW;YAC/B,MAAM,EAAE,YAAY,CAAC,OAAO;YAC5B,OAAO;YACP,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAClE,YAAY,CAAC,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC;QACxC,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;QAC1B,GAAG,CAAC,IAAI,CACN,2BAA2B,YAAY,CAAC,EAAE,kCAAkC,EAC5E,KAAK,CACN,CAAC;QACF,OAAO;IACT,CAAC;IAED,YAAY,CAAC,aAAa,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3D,YAAY,CAAC,UAAU,GAAG,IAAI,CAAC;IAC/B,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;IAE1B,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,cAAc,EAAE,YAAY,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CACpB,YAAiC,EACjC,SAAiB,EACjB,SAAkB,EAClB,MAAuB,EACvB,SAA6B,EAC7B,IAA8B;IAE9B,MAAM,YAAY,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAElC,MAAM,WAAW,GAAG,CAClB,SAA6C,EAC7C,QAAgB,EAChB,WAAoB,EACd,EAAE;QACR,IAAI,CAAC,wBAAwB,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;YACtE,OAAO;QACT,CAAC;QACD,YAAY,CAAC,KAAK,IAAI,CAAC,CAAC;QACxB,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,GAAG,YAAY,CAAC,EAAE,IAAI,KAAK,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC;QACpE,KAAK,qBAAqB,CACxB,YAAY,EACZ,SAAS,EACT,QAAQ,EACR,WAAW,EACX,IAAI,EACJ,OAAO,CACR,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC;IACrC,OAAO,KAAK,CACV,SAAS,EACT,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,EAC/B,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE;QACtB,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,WAAW,GAAG,MAAM,IAAI,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QAElE,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC3B,IAAI,MAAM,EAAE,CAAC;gBACX,WAAW,CAAC,SAAS,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;YAChD,CAAC;iBAAM,CAAC;gBACN,WAAW,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;aAAM,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,mEAAmE;YACnE,sEAAsE;YACtE,4DAA4D;YAC5D,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpB,WAAW,CAAC,UAAU,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,qBAAqB,CAC5B,SAAiB,EACjB,SAAkB,EAClB,MAAuB;IAEvB,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,MAAM,IAAI,GAAa,CAAC,SAAS,CAAC,CAAC;IAEnC,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAY,CAAC;QACnC,IAAI,OAAoB,CAAC;QACzB,IAAI,CAAC;YACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;YAClE,SAAS;QACX,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YAE7C,IAAI,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;gBACzB,IAAI,SAAS;oBAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACnC,SAAS;YACX,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;gBAAE,SAAS;YAC/B,IAAI,CAAC,0BAA0B,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAAE,SAAS;YAE5D,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,IAAI,qBAAqB,EAAE,CAAC;gBACzD,SAAS,GAAG,IAAI,CAAC;gBACjB,MAAM;YACR,CAAC;YAED,IAAI,CAAC;gBACH,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;YACpD,CAAC;YAAC,MAAM,CAAC;gBACP,oDAAoD;YACtD,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CACpB,QAA2B,EAC3B,OAA0B;IAE1B,MAAM,OAAO,GAAoB,EAAE,CAAC;IAEpC,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAClE,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9D,CAAC;aAAM,IAAI,aAAa,KAAK,OAAO,EAAE,CAAC;YACrC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,KAAK,UAAU,gBAAgB,CAC7B,YAAiC,EACjC,SAAiB,EACjB,SAAkB,EAClB,MAAuB,EACvB,IAA8B;IAE9B,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC;IACtC,IAAI,CAAC,SAAS;QAAE,OAAO;IAEvB,IAAI,QAA2B,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAA+B,CAAC;QACnE,QAAQ,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;QACnE,OAAO;IACT,CAAC;IAED,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,qBAAqB,CACjD,SAAS,EACT,SAAS,EACT,MAAM,CACP,CAAC;IACF,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAEjD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;YAAE,SAAS;QAC/D,MAAM,OAAO,GAAG,GAAG,YAAY,CAAC,EAAE,YAAY,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAC9F,MAAM,qBAAqB,CACzB,YAAY,EACZ,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,IAAI,EACX,KAAK,EACL,IAAI,EACJ,OAAO,CACR,CAAC;IACJ,CAAC;IAED,yEAAyE;IACzE,yEAAyE;IACzE,mDAAmD;IACnD,YAAY,CAAC,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;AAC5B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAAqB,EACrB,IAA8B;IAE9B,MAAM,aAAa,GAAG,MAAM,mBAAmB,CAAC,iBAAiB,CAC/D,YAAY,CACb,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAE3D,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACxB,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACtB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAED,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAC5C,IAAI,QAAQ,IAAI,QAAQ,CAAC,cAAc,KAAK,QAAQ;YAAE,SAAS;QAE/D,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACzB,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAChC,CAAC;QAED,MAAM,MAAM,GAAG,YAAY,CAAC,WAAW,CAAC;QACxC,MAAM,SAAS,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAE3C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9B,YAAY,CAAC,UAAU,GAAG,8BAA8B,SAAS,EAAE,CAAC;YACpE,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;YAC1B,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,EAAE,kBAAkB,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;QACtE,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,SAAS,GAAG,IAAI,kBAAkB,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;QAEpD,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,gBAAgB,CAAC,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC3E,CAAC;QAED,IAAI,OAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,OAAO,GAAG,aAAa,CACrB,YAAY,EACZ,SAAS,EACT,SAAS,EACT,MAAM,EACN,SAAS,EACT,IAAI,CACL,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAClE,YAAY,CAAC,UAAU,GAAG,yBAAyB,SAAS,KAAK,KAAK,CAAC,OAAO,GAAG,CAAC;YAClF,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;YAC1B,GAAG,CAAC,IAAI,CACN,2BAA2B,YAAY,CAAC,EAAE,6BAA6B,EACvE,KAAK,CACN,CAAC;YACF,SAAS;QACX,CAAC;QAED,IAAI,YAAY,CAAC,UAAU,EAAE,CAAC;YAC5B,YAAY,CAAC,UAAU,GAAG,IAAI,CAAC;YAC/B,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE;YACzB,OAAO;YACP,cAAc,EAAE,QAAQ;YACxB,YAAY;YACZ,SAAS;YACT,SAAS;YACT,MAAM;YACN,OAAO;SACR,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,sBAAsB,CACnC,KAA0B;IAE1B,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO;IAE3B,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,qBAAqB,CACnD,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,MAAM,CACb,CAAC;IAEF,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,SAAS,EAAE,CAAC;QACd,KAAK,CAAC,YAAY,CAAC,UAAU,GAAG,0CAA0C,qBAAqB,kEAAkE,CAAC;IACpK,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;IAClC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAClE,GAAG,CAAC,IAAI,CACN,2BAA2B,KAAK,CAAC,YAAY,CAAC,EAAE,sCAAsC,EACtF,KAAK,CACN,CAAC;IACJ,CAAC;AACH,CAAC;AAED;kEACkE;AAClE,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAqB;IACvD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QACnC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACtB,MAAM,sBAAsB,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IACD,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,IAA2B;IACxD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,yBAAyB,CAAC;IAChE,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;IAErC,IAAI,YAAY,GAAyB,IAAI,CAAC;IAE9C,MAAM,KAAK,GAAG,GAAS,EAAE;QACvB,IAAI,YAAY;YAAE,OAAO;QAEzB,YAAY,GAAG,qBAAqB,CAAC,KAAK,EAAE,IAAI,CAAC;aAC9C,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACb,GAAG,CAAC,IAAI,CACN,yBAAyB,EACzB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CACpD,CAAC;QACJ,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,YAAY,GAAG,IAAI,CAAC;QACtB,CAAC,CAAC,CAAC;IACP,CAAC,CAAC;IAEF,KAAK,EAAE,CAAC;IACR,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAC7C,IAAI,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACjC,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;IAED,OAAO,KAAK,IAAI,EAAE;QAChB,aAAa,CAAC,KAAK,CAAC,CAAC;QACrB,uEAAuE;QACvE,uEAAuE;QACvE,mCAAmC;QACnC,MAAM,YAAY,CAAC;QACnB,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC,CAAC;AACJ,CAAC"}

package/dist/triggers/registration-sync.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Registration sync — compiles a workflow's trigger nodes into durable
+ * `trigger_registrations` rows.
+ *
+ * Runs whenever a workflow is saved. Every node whose type maps to a known
+ * trigger kind gets one registration row, with the node's properties
+ * snapshotted into `config_json`; rows for node ids no longer present in the
+ * graph are deleted. Saving never arms a trigger: with `options.enabled`
+ * omitted, existing rows keep the state the Activate toggle last set and new
+ * rows start disabled. Passing `enabled` explicitly is the workflow-level
+ * "active" switch; the start/stop endpoints in the jobs router flip a single
+ * registration instead.
+ */
+import { TriggerRegistration } from "@nodetool-ai/models";
+import type { Workflow as WorkflowModel } from "@nodetool-ai/models";
+import { TRIGGER_KIND_BY_NODE_TYPE } from "@nodetool-ai/protocol";
+import type { TriggerKind } from "@nodetool-ai/protocol";
+export { TRIGGER_KIND_BY_NODE_TYPE };
+export type { TriggerKind };
+interface SyncRegistrationsOptions {
+    /**
+     * Workflow-level activation state to apply to every synced row. Omit it on
+     * the plain save path: existing rows then keep whatever the Activate toggle
+     * last set, and new rows start disabled. Arming a trigger is always an
+     * explicit act, never a side effect of saving the graph.
+     */
+    enabled?: boolean;
+}
+/**
+ * Reconcile a workflow's `trigger_registrations` rows against its current
+ * graph. Returns the registrations that now exist for the workflow.
+ */
+export declare function syncRegistrations(workflow: WorkflowModel, options: SyncRegistrationsOptions): Promise<TriggerRegistration[]>;
+//# sourceMappingURL=registration-sync.d.ts.map

package/dist/triggers/registration-sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registration-sync.d.ts","sourceRoot":"","sources":["../../src/triggers/registration-sync.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAY,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,KAAK,EAAE,QAAQ,IAAI,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAMzD,OAAO,EAAE,yBAAyB,EAAE,CAAC;AACrC,YAAY,EAAE,WAAW,EAAE,CAAC;AAW5B,UAAU,wBAAwB;IAChC;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAiGD;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,aAAa,EACvB,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,mBAAmB,EAAE,CAAC,CA4EhC"}

package/dist/triggers/registration-sync.js

@@ -0,0 +1,162 @@
+/**
+ * Registration sync — compiles a workflow's trigger nodes into durable
+ * `trigger_registrations` rows.
+ *
+ * Runs whenever a workflow is saved. Every node whose type maps to a known
+ * trigger kind gets one registration row, with the node's properties
+ * snapshotted into `config_json`; rows for node ids no longer present in the
+ * graph are deleted. Saving never arms a trigger: with `options.enabled`
+ * omitted, existing rows keep the state the Activate toggle last set and new
+ * rows start disabled. Passing `enabled` explicitly is the workflow-level
+ * "active" switch; the start/stop endpoints in the jobs router flip a single
+ * registration instead.
+ */
+import { randomBytes, createHash } from "node:crypto";
+import { RunEvent, TriggerRegistration } from "@nodetool-ai/models";
+import { TRIGGER_KIND_BY_NODE_TYPE } from "@nodetool-ai/protocol";
+import { isObjectLike, isString } from "../lib/wire-values.js";
+export { TRIGGER_KIND_BY_NODE_TYPE };
+/** Keys `syncRegistrations` writes into a webhook registration's `config_json`
+ * that are not part of the node's own property snapshot — stripped out
+ * before diffing so token/secret rotation doesn't happen on every save. */
+const WEBHOOK_BOOKKEEPING_KEYS = [
+    "webhook_token",
+    "webhook_secret",
+    "webhook_secret_hash"
+];
+/**
+ * A graph node's own property bag, following the same `properties`-then-
+ * `data` precedence the kernel graph loader uses (`kernel/src/graph.ts`).
+ */
+function extractNodeProps(node) {
+    const properties = node.properties;
+    if (isObjectLike(properties)) {
+        return { ...properties };
+    }
+    const data = node.data;
+    if (isObjectLike(data)) {
+        return { ...data };
+    }
+    return {};
+}
+function hashSecret(secret) {
+    return createHash("sha256").update(secret).digest("hex");
+}
+function generateWebhookToken() {
+    return randomBytes(24).toString("hex");
+}
+/**
+ * The shared secret a sender puts in `x-webhook-secret`. It is kept in
+ * plaintext because the user has to read it back to configure the sending
+ * system — there is no show-once channel — and stored next to its digest so
+ * the ingestion route can compare hashes in constant time without rehashing
+ * per request.
+ */
+function generateWebhookSecret() {
+    return randomBytes(32).toString("hex");
+}
+function stripWebhookBookkeeping(config) {
+    const rest = { ...config };
+    for (const key of WEBHOOK_BOOKKEEPING_KEYS) {
+        delete rest[key];
+    }
+    return rest;
+}
+/** True when the node-property portion of two config snapshots differs
+ * (ignoring webhook token/secret bookkeeping, which sync owns). */
+function configPropsChanged(previous, nextProps) {
+    if (!previous)
+        return true;
+    const previousProps = stripWebhookBookkeeping(previous);
+    return JSON.stringify(previousProps) !== JSON.stringify(nextProps);
+}
+function collectTriggerNodes(workflow) {
+    const nodes = workflow.graph?.nodes ?? [];
+    const entries = [];
+    for (const rawNode of nodes) {
+        const node = rawNode;
+        const nodeId = isString(node.id) ? node.id : undefined;
+        const nodeType = isString(node.type) ? node.type : undefined;
+        if (!nodeId || !nodeType)
+            continue;
+        const kind = TRIGGER_KIND_BY_NODE_TYPE[nodeType];
+        if (!kind)
+            continue;
+        entries.push({ nodeId, kind, props: extractNodeProps(node) });
+    }
+    return entries;
+}
+async function emitTriggerRegistered(workflow, registration) {
+    await RunEvent.appendEvent(workflow.id, "TriggerRegistered", {
+        registration_id: registration.id,
+        workflow_id: workflow.id,
+        kind: registration.kind
+    }, registration.node_id);
+}
+/**
+ * Reconcile a workflow's `trigger_registrations` rows against its current
+ * graph. Returns the registrations that now exist for the workflow.
+ */
+export async function syncRegistrations(workflow, options) {
+    const triggerNodes = collectTriggerNodes(workflow);
+    const triggerNodeIds = new Set(triggerNodes.map((n) => n.nodeId));
+    const existing = await TriggerRegistration.findByWorkflow(workflow.id);
+    const existingByNodeId = new Map(existing.map((r) => [r.node_id, r]));
+    const results = [];
+    for (const entry of triggerNodes) {
+        const current = existingByNodeId.get(entry.nodeId) ?? null;
+        const wasEnabled = current ? current.enabled === 1 : false;
+        let config = { ...entry.props };
+        if (entry.kind === "webhook") {
+            const previousConfig = current?.config_json ?? null;
+            const webhookToken = previousConfig?.webhook_token ??
+                generateWebhookToken();
+            const webhookSecret = previousConfig?.webhook_secret ??
+                generateWebhookSecret();
+            config = {
+                ...config,
+                webhook_token: webhookToken,
+                webhook_secret: webhookSecret,
+                webhook_secret_hash: hashSecret(webhookSecret)
+            };
+        }
+        const propsChanged = configPropsChanged(current?.config_json ?? null, entry.props);
+        const enabled = options.enabled ?? wasEnabled;
+        let registration;
+        if (current) {
+            current.kind = entry.kind;
+            current.config_json = config;
+            current.enabled = enabled ? 1 : 0;
+            if (propsChanged) {
+                current.cursor = null;
+            }
+            await current.save();
+            registration = current;
+        }
+        else {
+            registration = await TriggerRegistration.create({
+                user_id: workflow.user_id,
+                workflow_id: workflow.id,
+                node_id: entry.nodeId,
+                kind: entry.kind,
+                config_json: config,
+                enabled: enabled ? 1 : 0,
+                cursor: null
+            });
+        }
+        if (enabled && !wasEnabled) {
+            await emitTriggerRegistered(workflow, registration);
+        }
+        results.push(registration);
+    }
+    // Registrations for nodes that no longer exist (or are no longer trigger
+    // nodes) are removed outright — cursors only survive a disable, not a
+    // deletion.
+    for (const reg of existing) {
+        if (!triggerNodeIds.has(reg.node_id)) {
+            await reg.delete();
+        }
+    }
+    return results;
+}
+//# sourceMappingURL=registration-sync.js.map

package/dist/triggers/registration-sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registration-sync.js","sourceRoot":"","sources":["../../src/triggers/registration-sync.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAEpE,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAElE,OAAO,EACL,YAAY,EACZ,QAAQ,EACT,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,yBAAyB,EAAE,CAAC;AAGrC;;2EAE2E;AAC3E,MAAM,wBAAwB,GAAG;IAC/B,eAAe;IACf,gBAAgB;IAChB,qBAAqB;CACb,CAAC;AAYX;;;GAGG;AACH,SAAS,gBAAgB,CACvB,IAA6B;IAE7B,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACnC,IAAI,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,GAAI,UAAsC,EAAE,CAAC;IACxD,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,GAAI,IAAgC,EAAE,CAAC;IAClD,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,UAAU,CAAC,MAAc;IAChC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,oBAAoB;IAC3B,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,qBAAqB;IAC5B,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,uBAAuB,CAC9B,MAA+B;IAE/B,MAAM,IAAI,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,wBAAwB,EAAE,CAAC;QAC3C,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;mEACmE;AACnE,SAAS,kBAAkB,CACzB,QAAwC,EACxC,SAAkC;IAElC,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,aAAa,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IACxD,OAAO,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;AACrE,CAAC;AAQD,SAAS,mBAAmB,CAAC,QAAuB;IAClD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC;IAC1C,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,OAAO,CAAC;QACrB,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACvD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7D,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ;YAAE,SAAS;QACnC,MAAM,IAAI,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,QAAuB,EACvB,YAAiC;IAEjC,MAAM,QAAQ,CAAC,WAAW,CACxB,QAAQ,CAAC,EAAE,EACX,mBAAmB,EACnB;QACE,eAAe,EAAE,YAAY,CAAC,EAAE;QAChC,WAAW,EAAE,QAAQ,CAAC,EAAE;QACxB,IAAI,EAAE,YAAY,CAAC,IAAI;KACxB,EACD,YAAY,CAAC,OAAO,CACrB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAuB,EACvB,OAAiC;IAEjC,MAAM,YAAY,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAElE,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACvE,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAEtE,MAAM,OAAO,GAA0B,EAAE,CAAC;IAE1C,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;QAC3D,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAE3D,IAAI,MAAM,GAA4B,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;QACzD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,cAAc,GAAG,OAAO,EAAE,WAAW,IAAI,IAAI,CAAC;YACpD,MAAM,YAAY,GACf,cAAc,EAAE,aAAoC;gBACrD,oBAAoB,EAAE,CAAC;YACzB,MAAM,aAAa,GAChB,cAAc,EAAE,cAAqC;gBACtD,qBAAqB,EAAE,CAAC;YAC1B,MAAM,GAAG;gBACP,GAAG,MAAM;gBACT,aAAa,EAAE,YAAY;gBAC3B,cAAc,EAAE,aAAa;gBAC7B,mBAAmB,EAAE,UAAU,CAAC,aAAa,CAAC;aAC/C,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,kBAAkB,CACrC,OAAO,EAAE,WAAW,IAAI,IAAI,EAC5B,KAAK,CAAC,KAAK,CACZ,CAAC;QAEF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,UAAU,CAAC;QAE9C,IAAI,YAAiC,CAAC;QACtC,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;YAC1B,OAAO,CAAC,WAAW,GAAG,MAAM,CAAC;YAC7B,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAClC,IAAI,YAAY,EAAE,CAAC;gBACjB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;YACxB,CAAC;YACD,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;YACrB,YAAY,GAAG,OAAO,CAAC;QACzB,CAAC;aAAM,CAAC;YACN,YAAY,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAsB;gBACnE,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,WAAW,EAAE,QAAQ,CAAC,EAAE;gBACxB,OAAO,EAAE,KAAK,CAAC,MAAM;gBACrB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,WAAW,EAAE,MAAM;gBACnB,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACxB,MAAM,EAAE,IAAI;aACb,CAAC,CAAC;QACL,CAAC;QAED,IAAI,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC;YAC3B,MAAM,qBAAqB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACtD,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC7B,CAAC;IAED,yEAAyE;IACzE,sEAAsE;IACtE,YAAY;IACZ,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACrC,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}