@shipfox/annotations 10.2.0 → 12.0.0

package/.turbo/turbo-build.log

@@ -1,2 +1,2 @@
 $ shipfox-swc
-Successfully compiled: 17 files with swc (285.71ms)
+Successfully compiled: 17 files with swc (226.52ms)

package/CHANGELOG.md

@@ -1,5 +1,32 @@
 # @shipfox/annotations
 
+## 12.0.0
+
+### Patch Changes
+
+- Updated dependencies [f78740d]
+- Updated dependencies [f13e8bb]
+  - @shipfox/inter-module@0.2.3
+  - @shipfox/node-fastify@0.4.1
+  - @shipfox/node-module@1.0.5
+  - @shipfox/node-postgres@0.5.0
+  - @shipfox/api-auth-context@12.0.0
+  - @shipfox/annotations-dto@12.0.0
+  - @shipfox/node-drizzle@0.3.5
+
+## 11.0.0
+
+### Major Changes
+
+- 25158c8: Carry workspace lifecycle status in JWT membership claims and enforce suspended or inactive access at the stateless workspace gate while keeping access-token verification stateless.
+
+  `getAuthenticatedSessionContext()` now reads refresh-session metadata from verified access-token claims without checking active refresh-session state; revoking a refresh session does not invalidate an already-issued access token.
+
+### Patch Changes
+
+- Updated dependencies [25158c8]
+  - @shipfox/api-auth-context@11.0.0
+
 ## 10.2.0
 
 ### Patch Changes

package/dist/presentation/routes/read-annotations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"read-annotations.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/read-annotations.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,oBAAoB,iDA0C/B,CAAC"}
+{"version":3,"file":"read-annotations.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/read-annotations.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,oBAAoB,iDA4C/B,CAAC"}

package/dist/presentation/routes/read-annotations.js

@@ -23,7 +23,7 @@ export const readAnnotationsRoute = defineRoute({
                 status: 400
             });
         }
-        const workspaceIds = user.memberships.map((membership)=>membership.workspaceId);
+        const workspaceIds = user.memberships.filter((membership)=>membership.workspaceStatus === 'active').map((membership)=>membership.workspaceId);
         const result = await listAnnotationsForRunAttempt({
             workflowRunId,
             workflowRunAttempt: attempt,

package/dist/presentation/routes/read-annotations.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/presentation/routes/read-annotations.ts"],"sourcesContent":["import {readAnnotationsQuerySchema, readAnnotationsResponseSchema} from '@shipfox/annotations-dto';\nimport {requireUserContext} from '@shipfox/api-auth-context';\nimport {decodeNumberIdCursor, encodeNumberIdCursor} from '@shipfox/node-drizzle';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {listAnnotationsForRunAttempt} from '#db/index.js';\nimport {toAnnotationDto} from '#presentation/dto/index.js';\n\nexport const readAnnotationsRoute = defineRoute({\n  method: 'GET',\n  path: '/',\n  description: 'Read annotations for a workflow run attempt.',\n  schema: {\n    querystring: readAnnotationsQuerySchema,\n    response: {\n      200: readAnnotationsResponseSchema,\n    },\n  },\n  handler: async (request) => {\n    const user = requireUserContext(request);\n    const {\n      workflow_run_id: workflowRunId,\n      attempt,\n      job_execution_id: jobExecutionId,\n      cursor,\n      limit,\n    } = request.query;\n    const decodedCursor = decodeNumberIdCursor(cursor);\n    if (cursor !== undefined && !decodedCursor) {\n      throw new ClientError('Invalid cursor', 'invalid-cursor', {status: 400});\n    }\n\n    const workspaceIds = user.memberships.map((membership) => membership.workspaceId);\n    const result = await listAnnotationsForRunAttempt({\n      workflowRunId,\n      workflowRunAttempt: attempt,\n      workspaceIds,\n      jobExecutionId,\n      after: decodedCursor ? {sequence: decodedCursor.value, id: decodedCursor.id} : undefined,\n      limit,\n    });\n\n    return {\n      annotations: result.annotations.map(toAnnotationDto),\n      has_more: result.hasMore,\n      next_cursor: result.nextCursor\n        ? encodeNumberIdCursor({value: result.nextCursor.sequence, id: result.nextCursor.id})\n        : null,\n    };\n  },\n});\n"],"names":["readAnnotationsQuerySchema","readAnnotationsResponseSchema","requireUserContext","decodeNumberIdCursor","encodeNumberIdCursor","ClientError","defineRoute","listAnnotationsForRunAttempt","toAnnotationDto","readAnnotationsRoute","method","path","description","schema","querystring","response","handler","request","user","workflow_run_id","workflowRunId","attempt","job_execution_id","jobExecutionId","cursor","limit","query","decodedCursor","undefined","status","workspaceIds","memberships","map","membership","workspaceId","result","workflowRunAttempt","after","sequence","value","id","annotations","has_more","hasMore","next_cursor","nextCursor"],"mappings":"AAAA,SAAQA,0BAA0B,EAAEC,6BAA6B,QAAO,2BAA2B;AACnG,SAAQC,kBAAkB,QAAO,4BAA4B;AAC7D,SAAQC,oBAAoB,EAAEC,oBAAoB,QAAO,wBAAwB;AACjF,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,4BAA4B,QAAO,eAAe;AAC1D,SAAQC,eAAe,QAAO,6BAA6B;AAE3D,OAAO,MAAMC,uBAAuBH,YAAY;IAC9CI,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QACNC,aAAad;QACbe,UAAU;YACR,KAAKd;QACP;IACF;IACAe,SAAS,OAAOC;QACd,MAAMC,OAAOhB,mBAAmBe;QAChC,MAAM,EACJE,iBAAiBC,aAAa,EAC9BC,OAAO,EACPC,kBAAkBC,cAAc,EAChCC,MAAM,EACNC,KAAK,EACN,GAAGR,QAAQS,KAAK;QACjB,MAAMC,gBAAgBxB,qBAAqBqB;QAC3C,IAAIA,WAAWI,aAAa,CAACD,eAAe;YAC1C,MAAM,IAAItB,YAAY,kBAAkB,kBAAkB;gBAACwB,QAAQ;YAAG;QACxE;QAEA,MAAMC,eAAeZ,KAAKa,WAAW,CAACC,GAAG,CAAC,CAACC,aAAeA,WAAWC,WAAW;QAChF,MAAMC,SAAS,MAAM5B,6BAA6B;YAChDa;YACAgB,oBAAoBf;YACpBS;YACAP;YACAc,OAAOV,gBAAgB;gBAACW,UAAUX,cAAcY,KAAK;gBAAEC,IAAIb,cAAca,EAAE;YAAA,IAAIZ;YAC/EH;QACF;QAEA,OAAO;YACLgB,aAAaN,OAAOM,WAAW,CAACT,GAAG,CAACxB;YACpCkC,UAAUP,OAAOQ,OAAO;YACxBC,aAAaT,OAAOU,UAAU,GAC1BzC,qBAAqB;gBAACmC,OAAOJ,OAAOU,UAAU,CAACP,QAAQ;gBAAEE,IAAIL,OAAOU,UAAU,CAACL,EAAE;YAAA,KACjF;QACN;IACF;AACF,GAAG"}
+{"version":3,"sources":["../../../src/presentation/routes/read-annotations.ts"],"sourcesContent":["import {readAnnotationsQuerySchema, readAnnotationsResponseSchema} from '@shipfox/annotations-dto';\nimport {requireUserContext} from '@shipfox/api-auth-context';\nimport {decodeNumberIdCursor, encodeNumberIdCursor} from '@shipfox/node-drizzle';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {listAnnotationsForRunAttempt} from '#db/index.js';\nimport {toAnnotationDto} from '#presentation/dto/index.js';\n\nexport const readAnnotationsRoute = defineRoute({\n  method: 'GET',\n  path: '/',\n  description: 'Read annotations for a workflow run attempt.',\n  schema: {\n    querystring: readAnnotationsQuerySchema,\n    response: {\n      200: readAnnotationsResponseSchema,\n    },\n  },\n  handler: async (request) => {\n    const user = requireUserContext(request);\n    const {\n      workflow_run_id: workflowRunId,\n      attempt,\n      job_execution_id: jobExecutionId,\n      cursor,\n      limit,\n    } = request.query;\n    const decodedCursor = decodeNumberIdCursor(cursor);\n    if (cursor !== undefined && !decodedCursor) {\n      throw new ClientError('Invalid cursor', 'invalid-cursor', {status: 400});\n    }\n\n    const workspaceIds = user.memberships\n      .filter((membership) => membership.workspaceStatus === 'active')\n      .map((membership) => membership.workspaceId);\n    const result = await listAnnotationsForRunAttempt({\n      workflowRunId,\n      workflowRunAttempt: attempt,\n      workspaceIds,\n      jobExecutionId,\n      after: decodedCursor ? {sequence: decodedCursor.value, id: decodedCursor.id} : undefined,\n      limit,\n    });\n\n    return {\n      annotations: result.annotations.map(toAnnotationDto),\n      has_more: result.hasMore,\n      next_cursor: result.nextCursor\n        ? encodeNumberIdCursor({value: result.nextCursor.sequence, id: result.nextCursor.id})\n        : null,\n    };\n  },\n});\n"],"names":["readAnnotationsQuerySchema","readAnnotationsResponseSchema","requireUserContext","decodeNumberIdCursor","encodeNumberIdCursor","ClientError","defineRoute","listAnnotationsForRunAttempt","toAnnotationDto","readAnnotationsRoute","method","path","description","schema","querystring","response","handler","request","user","workflow_run_id","workflowRunId","attempt","job_execution_id","jobExecutionId","cursor","limit","query","decodedCursor","undefined","status","workspaceIds","memberships","filter","membership","workspaceStatus","map","workspaceId","result","workflowRunAttempt","after","sequence","value","id","annotations","has_more","hasMore","next_cursor","nextCursor"],"mappings":"AAAA,SAAQA,0BAA0B,EAAEC,6BAA6B,QAAO,2BAA2B;AACnG,SAAQC,kBAAkB,QAAO,4BAA4B;AAC7D,SAAQC,oBAAoB,EAAEC,oBAAoB,QAAO,wBAAwB;AACjF,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,4BAA4B,QAAO,eAAe;AAC1D,SAAQC,eAAe,QAAO,6BAA6B;AAE3D,OAAO,MAAMC,uBAAuBH,YAAY;IAC9CI,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QACNC,aAAad;QACbe,UAAU;YACR,KAAKd;QACP;IACF;IACAe,SAAS,OAAOC;QACd,MAAMC,OAAOhB,mBAAmBe;QAChC,MAAM,EACJE,iBAAiBC,aAAa,EAC9BC,OAAO,EACPC,kBAAkBC,cAAc,EAChCC,MAAM,EACNC,KAAK,EACN,GAAGR,QAAQS,KAAK;QACjB,MAAMC,gBAAgBxB,qBAAqBqB;QAC3C,IAAIA,WAAWI,aAAa,CAACD,eAAe;YAC1C,MAAM,IAAItB,YAAY,kBAAkB,kBAAkB;gBAACwB,QAAQ;YAAG;QACxE;QAEA,MAAMC,eAAeZ,KAAKa,WAAW,CAClCC,MAAM,CAAC,CAACC,aAAeA,WAAWC,eAAe,KAAK,UACtDC,GAAG,CAAC,CAACF,aAAeA,WAAWG,WAAW;QAC7C,MAAMC,SAAS,MAAM9B,6BAA6B;YAChDa;YACAkB,oBAAoBjB;YACpBS;YACAP;YACAgB,OAAOZ,gBAAgB;gBAACa,UAAUb,cAAcc,KAAK;gBAAEC,IAAIf,cAAce,EAAE;YAAA,IAAId;YAC/EH;QACF;QAEA,OAAO;YACLkB,aAAaN,OAAOM,WAAW,CAACR,GAAG,CAAC3B;YACpCoC,UAAUP,OAAOQ,OAAO;YACxBC,aAAaT,OAAOU,UAAU,GAC1B3C,qBAAqB;gBAACqC,OAAOJ,OAAOU,UAAU,CAACP,QAAQ;gBAAEE,IAAIL,OAAOU,UAAU,CAACL,EAAE;YAAA,KACjF;QACN;IACF;AACF,GAAG"}