@shipfox/annotations 10.2.0 → 12.0.0

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@shipfox/annotations",
   "license": "MIT",
-  "version": "10.2.0",
+  "version": "12.0.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/ShipfoxHQ/shipfox.git",
@@ -20,14 +20,14 @@
   "dependencies": {
     "drizzle-orm": "^0.45.2",
     "zod": "^4.4.3",
-    "@shipfox/annotations-dto": "9.0.2",
-    "@shipfox/api-auth-context": "10.2.0",
+    "@shipfox/annotations-dto": "12.0.0",
+    "@shipfox/api-auth-context": "12.0.0",
     "@shipfox/config": "1.2.4",
-    "@shipfox/inter-module": "0.2.2",
-    "@shipfox/node-drizzle": "0.3.4",
-    "@shipfox/node-fastify": "0.4.0",
-    "@shipfox/node-module": "1.0.4",
-    "@shipfox/node-postgres": "0.4.4"
+    "@shipfox/inter-module": "0.2.3",
+    "@shipfox/node-drizzle": "0.3.5",
+    "@shipfox/node-fastify": "0.4.1",
+    "@shipfox/node-module": "1.0.5",
+    "@shipfox/node-postgres": "0.5.0"
   },
   "imports": {
     "#*": "./dist/*"

package/src/presentation/routes/read-annotations.test.ts

@@ -16,7 +16,13 @@ const fakeUserAuth: AuthMethod = {
     const memberships = rawWorkspaceIds
       .split(',')
       .filter((workspaceId) => workspaceId.length > 0)
-      .map((workspaceId) => ({workspaceId, role: 'admin' as const}));
+      .map((value) => {
+        const [workspaceId, status] = value.split('|');
+        if (!workspaceId) throw new Error('missing test workspace id');
+        const workspaceStatus: 'active' | 'suspended' | 'deleted' =
+          status === 'suspended' ? 'suspended' : status === 'deleted' ? 'deleted' : 'active';
+        return {workspaceId, role: 'admin' as const, workspaceStatus};
+      });
 
     setUserContext(
       request,
@@ -144,6 +150,24 @@ describe('GET /annotations', () => {
     expect(res.json()).toEqual({annotations: [], has_more: false, next_cursor: null});
   });
 
+  it('does not return annotations for suspended membership claims', async () => {
+    const workspaceId = crypto.randomUUID();
+    const workflowRunId = crypto.randomUUID();
+    await annotationFactory.create({workspaceId, workflowRunId});
+
+    const res = await app.inject({
+      method: 'GET',
+      url: readUrl({workflowRunId, attempt: 1}),
+      headers: {
+        authorization: 'Bearer user',
+        'x-test-workspaces': `${workspaceId}|suspended`,
+      },
+    });
+
+    expect(res.statusCode).toBe(200);
+    expect(res.json()).toEqual({annotations: [], has_more: false, next_cursor: null});
+  });
+
   it('returns an empty list when the job execution filter has no matches', async () => {
     const workspaceId = crypto.randomUUID();
     const workflowRunId = crypto.randomUUID();

package/src/presentation/routes/read-annotations.ts

@@ -29,7 +29,9 @@ export const readAnnotationsRoute = defineRoute({
       throw new ClientError('Invalid cursor', 'invalid-cursor', {status: 400});
     }
 
-    const workspaceIds = user.memberships.map((membership) => membership.workspaceId);
+    const workspaceIds = user.memberships
+      .filter((membership) => membership.workspaceStatus === 'active')
+      .map((membership) => membership.workspaceId);
     const result = await listAnnotationsForRunAttempt({
       workflowRunId,
       workflowRunAttempt: attempt,