@shipfox/api-logs 7.1.0 → 8.0.0

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@shipfox/api-logs",
   "license": "MIT",
-  "version": "7.1.0",
+  "version": "8.0.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/ShipfoxHQ/shipfox.git",
@@ -30,18 +30,18 @@
     "drizzle-orm": "^0.45.2",
     "zod": "^4.4.3",
     "@shipfox/api-auth-context": "7.1.0",
-    "@shipfox/api-agent-dto": "6.0.0",
     "@shipfox/api-logs-dto": "5.0.0",
-    "@shipfox/api-workflows-dto": "6.0.0",
+    "@shipfox/api-workflows-dto": "8.0.0",
     "@shipfox/config": "1.2.2",
     "@shipfox/node-drizzle": "0.3.2",
-    "@shipfox/node-error-monitoring": "0.2.0",
     "@shipfox/node-fastify": "0.3.0",
     "@shipfox/node-module": "0.5.0",
-    "@shipfox/node-opentelemetry": "0.6.0",
     "@shipfox/node-outbox": "0.2.4",
+    "@shipfox/node-opentelemetry": "0.6.0",
     "@shipfox/node-postgres": "0.4.2",
-    "@shipfox/node-temporal": "0.4.0"
+    "@shipfox/node-temporal": "0.4.0",
+    "@shipfox/node-error-monitoring": "0.2.0",
+    "@shipfox/workflow-document": "2.1.1"
   },
   "scripts": {
     "build": "shipfox-swc && shipfox-temporal-bundle dist/temporal/workflows/index.js",

package/src/core/append-logs.ts

@@ -1,5 +1,4 @@
 import {Buffer} from 'node:buffer';
-import {DEFAULT_HARNESS, type Harness} from '@shipfox/api-agent-dto';
 import {
   type LogRecord,
   parseLogRecordLine,
@@ -8,6 +7,7 @@ import {
 } from '@shipfox/api-logs-dto';
 import type {WorkflowsModuleClient} from '@shipfox/api-workflows-dto/inter-module';
 import {logger} from '@shipfox/node-opentelemetry';
+import {DEFAULT_HARNESS, type Harness} from '@shipfox/workflow-document';
 import {config} from '#config.js';
 import {accrueStoredBytes, claimCap, ensureJobAccounting, isJobCapped} from '#db/accounting.js';
 import {insertChunk} from '#db/chunks.js';

package/src/core/session/parse-session.ts

@@ -1,5 +1,5 @@
-import type {Harness} from '@shipfox/api-agent-dto';
 import type {SessionViewRow} from '@shipfox/api-logs-dto';
+import type {Harness} from '@shipfox/workflow-document';
 import {parseClaudeSessionRecord} from './claude-parser.js';
 import {parsePiSessionRecord} from './pi-parser.js';
 import type {AgentSessionRecord} from './session-record.js';

package/src/presentation/routes/append-logs.test.ts

@@ -1,8 +1,7 @@
 import {Buffer} from 'node:buffer';
-import {createLeaseTokenAuthMethod} from '@shipfox/api-auth';
 import {AUTH_USER} from '@shipfox/api-auth-context';
 import {type AuthMethod, closeApp, createApp, type FastifyInstance} from '@shipfox/node-fastify';
-import {mintLeaseToken} from '#test/fixtures/lease-token.js';
+import {fakeLeaseTokenAuthMethod, mintLeaseToken} from '#test/fixtures/lease-token.js';
 import {endLine, ndjsonBody, outputLine, recordLine} from '#test/fixtures/ndjson.js';
 import {createTestWorkflowsClient} from '#test/fixtures/workflows-client.js';
 import {createLogsRoutes} from './index.js';
@@ -36,7 +35,7 @@ describe('POST /runs/jobs/current/steps/:stepId/logs', () => {
 
   beforeAll(async () => {
     app = await createApp({
-      auth: [createLeaseTokenAuthMethod(), stubUserAuth],
+      auth: [fakeLeaseTokenAuthMethod, stubUserAuth],
       routes: createLogsRoutes(createTestWorkflowsClient()),
       swagger: false,
     });

package/test/fixtures/lease-token.ts

@@ -1,9 +1,8 @@
-import {JOB_LEASE_TOKEN_AUDIENCE} from '@shipfox/api-auth-dto';
-import {jobLeaseTokenKey} from '@shipfox/node-auth-root-key';
-import {signHs256} from '@shipfox/node-jwt';
+import {AUTH_LEASED_JOB, setLeasedJobContext} from '@shipfox/api-auth-context';
+import {JOB_LEASE_TOKEN_AUDIENCE, type JobLeaseTokenClaims} from '@shipfox/api-auth-dto';
+import {type AuthMethod, ClientError, extractBearerToken} from '@shipfox/node-fastify';
 
-// Matches test/env.ts; the lease-token auth method reads this same value from config.
-const SECRET = jobLeaseTokenKey();
+const leaseClaims = new Map<string, JobLeaseTokenClaims>();
 
 export interface MintLeaseTokenParams {
   jobId: string;
@@ -14,30 +13,35 @@ export interface MintLeaseTokenParams {
   workflowRunAttemptId?: string;
   currentStepId?: string;
   currentStepAttempt?: number;
-  secret?: string;
-  expiresIn?: string;
-  audience?: string;
 }
 
 export function mintLeaseToken(params: MintLeaseTokenParams): Promise<string> {
-  return signHs256({
-    payload: {
-      jobId: params.jobId,
-      jobExecutionId: params.jobExecutionId,
-      workflowRunId: params.workflowRunId ?? crypto.randomUUID(),
-      workflowRunAttemptId: params.workflowRunAttemptId ?? crypto.randomUUID(),
-      projectId: params.projectId ?? crypto.randomUUID(),
-      workspaceId: params.workspaceId ?? crypto.randomUUID(),
-      runnerSessionId: crypto.randomUUID(),
-      ...(params.currentStepId && params.currentStepAttempt !== undefined
-        ? {
-            currentStepId: params.currentStepId,
-            currentStepAttempt: params.currentStepAttempt,
-          }
-        : {}),
-    },
-    secret: params.secret ?? SECRET,
-    expiresIn: params.expiresIn ?? '90m',
-    audience: params.audience ?? JOB_LEASE_TOKEN_AUDIENCE,
+  const token = `test-auth-${crypto.randomUUID()}`;
+  leaseClaims.set(token, {
+    jobId: params.jobId,
+    jobExecutionId: params.jobExecutionId,
+    workflowRunId: params.workflowRunId ?? crypto.randomUUID(),
+    workflowRunAttemptId: params.workflowRunAttemptId ?? crypto.randomUUID(),
+    projectId: params.projectId ?? crypto.randomUUID(),
+    workspaceId: params.workspaceId ?? crypto.randomUUID(),
+    runnerSessionId: crypto.randomUUID(),
+    ...(params.currentStepId && params.currentStepAttempt !== undefined
+      ? {currentStepId: params.currentStepId, currentStepAttempt: params.currentStepAttempt}
+      : {}),
+    aud: JOB_LEASE_TOKEN_AUDIENCE,
+    iat: 0,
+    exp: Number.MAX_SAFE_INTEGER,
   });
+  return Promise.resolve(token);
 }
+
+export const fakeLeaseTokenAuthMethod: AuthMethod = {
+  name: AUTH_LEASED_JOB,
+  authenticate: (request) => {
+    const token = extractBearerToken(request.headers.authorization);
+    const claims = token ? leaseClaims.get(token) : undefined;
+    if (!claims) throw new ClientError('Authentication required', 'unauthorized', {status: 401});
+    setLeasedJobContext(request, claims);
+    return Promise.resolve();
+  },
+};