@shipfox/api-triggers 10.2.0 → 12.0.0

package/.turbo/turbo-build.log

@@ -1,6 +1,6 @@
 $ shipfox-swc && shipfox-temporal-bundle dist/temporal/workflows/index.js
-Successfully compiled: 58 files with swc (410.62ms)
-2026-07-28T16:59:10.465Z [INFO] asset workflow-bundle-69915b80080285c7230d.js 3.17 MiB [emitted] [immutable] (name: main)
+Successfully compiled: 58 files with swc (406.13ms)
+2026-08-04T08:17:12.242Z [INFO] asset workflow-bundle-69915b80080285c7230d.js 3.17 MiB [emitted] [immutable] (name: main)
 orphan modules 33.5 KiB [orphan] 21 modules
 runtime modules 1.13 KiB 5 modules
 modules by path ../../../node_modules/.pnpm/ 970 KiB 196 modules
@@ -13,6 +13,6 @@ optional modules 30 bytes [optional]
   __temporal_custom_payload_converter (ignored) 15 bytes [optional] [built] [code generated]
   __temporal_custom_failure_converter (ignored) 15 bytes [optional] [built] [code generated]
 ../../shared/node/temporal/dist/workflow-error-interceptor.js 1.21 KiB [built] [code generated]
-webpack 5.107.2 compiled successfully in 6177 ms
-2026-07-28T16:59:10.493Z [INFO] Workflow bundle created { size: '3.17MB' }
+webpack 5.107.2 compiled successfully in 4485 ms
+2026-08-04T08:17:12.280Z [INFO] Workflow bundle created { size: '3.17MB' }
 /home/runner/work/shipfox/shipfox/libs/api/triggers/dist/temporal/workflows/index.js: 3329015 bytes

package/CHANGELOG.md

@@ -1,5 +1,72 @@
 # @shipfox/api-triggers
 
+## 12.0.0
+
+### Patch Changes
+
+- f78740d: Remove Unicode dash punctuation from package prose and source comments.
+- dea1ffd: Expose normalized repository references on listening execution events.
+- 4d246d4: Align predicate validation and runtime evaluation with field-specific context contracts.
+- cb0abfa: Expose the normalized trigger project, repository, ref, and commit in workflow context.
+- Updated dependencies [ee2ce67]
+- Updated dependencies [7c4116e]
+- Updated dependencies [5d2c9cf]
+- Updated dependencies [e95fdf4]
+- Updated dependencies [3d91d1d]
+- Updated dependencies [f7939c7]
+- Updated dependencies [89f2c18]
+- Updated dependencies [045895c]
+- Updated dependencies [f78740d]
+- Updated dependencies [9e1d599]
+- Updated dependencies [dea1ffd]
+- Updated dependencies [adf07e7]
+- Updated dependencies [3f781ee]
+- Updated dependencies [9fdd5e4]
+- Updated dependencies [285fff2]
+- Updated dependencies [e44a279]
+- Updated dependencies [4d246d4]
+- Updated dependencies [f13e8bb]
+- Updated dependencies [4444079]
+- Updated dependencies [869a792]
+- Updated dependencies [54c820e]
+- Updated dependencies [35a42bd]
+- Updated dependencies [d77baaa]
+- Updated dependencies [41d558c]
+- Updated dependencies [032d316]
+- Updated dependencies [c2a8e54]
+- Updated dependencies [54c820e]
+- Updated dependencies [cb0abfa]
+- Updated dependencies [ee2ce67]
+- Updated dependencies [7f90b0c]
+  - @shipfox/workflow-document@3.0.0
+  - @shipfox/api-definitions-dto@12.0.0
+  - @shipfox/api-workflows-dto@12.0.0
+  - @shipfox/expression@2.0.0
+  - @shipfox/inter-module@0.2.3
+  - @shipfox/node-fastify@0.4.1
+  - @shipfox/node-module@1.0.5
+  - @shipfox/api-integration-core-dto@12.0.0
+  - @shipfox/node-postgres@0.5.0
+  - @shipfox/api-auth-context@12.0.0
+  - @shipfox/node-drizzle@0.3.5
+  - @shipfox/node-outbox@0.2.6
+
+## 11.0.0
+
+### Major Changes
+
+- 25158c8: Carry workspace lifecycle status in JWT membership claims and enforce suspended or inactive access at the stateless workspace gate while keeping access-token verification stateless.
+
+  `getAuthenticatedSessionContext()` now reads refresh-session metadata from verified access-token claims without checking active refresh-session state; revoking a refresh session does not invalidate an already-issued access token.
+
+### Patch Changes
+
+- Updated dependencies [71d9ba4]
+- Updated dependencies [25158c8]
+  - @shipfox/expression@1.2.1
+  - @shipfox/api-auth-context@11.0.0
+  - @shipfox/api-definitions-dto@11.0.0
+
 ## 10.2.0
 
 ### Patch Changes

package/README.md

@@ -162,14 +162,14 @@ unique per `(workflow_definition_id, name)`.
 
 ### Words we do not use
 
-- `provider` — reserved for the integration module's identity
+- `provider`: reserved for the integration module's identity
   (`integrations_connections.provider`). Trigger code says `source`.
-- `eventType` / `type` — replaced by `event`. The bare word `type` would
+- `eventType` / `type`: replaced by `event`. The bare word `type` would
   collide with TypeScript discriminators and with the `IntegrationProvider`
   capability `type` field.
-- `triggerContext` — the runtime payload on a run is called
+- `triggerContext`: the runtime payload on a run is called
   `triggerPayload`.
-- `kind` — every trigger is identified by `(source, event)`. There is no
+- `kind`: every trigger is identified by `(source, event)`. There is no
   separate axis.
 
 ## Architecture
@@ -205,17 +205,17 @@ or POST /workflow-definitions/:definitionId/fire-manual → look up manual subsc
                 └─────────────────────────────────────────────────────┘
 ```
 
-### Layer 1 — workflow definition (source of truth)
+### Layer 1: workflow definition (source of truth)
 
 The YAML `triggers` map lives inside `workflow_definitions.definition`
 (JSONB owned by the definitions module). That is the only place trigger
 declarations live in raw form.
 
-### Layer 2 — projection (queryable)
+### Layer 2: projection (queryable)
 
 `triggers_subscriptions` is rebuilt from `DEFINITION_RESOLVED` events,
 which carry the parsed `triggers` map. The triggers module never reads the
-definitions table — the event is the contract.
+definitions table: the event is the contract.
 
 Cron triggers also project into `triggers_cron_schedules`, keyed by
 `subscription_id`. That table stores the resolved cron expression, timezone,
@@ -223,15 +223,15 @@ next fire time, and last fire time used by the cron firing engine.
 
 Indexes:
 
-- `(workflow_definition_id, name)` — unique. One row per YAML trigger.
-- `(workspace_id, source, event)` — the hot path for matching incoming
+- `(workflow_definition_id, name)`: unique. One row per YAML trigger.
+- `(workspace_id, source, event)`: the hot path for matching incoming
   integration events at workspace scope.
-- `(workflow_definition_id)` — used to clean up the projection on
+- `(workflow_definition_id)`: used to clean up the projection on
   `DEFINITION_DELETED`.
-- `triggers_cron_schedules.next_fire_at` — used to drain due cron schedules
+- `triggers_cron_schedules.next_fire_at`: used to drain due cron schedules
   in next-fire order.
 
-### Layer 3 — run history (immutable)
+### Layer 3: run history (immutable)
 
 `workflow_runs.trigger_source` and `trigger_event` are indexed text
 columns. `trigger_payload` is a JSONB column typed by `TriggerPayload`:

package/dist/core/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/core/config.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAC,mBAAmB,EAAC,MAAM,4BAA4B,CAAC;AAKpE,wBAAgB,gBAAgB,CAC9B,YAAY,EAAE,mBAAmB,GAChC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAKrC;AAED,MAAM,MAAM,uBAAuB,GAC/B;IAAC,IAAI,EAAE,SAAS,CAAA;CAAC,GACjB;IAAC,IAAI,EAAE,UAAU,CAAA;CAAC,GAClB;IAAC,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAC,CAAC;AAE3C,MAAM,MAAM,sBAAsB,GAAG,uBAAuB,CAAC;AAE7D,MAAM,WAAW,0BAA0B;IACzC,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,sBAAsB,EAAE,MAAM,CAAC;CAChC;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,0BAA0B,GAAG,sBAAsB,CAwB/F;AAED,MAAM,WAAW,2BAA2B;IAC1C,YAAY,EAAE,mBAAmB,CAAC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,2BAA2B,GAClC,uBAAuB,CAUzB"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/core/config.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAC,mBAAmB,EAAC,MAAM,4BAA4B,CAAC;AAKpE,wBAAgB,gBAAgB,CAC9B,YAAY,EAAE,mBAAmB,GAChC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAKrC;AAED,MAAM,MAAM,uBAAuB,GAC/B;IAAC,IAAI,EAAE,SAAS,CAAA;CAAC,GACjB;IAAC,IAAI,EAAE,UAAU,CAAA;CAAC,GAClB;IAAC,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAC,CAAC;AAE3C,MAAM,MAAM,sBAAsB,GAAG,uBAAuB,CAAC;AAE7D,MAAM,WAAW,0BAA0B;IACzC,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,sBAAsB,EAAE,MAAM,CAAC;CAChC;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,0BAA0B,GAAG,sBAAsB,CAwB/F;AAED,MAAM,WAAW,2BAA2B;IAC1C,YAAY,EAAE,mBAAmB,CAAC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,2BAA2B,GAClC,uBAAuB,CAUzB"}

package/dist/core/config.js

@@ -1,4 +1,4 @@
-import { createWorkflowExpression, evaluateWorkflowPredicateFailClosed, InvalidWorkflowExpressionError } from '@shipfox/expression';
+import { createWorkflowExpression, evaluateWorkflowPredicateFailClosed, InvalidWorkflowExpressionError, projectWorkflowPredicateContext } from '@shipfox/expression';
 // Narrow the jsonb projection at the read boundary: the parser writes the right shapes,
 // but the column is unconstrained and these values reach run inputs.
 export function readConfigInputs(subscription) {
@@ -48,13 +48,13 @@ export function evaluateStoredFilter(params) {
 export function evaluateTriggerFilter(params) {
     return evaluateStoredFilter({
         value: params.subscription.config.filter,
-        context: {
+        context: projectWorkflowPredicateContext('trigger.filter', {
             event: params.payload,
             trigger: {
                 source: params.source,
                 event: params.event
             }
-        },
+        }),
         invalidReason: 'Trigger subscription filter must be a non-empty string when set',
         evaluationFailedReason: 'Trigger filter evaluation failed'
     });

package/dist/core/config.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/core/config.ts"],"sourcesContent":["import {\n  createWorkflowExpression,\n  evaluateWorkflowPredicateFailClosed,\n  InvalidWorkflowExpressionError,\n  type WorkflowExpression,\n} from '@shipfox/expression';\nimport type {TriggerSubscription} from './entities/subscription.js';\n\n// Narrow the jsonb projection at the read boundary: the parser writes the right shapes,\n// but the column is unconstrained and these values reach run inputs.\n\nexport function readConfigInputs(\n  subscription: TriggerSubscription,\n): Record<string, unknown> | undefined {\n  const value = subscription.config.with;\n  if (value === null || value === undefined) return undefined;\n  if (typeof value !== 'object' || Array.isArray(value)) return undefined;\n  return value as Record<string, unknown>;\n}\n\nexport type TriggerFilterEvaluation =\n  | {kind: 'matched'}\n  | {kind: 'filtered'}\n  | {kind: 'filter-error'; reason: string};\n\nexport type StoredFilterEvaluation = TriggerFilterEvaluation;\n\nexport interface EvaluateStoredFilterParams {\n  value: unknown;\n  context: Record<string, unknown>;\n  invalidReason: string;\n  evaluationFailedReason: string;\n}\n\nexport function evaluateStoredFilter(params: EvaluateStoredFilterParams): StoredFilterEvaluation {\n  const {value} = params;\n  if (value === null || value === undefined) return {kind: 'matched'};\n  if (typeof value !== 'string' || value.trim() === '') {\n    return {\n      kind: 'filter-error',\n      reason: params.invalidReason,\n    };\n  }\n\n  let expression: WorkflowExpression;\n  try {\n    expression = createWorkflowExpression({source: value, check: {mode: 'syntax'}});\n  } catch (error) {\n    return {kind: 'filter-error', reason: reasonFrom(error)};\n  }\n\n  const result = evaluateWorkflowPredicateFailClosed(expression, params.context);\n\n  if (result.evaluationFailed) {\n    return {kind: 'filter-error', reason: params.evaluationFailedReason};\n  }\n\n  return result.value ? {kind: 'matched'} : {kind: 'filtered'};\n}\n\nexport interface EvaluateTriggerFilterParams {\n  subscription: TriggerSubscription;\n  source: string;\n  event: string;\n  payload: unknown;\n}\n\nexport function evaluateTriggerFilter(\n  params: EvaluateTriggerFilterParams,\n): TriggerFilterEvaluation {\n  return evaluateStoredFilter({\n    value: params.subscription.config.filter,\n    context: {\n      event: params.payload,\n      trigger: {source: params.source, event: params.event},\n    },\n    invalidReason: 'Trigger subscription filter must be a non-empty string when set',\n    evaluationFailedReason: 'Trigger filter evaluation failed',\n  });\n}\n\nfunction reasonFrom(error: unknown): string {\n  if (error instanceof InvalidWorkflowExpressionError) return error.reason;\n  if (error instanceof Error) return error.message;\n  return String(error);\n}\n"],"names":["createWorkflowExpression","evaluateWorkflowPredicateFailClosed","InvalidWorkflowExpressionError","readConfigInputs","subscription","value","config","with","undefined","Array","isArray","evaluateStoredFilter","params","kind","trim","reason","invalidReason","expression","source","check","mode","error","reasonFrom","result","context","evaluationFailed","evaluationFailedReason","evaluateTriggerFilter","filter","event","payload","trigger","Error","message","String"],"mappings":"AAAA,SACEA,wBAAwB,EACxBC,mCAAmC,EACnCC,8BAA8B,QAEzB,sBAAsB;AAG7B,wFAAwF;AACxF,qEAAqE;AAErE,OAAO,SAASC,iBACdC,YAAiC;IAEjC,MAAMC,QAAQD,aAAaE,MAAM,CAACC,IAAI;IACtC,IAAIF,UAAU,QAAQA,UAAUG,WAAW,OAAOA;IAClD,IAAI,OAAOH,UAAU,YAAYI,MAAMC,OAAO,CAACL,QAAQ,OAAOG;IAC9D,OAAOH;AACT;AAgBA,OAAO,SAASM,qBAAqBC,MAAkC;IACrE,MAAM,EAACP,KAAK,EAAC,GAAGO;IAChB,IAAIP,UAAU,QAAQA,UAAUG,WAAW,OAAO;QAACK,MAAM;IAAS;IAClE,IAAI,OAAOR,UAAU,YAAYA,MAAMS,IAAI,OAAO,IAAI;QACpD,OAAO;YACLD,MAAM;YACNE,QAAQH,OAAOI,aAAa;QAC9B;IACF;IAEA,IAAIC;IACJ,IAAI;QACFA,aAAajB,yBAAyB;YAACkB,QAAQb;YAAOc,OAAO;gBAACC,MAAM;YAAQ;QAAC;IAC/E,EAAE,OAAOC,OAAO;QACd,OAAO;YAACR,MAAM;YAAgBE,QAAQO,WAAWD;QAAM;IACzD;IAEA,MAAME,SAAStB,oCAAoCgB,YAAYL,OAAOY,OAAO;IAE7E,IAAID,OAAOE,gBAAgB,EAAE;QAC3B,OAAO;YAACZ,MAAM;YAAgBE,QAAQH,OAAOc,sBAAsB;QAAA;IACrE;IAEA,OAAOH,OAAOlB,KAAK,GAAG;QAACQ,MAAM;IAAS,IAAI;QAACA,MAAM;IAAU;AAC7D;AASA,OAAO,SAASc,sBACdf,MAAmC;IAEnC,OAAOD,qBAAqB;QAC1BN,OAAOO,OAAOR,YAAY,CAACE,MAAM,CAACsB,MAAM;QACxCJ,SAAS;YACPK,OAAOjB,OAAOkB,OAAO;YACrBC,SAAS;gBAACb,QAAQN,OAAOM,MAAM;gBAAEW,OAAOjB,OAAOiB,KAAK;YAAA;QACtD;QACAb,eAAe;QACfU,wBAAwB;IAC1B;AACF;AAEA,SAASJ,WAAWD,KAAc;IAChC,IAAIA,iBAAiBnB,gCAAgC,OAAOmB,MAAMN,MAAM;IACxE,IAAIM,iBAAiBW,OAAO,OAAOX,MAAMY,OAAO;IAChD,OAAOC,OAAOb;AAChB"}
+{"version":3,"sources":["../../src/core/config.ts"],"sourcesContent":["import {\n  createWorkflowExpression,\n  evaluateWorkflowPredicateFailClosed,\n  InvalidWorkflowExpressionError,\n  projectWorkflowPredicateContext,\n  type WorkflowExpression,\n} from '@shipfox/expression';\nimport type {TriggerSubscription} from './entities/subscription.js';\n\n// Narrow the jsonb projection at the read boundary: the parser writes the right shapes,\n// but the column is unconstrained and these values reach run inputs.\n\nexport function readConfigInputs(\n  subscription: TriggerSubscription,\n): Record<string, unknown> | undefined {\n  const value = subscription.config.with;\n  if (value === null || value === undefined) return undefined;\n  if (typeof value !== 'object' || Array.isArray(value)) return undefined;\n  return value as Record<string, unknown>;\n}\n\nexport type TriggerFilterEvaluation =\n  | {kind: 'matched'}\n  | {kind: 'filtered'}\n  | {kind: 'filter-error'; reason: string};\n\nexport type StoredFilterEvaluation = TriggerFilterEvaluation;\n\nexport interface EvaluateStoredFilterParams {\n  value: unknown;\n  context: Record<string, unknown>;\n  invalidReason: string;\n  evaluationFailedReason: string;\n}\n\nexport function evaluateStoredFilter(params: EvaluateStoredFilterParams): StoredFilterEvaluation {\n  const {value} = params;\n  if (value === null || value === undefined) return {kind: 'matched'};\n  if (typeof value !== 'string' || value.trim() === '') {\n    return {\n      kind: 'filter-error',\n      reason: params.invalidReason,\n    };\n  }\n\n  let expression: WorkflowExpression;\n  try {\n    expression = createWorkflowExpression({source: value, check: {mode: 'syntax'}});\n  } catch (error) {\n    return {kind: 'filter-error', reason: reasonFrom(error)};\n  }\n\n  const result = evaluateWorkflowPredicateFailClosed(expression, params.context);\n\n  if (result.evaluationFailed) {\n    return {kind: 'filter-error', reason: params.evaluationFailedReason};\n  }\n\n  return result.value ? {kind: 'matched'} : {kind: 'filtered'};\n}\n\nexport interface EvaluateTriggerFilterParams {\n  subscription: TriggerSubscription;\n  source: string;\n  event: string;\n  payload: unknown;\n}\n\nexport function evaluateTriggerFilter(\n  params: EvaluateTriggerFilterParams,\n): TriggerFilterEvaluation {\n  return evaluateStoredFilter({\n    value: params.subscription.config.filter,\n    context: projectWorkflowPredicateContext('trigger.filter', {\n      event: params.payload,\n      trigger: {source: params.source, event: params.event},\n    }),\n    invalidReason: 'Trigger subscription filter must be a non-empty string when set',\n    evaluationFailedReason: 'Trigger filter evaluation failed',\n  });\n}\n\nfunction reasonFrom(error: unknown): string {\n  if (error instanceof InvalidWorkflowExpressionError) return error.reason;\n  if (error instanceof Error) return error.message;\n  return String(error);\n}\n"],"names":["createWorkflowExpression","evaluateWorkflowPredicateFailClosed","InvalidWorkflowExpressionError","projectWorkflowPredicateContext","readConfigInputs","subscription","value","config","with","undefined","Array","isArray","evaluateStoredFilter","params","kind","trim","reason","invalidReason","expression","source","check","mode","error","reasonFrom","result","context","evaluationFailed","evaluationFailedReason","evaluateTriggerFilter","filter","event","payload","trigger","Error","message","String"],"mappings":"AAAA,SACEA,wBAAwB,EACxBC,mCAAmC,EACnCC,8BAA8B,EAC9BC,+BAA+B,QAE1B,sBAAsB;AAG7B,wFAAwF;AACxF,qEAAqE;AAErE,OAAO,SAASC,iBACdC,YAAiC;IAEjC,MAAMC,QAAQD,aAAaE,MAAM,CAACC,IAAI;IACtC,IAAIF,UAAU,QAAQA,UAAUG,WAAW,OAAOA;IAClD,IAAI,OAAOH,UAAU,YAAYI,MAAMC,OAAO,CAACL,QAAQ,OAAOG;IAC9D,OAAOH;AACT;AAgBA,OAAO,SAASM,qBAAqBC,MAAkC;IACrE,MAAM,EAACP,KAAK,EAAC,GAAGO;IAChB,IAAIP,UAAU,QAAQA,UAAUG,WAAW,OAAO;QAACK,MAAM;IAAS;IAClE,IAAI,OAAOR,UAAU,YAAYA,MAAMS,IAAI,OAAO,IAAI;QACpD,OAAO;YACLD,MAAM;YACNE,QAAQH,OAAOI,aAAa;QAC9B;IACF;IAEA,IAAIC;IACJ,IAAI;QACFA,aAAalB,yBAAyB;YAACmB,QAAQb;YAAOc,OAAO;gBAACC,MAAM;YAAQ;QAAC;IAC/E,EAAE,OAAOC,OAAO;QACd,OAAO;YAACR,MAAM;YAAgBE,QAAQO,WAAWD;QAAM;IACzD;IAEA,MAAME,SAASvB,oCAAoCiB,YAAYL,OAAOY,OAAO;IAE7E,IAAID,OAAOE,gBAAgB,EAAE;QAC3B,OAAO;YAACZ,MAAM;YAAgBE,QAAQH,OAAOc,sBAAsB;QAAA;IACrE;IAEA,OAAOH,OAAOlB,KAAK,GAAG;QAACQ,MAAM;IAAS,IAAI;QAACA,MAAM;IAAU;AAC7D;AASA,OAAO,SAASc,sBACdf,MAAmC;IAEnC,OAAOD,qBAAqB;QAC1BN,OAAOO,OAAOR,YAAY,CAACE,MAAM,CAACsB,MAAM;QACxCJ,SAAStB,gCAAgC,kBAAkB;YACzD2B,OAAOjB,OAAOkB,OAAO;YACrBC,SAAS;gBAACb,QAAQN,OAAOM,MAAM;gBAAEW,OAAOjB,OAAOiB,KAAK;YAAA;QACtD;QACAb,eAAe;QACfU,wBAAwB;IAC1B;AACF;AAEA,SAASJ,WAAWD,KAAc;IAChC,IAAIA,iBAAiBpB,gCAAgC,OAAOoB,MAAMN,MAAM;IACxE,IAAIM,iBAAiBW,OAAO,OAAOX,MAAMY,OAAO;IAChD,OAAOC,OAAOb;AAChB"}

package/dist/core/dispatch-integration-event.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dispatch-integration-event.d.ts","sourceRoot":"","sources":["../../src/core/dispatch-integration-event.ts"],"names":[],"mappings":"AASA,OAAO,EAA2B,KAAK,qBAAqB,EAAC,MAAM,uBAAuB,CAAC;AAE3F,MAAM,WAAW,8BAA8B;IAC7C,SAAS,EAAE,qBAAqB,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,IAAI,CAAC;CAClB;AAeD,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,8BAA8B,GACrC,OAAO,CAAC,IAAI,CAAC,CAiHf"}
+{"version":3,"file":"dispatch-integration-event.d.ts","sourceRoot":"","sources":["../../src/core/dispatch-integration-event.ts"],"names":[],"mappings":"AASA,OAAO,EAA2B,KAAK,qBAAqB,EAAC,MAAM,uBAAuB,CAAC;AAE3F,MAAM,WAAW,8BAA8B;IAC7C,SAAS,EAAE,qBAAqB,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,IAAI,CAAC;CAClB;AAeD,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,8BAA8B,GACrC,OAAO,CAAC,IAAI,CAAC,CAmHf"}

package/dist/core/dispatch-integration-event.js

@@ -63,6 +63,7 @@ export async function dispatchIntegrationEvent(params) {
                 workspaceId: subscription.workspaceId,
                 projectId: subscription.projectId,
                 definitionId: subscription.workflowDefinitionId,
+                triggerConnectionId: params.connectionId,
                 triggerPayload: {
                     provider: params.provider,
                     source: params.source,
@@ -95,6 +96,7 @@ export async function dispatchIntegrationEvent(params) {
         history,
         eventRef: params.eventRef,
         workspaceId: params.workspaceId,
+        connectionId: params.connectionId,
         provider: params.provider,
         source: params.source,
         event: params.event,

package/dist/core/dispatch-integration-event.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/core/dispatch-integration-event.ts"],"sourcesContent":["import {findMatchingSubscriptions} from '#db/subscriptions.js';\nimport {\n  eventOutcomeCount,\n  eventReceivedCount,\n  subscriptionTriggeredCount,\n} from '#metrics/instance.js';\nimport {evaluateTriggerFilter, readConfigInputs} from './config.js';\nimport {beginTriggerHistory, toReason} from './record-trigger-history.js';\nimport {routeEventToJobListeners} from './route-event-to-job-listeners.js';\nimport {isPermanentStartRunError, type WorkflowsModuleClient} from './workflows-client.js';\n\nexport interface DispatchIntegrationEventParams {\n  workflows: WorkflowsModuleClient;\n  eventRef: string;\n  workspaceId: string;\n  provider: string;\n  source: string;\n  event: string;\n  deliveryId: string;\n  connectionId: string;\n  connectionName: string | null;\n  payload: unknown;\n  receivedAt: Date;\n}\n\n// Source-agnostic dispatcher: any inbound integration event fans out to every\n// workspace subscription registered for its (source, event) and to every listening\n// job subscribed to it, passing the raw payload through untouched. The module knows\n// nothing about github, gitlab, etc.\n//\n// Continue-on-error: every matched subscription and listener is attempted so one broken\n// subscription cannot starve its siblings. A permanent admission failure (deleted definition,\n// project mismatch, suspended workspace) is recorded and skipped; a transient one is recorded\n// and re-thrown so the outbox\n// replays the whole event and converges (succeeded siblings dedup on the idempotency key). The\n// event reaches a terminal outcome only when no transient error remains: `routed` if any run\n// was created or any listening job matched, `discarded` if nothing matched, otherwise `errored`.\n// History is best-effort; the thrown transient error, not the recorded outcome, drives the retry.\nexport async function dispatchIntegrationEvent(\n  params: DispatchIntegrationEventParams,\n): Promise<void> {\n  eventReceivedCount.add(1, {provider: params.provider});\n\n  const history = await beginTriggerHistory({\n    eventRef: params.eventRef,\n    origin: 'integration',\n    workspaceId: params.workspaceId,\n    provider: params.provider,\n    source: params.source,\n    event: params.event,\n    deliveryId: params.deliveryId,\n    connectionId: params.connectionId,\n    connectionName: params.connectionName,\n    payload: (params.payload ?? null) as Record<string, unknown> | null,\n    receivedAt: params.receivedAt,\n  });\n\n  const subscriptions = await findMatchingSubscriptions({\n    workspaceId: params.workspaceId,\n    source: params.source,\n    event: params.event,\n  });\n\n  let triggeredCount = 0;\n  let triggerEngagedCount = 0;\n  let sawTransientError = false;\n  let firstTransientError: unknown;\n\n  for (const subscription of subscriptions) {\n    const filterResult = evaluateTriggerFilter({\n      subscription,\n      source: params.source,\n      event: params.event,\n      payload: params.payload,\n    });\n    if (filterResult.kind === 'filtered') continue;\n    if (filterResult.kind === 'filter-error') {\n      triggerEngagedCount += 1;\n      await history.filterErrored(subscription, filterResult.reason);\n      continue;\n    }\n    triggerEngagedCount += 1;\n\n    const inputs = readConfigInputs(subscription);\n    try {\n      const run = await params.workflows.startRunFromTrigger({\n        workspaceId: subscription.workspaceId,\n        projectId: subscription.projectId,\n        definitionId: subscription.workflowDefinitionId,\n        triggerPayload: {\n          provider: params.provider,\n          source: params.source,\n          event: params.event,\n          deliveryId: params.deliveryId,\n          data: params.payload,\n        },\n        ...(inputs === undefined ? {} : {inputs}),\n        idempotencyKey: `${subscription.id}:${params.eventRef}`,\n      });\n      await history.triggered(subscription, run);\n      triggeredCount += 1;\n      subscriptionTriggeredCount.add(1, {provider: params.provider});\n    } catch (error) {\n      await history.dispatchErrored(subscription, toReason(error));\n      // Track presence with a flag, not `firstTransientError === undefined`: a thrown\n      // value of `undefined` is still a transient failure and must drive the replay.\n      if (!isPermanentStartRunError(error) && !sawTransientError) {\n        sawTransientError = true;\n        firstTransientError = error;\n      }\n    }\n  }\n\n  const listenerResult = await routeEventToJobListeners({\n    workflows: params.workflows,\n    history,\n    eventRef: params.eventRef,\n    workspaceId: params.workspaceId,\n    provider: params.provider,\n    source: params.source,\n    event: params.event,\n    deliveryId: params.deliveryId,\n    payload: params.payload,\n    receivedAt: params.receivedAt,\n  });\n\n  if (listenerResult.transientErrored && !sawTransientError) {\n    sawTransientError = true;\n    firstTransientError = listenerResult.transientError;\n  }\n\n  const totalMatchedCount = triggerEngagedCount + listenerResult.engagedCount;\n\n  if (sawTransientError) {\n    eventOutcomeCount.add(1, {provider: params.provider, outcome: 'failed'});\n    await history.failed(totalMatchedCount);\n    throw firstTransientError;\n  }\n\n  if (triggeredCount > 0 || listenerResult.acceptedJobCount > 0) {\n    eventOutcomeCount.add(1, {provider: params.provider, outcome: 'routed'});\n    await history.routed(totalMatchedCount);\n    return;\n  }\n\n  if (totalMatchedCount === 0) {\n    eventOutcomeCount.add(1, {provider: params.provider, outcome: 'discarded'});\n    await history.discarded();\n    return;\n  }\n\n  eventOutcomeCount.add(1, {provider: params.provider, outcome: 'errored'});\n  await history.allErrored(totalMatchedCount);\n}\n"],"names":["findMatchingSubscriptions","eventOutcomeCount","eventReceivedCount","subscriptionTriggeredCount","evaluateTriggerFilter","readConfigInputs","beginTriggerHistory","toReason","routeEventToJobListeners","isPermanentStartRunError","dispatchIntegrationEvent","params","add","provider","history","eventRef","origin","workspaceId","source","event","deliveryId","connectionId","connectionName","payload","receivedAt","subscriptions","triggeredCount","triggerEngagedCount","sawTransientError","firstTransientError","subscription","filterResult","kind","filterErrored","reason","inputs","run","workflows","startRunFromTrigger","projectId","definitionId","workflowDefinitionId","triggerPayload","data","undefined","idempotencyKey","id","triggered","error","dispatchErrored","listenerResult","transientErrored","transientError","totalMatchedCount","engagedCount","outcome","failed","acceptedJobCount","routed","discarded","allErrored"],"mappings":"AAAA,SAAQA,yBAAyB,QAAO,uBAAuB;AAC/D,SACEC,iBAAiB,EACjBC,kBAAkB,EAClBC,0BAA0B,QACrB,uBAAuB;AAC9B,SAAQC,qBAAqB,EAAEC,gBAAgB,QAAO,cAAc;AACpE,SAAQC,mBAAmB,EAAEC,QAAQ,QAAO,8BAA8B;AAC1E,SAAQC,wBAAwB,QAAO,oCAAoC;AAC3E,SAAQC,wBAAwB,QAAmC,wBAAwB;AAgB3F,8EAA8E;AAC9E,mFAAmF;AACnF,oFAAoF;AACpF,qCAAqC;AACrC,EAAE;AACF,wFAAwF;AACxF,8FAA8F;AAC9F,8FAA8F;AAC9F,8BAA8B;AAC9B,+FAA+F;AAC/F,6FAA6F;AAC7F,iGAAiG;AACjG,kGAAkG;AAClG,OAAO,eAAeC,yBACpBC,MAAsC;IAEtCT,mBAAmBU,GAAG,CAAC,GAAG;QAACC,UAAUF,OAAOE,QAAQ;IAAA;IAEpD,MAAMC,UAAU,MAAMR,oBAAoB;QACxCS,UAAUJ,OAAOI,QAAQ;QACzBC,QAAQ;QACRC,aAAaN,OAAOM,WAAW;QAC/BJ,UAAUF,OAAOE,QAAQ;QACzBK,QAAQP,OAAOO,MAAM;QACrBC,OAAOR,OAAOQ,KAAK;QACnBC,YAAYT,OAAOS,UAAU;QAC7BC,cAAcV,OAAOU,YAAY;QACjCC,gBAAgBX,OAAOW,cAAc;QACrCC,SAAUZ,OAAOY,OAAO,IAAI;QAC5BC,YAAYb,OAAOa,UAAU;IAC/B;IAEA,MAAMC,gBAAgB,MAAMzB,0BAA0B;QACpDiB,aAAaN,OAAOM,WAAW;QAC/BC,QAAQP,OAAOO,MAAM;QACrBC,OAAOR,OAAOQ,KAAK;IACrB;IAEA,IAAIO,iBAAiB;IACrB,IAAIC,sBAAsB;IAC1B,IAAIC,oBAAoB;IACxB,IAAIC;IAEJ,KAAK,MAAMC,gBAAgBL,cAAe;QACxC,MAAMM,eAAe3B,sBAAsB;YACzC0B;YACAZ,QAAQP,OAAOO,MAAM;YACrBC,OAAOR,OAAOQ,KAAK;YACnBI,SAASZ,OAAOY,OAAO;QACzB;QACA,IAAIQ,aAAaC,IAAI,KAAK,YAAY;QACtC,IAAID,aAAaC,IAAI,KAAK,gBAAgB;YACxCL,uBAAuB;YACvB,MAAMb,QAAQmB,aAAa,CAACH,cAAcC,aAAaG,MAAM;YAC7D;QACF;QACAP,uBAAuB;QAEvB,MAAMQ,SAAS9B,iBAAiByB;QAChC,IAAI;YACF,MAAMM,MAAM,MAAMzB,OAAO0B,SAAS,CAACC,mBAAmB,CAAC;gBACrDrB,aAAaa,aAAab,WAAW;gBACrCsB,WAAWT,aAAaS,SAAS;gBACjCC,cAAcV,aAAaW,oBAAoB;gBAC/CC,gBAAgB;oBACd7B,UAAUF,OAAOE,QAAQ;oBACzBK,QAAQP,OAAOO,MAAM;oBACrBC,OAAOR,OAAOQ,KAAK;oBACnBC,YAAYT,OAAOS,UAAU;oBAC7BuB,MAAMhC,OAAOY,OAAO;gBACtB;gBACA,GAAIY,WAAWS,YAAY,CAAC,IAAI;oBAACT;gBAAM,CAAC;gBACxCU,gBAAgB,GAAGf,aAAagB,EAAE,CAAC,CAAC,EAAEnC,OAAOI,QAAQ,EAAE;YACzD;YACA,MAAMD,QAAQiC,SAAS,CAACjB,cAAcM;YACtCV,kBAAkB;YAClBvB,2BAA2BS,GAAG,CAAC,GAAG;gBAACC,UAAUF,OAAOE,QAAQ;YAAA;QAC9D,EAAE,OAAOmC,OAAO;YACd,MAAMlC,QAAQmC,eAAe,CAACnB,cAAcvB,SAASyC;YACrD,gFAAgF;YAChF,+EAA+E;YAC/E,IAAI,CAACvC,yBAAyBuC,UAAU,CAACpB,mBAAmB;gBAC1DA,oBAAoB;gBACpBC,sBAAsBmB;YACxB;QACF;IACF;IAEA,MAAME,iBAAiB,MAAM1C,yBAAyB;QACpD6B,WAAW1B,OAAO0B,SAAS;QAC3BvB;QACAC,UAAUJ,OAAOI,QAAQ;QACzBE,aAAaN,OAAOM,WAAW;QAC/BJ,UAAUF,OAAOE,QAAQ;QACzBK,QAAQP,OAAOO,MAAM;QACrBC,OAAOR,OAAOQ,KAAK;QACnBC,YAAYT,OAAOS,UAAU;QAC7BG,SAASZ,OAAOY,OAAO;QACvBC,YAAYb,OAAOa,UAAU;IAC/B;IAEA,IAAI0B,eAAeC,gBAAgB,IAAI,CAACvB,mBAAmB;QACzDA,oBAAoB;QACpBC,sBAAsBqB,eAAeE,cAAc;IACrD;IAEA,MAAMC,oBAAoB1B,sBAAsBuB,eAAeI,YAAY;IAE3E,IAAI1B,mBAAmB;QACrB3B,kBAAkBW,GAAG,CAAC,GAAG;YAACC,UAAUF,OAAOE,QAAQ;YAAE0C,SAAS;QAAQ;QACtE,MAAMzC,QAAQ0C,MAAM,CAACH;QACrB,MAAMxB;IACR;IAEA,IAAIH,iBAAiB,KAAKwB,eAAeO,gBAAgB,GAAG,GAAG;QAC7DxD,kBAAkBW,GAAG,CAAC,GAAG;YAACC,UAAUF,OAAOE,QAAQ;YAAE0C,SAAS;QAAQ;QACtE,MAAMzC,QAAQ4C,MAAM,CAACL;QACrB;IACF;IAEA,IAAIA,sBAAsB,GAAG;QAC3BpD,kBAAkBW,GAAG,CAAC,GAAG;YAACC,UAAUF,OAAOE,QAAQ;YAAE0C,SAAS;QAAW;QACzE,MAAMzC,QAAQ6C,SAAS;QACvB;IACF;IAEA1D,kBAAkBW,GAAG,CAAC,GAAG;QAACC,UAAUF,OAAOE,QAAQ;QAAE0C,SAAS;IAAS;IACvE,MAAMzC,QAAQ8C,UAAU,CAACP;AAC3B"}
+{"version":3,"sources":["../../src/core/dispatch-integration-event.ts"],"sourcesContent":["import {findMatchingSubscriptions} from '#db/subscriptions.js';\nimport {\n  eventOutcomeCount,\n  eventReceivedCount,\n  subscriptionTriggeredCount,\n} from '#metrics/instance.js';\nimport {evaluateTriggerFilter, readConfigInputs} from './config.js';\nimport {beginTriggerHistory, toReason} from './record-trigger-history.js';\nimport {routeEventToJobListeners} from './route-event-to-job-listeners.js';\nimport {isPermanentStartRunError, type WorkflowsModuleClient} from './workflows-client.js';\n\nexport interface DispatchIntegrationEventParams {\n  workflows: WorkflowsModuleClient;\n  eventRef: string;\n  workspaceId: string;\n  provider: string;\n  source: string;\n  event: string;\n  deliveryId: string;\n  connectionId: string;\n  connectionName: string | null;\n  payload: unknown;\n  receivedAt: Date;\n}\n\n// Source-agnostic dispatcher: any inbound integration event fans out to every\n// workspace subscription registered for its (source, event) and to every listening\n// job subscribed to it, passing the raw payload through untouched. The module knows\n// nothing about github, gitlab, etc.\n//\n// Continue-on-error: every matched subscription and listener is attempted so one broken\n// subscription cannot starve its siblings. A permanent admission failure (deleted definition,\n// project mismatch, suspended workspace) is recorded and skipped; a transient one is recorded\n// and re-thrown so the outbox\n// replays the whole event and converges (succeeded siblings dedup on the idempotency key). The\n// event reaches a terminal outcome only when no transient error remains: `routed` if any run\n// was created or any listening job matched, `discarded` if nothing matched, otherwise `errored`.\n// History is best-effort; the thrown transient error, not the recorded outcome, drives the retry.\nexport async function dispatchIntegrationEvent(\n  params: DispatchIntegrationEventParams,\n): Promise<void> {\n  eventReceivedCount.add(1, {provider: params.provider});\n\n  const history = await beginTriggerHistory({\n    eventRef: params.eventRef,\n    origin: 'integration',\n    workspaceId: params.workspaceId,\n    provider: params.provider,\n    source: params.source,\n    event: params.event,\n    deliveryId: params.deliveryId,\n    connectionId: params.connectionId,\n    connectionName: params.connectionName,\n    payload: (params.payload ?? null) as Record<string, unknown> | null,\n    receivedAt: params.receivedAt,\n  });\n\n  const subscriptions = await findMatchingSubscriptions({\n    workspaceId: params.workspaceId,\n    source: params.source,\n    event: params.event,\n  });\n\n  let triggeredCount = 0;\n  let triggerEngagedCount = 0;\n  let sawTransientError = false;\n  let firstTransientError: unknown;\n\n  for (const subscription of subscriptions) {\n    const filterResult = evaluateTriggerFilter({\n      subscription,\n      source: params.source,\n      event: params.event,\n      payload: params.payload,\n    });\n    if (filterResult.kind === 'filtered') continue;\n    if (filterResult.kind === 'filter-error') {\n      triggerEngagedCount += 1;\n      await history.filterErrored(subscription, filterResult.reason);\n      continue;\n    }\n    triggerEngagedCount += 1;\n\n    const inputs = readConfigInputs(subscription);\n    try {\n      const run = await params.workflows.startRunFromTrigger({\n        workspaceId: subscription.workspaceId,\n        projectId: subscription.projectId,\n        definitionId: subscription.workflowDefinitionId,\n        triggerConnectionId: params.connectionId,\n        triggerPayload: {\n          provider: params.provider,\n          source: params.source,\n          event: params.event,\n          deliveryId: params.deliveryId,\n          data: params.payload,\n        },\n        ...(inputs === undefined ? {} : {inputs}),\n        idempotencyKey: `${subscription.id}:${params.eventRef}`,\n      });\n      await history.triggered(subscription, run);\n      triggeredCount += 1;\n      subscriptionTriggeredCount.add(1, {provider: params.provider});\n    } catch (error) {\n      await history.dispatchErrored(subscription, toReason(error));\n      // Track presence with a flag, not `firstTransientError === undefined`: a thrown\n      // value of `undefined` is still a transient failure and must drive the replay.\n      if (!isPermanentStartRunError(error) && !sawTransientError) {\n        sawTransientError = true;\n        firstTransientError = error;\n      }\n    }\n  }\n\n  const listenerResult = await routeEventToJobListeners({\n    workflows: params.workflows,\n    history,\n    eventRef: params.eventRef,\n    workspaceId: params.workspaceId,\n    connectionId: params.connectionId,\n    provider: params.provider,\n    source: params.source,\n    event: params.event,\n    deliveryId: params.deliveryId,\n    payload: params.payload,\n    receivedAt: params.receivedAt,\n  });\n\n  if (listenerResult.transientErrored && !sawTransientError) {\n    sawTransientError = true;\n    firstTransientError = listenerResult.transientError;\n  }\n\n  const totalMatchedCount = triggerEngagedCount + listenerResult.engagedCount;\n\n  if (sawTransientError) {\n    eventOutcomeCount.add(1, {provider: params.provider, outcome: 'failed'});\n    await history.failed(totalMatchedCount);\n    throw firstTransientError;\n  }\n\n  if (triggeredCount > 0 || listenerResult.acceptedJobCount > 0) {\n    eventOutcomeCount.add(1, {provider: params.provider, outcome: 'routed'});\n    await history.routed(totalMatchedCount);\n    return;\n  }\n\n  if (totalMatchedCount === 0) {\n    eventOutcomeCount.add(1, {provider: params.provider, outcome: 'discarded'});\n    await history.discarded();\n    return;\n  }\n\n  eventOutcomeCount.add(1, {provider: params.provider, outcome: 'errored'});\n  await history.allErrored(totalMatchedCount);\n}\n"],"names":["findMatchingSubscriptions","eventOutcomeCount","eventReceivedCount","subscriptionTriggeredCount","evaluateTriggerFilter","readConfigInputs","beginTriggerHistory","toReason","routeEventToJobListeners","isPermanentStartRunError","dispatchIntegrationEvent","params","add","provider","history","eventRef","origin","workspaceId","source","event","deliveryId","connectionId","connectionName","payload","receivedAt","subscriptions","triggeredCount","triggerEngagedCount","sawTransientError","firstTransientError","subscription","filterResult","kind","filterErrored","reason","inputs","run","workflows","startRunFromTrigger","projectId","definitionId","workflowDefinitionId","triggerConnectionId","triggerPayload","data","undefined","idempotencyKey","id","triggered","error","dispatchErrored","listenerResult","transientErrored","transientError","totalMatchedCount","engagedCount","outcome","failed","acceptedJobCount","routed","discarded","allErrored"],"mappings":"AAAA,SAAQA,yBAAyB,QAAO,uBAAuB;AAC/D,SACEC,iBAAiB,EACjBC,kBAAkB,EAClBC,0BAA0B,QACrB,uBAAuB;AAC9B,SAAQC,qBAAqB,EAAEC,gBAAgB,QAAO,cAAc;AACpE,SAAQC,mBAAmB,EAAEC,QAAQ,QAAO,8BAA8B;AAC1E,SAAQC,wBAAwB,QAAO,oCAAoC;AAC3E,SAAQC,wBAAwB,QAAmC,wBAAwB;AAgB3F,8EAA8E;AAC9E,mFAAmF;AACnF,oFAAoF;AACpF,qCAAqC;AACrC,EAAE;AACF,wFAAwF;AACxF,8FAA8F;AAC9F,8FAA8F;AAC9F,8BAA8B;AAC9B,+FAA+F;AAC/F,6FAA6F;AAC7F,iGAAiG;AACjG,kGAAkG;AAClG,OAAO,eAAeC,yBACpBC,MAAsC;IAEtCT,mBAAmBU,GAAG,CAAC,GAAG;QAACC,UAAUF,OAAOE,QAAQ;IAAA;IAEpD,MAAMC,UAAU,MAAMR,oBAAoB;QACxCS,UAAUJ,OAAOI,QAAQ;QACzBC,QAAQ;QACRC,aAAaN,OAAOM,WAAW;QAC/BJ,UAAUF,OAAOE,QAAQ;QACzBK,QAAQP,OAAOO,MAAM;QACrBC,OAAOR,OAAOQ,KAAK;QACnBC,YAAYT,OAAOS,UAAU;QAC7BC,cAAcV,OAAOU,YAAY;QACjCC,gBAAgBX,OAAOW,cAAc;QACrCC,SAAUZ,OAAOY,OAAO,IAAI;QAC5BC,YAAYb,OAAOa,UAAU;IAC/B;IAEA,MAAMC,gBAAgB,MAAMzB,0BAA0B;QACpDiB,aAAaN,OAAOM,WAAW;QAC/BC,QAAQP,OAAOO,MAAM;QACrBC,OAAOR,OAAOQ,KAAK;IACrB;IAEA,IAAIO,iBAAiB;IACrB,IAAIC,sBAAsB;IAC1B,IAAIC,oBAAoB;IACxB,IAAIC;IAEJ,KAAK,MAAMC,gBAAgBL,cAAe;QACxC,MAAMM,eAAe3B,sBAAsB;YACzC0B;YACAZ,QAAQP,OAAOO,MAAM;YACrBC,OAAOR,OAAOQ,KAAK;YACnBI,SAASZ,OAAOY,OAAO;QACzB;QACA,IAAIQ,aAAaC,IAAI,KAAK,YAAY;QACtC,IAAID,aAAaC,IAAI,KAAK,gBAAgB;YACxCL,uBAAuB;YACvB,MAAMb,QAAQmB,aAAa,CAACH,cAAcC,aAAaG,MAAM;YAC7D;QACF;QACAP,uBAAuB;QAEvB,MAAMQ,SAAS9B,iBAAiByB;QAChC,IAAI;YACF,MAAMM,MAAM,MAAMzB,OAAO0B,SAAS,CAACC,mBAAmB,CAAC;gBACrDrB,aAAaa,aAAab,WAAW;gBACrCsB,WAAWT,aAAaS,SAAS;gBACjCC,cAAcV,aAAaW,oBAAoB;gBAC/CC,qBAAqB/B,OAAOU,YAAY;gBACxCsB,gBAAgB;oBACd9B,UAAUF,OAAOE,QAAQ;oBACzBK,QAAQP,OAAOO,MAAM;oBACrBC,OAAOR,OAAOQ,KAAK;oBACnBC,YAAYT,OAAOS,UAAU;oBAC7BwB,MAAMjC,OAAOY,OAAO;gBACtB;gBACA,GAAIY,WAAWU,YAAY,CAAC,IAAI;oBAACV;gBAAM,CAAC;gBACxCW,gBAAgB,GAAGhB,aAAaiB,EAAE,CAAC,CAAC,EAAEpC,OAAOI,QAAQ,EAAE;YACzD;YACA,MAAMD,QAAQkC,SAAS,CAAClB,cAAcM;YACtCV,kBAAkB;YAClBvB,2BAA2BS,GAAG,CAAC,GAAG;gBAACC,UAAUF,OAAOE,QAAQ;YAAA;QAC9D,EAAE,OAAOoC,OAAO;YACd,MAAMnC,QAAQoC,eAAe,CAACpB,cAAcvB,SAAS0C;YACrD,gFAAgF;YAChF,+EAA+E;YAC/E,IAAI,CAACxC,yBAAyBwC,UAAU,CAACrB,mBAAmB;gBAC1DA,oBAAoB;gBACpBC,sBAAsBoB;YACxB;QACF;IACF;IAEA,MAAME,iBAAiB,MAAM3C,yBAAyB;QACpD6B,WAAW1B,OAAO0B,SAAS;QAC3BvB;QACAC,UAAUJ,OAAOI,QAAQ;QACzBE,aAAaN,OAAOM,WAAW;QAC/BI,cAAcV,OAAOU,YAAY;QACjCR,UAAUF,OAAOE,QAAQ;QACzBK,QAAQP,OAAOO,MAAM;QACrBC,OAAOR,OAAOQ,KAAK;QACnBC,YAAYT,OAAOS,UAAU;QAC7BG,SAASZ,OAAOY,OAAO;QACvBC,YAAYb,OAAOa,UAAU;IAC/B;IAEA,IAAI2B,eAAeC,gBAAgB,IAAI,CAACxB,mBAAmB;QACzDA,oBAAoB;QACpBC,sBAAsBsB,eAAeE,cAAc;IACrD;IAEA,MAAMC,oBAAoB3B,sBAAsBwB,eAAeI,YAAY;IAE3E,IAAI3B,mBAAmB;QACrB3B,kBAAkBW,GAAG,CAAC,GAAG;YAACC,UAAUF,OAAOE,QAAQ;YAAE2C,SAAS;QAAQ;QACtE,MAAM1C,QAAQ2C,MAAM,CAACH;QACrB,MAAMzB;IACR;IAEA,IAAIH,iBAAiB,KAAKyB,eAAeO,gBAAgB,GAAG,GAAG;QAC7DzD,kBAAkBW,GAAG,CAAC,GAAG;YAACC,UAAUF,OAAOE,QAAQ;YAAE2C,SAAS;QAAQ;QACtE,MAAM1C,QAAQ6C,MAAM,CAACL;QACrB;IACF;IAEA,IAAIA,sBAAsB,GAAG;QAC3BrD,kBAAkBW,GAAG,CAAC,GAAG;YAACC,UAAUF,OAAOE,QAAQ;YAAE2C,SAAS;QAAW;QACzE,MAAM1C,QAAQ8C,SAAS;QACvB;IACF;IAEA3D,kBAAkBW,GAAG,CAAC,GAAG;QAACC,UAAUF,OAAOE,QAAQ;QAAE2C,SAAS;IAAS;IACvE,MAAM1C,QAAQ+C,UAAU,CAACP;AAC3B"}

package/dist/core/route-event-to-job-listeners.d.ts

@@ -5,6 +5,7 @@ export interface RouteEventToJobListenersParams {
     history: TriggerHistoryRecorder;
     eventRef: string;
     workspaceId: string;
+    connectionId: string;
     provider: string;
     source: string;
     event: string;

package/dist/core/route-event-to-job-listeners.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route-event-to-job-listeners.d.ts","sourceRoot":"","sources":["../../src/core/route-event-to-job-listeners.ts"],"names":[],"mappings":"AAIA,OAAO,EAAC,KAAK,sBAAsB,EAAW,MAAM,6BAA6B,CAAC;AAClF,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,uBAAuB,CAAC;AAE/B,MAAM,WAAW,8BAA8B;IAC7C,SAAS,EAAE,qBAAqB,CAAC;IACjC,OAAO,EAAE,sBAAsB,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,8BAA8B;IAC7C;;;;OAIG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,8BAA8B,GACrC,OAAO,CAAC,8BAA8B,CAAC,CAmEzC"}
+{"version":3,"file":"route-event-to-job-listeners.d.ts","sourceRoot":"","sources":["../../src/core/route-event-to-job-listeners.ts"],"names":[],"mappings":"AAKA,OAAO,EAAC,KAAK,sBAAsB,EAAW,MAAM,6BAA6B,CAAC;AAClF,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,uBAAuB,CAAC;AAE/B,MAAM,WAAW,8BAA8B;IAC7C,SAAS,EAAE,qBAAqB,CAAC;IACjC,OAAO,EAAE,sBAAsB,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,8BAA8B;IAC7C;;;;OAIG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,8BAA8B,GACrC,OAAO,CAAC,8BAA8B,CAAC,CAsFzC"}

package/dist/core/route-event-to-job-listeners.js

@@ -1,3 +1,4 @@
+import { projectWorkflowPredicateContext } from '@shipfox/expression';
 import { logger } from '@shipfox/node-opentelemetry';
 import { findMatchingJobListenerSubscriptions } from '#db/job-listener-subscriptions.js';
 import { evaluateStoredFilter } from './config.js';
@@ -27,6 +28,20 @@ export async function routeEventToJobListeners(params) {
             effectiveMatchByJobId.set(subscription.jobId, subscription);
         }
     }
+    const fireDeliveryNeeded = [
+        ...effectiveMatchByJobId.values()
+    ].some((subscription)=>listenerDisposition(subscription) === 'fire');
+    const triggerReference = fireDeliveryNeeded ? await params.workflows.resolveWorkflowRunTriggerReference({
+        workspaceId: params.workspaceId,
+        triggerConnectionId: params.connectionId,
+        triggerPayload: {
+            provider: params.provider,
+            source: params.source,
+            event: params.event,
+            deliveryId: params.deliveryId,
+            data: params.payload
+        }
+    }) : null;
     let acceptedJobCount = 0;
     let deliveredCount = 0;
     let sawTransientError = false;
@@ -43,6 +58,8 @@ export async function routeEventToJobListeners(params) {
                 source: params.source,
                 event: params.event,
                 provider: params.provider,
+                triggerConnectionId: params.connectionId,
+                triggerReference,
                 payload: params.payload,
                 receivedAt: params.receivedAt.toISOString()
             });
@@ -77,9 +94,9 @@ function evaluateListenerFilter(params) {
     if (typeof filter !== 'string' || filter.trim() === '') {
         return evaluateStoredFilter({
             value: filter,
-            context: {
+            context: projectWorkflowPredicateContext(params.subscription.kind === 'on' ? 'listener.on' : 'listener.until', {
                 event: params.payload
-            },
+            }),
             invalidReason: 'Listener subscription filter must be a non-empty string when set',
             evaluationFailedReason: 'Listener filter evaluation failed'
         });
@@ -88,10 +105,10 @@ function evaluateListenerFilter(params) {
     if (snapshot.kind === 'invalid') return snapshot.result;
     return evaluateStoredFilter({
         value: filter,
-        context: {
+        context: projectWorkflowPredicateContext(params.subscription.kind === 'on' ? 'listener.on' : 'listener.until', {
             ...snapshot.value,
             event: params.payload
-        },
+        }),
         invalidReason: 'Listener subscription filter must be a non-empty string when set',
         evaluationFailedReason: 'Listener filter evaluation failed'
     });

package/dist/core/route-event-to-job-listeners.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/core/route-event-to-job-listeners.ts"],"sourcesContent":["import {logger} from '@shipfox/node-opentelemetry';\nimport {findMatchingJobListenerSubscriptions} from '#db/job-listener-subscriptions.js';\nimport {evaluateStoredFilter, type StoredFilterEvaluation} from './config.js';\nimport type {JobListenerSubscription} from './entities/job-listener-subscription.js';\nimport {type TriggerHistoryRecorder, toReason} from './record-trigger-history.js';\nimport {\n  isPermanentDeliverEventToJobListenerError,\n  type WorkflowsModuleClient,\n} from './workflows-client.js';\n\nexport interface RouteEventToJobListenersParams {\n  workflows: WorkflowsModuleClient;\n  history: TriggerHistoryRecorder;\n  eventRef: string;\n  workspaceId: string;\n  provider: string;\n  source: string;\n  event: string;\n  deliveryId: string;\n  payload: unknown;\n  receivedAt: Date;\n}\n\nexport interface RouteEventToJobListenersResult {\n  /**\n   * Listener outcomes that should contribute to received_event.matched_count:\n   * filter errors, accepted deliveries, and dispatch errors. Stale skipped jobs\n   * are intentionally excluded because they did not produce an auditable decision.\n   */\n  engagedCount: number;\n  /**\n   * Jobs with an effective matcher after source/event/filter checks, including\n   * stale skipped jobs.\n   */\n  matchedJobCount: number;\n  acceptedJobCount: number;\n  deliveredCount: number;\n  transientErrored: boolean;\n  transientError: unknown;\n}\n\nexport async function routeEventToJobListeners(\n  params: RouteEventToJobListenersParams,\n): Promise<RouteEventToJobListenersResult> {\n  const subscriptions = await findMatchingJobListenerSubscriptions({\n    workspaceId: params.workspaceId,\n    source: params.source,\n    event: params.event,\n  });\n\n  let filterErrorCount = 0;\n  const effectiveMatchByJobId = new Map<string, JobListenerSubscription>();\n  for (const subscription of subscriptions) {\n    const filterResult = evaluateListenerFilter({subscription, payload: params.payload});\n    if (filterResult.kind === 'filtered') continue;\n    if (filterResult.kind === 'filter-error') {\n      filterErrorCount += 1;\n      await params.history.listenerFilterErrored(subscription, filterResult.reason);\n      continue;\n    }\n\n    const previous = effectiveMatchByJobId.get(subscription.jobId);\n    if (!previous || shouldReplaceEffectiveMatcher(previous, subscription)) {\n      effectiveMatchByJobId.set(subscription.jobId, subscription);\n    }\n  }\n\n  let acceptedJobCount = 0;\n  let deliveredCount = 0;\n  let sawTransientError = false;\n  let dispatchErrorCount = 0;\n  let firstTransientError: unknown;\n\n  for (const subscription of effectiveMatchByJobId.values()) {\n    const disposition = listenerDisposition(subscription);\n    try {\n      const result = await params.workflows.deliverEventToJobListener({\n        jobId: subscription.jobId,\n        disposition,\n        eventRef: params.eventRef,\n        deliveryId: params.deliveryId,\n        source: params.source,\n        event: params.event,\n        provider: params.provider,\n        payload: params.payload,\n        receivedAt: params.receivedAt.toISOString(),\n      });\n      if (!result.skipped) {\n        acceptedJobCount += 1;\n        await params.history.listenerTriggered(subscription);\n      }\n      if (result.buffered) deliveredCount += 1;\n    } catch (error) {\n      dispatchErrorCount += 1;\n      await params.history.listenerDispatchErrored(subscription, toReason(error));\n      if (!isPermanentDeliverEventToJobListenerError(error) && !sawTransientError) {\n        sawTransientError = true;\n        firstTransientError = error;\n      }\n    }\n  }\n\n  return {\n    engagedCount: filterErrorCount + acceptedJobCount + dispatchErrorCount,\n    matchedJobCount: effectiveMatchByJobId.size,\n    acceptedJobCount,\n    deliveredCount,\n    transientErrored: sawTransientError,\n    transientError: sawTransientError ? firstTransientError : undefined,\n  };\n}\n\ninterface EvaluateListenerFilterParams {\n  subscription: JobListenerSubscription;\n  payload: unknown;\n}\n\nfunction evaluateListenerFilter(params: EvaluateListenerFilterParams): StoredFilterEvaluation {\n  const filter = params.subscription.config.filter;\n  if (filter === null || filter === undefined) return {kind: 'matched'};\n  if (typeof filter !== 'string' || filter.trim() === '') {\n    return evaluateStoredFilter({\n      value: filter,\n      context: {event: params.payload},\n      invalidReason: 'Listener subscription filter must be a non-empty string when set',\n      evaluationFailedReason: 'Listener filter evaluation failed',\n    });\n  }\n\n  const snapshot = readFilterSnapshot(params.subscription);\n  if (snapshot.kind === 'invalid') return snapshot.result;\n\n  return evaluateStoredFilter({\n    value: filter,\n    context: {...snapshot.value, event: params.payload},\n    invalidReason: 'Listener subscription filter must be a non-empty string when set',\n    evaluationFailedReason: 'Listener filter evaluation failed',\n  });\n}\n\nfunction readFilterSnapshot(\n  subscription: JobListenerSubscription,\n):\n  | {kind: 'valid'; value: Record<string, unknown>}\n  | {kind: 'invalid'; result: Extract<StoredFilterEvaluation, {kind: 'filter-error'}>} {\n  const value = subscription.config.filter_snapshot;\n  if (value === undefined) return {kind: 'valid', value: {}};\n  if (value !== null && typeof value === 'object' && !Array.isArray(value)) {\n    return {kind: 'valid', value: value as Record<string, unknown>};\n  }\n  return {\n    kind: 'invalid',\n    result: {\n      kind: 'filter-error',\n      reason: 'Listener filter snapshot must be an object when set',\n    },\n  };\n}\n\nfunction listenerDisposition(subscription: JobListenerSubscription): 'fire' | 'resolve' {\n  return subscription.kind === 'until' ? 'resolve' : 'fire';\n}\n\nfunction listenerMatcherSortKey(subscription: JobListenerSubscription): string {\n  const kindRank = subscription.kind === 'until' ? '0' : '1';\n  return `${kindRank}:${subscription.matcherOrdinal.toString().padStart(10, '0')}`;\n}\n\nfunction shouldReplaceEffectiveMatcher(\n  previous: JobListenerSubscription,\n  candidate: JobListenerSubscription,\n): boolean {\n  const previousKey = listenerMatcherSortKey(previous);\n  const candidateKey = listenerMatcherSortKey(candidate);\n  if (candidateKey !== previousKey) return candidateKey < previousKey;\n\n  logger().warn(\n    {\n      jobId: candidate.jobId,\n      keptSubscriptionId: previous.id,\n      candidateSubscriptionId: candidate.id,\n      matcherKind: candidate.kind,\n      matcherOrdinal: candidate.matcherOrdinal,\n    },\n    'duplicate job listener matcher key encountered; choosing deterministic subscription id order',\n  );\n  return candidate.id < previous.id;\n}\n"],"names":["logger","findMatchingJobListenerSubscriptions","evaluateStoredFilter","toReason","isPermanentDeliverEventToJobListenerError","routeEventToJobListeners","params","subscriptions","workspaceId","source","event","filterErrorCount","effectiveMatchByJobId","Map","subscription","filterResult","evaluateListenerFilter","payload","kind","history","listenerFilterErrored","reason","previous","get","jobId","shouldReplaceEffectiveMatcher","set","acceptedJobCount","deliveredCount","sawTransientError","dispatchErrorCount","firstTransientError","values","disposition","listenerDisposition","result","workflows","deliverEventToJobListener","eventRef","deliveryId","provider","receivedAt","toISOString","skipped","listenerTriggered","buffered","error","listenerDispatchErrored","engagedCount","matchedJobCount","size","transientErrored","transientError","undefined","filter","config","trim","value","context","invalidReason","evaluationFailedReason","snapshot","readFilterSnapshot","filter_snapshot","Array","isArray","listenerMatcherSortKey","kindRank","matcherOrdinal","toString","padStart","candidate","previousKey","candidateKey","warn","keptSubscriptionId","id","candidateSubscriptionId","matcherKind"],"mappings":"AAAA,SAAQA,MAAM,QAAO,8BAA8B;AACnD,SAAQC,oCAAoC,QAAO,oCAAoC;AACvF,SAAQC,oBAAoB,QAAoC,cAAc;AAE9E,SAAqCC,QAAQ,QAAO,8BAA8B;AAClF,SACEC,yCAAyC,QAEpC,wBAAwB;AAiC/B,OAAO,eAAeC,yBACpBC,MAAsC;IAEtC,MAAMC,gBAAgB,MAAMN,qCAAqC;QAC/DO,aAAaF,OAAOE,WAAW;QAC/BC,QAAQH,OAAOG,MAAM;QACrBC,OAAOJ,OAAOI,KAAK;IACrB;IAEA,IAAIC,mBAAmB;IACvB,MAAMC,wBAAwB,IAAIC;IAClC,KAAK,MAAMC,gBAAgBP,cAAe;QACxC,MAAMQ,eAAeC,uBAAuB;YAACF;YAAcG,SAASX,OAAOW,OAAO;QAAA;QAClF,IAAIF,aAAaG,IAAI,KAAK,YAAY;QACtC,IAAIH,aAAaG,IAAI,KAAK,gBAAgB;YACxCP,oBAAoB;YACpB,MAAML,OAAOa,OAAO,CAACC,qBAAqB,CAACN,cAAcC,aAAaM,MAAM;YAC5E;QACF;QAEA,MAAMC,WAAWV,sBAAsBW,GAAG,CAACT,aAAaU,KAAK;QAC7D,IAAI,CAACF,YAAYG,8BAA8BH,UAAUR,eAAe;YACtEF,sBAAsBc,GAAG,CAACZ,aAAaU,KAAK,EAAEV;QAChD;IACF;IAEA,IAAIa,mBAAmB;IACvB,IAAIC,iBAAiB;IACrB,IAAIC,oBAAoB;IACxB,IAAIC,qBAAqB;IACzB,IAAIC;IAEJ,KAAK,MAAMjB,gBAAgBF,sBAAsBoB,MAAM,GAAI;QACzD,MAAMC,cAAcC,oBAAoBpB;QACxC,IAAI;YACF,MAAMqB,SAAS,MAAM7B,OAAO8B,SAAS,CAACC,yBAAyB,CAAC;gBAC9Db,OAAOV,aAAaU,KAAK;gBACzBS;gBACAK,UAAUhC,OAAOgC,QAAQ;gBACzBC,YAAYjC,OAAOiC,UAAU;gBAC7B9B,QAAQH,OAAOG,MAAM;gBACrBC,OAAOJ,OAAOI,KAAK;gBACnB8B,UAAUlC,OAAOkC,QAAQ;gBACzBvB,SAASX,OAAOW,OAAO;gBACvBwB,YAAYnC,OAAOmC,UAAU,CAACC,WAAW;YAC3C;YACA,IAAI,CAACP,OAAOQ,OAAO,EAAE;gBACnBhB,oBAAoB;gBACpB,MAAMrB,OAAOa,OAAO,CAACyB,iBAAiB,CAAC9B;YACzC;YACA,IAAIqB,OAAOU,QAAQ,EAAEjB,kBAAkB;QACzC,EAAE,OAAOkB,OAAO;YACdhB,sBAAsB;YACtB,MAAMxB,OAAOa,OAAO,CAAC4B,uBAAuB,CAACjC,cAAcX,SAAS2C;YACpE,IAAI,CAAC1C,0CAA0C0C,UAAU,CAACjB,mBAAmB;gBAC3EA,oBAAoB;gBACpBE,sBAAsBe;YACxB;QACF;IACF;IAEA,OAAO;QACLE,cAAcrC,mBAAmBgB,mBAAmBG;QACpDmB,iBAAiBrC,sBAAsBsC,IAAI;QAC3CvB;QACAC;QACAuB,kBAAkBtB;QAClBuB,gBAAgBvB,oBAAoBE,sBAAsBsB;IAC5D;AACF;AAOA,SAASrC,uBAAuBV,MAAoC;IAClE,MAAMgD,SAAShD,OAAOQ,YAAY,CAACyC,MAAM,CAACD,MAAM;IAChD,IAAIA,WAAW,QAAQA,WAAWD,WAAW,OAAO;QAACnC,MAAM;IAAS;IACpE,IAAI,OAAOoC,WAAW,YAAYA,OAAOE,IAAI,OAAO,IAAI;QACtD,OAAOtD,qBAAqB;YAC1BuD,OAAOH;YACPI,SAAS;gBAAChD,OAAOJ,OAAOW,OAAO;YAAA;YAC/B0C,eAAe;YACfC,wBAAwB;QAC1B;IACF;IAEA,MAAMC,WAAWC,mBAAmBxD,OAAOQ,YAAY;IACvD,IAAI+C,SAAS3C,IAAI,KAAK,WAAW,OAAO2C,SAAS1B,MAAM;IAEvD,OAAOjC,qBAAqB;QAC1BuD,OAAOH;QACPI,SAAS;YAAC,GAAGG,SAASJ,KAAK;YAAE/C,OAAOJ,OAAOW,OAAO;QAAA;QAClD0C,eAAe;QACfC,wBAAwB;IAC1B;AACF;AAEA,SAASE,mBACPhD,YAAqC;IAIrC,MAAM2C,QAAQ3C,aAAayC,MAAM,CAACQ,eAAe;IACjD,IAAIN,UAAUJ,WAAW,OAAO;QAACnC,MAAM;QAASuC,OAAO,CAAC;IAAC;IACzD,IAAIA,UAAU,QAAQ,OAAOA,UAAU,YAAY,CAACO,MAAMC,OAAO,CAACR,QAAQ;QACxE,OAAO;YAACvC,MAAM;YAASuC,OAAOA;QAAgC;IAChE;IACA,OAAO;QACLvC,MAAM;QACNiB,QAAQ;YACNjB,MAAM;YACNG,QAAQ;QACV;IACF;AACF;AAEA,SAASa,oBAAoBpB,YAAqC;IAChE,OAAOA,aAAaI,IAAI,KAAK,UAAU,YAAY;AACrD;AAEA,SAASgD,uBAAuBpD,YAAqC;IACnE,MAAMqD,WAAWrD,aAAaI,IAAI,KAAK,UAAU,MAAM;IACvD,OAAO,GAAGiD,SAAS,CAAC,EAAErD,aAAasD,cAAc,CAACC,QAAQ,GAAGC,QAAQ,CAAC,IAAI,MAAM;AAClF;AAEA,SAAS7C,8BACPH,QAAiC,EACjCiD,SAAkC;IAElC,MAAMC,cAAcN,uBAAuB5C;IAC3C,MAAMmD,eAAeP,uBAAuBK;IAC5C,IAAIE,iBAAiBD,aAAa,OAAOC,eAAeD;IAExDxE,SAAS0E,IAAI,CACX;QACElD,OAAO+C,UAAU/C,KAAK;QACtBmD,oBAAoBrD,SAASsD,EAAE;QAC/BC,yBAAyBN,UAAUK,EAAE;QACrCE,aAAaP,UAAUrD,IAAI;QAC3BkD,gBAAgBG,UAAUH,cAAc;IAC1C,GACA;IAEF,OAAOG,UAAUK,EAAE,GAAGtD,SAASsD,EAAE;AACnC"}
+{"version":3,"sources":["../../src/core/route-event-to-job-listeners.ts"],"sourcesContent":["import {projectWorkflowPredicateContext} from '@shipfox/expression';\nimport {logger} from '@shipfox/node-opentelemetry';\nimport {findMatchingJobListenerSubscriptions} from '#db/job-listener-subscriptions.js';\nimport {evaluateStoredFilter, type StoredFilterEvaluation} from './config.js';\nimport type {JobListenerSubscription} from './entities/job-listener-subscription.js';\nimport {type TriggerHistoryRecorder, toReason} from './record-trigger-history.js';\nimport {\n  isPermanentDeliverEventToJobListenerError,\n  type WorkflowsModuleClient,\n} from './workflows-client.js';\n\nexport interface RouteEventToJobListenersParams {\n  workflows: WorkflowsModuleClient;\n  history: TriggerHistoryRecorder;\n  eventRef: string;\n  workspaceId: string;\n  connectionId: string;\n  provider: string;\n  source: string;\n  event: string;\n  deliveryId: string;\n  payload: unknown;\n  receivedAt: Date;\n}\n\nexport interface RouteEventToJobListenersResult {\n  /**\n   * Listener outcomes that should contribute to received_event.matched_count:\n   * filter errors, accepted deliveries, and dispatch errors. Stale skipped jobs\n   * are intentionally excluded because they did not produce an auditable decision.\n   */\n  engagedCount: number;\n  /**\n   * Jobs with an effective matcher after source/event/filter checks, including\n   * stale skipped jobs.\n   */\n  matchedJobCount: number;\n  acceptedJobCount: number;\n  deliveredCount: number;\n  transientErrored: boolean;\n  transientError: unknown;\n}\n\nexport async function routeEventToJobListeners(\n  params: RouteEventToJobListenersParams,\n): Promise<RouteEventToJobListenersResult> {\n  const subscriptions = await findMatchingJobListenerSubscriptions({\n    workspaceId: params.workspaceId,\n    source: params.source,\n    event: params.event,\n  });\n\n  let filterErrorCount = 0;\n  const effectiveMatchByJobId = new Map<string, JobListenerSubscription>();\n  for (const subscription of subscriptions) {\n    const filterResult = evaluateListenerFilter({subscription, payload: params.payload});\n    if (filterResult.kind === 'filtered') continue;\n    if (filterResult.kind === 'filter-error') {\n      filterErrorCount += 1;\n      await params.history.listenerFilterErrored(subscription, filterResult.reason);\n      continue;\n    }\n\n    const previous = effectiveMatchByJobId.get(subscription.jobId);\n    if (!previous || shouldReplaceEffectiveMatcher(previous, subscription)) {\n      effectiveMatchByJobId.set(subscription.jobId, subscription);\n    }\n  }\n\n  const fireDeliveryNeeded = [...effectiveMatchByJobId.values()].some(\n    (subscription) => listenerDisposition(subscription) === 'fire',\n  );\n  const triggerReference = fireDeliveryNeeded\n    ? await params.workflows.resolveWorkflowRunTriggerReference({\n        workspaceId: params.workspaceId,\n        triggerConnectionId: params.connectionId,\n        triggerPayload: {\n          provider: params.provider,\n          source: params.source,\n          event: params.event,\n          deliveryId: params.deliveryId,\n          data: params.payload,\n        },\n      })\n    : null;\n\n  let acceptedJobCount = 0;\n  let deliveredCount = 0;\n  let sawTransientError = false;\n  let dispatchErrorCount = 0;\n  let firstTransientError: unknown;\n\n  for (const subscription of effectiveMatchByJobId.values()) {\n    const disposition = listenerDisposition(subscription);\n    try {\n      const result = await params.workflows.deliverEventToJobListener({\n        jobId: subscription.jobId,\n        disposition,\n        eventRef: params.eventRef,\n        deliveryId: params.deliveryId,\n        source: params.source,\n        event: params.event,\n        provider: params.provider,\n        triggerConnectionId: params.connectionId,\n        triggerReference,\n        payload: params.payload,\n        receivedAt: params.receivedAt.toISOString(),\n      });\n      if (!result.skipped) {\n        acceptedJobCount += 1;\n        await params.history.listenerTriggered(subscription);\n      }\n      if (result.buffered) deliveredCount += 1;\n    } catch (error) {\n      dispatchErrorCount += 1;\n      await params.history.listenerDispatchErrored(subscription, toReason(error));\n      if (!isPermanentDeliverEventToJobListenerError(error) && !sawTransientError) {\n        sawTransientError = true;\n        firstTransientError = error;\n      }\n    }\n  }\n\n  return {\n    engagedCount: filterErrorCount + acceptedJobCount + dispatchErrorCount,\n    matchedJobCount: effectiveMatchByJobId.size,\n    acceptedJobCount,\n    deliveredCount,\n    transientErrored: sawTransientError,\n    transientError: sawTransientError ? firstTransientError : undefined,\n  };\n}\n\ninterface EvaluateListenerFilterParams {\n  subscription: JobListenerSubscription;\n  payload: unknown;\n}\n\nfunction evaluateListenerFilter(params: EvaluateListenerFilterParams): StoredFilterEvaluation {\n  const filter = params.subscription.config.filter;\n  if (filter === null || filter === undefined) return {kind: 'matched'};\n  if (typeof filter !== 'string' || filter.trim() === '') {\n    return evaluateStoredFilter({\n      value: filter,\n      context: projectWorkflowPredicateContext(\n        params.subscription.kind === 'on' ? 'listener.on' : 'listener.until',\n        {event: params.payload},\n      ),\n      invalidReason: 'Listener subscription filter must be a non-empty string when set',\n      evaluationFailedReason: 'Listener filter evaluation failed',\n    });\n  }\n\n  const snapshot = readFilterSnapshot(params.subscription);\n  if (snapshot.kind === 'invalid') return snapshot.result;\n\n  return evaluateStoredFilter({\n    value: filter,\n    context: projectWorkflowPredicateContext(\n      params.subscription.kind === 'on' ? 'listener.on' : 'listener.until',\n      {...snapshot.value, event: params.payload},\n    ),\n    invalidReason: 'Listener subscription filter must be a non-empty string when set',\n    evaluationFailedReason: 'Listener filter evaluation failed',\n  });\n}\n\nfunction readFilterSnapshot(\n  subscription: JobListenerSubscription,\n):\n  | {kind: 'valid'; value: Record<string, unknown>}\n  | {kind: 'invalid'; result: Extract<StoredFilterEvaluation, {kind: 'filter-error'}>} {\n  const value = subscription.config.filter_snapshot;\n  if (value === undefined) return {kind: 'valid', value: {}};\n  if (value !== null && typeof value === 'object' && !Array.isArray(value)) {\n    return {kind: 'valid', value: value as Record<string, unknown>};\n  }\n  return {\n    kind: 'invalid',\n    result: {\n      kind: 'filter-error',\n      reason: 'Listener filter snapshot must be an object when set',\n    },\n  };\n}\n\nfunction listenerDisposition(subscription: JobListenerSubscription): 'fire' | 'resolve' {\n  return subscription.kind === 'until' ? 'resolve' : 'fire';\n}\n\nfunction listenerMatcherSortKey(subscription: JobListenerSubscription): string {\n  const kindRank = subscription.kind === 'until' ? '0' : '1';\n  return `${kindRank}:${subscription.matcherOrdinal.toString().padStart(10, '0')}`;\n}\n\nfunction shouldReplaceEffectiveMatcher(\n  previous: JobListenerSubscription,\n  candidate: JobListenerSubscription,\n): boolean {\n  const previousKey = listenerMatcherSortKey(previous);\n  const candidateKey = listenerMatcherSortKey(candidate);\n  if (candidateKey !== previousKey) return candidateKey < previousKey;\n\n  logger().warn(\n    {\n      jobId: candidate.jobId,\n      keptSubscriptionId: previous.id,\n      candidateSubscriptionId: candidate.id,\n      matcherKind: candidate.kind,\n      matcherOrdinal: candidate.matcherOrdinal,\n    },\n    'duplicate job listener matcher key encountered; choosing deterministic subscription id order',\n  );\n  return candidate.id < previous.id;\n}\n"],"names":["projectWorkflowPredicateContext","logger","findMatchingJobListenerSubscriptions","evaluateStoredFilter","toReason","isPermanentDeliverEventToJobListenerError","routeEventToJobListeners","params","subscriptions","workspaceId","source","event","filterErrorCount","effectiveMatchByJobId","Map","subscription","filterResult","evaluateListenerFilter","payload","kind","history","listenerFilterErrored","reason","previous","get","jobId","shouldReplaceEffectiveMatcher","set","fireDeliveryNeeded","values","some","listenerDisposition","triggerReference","workflows","resolveWorkflowRunTriggerReference","triggerConnectionId","connectionId","triggerPayload","provider","deliveryId","data","acceptedJobCount","deliveredCount","sawTransientError","dispatchErrorCount","firstTransientError","disposition","result","deliverEventToJobListener","eventRef","receivedAt","toISOString","skipped","listenerTriggered","buffered","error","listenerDispatchErrored","engagedCount","matchedJobCount","size","transientErrored","transientError","undefined","filter","config","trim","value","context","invalidReason","evaluationFailedReason","snapshot","readFilterSnapshot","filter_snapshot","Array","isArray","listenerMatcherSortKey","kindRank","matcherOrdinal","toString","padStart","candidate","previousKey","candidateKey","warn","keptSubscriptionId","id","candidateSubscriptionId","matcherKind"],"mappings":"AAAA,SAAQA,+BAA+B,QAAO,sBAAsB;AACpE,SAAQC,MAAM,QAAO,8BAA8B;AACnD,SAAQC,oCAAoC,QAAO,oCAAoC;AACvF,SAAQC,oBAAoB,QAAoC,cAAc;AAE9E,SAAqCC,QAAQ,QAAO,8BAA8B;AAClF,SACEC,yCAAyC,QAEpC,wBAAwB;AAkC/B,OAAO,eAAeC,yBACpBC,MAAsC;IAEtC,MAAMC,gBAAgB,MAAMN,qCAAqC;QAC/DO,aAAaF,OAAOE,WAAW;QAC/BC,QAAQH,OAAOG,MAAM;QACrBC,OAAOJ,OAAOI,KAAK;IACrB;IAEA,IAAIC,mBAAmB;IACvB,MAAMC,wBAAwB,IAAIC;IAClC,KAAK,MAAMC,gBAAgBP,cAAe;QACxC,MAAMQ,eAAeC,uBAAuB;YAACF;YAAcG,SAASX,OAAOW,OAAO;QAAA;QAClF,IAAIF,aAAaG,IAAI,KAAK,YAAY;QACtC,IAAIH,aAAaG,IAAI,KAAK,gBAAgB;YACxCP,oBAAoB;YACpB,MAAML,OAAOa,OAAO,CAACC,qBAAqB,CAACN,cAAcC,aAAaM,MAAM;YAC5E;QACF;QAEA,MAAMC,WAAWV,sBAAsBW,GAAG,CAACT,aAAaU,KAAK;QAC7D,IAAI,CAACF,YAAYG,8BAA8BH,UAAUR,eAAe;YACtEF,sBAAsBc,GAAG,CAACZ,aAAaU,KAAK,EAAEV;QAChD;IACF;IAEA,MAAMa,qBAAqB;WAAIf,sBAAsBgB,MAAM;KAAG,CAACC,IAAI,CACjE,CAACf,eAAiBgB,oBAAoBhB,kBAAkB;IAE1D,MAAMiB,mBAAmBJ,qBACrB,MAAMrB,OAAO0B,SAAS,CAACC,kCAAkC,CAAC;QACxDzB,aAAaF,OAAOE,WAAW;QAC/B0B,qBAAqB5B,OAAO6B,YAAY;QACxCC,gBAAgB;YACdC,UAAU/B,OAAO+B,QAAQ;YACzB5B,QAAQH,OAAOG,MAAM;YACrBC,OAAOJ,OAAOI,KAAK;YACnB4B,YAAYhC,OAAOgC,UAAU;YAC7BC,MAAMjC,OAAOW,OAAO;QACtB;IACF,KACA;IAEJ,IAAIuB,mBAAmB;IACvB,IAAIC,iBAAiB;IACrB,IAAIC,oBAAoB;IACxB,IAAIC,qBAAqB;IACzB,IAAIC;IAEJ,KAAK,MAAM9B,gBAAgBF,sBAAsBgB,MAAM,GAAI;QACzD,MAAMiB,cAAcf,oBAAoBhB;QACxC,IAAI;YACF,MAAMgC,SAAS,MAAMxC,OAAO0B,SAAS,CAACe,yBAAyB,CAAC;gBAC9DvB,OAAOV,aAAaU,KAAK;gBACzBqB;gBACAG,UAAU1C,OAAO0C,QAAQ;gBACzBV,YAAYhC,OAAOgC,UAAU;gBAC7B7B,QAAQH,OAAOG,MAAM;gBACrBC,OAAOJ,OAAOI,KAAK;gBACnB2B,UAAU/B,OAAO+B,QAAQ;gBACzBH,qBAAqB5B,OAAO6B,YAAY;gBACxCJ;gBACAd,SAASX,OAAOW,OAAO;gBACvBgC,YAAY3C,OAAO2C,UAAU,CAACC,WAAW;YAC3C;YACA,IAAI,CAACJ,OAAOK,OAAO,EAAE;gBACnBX,oBAAoB;gBACpB,MAAMlC,OAAOa,OAAO,CAACiC,iBAAiB,CAACtC;YACzC;YACA,IAAIgC,OAAOO,QAAQ,EAAEZ,kBAAkB;QACzC,EAAE,OAAOa,OAAO;YACdX,sBAAsB;YACtB,MAAMrC,OAAOa,OAAO,CAACoC,uBAAuB,CAACzC,cAAcX,SAASmD;YACpE,IAAI,CAAClD,0CAA0CkD,UAAU,CAACZ,mBAAmB;gBAC3EA,oBAAoB;gBACpBE,sBAAsBU;YACxB;QACF;IACF;IAEA,OAAO;QACLE,cAAc7C,mBAAmB6B,mBAAmBG;QACpDc,iBAAiB7C,sBAAsB8C,IAAI;QAC3ClB;QACAC;QACAkB,kBAAkBjB;QAClBkB,gBAAgBlB,oBAAoBE,sBAAsBiB;IAC5D;AACF;AAOA,SAAS7C,uBAAuBV,MAAoC;IAClE,MAAMwD,SAASxD,OAAOQ,YAAY,CAACiD,MAAM,CAACD,MAAM;IAChD,IAAIA,WAAW,QAAQA,WAAWD,WAAW,OAAO;QAAC3C,MAAM;IAAS;IACpE,IAAI,OAAO4C,WAAW,YAAYA,OAAOE,IAAI,OAAO,IAAI;QACtD,OAAO9D,qBAAqB;YAC1B+D,OAAOH;YACPI,SAASnE,gCACPO,OAAOQ,YAAY,CAACI,IAAI,KAAK,OAAO,gBAAgB,kBACpD;gBAACR,OAAOJ,OAAOW,OAAO;YAAA;YAExBkD,eAAe;YACfC,wBAAwB;QAC1B;IACF;IAEA,MAAMC,WAAWC,mBAAmBhE,OAAOQ,YAAY;IACvD,IAAIuD,SAASnD,IAAI,KAAK,WAAW,OAAOmD,SAASvB,MAAM;IAEvD,OAAO5C,qBAAqB;QAC1B+D,OAAOH;QACPI,SAASnE,gCACPO,OAAOQ,YAAY,CAACI,IAAI,KAAK,OAAO,gBAAgB,kBACpD;YAAC,GAAGmD,SAASJ,KAAK;YAAEvD,OAAOJ,OAAOW,OAAO;QAAA;QAE3CkD,eAAe;QACfC,wBAAwB;IAC1B;AACF;AAEA,SAASE,mBACPxD,YAAqC;IAIrC,MAAMmD,QAAQnD,aAAaiD,MAAM,CAACQ,eAAe;IACjD,IAAIN,UAAUJ,WAAW,OAAO;QAAC3C,MAAM;QAAS+C,OAAO,CAAC;IAAC;IACzD,IAAIA,UAAU,QAAQ,OAAOA,UAAU,YAAY,CAACO,MAAMC,OAAO,CAACR,QAAQ;QACxE,OAAO;YAAC/C,MAAM;YAAS+C,OAAOA;QAAgC;IAChE;IACA,OAAO;QACL/C,MAAM;QACN4B,QAAQ;YACN5B,MAAM;YACNG,QAAQ;QACV;IACF;AACF;AAEA,SAASS,oBAAoBhB,YAAqC;IAChE,OAAOA,aAAaI,IAAI,KAAK,UAAU,YAAY;AACrD;AAEA,SAASwD,uBAAuB5D,YAAqC;IACnE,MAAM6D,WAAW7D,aAAaI,IAAI,KAAK,UAAU,MAAM;IACvD,OAAO,GAAGyD,SAAS,CAAC,EAAE7D,aAAa8D,cAAc,CAACC,QAAQ,GAAGC,QAAQ,CAAC,IAAI,MAAM;AAClF;AAEA,SAASrD,8BACPH,QAAiC,EACjCyD,SAAkC;IAElC,MAAMC,cAAcN,uBAAuBpD;IAC3C,MAAM2D,eAAeP,uBAAuBK;IAC5C,IAAIE,iBAAiBD,aAAa,OAAOC,eAAeD;IAExDhF,SAASkF,IAAI,CACX;QACE1D,OAAOuD,UAAUvD,KAAK;QACtB2D,oBAAoB7D,SAAS8D,EAAE;QAC/BC,yBAAyBN,UAAUK,EAAE;QACrCE,aAAaP,UAAU7D,IAAI;QAC3B0D,gBAAgBG,UAAUH,cAAc;IAC1C,GACA;IAEF,OAAOG,UAAUK,EAAE,GAAG9D,SAAS8D,EAAE;AACnC"}

package/dist/core/workflows-client.d.ts

@@ -26,6 +26,7 @@ declare function startRunKnownError(error: unknown): import("@shipfox/inter-modu
     workspaceId: import("zod").ZodString;
     projectId: import("zod").ZodString;
     definitionId: import("zod").ZodString;
+    triggerConnectionId: import("zod").ZodOptional<import("zod").ZodString>;
     triggerPayload: import("zod").ZodUnion<readonly [import("zod").ZodObject<{
         provider: import("zod").ZodOptional<import("zod").ZodLiteral<"manual">>;
         source: import("zod").ZodLiteral<"manual">;
@@ -75,11 +76,19 @@ declare function startRunKnownError(error: unknown): import("@shipfox/inter-modu
             "agent.prompt": "agent.prompt";
             "agent.model": "agent.model";
             "agent.provider": "agent.provider";
+            "agent.thinking": "agent.thinking";
             "job.runner": "job.runner";
             "job.outputs": "job.outputs";
-            "job.name": "job.name";
+            "job.execution_name": "job.execution_name";
+            "workflow.run_name": "workflow.run_name";
             "step.name": "step.name";
+            "step.working_directory": "step.working_directory";
             "step.feedback": "step.feedback";
+            "checkout.project": "checkout.project";
+            "checkout.connection": "checkout.connection";
+            "checkout.repository": "checkout.repository";
+            "checkout.ref": "checkout.ref";
+            "checkout.path": "checkout.path";
         }>;
         source: import("zod").ZodString;
         envKey: import("zod").ZodOptional<import("zod").ZodString>;

package/dist/core/workflows-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workflows-client.d.ts","sourceRoot":"","sources":["../../src/core/workflows-client.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,qBAAqB,EAE3B,MAAM,yCAAyC,CAAC;AAGjD,YAAY,EAAC,qBAAqB,EAAC,CAAC;AAEpC,KAAK,kBAAkB,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC,CAAC;AAE7E;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,kBAAkB,CAEpF;AAED,oFAAoF;AACpF,wBAAgB,yCAAyC,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAKjF;AAED,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,OAAO,CAAC,kBAAkB,EAAE;IAAC,IAAI,EAAE,qBAAqB,CAAA;CAAC,CAAC,CAErE;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,OAAO,CAAC,kBAAkB,EAAE;IAAC,IAAI,EAAE,qBAAqB,CAAA;CAAC,CAAC,CAErE;AAED,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,OAAO,CAAC,kBAAkB,EAAE;IAAC,IAAI,EAAE,mBAAmB,CAAA;CAAC,CAAC,CAEnE;AAED,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,kBAAkB,CAAC,EAAE;IAAC,IAAI,EAAE,4BAA4B,CAAA;CAAC,CAAC,CAK/F;AAED,iBAAS,kBAAkB,CAAC,KAAK,EAAE,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBAKzC"}
+{"version":3,"file":"workflows-client.d.ts","sourceRoot":"","sources":["../../src/core/workflows-client.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,qBAAqB,EAE3B,MAAM,yCAAyC,CAAC;AAGjD,YAAY,EAAC,qBAAqB,EAAC,CAAC;AAEpC,KAAK,kBAAkB,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC,CAAC;AAE7E;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,kBAAkB,CAEpF;AAED,oFAAoF;AACpF,wBAAgB,yCAAyC,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAKjF;AAED,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,OAAO,CAAC,kBAAkB,EAAE;IAAC,IAAI,EAAE,qBAAqB,CAAA;CAAC,CAAC,CAErE;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,OAAO,CAAC,kBAAkB,EAAE;IAAC,IAAI,EAAE,qBAAqB,CAAA;CAAC,CAAC,CAErE;AAED,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,OAAO,CAAC,kBAAkB,EAAE;IAAC,IAAI,EAAE,mBAAmB,CAAA;CAAC,CAAC,CAEnE;AAED,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,kBAAkB,CAAC,EAAE;IAAC,IAAI,EAAE,4BAA4B,CAAA;CAAC,CAAC,CAK/F;AAED,iBAAS,kBAAkB,CAAC,KAAK,EAAE,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBAKzC"}

package/dist/presentation/routes/fire-manual.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fire-manual.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/fire-manual.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAC,qBAAqB,EAAC,MAAM,yCAAyC,CAAC;AAanF,wBAAgB,4BAA4B,CAAC,SAAS,EAAE,qBAAqB,mDAkF5E"}
+{"version":3,"file":"fire-manual.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/fire-manual.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAC,qBAAqB,EAAC,MAAM,yCAAyC,CAAC;AAanF,wBAAgB,4BAA4B,CAAC,SAAS,EAAE,qBAAqB,mDA0F5E"}

package/dist/presentation/routes/fire-manual.js

@@ -1,4 +1,4 @@
-import { requireUserContext } from '@shipfox/api-auth-context';
+import { requireUserContext, requireWorkspaceResourceAccess } from '@shipfox/api-auth-context';
 import { fireManualTriggerBodySchema, fireManualTriggerResponseSchema } from '@shipfox/api-triggers-dto';
 import { ClientError, defineRoute } from '@shipfox/node-fastify';
 import { z } from 'zod';
@@ -70,10 +70,18 @@ export function createFireManualTriggerRoute(workflows) {
             const { definitionId } = request.params;
             const userContext = requireUserContext(request);
             const subscription = await getManualSubscriptionByDefinitionId(definitionId);
-            // 404 covers both "no such manual trigger" and "not your workspace" to avoid leaking existence.
-            if (!subscription || !userContext.canAccess(subscription.workspaceId)) {
+            // Missing triggers and memberships remain 404 to avoid leaking existence; lifecycle claims
+            // propagate their stable access errors.
+            if (!subscription) {
                 throw new ManualTriggerNotFoundError(definitionId);
             }
+            requireWorkspaceResourceAccess({
+                request,
+                workspaceId: subscription.workspaceId,
+                notFoundError: new ClientError('Manual trigger not found', 'manual-trigger-not-found', {
+                    status: 404
+                })
+            });
             const run = await fireManualSubscription({
                 workflows,
                 subscriptionId: subscription.id,

package/dist/presentation/routes/fire-manual.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/presentation/routes/fire-manual.ts"],"sourcesContent":["import {requireUserContext} from '@shipfox/api-auth-context';\nimport {\n  fireManualTriggerBodySchema,\n  fireManualTriggerResponseSchema,\n} from '@shipfox/api-triggers-dto';\nimport type {WorkflowsModuleClient} from '@shipfox/api-workflows-dto/inter-module';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {z} from 'zod';\nimport {ManualTriggerNotFoundError} from '#core/errors.js';\nimport {fireManualSubscription} from '#core/fire-manual.js';\nimport {\n  isInterpolationUnresolvableError,\n  isWorkspaceDeletedError,\n  isWorkspaceNotFoundError,\n  isWorkspaceSuspendedError,\n} from '#core/workflows-client.js';\nimport {getManualSubscriptionByDefinitionId} from '#db/subscriptions.js';\n\nexport function createFireManualTriggerRoute(workflows: WorkflowsModuleClient) {\n  return defineRoute({\n    method: 'POST',\n    path: '/:definitionId/fire-manual',\n    description: 'Fire the manual trigger of a workflow definition, creating a workflow run.',\n    schema: {\n      params: z.object({\n        definitionId: z.string().uuid(),\n      }),\n      body: fireManualTriggerBodySchema,\n      response: {\n        201: fireManualTriggerResponseSchema,\n        422: z.object({\n          code: z.string(),\n          details: z.object({\n            field: z.string(),\n            source: z.string(),\n            env_key: z.string().optional(),\n          }),\n        }),\n      },\n    },\n    errorHandler: (error) => {\n      if (error instanceof ManualTriggerNotFoundError) {\n        throw new ClientError(error.message, 'manual-trigger-not-found', {status: 404});\n      }\n      if (isWorkspaceSuspendedError(error)) {\n        throw new ClientError('Workspace is suspended', 'workspace-suspended', {\n          status: 409,\n          cause: error,\n        });\n      }\n      if (isWorkspaceDeletedError(error)) {\n        throw new ClientError('Workspace is deleted', 'workspace-deleted', {\n          status: 404,\n          cause: error,\n        });\n      }\n      if (isWorkspaceNotFoundError(error)) {\n        throw new ClientError('Workspace not found', 'workspace-not-found', {\n          status: 404,\n          cause: error,\n        });\n      }\n      if (isInterpolationUnresolvableError(error)) {\n        throw new ClientError(\n          'Workflow interpolation cannot be resolved',\n          'workflow-interpolation-unresolvable',\n          {\n            status: 422,\n            details: {\n              field: error.details.field,\n              source: error.details.source,\n              ...(error.details.envKey === undefined ? {} : {env_key: error.details.envKey}),\n            },\n          },\n        );\n      }\n      throw error;\n    },\n    handler: async (request, reply) => {\n      const {definitionId} = request.params;\n      const userContext = requireUserContext(request);\n\n      const subscription = await getManualSubscriptionByDefinitionId(definitionId);\n      // 404 covers both \"no such manual trigger\" and \"not your workspace\" to avoid leaking existence.\n      if (!subscription || !userContext.canAccess(subscription.workspaceId)) {\n        throw new ManualTriggerNotFoundError(definitionId);\n      }\n\n      const run = await fireManualSubscription({\n        workflows,\n        subscriptionId: subscription.id,\n        callerWorkspaceId: subscription.workspaceId,\n        userId: userContext.userId,\n        inputs: request.body.inputs,\n      });\n\n      reply.status(201);\n      return {workflow_run_id: run.id};\n    },\n  });\n}\n"],"names":["requireUserContext","fireManualTriggerBodySchema","fireManualTriggerResponseSchema","ClientError","defineRoute","z","ManualTriggerNotFoundError","fireManualSubscription","isInterpolationUnresolvableError","isWorkspaceDeletedError","isWorkspaceNotFoundError","isWorkspaceSuspendedError","getManualSubscriptionByDefinitionId","createFireManualTriggerRoute","workflows","method","path","description","schema","params","object","definitionId","string","uuid","body","response","code","details","field","source","env_key","optional","errorHandler","error","message","status","cause","envKey","undefined","handler","request","reply","userContext","subscription","canAccess","workspaceId","run","subscriptionId","id","callerWorkspaceId","userId","inputs","workflow_run_id"],"mappings":"AAAA,SAAQA,kBAAkB,QAAO,4BAA4B;AAC7D,SACEC,2BAA2B,EAC3BC,+BAA+B,QAC1B,4BAA4B;AAEnC,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,0BAA0B,QAAO,kBAAkB;AAC3D,SAAQC,sBAAsB,QAAO,uBAAuB;AAC5D,SACEC,gCAAgC,EAChCC,uBAAuB,EACvBC,wBAAwB,EACxBC,yBAAyB,QACpB,4BAA4B;AACnC,SAAQC,mCAAmC,QAAO,uBAAuB;AAEzE,OAAO,SAASC,6BAA6BC,SAAgC;IAC3E,OAAOV,YAAY;QACjBW,QAAQ;QACRC,MAAM;QACNC,aAAa;QACbC,QAAQ;YACNC,QAAQd,EAAEe,MAAM,CAAC;gBACfC,cAAchB,EAAEiB,MAAM,GAAGC,IAAI;YAC/B;YACAC,MAAMvB;YACNwB,UAAU;gBACR,KAAKvB;gBACL,KAAKG,EAAEe,MAAM,CAAC;oBACZM,MAAMrB,EAAEiB,MAAM;oBACdK,SAAStB,EAAEe,MAAM,CAAC;wBAChBQ,OAAOvB,EAAEiB,MAAM;wBACfO,QAAQxB,EAAEiB,MAAM;wBAChBQ,SAASzB,EAAEiB,MAAM,GAAGS,QAAQ;oBAC9B;gBACF;YACF;QACF;QACAC,cAAc,CAACC;YACb,IAAIA,iBAAiB3B,4BAA4B;gBAC/C,MAAM,IAAIH,YAAY8B,MAAMC,OAAO,EAAE,4BAA4B;oBAACC,QAAQ;gBAAG;YAC/E;YACA,IAAIxB,0BAA0BsB,QAAQ;gBACpC,MAAM,IAAI9B,YAAY,0BAA0B,uBAAuB;oBACrEgC,QAAQ;oBACRC,OAAOH;gBACT;YACF;YACA,IAAIxB,wBAAwBwB,QAAQ;gBAClC,MAAM,IAAI9B,YAAY,wBAAwB,qBAAqB;oBACjEgC,QAAQ;oBACRC,OAAOH;gBACT;YACF;YACA,IAAIvB,yBAAyBuB,QAAQ;gBACnC,MAAM,IAAI9B,YAAY,uBAAuB,uBAAuB;oBAClEgC,QAAQ;oBACRC,OAAOH;gBACT;YACF;YACA,IAAIzB,iCAAiCyB,QAAQ;gBAC3C,MAAM,IAAI9B,YACR,6CACA,uCACA;oBACEgC,QAAQ;oBACRR,SAAS;wBACPC,OAAOK,MAAMN,OAAO,CAACC,KAAK;wBAC1BC,QAAQI,MAAMN,OAAO,CAACE,MAAM;wBAC5B,GAAII,MAAMN,OAAO,CAACU,MAAM,KAAKC,YAAY,CAAC,IAAI;4BAACR,SAASG,MAAMN,OAAO,CAACU,MAAM;wBAAA,CAAC;oBAC/E;gBACF;YAEJ;YACA,MAAMJ;QACR;QACAM,SAAS,OAAOC,SAASC;YACvB,MAAM,EAACpB,YAAY,EAAC,GAAGmB,QAAQrB,MAAM;YACrC,MAAMuB,cAAc1C,mBAAmBwC;YAEvC,MAAMG,eAAe,MAAM/B,oCAAoCS;YAC/D,gGAAgG;YAChG,IAAI,CAACsB,gBAAgB,CAACD,YAAYE,SAAS,CAACD,aAAaE,WAAW,GAAG;gBACrE,MAAM,IAAIvC,2BAA2Be;YACvC;YAEA,MAAMyB,MAAM,MAAMvC,uBAAuB;gBACvCO;gBACAiC,gBAAgBJ,aAAaK,EAAE;gBAC/BC,mBAAmBN,aAAaE,WAAW;gBAC3CK,QAAQR,YAAYQ,MAAM;gBAC1BC,QAAQX,QAAQhB,IAAI,CAAC2B,MAAM;YAC7B;YAEAV,MAAMN,MAAM,CAAC;YACb,OAAO;gBAACiB,iBAAiBN,IAAIE,EAAE;YAAA;QACjC;IACF;AACF"}
+{"version":3,"sources":["../../../src/presentation/routes/fire-manual.ts"],"sourcesContent":["import {requireUserContext, requireWorkspaceResourceAccess} from '@shipfox/api-auth-context';\nimport {\n  fireManualTriggerBodySchema,\n  fireManualTriggerResponseSchema,\n} from '@shipfox/api-triggers-dto';\nimport type {WorkflowsModuleClient} from '@shipfox/api-workflows-dto/inter-module';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {z} from 'zod';\nimport {ManualTriggerNotFoundError} from '#core/errors.js';\nimport {fireManualSubscription} from '#core/fire-manual.js';\nimport {\n  isInterpolationUnresolvableError,\n  isWorkspaceDeletedError,\n  isWorkspaceNotFoundError,\n  isWorkspaceSuspendedError,\n} from '#core/workflows-client.js';\nimport {getManualSubscriptionByDefinitionId} from '#db/subscriptions.js';\n\nexport function createFireManualTriggerRoute(workflows: WorkflowsModuleClient) {\n  return defineRoute({\n    method: 'POST',\n    path: '/:definitionId/fire-manual',\n    description: 'Fire the manual trigger of a workflow definition, creating a workflow run.',\n    schema: {\n      params: z.object({\n        definitionId: z.string().uuid(),\n      }),\n      body: fireManualTriggerBodySchema,\n      response: {\n        201: fireManualTriggerResponseSchema,\n        422: z.object({\n          code: z.string(),\n          details: z.object({\n            field: z.string(),\n            source: z.string(),\n            env_key: z.string().optional(),\n          }),\n        }),\n      },\n    },\n    errorHandler: (error) => {\n      if (error instanceof ManualTriggerNotFoundError) {\n        throw new ClientError(error.message, 'manual-trigger-not-found', {status: 404});\n      }\n      if (isWorkspaceSuspendedError(error)) {\n        throw new ClientError('Workspace is suspended', 'workspace-suspended', {\n          status: 409,\n          cause: error,\n        });\n      }\n      if (isWorkspaceDeletedError(error)) {\n        throw new ClientError('Workspace is deleted', 'workspace-deleted', {\n          status: 404,\n          cause: error,\n        });\n      }\n      if (isWorkspaceNotFoundError(error)) {\n        throw new ClientError('Workspace not found', 'workspace-not-found', {\n          status: 404,\n          cause: error,\n        });\n      }\n      if (isInterpolationUnresolvableError(error)) {\n        throw new ClientError(\n          'Workflow interpolation cannot be resolved',\n          'workflow-interpolation-unresolvable',\n          {\n            status: 422,\n            details: {\n              field: error.details.field,\n              source: error.details.source,\n              ...(error.details.envKey === undefined ? {} : {env_key: error.details.envKey}),\n            },\n          },\n        );\n      }\n      throw error;\n    },\n    handler: async (request, reply) => {\n      const {definitionId} = request.params;\n      const userContext = requireUserContext(request);\n\n      const subscription = await getManualSubscriptionByDefinitionId(definitionId);\n      // Missing triggers and memberships remain 404 to avoid leaking existence; lifecycle claims\n      // propagate their stable access errors.\n      if (!subscription) {\n        throw new ManualTriggerNotFoundError(definitionId);\n      }\n      requireWorkspaceResourceAccess({\n        request,\n        workspaceId: subscription.workspaceId,\n        notFoundError: new ClientError('Manual trigger not found', 'manual-trigger-not-found', {\n          status: 404,\n        }),\n      });\n\n      const run = await fireManualSubscription({\n        workflows,\n        subscriptionId: subscription.id,\n        callerWorkspaceId: subscription.workspaceId,\n        userId: userContext.userId,\n        inputs: request.body.inputs,\n      });\n\n      reply.status(201);\n      return {workflow_run_id: run.id};\n    },\n  });\n}\n"],"names":["requireUserContext","requireWorkspaceResourceAccess","fireManualTriggerBodySchema","fireManualTriggerResponseSchema","ClientError","defineRoute","z","ManualTriggerNotFoundError","fireManualSubscription","isInterpolationUnresolvableError","isWorkspaceDeletedError","isWorkspaceNotFoundError","isWorkspaceSuspendedError","getManualSubscriptionByDefinitionId","createFireManualTriggerRoute","workflows","method","path","description","schema","params","object","definitionId","string","uuid","body","response","code","details","field","source","env_key","optional","errorHandler","error","message","status","cause","envKey","undefined","handler","request","reply","userContext","subscription","workspaceId","notFoundError","run","subscriptionId","id","callerWorkspaceId","userId","inputs","workflow_run_id"],"mappings":"AAAA,SAAQA,kBAAkB,EAAEC,8BAA8B,QAAO,4BAA4B;AAC7F,SACEC,2BAA2B,EAC3BC,+BAA+B,QAC1B,4BAA4B;AAEnC,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,0BAA0B,QAAO,kBAAkB;AAC3D,SAAQC,sBAAsB,QAAO,uBAAuB;AAC5D,SACEC,gCAAgC,EAChCC,uBAAuB,EACvBC,wBAAwB,EACxBC,yBAAyB,QACpB,4BAA4B;AACnC,SAAQC,mCAAmC,QAAO,uBAAuB;AAEzE,OAAO,SAASC,6BAA6BC,SAAgC;IAC3E,OAAOV,YAAY;QACjBW,QAAQ;QACRC,MAAM;QACNC,aAAa;QACbC,QAAQ;YACNC,QAAQd,EAAEe,MAAM,CAAC;gBACfC,cAAchB,EAAEiB,MAAM,GAAGC,IAAI;YAC/B;YACAC,MAAMvB;YACNwB,UAAU;gBACR,KAAKvB;gBACL,KAAKG,EAAEe,MAAM,CAAC;oBACZM,MAAMrB,EAAEiB,MAAM;oBACdK,SAAStB,EAAEe,MAAM,CAAC;wBAChBQ,OAAOvB,EAAEiB,MAAM;wBACfO,QAAQxB,EAAEiB,MAAM;wBAChBQ,SAASzB,EAAEiB,MAAM,GAAGS,QAAQ;oBAC9B;gBACF;YACF;QACF;QACAC,cAAc,CAACC;YACb,IAAIA,iBAAiB3B,4BAA4B;gBAC/C,MAAM,IAAIH,YAAY8B,MAAMC,OAAO,EAAE,4BAA4B;oBAACC,QAAQ;gBAAG;YAC/E;YACA,IAAIxB,0BAA0BsB,QAAQ;gBACpC,MAAM,IAAI9B,YAAY,0BAA0B,uBAAuB;oBACrEgC,QAAQ;oBACRC,OAAOH;gBACT;YACF;YACA,IAAIxB,wBAAwBwB,QAAQ;gBAClC,MAAM,IAAI9B,YAAY,wBAAwB,qBAAqB;oBACjEgC,QAAQ;oBACRC,OAAOH;gBACT;YACF;YACA,IAAIvB,yBAAyBuB,QAAQ;gBACnC,MAAM,IAAI9B,YAAY,uBAAuB,uBAAuB;oBAClEgC,QAAQ;oBACRC,OAAOH;gBACT;YACF;YACA,IAAIzB,iCAAiCyB,QAAQ;gBAC3C,MAAM,IAAI9B,YACR,6CACA,uCACA;oBACEgC,QAAQ;oBACRR,SAAS;wBACPC,OAAOK,MAAMN,OAAO,CAACC,KAAK;wBAC1BC,QAAQI,MAAMN,OAAO,CAACE,MAAM;wBAC5B,GAAII,MAAMN,OAAO,CAACU,MAAM,KAAKC,YAAY,CAAC,IAAI;4BAACR,SAASG,MAAMN,OAAO,CAACU,MAAM;wBAAA,CAAC;oBAC/E;gBACF;YAEJ;YACA,MAAMJ;QACR;QACAM,SAAS,OAAOC,SAASC;YACvB,MAAM,EAACpB,YAAY,EAAC,GAAGmB,QAAQrB,MAAM;YACrC,MAAMuB,cAAc3C,mBAAmByC;YAEvC,MAAMG,eAAe,MAAM/B,oCAAoCS;YAC/D,2FAA2F;YAC3F,wCAAwC;YACxC,IAAI,CAACsB,cAAc;gBACjB,MAAM,IAAIrC,2BAA2Be;YACvC;YACArB,+BAA+B;gBAC7BwC;gBACAI,aAAaD,aAAaC,WAAW;gBACrCC,eAAe,IAAI1C,YAAY,4BAA4B,4BAA4B;oBACrFgC,QAAQ;gBACV;YACF;YAEA,MAAMW,MAAM,MAAMvC,uBAAuB;gBACvCO;gBACAiC,gBAAgBJ,aAAaK,EAAE;gBAC/BC,mBAAmBN,aAAaC,WAAW;gBAC3CM,QAAQR,YAAYQ,MAAM;gBAC1BC,QAAQX,QAAQhB,IAAI,CAAC2B,MAAM;YAC7B;YAEAV,MAAMN,MAAM,CAAC;YACb,OAAO;gBAACiB,iBAAiBN,IAAIE,EAAE;YAAA;QACjC;IACF;AACF"}

package/dist/presentation/routes/get-trigger-event.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-trigger-event.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/get-trigger-event.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,oBAAoB,iDA6B/B,CAAC"}
+{"version":3,"file":"get-trigger-event.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/get-trigger-event.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,oBAAoB,iDAkC/B,CAAC"}

package/dist/presentation/routes/get-trigger-event.js

@@ -1,4 +1,4 @@
-import { requireUserContext } from '@shipfox/api-auth-context';
+import { requireWorkspaceResourceAccess } from '@shipfox/api-auth-context';
 import { triggerEventDetailResponseSchema } from '@shipfox/api-triggers-dto';
 import { ClientError, defineRoute } from '@shipfox/node-fastify';
 import { z } from 'zod';
@@ -18,14 +18,21 @@ export const getTriggerEventRoute = defineRoute({
     },
     handler: async (request)=>{
         const { id } = request.params;
-        const userContext = requireUserContext(request);
         const event = await getTriggerEventById(id);
-        // 404 covers both "no such event" and "not your workspace" to avoid leaking existence.
-        if (!event || !userContext.canAccess(event.workspaceId)) {
+        // Missing events and memberships remain 404 to avoid leaking existence; lifecycle claims
+        // propagate their stable access errors.
+        if (!event) {
             throw new ClientError('Trigger event not found', 'not-found', {
                 status: 404
             });
         }
+        requireWorkspaceResourceAccess({
+            request,
+            workspaceId: event.workspaceId,
+            notFoundError: new ClientError('Trigger event not found', 'not-found', {
+                status: 404
+            })
+        });
         const decisions = await listDecisionsByReceivedEventId(event.id);
         return {
             ...toTriggerEventDto(event),

package/dist/presentation/routes/get-trigger-event.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/presentation/routes/get-trigger-event.ts"],"sourcesContent":["import {requireUserContext} from '@shipfox/api-auth-context';\nimport {triggerEventDetailResponseSchema} from '@shipfox/api-triggers-dto';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {z} from 'zod';\nimport {getTriggerEventById, listDecisionsByReceivedEventId} from '#db/index.js';\nimport {toTriggerDecisionDto, toTriggerEventDto} from '#presentation/dto/trigger-events.js';\n\nexport const getTriggerEventRoute = defineRoute({\n  method: 'GET',\n  path: '/:id',\n  description: 'Get a trigger event by ID with its routing decisions.',\n  schema: {\n    params: z.object({\n      id: z.string().uuid(),\n    }),\n    response: {\n      200: triggerEventDetailResponseSchema,\n    },\n  },\n  handler: async (request) => {\n    const {id} = request.params;\n    const userContext = requireUserContext(request);\n\n    const event = await getTriggerEventById(id);\n    // 404 covers both \"no such event\" and \"not your workspace\" to avoid leaking existence.\n    if (!event || !userContext.canAccess(event.workspaceId)) {\n      throw new ClientError('Trigger event not found', 'not-found', {status: 404});\n    }\n\n    const decisions = await listDecisionsByReceivedEventId(event.id);\n\n    return {\n      ...toTriggerEventDto(event),\n      decisions: decisions.map(toTriggerDecisionDto),\n    };\n  },\n});\n"],"names":["requireUserContext","triggerEventDetailResponseSchema","ClientError","defineRoute","z","getTriggerEventById","listDecisionsByReceivedEventId","toTriggerDecisionDto","toTriggerEventDto","getTriggerEventRoute","method","path","description","schema","params","object","id","string","uuid","response","handler","request","userContext","event","canAccess","workspaceId","status","decisions","map"],"mappings":"AAAA,SAAQA,kBAAkB,QAAO,4BAA4B;AAC7D,SAAQC,gCAAgC,QAAO,4BAA4B;AAC3E,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,mBAAmB,EAAEC,8BAA8B,QAAO,eAAe;AACjF,SAAQC,oBAAoB,EAAEC,iBAAiB,QAAO,sCAAsC;AAE5F,OAAO,MAAMC,uBAAuBN,YAAY;IAC9CO,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QACNC,QAAQV,EAAEW,MAAM,CAAC;YACfC,IAAIZ,EAAEa,MAAM,GAAGC,IAAI;QACrB;QACAC,UAAU;YACR,KAAKlB;QACP;IACF;IACAmB,SAAS,OAAOC;QACd,MAAM,EAACL,EAAE,EAAC,GAAGK,QAAQP,MAAM;QAC3B,MAAMQ,cAActB,mBAAmBqB;QAEvC,MAAME,QAAQ,MAAMlB,oBAAoBW;QACxC,uFAAuF;QACvF,IAAI,CAACO,SAAS,CAACD,YAAYE,SAAS,CAACD,MAAME,WAAW,GAAG;YACvD,MAAM,IAAIvB,YAAY,2BAA2B,aAAa;gBAACwB,QAAQ;YAAG;QAC5E;QAEA,MAAMC,YAAY,MAAMrB,+BAA+BiB,MAAMP,EAAE;QAE/D,OAAO;YACL,GAAGR,kBAAkBe,MAAM;YAC3BI,WAAWA,UAAUC,GAAG,CAACrB;QAC3B;IACF;AACF,GAAG"}
+{"version":3,"sources":["../../../src/presentation/routes/get-trigger-event.ts"],"sourcesContent":["import {requireWorkspaceResourceAccess} from '@shipfox/api-auth-context';\nimport {triggerEventDetailResponseSchema} from '@shipfox/api-triggers-dto';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {z} from 'zod';\nimport {getTriggerEventById, listDecisionsByReceivedEventId} from '#db/index.js';\nimport {toTriggerDecisionDto, toTriggerEventDto} from '#presentation/dto/trigger-events.js';\n\nexport const getTriggerEventRoute = defineRoute({\n  method: 'GET',\n  path: '/:id',\n  description: 'Get a trigger event by ID with its routing decisions.',\n  schema: {\n    params: z.object({\n      id: z.string().uuid(),\n    }),\n    response: {\n      200: triggerEventDetailResponseSchema,\n    },\n  },\n  handler: async (request) => {\n    const {id} = request.params;\n\n    const event = await getTriggerEventById(id);\n    // Missing events and memberships remain 404 to avoid leaking existence; lifecycle claims\n    // propagate their stable access errors.\n    if (!event) {\n      throw new ClientError('Trigger event not found', 'not-found', {status: 404});\n    }\n    requireWorkspaceResourceAccess({\n      request,\n      workspaceId: event.workspaceId,\n      notFoundError: new ClientError('Trigger event not found', 'not-found', {status: 404}),\n    });\n\n    const decisions = await listDecisionsByReceivedEventId(event.id);\n\n    return {\n      ...toTriggerEventDto(event),\n      decisions: decisions.map(toTriggerDecisionDto),\n    };\n  },\n});\n"],"names":["requireWorkspaceResourceAccess","triggerEventDetailResponseSchema","ClientError","defineRoute","z","getTriggerEventById","listDecisionsByReceivedEventId","toTriggerDecisionDto","toTriggerEventDto","getTriggerEventRoute","method","path","description","schema","params","object","id","string","uuid","response","handler","request","event","status","workspaceId","notFoundError","decisions","map"],"mappings":"AAAA,SAAQA,8BAA8B,QAAO,4BAA4B;AACzE,SAAQC,gCAAgC,QAAO,4BAA4B;AAC3E,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,mBAAmB,EAAEC,8BAA8B,QAAO,eAAe;AACjF,SAAQC,oBAAoB,EAAEC,iBAAiB,QAAO,sCAAsC;AAE5F,OAAO,MAAMC,uBAAuBN,YAAY;IAC9CO,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QACNC,QAAQV,EAAEW,MAAM,CAAC;YACfC,IAAIZ,EAAEa,MAAM,GAAGC,IAAI;QACrB;QACAC,UAAU;YACR,KAAKlB;QACP;IACF;IACAmB,SAAS,OAAOC;QACd,MAAM,EAACL,EAAE,EAAC,GAAGK,QAAQP,MAAM;QAE3B,MAAMQ,QAAQ,MAAMjB,oBAAoBW;QACxC,yFAAyF;QACzF,wCAAwC;QACxC,IAAI,CAACM,OAAO;YACV,MAAM,IAAIpB,YAAY,2BAA2B,aAAa;gBAACqB,QAAQ;YAAG;QAC5E;QACAvB,+BAA+B;YAC7BqB;YACAG,aAAaF,MAAME,WAAW;YAC9BC,eAAe,IAAIvB,YAAY,2BAA2B,aAAa;gBAACqB,QAAQ;YAAG;QACrF;QAEA,MAAMG,YAAY,MAAMpB,+BAA+BgB,MAAMN,EAAE;QAE/D,OAAO;YACL,GAAGR,kBAAkBc,MAAM;YAC3BI,WAAWA,UAAUC,GAAG,CAACpB;QAC3B;IACF;AACF,GAAG"}

package/dist/presentation/routes/list-trigger-event-facets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"list-trigger-event-facets.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/list-trigger-event-facets.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,2BAA2B,iDAoBtC,CAAC"}
+{"version":3,"file":"list-trigger-event-facets.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/list-trigger-event-facets.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,2BAA2B,iDAiBtC,CAAC"}