@shipfox/api-workflows 10.1.0 → 11.0.0

package/.turbo/turbo-build.log

@@ -1,6 +1,6 @@
 $ shipfox-swc && shipfox-temporal-bundle dist/temporal/workflows/index.js
-Successfully compiled: 116 files with swc (783.3ms)
-2026-07-28T09:17:45.477Z [INFO] asset workflow-bundle-21a9ae8beb3cb55dabc1.js 3.31 MiB [emitted] [immutable] (name: main)
+Successfully compiled: 116 files with swc (767.93ms)
+2026-07-28T22:45:34.612Z [INFO] asset workflow-bundle-21a9ae8beb3cb55dabc1.js 3.31 MiB [emitted] [immutable] (name: main)
 orphan modules 33.5 KiB [orphan] 21 modules
 runtime modules 1.13 KiB 5 modules
 modules by path ../../../node_modules/.pnpm/ 970 KiB 196 modules
@@ -16,6 +16,6 @@ optional modules 30 bytes [optional]
   __temporal_custom_payload_converter (ignored) 15 bytes [optional] [built] [code generated]
   __temporal_custom_failure_converter (ignored) 15 bytes [optional] [built] [code generated]
 ../../shared/node/temporal/dist/workflow-error-interceptor.js 1.21 KiB [built] [code generated]
-webpack 5.107.2 compiled successfully in 7396 ms
-2026-07-28T09:17:45.488Z [INFO] Workflow bundle created { size: '3.31MB' }
+webpack 5.107.2 compiled successfully in 7247 ms
+2026-07-28T22:45:34.624Z [INFO] Workflow bundle created { size: '3.31MB' }
 /home/runner/work/shipfox/shipfox/libs/api/workflows/dist/temporal/workflows/index.js: 3470576 bytes

package/CHANGELOG.md

@@ -1,5 +1,37 @@
 # @shipfox/api-workflows
 
+## 11.0.0
+
+### Major Changes
+
+- 25158c8: Carry workspace lifecycle status in JWT membership claims and enforce suspended or inactive access at the stateless workspace gate while keeping access-token verification stateless.
+
+  `getAuthenticatedSessionContext()` now reads refresh-session metadata from verified access-token claims without checking active refresh-session state; revoking a refresh session does not invalidate an already-issued access token.
+
+### Patch Changes
+
+- Updated dependencies [71d9ba4]
+- Updated dependencies [25158c8]
+  - @shipfox/expression@1.2.1
+  - @shipfox/api-auth-context@11.0.0
+  - @shipfox/api-workspaces-dto@11.0.0
+  - @shipfox/api-definitions-dto@11.0.0
+
+## 10.2.0
+
+### Patch Changes
+
+- Updated dependencies [c9a188d]
+- Updated dependencies [8678943]
+- Updated dependencies [95d1456]
+- Updated dependencies [0773b85]
+- Updated dependencies [6be5a54]
+- Updated dependencies [07e7371]
+  - @shipfox/api-runners-dto@10.2.0
+  - @shipfox/api-auth-dto@10.2.0
+  - @shipfox/api-workspaces-dto@10.2.0
+  - @shipfox/api-auth-context@10.2.0
+
 ## 10.1.0
 
 ### Patch Changes

package/dist/presentation/routes/require-accessible-run.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"require-accessible-run.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/require-accessible-run.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,oBAAoB,EAAC,MAAM,wCAAwC,CAAC;AAEjF,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,SAAS,CAAC;AAC5C,OAAO,KAAK,EAAC,WAAW,EAAC,MAAM,gCAAgC,CAAC;AAIhE,wBAAsB,oBAAoB,CAAC,EACzC,OAAO,EACP,EAAE,EACF,QAAQ,GACT,EAAE;IACD,OAAO,EAAE,cAAc,CAAC;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,oBAAoB,CAAC;CAChC,GAAG,OAAO,CAAC,WAAW,CAAC,CAcvB"}
+{"version":3,"file":"require-accessible-run.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/require-accessible-run.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,oBAAoB,EAAC,MAAM,wCAAwC,CAAC;AAEjF,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,SAAS,CAAC;AAC5C,OAAO,KAAK,EAAC,WAAW,EAAC,MAAM,gCAAgC,CAAC;AAIhE,wBAAsB,oBAAoB,CAAC,EACzC,OAAO,EACP,EAAE,EACF,QAAQ,GACT,EAAE;IACD,OAAO,EAAE,cAAc,CAAC;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,oBAAoB,CAAC;CAChC,GAAG,OAAO,CAAC,WAAW,CAAC,CAiBvB"}

package/dist/presentation/routes/require-accessible-run.js

@@ -9,7 +9,7 @@ export async function requireAccessibleRun({ request, id, projects }) {
         });
     }
     await requireProjectAccess(request, run.projectId, projects).catch((err)=>{
-        if (err instanceof ClientError && (err.status === 403 || err.status === 404)) {
+        if (err instanceof ClientError && (err.status === 404 || err.status === 403 && err.code === 'forbidden')) {
             throw new ClientError('Run not found', 'not-found', {
                 status: 404
             });

package/dist/presentation/routes/require-accessible-run.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/presentation/routes/require-accessible-run.ts"],"sourcesContent":["import type {ProjectsModuleClient} from '@shipfox/api-projects-dto/inter-module';\nimport {ClientError} from '@shipfox/node-fastify';\nimport type {FastifyRequest} from 'fastify';\nimport type {WorkflowRun} from '#core/entities/workflow-run.js';\nimport {getWorkflowRunById} from '#db/index.js';\nimport {requireProjectAccess} from './project-access.js';\n\nexport async function requireAccessibleRun({\n  request,\n  id,\n  projects,\n}: {\n  request: FastifyRequest;\n  id: string;\n  projects: ProjectsModuleClient;\n}): Promise<WorkflowRun> {\n  const run = await getWorkflowRunById(id);\n  if (!run) {\n    throw new ClientError('Run not found', 'not-found', {status: 404});\n  }\n\n  await requireProjectAccess(request, run.projectId, projects).catch((err: unknown) => {\n    if (err instanceof ClientError && (err.status === 403 || err.status === 404)) {\n      throw new ClientError('Run not found', 'not-found', {status: 404});\n    }\n    throw err;\n  });\n\n  return run;\n}\n"],"names":["ClientError","getWorkflowRunById","requireProjectAccess","requireAccessibleRun","request","id","projects","run","status","projectId","catch","err"],"mappings":"AACA,SAAQA,WAAW,QAAO,wBAAwB;AAGlD,SAAQC,kBAAkB,QAAO,eAAe;AAChD,SAAQC,oBAAoB,QAAO,sBAAsB;AAEzD,OAAO,eAAeC,qBAAqB,EACzCC,OAAO,EACPC,EAAE,EACFC,QAAQ,EAKT;IACC,MAAMC,MAAM,MAAMN,mBAAmBI;IACrC,IAAI,CAACE,KAAK;QACR,MAAM,IAAIP,YAAY,iBAAiB,aAAa;YAACQ,QAAQ;QAAG;IAClE;IAEA,MAAMN,qBAAqBE,SAASG,IAAIE,SAAS,EAAEH,UAAUI,KAAK,CAAC,CAACC;QAClE,IAAIA,eAAeX,eAAgBW,CAAAA,IAAIH,MAAM,KAAK,OAAOG,IAAIH,MAAM,KAAK,GAAE,GAAI;YAC5E,MAAM,IAAIR,YAAY,iBAAiB,aAAa;gBAACQ,QAAQ;YAAG;QAClE;QACA,MAAMG;IACR;IAEA,OAAOJ;AACT"}
+{"version":3,"sources":["../../../src/presentation/routes/require-accessible-run.ts"],"sourcesContent":["import type {ProjectsModuleClient} from '@shipfox/api-projects-dto/inter-module';\nimport {ClientError} from '@shipfox/node-fastify';\nimport type {FastifyRequest} from 'fastify';\nimport type {WorkflowRun} from '#core/entities/workflow-run.js';\nimport {getWorkflowRunById} from '#db/index.js';\nimport {requireProjectAccess} from './project-access.js';\n\nexport async function requireAccessibleRun({\n  request,\n  id,\n  projects,\n}: {\n  request: FastifyRequest;\n  id: string;\n  projects: ProjectsModuleClient;\n}): Promise<WorkflowRun> {\n  const run = await getWorkflowRunById(id);\n  if (!run) {\n    throw new ClientError('Run not found', 'not-found', {status: 404});\n  }\n\n  await requireProjectAccess(request, run.projectId, projects).catch((err: unknown) => {\n    if (\n      err instanceof ClientError &&\n      (err.status === 404 || (err.status === 403 && err.code === 'forbidden'))\n    ) {\n      throw new ClientError('Run not found', 'not-found', {status: 404});\n    }\n    throw err;\n  });\n\n  return run;\n}\n"],"names":["ClientError","getWorkflowRunById","requireProjectAccess","requireAccessibleRun","request","id","projects","run","status","projectId","catch","err","code"],"mappings":"AACA,SAAQA,WAAW,QAAO,wBAAwB;AAGlD,SAAQC,kBAAkB,QAAO,eAAe;AAChD,SAAQC,oBAAoB,QAAO,sBAAsB;AAEzD,OAAO,eAAeC,qBAAqB,EACzCC,OAAO,EACPC,EAAE,EACFC,QAAQ,EAKT;IACC,MAAMC,MAAM,MAAMN,mBAAmBI;IACrC,IAAI,CAACE,KAAK;QACR,MAAM,IAAIP,YAAY,iBAAiB,aAAa;YAACQ,QAAQ;QAAG;IAClE;IAEA,MAAMN,qBAAqBE,SAASG,IAAIE,SAAS,EAAEH,UAAUI,KAAK,CAAC,CAACC;QAClE,IACEA,eAAeX,eACdW,CAAAA,IAAIH,MAAM,KAAK,OAAQG,IAAIH,MAAM,KAAK,OAAOG,IAAIC,IAAI,KAAK,WAAW,GACtE;YACA,MAAM,IAAIZ,YAAY,iBAAiB,aAAa;gBAACQ,QAAQ;YAAG;QAClE;QACA,MAAMG;IACR;IAEA,OAAOJ;AACT"}