@shipfox/api-workflows 5.0.0 → 6.0.0

package/dist/presentation/routes/agent-runtime-config.js

@@ -1,71 +1,73 @@
-import { ModelProviderConfigNotFoundError } from '@shipfox/api-agent/core/errors';
-import { resolveRuntimeCredentials } from '@shipfox/api-agent/core/resolve-runtime-credentials';
 import { agentRuntimeCredentialsResponseSchema, materializedAgentStepConfigSchema } from '@shipfox/api-agent-dto';
-import { SecretDecryptionError } from '@shipfox/api-secrets';
+import { agentInterModuleContract } from '@shipfox/api-agent-dto/inter-module';
 import { agentRuntimeConfigQuerySchema } from '@shipfox/api-workflows-dto';
+import { isInterModuleKnownError } from '@shipfox/inter-module';
 import { captureException } from '@shipfox/node-error-monitoring';
 import { ClientError, defineRoute } from '@shipfox/node-fastify';
 import { ZodError } from 'zod';
 import { loadRunningLeasedStep } from './leased-step.js';
-export const agentRuntimeConfigRoute = defineRoute({
-    method: 'GET',
-    path: '/agent-runtime-config',
-    description: "Returns the resolved harness, provider, model, thinking effort, and decrypted provider credential bundle for the runner's currently leased running agent step. The job is identified by the lease token and the step is bound to that job before credentials are returned.",
-    schema: {
-        querystring: agentRuntimeConfigQuerySchema,
-        response: {
-            200: agentRuntimeCredentialsResponseSchema
-        }
-    },
-    errorHandler: (error)=>{
-        if (error instanceof SecretDecryptionError) {
-            captureException(error);
-            throw new ClientError('Model provider credentials could not be decrypted', 'model-provider-credentials-invalid', {
-                status: 409,
-                cause: error
-            });
-        }
-        if (error instanceof ModelProviderConfigNotFoundError) {
-            throw new ClientError('Model provider credentials are not configured', 'model-provider-not-configured', {
-                status: 409
-            });
-        }
-        throw error;
-    },
-    handler: async (request, reply)=>{
-        const { step_id: stepId, attempt } = request.query;
-        const { step, workspaceId } = await loadRunningLeasedStep({
-            request,
-            stepId,
-            attempt
-        });
-        if (step.type !== 'agent') {
-            throw new ClientError('Step is not an agent step', 'step-not-agent', {
-                status: 409
-            });
-        }
-        let agentConfig;
-        try {
-            agentConfig = materializedAgentStepConfigSchema.parse(step.config);
-        } catch (error) {
-            if (error instanceof ZodError) {
-                throw new ClientError('Agent step config is invalid', 'agent-step-config-invalid', {
+export function createAgentRuntimeConfigRoute(params) {
+    return defineRoute({
+        method: 'GET',
+        path: '/agent-runtime-config',
+        description: "Returns the resolved harness, provider, model, thinking effort, and decrypted provider credential bundle for the runner's currently leased running agent step. The job is identified by the lease token and the step is bound to that job before credentials are returned.",
+        schema: {
+            querystring: agentRuntimeConfigQuerySchema,
+            response: {
+                200: agentRuntimeCredentialsResponseSchema
+            }
+        },
+        errorHandler: (error)=>{
+            if (isInterModuleKnownError(agentInterModuleContract.methods.resolveRuntimeCredentials, error) && error.code === 'model-provider-credentials-invalid') {
+                captureException(error);
+                throw new ClientError('Model provider credentials could not be decrypted', 'model-provider-credentials-invalid', {
                     status: 409,
                     cause: error
                 });
             }
+            if (isInterModuleKnownError(agentInterModuleContract.methods.resolveRuntimeCredentials, error) && error.code === 'model-provider-not-configured') {
+                throw new ClientError('Model provider credentials are not configured', 'model-provider-not-configured', {
+                    status: 409
+                });
+            }
             throw error;
+        },
+        handler: async (request, reply)=>{
+            const { step_id: stepId, attempt } = request.query;
+            const { step, workspaceId } = await loadRunningLeasedStep({
+                runners: params.runners,
+                request,
+                stepId,
+                attempt
+            });
+            if (step.type !== 'agent') {
+                throw new ClientError('Step is not an agent step', 'step-not-agent', {
+                    status: 409
+                });
+            }
+            let agentConfig;
+            try {
+                agentConfig = materializedAgentStepConfigSchema.parse(step.config);
+            } catch (error) {
+                if (error instanceof ZodError) {
+                    throw new ClientError('Agent step config is invalid', 'agent-step-config-invalid', {
+                        status: 409,
+                        cause: error
+                    });
+                }
+                throw error;
+            }
+            const runtimeConfig = await params.agent.resolveRuntimeCredentials({
+                workspaceId,
+                harness: agentConfig.harness,
+                provider: agentConfig.provider,
+                model: agentConfig.model,
+                thinking: agentConfig.thinking
+            });
+            reply.header('cache-control', 'no-store');
+            return runtimeConfig;
         }
-        const runtimeConfig = await resolveRuntimeCredentials({
-            workspaceId,
-            harness: agentConfig.harness,
-            provider: agentConfig.provider,
-            model: agentConfig.model,
-            thinking: agentConfig.thinking
-        });
-        reply.header('cache-control', 'no-store');
-        return runtimeConfig;
-    }
-});
+    });
+}
 
 //# sourceMappingURL=agent-runtime-config.js.map

package/dist/presentation/routes/agent-runtime-config.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/presentation/routes/agent-runtime-config.ts"],"sourcesContent":["import {ModelProviderConfigNotFoundError} from '@shipfox/api-agent/core/errors';\nimport {resolveRuntimeCredentials} from '@shipfox/api-agent/core/resolve-runtime-credentials';\nimport {\n  agentRuntimeCredentialsResponseSchema,\n  type MaterializedAgentStepConfigDto,\n  materializedAgentStepConfigSchema,\n} from '@shipfox/api-agent-dto';\nimport {SecretDecryptionError} from '@shipfox/api-secrets';\nimport {agentRuntimeConfigQuerySchema} from '@shipfox/api-workflows-dto';\nimport {captureException} from '@shipfox/node-error-monitoring';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {ZodError} from 'zod';\nimport {loadRunningLeasedStep} from './leased-step.js';\n\nexport const agentRuntimeConfigRoute = defineRoute({\n  method: 'GET',\n  path: '/agent-runtime-config',\n  description:\n    \"Returns the resolved harness, provider, model, thinking effort, and decrypted provider credential bundle for the runner's currently leased running agent step. The job is identified by the lease token and the step is bound to that job before credentials are returned.\",\n  schema: {\n    querystring: agentRuntimeConfigQuerySchema,\n    response: {\n      200: agentRuntimeCredentialsResponseSchema,\n    },\n  },\n  errorHandler: (error) => {\n    if (error instanceof SecretDecryptionError) {\n      captureException(error);\n      throw new ClientError(\n        'Model provider credentials could not be decrypted',\n        'model-provider-credentials-invalid',\n        {\n          status: 409,\n          cause: error,\n        },\n      );\n    }\n    if (error instanceof ModelProviderConfigNotFoundError) {\n      throw new ClientError(\n        'Model provider credentials are not configured',\n        'model-provider-not-configured',\n        {\n          status: 409,\n        },\n      );\n    }\n    throw error;\n  },\n  handler: async (request, reply) => {\n    const {step_id: stepId, attempt} = request.query;\n    const {step, workspaceId} = await loadRunningLeasedStep({request, stepId, attempt});\n\n    if (step.type !== 'agent') {\n      throw new ClientError('Step is not an agent step', 'step-not-agent', {status: 409});\n    }\n\n    let agentConfig: MaterializedAgentStepConfigDto;\n    try {\n      agentConfig = materializedAgentStepConfigSchema.parse(step.config);\n    } catch (error) {\n      if (error instanceof ZodError) {\n        throw new ClientError('Agent step config is invalid', 'agent-step-config-invalid', {\n          status: 409,\n          cause: error,\n        });\n      }\n      throw error;\n    }\n\n    const runtimeConfig = await resolveRuntimeCredentials({\n      workspaceId,\n      harness: agentConfig.harness,\n      provider: agentConfig.provider,\n      model: agentConfig.model,\n      thinking: agentConfig.thinking,\n    });\n\n    reply.header('cache-control', 'no-store');\n    return runtimeConfig;\n  },\n});\n"],"names":["ModelProviderConfigNotFoundError","resolveRuntimeCredentials","agentRuntimeCredentialsResponseSchema","materializedAgentStepConfigSchema","SecretDecryptionError","agentRuntimeConfigQuerySchema","captureException","ClientError","defineRoute","ZodError","loadRunningLeasedStep","agentRuntimeConfigRoute","method","path","description","schema","querystring","response","errorHandler","error","status","cause","handler","request","reply","step_id","stepId","attempt","query","step","workspaceId","type","agentConfig","parse","config","runtimeConfig","harness","provider","model","thinking","header"],"mappings":"AAAA,SAAQA,gCAAgC,QAAO,iCAAiC;AAChF,SAAQC,yBAAyB,QAAO,sDAAsD;AAC9F,SACEC,qCAAqC,EAErCC,iCAAiC,QAC5B,yBAAyB;AAChC,SAAQC,qBAAqB,QAAO,uBAAuB;AAC3D,SAAQC,6BAA6B,QAAO,6BAA6B;AACzE,SAAQC,gBAAgB,QAAO,iCAAiC;AAChE,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,QAAQ,QAAO,MAAM;AAC7B,SAAQC,qBAAqB,QAAO,mBAAmB;AAEvD,OAAO,MAAMC,0BAA0BH,YAAY;IACjDI,QAAQ;IACRC,MAAM;IACNC,aACE;IACFC,QAAQ;QACNC,aAAaX;QACbY,UAAU;YACR,KAAKf;QACP;IACF;IACAgB,cAAc,CAACC;QACb,IAAIA,iBAAiBf,uBAAuB;YAC1CE,iBAAiBa;YACjB,MAAM,IAAIZ,YACR,qDACA,sCACA;gBACEa,QAAQ;gBACRC,OAAOF;YACT;QAEJ;QACA,IAAIA,iBAAiBnB,kCAAkC;YACrD,MAAM,IAAIO,YACR,iDACA,iCACA;gBACEa,QAAQ;YACV;QAEJ;QACA,MAAMD;IACR;IACAG,SAAS,OAAOC,SAASC;QACvB,MAAM,EAACC,SAASC,MAAM,EAAEC,OAAO,EAAC,GAAGJ,QAAQK,KAAK;QAChD,MAAM,EAACC,IAAI,EAAEC,WAAW,EAAC,GAAG,MAAMpB,sBAAsB;YAACa;YAASG;YAAQC;QAAO;QAEjF,IAAIE,KAAKE,IAAI,KAAK,SAAS;YACzB,MAAM,IAAIxB,YAAY,6BAA6B,kBAAkB;gBAACa,QAAQ;YAAG;QACnF;QAEA,IAAIY;QACJ,IAAI;YACFA,cAAc7B,kCAAkC8B,KAAK,CAACJ,KAAKK,MAAM;QACnE,EAAE,OAAOf,OAAO;YACd,IAAIA,iBAAiBV,UAAU;gBAC7B,MAAM,IAAIF,YAAY,gCAAgC,6BAA6B;oBACjFa,QAAQ;oBACRC,OAAOF;gBACT;YACF;YACA,MAAMA;QACR;QAEA,MAAMgB,gBAAgB,MAAMlC,0BAA0B;YACpD6B;YACAM,SAASJ,YAAYI,OAAO;YAC5BC,UAAUL,YAAYK,QAAQ;YAC9BC,OAAON,YAAYM,KAAK;YACxBC,UAAUP,YAAYO,QAAQ;QAChC;QAEAf,MAAMgB,MAAM,CAAC,iBAAiB;QAC9B,OAAOL;IACT;AACF,GAAG"}
+{"version":3,"sources":["../../../src/presentation/routes/agent-runtime-config.ts"],"sourcesContent":["import {\n  agentRuntimeCredentialsResponseSchema,\n  type MaterializedAgentStepConfigDto,\n  materializedAgentStepConfigSchema,\n} from '@shipfox/api-agent-dto';\nimport {\n  type AgentInterModuleClient,\n  agentInterModuleContract,\n} from '@shipfox/api-agent-dto/inter-module';\nimport type {RunnersInterModuleClient} from '@shipfox/api-runners-dto/inter-module';\nimport {agentRuntimeConfigQuerySchema} from '@shipfox/api-workflows-dto';\nimport {isInterModuleKnownError} from '@shipfox/inter-module';\nimport {captureException} from '@shipfox/node-error-monitoring';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {ZodError} from 'zod';\nimport {loadRunningLeasedStep} from './leased-step.js';\n\nexport function createAgentRuntimeConfigRoute(params: {\n  agent: AgentInterModuleClient;\n  runners: RunnersInterModuleClient;\n}) {\n  return defineRoute({\n    method: 'GET',\n    path: '/agent-runtime-config',\n    description:\n      \"Returns the resolved harness, provider, model, thinking effort, and decrypted provider credential bundle for the runner's currently leased running agent step. The job is identified by the lease token and the step is bound to that job before credentials are returned.\",\n    schema: {\n      querystring: agentRuntimeConfigQuerySchema,\n      response: {\n        200: agentRuntimeCredentialsResponseSchema,\n      },\n    },\n    errorHandler: (error) => {\n      if (\n        isInterModuleKnownError(\n          agentInterModuleContract.methods.resolveRuntimeCredentials,\n          error,\n        ) &&\n        error.code === 'model-provider-credentials-invalid'\n      ) {\n        captureException(error);\n        throw new ClientError(\n          'Model provider credentials could not be decrypted',\n          'model-provider-credentials-invalid',\n          {\n            status: 409,\n            cause: error,\n          },\n        );\n      }\n      if (\n        isInterModuleKnownError(\n          agentInterModuleContract.methods.resolveRuntimeCredentials,\n          error,\n        ) &&\n        error.code === 'model-provider-not-configured'\n      ) {\n        throw new ClientError(\n          'Model provider credentials are not configured',\n          'model-provider-not-configured',\n          {\n            status: 409,\n          },\n        );\n      }\n      throw error;\n    },\n    handler: async (request, reply) => {\n      const {step_id: stepId, attempt} = request.query;\n      const {step, workspaceId} = await loadRunningLeasedStep({\n        runners: params.runners,\n        request,\n        stepId,\n        attempt,\n      });\n\n      if (step.type !== 'agent') {\n        throw new ClientError('Step is not an agent step', 'step-not-agent', {status: 409});\n      }\n\n      let agentConfig: MaterializedAgentStepConfigDto;\n      try {\n        agentConfig = materializedAgentStepConfigSchema.parse(step.config);\n      } catch (error) {\n        if (error instanceof ZodError) {\n          throw new ClientError('Agent step config is invalid', 'agent-step-config-invalid', {\n            status: 409,\n            cause: error,\n          });\n        }\n        throw error;\n      }\n\n      const runtimeConfig = await params.agent.resolveRuntimeCredentials({\n        workspaceId,\n        harness: agentConfig.harness,\n        provider: agentConfig.provider,\n        model: agentConfig.model,\n        thinking: agentConfig.thinking,\n      });\n\n      reply.header('cache-control', 'no-store');\n      return runtimeConfig;\n    },\n  });\n}\n"],"names":["agentRuntimeCredentialsResponseSchema","materializedAgentStepConfigSchema","agentInterModuleContract","agentRuntimeConfigQuerySchema","isInterModuleKnownError","captureException","ClientError","defineRoute","ZodError","loadRunningLeasedStep","createAgentRuntimeConfigRoute","params","method","path","description","schema","querystring","response","errorHandler","error","methods","resolveRuntimeCredentials","code","status","cause","handler","request","reply","step_id","stepId","attempt","query","step","workspaceId","runners","type","agentConfig","parse","config","runtimeConfig","agent","harness","provider","model","thinking","header"],"mappings":"AAAA,SACEA,qCAAqC,EAErCC,iCAAiC,QAC5B,yBAAyB;AAChC,SAEEC,wBAAwB,QACnB,sCAAsC;AAE7C,SAAQC,6BAA6B,QAAO,6BAA6B;AACzE,SAAQC,uBAAuB,QAAO,wBAAwB;AAC9D,SAAQC,gBAAgB,QAAO,iCAAiC;AAChE,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,QAAQ,QAAO,MAAM;AAC7B,SAAQC,qBAAqB,QAAO,mBAAmB;AAEvD,OAAO,SAASC,8BAA8BC,MAG7C;IACC,OAAOJ,YAAY;QACjBK,QAAQ;QACRC,MAAM;QACNC,aACE;QACFC,QAAQ;YACNC,aAAab;YACbc,UAAU;gBACR,KAAKjB;YACP;QACF;QACAkB,cAAc,CAACC;YACb,IACEf,wBACEF,yBAAyBkB,OAAO,CAACC,yBAAyB,EAC1DF,UAEFA,MAAMG,IAAI,KAAK,sCACf;gBACAjB,iBAAiBc;gBACjB,MAAM,IAAIb,YACR,qDACA,sCACA;oBACEiB,QAAQ;oBACRC,OAAOL;gBACT;YAEJ;YACA,IACEf,wBACEF,yBAAyBkB,OAAO,CAACC,yBAAyB,EAC1DF,UAEFA,MAAMG,IAAI,KAAK,iCACf;gBACA,MAAM,IAAIhB,YACR,iDACA,iCACA;oBACEiB,QAAQ;gBACV;YAEJ;YACA,MAAMJ;QACR;QACAM,SAAS,OAAOC,SAASC;YACvB,MAAM,EAACC,SAASC,MAAM,EAAEC,OAAO,EAAC,GAAGJ,QAAQK,KAAK;YAChD,MAAM,EAACC,IAAI,EAAEC,WAAW,EAAC,GAAG,MAAMxB,sBAAsB;gBACtDyB,SAASvB,OAAOuB,OAAO;gBACvBR;gBACAG;gBACAC;YACF;YAEA,IAAIE,KAAKG,IAAI,KAAK,SAAS;gBACzB,MAAM,IAAI7B,YAAY,6BAA6B,kBAAkB;oBAACiB,QAAQ;gBAAG;YACnF;YAEA,IAAIa;YACJ,IAAI;gBACFA,cAAcnC,kCAAkCoC,KAAK,CAACL,KAAKM,MAAM;YACnE,EAAE,OAAOnB,OAAO;gBACd,IAAIA,iBAAiBX,UAAU;oBAC7B,MAAM,IAAIF,YAAY,gCAAgC,6BAA6B;wBACjFiB,QAAQ;wBACRC,OAAOL;oBACT;gBACF;gBACA,MAAMA;YACR;YAEA,MAAMoB,gBAAgB,MAAM5B,OAAO6B,KAAK,CAACnB,yBAAyB,CAAC;gBACjEY;gBACAQ,SAASL,YAAYK,OAAO;gBAC5BC,UAAUN,YAAYM,QAAQ;gBAC9BC,OAAOP,YAAYO,KAAK;gBACxBC,UAAUR,YAAYQ,QAAQ;YAChC;YAEAjB,MAAMkB,MAAM,CAAC,iBAAiB;YAC9B,OAAON;QACT;IACF;AACF"}

package/dist/presentation/routes/cancel-run.d.ts

@@ -1,2 +1,3 @@
-export declare const cancelRunRoute: import("@shipfox/node-fastify").RouteDefinition;
+import type { ProjectsModuleClient } from '@shipfox/api-projects-dto';
+export declare function cancelRunRoute(projects: ProjectsModuleClient): import("@shipfox/node-fastify").RouteDefinition;
 //# sourceMappingURL=cancel-run.d.ts.map

package/dist/presentation/routes/cancel-run.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cancel-run.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/cancel-run.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,cAAc,iDA4BzB,CAAC"}
+{"version":3,"file":"cancel-run.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/cancel-run.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,oBAAoB,EAAC,MAAM,2BAA2B,CAAC;AASpE,wBAAgB,cAAc,CAAC,QAAQ,EAAE,oBAAoB,mDA8B5D"}

package/dist/presentation/routes/cancel-run.js

@@ -5,42 +5,45 @@ import { WorkflowRunNotCancellableError, WorkflowRunNotFoundError } from '#core/
 import { cancelWorkflowRun } from '#db/index.js';
 import { toRunDto } from '#presentation/dto/index.js';
 import { requireAccessibleRun } from './require-accessible-run.js';
-export const cancelRunRoute = defineRoute({
-    method: 'POST',
-    path: '/:id/cancel',
-    description: 'Cancel an in-progress workflow run',
-    schema: {
-        params: z.object({
-            id: z.string().uuid()
-        }),
-        response: {
-            200: workflowRunDtoSchema
-        }
-    },
-    errorHandler: (error)=>{
-        if (error instanceof WorkflowRunNotCancellableError) {
-            throw new ClientError(error.message, 'run-already-finished', {
-                status: 409
+export function cancelRunRoute(projects) {
+    return defineRoute({
+        method: 'POST',
+        path: '/:id/cancel',
+        description: 'Cancel an in-progress workflow run',
+        schema: {
+            params: z.object({
+                id: z.string().uuid()
+            }),
+            response: {
+                200: workflowRunDtoSchema
+            }
+        },
+        errorHandler: (error)=>{
+            if (error instanceof WorkflowRunNotCancellableError) {
+                throw new ClientError(error.message, 'run-already-finished', {
+                    status: 409
+                });
+            }
+            if (error instanceof WorkflowRunNotFoundError) {
+                throw new ClientError('Run not found', 'not-found', {
+                    status: 404
+                });
+            }
+            throw error;
+        },
+        handler: async (request)=>{
+            const { id } = request.params;
+            const run = await requireAccessibleRun({
+                request,
+                id,
+                projects
             });
-        }
-        if (error instanceof WorkflowRunNotFoundError) {
-            throw new ClientError('Run not found', 'not-found', {
-                status: 404
+            const cancelled = await cancelWorkflowRun({
+                workflowRunId: run.id
             });
+            return toRunDto(cancelled);
         }
-        throw error;
-    },
-    handler: async (request)=>{
-        const { id } = request.params;
-        const run = await requireAccessibleRun({
-            request,
-            id
-        });
-        const cancelled = await cancelWorkflowRun({
-            workflowRunId: run.id
-        });
-        return toRunDto(cancelled);
-    }
-});
+    });
+}
 
 //# sourceMappingURL=cancel-run.js.map

package/dist/presentation/routes/cancel-run.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/presentation/routes/cancel-run.ts"],"sourcesContent":["import {workflowRunDtoSchema} from '@shipfox/api-workflows-dto';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {z} from 'zod';\nimport {WorkflowRunNotCancellableError, WorkflowRunNotFoundError} from '#core/errors.js';\nimport {cancelWorkflowRun} from '#db/index.js';\nimport {toRunDto} from '#presentation/dto/index.js';\nimport {requireAccessibleRun} from './require-accessible-run.js';\n\nexport const cancelRunRoute = defineRoute({\n  method: 'POST',\n  path: '/:id/cancel',\n  description: 'Cancel an in-progress workflow run',\n  schema: {\n    params: z.object({\n      id: z.string().uuid(),\n    }),\n    response: {\n      200: workflowRunDtoSchema,\n    },\n  },\n  errorHandler: (error) => {\n    if (error instanceof WorkflowRunNotCancellableError) {\n      throw new ClientError(error.message, 'run-already-finished', {status: 409});\n    }\n    if (error instanceof WorkflowRunNotFoundError) {\n      throw new ClientError('Run not found', 'not-found', {status: 404});\n    }\n    throw error;\n  },\n  handler: async (request) => {\n    const {id} = request.params;\n    const run = await requireAccessibleRun({request, id});\n\n    const cancelled = await cancelWorkflowRun({workflowRunId: run.id});\n    return toRunDto(cancelled);\n  },\n});\n"],"names":["workflowRunDtoSchema","ClientError","defineRoute","z","WorkflowRunNotCancellableError","WorkflowRunNotFoundError","cancelWorkflowRun","toRunDto","requireAccessibleRun","cancelRunRoute","method","path","description","schema","params","object","id","string","uuid","response","errorHandler","error","message","status","handler","request","run","cancelled","workflowRunId"],"mappings":"AAAA,SAAQA,oBAAoB,QAAO,6BAA6B;AAChE,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,8BAA8B,EAAEC,wBAAwB,QAAO,kBAAkB;AACzF,SAAQC,iBAAiB,QAAO,eAAe;AAC/C,SAAQC,QAAQ,QAAO,6BAA6B;AACpD,SAAQC,oBAAoB,QAAO,8BAA8B;AAEjE,OAAO,MAAMC,iBAAiBP,YAAY;IACxCQ,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QACNC,QAAQX,EAAEY,MAAM,CAAC;YACfC,IAAIb,EAAEc,MAAM,GAAGC,IAAI;QACrB;QACAC,UAAU;YACR,KAAKnB;QACP;IACF;IACAoB,cAAc,CAACC;QACb,IAAIA,iBAAiBjB,gCAAgC;YACnD,MAAM,IAAIH,YAAYoB,MAAMC,OAAO,EAAE,wBAAwB;gBAACC,QAAQ;YAAG;QAC3E;QACA,IAAIF,iBAAiBhB,0BAA0B;YAC7C,MAAM,IAAIJ,YAAY,iBAAiB,aAAa;gBAACsB,QAAQ;YAAG;QAClE;QACA,MAAMF;IACR;IACAG,SAAS,OAAOC;QACd,MAAM,EAACT,EAAE,EAAC,GAAGS,QAAQX,MAAM;QAC3B,MAAMY,MAAM,MAAMlB,qBAAqB;YAACiB;YAAST;QAAE;QAEnD,MAAMW,YAAY,MAAMrB,kBAAkB;YAACsB,eAAeF,IAAIV,EAAE;QAAA;QAChE,OAAOT,SAASoB;IAClB;AACF,GAAG"}
+{"version":3,"sources":["../../../src/presentation/routes/cancel-run.ts"],"sourcesContent":["import type {ProjectsModuleClient} from '@shipfox/api-projects-dto';\nimport {workflowRunDtoSchema} from '@shipfox/api-workflows-dto';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {z} from 'zod';\nimport {WorkflowRunNotCancellableError, WorkflowRunNotFoundError} from '#core/errors.js';\nimport {cancelWorkflowRun} from '#db/index.js';\nimport {toRunDto} from '#presentation/dto/index.js';\nimport {requireAccessibleRun} from './require-accessible-run.js';\n\nexport function cancelRunRoute(projects: ProjectsModuleClient) {\n  return defineRoute({\n    method: 'POST',\n    path: '/:id/cancel',\n    description: 'Cancel an in-progress workflow run',\n    schema: {\n      params: z.object({\n        id: z.string().uuid(),\n      }),\n      response: {\n        200: workflowRunDtoSchema,\n      },\n    },\n    errorHandler: (error) => {\n      if (error instanceof WorkflowRunNotCancellableError) {\n        throw new ClientError(error.message, 'run-already-finished', {status: 409});\n      }\n      if (error instanceof WorkflowRunNotFoundError) {\n        throw new ClientError('Run not found', 'not-found', {status: 404});\n      }\n      throw error;\n    },\n    handler: async (request) => {\n      const {id} = request.params;\n      const run = await requireAccessibleRun({request, id, projects});\n\n      const cancelled = await cancelWorkflowRun({workflowRunId: run.id});\n      return toRunDto(cancelled);\n    },\n  });\n}\n"],"names":["workflowRunDtoSchema","ClientError","defineRoute","z","WorkflowRunNotCancellableError","WorkflowRunNotFoundError","cancelWorkflowRun","toRunDto","requireAccessibleRun","cancelRunRoute","projects","method","path","description","schema","params","object","id","string","uuid","response","errorHandler","error","message","status","handler","request","run","cancelled","workflowRunId"],"mappings":"AACA,SAAQA,oBAAoB,QAAO,6BAA6B;AAChE,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,8BAA8B,EAAEC,wBAAwB,QAAO,kBAAkB;AACzF,SAAQC,iBAAiB,QAAO,eAAe;AAC/C,SAAQC,QAAQ,QAAO,6BAA6B;AACpD,SAAQC,oBAAoB,QAAO,8BAA8B;AAEjE,OAAO,SAASC,eAAeC,QAA8B;IAC3D,OAAOR,YAAY;QACjBS,QAAQ;QACRC,MAAM;QACNC,aAAa;QACbC,QAAQ;YACNC,QAAQZ,EAAEa,MAAM,CAAC;gBACfC,IAAId,EAAEe,MAAM,GAAGC,IAAI;YACrB;YACAC,UAAU;gBACR,KAAKpB;YACP;QACF;QACAqB,cAAc,CAACC;YACb,IAAIA,iBAAiBlB,gCAAgC;gBACnD,MAAM,IAAIH,YAAYqB,MAAMC,OAAO,EAAE,wBAAwB;oBAACC,QAAQ;gBAAG;YAC3E;YACA,IAAIF,iBAAiBjB,0BAA0B;gBAC7C,MAAM,IAAIJ,YAAY,iBAAiB,aAAa;oBAACuB,QAAQ;gBAAG;YAClE;YACA,MAAMF;QACR;QACAG,SAAS,OAAOC;YACd,MAAM,EAACT,EAAE,EAAC,GAAGS,QAAQX,MAAM;YAC3B,MAAMY,MAAM,MAAMnB,qBAAqB;gBAACkB;gBAAST;gBAAIP;YAAQ;YAE7D,MAAMkB,YAAY,MAAMtB,kBAAkB;gBAACuB,eAAeF,IAAIV,EAAE;YAAA;YAChE,OAAOV,SAASqB;QAClB;IACF;AACF"}

package/dist/presentation/routes/checkout-token.d.ts

@@ -1,2 +1,9 @@
-export declare const checkoutTokenRoute: import("@shipfox/node-fastify").RouteDefinition;
+import { type IntegrationsModuleClient } from '@shipfox/api-integration-core-dto';
+import type { ProjectsModuleClient } from '@shipfox/api-projects-dto';
+import type { RunnersInterModuleClient } from '@shipfox/api-runners-dto/inter-module';
+export declare function createCheckoutTokenRoute(clients: {
+    runners: RunnersInterModuleClient;
+    integrations: IntegrationsModuleClient;
+    projects: ProjectsModuleClient;
+}): import("@shipfox/node-fastify").RouteDefinition;
 //# sourceMappingURL=checkout-token.d.ts.map

package/dist/presentation/routes/checkout-token.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"checkout-token.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/checkout-token.ts"],"names":[],"mappings":"AAcA,eAAO,MAAM,kBAAkB,iDA8C7B,CAAC"}
+{"version":3,"file":"checkout-token.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/checkout-token.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,wBAAwB,EAE9B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAC,oBAAoB,EAAC,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAC,wBAAwB,EAAC,MAAM,uCAAuC,CAAC;AAYpF,wBAAgB,wBAAwB,CAAC,OAAO,EAAE;IAChD,OAAO,EAAE,wBAAwB,CAAC;IAClC,YAAY,EAAE,wBAAwB,CAAC;IACvC,QAAQ,EAAE,oBAAoB,CAAC;CAChC,mDAkGA"}

package/dist/presentation/routes/checkout-token.js

@@ -1,64 +1,82 @@
 import { requireLeasedJobContext } from '@shipfox/api-auth-context';
-import { integrationRouteErrorHandler } from '@shipfox/api-integration-core';
-import { isJobLeaseActive } from '@shipfox/api-runners';
+import { integrationsInterModuleContract } from '@shipfox/api-integration-core-dto';
 import { checkoutTokenResponseSchema } from '@shipfox/api-workflows-dto';
+import { isInterModuleKnownError } from '@shipfox/inter-module';
 import { ClientError, defineRoute } from '@shipfox/node-fastify';
 import { createJobCheckoutSpec } from '#core/checkout.js';
 import { CheckoutIntentUnresolvedError, JobNotFoundError, WorkflowRunNotFoundError } from '#core/errors.js';
-import { sourceControl } from '#core/source-control.js';
 import { toCheckoutTokenDto } from '#presentation/dto/checkout-token.js';
-export const checkoutTokenRoute = defineRoute({
-    method: 'POST',
-    path: '/checkout-token',
-    description: "Exchanges the runner's job lease for short-lived, read-only checkout credentials for the job's repository. The job is identified by the access token, so no job ID is needed. The checkout target is resolved server-side from the job's run and project; no credential material is stored on the job or run. Returns the repository URL, ref, and (when the provider needs auth) a short-lived credential that expires soon.",
-    schema: {
-        response: {
-            200: checkoutTokenResponseSchema
-        }
-    },
-    errorHandler: (error)=>{
-        if (error instanceof JobNotFoundError) {
-            throw new ClientError(error.message, 'job-not-found', {
+export function createCheckoutTokenRoute(clients) {
+    return defineRoute({
+        method: 'POST',
+        path: '/checkout-token',
+        description: "Exchanges the runner's job lease for short-lived, read-only checkout credentials for the job's repository. The job is identified by the access token, so no job ID is needed. The checkout target is resolved server-side from the job's run and project; no credential material is stored on the job or run. Returns the repository URL, ref, and (when the provider needs auth) a short-lived credential that expires soon.",
+        schema: {
+            response: {
+                200: checkoutTokenResponseSchema
+            }
+        },
+        errorHandler: (error)=>{
+            const known = isInterModuleKnownError(integrationsInterModuleContract.methods.createCheckoutSpec, error) ? error : undefined;
+            if (error instanceof JobNotFoundError) throw new ClientError(error.message, 'job-not-found', {
                 status: 404
             });
-        }
-        if (error instanceof WorkflowRunNotFoundError) {
-            throw new ClientError(error.message, 'run-not-found', {
+            if (error instanceof WorkflowRunNotFoundError) throw new ClientError(error.message, 'run-not-found', {
                 status: 404
             });
-        }
-        if (error instanceof CheckoutIntentUnresolvedError) {
-            throw new ClientError(error.message, 'checkout-unavailable', {
+            if (error instanceof CheckoutIntentUnresolvedError) throw new ClientError(error.message, 'checkout-unavailable', {
                 status: 404
             });
-        }
-        // Connection and provider errors (and the structural provider-error detection)
-        // map through the shared handler, which re-throws unknowns to the global handler.
-        return integrationRouteErrorHandler(error);
-    },
-    handler: async (request, reply)=>{
-        const leasedJob = requireLeasedJobContext(request);
-        const leaseIsActive = await isJobLeaseActive({
-            jobId: leasedJob.jobId,
-            jobExecutionId: leasedJob.jobExecutionId,
-            runnerSessionId: leasedJob.runnerSessionId
-        });
-        if (!leaseIsActive) {
-            throw new ClientError('Job lease is no longer active', 'lease-not-active', {
+            if (known?.code === 'connection-not-found') throw new ClientError('Integration connection not found', 'integration-connection-not-found', {
+                status: 404
+            });
+            if (known?.code === 'connection-inactive') throw new ClientError('Integration connection is not active', 'integration-connection-inactive', {
+                status: 422
+            });
+            if (known?.code === 'connection-workspace-mismatch') throw new ClientError('Integration connection does not belong to this workspace', 'forbidden', {
+                status: 403
+            });
+            if (known?.code === 'provider-unavailable') throw new ClientError('Integration provider is unavailable', 'integration-provider-unavailable', {
+                status: 422
+            });
+            if (known?.code === 'capability-unavailable') throw new ClientError('Integration capability is unavailable', 'integration-capability-unavailable', {
+                status: 422
+            });
+            if (known?.code === 'checkout-unsupported') throw new ClientError('Integration checkout is unsupported', 'integration-checkout-unsupported', {
+                status: 422
+            });
+            if (known?.code === 'provider-failure') {
+                const status = known.details.reason === 'rate-limited' ? 429 : known.details.reason === 'timeout' || known.details.reason === 'provider-unavailable' ? 503 : 422;
+                throw new ClientError('Integration provider request failed', known.details.reason, {
+                    details: {
+                        retry_after_seconds: known.details.retryAfterSeconds
+                    },
+                    status
+                });
+            }
+            throw error;
+        },
+        handler: async (request, reply)=>{
+            const leasedJob = requireLeasedJobContext(request);
+            const { active: leaseIsActive } = await clients.runners.getLeaseState({
+                jobId: leasedJob.jobId,
+                jobExecutionId: leasedJob.jobExecutionId,
+                runnerSessionId: leasedJob.runnerSessionId
+            });
+            if (!leaseIsActive) throw new ClientError('Job lease is no longer active', 'lease-not-active', {
                 status: 404
             });
+            const checkout = await createJobCheckoutSpec({
+                jobId: leasedJob.jobId,
+                integrations: clients.integrations,
+                projects: clients.projects
+            });
+            reply.header('cache-control', 'no-store');
+            return toCheckoutTokenDto(checkout.spec, {
+                persist: checkout.persistCredentials
+            });
         }
-        const checkout = await createJobCheckoutSpec({
-            jobId: leasedJob.jobId,
-            sourceControl: sourceControl()
-        });
-        // The body carries short-lived git credentials; forbid any intermediary or
-        // client cache from retaining them.
-        reply.header('cache-control', 'no-store');
-        return toCheckoutTokenDto(checkout.spec, {
-            persist: checkout.persistCredentials
-        });
-    }
-});
+    });
+}
 
 //# sourceMappingURL=checkout-token.js.map

package/dist/presentation/routes/checkout-token.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/presentation/routes/checkout-token.ts"],"sourcesContent":["import {requireLeasedJobContext} from '@shipfox/api-auth-context';\nimport {integrationRouteErrorHandler} from '@shipfox/api-integration-core';\nimport {isJobLeaseActive} from '@shipfox/api-runners';\nimport {checkoutTokenResponseSchema} from '@shipfox/api-workflows-dto';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {createJobCheckoutSpec} from '#core/checkout.js';\nimport {\n  CheckoutIntentUnresolvedError,\n  JobNotFoundError,\n  WorkflowRunNotFoundError,\n} from '#core/errors.js';\nimport {sourceControl} from '#core/source-control.js';\nimport {toCheckoutTokenDto} from '#presentation/dto/checkout-token.js';\n\nexport const checkoutTokenRoute = defineRoute({\n  method: 'POST',\n  path: '/checkout-token',\n  description:\n    \"Exchanges the runner's job lease for short-lived, read-only checkout credentials for the job's repository. The job is identified by the access token, so no job ID is needed. The checkout target is resolved server-side from the job's run and project; no credential material is stored on the job or run. Returns the repository URL, ref, and (when the provider needs auth) a short-lived credential that expires soon.\",\n  schema: {\n    response: {\n      200: checkoutTokenResponseSchema,\n    },\n  },\n  errorHandler: (error) => {\n    if (error instanceof JobNotFoundError) {\n      throw new ClientError(error.message, 'job-not-found', {status: 404});\n    }\n    if (error instanceof WorkflowRunNotFoundError) {\n      throw new ClientError(error.message, 'run-not-found', {status: 404});\n    }\n    if (error instanceof CheckoutIntentUnresolvedError) {\n      throw new ClientError(error.message, 'checkout-unavailable', {status: 404});\n    }\n    // Connection and provider errors (and the structural provider-error detection)\n    // map through the shared handler, which re-throws unknowns to the global handler.\n    return integrationRouteErrorHandler(error);\n  },\n  handler: async (request, reply) => {\n    const leasedJob = requireLeasedJobContext(request);\n\n    const leaseIsActive = await isJobLeaseActive({\n      jobId: leasedJob.jobId,\n      jobExecutionId: leasedJob.jobExecutionId,\n      runnerSessionId: leasedJob.runnerSessionId,\n    });\n    if (!leaseIsActive) {\n      throw new ClientError('Job lease is no longer active', 'lease-not-active', {status: 404});\n    }\n\n    const checkout = await createJobCheckoutSpec({\n      jobId: leasedJob.jobId,\n      sourceControl: sourceControl(),\n    });\n\n    // The body carries short-lived git credentials; forbid any intermediary or\n    // client cache from retaining them.\n    reply.header('cache-control', 'no-store');\n    return toCheckoutTokenDto(checkout.spec, {persist: checkout.persistCredentials});\n  },\n});\n"],"names":["requireLeasedJobContext","integrationRouteErrorHandler","isJobLeaseActive","checkoutTokenResponseSchema","ClientError","defineRoute","createJobCheckoutSpec","CheckoutIntentUnresolvedError","JobNotFoundError","WorkflowRunNotFoundError","sourceControl","toCheckoutTokenDto","checkoutTokenRoute","method","path","description","schema","response","errorHandler","error","message","status","handler","request","reply","leasedJob","leaseIsActive","jobId","jobExecutionId","runnerSessionId","checkout","header","spec","persist","persistCredentials"],"mappings":"AAAA,SAAQA,uBAAuB,QAAO,4BAA4B;AAClE,SAAQC,4BAA4B,QAAO,gCAAgC;AAC3E,SAAQC,gBAAgB,QAAO,uBAAuB;AACtD,SAAQC,2BAA2B,QAAO,6BAA6B;AACvE,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,qBAAqB,QAAO,oBAAoB;AACxD,SACEC,6BAA6B,EAC7BC,gBAAgB,EAChBC,wBAAwB,QACnB,kBAAkB;AACzB,SAAQC,aAAa,QAAO,0BAA0B;AACtD,SAAQC,kBAAkB,QAAO,sCAAsC;AAEvE,OAAO,MAAMC,qBAAqBP,YAAY;IAC5CQ,QAAQ;IACRC,MAAM;IACNC,aACE;IACFC,QAAQ;QACNC,UAAU;YACR,KAAKd;QACP;IACF;IACAe,cAAc,CAACC;QACb,IAAIA,iBAAiBX,kBAAkB;YACrC,MAAM,IAAIJ,YAAYe,MAAMC,OAAO,EAAE,iBAAiB;gBAACC,QAAQ;YAAG;QACpE;QACA,IAAIF,iBAAiBV,0BAA0B;YAC7C,MAAM,IAAIL,YAAYe,MAAMC,OAAO,EAAE,iBAAiB;gBAACC,QAAQ;YAAG;QACpE;QACA,IAAIF,iBAAiBZ,+BAA+B;YAClD,MAAM,IAAIH,YAAYe,MAAMC,OAAO,EAAE,wBAAwB;gBAACC,QAAQ;YAAG;QAC3E;QACA,+EAA+E;QAC/E,kFAAkF;QAClF,OAAOpB,6BAA6BkB;IACtC;IACAG,SAAS,OAAOC,SAASC;QACvB,MAAMC,YAAYzB,wBAAwBuB;QAE1C,MAAMG,gBAAgB,MAAMxB,iBAAiB;YAC3CyB,OAAOF,UAAUE,KAAK;YACtBC,gBAAgBH,UAAUG,cAAc;YACxCC,iBAAiBJ,UAAUI,eAAe;QAC5C;QACA,IAAI,CAACH,eAAe;YAClB,MAAM,IAAItB,YAAY,iCAAiC,oBAAoB;gBAACiB,QAAQ;YAAG;QACzF;QAEA,MAAMS,WAAW,MAAMxB,sBAAsB;YAC3CqB,OAAOF,UAAUE,KAAK;YACtBjB,eAAeA;QACjB;QAEA,2EAA2E;QAC3E,oCAAoC;QACpCc,MAAMO,MAAM,CAAC,iBAAiB;QAC9B,OAAOpB,mBAAmBmB,SAASE,IAAI,EAAE;YAACC,SAASH,SAASI,kBAAkB;QAAA;IAChF;AACF,GAAG"}
+{"version":3,"sources":["../../../src/presentation/routes/checkout-token.ts"],"sourcesContent":["import {requireLeasedJobContext} from '@shipfox/api-auth-context';\nimport {\n  type IntegrationsModuleClient,\n  integrationsInterModuleContract,\n} from '@shipfox/api-integration-core-dto';\nimport type {ProjectsModuleClient} from '@shipfox/api-projects-dto';\nimport type {RunnersInterModuleClient} from '@shipfox/api-runners-dto/inter-module';\nimport {checkoutTokenResponseSchema} from '@shipfox/api-workflows-dto';\nimport {isInterModuleKnownError} from '@shipfox/inter-module';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {createJobCheckoutSpec} from '#core/checkout.js';\nimport {\n  CheckoutIntentUnresolvedError,\n  JobNotFoundError,\n  WorkflowRunNotFoundError,\n} from '#core/errors.js';\nimport {toCheckoutTokenDto} from '#presentation/dto/checkout-token.js';\n\nexport function createCheckoutTokenRoute(clients: {\n  runners: RunnersInterModuleClient;\n  integrations: IntegrationsModuleClient;\n  projects: ProjectsModuleClient;\n}) {\n  return defineRoute({\n    method: 'POST',\n    path: '/checkout-token',\n    description:\n      \"Exchanges the runner's job lease for short-lived, read-only checkout credentials for the job's repository. The job is identified by the access token, so no job ID is needed. The checkout target is resolved server-side from the job's run and project; no credential material is stored on the job or run. Returns the repository URL, ref, and (when the provider needs auth) a short-lived credential that expires soon.\",\n    schema: {response: {200: checkoutTokenResponseSchema}},\n    errorHandler: (error) => {\n      const known = isInterModuleKnownError(\n        integrationsInterModuleContract.methods.createCheckoutSpec,\n        error,\n      )\n        ? error\n        : undefined;\n      if (error instanceof JobNotFoundError)\n        throw new ClientError(error.message, 'job-not-found', {status: 404});\n      if (error instanceof WorkflowRunNotFoundError)\n        throw new ClientError(error.message, 'run-not-found', {status: 404});\n      if (error instanceof CheckoutIntentUnresolvedError)\n        throw new ClientError(error.message, 'checkout-unavailable', {status: 404});\n      if (known?.code === 'connection-not-found')\n        throw new ClientError(\n          'Integration connection not found',\n          'integration-connection-not-found',\n          {\n            status: 404,\n          },\n        );\n      if (known?.code === 'connection-inactive')\n        throw new ClientError(\n          'Integration connection is not active',\n          'integration-connection-inactive',\n          {\n            status: 422,\n          },\n        );\n      if (known?.code === 'connection-workspace-mismatch')\n        throw new ClientError(\n          'Integration connection does not belong to this workspace',\n          'forbidden',\n          {status: 403},\n        );\n      if (known?.code === 'provider-unavailable')\n        throw new ClientError(\n          'Integration provider is unavailable',\n          'integration-provider-unavailable',\n          {\n            status: 422,\n          },\n        );\n      if (known?.code === 'capability-unavailable')\n        throw new ClientError(\n          'Integration capability is unavailable',\n          'integration-capability-unavailable',\n          {\n            status: 422,\n          },\n        );\n      if (known?.code === 'checkout-unsupported')\n        throw new ClientError(\n          'Integration checkout is unsupported',\n          'integration-checkout-unsupported',\n          {\n            status: 422,\n          },\n        );\n      if (known?.code === 'provider-failure') {\n        const status =\n          known.details.reason === 'rate-limited'\n            ? 429\n            : known.details.reason === 'timeout' || known.details.reason === 'provider-unavailable'\n              ? 503\n              : 422;\n        throw new ClientError('Integration provider request failed', known.details.reason, {\n          details: {retry_after_seconds: known.details.retryAfterSeconds},\n          status,\n        });\n      }\n      throw error;\n    },\n    handler: async (request, reply) => {\n      const leasedJob = requireLeasedJobContext(request);\n      const {active: leaseIsActive} = await clients.runners.getLeaseState({\n        jobId: leasedJob.jobId,\n        jobExecutionId: leasedJob.jobExecutionId,\n        runnerSessionId: leasedJob.runnerSessionId,\n      });\n      if (!leaseIsActive)\n        throw new ClientError('Job lease is no longer active', 'lease-not-active', {status: 404});\n      const checkout = await createJobCheckoutSpec({\n        jobId: leasedJob.jobId,\n        integrations: clients.integrations,\n        projects: clients.projects,\n      });\n      reply.header('cache-control', 'no-store');\n      return toCheckoutTokenDto(checkout.spec, {persist: checkout.persistCredentials});\n    },\n  });\n}\n"],"names":["requireLeasedJobContext","integrationsInterModuleContract","checkoutTokenResponseSchema","isInterModuleKnownError","ClientError","defineRoute","createJobCheckoutSpec","CheckoutIntentUnresolvedError","JobNotFoundError","WorkflowRunNotFoundError","toCheckoutTokenDto","createCheckoutTokenRoute","clients","method","path","description","schema","response","errorHandler","error","known","methods","createCheckoutSpec","undefined","message","status","code","details","reason","retry_after_seconds","retryAfterSeconds","handler","request","reply","leasedJob","active","leaseIsActive","runners","getLeaseState","jobId","jobExecutionId","runnerSessionId","checkout","integrations","projects","header","spec","persist","persistCredentials"],"mappings":"AAAA,SAAQA,uBAAuB,QAAO,4BAA4B;AAClE,SAEEC,+BAA+B,QAC1B,oCAAoC;AAG3C,SAAQC,2BAA2B,QAAO,6BAA6B;AACvE,SAAQC,uBAAuB,QAAO,wBAAwB;AAC9D,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,qBAAqB,QAAO,oBAAoB;AACxD,SACEC,6BAA6B,EAC7BC,gBAAgB,EAChBC,wBAAwB,QACnB,kBAAkB;AACzB,SAAQC,kBAAkB,QAAO,sCAAsC;AAEvE,OAAO,SAASC,yBAAyBC,OAIxC;IACC,OAAOP,YAAY;QACjBQ,QAAQ;QACRC,MAAM;QACNC,aACE;QACFC,QAAQ;YAACC,UAAU;gBAAC,KAAKf;YAA2B;QAAC;QACrDgB,cAAc,CAACC;YACb,MAAMC,QAAQjB,wBACZF,gCAAgCoB,OAAO,CAACC,kBAAkB,EAC1DH,SAEEA,QACAI;YACJ,IAAIJ,iBAAiBX,kBACnB,MAAM,IAAIJ,YAAYe,MAAMK,OAAO,EAAE,iBAAiB;gBAACC,QAAQ;YAAG;YACpE,IAAIN,iBAAiBV,0BACnB,MAAM,IAAIL,YAAYe,MAAMK,OAAO,EAAE,iBAAiB;gBAACC,QAAQ;YAAG;YACpE,IAAIN,iBAAiBZ,+BACnB,MAAM,IAAIH,YAAYe,MAAMK,OAAO,EAAE,wBAAwB;gBAACC,QAAQ;YAAG;YAC3E,IAAIL,OAAOM,SAAS,wBAClB,MAAM,IAAItB,YACR,oCACA,oCACA;gBACEqB,QAAQ;YACV;YAEJ,IAAIL,OAAOM,SAAS,uBAClB,MAAM,IAAItB,YACR,wCACA,mCACA;gBACEqB,QAAQ;YACV;YAEJ,IAAIL,OAAOM,SAAS,iCAClB,MAAM,IAAItB,YACR,4DACA,aACA;gBAACqB,QAAQ;YAAG;YAEhB,IAAIL,OAAOM,SAAS,wBAClB,MAAM,IAAItB,YACR,uCACA,oCACA;gBACEqB,QAAQ;YACV;YAEJ,IAAIL,OAAOM,SAAS,0BAClB,MAAM,IAAItB,YACR,yCACA,sCACA;gBACEqB,QAAQ;YACV;YAEJ,IAAIL,OAAOM,SAAS,wBAClB,MAAM,IAAItB,YACR,uCACA,oCACA;gBACEqB,QAAQ;YACV;YAEJ,IAAIL,OAAOM,SAAS,oBAAoB;gBACtC,MAAMD,SACJL,MAAMO,OAAO,CAACC,MAAM,KAAK,iBACrB,MACAR,MAAMO,OAAO,CAACC,MAAM,KAAK,aAAaR,MAAMO,OAAO,CAACC,MAAM,KAAK,yBAC7D,MACA;gBACR,MAAM,IAAIxB,YAAY,uCAAuCgB,MAAMO,OAAO,CAACC,MAAM,EAAE;oBACjFD,SAAS;wBAACE,qBAAqBT,MAAMO,OAAO,CAACG,iBAAiB;oBAAA;oBAC9DL;gBACF;YACF;YACA,MAAMN;QACR;QACAY,SAAS,OAAOC,SAASC;YACvB,MAAMC,YAAYlC,wBAAwBgC;YAC1C,MAAM,EAACG,QAAQC,aAAa,EAAC,GAAG,MAAMxB,QAAQyB,OAAO,CAACC,aAAa,CAAC;gBAClEC,OAAOL,UAAUK,KAAK;gBACtBC,gBAAgBN,UAAUM,cAAc;gBACxCC,iBAAiBP,UAAUO,eAAe;YAC5C;YACA,IAAI,CAACL,eACH,MAAM,IAAIhC,YAAY,iCAAiC,oBAAoB;gBAACqB,QAAQ;YAAG;YACzF,MAAMiB,WAAW,MAAMpC,sBAAsB;gBAC3CiC,OAAOL,UAAUK,KAAK;gBACtBI,cAAc/B,QAAQ+B,YAAY;gBAClCC,UAAUhC,QAAQgC,QAAQ;YAC5B;YACAX,MAAMY,MAAM,CAAC,iBAAiB;YAC9B,OAAOnC,mBAAmBgC,SAASI,IAAI,EAAE;gBAACC,SAASL,SAASM,kBAAkB;YAAA;QAChF;IACF;AACF"}

package/dist/presentation/routes/get-run-aggregates.d.ts

@@ -1,2 +1,3 @@
-export declare const getRunAggregatesRoute: import("@shipfox/node-fastify").RouteDefinition;
+import type { ProjectsModuleClient } from '@shipfox/api-projects-dto';
+export declare function getRunAggregatesRoute(projects: ProjectsModuleClient): import("@shipfox/node-fastify").RouteDefinition;
 //# sourceMappingURL=get-run-aggregates.d.ts.map

package/dist/presentation/routes/get-run-aggregates.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-run-aggregates.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/get-run-aggregates.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,qBAAqB,iDA2DhC,CAAC"}
+{"version":3,"file":"get-run-aggregates.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/get-run-aggregates.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,oBAAoB,EAAC,MAAM,2BAA2B,CAAC;AAUpE,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,oBAAoB,mDAuDnE"}

package/dist/presentation/routes/get-run-aggregates.js

@@ -1,60 +1,51 @@
-import { ProjectNotFoundError, requireProjectAccess } from '@shipfox/api-projects';
 import { workflowRunAggregatesQuerySchema, workflowRunAggregatesResponseSchema } from '@shipfox/api-workflows-dto';
-import { ClientError, defineRoute } from '@shipfox/node-fastify';
+import { defineRoute } from '@shipfox/node-fastify';
 import { logger } from '@shipfox/node-opentelemetry';
 import { getWorkflowRunAggregates } from '#db/index.js';
-export const getRunAggregatesRoute = defineRoute({
-    method: 'GET',
-    path: '/aggregates',
-    description: 'Get faceted workflow run counts for a project',
-    schema: {
-        querystring: workflowRunAggregatesQuerySchema,
-        response: {
-            200: workflowRunAggregatesResponseSchema
-        }
-    },
-    errorHandler: (error)=>{
-        if (error instanceof ProjectNotFoundError) {
-            throw new ClientError(error.message, 'project-not-found', {
-                status: 404
+import { requireProjectAccess } from './project-access.js';
+export function getRunAggregatesRoute(projects) {
+    return defineRoute({
+        method: 'GET',
+        path: '/aggregates',
+        description: 'Get faceted workflow run counts for a project',
+        schema: {
+            querystring: workflowRunAggregatesQuerySchema,
+            response: {
+                200: workflowRunAggregatesResponseSchema
+            }
+        },
+        handler: async (request)=>{
+            const startedAt = performance.now();
+            const { project_id: projectId, status, definition_id: definitionId, trigger_source: triggerSource, created_from: createdFrom, created_to: createdTo } = request.query;
+            const project = await requireProjectAccess(request, projectId, projects);
+            const filters = {
+                status,
+                definitionId,
+                triggerSource,
+                createdFrom: createdFrom ? new Date(createdFrom) : undefined,
+                createdTo: createdTo ? new Date(createdTo) : undefined
+            };
+            const aggregates = await getWorkflowRunAggregates({
+                projectId: project.id,
+                filters
             });
+            logger().info({
+                projectId: project.id,
+                filterKeys: Object.entries(filters).filter(([, value])=>value !== undefined).map(([key])=>key),
+                aggregateBucketSizes: {
+                    status: aggregates.status.length,
+                    triggerSource: aggregates.triggerSource.length,
+                    workflow: aggregates.workflow.length
+                },
+                durationMs: Math.round(performance.now() - startedAt)
+            }, 'Aggregated workflow runs');
+            return {
+                status: aggregates.status,
+                trigger_source: aggregates.triggerSource,
+                workflow: aggregates.workflow
+            };
         }
-        throw error;
-    },
-    handler: async (request)=>{
-        const startedAt = performance.now();
-        const { project_id: projectId, status, definition_id: definitionId, trigger_source: triggerSource, created_from: createdFrom, created_to: createdTo } = request.query;
-        const { project } = await requireProjectAccess({
-            request,
-            projectId
-        });
-        const filters = {
-            status,
-            definitionId,
-            triggerSource,
-            createdFrom: createdFrom ? new Date(createdFrom) : undefined,
-            createdTo: createdTo ? new Date(createdTo) : undefined
-        };
-        const aggregates = await getWorkflowRunAggregates({
-            projectId: project.id,
-            filters
-        });
-        logger().info({
-            projectId: project.id,
-            filterKeys: Object.entries(filters).filter(([, value])=>value !== undefined).map(([key])=>key),
-            aggregateBucketSizes: {
-                status: aggregates.status.length,
-                triggerSource: aggregates.triggerSource.length,
-                workflow: aggregates.workflow.length
-            },
-            durationMs: Math.round(performance.now() - startedAt)
-        }, 'Aggregated workflow runs');
-        return {
-            status: aggregates.status,
-            trigger_source: aggregates.triggerSource,
-            workflow: aggregates.workflow
-        };
-    }
-});
+    });
+}
 
 //# sourceMappingURL=get-run-aggregates.js.map