@shipfox/api-workflows 5.0.0 → 6.0.0

package/dist/presentation/routes/get-run-aggregates.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/presentation/routes/get-run-aggregates.ts"],"sourcesContent":["import {ProjectNotFoundError, requireProjectAccess} from '@shipfox/api-projects';\nimport {\n  workflowRunAggregatesQuerySchema,\n  workflowRunAggregatesResponseSchema,\n} from '@shipfox/api-workflows-dto';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {logger} from '@shipfox/node-opentelemetry';\nimport {getWorkflowRunAggregates} from '#db/index.js';\n\nexport const getRunAggregatesRoute = defineRoute({\n  method: 'GET',\n  path: '/aggregates',\n  description: 'Get faceted workflow run counts for a project',\n  schema: {\n    querystring: workflowRunAggregatesQuerySchema,\n    response: {\n      200: workflowRunAggregatesResponseSchema,\n    },\n  },\n  errorHandler: (error) => {\n    if (error instanceof ProjectNotFoundError) {\n      throw new ClientError(error.message, 'project-not-found', {status: 404});\n    }\n    throw error;\n  },\n  handler: async (request) => {\n    const startedAt = performance.now();\n    const {\n      project_id: projectId,\n      status,\n      definition_id: definitionId,\n      trigger_source: triggerSource,\n      created_from: createdFrom,\n      created_to: createdTo,\n    } = request.query;\n\n    const {project} = await requireProjectAccess({request, projectId});\n    const filters = {\n      status,\n      definitionId,\n      triggerSource,\n      createdFrom: createdFrom ? new Date(createdFrom) : undefined,\n      createdTo: createdTo ? new Date(createdTo) : undefined,\n    };\n    const aggregates = await getWorkflowRunAggregates({projectId: project.id, filters});\n\n    logger().info(\n      {\n        projectId: project.id,\n        filterKeys: Object.entries(filters)\n          .filter(([, value]) => value !== undefined)\n          .map(([key]) => key),\n        aggregateBucketSizes: {\n          status: aggregates.status.length,\n          triggerSource: aggregates.triggerSource.length,\n          workflow: aggregates.workflow.length,\n        },\n        durationMs: Math.round(performance.now() - startedAt),\n      },\n      'Aggregated workflow runs',\n    );\n\n    return {\n      status: aggregates.status,\n      trigger_source: aggregates.triggerSource,\n      workflow: aggregates.workflow,\n    };\n  },\n});\n"],"names":["ProjectNotFoundError","requireProjectAccess","workflowRunAggregatesQuerySchema","workflowRunAggregatesResponseSchema","ClientError","defineRoute","logger","getWorkflowRunAggregates","getRunAggregatesRoute","method","path","description","schema","querystring","response","errorHandler","error","message","status","handler","request","startedAt","performance","now","project_id","projectId","definition_id","definitionId","trigger_source","triggerSource","created_from","createdFrom","created_to","createdTo","query","project","filters","Date","undefined","aggregates","id","info","filterKeys","Object","entries","filter","value","map","key","aggregateBucketSizes","length","workflow","durationMs","Math","round"],"mappings":"AAAA,SAAQA,oBAAoB,EAAEC,oBAAoB,QAAO,wBAAwB;AACjF,SACEC,gCAAgC,EAChCC,mCAAmC,QAC9B,6BAA6B;AACpC,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,MAAM,QAAO,8BAA8B;AACnD,SAAQC,wBAAwB,QAAO,eAAe;AAEtD,OAAO,MAAMC,wBAAwBH,YAAY;IAC/CI,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QACNC,aAAaX;QACbY,UAAU;YACR,KAAKX;QACP;IACF;IACAY,cAAc,CAACC;QACb,IAAIA,iBAAiBhB,sBAAsB;YACzC,MAAM,IAAII,YAAYY,MAAMC,OAAO,EAAE,qBAAqB;gBAACC,QAAQ;YAAG;QACxE;QACA,MAAMF;IACR;IACAG,SAAS,OAAOC;QACd,MAAMC,YAAYC,YAAYC,GAAG;QACjC,MAAM,EACJC,YAAYC,SAAS,EACrBP,MAAM,EACNQ,eAAeC,YAAY,EAC3BC,gBAAgBC,aAAa,EAC7BC,cAAcC,WAAW,EACzBC,YAAYC,SAAS,EACtB,GAAGb,QAAQc,KAAK;QAEjB,MAAM,EAACC,OAAO,EAAC,GAAG,MAAMlC,qBAAqB;YAACmB;YAASK;QAAS;QAChE,MAAMW,UAAU;YACdlB;YACAS;YACAE;YACAE,aAAaA,cAAc,IAAIM,KAAKN,eAAeO;YACnDL,WAAWA,YAAY,IAAII,KAAKJ,aAAaK;QAC/C;QACA,MAAMC,aAAa,MAAMhC,yBAAyB;YAACkB,WAAWU,QAAQK,EAAE;YAAEJ;QAAO;QAEjF9B,SAASmC,IAAI,CACX;YACEhB,WAAWU,QAAQK,EAAE;YACrBE,YAAYC,OAAOC,OAAO,CAACR,SACxBS,MAAM,CAAC,CAAC,GAAGC,MAAM,GAAKA,UAAUR,WAChCS,GAAG,CAAC,CAAC,CAACC,IAAI,GAAKA;YAClBC,sBAAsB;gBACpB/B,QAAQqB,WAAWrB,MAAM,CAACgC,MAAM;gBAChCrB,eAAeU,WAAWV,aAAa,CAACqB,MAAM;gBAC9CC,UAAUZ,WAAWY,QAAQ,CAACD,MAAM;YACtC;YACAE,YAAYC,KAAKC,KAAK,CAAChC,YAAYC,GAAG,KAAKF;QAC7C,GACA;QAGF,OAAO;YACLH,QAAQqB,WAAWrB,MAAM;YACzBU,gBAAgBW,WAAWV,aAAa;YACxCsB,UAAUZ,WAAWY,QAAQ;QAC/B;IACF;AACF,GAAG"}
+{"version":3,"sources":["../../../src/presentation/routes/get-run-aggregates.ts"],"sourcesContent":["import type {ProjectsModuleClient} from '@shipfox/api-projects-dto';\nimport {\n  workflowRunAggregatesQuerySchema,\n  workflowRunAggregatesResponseSchema,\n} from '@shipfox/api-workflows-dto';\nimport {defineRoute} from '@shipfox/node-fastify';\nimport {logger} from '@shipfox/node-opentelemetry';\nimport {getWorkflowRunAggregates} from '#db/index.js';\nimport {requireProjectAccess} from './project-access.js';\n\nexport function getRunAggregatesRoute(projects: ProjectsModuleClient) {\n  return defineRoute({\n    method: 'GET',\n    path: '/aggregates',\n    description: 'Get faceted workflow run counts for a project',\n    schema: {\n      querystring: workflowRunAggregatesQuerySchema,\n      response: {\n        200: workflowRunAggregatesResponseSchema,\n      },\n    },\n    handler: async (request) => {\n      const startedAt = performance.now();\n      const {\n        project_id: projectId,\n        status,\n        definition_id: definitionId,\n        trigger_source: triggerSource,\n        created_from: createdFrom,\n        created_to: createdTo,\n      } = request.query;\n\n      const project = await requireProjectAccess(request, projectId, projects);\n      const filters = {\n        status,\n        definitionId,\n        triggerSource,\n        createdFrom: createdFrom ? new Date(createdFrom) : undefined,\n        createdTo: createdTo ? new Date(createdTo) : undefined,\n      };\n      const aggregates = await getWorkflowRunAggregates({projectId: project.id, filters});\n\n      logger().info(\n        {\n          projectId: project.id,\n          filterKeys: Object.entries(filters)\n            .filter(([, value]) => value !== undefined)\n            .map(([key]) => key),\n          aggregateBucketSizes: {\n            status: aggregates.status.length,\n            triggerSource: aggregates.triggerSource.length,\n            workflow: aggregates.workflow.length,\n          },\n          durationMs: Math.round(performance.now() - startedAt),\n        },\n        'Aggregated workflow runs',\n      );\n\n      return {\n        status: aggregates.status,\n        trigger_source: aggregates.triggerSource,\n        workflow: aggregates.workflow,\n      };\n    },\n  });\n}\n"],"names":["workflowRunAggregatesQuerySchema","workflowRunAggregatesResponseSchema","defineRoute","logger","getWorkflowRunAggregates","requireProjectAccess","getRunAggregatesRoute","projects","method","path","description","schema","querystring","response","handler","request","startedAt","performance","now","project_id","projectId","status","definition_id","definitionId","trigger_source","triggerSource","created_from","createdFrom","created_to","createdTo","query","project","filters","Date","undefined","aggregates","id","info","filterKeys","Object","entries","filter","value","map","key","aggregateBucketSizes","length","workflow","durationMs","Math","round"],"mappings":"AACA,SACEA,gCAAgC,EAChCC,mCAAmC,QAC9B,6BAA6B;AACpC,SAAQC,WAAW,QAAO,wBAAwB;AAClD,SAAQC,MAAM,QAAO,8BAA8B;AACnD,SAAQC,wBAAwB,QAAO,eAAe;AACtD,SAAQC,oBAAoB,QAAO,sBAAsB;AAEzD,OAAO,SAASC,sBAAsBC,QAA8B;IAClE,OAAOL,YAAY;QACjBM,QAAQ;QACRC,MAAM;QACNC,aAAa;QACbC,QAAQ;YACNC,aAAaZ;YACba,UAAU;gBACR,KAAKZ;YACP;QACF;QACAa,SAAS,OAAOC;YACd,MAAMC,YAAYC,YAAYC,GAAG;YACjC,MAAM,EACJC,YAAYC,SAAS,EACrBC,MAAM,EACNC,eAAeC,YAAY,EAC3BC,gBAAgBC,aAAa,EAC7BC,cAAcC,WAAW,EACzBC,YAAYC,SAAS,EACtB,GAAGd,QAAQe,KAAK;YAEjB,MAAMC,UAAU,MAAM1B,qBAAqBU,SAASK,WAAWb;YAC/D,MAAMyB,UAAU;gBACdX;gBACAE;gBACAE;gBACAE,aAAaA,cAAc,IAAIM,KAAKN,eAAeO;gBACnDL,WAAWA,YAAY,IAAII,KAAKJ,aAAaK;YAC/C;YACA,MAAMC,aAAa,MAAM/B,yBAAyB;gBAACgB,WAAWW,QAAQK,EAAE;gBAAEJ;YAAO;YAEjF7B,SAASkC,IAAI,CACX;gBACEjB,WAAWW,QAAQK,EAAE;gBACrBE,YAAYC,OAAOC,OAAO,CAACR,SACxBS,MAAM,CAAC,CAAC,GAAGC,MAAM,GAAKA,UAAUR,WAChCS,GAAG,CAAC,CAAC,CAACC,IAAI,GAAKA;gBAClBC,sBAAsB;oBACpBxB,QAAQc,WAAWd,MAAM,CAACyB,MAAM;oBAChCrB,eAAeU,WAAWV,aAAa,CAACqB,MAAM;oBAC9CC,UAAUZ,WAAWY,QAAQ,CAACD,MAAM;gBACtC;gBACAE,YAAYC,KAAKC,KAAK,CAACjC,YAAYC,GAAG,KAAKF;YAC7C,GACA;YAGF,OAAO;gBACLK,QAAQc,WAAWd,MAAM;gBACzBG,gBAAgBW,WAAWV,aAAa;gBACxCsB,UAAUZ,WAAWY,QAAQ;YAC/B;QACF;IACF;AACF"}

package/dist/presentation/routes/get-run.d.ts

@@ -1,2 +1,3 @@
-export declare const getRunRoute: import("@shipfox/node-fastify").RouteDefinition;
+import type { ProjectsModuleClient } from '@shipfox/api-projects-dto';
+export declare function getRunRoute(projects: ProjectsModuleClient): import("@shipfox/node-fastify").RouteDefinition;
 //# sourceMappingURL=get-run.d.ts.map

package/dist/presentation/routes/get-run.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-run.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/get-run.ts"],"names":[],"mappings":"AAcA,eAAO,MAAM,WAAW,iDAmDtB,CAAC"}
+{"version":3,"file":"get-run.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/get-run.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,oBAAoB,EAAC,MAAM,2BAA2B,CAAC;AAepE,wBAAgB,WAAW,CAAC,QAAQ,EAAE,oBAAoB,mDAqDzD"}

package/dist/presentation/routes/get-run.js

@@ -4,57 +4,60 @@ import { z } from 'zod';
 import { getWorkflowRunDetail } from '#db/index.js';
 import { toJobDto, toJobExecutionDto, toRunAttemptDto, toRunDto, toStepAttemptDto, toStepDto } from '#presentation/dto/index.js';
 import { requireAccessibleRun } from './require-accessible-run.js';
-export const getRunRoute = defineRoute({
-    method: 'GET',
-    path: '/:id',
-    description: 'Get a workflow run by ID with jobs and steps',
-    schema: {
-        params: z.object({
-            id: z.string().uuid()
-        }),
-        querystring: z.object({
-            attempt: z.coerce.number().int().positive().optional()
-        }),
-        response: {
-            200: workflowRunDetailResponseSchema
-        }
-    },
-    handler: async (request)=>{
-        const { id } = request.params;
-        await requireAccessibleRun({
-            request,
-            id
-        });
-        const run = await getWorkflowRunDetail(id, request.query.attempt);
-        if (!run) {
-            throw new ClientError('Run not found', 'not-found', {
-                status: 404
+export function getRunRoute(projects) {
+    return defineRoute({
+        method: 'GET',
+        path: '/:id',
+        description: 'Get a workflow run by ID with jobs and steps',
+        schema: {
+            params: z.object({
+                id: z.string().uuid()
+            }),
+            querystring: z.object({
+                attempt: z.coerce.number().int().positive().optional()
+            }),
+            response: {
+                200: workflowRunDetailResponseSchema
+            }
+        },
+        handler: async (request)=>{
+            const { id } = request.params;
+            await requireAccessibleRun({
+                request,
+                id,
+                projects
             });
+            const run = await getWorkflowRunDetail(id, request.query.attempt);
+            if (!run) {
+                throw new ClientError('Run not found', 'not-found', {
+                    status: 404
+                });
+            }
+            const jobDtos = run.jobs.map((job)=>({
+                    ...toJobDto(job),
+                    job_executions: job.jobExecutions.map((jobExecution)=>({
+                            ...toJobExecutionDto(jobExecution),
+                            steps: jobExecution.steps.map((step)=>{
+                                const attempts = step.attempts.map(toStepAttemptDto);
+                                const latestTerminalAttempt = attempts.filter((attempt)=>attempt.status !== 'running').at(-1);
+                                return {
+                                    ...toStepDto(step),
+                                    exit_code: latestTerminalAttempt?.exit_code ?? null,
+                                    outputs: latestTerminalAttempt?.outputs ?? null,
+                                    response: latestTerminalAttempt?.response ?? null,
+                                    gate_result: latestTerminalAttempt?.gate_result ?? null,
+                                    attempts
+                                };
+                            })
+                        }))
+                }));
+            return {
+                ...toRunDto(run, run.latestAttempt),
+                run_attempt: toRunAttemptDto(run.runAttempt),
+                jobs: jobDtos
+            };
         }
-        const jobDtos = run.jobs.map((job)=>({
-                ...toJobDto(job),
-                job_executions: job.jobExecutions.map((jobExecution)=>({
-                        ...toJobExecutionDto(jobExecution),
-                        steps: jobExecution.steps.map((step)=>{
-                            const attempts = step.attempts.map(toStepAttemptDto);
-                            const latestTerminalAttempt = attempts.filter((attempt)=>attempt.status !== 'running').at(-1);
-                            return {
-                                ...toStepDto(step),
-                                exit_code: latestTerminalAttempt?.exit_code ?? null,
-                                outputs: latestTerminalAttempt?.outputs ?? null,
-                                response: latestTerminalAttempt?.response ?? null,
-                                gate_result: latestTerminalAttempt?.gate_result ?? null,
-                                attempts
-                            };
-                        })
-                    }))
-            }));
-        return {
-            ...toRunDto(run, run.latestAttempt),
-            run_attempt: toRunAttemptDto(run.runAttempt),
-            jobs: jobDtos
-        };
-    }
-});
+    });
+}
 
 //# sourceMappingURL=get-run.js.map

package/dist/presentation/routes/get-run.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/presentation/routes/get-run.ts"],"sourcesContent":["import {workflowRunDetailResponseSchema} from '@shipfox/api-workflows-dto';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {z} from 'zod';\nimport {getWorkflowRunDetail} from '#db/index.js';\nimport {\n  toJobDto,\n  toJobExecutionDto,\n  toRunAttemptDto,\n  toRunDto,\n  toStepAttemptDto,\n  toStepDto,\n} from '#presentation/dto/index.js';\nimport {requireAccessibleRun} from './require-accessible-run.js';\n\nexport const getRunRoute = defineRoute({\n  method: 'GET',\n  path: '/:id',\n  description: 'Get a workflow run by ID with jobs and steps',\n  schema: {\n    params: z.object({\n      id: z.string().uuid(),\n    }),\n    querystring: z.object({\n      attempt: z.coerce.number().int().positive().optional(),\n    }),\n    response: {\n      200: workflowRunDetailResponseSchema,\n    },\n  },\n  handler: async (request) => {\n    const {id} = request.params;\n    await requireAccessibleRun({request, id});\n\n    const run = await getWorkflowRunDetail(id, request.query.attempt);\n    if (!run) {\n      throw new ClientError('Run not found', 'not-found', {status: 404});\n    }\n\n    const jobDtos = run.jobs.map((job) => ({\n      ...toJobDto(job),\n      job_executions: job.jobExecutions.map((jobExecution) => ({\n        ...toJobExecutionDto(jobExecution),\n        steps: jobExecution.steps.map((step) => {\n          const attempts = step.attempts.map(toStepAttemptDto);\n          const latestTerminalAttempt = attempts\n            .filter((attempt) => attempt.status !== 'running')\n            .at(-1);\n          return {\n            ...toStepDto(step),\n            exit_code: latestTerminalAttempt?.exit_code ?? null,\n            outputs: latestTerminalAttempt?.outputs ?? null,\n            response: latestTerminalAttempt?.response ?? null,\n            gate_result: latestTerminalAttempt?.gate_result ?? null,\n            attempts,\n          };\n        }),\n      })),\n    }));\n\n    return {\n      ...toRunDto(run, run.latestAttempt),\n      run_attempt: toRunAttemptDto(run.runAttempt),\n      jobs: jobDtos,\n    };\n  },\n});\n"],"names":["workflowRunDetailResponseSchema","ClientError","defineRoute","z","getWorkflowRunDetail","toJobDto","toJobExecutionDto","toRunAttemptDto","toRunDto","toStepAttemptDto","toStepDto","requireAccessibleRun","getRunRoute","method","path","description","schema","params","object","id","string","uuid","querystring","attempt","coerce","number","int","positive","optional","response","handler","request","run","query","status","jobDtos","jobs","map","job","job_executions","jobExecutions","jobExecution","steps","step","attempts","latestTerminalAttempt","filter","at","exit_code","outputs","gate_result","latestAttempt","run_attempt","runAttempt"],"mappings":"AAAA,SAAQA,+BAA+B,QAAO,6BAA6B;AAC3E,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,oBAAoB,QAAO,eAAe;AAClD,SACEC,QAAQ,EACRC,iBAAiB,EACjBC,eAAe,EACfC,QAAQ,EACRC,gBAAgB,EAChBC,SAAS,QACJ,6BAA6B;AACpC,SAAQC,oBAAoB,QAAO,8BAA8B;AAEjE,OAAO,MAAMC,cAAcV,YAAY;IACrCW,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QACNC,QAAQd,EAAEe,MAAM,CAAC;YACfC,IAAIhB,EAAEiB,MAAM,GAAGC,IAAI;QACrB;QACAC,aAAanB,EAAEe,MAAM,CAAC;YACpBK,SAASpB,EAAEqB,MAAM,CAACC,MAAM,GAAGC,GAAG,GAAGC,QAAQ,GAAGC,QAAQ;QACtD;QACAC,UAAU;YACR,KAAK7B;QACP;IACF;IACA8B,SAAS,OAAOC;QACd,MAAM,EAACZ,EAAE,EAAC,GAAGY,QAAQd,MAAM;QAC3B,MAAMN,qBAAqB;YAACoB;YAASZ;QAAE;QAEvC,MAAMa,MAAM,MAAM5B,qBAAqBe,IAAIY,QAAQE,KAAK,CAACV,OAAO;QAChE,IAAI,CAACS,KAAK;YACR,MAAM,IAAI/B,YAAY,iBAAiB,aAAa;gBAACiC,QAAQ;YAAG;QAClE;QAEA,MAAMC,UAAUH,IAAII,IAAI,CAACC,GAAG,CAAC,CAACC,MAAS,CAAA;gBACrC,GAAGjC,SAASiC,IAAI;gBAChBC,gBAAgBD,IAAIE,aAAa,CAACH,GAAG,CAAC,CAACI,eAAkB,CAAA;wBACvD,GAAGnC,kBAAkBmC,aAAa;wBAClCC,OAAOD,aAAaC,KAAK,CAACL,GAAG,CAAC,CAACM;4BAC7B,MAAMC,WAAWD,KAAKC,QAAQ,CAACP,GAAG,CAAC5B;4BACnC,MAAMoC,wBAAwBD,SAC3BE,MAAM,CAAC,CAACvB,UAAYA,QAAQW,MAAM,KAAK,WACvCa,EAAE,CAAC,CAAC;4BACP,OAAO;gCACL,GAAGrC,UAAUiC,KAAK;gCAClBK,WAAWH,uBAAuBG,aAAa;gCAC/CC,SAASJ,uBAAuBI,WAAW;gCAC3CpB,UAAUgB,uBAAuBhB,YAAY;gCAC7CqB,aAAaL,uBAAuBK,eAAe;gCACnDN;4BACF;wBACF;oBACF,CAAA;YACF,CAAA;QAEA,OAAO;YACL,GAAGpC,SAASwB,KAAKA,IAAImB,aAAa,CAAC;YACnCC,aAAa7C,gBAAgByB,IAAIqB,UAAU;YAC3CjB,MAAMD;QACR;IACF;AACF,GAAG"}
+{"version":3,"sources":["../../../src/presentation/routes/get-run.ts"],"sourcesContent":["import type {ProjectsModuleClient} from '@shipfox/api-projects-dto';\nimport {workflowRunDetailResponseSchema} from '@shipfox/api-workflows-dto';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {z} from 'zod';\nimport {getWorkflowRunDetail} from '#db/index.js';\nimport {\n  toJobDto,\n  toJobExecutionDto,\n  toRunAttemptDto,\n  toRunDto,\n  toStepAttemptDto,\n  toStepDto,\n} from '#presentation/dto/index.js';\nimport {requireAccessibleRun} from './require-accessible-run.js';\n\nexport function getRunRoute(projects: ProjectsModuleClient) {\n  return defineRoute({\n    method: 'GET',\n    path: '/:id',\n    description: 'Get a workflow run by ID with jobs and steps',\n    schema: {\n      params: z.object({\n        id: z.string().uuid(),\n      }),\n      querystring: z.object({\n        attempt: z.coerce.number().int().positive().optional(),\n      }),\n      response: {\n        200: workflowRunDetailResponseSchema,\n      },\n    },\n    handler: async (request) => {\n      const {id} = request.params;\n      await requireAccessibleRun({request, id, projects});\n\n      const run = await getWorkflowRunDetail(id, request.query.attempt);\n      if (!run) {\n        throw new ClientError('Run not found', 'not-found', {status: 404});\n      }\n\n      const jobDtos = run.jobs.map((job) => ({\n        ...toJobDto(job),\n        job_executions: job.jobExecutions.map((jobExecution) => ({\n          ...toJobExecutionDto(jobExecution),\n          steps: jobExecution.steps.map((step) => {\n            const attempts = step.attempts.map(toStepAttemptDto);\n            const latestTerminalAttempt = attempts\n              .filter((attempt) => attempt.status !== 'running')\n              .at(-1);\n            return {\n              ...toStepDto(step),\n              exit_code: latestTerminalAttempt?.exit_code ?? null,\n              outputs: latestTerminalAttempt?.outputs ?? null,\n              response: latestTerminalAttempt?.response ?? null,\n              gate_result: latestTerminalAttempt?.gate_result ?? null,\n              attempts,\n            };\n          }),\n        })),\n      }));\n\n      return {\n        ...toRunDto(run, run.latestAttempt),\n        run_attempt: toRunAttemptDto(run.runAttempt),\n        jobs: jobDtos,\n      };\n    },\n  });\n}\n"],"names":["workflowRunDetailResponseSchema","ClientError","defineRoute","z","getWorkflowRunDetail","toJobDto","toJobExecutionDto","toRunAttemptDto","toRunDto","toStepAttemptDto","toStepDto","requireAccessibleRun","getRunRoute","projects","method","path","description","schema","params","object","id","string","uuid","querystring","attempt","coerce","number","int","positive","optional","response","handler","request","run","query","status","jobDtos","jobs","map","job","job_executions","jobExecutions","jobExecution","steps","step","attempts","latestTerminalAttempt","filter","at","exit_code","outputs","gate_result","latestAttempt","run_attempt","runAttempt"],"mappings":"AACA,SAAQA,+BAA+B,QAAO,6BAA6B;AAC3E,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,oBAAoB,QAAO,eAAe;AAClD,SACEC,QAAQ,EACRC,iBAAiB,EACjBC,eAAe,EACfC,QAAQ,EACRC,gBAAgB,EAChBC,SAAS,QACJ,6BAA6B;AACpC,SAAQC,oBAAoB,QAAO,8BAA8B;AAEjE,OAAO,SAASC,YAAYC,QAA8B;IACxD,OAAOX,YAAY;QACjBY,QAAQ;QACRC,MAAM;QACNC,aAAa;QACbC,QAAQ;YACNC,QAAQf,EAAEgB,MAAM,CAAC;gBACfC,IAAIjB,EAAEkB,MAAM,GAAGC,IAAI;YACrB;YACAC,aAAapB,EAAEgB,MAAM,CAAC;gBACpBK,SAASrB,EAAEsB,MAAM,CAACC,MAAM,GAAGC,GAAG,GAAGC,QAAQ,GAAGC,QAAQ;YACtD;YACAC,UAAU;gBACR,KAAK9B;YACP;QACF;QACA+B,SAAS,OAAOC;YACd,MAAM,EAACZ,EAAE,EAAC,GAAGY,QAAQd,MAAM;YAC3B,MAAMP,qBAAqB;gBAACqB;gBAASZ;gBAAIP;YAAQ;YAEjD,MAAMoB,MAAM,MAAM7B,qBAAqBgB,IAAIY,QAAQE,KAAK,CAACV,OAAO;YAChE,IAAI,CAACS,KAAK;gBACR,MAAM,IAAIhC,YAAY,iBAAiB,aAAa;oBAACkC,QAAQ;gBAAG;YAClE;YAEA,MAAMC,UAAUH,IAAII,IAAI,CAACC,GAAG,CAAC,CAACC,MAAS,CAAA;oBACrC,GAAGlC,SAASkC,IAAI;oBAChBC,gBAAgBD,IAAIE,aAAa,CAACH,GAAG,CAAC,CAACI,eAAkB,CAAA;4BACvD,GAAGpC,kBAAkBoC,aAAa;4BAClCC,OAAOD,aAAaC,KAAK,CAACL,GAAG,CAAC,CAACM;gCAC7B,MAAMC,WAAWD,KAAKC,QAAQ,CAACP,GAAG,CAAC7B;gCACnC,MAAMqC,wBAAwBD,SAC3BE,MAAM,CAAC,CAACvB,UAAYA,QAAQW,MAAM,KAAK,WACvCa,EAAE,CAAC,CAAC;gCACP,OAAO;oCACL,GAAGtC,UAAUkC,KAAK;oCAClBK,WAAWH,uBAAuBG,aAAa;oCAC/CC,SAASJ,uBAAuBI,WAAW;oCAC3CpB,UAAUgB,uBAAuBhB,YAAY;oCAC7CqB,aAAaL,uBAAuBK,eAAe;oCACnDN;gCACF;4BACF;wBACF,CAAA;gBACF,CAAA;YAEA,OAAO;gBACL,GAAGrC,SAASyB,KAAKA,IAAImB,aAAa,CAAC;gBACnCC,aAAa9C,gBAAgB0B,IAAIqB,UAAU;gBAC3CjB,MAAMD;YACR;QACF;IACF;AACF"}

package/dist/presentation/routes/get-step-secrets.d.ts

@@ -1,2 +1,4 @@
-export declare const getStepSecretsRoute: import("@shipfox/node-fastify").RouteDefinition;
+import type { RunnersInterModuleClient } from '@shipfox/api-runners-dto/inter-module';
+import { type SecretsInterModuleClient } from '@shipfox/api-secrets-dto/inter-module';
+export declare function createGetStepSecretsRoute(runners: RunnersInterModuleClient, secretsClient: SecretsInterModuleClient): import("@shipfox/node-fastify").RouteDefinition;
 //# sourceMappingURL=get-step-secrets.d.ts.map

package/dist/presentation/routes/get-step-secrets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-step-secrets.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/get-step-secrets.ts"],"names":[],"mappings":"AAgBA,eAAO,MAAM,mBAAmB,iDAiE9B,CAAC"}
+{"version":3,"file":"get-step-secrets.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/get-step-secrets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,wBAAwB,EAAC,MAAM,uCAAuC,CAAC;AAQpF,OAAO,EACL,KAAK,wBAAwB,EAE9B,MAAM,uCAAuC,CAAC;AAU/C,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,wBAAwB,EACjC,aAAa,EAAE,wBAAwB,mDAqExC"}

package/dist/presentation/routes/get-step-secrets.js

@@ -1,83 +1,87 @@
-import { getSecret, SecretDecryptionError } from '@shipfox/api-secrets';
 import { materializedSecretBindingSchema, stepSecretsParamsSchema, stepSecretsQuerySchema, stepSecretsResponseSchema } from '@shipfox/api-secrets-dto';
+import { secretsInterModuleContract } from '@shipfox/api-secrets-dto/inter-module';
+import { isInterModuleKnownError } from '@shipfox/inter-module';
 import { captureException } from '@shipfox/node-error-monitoring';
 import { ClientError, defineRoute } from '@shipfox/node-fastify';
 import { logger } from '@shipfox/node-opentelemetry';
 import { ZodError, z } from 'zod';
 import { loadRunningLeasedStep } from './leased-step.js';
 const secretBindingsSchema = z.array(materializedSecretBindingSchema);
-export const getStepSecretsRoute = defineRoute({
-    method: 'GET',
-    path: '/steps/:stepId/secrets',
-    description: "Returns decrypted secret values referenced by the runner's currently leased running run step. The job scope and secret bindings are re-derived from server state; the runner supplies only the step id and current attempt.",
-    schema: {
-        params: stepSecretsParamsSchema,
-        querystring: stepSecretsQuerySchema,
-        response: {
-            200: stepSecretsResponseSchema
-        }
-    },
-    errorHandler: (error)=>{
-        if (error instanceof SecretDecryptionError) {
-            captureException(error);
-            throw new ClientError('Step secret could not be decrypted', 'secret-value-invalid', {
-                status: 409,
-                cause: error
-            });
-        }
-        throw error;
-    },
-    handler: async (request, reply)=>{
-        const { stepId } = request.params;
-        const { attempt } = request.query;
-        const { leasedJob, step, workspaceId, projectId } = await loadRunningLeasedStep({
-            request,
-            stepId,
-            attempt
-        });
-        if (step.type !== 'run') {
-            throw new ClientError('Step is not a run step', 'step-not-run', {
-                status: 409
-            });
-        }
-        const secretBindings = parseSecretBindings(step.config.secret_bindings);
-        const references = distinctSecretReferences(secretBindings);
-        const secrets = await Promise.all(references.map(async (reference)=>{
-            const value = await getSecret({
-                workspaceId,
-                projectId,
-                namespace: '',
-                key: reference.key,
-                store: reference.store
+export function createGetStepSecretsRoute(runners, secretsClient) {
+    return defineRoute({
+        method: 'GET',
+        path: '/steps/:stepId/secrets',
+        description: "Returns decrypted secret values referenced by the runner's currently leased running run step. The job scope and secret bindings are re-derived from server state; the runner supplies only the step id and current attempt.",
+        schema: {
+            params: stepSecretsParamsSchema,
+            querystring: stepSecretsQuerySchema,
+            response: {
+                200: stepSecretsResponseSchema
+            }
+        },
+        errorHandler: (error)=>{
+            if (isInterModuleKnownError(secretsInterModuleContract.methods.getSecret, error)) {
+                captureException(error);
+                throw new ClientError('Step secret could not be decrypted', 'secret-value-invalid', {
+                    status: 409,
+                    cause: error
+                });
+            }
+            throw error;
+        },
+        handler: async (request, reply)=>{
+            const { stepId } = request.params;
+            const { attempt } = request.query;
+            const { leasedJob, step, workspaceId, projectId } = await loadRunningLeasedStep({
+                runners,
+                request,
+                stepId,
+                attempt
             });
-            if (value === null) {
-                throw new ClientError('Secret not found', 'secret-not-found', {
-                    status: 422
+            if (step.type !== 'run') {
+                throw new ClientError('Step is not a run step', 'step-not-run', {
+                    status: 409
                 });
             }
+            const secretBindings = parseSecretBindings(step.config.secret_bindings);
+            const references = distinctSecretReferences(secretBindings);
+            const secrets = await Promise.all(references.map(async (reference)=>{
+                const { value } = await secretsClient.getSecret({
+                    workspaceId,
+                    projectId,
+                    namespace: '',
+                    key: reference.key,
+                    store: reference.store
+                });
+                if (value === null) {
+                    throw new ClientError('Secret not found', 'secret-not-found', {
+                        status: 422
+                    });
+                }
+                return {
+                    ...reference,
+                    value
+                };
+            }));
+            logger().info({
+                jobId: leasedJob.jobId,
+                workspaceId,
+                stepId,
+                keyCount: references.length
+            }, 'Resolved step secrets');
+            logger().debug({
+                jobId: leasedJob.jobId,
+                workspaceId,
+                stepId,
+                keys: references.map((ref)=>ref.key)
+            }, 'Resolved step secret keys');
+            reply.header('cache-control', 'no-store');
             return {
-                ...reference,
-                value
+                secrets
             };
-        }));
-        logger().info({
-            jobId: leasedJob.jobId,
-            workspaceId,
-            stepId,
-            keyCount: references.length
-        }, 'Resolved step secrets');
-        logger().debug({
-            jobId: leasedJob.jobId,
-            workspaceId,
-            stepId,
-            keys: references.map((ref)=>ref.key)
-        }, 'Resolved step secret keys');
-        reply.header('cache-control', 'no-store');
-        return {
-            secrets
-        };
-    }
-});
+        }
+    });
+}
 function parseSecretBindings(value) {
     try {
         return secretBindingsSchema.parse(value ?? []);

package/dist/presentation/routes/get-step-secrets.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/presentation/routes/get-step-secrets.ts"],"sourcesContent":["import {getSecret, SecretDecryptionError} from '@shipfox/api-secrets';\nimport {\n  materializedSecretBindingSchema,\n  type StepSecretDto,\n  stepSecretsParamsSchema,\n  stepSecretsQuerySchema,\n  stepSecretsResponseSchema,\n} from '@shipfox/api-secrets-dto';\nimport {captureException} from '@shipfox/node-error-monitoring';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {logger} from '@shipfox/node-opentelemetry';\nimport {ZodError, z} from 'zod';\nimport {loadRunningLeasedStep} from './leased-step.js';\n\nconst secretBindingsSchema = z.array(materializedSecretBindingSchema);\n\nexport const getStepSecretsRoute = defineRoute({\n  method: 'GET',\n  path: '/steps/:stepId/secrets',\n  description:\n    \"Returns decrypted secret values referenced by the runner's currently leased running run step. The job scope and secret bindings are re-derived from server state; the runner supplies only the step id and current attempt.\",\n  schema: {\n    params: stepSecretsParamsSchema,\n    querystring: stepSecretsQuerySchema,\n    response: {\n      200: stepSecretsResponseSchema,\n    },\n  },\n  errorHandler: (error) => {\n    if (error instanceof SecretDecryptionError) {\n      captureException(error);\n      throw new ClientError('Step secret could not be decrypted', 'secret-value-invalid', {\n        status: 409,\n        cause: error,\n      });\n    }\n    throw error;\n  },\n  handler: async (request, reply) => {\n    const {stepId} = request.params;\n    const {attempt} = request.query;\n    const {leasedJob, step, workspaceId, projectId} = await loadRunningLeasedStep({\n      request,\n      stepId,\n      attempt,\n    });\n\n    if (step.type !== 'run') {\n      throw new ClientError('Step is not a run step', 'step-not-run', {status: 409});\n    }\n\n    const secretBindings = parseSecretBindings(step.config.secret_bindings);\n    const references = distinctSecretReferences(secretBindings);\n    const secrets = await Promise.all(\n      references.map(async (reference): Promise<StepSecretDto> => {\n        const value = await getSecret({\n          workspaceId,\n          projectId,\n          namespace: '',\n          key: reference.key,\n          store: reference.store,\n        });\n        if (value === null) {\n          throw new ClientError('Secret not found', 'secret-not-found', {status: 422});\n        }\n        return {...reference, value};\n      }),\n    );\n\n    logger().info(\n      {jobId: leasedJob.jobId, workspaceId, stepId, keyCount: references.length},\n      'Resolved step secrets',\n    );\n    logger().debug(\n      {jobId: leasedJob.jobId, workspaceId, stepId, keys: references.map((ref) => ref.key)},\n      'Resolved step secret keys',\n    );\n\n    reply.header('cache-control', 'no-store');\n    return {secrets};\n  },\n});\n\nfunction parseSecretBindings(value: unknown): z.infer<typeof secretBindingsSchema> {\n  try {\n    return secretBindingsSchema.parse(value ?? []);\n  } catch (error) {\n    if (error instanceof ZodError) {\n      throw new ClientError('Step secret bindings are invalid', 'secret-bindings-invalid', {\n        status: 409,\n        cause: error,\n      });\n    }\n    throw error;\n  }\n}\n\nfunction distinctSecretReferences(\n  bindings: ReadonlyArray<z.infer<typeof materializedSecretBindingSchema>>,\n): Array<Pick<StepSecretDto, 'store' | 'key'>> {\n  const seen = new Set<string>();\n  const references: Array<Pick<StepSecretDto, 'store' | 'key'>> = [];\n  for (const binding of bindings) {\n    for (const segment of binding.segments) {\n      if (segment.kind !== 'secret') continue;\n      const id = secretReferenceId(segment);\n      if (seen.has(id)) continue;\n      seen.add(id);\n      references.push({store: segment.store, key: segment.key});\n    }\n  }\n  return references;\n}\n\nfunction secretReferenceId(reference: Pick<StepSecretDto, 'store' | 'key'>): string {\n  return `${reference.store}\\0${reference.key}`;\n}\n"],"names":["getSecret","SecretDecryptionError","materializedSecretBindingSchema","stepSecretsParamsSchema","stepSecretsQuerySchema","stepSecretsResponseSchema","captureException","ClientError","defineRoute","logger","ZodError","z","loadRunningLeasedStep","secretBindingsSchema","array","getStepSecretsRoute","method","path","description","schema","params","querystring","response","errorHandler","error","status","cause","handler","request","reply","stepId","attempt","query","leasedJob","step","workspaceId","projectId","type","secretBindings","parseSecretBindings","config","secret_bindings","references","distinctSecretReferences","secrets","Promise","all","map","reference","value","namespace","key","store","info","jobId","keyCount","length","debug","keys","ref","header","parse","bindings","seen","Set","binding","segment","segments","kind","id","secretReferenceId","has","add","push"],"mappings":"AAAA,SAAQA,SAAS,EAAEC,qBAAqB,QAAO,uBAAuB;AACtE,SACEC,+BAA+B,EAE/BC,uBAAuB,EACvBC,sBAAsB,EACtBC,yBAAyB,QACpB,2BAA2B;AAClC,SAAQC,gBAAgB,QAAO,iCAAiC;AAChE,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,MAAM,QAAO,8BAA8B;AACnD,SAAQC,QAAQ,EAAEC,CAAC,QAAO,MAAM;AAChC,SAAQC,qBAAqB,QAAO,mBAAmB;AAEvD,MAAMC,uBAAuBF,EAAEG,KAAK,CAACZ;AAErC,OAAO,MAAMa,sBAAsBP,YAAY;IAC7CQ,QAAQ;IACRC,MAAM;IACNC,aACE;IACFC,QAAQ;QACNC,QAAQjB;QACRkB,aAAajB;QACbkB,UAAU;YACR,KAAKjB;QACP;IACF;IACAkB,cAAc,CAACC;QACb,IAAIA,iBAAiBvB,uBAAuB;YAC1CK,iBAAiBkB;YACjB,MAAM,IAAIjB,YAAY,sCAAsC,wBAAwB;gBAClFkB,QAAQ;gBACRC,OAAOF;YACT;QACF;QACA,MAAMA;IACR;IACAG,SAAS,OAAOC,SAASC;QACvB,MAAM,EAACC,MAAM,EAAC,GAAGF,QAAQR,MAAM;QAC/B,MAAM,EAACW,OAAO,EAAC,GAAGH,QAAQI,KAAK;QAC/B,MAAM,EAACC,SAAS,EAAEC,IAAI,EAAEC,WAAW,EAAEC,SAAS,EAAC,GAAG,MAAMxB,sBAAsB;YAC5EgB;YACAE;YACAC;QACF;QAEA,IAAIG,KAAKG,IAAI,KAAK,OAAO;YACvB,MAAM,IAAI9B,YAAY,0BAA0B,gBAAgB;gBAACkB,QAAQ;YAAG;QAC9E;QAEA,MAAMa,iBAAiBC,oBAAoBL,KAAKM,MAAM,CAACC,eAAe;QACtE,MAAMC,aAAaC,yBAAyBL;QAC5C,MAAMM,UAAU,MAAMC,QAAQC,GAAG,CAC/BJ,WAAWK,GAAG,CAAC,OAAOC;YACpB,MAAMC,QAAQ,MAAMjD,UAAU;gBAC5BmC;gBACAC;gBACAc,WAAW;gBACXC,KAAKH,UAAUG,GAAG;gBAClBC,OAAOJ,UAAUI,KAAK;YACxB;YACA,IAAIH,UAAU,MAAM;gBAClB,MAAM,IAAI1C,YAAY,oBAAoB,oBAAoB;oBAACkB,QAAQ;gBAAG;YAC5E;YACA,OAAO;gBAAC,GAAGuB,SAAS;gBAAEC;YAAK;QAC7B;QAGFxC,SAAS4C,IAAI,CACX;YAACC,OAAOrB,UAAUqB,KAAK;YAAEnB;YAAaL;YAAQyB,UAAUb,WAAWc,MAAM;QAAA,GACzE;QAEF/C,SAASgD,KAAK,CACZ;YAACH,OAAOrB,UAAUqB,KAAK;YAAEnB;YAAaL;YAAQ4B,MAAMhB,WAAWK,GAAG,CAAC,CAACY,MAAQA,IAAIR,GAAG;QAAC,GACpF;QAGFtB,MAAM+B,MAAM,CAAC,iBAAiB;QAC9B,OAAO;YAAChB;QAAO;IACjB;AACF,GAAG;AAEH,SAASL,oBAAoBU,KAAc;IACzC,IAAI;QACF,OAAOpC,qBAAqBgD,KAAK,CAACZ,SAAS,EAAE;IAC/C,EAAE,OAAOzB,OAAO;QACd,IAAIA,iBAAiBd,UAAU;YAC7B,MAAM,IAAIH,YAAY,oCAAoC,2BAA2B;gBACnFkB,QAAQ;gBACRC,OAAOF;YACT;QACF;QACA,MAAMA;IACR;AACF;AAEA,SAASmB,yBACPmB,QAAwE;IAExE,MAAMC,OAAO,IAAIC;IACjB,MAAMtB,aAA0D,EAAE;IAClE,KAAK,MAAMuB,WAAWH,SAAU;QAC9B,KAAK,MAAMI,WAAWD,QAAQE,QAAQ,CAAE;YACtC,IAAID,QAAQE,IAAI,KAAK,UAAU;YAC/B,MAAMC,KAAKC,kBAAkBJ;YAC7B,IAAIH,KAAKQ,GAAG,CAACF,KAAK;YAClBN,KAAKS,GAAG,CAACH;YACT3B,WAAW+B,IAAI,CAAC;gBAACrB,OAAOc,QAAQd,KAAK;gBAAED,KAAKe,QAAQf,GAAG;YAAA;QACzD;IACF;IACA,OAAOT;AACT;AAEA,SAAS4B,kBAAkBtB,SAA+C;IACxE,OAAO,GAAGA,UAAUI,KAAK,CAAC,EAAE,EAAEJ,UAAUG,GAAG,EAAE;AAC/C"}
+{"version":3,"sources":["../../../src/presentation/routes/get-step-secrets.ts"],"sourcesContent":["import type {RunnersInterModuleClient} from '@shipfox/api-runners-dto/inter-module';\nimport {\n  materializedSecretBindingSchema,\n  type StepSecretDto,\n  stepSecretsParamsSchema,\n  stepSecretsQuerySchema,\n  stepSecretsResponseSchema,\n} from '@shipfox/api-secrets-dto';\nimport {\n  type SecretsInterModuleClient,\n  secretsInterModuleContract,\n} from '@shipfox/api-secrets-dto/inter-module';\nimport {isInterModuleKnownError} from '@shipfox/inter-module';\nimport {captureException} from '@shipfox/node-error-monitoring';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {logger} from '@shipfox/node-opentelemetry';\nimport {ZodError, z} from 'zod';\nimport {loadRunningLeasedStep} from './leased-step.js';\n\nconst secretBindingsSchema = z.array(materializedSecretBindingSchema);\n\nexport function createGetStepSecretsRoute(\n  runners: RunnersInterModuleClient,\n  secretsClient: SecretsInterModuleClient,\n) {\n  return defineRoute({\n    method: 'GET',\n    path: '/steps/:stepId/secrets',\n    description:\n      \"Returns decrypted secret values referenced by the runner's currently leased running run step. The job scope and secret bindings are re-derived from server state; the runner supplies only the step id and current attempt.\",\n    schema: {\n      params: stepSecretsParamsSchema,\n      querystring: stepSecretsQuerySchema,\n      response: {\n        200: stepSecretsResponseSchema,\n      },\n    },\n    errorHandler: (error) => {\n      if (isInterModuleKnownError(secretsInterModuleContract.methods.getSecret, error)) {\n        captureException(error);\n        throw new ClientError('Step secret could not be decrypted', 'secret-value-invalid', {\n          status: 409,\n          cause: error,\n        });\n      }\n      throw error;\n    },\n    handler: async (request, reply) => {\n      const {stepId} = request.params;\n      const {attempt} = request.query;\n      const {leasedJob, step, workspaceId, projectId} = await loadRunningLeasedStep({\n        runners,\n        request,\n        stepId,\n        attempt,\n      });\n\n      if (step.type !== 'run') {\n        throw new ClientError('Step is not a run step', 'step-not-run', {status: 409});\n      }\n\n      const secretBindings = parseSecretBindings(step.config.secret_bindings);\n      const references = distinctSecretReferences(secretBindings);\n      const secrets = await Promise.all(\n        references.map(async (reference): Promise<StepSecretDto> => {\n          const {value} = await secretsClient.getSecret({\n            workspaceId,\n            projectId,\n            namespace: '',\n            key: reference.key,\n            store: reference.store,\n          });\n          if (value === null) {\n            throw new ClientError('Secret not found', 'secret-not-found', {status: 422});\n          }\n          return {...reference, value};\n        }),\n      );\n\n      logger().info(\n        {jobId: leasedJob.jobId, workspaceId, stepId, keyCount: references.length},\n        'Resolved step secrets',\n      );\n      logger().debug(\n        {jobId: leasedJob.jobId, workspaceId, stepId, keys: references.map((ref) => ref.key)},\n        'Resolved step secret keys',\n      );\n\n      reply.header('cache-control', 'no-store');\n      return {secrets};\n    },\n  });\n}\n\nfunction parseSecretBindings(value: unknown): z.infer<typeof secretBindingsSchema> {\n  try {\n    return secretBindingsSchema.parse(value ?? []);\n  } catch (error) {\n    if (error instanceof ZodError) {\n      throw new ClientError('Step secret bindings are invalid', 'secret-bindings-invalid', {\n        status: 409,\n        cause: error,\n      });\n    }\n    throw error;\n  }\n}\n\nfunction distinctSecretReferences(\n  bindings: ReadonlyArray<z.infer<typeof materializedSecretBindingSchema>>,\n): Array<Pick<StepSecretDto, 'store' | 'key'>> {\n  const seen = new Set<string>();\n  const references: Array<Pick<StepSecretDto, 'store' | 'key'>> = [];\n  for (const binding of bindings) {\n    for (const segment of binding.segments) {\n      if (segment.kind !== 'secret') continue;\n      const id = secretReferenceId(segment);\n      if (seen.has(id)) continue;\n      seen.add(id);\n      references.push({store: segment.store, key: segment.key});\n    }\n  }\n  return references;\n}\n\nfunction secretReferenceId(reference: Pick<StepSecretDto, 'store' | 'key'>): string {\n  return `${reference.store}\\0${reference.key}`;\n}\n"],"names":["materializedSecretBindingSchema","stepSecretsParamsSchema","stepSecretsQuerySchema","stepSecretsResponseSchema","secretsInterModuleContract","isInterModuleKnownError","captureException","ClientError","defineRoute","logger","ZodError","z","loadRunningLeasedStep","secretBindingsSchema","array","createGetStepSecretsRoute","runners","secretsClient","method","path","description","schema","params","querystring","response","errorHandler","error","methods","getSecret","status","cause","handler","request","reply","stepId","attempt","query","leasedJob","step","workspaceId","projectId","type","secretBindings","parseSecretBindings","config","secret_bindings","references","distinctSecretReferences","secrets","Promise","all","map","reference","value","namespace","key","store","info","jobId","keyCount","length","debug","keys","ref","header","parse","bindings","seen","Set","binding","segment","segments","kind","id","secretReferenceId","has","add","push"],"mappings":"AACA,SACEA,+BAA+B,EAE/BC,uBAAuB,EACvBC,sBAAsB,EACtBC,yBAAyB,QACpB,2BAA2B;AAClC,SAEEC,0BAA0B,QACrB,wCAAwC;AAC/C,SAAQC,uBAAuB,QAAO,wBAAwB;AAC9D,SAAQC,gBAAgB,QAAO,iCAAiC;AAChE,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,MAAM,QAAO,8BAA8B;AACnD,SAAQC,QAAQ,EAAEC,CAAC,QAAO,MAAM;AAChC,SAAQC,qBAAqB,QAAO,mBAAmB;AAEvD,MAAMC,uBAAuBF,EAAEG,KAAK,CAACd;AAErC,OAAO,SAASe,0BACdC,OAAiC,EACjCC,aAAuC;IAEvC,OAAOT,YAAY;QACjBU,QAAQ;QACRC,MAAM;QACNC,aACE;QACFC,QAAQ;YACNC,QAAQrB;YACRsB,aAAarB;YACbsB,UAAU;gBACR,KAAKrB;YACP;QACF;QACAsB,cAAc,CAACC;YACb,IAAIrB,wBAAwBD,2BAA2BuB,OAAO,CAACC,SAAS,EAAEF,QAAQ;gBAChFpB,iBAAiBoB;gBACjB,MAAM,IAAInB,YAAY,sCAAsC,wBAAwB;oBAClFsB,QAAQ;oBACRC,OAAOJ;gBACT;YACF;YACA,MAAMA;QACR;QACAK,SAAS,OAAOC,SAASC;YACvB,MAAM,EAACC,MAAM,EAAC,GAAGF,QAAQV,MAAM;YAC/B,MAAM,EAACa,OAAO,EAAC,GAAGH,QAAQI,KAAK;YAC/B,MAAM,EAACC,SAAS,EAAEC,IAAI,EAAEC,WAAW,EAAEC,SAAS,EAAC,GAAG,MAAM5B,sBAAsB;gBAC5EI;gBACAgB;gBACAE;gBACAC;YACF;YAEA,IAAIG,KAAKG,IAAI,KAAK,OAAO;gBACvB,MAAM,IAAIlC,YAAY,0BAA0B,gBAAgB;oBAACsB,QAAQ;gBAAG;YAC9E;YAEA,MAAMa,iBAAiBC,oBAAoBL,KAAKM,MAAM,CAACC,eAAe;YACtE,MAAMC,aAAaC,yBAAyBL;YAC5C,MAAMM,UAAU,MAAMC,QAAQC,GAAG,CAC/BJ,WAAWK,GAAG,CAAC,OAAOC;gBACpB,MAAM,EAACC,KAAK,EAAC,GAAG,MAAMpC,cAAcW,SAAS,CAAC;oBAC5CW;oBACAC;oBACAc,WAAW;oBACXC,KAAKH,UAAUG,GAAG;oBAClBC,OAAOJ,UAAUI,KAAK;gBACxB;gBACA,IAAIH,UAAU,MAAM;oBAClB,MAAM,IAAI9C,YAAY,oBAAoB,oBAAoB;wBAACsB,QAAQ;oBAAG;gBAC5E;gBACA,OAAO;oBAAC,GAAGuB,SAAS;oBAAEC;gBAAK;YAC7B;YAGF5C,SAASgD,IAAI,CACX;gBAACC,OAAOrB,UAAUqB,KAAK;gBAAEnB;gBAAaL;gBAAQyB,UAAUb,WAAWc,MAAM;YAAA,GACzE;YAEFnD,SAASoD,KAAK,CACZ;gBAACH,OAAOrB,UAAUqB,KAAK;gBAAEnB;gBAAaL;gBAAQ4B,MAAMhB,WAAWK,GAAG,CAAC,CAACY,MAAQA,IAAIR,GAAG;YAAC,GACpF;YAGFtB,MAAM+B,MAAM,CAAC,iBAAiB;YAC9B,OAAO;gBAAChB;YAAO;QACjB;IACF;AACF;AAEA,SAASL,oBAAoBU,KAAc;IACzC,IAAI;QACF,OAAOxC,qBAAqBoD,KAAK,CAACZ,SAAS,EAAE;IAC/C,EAAE,OAAO3B,OAAO;QACd,IAAIA,iBAAiBhB,UAAU;YAC7B,MAAM,IAAIH,YAAY,oCAAoC,2BAA2B;gBACnFsB,QAAQ;gBACRC,OAAOJ;YACT;QACF;QACA,MAAMA;IACR;AACF;AAEA,SAASqB,yBACPmB,QAAwE;IAExE,MAAMC,OAAO,IAAIC;IACjB,MAAMtB,aAA0D,EAAE;IAClE,KAAK,MAAMuB,WAAWH,SAAU;QAC9B,KAAK,MAAMI,WAAWD,QAAQE,QAAQ,CAAE;YACtC,IAAID,QAAQE,IAAI,KAAK,UAAU;YAC/B,MAAMC,KAAKC,kBAAkBJ;YAC7B,IAAIH,KAAKQ,GAAG,CAACF,KAAK;YAClBN,KAAKS,GAAG,CAACH;YACT3B,WAAW+B,IAAI,CAAC;gBAACrB,OAAOc,QAAQd,KAAK;gBAAED,KAAKe,QAAQf,GAAG;YAAA;QACzD;IACF;IACA,OAAOT;AACT;AAEA,SAAS4B,kBAAkBtB,SAA+C;IACxE,OAAO,GAAGA,UAAUI,KAAK,CAAC,EAAE,EAAEJ,UAAUG,GAAG,EAAE;AAC/C"}

package/dist/presentation/routes/index.d.ts

@@ -1,4 +1,21 @@
+import type { AnnotationsInterModuleClient } from '@shipfox/annotations-dto/inter-module';
+import type { AgentInterModuleClient } from '@shipfox/api-agent-dto/inter-module';
+import type { AuthInterModuleClient } from '@shipfox/api-auth-dto/inter-module';
+import type { IntegrationsModuleClient } from '@shipfox/api-integration-core-dto';
+import type { ProjectsModuleClient } from '@shipfox/api-projects-dto';
+import type { RunnersInterModuleClient } from '@shipfox/api-runners-dto/inter-module';
+import type { SecretsInterModuleClient } from '@shipfox/api-secrets-dto/inter-module';
 import type { RouteGroup } from '@shipfox/node-fastify';
-export declare const leaseTokenRouteGroup: RouteGroup;
-export declare const workflowRoutes: RouteGroup[];
+type WorkflowRouteClients = {
+    agent: AgentInterModuleClient;
+    annotations: AnnotationsInterModuleClient;
+    auth: AuthInterModuleClient;
+    integrations: IntegrationsModuleClient;
+    projects: ProjectsModuleClient;
+    runners: RunnersInterModuleClient;
+    secrets: SecretsInterModuleClient;
+};
+export declare function createLeaseTokenRouteGroup(params: WorkflowRouteClients): RouteGroup;
+export declare function createWorkflowRoutes(params: WorkflowRouteClients): RouteGroup[];
+export {};
 //# sourceMappingURL=index.d.ts.map

package/dist/presentation/routes/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,uBAAuB,CAAC;AAatD,eAAO,MAAM,oBAAoB,EAAE,UAWlC,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,UAAU,EActC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,4BAA4B,EAAC,MAAM,uCAAuC,CAAC;AACxF,OAAO,KAAK,EAAC,sBAAsB,EAAC,MAAM,qCAAqC,CAAC;AAEhF,OAAO,KAAK,EAAC,qBAAqB,EAAC,MAAM,oCAAoC,CAAC;AAC9E,OAAO,KAAK,EAAC,wBAAwB,EAAC,MAAM,mCAAmC,CAAC;AAChF,OAAO,KAAK,EAAC,oBAAoB,EAAC,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAC,wBAAwB,EAAC,MAAM,uCAAuC,CAAC;AACpF,OAAO,KAAK,EAAC,wBAAwB,EAAC,MAAM,uCAAuC,CAAC;AACpF,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,uBAAuB,CAAC;AAatD,KAAK,oBAAoB,GAAG;IAC1B,KAAK,EAAE,sBAAsB,CAAC;IAC9B,WAAW,EAAE,4BAA4B,CAAC;IAC1C,IAAI,EAAE,qBAAqB,CAAC;IAC5B,YAAY,EAAE,wBAAwB,CAAC;IACvC,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,OAAO,EAAE,wBAAwB,CAAC;IAClC,OAAO,EAAE,wBAAwB,CAAC;CACnC,CAAC;AAEF,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,oBAAoB,GAAG,UAAU,CAiBnF;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,oBAAoB,GAAG,UAAU,EAAE,CAgB/E"}

package/dist/presentation/routes/index.js

@@ -1,41 +1,49 @@
 import { AUTH_LEASED_JOB, AUTH_USER } from '@shipfox/api-auth-context';
-import { agentRuntimeConfigRoute } from './agent-runtime-config.js';
+import { createAgentRuntimeConfigRoute } from './agent-runtime-config.js';
 import { cancelRunRoute } from './cancel-run.js';
-import { checkoutTokenRoute } from './checkout-token.js';
+import { createCheckoutTokenRoute } from './checkout-token.js';
 import { getRunRoute } from './get-run.js';
 import { getRunAggregatesRoute } from './get-run-aggregates.js';
-import { getStepSecretsRoute } from './get-step-secrets.js';
+import { createGetStepSecretsRoute } from './get-step-secrets.js';
 import { listRunAttemptsRoute } from './list-run-attempts.js';
 import { listRunsRoute } from './list-runs.js';
-import { nextStepRoute } from './next-step.js';
-import { reportStepRoute } from './report-step.js';
+import { createNextStepRoute } from './next-step.js';
+import { createReportStepRoute } from './report-step.js';
 import { rerunRunRoute } from './rerun-run.js';
-export const leaseTokenRouteGroup = {
-    // The lease token names the job, so the path carries no job id ("current").
-    prefix: '/runs/jobs/current',
-    auth: AUTH_LEASED_JOB,
-    routes: [
-        nextStepRoute,
-        reportStepRoute,
-        checkoutTokenRoute,
-        agentRuntimeConfigRoute,
-        getStepSecretsRoute
-    ]
-};
-export const workflowRoutes = [
-    {
-        prefix: '/workflows/runs',
-        auth: AUTH_USER,
+export function createLeaseTokenRouteGroup(params) {
+    return {
+        // The lease token names the job, so the path carries no job id ("current").
+        prefix: '/runs/jobs/current',
+        auth: AUTH_LEASED_JOB,
         routes: [
-            listRunsRoute,
-            getRunAggregatesRoute,
-            listRunAttemptsRoute,
-            getRunRoute,
-            cancelRunRoute,
-            rerunRunRoute
+            createNextStepRoute(params),
+            createReportStepRoute(params.runners),
+            createCheckoutTokenRoute({
+                integrations: params.integrations,
+                projects: params.projects,
+                runners: params.runners
+            }),
+            createAgentRuntimeConfigRoute(params),
+            createGetStepSecretsRoute(params.runners, params.secrets)
         ]
-    },
-    leaseTokenRouteGroup
-];
+    };
+}
+export function createWorkflowRoutes(params) {
+    return [
+        {
+            prefix: '/workflows/runs',
+            auth: AUTH_USER,
+            routes: [
+                listRunsRoute(params.projects),
+                getRunAggregatesRoute(params.projects),
+                listRunAttemptsRoute(params.projects),
+                getRunRoute(params.projects),
+                cancelRunRoute(params.projects),
+                rerunRunRoute(params.projects)
+            ]
+        },
+        createLeaseTokenRouteGroup(params)
+    ];
+}
 
 //# sourceMappingURL=index.js.map

package/dist/presentation/routes/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/presentation/routes/index.ts"],"sourcesContent":["import {AUTH_LEASED_JOB, AUTH_USER} from '@shipfox/api-auth-context';\nimport type {RouteGroup} from '@shipfox/node-fastify';\nimport {agentRuntimeConfigRoute} from './agent-runtime-config.js';\nimport {cancelRunRoute} from './cancel-run.js';\nimport {checkoutTokenRoute} from './checkout-token.js';\nimport {getRunRoute} from './get-run.js';\nimport {getRunAggregatesRoute} from './get-run-aggregates.js';\nimport {getStepSecretsRoute} from './get-step-secrets.js';\nimport {listRunAttemptsRoute} from './list-run-attempts.js';\nimport {listRunsRoute} from './list-runs.js';\nimport {nextStepRoute} from './next-step.js';\nimport {reportStepRoute} from './report-step.js';\nimport {rerunRunRoute} from './rerun-run.js';\n\nexport const leaseTokenRouteGroup: RouteGroup = {\n  // The lease token names the job, so the path carries no job id (\"current\").\n  prefix: '/runs/jobs/current',\n  auth: AUTH_LEASED_JOB,\n  routes: [\n    nextStepRoute,\n    reportStepRoute,\n    checkoutTokenRoute,\n    agentRuntimeConfigRoute,\n    getStepSecretsRoute,\n  ],\n};\n\nexport const workflowRoutes: RouteGroup[] = [\n  {\n    prefix: '/workflows/runs',\n    auth: AUTH_USER,\n    routes: [\n      listRunsRoute,\n      getRunAggregatesRoute,\n      listRunAttemptsRoute,\n      getRunRoute,\n      cancelRunRoute,\n      rerunRunRoute,\n    ],\n  },\n  leaseTokenRouteGroup,\n];\n"],"names":["AUTH_LEASED_JOB","AUTH_USER","agentRuntimeConfigRoute","cancelRunRoute","checkoutTokenRoute","getRunRoute","getRunAggregatesRoute","getStepSecretsRoute","listRunAttemptsRoute","listRunsRoute","nextStepRoute","reportStepRoute","rerunRunRoute","leaseTokenRouteGroup","prefix","auth","routes","workflowRoutes"],"mappings":"AAAA,SAAQA,eAAe,EAAEC,SAAS,QAAO,4BAA4B;AAErE,SAAQC,uBAAuB,QAAO,4BAA4B;AAClE,SAAQC,cAAc,QAAO,kBAAkB;AAC/C,SAAQC,kBAAkB,QAAO,sBAAsB;AACvD,SAAQC,WAAW,QAAO,eAAe;AACzC,SAAQC,qBAAqB,QAAO,0BAA0B;AAC9D,SAAQC,mBAAmB,QAAO,wBAAwB;AAC1D,SAAQC,oBAAoB,QAAO,yBAAyB;AAC5D,SAAQC,aAAa,QAAO,iBAAiB;AAC7C,SAAQC,aAAa,QAAO,iBAAiB;AAC7C,SAAQC,eAAe,QAAO,mBAAmB;AACjD,SAAQC,aAAa,QAAO,iBAAiB;AAE7C,OAAO,MAAMC,uBAAmC;IAC9C,4EAA4E;IAC5EC,QAAQ;IACRC,MAAMf;IACNgB,QAAQ;QACNN;QACAC;QACAP;QACAF;QACAK;KACD;AACH,EAAE;AAEF,OAAO,MAAMU,iBAA+B;IAC1C;QACEH,QAAQ;QACRC,MAAMd;QACNe,QAAQ;YACNP;YACAH;YACAE;YACAH;YACAF;YACAS;SACD;IACH;IACAC;CACD,CAAC"}
+{"version":3,"sources":["../../../src/presentation/routes/index.ts"],"sourcesContent":["import type {AnnotationsInterModuleClient} from '@shipfox/annotations-dto/inter-module';\nimport type {AgentInterModuleClient} from '@shipfox/api-agent-dto/inter-module';\nimport {AUTH_LEASED_JOB, AUTH_USER} from '@shipfox/api-auth-context';\nimport type {AuthInterModuleClient} from '@shipfox/api-auth-dto/inter-module';\nimport type {IntegrationsModuleClient} from '@shipfox/api-integration-core-dto';\nimport type {ProjectsModuleClient} from '@shipfox/api-projects-dto';\nimport type {RunnersInterModuleClient} from '@shipfox/api-runners-dto/inter-module';\nimport type {SecretsInterModuleClient} from '@shipfox/api-secrets-dto/inter-module';\nimport type {RouteGroup} from '@shipfox/node-fastify';\nimport {createAgentRuntimeConfigRoute} from './agent-runtime-config.js';\nimport {cancelRunRoute} from './cancel-run.js';\nimport {createCheckoutTokenRoute} from './checkout-token.js';\nimport {getRunRoute} from './get-run.js';\nimport {getRunAggregatesRoute} from './get-run-aggregates.js';\nimport {createGetStepSecretsRoute} from './get-step-secrets.js';\nimport {listRunAttemptsRoute} from './list-run-attempts.js';\nimport {listRunsRoute} from './list-runs.js';\nimport {createNextStepRoute} from './next-step.js';\nimport {createReportStepRoute} from './report-step.js';\nimport {rerunRunRoute} from './rerun-run.js';\n\ntype WorkflowRouteClients = {\n  agent: AgentInterModuleClient;\n  annotations: AnnotationsInterModuleClient;\n  auth: AuthInterModuleClient;\n  integrations: IntegrationsModuleClient;\n  projects: ProjectsModuleClient;\n  runners: RunnersInterModuleClient;\n  secrets: SecretsInterModuleClient;\n};\n\nexport function createLeaseTokenRouteGroup(params: WorkflowRouteClients): RouteGroup {\n  return {\n    // The lease token names the job, so the path carries no job id (\"current\").\n    prefix: '/runs/jobs/current',\n    auth: AUTH_LEASED_JOB,\n    routes: [\n      createNextStepRoute(params),\n      createReportStepRoute(params.runners),\n      createCheckoutTokenRoute({\n        integrations: params.integrations,\n        projects: params.projects,\n        runners: params.runners,\n      }),\n      createAgentRuntimeConfigRoute(params),\n      createGetStepSecretsRoute(params.runners, params.secrets),\n    ],\n  };\n}\n\nexport function createWorkflowRoutes(params: WorkflowRouteClients): RouteGroup[] {\n  return [\n    {\n      prefix: '/workflows/runs',\n      auth: AUTH_USER,\n      routes: [\n        listRunsRoute(params.projects),\n        getRunAggregatesRoute(params.projects),\n        listRunAttemptsRoute(params.projects),\n        getRunRoute(params.projects),\n        cancelRunRoute(params.projects),\n        rerunRunRoute(params.projects),\n      ],\n    },\n    createLeaseTokenRouteGroup(params),\n  ];\n}\n"],"names":["AUTH_LEASED_JOB","AUTH_USER","createAgentRuntimeConfigRoute","cancelRunRoute","createCheckoutTokenRoute","getRunRoute","getRunAggregatesRoute","createGetStepSecretsRoute","listRunAttemptsRoute","listRunsRoute","createNextStepRoute","createReportStepRoute","rerunRunRoute","createLeaseTokenRouteGroup","params","prefix","auth","routes","runners","integrations","projects","secrets","createWorkflowRoutes"],"mappings":"AAEA,SAAQA,eAAe,EAAEC,SAAS,QAAO,4BAA4B;AAOrE,SAAQC,6BAA6B,QAAO,4BAA4B;AACxE,SAAQC,cAAc,QAAO,kBAAkB;AAC/C,SAAQC,wBAAwB,QAAO,sBAAsB;AAC7D,SAAQC,WAAW,QAAO,eAAe;AACzC,SAAQC,qBAAqB,QAAO,0BAA0B;AAC9D,SAAQC,yBAAyB,QAAO,wBAAwB;AAChE,SAAQC,oBAAoB,QAAO,yBAAyB;AAC5D,SAAQC,aAAa,QAAO,iBAAiB;AAC7C,SAAQC,mBAAmB,QAAO,iBAAiB;AACnD,SAAQC,qBAAqB,QAAO,mBAAmB;AACvD,SAAQC,aAAa,QAAO,iBAAiB;AAY7C,OAAO,SAASC,2BAA2BC,MAA4B;IACrE,OAAO;QACL,4EAA4E;QAC5EC,QAAQ;QACRC,MAAMhB;QACNiB,QAAQ;YACNP,oBAAoBI;YACpBH,sBAAsBG,OAAOI,OAAO;YACpCd,yBAAyB;gBACvBe,cAAcL,OAAOK,YAAY;gBACjCC,UAAUN,OAAOM,QAAQ;gBACzBF,SAASJ,OAAOI,OAAO;YACzB;YACAhB,8BAA8BY;YAC9BP,0BAA0BO,OAAOI,OAAO,EAAEJ,OAAOO,OAAO;SACzD;IACH;AACF;AAEA,OAAO,SAASC,qBAAqBR,MAA4B;IAC/D,OAAO;QACL;YACEC,QAAQ;YACRC,MAAMf;YACNgB,QAAQ;gBACNR,cAAcK,OAAOM,QAAQ;gBAC7Bd,sBAAsBQ,OAAOM,QAAQ;gBACrCZ,qBAAqBM,OAAOM,QAAQ;gBACpCf,YAAYS,OAAOM,QAAQ;gBAC3BjB,eAAeW,OAAOM,QAAQ;gBAC9BR,cAAcE,OAAOM,QAAQ;aAC9B;QACH;QACAP,2BAA2BC;KAC5B;AACH"}

package/dist/presentation/routes/leased-step.d.ts

@@ -1,4 +1,5 @@
 import { type LeasedJobContext } from '@shipfox/api-auth-context';
+import type { RunnersInterModuleClient } from '@shipfox/api-runners-dto/inter-module';
 import type { Step } from '#core/entities/step.js';
 export interface LoadedRunningLeasedStep {
     leasedJob: LeasedJobContext;
@@ -7,6 +8,7 @@ export interface LoadedRunningLeasedStep {
     projectId: string;
 }
 export declare function loadRunningLeasedStep(params: {
+    runners: RunnersInterModuleClient;
     request: object;
     stepId: string;
     attempt: number;

package/dist/presentation/routes/leased-step.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"leased-step.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/leased-step.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,KAAK,gBAAgB,EAA0B,MAAM,2BAA2B,CAAC;AAGzF,OAAO,KAAK,EAAC,IAAI,EAAC,MAAM,wBAAwB,CAAC;AAGjD,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,gBAAgB,CAAC;IAC5B,IAAI,EAAE,IAAI,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAsB,qBAAqB,CAAC,MAAM,EAAE;IAClD,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAoCnC"}
+{"version":3,"file":"leased-step.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/leased-step.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,KAAK,gBAAgB,EAA0B,MAAM,2BAA2B,CAAC;AACzF,OAAO,KAAK,EAAC,wBAAwB,EAAC,MAAM,uCAAuC,CAAC;AAEpF,OAAO,KAAK,EAAC,IAAI,EAAC,MAAM,wBAAwB,CAAC;AAGjD,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,gBAAgB,CAAC;IAC5B,IAAI,EAAE,IAAI,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAsB,qBAAqB,CAAC,MAAM,EAAE;IAClD,OAAO,EAAE,wBAAwB,CAAC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAoCnC"}

package/dist/presentation/routes/leased-step.js

@@ -1,10 +1,9 @@
 import { requireLeasedJobContext } from '@shipfox/api-auth-context';
-import { isJobLeaseActive } from '@shipfox/api-runners';
 import { ClientError } from '@shipfox/node-fastify';
 import { getJobScope, getStepByIdForJobExecution } from '#db/index.js';
 export async function loadRunningLeasedStep(params) {
     const leasedJob = requireLeasedJobContext(params.request);
-    const leaseIsActive = await isJobLeaseActive({
+    const { active: leaseIsActive } = await params.runners.getLeaseState({
         jobId: leasedJob.jobId,
         jobExecutionId: leasedJob.jobExecutionId,
         runnerSessionId: leasedJob.runnerSessionId

package/dist/presentation/routes/leased-step.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/presentation/routes/leased-step.ts"],"sourcesContent":["import {type LeasedJobContext, requireLeasedJobContext} from '@shipfox/api-auth-context';\nimport {isJobLeaseActive} from '@shipfox/api-runners';\nimport {ClientError} from '@shipfox/node-fastify';\nimport type {Step} from '#core/entities/step.js';\nimport {getJobScope, getStepByIdForJobExecution} from '#db/index.js';\n\nexport interface LoadedRunningLeasedStep {\n  leasedJob: LeasedJobContext;\n  step: Step;\n  workspaceId: string;\n  projectId: string;\n}\n\nexport async function loadRunningLeasedStep(params: {\n  request: object;\n  stepId: string;\n  attempt: number;\n}): Promise<LoadedRunningLeasedStep> {\n  const leasedJob = requireLeasedJobContext(params.request);\n\n  const leaseIsActive = await isJobLeaseActive({\n    jobId: leasedJob.jobId,\n    jobExecutionId: leasedJob.jobExecutionId,\n    runnerSessionId: leasedJob.runnerSessionId,\n  });\n  if (!leaseIsActive) {\n    throw new ClientError('Job lease is no longer active', 'lease-not-active', {status: 404});\n  }\n\n  const step = await getStepByIdForJobExecution({\n    stepId: params.stepId,\n    jobExecutionId: leasedJob.jobExecutionId,\n  });\n  if (!step) {\n    throw new ClientError('Step not found for leased job', 'step-not-found', {status: 404});\n  }\n\n  const scope = await getJobScope(leasedJob.jobId);\n  if (!scope) {\n    throw new ClientError('Leased job not found', 'job-not-found', {status: 404});\n  }\n\n  if (step.currentAttempt !== params.attempt) {\n    throw new ClientError('Step attempt does not match current attempt', 'step-attempt-mismatch', {\n      status: 409,\n    });\n  }\n\n  if (step.status !== 'running') {\n    throw new ClientError('Step is not running', 'step-not-running', {status: 409});\n  }\n\n  return {leasedJob, step, workspaceId: scope.workspaceId, projectId: scope.projectId};\n}\n"],"names":["requireLeasedJobContext","isJobLeaseActive","ClientError","getJobScope","getStepByIdForJobExecution","loadRunningLeasedStep","params","leasedJob","request","leaseIsActive","jobId","jobExecutionId","runnerSessionId","status","step","stepId","scope","currentAttempt","attempt","workspaceId","projectId"],"mappings":"AAAA,SAA+BA,uBAAuB,QAAO,4BAA4B;AACzF,SAAQC,gBAAgB,QAAO,uBAAuB;AACtD,SAAQC,WAAW,QAAO,wBAAwB;AAElD,SAAQC,WAAW,EAAEC,0BAA0B,QAAO,eAAe;AASrE,OAAO,eAAeC,sBAAsBC,MAI3C;IACC,MAAMC,YAAYP,wBAAwBM,OAAOE,OAAO;IAExD,MAAMC,gBAAgB,MAAMR,iBAAiB;QAC3CS,OAAOH,UAAUG,KAAK;QACtBC,gBAAgBJ,UAAUI,cAAc;QACxCC,iBAAiBL,UAAUK,eAAe;IAC5C;IACA,IAAI,CAACH,eAAe;QAClB,MAAM,IAAIP,YAAY,iCAAiC,oBAAoB;YAACW,QAAQ;QAAG;IACzF;IAEA,MAAMC,OAAO,MAAMV,2BAA2B;QAC5CW,QAAQT,OAAOS,MAAM;QACrBJ,gBAAgBJ,UAAUI,cAAc;IAC1C;IACA,IAAI,CAACG,MAAM;QACT,MAAM,IAAIZ,YAAY,iCAAiC,kBAAkB;YAACW,QAAQ;QAAG;IACvF;IAEA,MAAMG,QAAQ,MAAMb,YAAYI,UAAUG,KAAK;IAC/C,IAAI,CAACM,OAAO;QACV,MAAM,IAAId,YAAY,wBAAwB,iBAAiB;YAACW,QAAQ;QAAG;IAC7E;IAEA,IAAIC,KAAKG,cAAc,KAAKX,OAAOY,OAAO,EAAE;QAC1C,MAAM,IAAIhB,YAAY,+CAA+C,yBAAyB;YAC5FW,QAAQ;QACV;IACF;IAEA,IAAIC,KAAKD,MAAM,KAAK,WAAW;QAC7B,MAAM,IAAIX,YAAY,uBAAuB,oBAAoB;YAACW,QAAQ;QAAG;IAC/E;IAEA,OAAO;QAACN;QAAWO;QAAMK,aAAaH,MAAMG,WAAW;QAAEC,WAAWJ,MAAMI,SAAS;IAAA;AACrF"}
+{"version":3,"sources":["../../../src/presentation/routes/leased-step.ts"],"sourcesContent":["import {type LeasedJobContext, requireLeasedJobContext} from '@shipfox/api-auth-context';\nimport type {RunnersInterModuleClient} from '@shipfox/api-runners-dto/inter-module';\nimport {ClientError} from '@shipfox/node-fastify';\nimport type {Step} from '#core/entities/step.js';\nimport {getJobScope, getStepByIdForJobExecution} from '#db/index.js';\n\nexport interface LoadedRunningLeasedStep {\n  leasedJob: LeasedJobContext;\n  step: Step;\n  workspaceId: string;\n  projectId: string;\n}\n\nexport async function loadRunningLeasedStep(params: {\n  runners: RunnersInterModuleClient;\n  request: object;\n  stepId: string;\n  attempt: number;\n}): Promise<LoadedRunningLeasedStep> {\n  const leasedJob = requireLeasedJobContext(params.request);\n\n  const {active: leaseIsActive} = await params.runners.getLeaseState({\n    jobId: leasedJob.jobId,\n    jobExecutionId: leasedJob.jobExecutionId,\n    runnerSessionId: leasedJob.runnerSessionId,\n  });\n  if (!leaseIsActive) {\n    throw new ClientError('Job lease is no longer active', 'lease-not-active', {status: 404});\n  }\n\n  const step = await getStepByIdForJobExecution({\n    stepId: params.stepId,\n    jobExecutionId: leasedJob.jobExecutionId,\n  });\n  if (!step) {\n    throw new ClientError('Step not found for leased job', 'step-not-found', {status: 404});\n  }\n\n  const scope = await getJobScope(leasedJob.jobId);\n  if (!scope) {\n    throw new ClientError('Leased job not found', 'job-not-found', {status: 404});\n  }\n\n  if (step.currentAttempt !== params.attempt) {\n    throw new ClientError('Step attempt does not match current attempt', 'step-attempt-mismatch', {\n      status: 409,\n    });\n  }\n\n  if (step.status !== 'running') {\n    throw new ClientError('Step is not running', 'step-not-running', {status: 409});\n  }\n\n  return {leasedJob, step, workspaceId: scope.workspaceId, projectId: scope.projectId};\n}\n"],"names":["requireLeasedJobContext","ClientError","getJobScope","getStepByIdForJobExecution","loadRunningLeasedStep","params","leasedJob","request","active","leaseIsActive","runners","getLeaseState","jobId","jobExecutionId","runnerSessionId","status","step","stepId","scope","currentAttempt","attempt","workspaceId","projectId"],"mappings":"AAAA,SAA+BA,uBAAuB,QAAO,4BAA4B;AAEzF,SAAQC,WAAW,QAAO,wBAAwB;AAElD,SAAQC,WAAW,EAAEC,0BAA0B,QAAO,eAAe;AASrE,OAAO,eAAeC,sBAAsBC,MAK3C;IACC,MAAMC,YAAYN,wBAAwBK,OAAOE,OAAO;IAExD,MAAM,EAACC,QAAQC,aAAa,EAAC,GAAG,MAAMJ,OAAOK,OAAO,CAACC,aAAa,CAAC;QACjEC,OAAON,UAAUM,KAAK;QACtBC,gBAAgBP,UAAUO,cAAc;QACxCC,iBAAiBR,UAAUQ,eAAe;IAC5C;IACA,IAAI,CAACL,eAAe;QAClB,MAAM,IAAIR,YAAY,iCAAiC,oBAAoB;YAACc,QAAQ;QAAG;IACzF;IAEA,MAAMC,OAAO,MAAMb,2BAA2B;QAC5Cc,QAAQZ,OAAOY,MAAM;QACrBJ,gBAAgBP,UAAUO,cAAc;IAC1C;IACA,IAAI,CAACG,MAAM;QACT,MAAM,IAAIf,YAAY,iCAAiC,kBAAkB;YAACc,QAAQ;QAAG;IACvF;IAEA,MAAMG,QAAQ,MAAMhB,YAAYI,UAAUM,KAAK;IAC/C,IAAI,CAACM,OAAO;QACV,MAAM,IAAIjB,YAAY,wBAAwB,iBAAiB;YAACc,QAAQ;QAAG;IAC7E;IAEA,IAAIC,KAAKG,cAAc,KAAKd,OAAOe,OAAO,EAAE;QAC1C,MAAM,IAAInB,YAAY,+CAA+C,yBAAyB;YAC5Fc,QAAQ;QACV;IACF;IAEA,IAAIC,KAAKD,MAAM,KAAK,WAAW;QAC7B,MAAM,IAAId,YAAY,uBAAuB,oBAAoB;YAACc,QAAQ;QAAG;IAC/E;IAEA,OAAO;QAACT;QAAWU;QAAMK,aAAaH,MAAMG,WAAW;QAAEC,WAAWJ,MAAMI,SAAS;IAAA;AACrF"}

package/dist/presentation/routes/list-run-attempts.d.ts

@@ -1,2 +1,3 @@
-export declare const listRunAttemptsRoute: import("@shipfox/node-fastify").RouteDefinition;
+import type { ProjectsModuleClient } from '@shipfox/api-projects-dto';
+export declare function listRunAttemptsRoute(projects: ProjectsModuleClient): import("@shipfox/node-fastify").RouteDefinition;
 //# sourceMappingURL=list-run-attempts.d.ts.map

package/dist/presentation/routes/list-run-attempts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"list-run-attempts.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/list-run-attempts.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,oBAAoB,iDAmB/B,CAAC"}
+{"version":3,"file":"list-run-attempts.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/list-run-attempts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,oBAAoB,EAAC,MAAM,2BAA2B,CAAC;AAQpE,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,oBAAoB,mDAqBlE"}