spine-framework 0.3.144 → 0.4.0

package/.framework/functions/triggers.ts

@@ -1,3 +1,12 @@
+// CIL[BEGIN stable_id="~/.framework/functions/triggers.ts:module_header:module_header" type="module_header" identity="module_header" parent="~/.framework/functions/triggers.ts"]
+// CIL[DOC-MACRO purpose="Triggers function module — exports agent event types and CRUD + dispatch handlers for the triggers table"]
+// CIL[DOC-RESPONSIBILITY responsibility="Define agent event constants and expose Edge-function-style handlers for listing, creating, updating, toggling and dispatching trigger records and executions"]
+// CIL[DOC-CONTEXT module="triggers" layer="functions" related_files=".framework/functions/_shared/audit.ts,.framework/functions/_shared/db.ts,.framework/functions/_shared/middleware.ts,.framework/functions/_shared/permissions.ts,.framework/functions/_shared/principal.ts"]
+// CIL[DOC-CONTRACT inputs="module imports" outputs="AGENT_EVENT_TYPES, getAgentEventTypes, listByEvent, list, get, getExecutions, create, update, remove, toggle, handler" errors="none" side_effects="none at module load"]
+// CIL[DOC-MICRO logic_summary="Imports shared middleware, database, audit and permission helpers, then defines the public API surface of the triggers feature" notable_decisions="Exports named constants and createHandler wrappers; dispatch is routed by action query parameter"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.90" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-AUDIENCE audience="developers"]
 
 
 
@@ -8,43 +17,43 @@
 
 
 
-// CIL[BEGIN chunk_id="triggers_module_header_1783931956" type="module_header" identity="module_header" parent="none"]
-// CIL[DOC-MACRO purpose="Import dependencies for triggers CRUD API"]
-// CIL[DOC-RESPONSIBILITY responsibility="Provide middleware, database, audit and permissions utilities"]
-// CIL[DOC-CONTEXT module="triggers" layer="api-handler" related_files="[\"custom/apps/cortex/pages/operations/OperationsDashboard.tsx\",\".framework/src/pages/admin/TypeDetailPage.tsx\",\".framework/functions/_shared/principal.ts\",\".framework/functions/_shared/schema-utils.ts\",\"custom/apps/portal/pages/ContentPage.tsx\",\"\\\"]"]
-// CIL[DOC-CONTRACT inputs="none" outputs="imported modules and permissions instance" errors="none" side_effects="none"]
-// CIL[DOC-MICRO logic_summary="Imports all required modules for trigger management operations" notable_decisions="[]"]
-// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
-// CIL[DOC-STABILITY stability="stable"]
-// CIL[DOC-AUDIENCE audience="developer"]
-// CIL[DOC-VECTOR type="context" content="Layer: api-handler. Direct callers: 0. Direct calls: 0. Related files: custom/apps/cortex/pages/operations/OperationsDashboard.tsx, .framework/src/pages/admin/TypeDetailPage.tsx, .framework/functions/_shared/principal.ts, .framework/functions/_shared/schema-utils.ts, custom/apps/portal/pages/ContentPage.tsx, \."]
-// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
-// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
-// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
-// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
-// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
 import { createHandler } from './_shared/middleware'
 import { joins, adminDb } from './_shared/db'
 import { emitLog } from './_shared/audit'
 import { PermissionEngine, sanitizeRecordData } from './_shared/permissions'
 import { isSystemAdmin } from './_shared/principal'
-
+// CIL[DOC-VECTOR type="context" content="purpose='Triggers function module — exports agent event types and CRUD + dispatch handlers for the triggers table'; No verified external callers; imports: .framework/functions/_shared/middleware.ts,.framework/functions/_shared/db.ts,.framework/functions/_shared/audit.ts"]
+// CIL[DOC-VECTOR type="blast_radius" content="No direct caller data from CIL graph; local impact only"]
+// CIL[DOC-VECTOR type="configuration" content="No environment or build configuration dependencies identified"]
+// CIL[DOC-VECTOR type="constraint" content="Standard runtime; no special invariants documented"]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
+// CIL[END stable_id="~/.framework/functions/triggers.ts:module_header:module_header"]
+
+// CIL[BEGIN stable_id="~/.framework/functions/triggers.ts:permissions:constant" type="constant" identity="permissions" parent="~/.framework/functions/triggers.ts"]
+// CIL[DOC-MACRO purpose="PermissionEngine alias used for admin and permission checks in trigger handlers"]
+// CIL[DOC-RESPONSIBILITY responsibility="Provide the permission engine reference used by the create handler"]
+// CIL[DOC-CONTEXT module="triggers" layer="functions" related_files=".framework/functions/_shared/audit.ts,.framework/functions/_shared/db.ts,.framework/functions/_shared/middleware.ts,.framework/functions/_shared/permissions.ts,.framework/functions/_shared/principal.ts,.framework/functions/triggers.ts"]
+// CIL[DOC-CONTRACT inputs="imported PermissionEngine" outputs="permissions constant alias" errors="none" side_effects="none"]
+// CIL[DOC-MICRO logic_summary="Casts PermissionEngine to any and assigns it to a local constant" notable_decisions="Used as any to avoid strict typing issues; deprecated usage pattern noted in create chunk"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.90" flags="none"]
+// CIL[DOC-STABILITY stability="deprecated"]
 const permissions = PermissionEngine as any
-// CIL[END chunk_id="triggers_module_header_1783931956"]
-// CIL[BEGIN chunk_id="triggers_constants_1783931956" type="constants" identity="constants" parent="none"]
-// CIL[DOC-MACRO purpose="Define agent event type constants"]
-// CIL[DOC-RESPONSIBILITY responsibility="Provide well-known event type slugs for triggers"]
-// CIL[DOC-CONTEXT module="triggers" layer="api-handler" related_files="[\".framework/src/pages/admin/TypeDetailPage.tsx\",\"custom/apps/cortex/pages/operations/OperationsDashboard.tsx\",\".framework/src/pages/admin/IntegrationsPage.tsx\",\".framework/functions/_shared/schema-utils.ts\",\".framework/functions/_shared/principal.ts\",\"\\\"]"]
-// CIL[DOC-CONTRACT inputs="none" outputs="event type constants object" errors="none" side_effects="none"]
-// CIL[DOC-MICRO logic_summary="Defines constants for inference, tool, conversation, and escalation events" notable_decisions="[]"]
-// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
-// CIL[DOC-STABILITY stability="stable"]
-// CIL[DOC-VECTOR type="context" content="Layer: api-handler. Direct callers: 0. Direct calls: 0. Related files: .framework/src/pages/admin/TypeDetailPage.tsx, custom/apps/cortex/pages/operations/OperationsDashboard.tsx, .framework/src/pages/admin/IntegrationsPage.tsx, .framework/functions/_shared/schema-utils.ts, .framework/functions/_shared/principal.ts, \."]
-// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
-// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
-// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="context" content="purpose='PermissionEngine alias used for admin and permission checks in trigger handlers'; No verified external callers; imports: .framework/functions/_shared/middleware.ts,.framework/functions/_shared/db.ts,.framework/functions/_shared/audit.ts"]
+// CIL[DOC-VECTOR type="blast_radius" content="No direct caller data from CIL graph; local impact only"]
+// CIL[DOC-VECTOR type="configuration" content="No environment or build configuration dependencies identified"]
+// CIL[DOC-VECTOR type="constraint" content="Standard runtime; no special invariants documented"]
 // CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
 // CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
+// CIL[END stable_id="~/.framework/functions/triggers.ts:permissions:constant"]
+// CIL[BEGIN stable_id="~/.framework/functions/triggers.ts:AGENT_EVENT_TYPES:constant" type="constant" identity="AGENT_EVENT_TYPES" parent="~/.framework/functions/triggers.ts"]
+// CIL[DOC-MACRO purpose="Catalog of string event types emitted by and consumed in agent workflows"]
+// CIL[DOC-RESPONSIBILITY responsibility="Provide strongly-typed, readonly event type strings for trigger conditions"]
+// CIL[DOC-CONTEXT module="triggers" layer="functions" related_files=".framework/functions/_shared/audit.ts,.framework/functions/_shared/db.ts,.framework/functions/_shared/middleware.ts,.framework/functions/_shared/permissions.ts,.framework/functions/_shared/principal.ts,.framework/functions/triggers.ts"]
+// CIL[DOC-CONTRACT inputs="none" outputs="AGENT_EVENT_TYPES object with string constants" errors="none" side_effects="none"]
+// CIL[DOC-MICRO logic_summary="Declare a const object of agent inference/tool/message/escalation/human-handoff event strings and cast to const" notable_decisions="Values are namespaced under agent.*"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.90" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
 export const AGENT_EVENT_TYPES = {
   INFERENCE_COMPLETED: 'agent.inference.completed',
   INFERENCE_FAILED: 'agent.inference.failed',
@@ -59,39 +68,39 @@ export const AGENT_EVENT_TYPES = {
   ESCALATION_RESOLVED: 'agent.escalation.resolved',
   HUMAN_HANDOFF: 'agent.human.handoff'
 } as const
-// CIL[END chunk_id="triggers_constants_1783931956"]
-// CIL[BEGIN chunk_id="triggers_getagenteventtypes_1783931956" type="function" identity="getAgentEventTypes" parent="none"]
-// CIL[DOC-MACRO purpose="Return array of agent event type slugs"]
-// CIL[DOC-RESPONSIBILITY responsibility="Provide event type options for UI dropdowns"]
-// CIL[DOC-CONTEXT module="triggers" layer="api-handler" related_files="[\".framework/src/pages/admin/TypeDetailPage.tsx\",\"custom/apps/cortex/pages/operations/OperationsDashboard.tsx\",\"custom/apps/portal/pages/ContentPage.tsx\",\"custom/apps/cortex/functions/custom_cil-embeddings.ts\",\".framework/functions/_shared/schema-utils.ts\",\"\\\"]"]
-// CIL[DOC-CONTRACT inputs="none" outputs="string array of event types" errors="none" side_effects="none"]
-// CIL[DOC-MICRO logic_summary="Extracts values from AGENT_EVENT_TYPES constant for UI consumption" notable_decisions="[]"]
-// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
-// CIL[DOC-STABILITY stability="stable"]
-// CIL[DOC-VECTOR type="context" content="Layer: api-handler. Direct callers: 0. Direct calls: 0. Related files: .framework/src/pages/admin/TypeDetailPage.tsx, custom/apps/cortex/pages/operations/OperationsDashboard.tsx, custom/apps/portal/pages/ContentPage.tsx, custom/apps/cortex/functions/custom_cil-embeddings.ts, .framework/functions/_shared/schema-utils.ts, \."]
-// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
-// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
-// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="context" content="purpose='Catalog of string event types emitted by and consumed in agent workflows'; No verified external callers; imports: .framework/functions/_shared/middleware.ts,.framework/functions/_shared/db.ts,.framework/functions/_shared/audit.ts"]
+// CIL[DOC-VECTOR type="blast_radius" content="No direct caller data from CIL graph; local impact only"]
+// CIL[DOC-VECTOR type="configuration" content="No environment or build configuration dependencies identified"]
+// CIL[DOC-VECTOR type="constraint" content="Standard runtime; no special invariants documented"]
 // CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
 // CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
+// CIL[END stable_id="~/.framework/functions/triggers.ts:AGENT_EVENT_TYPES:constant"]
+// CIL[BEGIN stable_id="~/.framework/functions/triggers.ts:getAgentEventTypes:function" type="function" identity="getAgentEventTypes" parent="~/.framework/functions/triggers.ts"]
+// CIL[DOC-MACRO purpose="Return all agent event type strings as an array"]
+// CIL[DOC-RESPONSIBILITY responsibility="Expose a typed array getter for event types"]
+// CIL[DOC-CONTEXT module="triggers" layer="functions" related_files=".framework/functions/_shared/audit.ts,.framework/functions/_shared/db.ts,.framework/functions/_shared/middleware.ts,.framework/functions/_shared/permissions.ts,.framework/functions/_shared/principal.ts,.framework/functions/triggers.ts"]
+// CIL[DOC-CONTRACT inputs="none" outputs="string[] of event type values" errors="none" side_effects="none"]
+// CIL[DOC-MICRO logic_summary="Call Object.values on AGENT_EVENT_TYPES and return the string array" notable_decisions="No dependencies or side effects"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.90" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
 export function getAgentEventTypes(): string[] {
   return Object.values(AGENT_EVENT_TYPES)
 }
-// CIL[END chunk_id="triggers_getagenteventtypes_1783931956"]
-// CIL[BEGIN chunk_id="triggers_listbyevent_1783931956" type="function" identity="listByEvent" parent="none"]
-// CIL[DOC-MACRO purpose="List triggers filtered by event type"]
-// CIL[DOC-RESPONSIBILITY responsibility="Handle event-specific trigger listing with sanitization"]
-// CIL[DOC-CONTEXT module="triggers" layer="api-handler" related_files="[\".framework/src/pages/admin/TypeDetailPage.tsx\",\"custom/apps/cortex/pages/operations/OperationsDashboard.tsx\",\".framework/src/pages/admin/RolesPage.tsx\",\".framework/functions/_shared/schema-utils.ts\",\"\\\"]"]
-// CIL[DOC-CONTRACT inputs="none" outputs="sanitized trigger array" errors="throws" side_effects="database queries"]
-// CIL[DOC-MICRO logic_summary="Filters triggers by event_type and app, sanitizes based on permissions" notable_decisions="[]"]
-// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
-// CIL[DOC-STABILITY stability="stable"]
-// CIL[DOC-VECTOR type="context" content="Layer: api-handler. Direct callers: 0. Direct calls: 0. Related files: .framework/src/pages/admin/TypeDetailPage.tsx, custom/apps/cortex/pages/operations/OperationsDashboard.tsx, .framework/src/pages/admin/RolesPage.tsx, .framework/functions/_shared/schema-utils.ts, \."]
-// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
-// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
-// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="context" content="purpose='Return all agent event type strings as an array'; No verified external callers; imports: .framework/functions/_shared/middleware.ts,.framework/functions/_shared/db.ts,.framework/functions/_shared/audit.ts"]
+// CIL[DOC-VECTOR type="blast_radius" content="No direct caller data from CIL graph; local impact only"]
+// CIL[DOC-VECTOR type="configuration" content="No environment or build configuration dependencies identified"]
+// CIL[DOC-VECTOR type="constraint" content="Standard runtime; no special invariants documented"]
 // CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
 // CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
+// CIL[END stable_id="~/.framework/functions/triggers.ts:getAgentEventTypes:function"]
+// CIL[BEGIN stable_id="~/.framework/functions/triggers.ts:listByEvent:constant" type="constant" identity="listByEvent" parent="~/.framework/functions/triggers.ts"]
+// CIL[DOC-MACRO purpose="List triggers filtered by event type, optional app and active status"]
+// CIL[DOC-RESPONSIBILITY responsibility="Query trigger records for an account, filter by event_type and optional params, and sanitize results"]
+// CIL[DOC-CONTEXT module="triggers" layer="functions" related_files=".framework/functions/_shared/audit.ts,.framework/functions/_shared/db.ts,.framework/functions/_shared/middleware.ts,.framework/functions/_shared/permissions.ts,.framework/functions/_shared/principal.ts,.framework/functions/triggers.ts"]
+// CIL[DOC-CONTRACT inputs="ctx.query {event_type, app_id?, include_inactive?}" outputs="sanitized trigger records" errors="missing event_type, account context, database error" side_effects="none"]
+// CIL[DOC-MICRO logic_summary="Validate event_type and account, choose admin or account db, build a filtered ordered query, then sanitize each returned row through permissions" notable_decisions="Defaults include_inactive to false unless 'true'; system admins can query across accounts"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.90" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
 export const listByEvent = createHandler(async (ctx, body) => {
   const { event_type, app_id, include_inactive } = ctx.query || {}
 
@@ -129,21 +138,21 @@ export const listByEvent = createHandler(async (ctx, body) => {
 
   return sanitized
 })
-// CIL[END chunk_id="triggers_listbyevent_1783931956"]
-// CIL[BEGIN chunk_id="triggers_list_1783931956" type="function" identity="list" parent="none"]
-// CIL[DOC-MACRO purpose="List all triggers with filtering and sanitization"]
-// CIL[DOC-RESPONSIBILITY responsibility="Handle general trigger listing with authentication"]
-// CIL[DOC-CONTEXT module="triggers" layer="api-handler" related_files="[]"]
-// CIL[DOC-CONTRACT inputs="none" outputs="sanitized trigger array" errors="throws" side_effects="database queries"]
-// CIL[DOC-MICRO logic_summary="Filters triggers by app/event_type, sanitizes based on permissions" notable_decisions="[]"]
-// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
-// CIL[DOC-STABILITY stability="stable"]
-// CIL[DOC-VECTOR type="context" content="Layer: api-handler. Direct callers: 0. Direct calls: 0. Related files: none."]
-// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
-// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
-// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="context" content="purpose='List triggers filtered by event type, optional app and active status'; No verified external callers; imports: .framework/functions/_shared/middleware.ts,.framework/functions/_shared/db.ts,.framework/functions/_shared/audit.ts"]
+// CIL[DOC-VECTOR type="blast_radius" content="No direct caller data from CIL graph; local impact only"]
+// CIL[DOC-VECTOR type="configuration" content="No environment or build configuration dependencies identified"]
+// CIL[DOC-VECTOR type="constraint" content="Standard runtime; no special invariants documented"]
 // CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
 // CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
+// CIL[END stable_id="~/.framework/functions/triggers.ts:listByEvent:constant"]
+// CIL[BEGIN stable_id="~/.framework/functions/triggers.ts:list:constant" type="constant" identity="list" parent="~/.framework/functions/triggers.ts"]
+// CIL[DOC-MACRO purpose="List triggers with optional app, event and active filters"]
+// CIL[DOC-RESPONSIBILITY responsibility="List trigger records for the caller, applying optional app_id, event_type and active-status filters"]
+// CIL[DOC-CONTEXT module="triggers" layer="functions" related_files=".framework/functions/_shared/audit.ts,.framework/functions/_shared/db.ts,.framework/functions/_shared/middleware.ts,.framework/functions/_shared/permissions.ts,.framework/functions/_shared/principal.ts,.framework/functions/triggers.ts"]
+// CIL[DOC-CONTRACT inputs="ctx.query {app_id?, event_type?, include_inactive?}" outputs="sanitized trigger records" errors="account context required; database error" side_effects="none"]
+// CIL[DOC-MICRO logic_summary="Validate account, select account or admin db, build query with optional filters and order, then sanitize each row" notable_decisions="Same default active filter and admin bypass as listByEvent, but event_type is optional"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.90" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
 export const list = createHandler(async (ctx, body) => {
   const { app_id, event_type, include_inactive } = ctx.query || {}
 
@@ -179,21 +188,21 @@ export const list = createHandler(async (ctx, body) => {
 
   return sanitized
 })
-// CIL[END chunk_id="triggers_list_1783931956"]
-// CIL[BEGIN chunk_id="triggers_get_1783931956" type="function" identity="get" parent="none"]
-// CIL[DOC-MACRO purpose="Get single trigger by ID with sanitization"]
-// CIL[DOC-RESPONSIBILITY responsibility="Retrieve and sanitize individual trigger records"]
-// CIL[DOC-CONTEXT module="triggers" layer="api-handler" related_files="[]"]
-// CIL[DOC-CONTRACT inputs="none" outputs="sanitized trigger object" errors="throws" side_effects="database query"]
-// CIL[DOC-MICRO logic_summary="Queries trigger by ID with app/createdBy joins, sanitizes based on permissions" notable_decisions="[]"]
-// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
-// CIL[DOC-STABILITY stability="stable"]
-// CIL[DOC-VECTOR type="context" content="Layer: api-handler. Direct callers: 0. Direct calls: 0. Related files: none."]
-// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
-// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
-// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="context" content="purpose='List triggers with optional app, event and active filters'; No verified external callers; imports: .framework/functions/_shared/middleware.ts,.framework/functions/_shared/db.ts,.framework/functions/_shared/audit.ts"]
+// CIL[DOC-VECTOR type="blast_radius" content="No direct caller data from CIL graph; local impact only"]
+// CIL[DOC-VECTOR type="configuration" content="No environment or build configuration dependencies identified"]
+// CIL[DOC-VECTOR type="constraint" content="Standard runtime; no special invariants documented"]
 // CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
 // CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
+// CIL[END stable_id="~/.framework/functions/triggers.ts:list:constant"]
+// CIL[BEGIN stable_id="~/.framework/functions/triggers.ts:get:constant" type="constant" identity="get" parent="~/.framework/functions/triggers.ts"]
+// CIL[DOC-MACRO purpose="Fetch a single trigger by ID"]
+// CIL[DOC-RESPONSIBILITY responsibility="Return a sanitized trigger record for the given id"]
+// CIL[DOC-CONTEXT module="triggers" layer="functions" related_files=".framework/functions/_shared/audit.ts,.framework/functions/_shared/db.ts,.framework/functions/_shared/middleware.ts,.framework/functions/_shared/permissions.ts,.framework/functions/_shared/principal.ts,.framework/functions/triggers.ts"]
+// CIL[DOC-CONTRACT inputs="ctx.query {id}" outputs="sanitized trigger object" errors="missing id, database error, not found" side_effects="none"]
+// CIL[DOC-MICRO logic_summary="Validate id, choose db by admin status, query a single trigger, sanitize and return" notable_decisions="System admins can read across accounts"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.90" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
 export const get = createHandler(async (ctx, body) => {
   const { id } = ctx.query || {}
 
@@ -213,21 +222,21 @@ export const get = createHandler(async (ctx, body) => {
 
   return await sanitizeRecordData(ctx, data, 'trigger')
 })
-// CIL[END chunk_id="triggers_get_1783931956"]
-// CIL[BEGIN chunk_id="triggers_getexecutions_1783931956" type="function" identity="getExecutions" parent="none"]
-// CIL[DOC-MACRO purpose="Get execution history for a specific trigger"]
-// CIL[DOC-RESPONSIBILITY responsibility="Retrieve trigger execution records with pagination"]
-// CIL[DOC-CONTEXT module="triggers" layer="api-handler" related_files="[]"]
-// CIL[DOC-CONTRACT inputs="none" outputs="execution records array" errors="throws" side_effects="database queries"]
-// CIL[DOC-MICRO logic_summary="Queries trigger_executions table with pagination and ordering" notable_decisions="[]"]
-// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
-// CIL[DOC-STABILITY stability="stable"]
-// CIL[DOC-VECTOR type="context" content="Layer: api-handler. Direct callers: 0. Direct calls: 0. Related files: none."]
-// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
-// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
-// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="context" content="purpose='Fetch a single trigger by ID'; No verified external callers; imports: .framework/functions/_shared/middleware.ts,.framework/functions/_shared/db.ts,.framework/functions/_shared/audit.ts"]
+// CIL[DOC-VECTOR type="blast_radius" content="No direct caller data from CIL graph; local impact only"]
+// CIL[DOC-VECTOR type="configuration" content="No environment or build configuration dependencies identified"]
+// CIL[DOC-VECTOR type="constraint" content="Standard runtime; no special invariants documented"]
 // CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
 // CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
+// CIL[END stable_id="~/.framework/functions/triggers.ts:get:constant"]
+// CIL[BEGIN stable_id="~/.framework/functions/triggers.ts:getExecutions:constant" type="constant" identity="getExecutions" parent="~/.framework/functions/triggers.ts"]
+// CIL[DOC-MACRO purpose="List recent executions for a trigger"]
+// CIL[DOC-RESPONSIBILITY responsibility="Return paginated trigger execution history ordered by executed_at descending"]
+// CIL[DOC-CONTEXT module="triggers" layer="functions" related_files=".framework/functions/_shared/audit.ts,.framework/functions/_shared/db.ts,.framework/functions/_shared/middleware.ts,.framework/functions/_shared/permissions.ts,.framework/functions/_shared/principal.ts,.framework/functions/triggers.ts"]
+// CIL[DOC-CONTRACT inputs="ctx.query {trigger_id, limit?, offset?}" outputs="trigger_executions records" errors="missing trigger_id or account; database error" side_effects="none"]
+// CIL[DOC-MICRO logic_summary="Validate trigger_id and account, query trigger_executions with a range and descending order, and return rows" notable_decisions="Uses ctx.db directly; no admin cross-account bypass"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.90" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
 export const getExecutions = createHandler(async (ctx, body) => {
   const { trigger_id, limit = '50', offset = '0' } = ctx.query || {}
 
@@ -250,21 +259,21 @@ export const getExecutions = createHandler(async (ctx, body) => {
 
   return data || []
 })
-// CIL[END chunk_id="triggers_getexecutions_1783931956"]
-// CIL[BEGIN chunk_id="triggers_create_1783931956" type="function" identity="create" parent="none"]
-// CIL[DOC-MACRO purpose="Create new trigger with permissions and audit"]
-// CIL[DOC-RESPONSIBILITY responsibility="Handle trigger creation with validation and logging"]
-// CIL[DOC-CONTEXT module="triggers" layer="api-handler" related_files="[]"]
-// CIL[DOC-CONTRACT inputs="none" outputs="created trigger record" errors="throws" side_effects="database insert, audit log"]
-// CIL[DOC-MICRO logic_summary="Validates permissions, creates trigger with defaults, emits audit log" notable_decisions="[]"]
-// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
-// CIL[DOC-STABILITY stability="stable"]
-// CIL[DOC-VECTOR type="context" content="Layer: api-handler. Direct callers: 0. Direct calls: 0. Related files: none."]
-// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
-// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
-// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="context" content="purpose='List recent executions for a trigger'; No verified external callers; imports: .framework/functions/_shared/middleware.ts,.framework/functions/_shared/db.ts,.framework/functions/_shared/audit.ts"]
+// CIL[DOC-VECTOR type="blast_radius" content="No direct caller data from CIL graph; local impact only"]
+// CIL[DOC-VECTOR type="configuration" content="No environment or build configuration dependencies identified"]
+// CIL[DOC-VECTOR type="constraint" content="Standard runtime; no special invariants documented"]
 // CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
 // CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
+// CIL[END stable_id="~/.framework/functions/triggers.ts:getExecutions:constant"]
+// CIL[BEGIN stable_id="~/.framework/functions/triggers.ts:create:constant" type="constant" identity="create" parent="~/.framework/functions/triggers.ts"]
+// CIL[DOC-MACRO purpose="Create a new trigger record after permission check"]
+// CIL[DOC-RESPONSIBILITY responsibility="Validate required fields, enforce permission rules, insert a trigger and emit an audit log"]
+// CIL[DOC-CONTEXT module="triggers" layer="functions" related_files=".framework/functions/_shared/audit.ts,.framework/functions/_shared/db.ts,.framework/functions/_shared/middleware.ts,.framework/functions/_shared/permissions.ts,.framework/functions/_shared/principal.ts,.framework/functions/triggers.ts"]
+// CIL[DOC-CONTRACT inputs="body {name, event_type, pipeline_id, app_id?, description?, config?, metadata?}" outputs="created trigger record" errors="missing required fields, anonymous user, insufficient permissions, database error" side_effects="inserts triggers row, emits trigger.created audit log"]
+// CIL[DOC-MICRO logic_summary="Validate required fields and user context, bypass permission for system admins, resolve create permission, insert row with timestamps and created_by, then emit audit log" notable_decisions="Replicates isSystemAdmin(ctx)-then-resolveFirstSurfacePermissions pattern from apps/roles/types; previously had a bug by passing principal instead of ctx"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.90" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
 export const create = createHandler(async (ctx, body) => {
   const { app_id, name, description, event_type, pipeline_id, config, metadata } = body
 
@@ -321,21 +330,21 @@ export const create = createHandler(async (ctx, body) => {
 
   return data
 })
-// CIL[END chunk_id="triggers_create_1783931956"]
-// CIL[BEGIN chunk_id="triggers_update_1783931956" type="function" identity="update" parent="none"]
-// CIL[DOC-MACRO purpose="Update existing trigger with field allowlist"]
-// CIL[DOC-RESPONSIBILITY responsibility="Handle trigger updates with validation and audit logging"]
-// CIL[DOC-CONTEXT module="triggers" layer="api-handler" related_files="[]"]
-// CIL[DOC-CONTRACT inputs="none" outputs="updated trigger record" errors="throws" side_effects="database update, audit log"]
-// CIL[DOC-MICRO logic_summary="Updates only allowed fields, adds timestamp, emits audit log" notable_decisions="[]"]
-// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
-// CIL[DOC-STABILITY stability="stable"]
-// CIL[DOC-VECTOR type="context" content="Layer: api-handler. Direct callers: 0. Direct calls: 0. Related files: none."]
-// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
-// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
-// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="context" content="purpose='Create a new trigger record after permission check'; No verified external callers; imports: .framework/functions/_shared/middleware.ts,.framework/functions/_shared/db.ts,.framework/functions/_shared/audit.ts"]
+// CIL[DOC-VECTOR type="blast_radius" content="No direct caller data from CIL graph; local impact only"]
+// CIL[DOC-VECTOR type="configuration" content="No environment or build configuration dependencies identified"]
+// CIL[DOC-VECTOR type="constraint" content="Standard runtime; no special invariants documented"]
 // CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
 // CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
+// CIL[END stable_id="~/.framework/functions/triggers.ts:create:constant"]
+// CIL[BEGIN stable_id="~/.framework/functions/triggers.ts:update:constant" type="constant" identity="update" parent="~/.framework/functions/triggers.ts"]
+// CIL[DOC-MACRO purpose="Update an existing trigger's allowed fields"]
+// CIL[DOC-RESPONSIBILITY responsibility="Apply partial updates to a trigger record, set updated_at and emit an audit log"]
+// CIL[DOC-CONTEXT module="triggers" layer="functions" related_files=".framework/functions/_shared/audit.ts,.framework/functions/_shared/db.ts,.framework/functions/_shared/middleware.ts,.framework/functions/_shared/permissions.ts,.framework/functions/_shared/principal.ts,.framework/functions/triggers.ts"]
+// CIL[DOC-CONTRACT inputs="body or query {id}, updates {name, description, config, pipeline_id, metadata, is_active, event_type, app_id}" outputs="updated trigger record" errors="missing id, database error" side_effects="updates triggers row, emits trigger.updated audit log"]
+// CIL[DOC-MICRO logic_summary="Resolve id, build updateData from allowed keys plus updated_at, perform the update, then log" notable_decisions="No explicit permission call; relies on caller middleware"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.90" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
 export const update = createHandler(async (ctx, body) => {
   const id = body?.id || ctx.query?.id
   const { id: _bodyId, ...updates } = body || {}
@@ -366,21 +375,21 @@ export const update = createHandler(async (ctx, body) => {
 
   return data
 })
-// CIL[END chunk_id="triggers_update_1783931956"]
-// CIL[BEGIN chunk_id="triggers_remove_1783931956" type="function" identity="remove" parent="none"]
-// CIL[DOC-MACRO purpose="Soft delete trigger with validation and audit"]
-// CIL[DOC-RESPONSIBILITY responsibility="Handle trigger deletion with safety checks and logging"]
-// CIL[DOC-CONTEXT module="triggers" layer="api-handler" related_files="[]"]
-// CIL[DOC-CONTRACT inputs="none" outputs="success indicator" errors="throws" side_effects="database update, audit log"]
-// CIL[DOC-MICRO logic_summary="Validates trigger exists, soft deletes by setting is_active=false, emits audit log" notable_decisions="[]"]
-// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
-// CIL[DOC-STABILITY stability="stable"]
-// CIL[DOC-VECTOR type="context" content="Layer: api-handler. Direct callers: 0. Direct calls: 0. Related files: none."]
-// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
-// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
-// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="context" content="purpose='Update an existing trigger's allowed fields'; No verified external callers; imports: .framework/functions/_shared/middleware.ts,.framework/functions/_shared/db.ts,.framework/functions/_shared/audit.ts"]
+// CIL[DOC-VECTOR type="blast_radius" content="No direct caller data from CIL graph; local impact only"]
+// CIL[DOC-VECTOR type="configuration" content="No environment or build configuration dependencies identified"]
+// CIL[DOC-VECTOR type="constraint" content="Standard runtime; no special invariants documented"]
 // CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
 // CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
+// CIL[END stable_id="~/.framework/functions/triggers.ts:update:constant"]
+// CIL[BEGIN stable_id="~/.framework/functions/triggers.ts:remove:constant" type="constant" identity="remove" parent="~/.framework/functions/triggers.ts"]
+// CIL[DOC-MACRO purpose="Soft-delete a trigger by marking it inactive"]
+// CIL[DOC-RESPONSIBILITY responsibility="Verify the trigger exists, deactivate it, and log deletion"]
+// CIL[DOC-CONTEXT module="triggers" layer="functions" related_files=".framework/functions/_shared/audit.ts,.framework/functions/_shared/db.ts,.framework/functions/_shared/middleware.ts,.framework/functions/_shared/permissions.ts,.framework/functions/_shared/principal.ts,.framework/functions/triggers.ts"]
+// CIL[DOC-CONTRACT inputs="body/query {id}" outputs="{success: true}" errors="missing id, trigger not found, database error" side_effects="sets is_active=false and updated_at, emits trigger.deleted audit log"]
+// CIL[DOC-MICRO logic_summary="Look up the id, fetch name and event_type, perform a soft-delete and emit a log with the before state" notable_decisions="Soft delete via is_active=false to preserve execution history"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.90" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
 export const remove = createHandler(async (ctx, body) => {
   const id = body?.id || ctx.query?.id
 
@@ -415,21 +424,21 @@ export const remove = createHandler(async (ctx, body) => {
 
   return { success: true }
 })
-// CIL[END chunk_id="triggers_remove_1783931956"]
-// CIL[BEGIN chunk_id="triggers_toggle_1783931956" type="function" identity="toggle" parent="none"]
-// CIL[DOC-MACRO purpose="Toggle trigger active status with audit logging"]
-// CIL[DOC-RESPONSIBILITY responsibility="Handle trigger activation/deactivation with validation"]
-// CIL[DOC-CONTEXT module="triggers" layer="api-handler" related_files="[]"]
-// CIL[DOC-CONTRACT inputs="none" outputs="updated trigger record" errors="throws" side_effects="database update, audit log"]
-// CIL[DOC-MICRO logic_summary="Flips is_active boolean, updates timestamp, emits audit log" notable_decisions="[]"]
-// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
-// CIL[DOC-STABILITY stability="stable"]
-// CIL[DOC-VECTOR type="context" content="Layer: api-handler. Direct callers: 0. Direct calls: 0. Related files: none."]
-// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
-// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
-// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="context" content="purpose='Soft-delete a trigger by marking it inactive'; No verified external callers; imports: .framework/functions/_shared/middleware.ts,.framework/functions/_shared/db.ts,.framework/functions/_shared/audit.ts"]
+// CIL[DOC-VECTOR type="blast_radius" content="No direct caller data from CIL graph; local impact only"]
+// CIL[DOC-VECTOR type="configuration" content="No environment or build configuration dependencies identified"]
+// CIL[DOC-VECTOR type="constraint" content="Standard runtime; no special invariants documented"]
 // CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
 // CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
+// CIL[END stable_id="~/.framework/functions/triggers.ts:remove:constant"]
+// CIL[BEGIN stable_id="~/.framework/functions/triggers.ts:toggle:constant" type="constant" identity="toggle" parent="~/.framework/functions/triggers.ts"]
+// CIL[DOC-MACRO purpose="Toggle the active state of a trigger"]
+// CIL[DOC-RESPONSIBILITY responsibility="Flip is_active for a trigger and emit an audit log"]
+// CIL[DOC-CONTEXT module="triggers" layer="functions" related_files=".framework/functions/_shared/audit.ts,.framework/functions/_shared/db.ts,.framework/functions/_shared/middleware.ts,.framework/functions/_shared/permissions.ts,.framework/functions/_shared/principal.ts,.framework/functions/triggers.ts"]
+// CIL[DOC-CONTRACT inputs="body/query {id}" outputs="updated trigger record" errors="missing id, trigger not found, database error" side_effects="toggles is_active and updated_at, emits trigger.toggled audit log"]
+// CIL[DOC-MICRO logic_summary="Fetch the current is_active and name, compute the new status, update the row and emit a before/after log" notable_decisions="Uses a single-row select and update and returns the updated record"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.90" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
 export const toggle = createHandler(async (ctx, body) => {
   const id = body?.id || ctx.query?.id
 
@@ -471,8 +480,22 @@ export const toggle = createHandler(async (ctx, body) => {
 
   return data
 })
-// CIL[END chunk_id="triggers_toggle_1783931956"]
-
+// CIL[DOC-VECTOR type="context" content="purpose='Toggle the active state of a trigger'; No verified external callers; imports: .framework/functions/_shared/middleware.ts,.framework/functions/_shared/db.ts,.framework/functions/_shared/audit.ts"]
+// CIL[DOC-VECTOR type="blast_radius" content="No direct caller data from CIL graph; local impact only"]
+// CIL[DOC-VECTOR type="configuration" content="No environment or build configuration dependencies identified"]
+// CIL[DOC-VECTOR type="constraint" content="Standard runtime; no special invariants documented"]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
+// CIL[END stable_id="~/.framework/functions/triggers.ts:toggle:constant"]
+
+// CIL[BEGIN stable_id="~/.framework/functions/triggers.ts:handler:constant" type="constant" identity="handler" parent="~/.framework/functions/triggers.ts"]
+// CIL[DOC-MACRO purpose="Central action dispatcher for the triggers function"]
+// CIL[DOC-RESPONSIBILITY responsibility="Route incoming action query to the appropriate trigger sub-handler"]
+// CIL[DOC-CONTEXT module="triggers" layer="functions" related_files=".framework/functions/_shared/audit.ts,.framework/functions/_shared/db.ts,.framework/functions/_shared/middleware.ts,.framework/functions/_shared/permissions.ts,.framework/functions/_shared/principal.ts,.framework/functions/triggers.ts"]
+// CIL[DOC-CONTRACT inputs="ctx.query {action}, body" outputs="result from the chosen sub-handler" errors="unknown action or sub-handler error" side_effects="delegates to the listed sub-handlers"]
+// CIL[DOC-MICRO logic_summary="Read the action from the query, switch to the matching named handler, await and return its result, and throw for unsupported actions" notable_decisions="All sub-handlers are closed over in the same module; the default action throws an error"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.90" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
 export const handler = createHandler(async (ctx, body) => {
   const { action } = ctx.query || {}
 
@@ -496,4 +519,11 @@ export const handler = createHandler(async (ctx, body) => {
     default:
       throw new Error(`Unsupported action: ${action}`)
   }
-})
+})
+// CIL[DOC-VECTOR type="context" content="purpose='Central action dispatcher for the triggers function'; No verified external callers; imports: .framework/functions/_shared/middleware.ts,.framework/functions/_shared/db.ts,.framework/functions/_shared/audit.ts"]
+// CIL[DOC-VECTOR type="blast_radius" content="No direct caller data from CIL graph; local impact only"]
+// CIL[DOC-VECTOR type="configuration" content="No environment or build configuration dependencies identified"]
+// CIL[DOC-VECTOR type="constraint" content="Standard runtime; no special invariants documented"]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
+// CIL[END stable_id="~/.framework/functions/triggers.ts:handler:constant"]