whale-code 6.5.6 → 6.5.7

package/dist/server/handlers/workflow-steps-maintenance.js

@@ -0,0 +1,256 @@
+// workflow-steps-maintenance.ts — Orphan cleanup, DLQ retry, event trigger processing
+// Extracted from workflow-steps.ts.
+
+import { randomUUID } from "node:crypto";
+import { evaluateCondition } from "../lib/template-resolver.js";
+import { sanitizeError } from "../../shared/agent-core.js";
+import { log } from "./workflow-steps-types.js";
+import { executeInlineChain } from "./workflow-steps-engine.js";
+
+// ============================================================================
+// ORPHANED STEP CLEANUP — cancel step_runs whose parent run is terminal
+// ============================================================================
+
+let lastOrphanCleanupAt = 0;
+const ORPHAN_CLEANUP_INTERVAL_MS = 60_000;
+export async function cleanupOrphanedSteps(supabase) {
+  if (Date.now() - lastOrphanCleanupAt < ORPHAN_CLEANUP_INTERVAL_MS) return 0;
+  lastOrphanCleanupAt = Date.now();
+  const {
+    data: orphans
+  } = await supabase.from("workflow_step_runs").select("id, run_id, step_key, status, workflow_runs!workflow_step_runs_run_id_fkey!inner(status)").in("status", ["pending", "retrying", "waiting"]).in("workflow_runs.status", ["success", "failed", "cancelled", "timed_out"]).limit(100);
+  if (!orphans?.length) return 0;
+  let cleaned = 0;
+  for (const step of orphans) {
+    const runStatus = step.workflow_runs?.status;
+    await supabase.from("workflow_step_runs").update({
+      status: "cancelled",
+      error_message: `Orphaned: parent run already ${runStatus}`,
+      completed_at: new Date().toISOString()
+    }).eq("id", step.id);
+    cleaned++;
+  }
+  if (cleaned > 0) {
+    log.info({
+      cleaned
+    }, "cleaned up orphaned step runs");
+  }
+  return cleaned;
+}
+
+// ============================================================================
+// DLQ RETRY MECHANISM — retry transient DLQ failures
+// ============================================================================
+
+let lastDlqRetryAt = 0;
+const DLQ_RETRY_INTERVAL_MS = 60_000;
+const DLQ_RETRY_BATCH_SIZE = 5;
+const DLQ_MAX_RETRY_ATTEMPTS = 3;
+export async function processDlqRetries(supabase) {
+  if (Date.now() - lastDlqRetryAt < DLQ_RETRY_INTERVAL_MS) return 0;
+  lastDlqRetryAt = Date.now();
+  const {
+    data: entries
+  } = await supabase.from("workflow_dlq").select("id, workflow_id, store_id, trigger_type, trigger_payload, error_message, retry_count, last_retry_at").or("error_message.ilike.%timed out%,error_message.ilike.%timeout%,error_message.ilike.%network%,error_message.ilike.%ECONNREFUSED%,error_message.ilike.%fetch failed%").eq("status", "pending").lt("retry_count", DLQ_MAX_RETRY_ATTEMPTS).order("created_at", {
+    ascending: true
+  }).limit(DLQ_RETRY_BATCH_SIZE);
+  if (!entries?.length) return 0;
+  let retried = 0;
+  const now = Date.now();
+  for (const entry of entries) {
+    try {
+      if (entry.last_retry_at) {
+        const backoffMs = Math.pow(2, entry.retry_count || 0) * 120_000;
+        const elapsed = now - new Date(entry.last_retry_at).getTime();
+        if (elapsed < backoffMs) continue;
+      }
+      const {
+        data: result,
+        error
+      } = await supabase.rpc("start_workflow_run", {
+        p_workflow_id: entry.workflow_id,
+        p_store_id: entry.store_id,
+        p_trigger_type: entry.trigger_type || "dlq_retry",
+        p_trigger_payload: {
+          ...(entry.trigger_payload || {}),
+          _dlq_retry: true,
+          _dlq_entry_id: entry.id
+        },
+        p_idempotency_key: `dlq_retry:${entry.id}:${(entry.retry_count || 0) + 1}`
+      });
+      if (error || !result?.success) {
+        await supabase.from("workflow_dlq").update({
+          retry_count: (entry.retry_count || 0) + 1,
+          last_error: error?.message || result?.error || "retry failed",
+          last_retry_at: new Date().toISOString()
+        }).eq("id", entry.id);
+        continue;
+      }
+      await supabase.from("workflow_dlq").update({
+        status: "retried",
+        retry_count: (entry.retry_count || 0) + 1,
+        retried_run_id: result.run_id,
+        last_retry_at: new Date().toISOString()
+      }).eq("id", entry.id);
+      if (result.run_id) {
+        const traceId = randomUUID();
+        await supabase.from("workflow_runs").update({
+          trace_id: traceId
+        }).eq("id", result.run_id);
+        try {
+          await executeInlineChain(supabase, result.run_id);
+        } catch (err) {
+          log.error({
+            runId: result.run_id,
+            err: err.message
+          }, "inline chain failed for DLQ retry");
+        }
+      }
+      retried++;
+      log.info({
+        dlqEntryId: entry.id,
+        workflowId: entry.workflow_id,
+        retryCount: (entry.retry_count || 0) + 1
+      }, "DLQ entry retried");
+    } catch (err) {
+      log.warn({
+        dlqEntryId: entry.id,
+        err: sanitizeError(err)
+      }, "DLQ retry error");
+      await supabase.from("workflow_dlq").update({
+        retry_count: (entry.retry_count || 0) + 1,
+        last_retry_at: new Date().toISOString(),
+        last_error: sanitizeError(err)
+      }).eq("id", entry.id);
+    }
+  }
+  return retried;
+}
+
+// ============================================================================
+// EVENT TRIGGER PROCESSING — match inbound events to workflow subscriptions
+// ============================================================================
+
+export async function processEventTriggers(supabase) {
+  let events = null;
+  const {
+    data: claimed,
+    error: claimErr
+  } = await supabase.rpc("claim_pending_events", {
+    batch_size: 20
+  });
+  if (!claimErr && claimed?.length) {
+    events = claimed;
+  } else {
+    if (claimErr) log.debug({
+      err: claimErr.message
+    }, "claim_pending_events RPC unavailable, using fallback");
+    const {
+      data: fallbackEvents
+    } = await supabase.from("automation_events").select("id, store_id, event_type, event_payload, source").eq("status", "pending").order("created_at", {
+      ascending: true
+    }).limit(20);
+    if (fallbackEvents?.length) {
+      const eventIds = fallbackEvents.map(e => e.id);
+      await supabase.from("automation_events").update({
+        status: "processing"
+      }).in("id", eventIds);
+      events = fallbackEvents;
+    }
+  }
+  if (!events?.length) return 0;
+  const uniqueStoreIds = Array.from(new Set(events.map(e => e.store_id)));
+  const uniqueEventTypes = Array.from(new Set(events.map(e => e.event_type)));
+  const {
+    data: allSubs
+  } = await supabase.from("workflow_event_subscriptions").select("id, workflow_id, filter_expression, store_id, event_type").in("store_id", uniqueStoreIds).in("event_type", uniqueEventTypes).eq("is_active", true);
+  const subsMap = new Map();
+  for (const sub of allSubs || []) {
+    const key = `${sub.store_id}:${sub.event_type}`;
+    if (!subsMap.has(key)) subsMap.set(key, []);
+    subsMap.get(key).push(sub);
+  }
+  let processed = 0;
+  for (const event of events) {
+    try {
+      const subs = subsMap.get(`${event.store_id}:${event.event_type}`) || [];
+      if (!subs.length) {
+        await supabase.from("automation_events").update({
+          status: "processed",
+          processed_at: new Date().toISOString()
+        }).eq("id", event.id);
+        processed++;
+        continue;
+      }
+      for (const sub of subs) {
+        if (sub.filter_expression) {
+          try {
+            const ctx = {
+              trigger: event.event_payload || {},
+              steps: {}
+            };
+            const pass = evaluateCondition(sub.filter_expression, ctx);
+            if (!pass) continue;
+          } catch {
+            continue;
+          }
+        }
+        const idempotencyKey = `event:${event.id}:${sub.workflow_id}`;
+        const {
+          data: result,
+          error: startErr
+        } = await supabase.rpc("start_workflow_run", {
+          p_workflow_id: sub.workflow_id,
+          p_store_id: event.store_id,
+          p_trigger_type: "event",
+          p_trigger_payload: {
+            ...(event.event_payload || {}),
+            _event_id: event.id,
+            _event_type: event.event_type,
+            _event_source: event.source
+          },
+          p_idempotency_key: idempotencyKey
+        });
+        if (startErr || !result?.success) {
+          log.error({
+            workflowId: sub.workflow_id,
+            eventId: event.id,
+            err: startErr?.message || result?.error
+          }, "failed to start event-triggered workflow");
+          continue;
+        }
+        if (result.run_id && !result.deduplicated) {
+          const traceId = randomUUID();
+          await supabase.from("workflow_runs").update({
+            trace_id: traceId
+          }).eq("id", result.run_id);
+          try {
+            await executeInlineChain(supabase, result.run_id);
+          } catch (err) {
+            log.error({
+              runId: result.run_id,
+              err: err.message
+            }, "inline chain failed for event run");
+          }
+        }
+      }
+      await supabase.from("automation_events").update({
+        status: "processed",
+        processed_at: new Date().toISOString()
+      }).eq("id", event.id);
+      processed++;
+    } catch (err) {
+      await supabase.from("automation_events").update({
+        status: "failed",
+        processed_at: new Date().toISOString(),
+        error_message: sanitizeError(err)
+      }).eq("id", event.id);
+      log.error({
+        eventId: event.id,
+        err: sanitizeError(err)
+      }, "error processing event trigger");
+    }
+  }
+  return processed;
+}
+//# sourceMappingURL=workflow-steps-maintenance.js.map

package/dist/server/handlers/workflow-steps-maintenance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-steps-maintenance.js","names":["randomUUID","evaluateCondition","sanitizeError","log","executeInlineChain","lastOrphanCleanupAt","ORPHAN_CLEANUP_INTERVAL_MS","cleanupOrphanedSteps","supabase","Date","now","data","orphans","from","select","in","limit","length","cleaned","step","runStatus","workflow_runs","status","update","error_message","completed_at","toISOString","eq","id","info","lastDlqRetryAt","DLQ_RETRY_INTERVAL_MS","DLQ_RETRY_BATCH_SIZE","DLQ_MAX_RETRY_ATTEMPTS","processDlqRetries","entries","or","lt","order","ascending","retried","entry","last_retry_at","backoffMs","Math","pow","retry_count","elapsed","getTime","result","error","rpc","p_workflow_id","workflow_id","p_store_id","store_id","p_trigger_type","trigger_type","p_trigger_payload","trigger_payload","_dlq_retry","_dlq_entry_id","p_idempotency_key","success","last_error","message","retried_run_id","run_id","traceId","trace_id","err","runId","dlqEntryId","workflowId","retryCount","warn","processEventTriggers","events","claimed","claimErr","batch_size","debug","fallbackEvents","eventIds","map","e","uniqueStoreIds","Array","Set","uniqueEventTypes","event_type","allSubs","subsMap","Map","sub","key","has","set","get","push","processed","event","subs","processed_at","filter_expression","ctx","trigger","event_payload","steps","pass","idempotencyKey","startErr","_event_id","_event_type","_event_source","source","eventId","deduplicated"],"sources":["../../../src/server/handlers/workflow-steps-maintenance.ts"],"sourcesContent":["// workflow-steps-maintenance.ts — Orphan cleanup, DLQ retry, event trigger processing\n// Extracted from workflow-steps.ts.\n\nimport { randomUUID } from \"node:crypto\";\nimport type { SupabaseClient } from \"@supabase/supabase-js\";\nimport { evaluateCondition, type TemplateContext } from \"../lib/template-resolver.js\";\nimport { sanitizeError } from \"../../shared/agent-core.js\";\nimport { log } from \"./workflow-steps-types.js\";\nimport { executeInlineChain } from \"./workflow-steps-engine.js\";\n\n// ============================================================================\n// ORPHANED STEP CLEANUP — cancel step_runs whose parent run is terminal\n// ============================================================================\n\nlet lastOrphanCleanupAt = 0;\nconst ORPHAN_CLEANUP_INTERVAL_MS = 60_000;\n\nexport async function cleanupOrphanedSteps(supabase: SupabaseClient): Promise<number> {\n  if (Date.now() - lastOrphanCleanupAt < ORPHAN_CLEANUP_INTERVAL_MS) return 0;\n  lastOrphanCleanupAt = Date.now();\n\n  const { data: orphans } = await supabase.from(\"workflow_step_runs\")\n    .select(\"id, run_id, step_key, status, workflow_runs!workflow_step_runs_run_id_fkey!inner(status)\")\n    .in(\"status\", [\"pending\", \"retrying\", \"waiting\"])\n    .in(\"workflow_runs.status\", [\"success\", \"failed\", \"cancelled\", \"timed_out\"])\n    .limit(100);\n\n  if (!orphans?.length) return 0;\n\n  let cleaned = 0;\n  for (const step of orphans) {\n    const runStatus = (step as any).workflow_runs?.status;\n    await supabase.from(\"workflow_step_runs\").update({\n      status: \"cancelled\",\n      error_message: `Orphaned: parent run already ${runStatus}`,\n      completed_at: new Date().toISOString(),\n    }).eq(\"id\", step.id);\n    cleaned++;\n  }\n\n  if (cleaned > 0) {\n    log.info({ cleaned }, \"cleaned up orphaned step runs\");\n  }\n  return cleaned;\n}\n\n// ============================================================================\n// DLQ RETRY MECHANISM — retry transient DLQ failures\n// ============================================================================\n\nlet lastDlqRetryAt = 0;\nconst DLQ_RETRY_INTERVAL_MS = 60_000;\nconst DLQ_RETRY_BATCH_SIZE = 5;\nconst DLQ_MAX_RETRY_ATTEMPTS = 3;\n\nexport async function processDlqRetries(supabase: SupabaseClient): Promise<number> {\n  if (Date.now() - lastDlqRetryAt < DLQ_RETRY_INTERVAL_MS) return 0;\n  lastDlqRetryAt = Date.now();\n\n  const { data: entries } = await supabase.from(\"workflow_dlq\")\n    .select(\"id, workflow_id, store_id, trigger_type, trigger_payload, error_message, retry_count, last_retry_at\")\n    .or(\"error_message.ilike.%timed out%,error_message.ilike.%timeout%,error_message.ilike.%network%,error_message.ilike.%ECONNREFUSED%,error_message.ilike.%fetch failed%\")\n    .eq(\"status\", \"pending\")\n    .lt(\"retry_count\", DLQ_MAX_RETRY_ATTEMPTS)\n    .order(\"created_at\", { ascending: true })\n    .limit(DLQ_RETRY_BATCH_SIZE);\n\n  if (!entries?.length) return 0;\n\n  let retried = 0;\n  const now = Date.now();\n  for (const entry of entries) {\n    try {\n      if (entry.last_retry_at) {\n        const backoffMs = Math.pow(2, entry.retry_count || 0) * 120_000;\n        const elapsed = now - new Date(entry.last_retry_at).getTime();\n        if (elapsed < backoffMs) continue;\n      }\n\n      const { data: result, error } = await supabase.rpc(\"start_workflow_run\", {\n        p_workflow_id: entry.workflow_id,\n        p_store_id: entry.store_id,\n        p_trigger_type: entry.trigger_type || \"dlq_retry\",\n        p_trigger_payload: { ...(entry.trigger_payload || {}), _dlq_retry: true, _dlq_entry_id: entry.id },\n        p_idempotency_key: `dlq_retry:${entry.id}:${(entry.retry_count || 0) + 1}`,\n      });\n\n      if (error || !result?.success) {\n        await supabase.from(\"workflow_dlq\").update({\n          retry_count: (entry.retry_count || 0) + 1,\n          last_error: error?.message || result?.error || \"retry failed\",\n          last_retry_at: new Date().toISOString(),\n        }).eq(\"id\", entry.id);\n        continue;\n      }\n\n      await supabase.from(\"workflow_dlq\").update({\n        status: \"retried\",\n        retry_count: (entry.retry_count || 0) + 1,\n        retried_run_id: result.run_id,\n        last_retry_at: new Date().toISOString(),\n      }).eq(\"id\", entry.id);\n\n      if (result.run_id) {\n        const traceId = randomUUID();\n        await supabase.from(\"workflow_runs\").update({ trace_id: traceId }).eq(\"id\", result.run_id);\n        try { await executeInlineChain(supabase, result.run_id); } catch (err) {\n          log.error({ runId: result.run_id, err: (err as Error).message }, \"inline chain failed for DLQ retry\");\n        }\n      }\n\n      retried++;\n      log.info({ dlqEntryId: entry.id, workflowId: entry.workflow_id, retryCount: (entry.retry_count || 0) + 1 }, \"DLQ entry retried\");\n    } catch (err) {\n      log.warn({ dlqEntryId: entry.id, err: sanitizeError(err) }, \"DLQ retry error\");\n      await supabase.from(\"workflow_dlq\").update({\n        retry_count: (entry.retry_count || 0) + 1,\n        last_retry_at: new Date().toISOString(),\n        last_error: sanitizeError(err),\n      }).eq(\"id\", entry.id);\n    }\n  }\n\n  return retried;\n}\n\n// ============================================================================\n// EVENT TRIGGER PROCESSING — match inbound events to workflow subscriptions\n// ============================================================================\n\nexport async function processEventTriggers(supabase: SupabaseClient): Promise<number> {\n  let events: { id: string; store_id: string; event_type: string; event_payload: Record<string, unknown>; source: string }[] | null = null;\n\n  const { data: claimed, error: claimErr } = await supabase.rpc(\"claim_pending_events\", { batch_size: 20 });\n  if (!claimErr && claimed?.length) {\n    events = claimed;\n  } else {\n    if (claimErr) log.debug({ err: claimErr.message }, \"claim_pending_events RPC unavailable, using fallback\");\n    const { data: fallbackEvents } = await supabase.from(\"automation_events\")\n      .select(\"id, store_id, event_type, event_payload, source\")\n      .eq(\"status\", \"pending\")\n      .order(\"created_at\", { ascending: true })\n      .limit(20);\n    if (fallbackEvents?.length) {\n      const eventIds = fallbackEvents.map(e => e.id);\n      await supabase.from(\"automation_events\").update({ status: \"processing\" }).in(\"id\", eventIds);\n      events = fallbackEvents;\n    }\n  }\n\n  if (!events?.length) return 0;\n\n  const uniqueStoreIds = Array.from(new Set(events.map(e => e.store_id)));\n  const uniqueEventTypes = Array.from(new Set(events.map(e => e.event_type)));\n  const { data: allSubs } = await supabase.from(\"workflow_event_subscriptions\")\n    .select(\"id, workflow_id, filter_expression, store_id, event_type\")\n    .in(\"store_id\", uniqueStoreIds)\n    .in(\"event_type\", uniqueEventTypes)\n    .eq(\"is_active\", true);\n\n  const subsMap = new Map<string, typeof allSubs>();\n  for (const sub of (allSubs || [])) {\n    const key = `${sub.store_id}:${sub.event_type}`;\n    if (!subsMap.has(key)) subsMap.set(key, []);\n    subsMap.get(key)!.push(sub);\n  }\n\n  let processed = 0;\n\n  for (const event of events) {\n    try {\n      const subs = subsMap.get(`${event.store_id}:${event.event_type}`) || [];\n\n      if (!subs.length) {\n        await supabase.from(\"automation_events\")\n          .update({ status: \"processed\", processed_at: new Date().toISOString() })\n          .eq(\"id\", event.id);\n        processed++;\n        continue;\n      }\n\n      for (const sub of subs) {\n        if (sub.filter_expression) {\n          try {\n            const ctx: TemplateContext = { trigger: event.event_payload || {}, steps: {} };\n            const pass = evaluateCondition(sub.filter_expression, ctx);\n            if (!pass) continue;\n          } catch { continue; }\n        }\n\n        const idempotencyKey = `event:${event.id}:${sub.workflow_id}`;\n        const { data: result, error: startErr } = await supabase.rpc(\"start_workflow_run\", {\n          p_workflow_id: sub.workflow_id, p_store_id: event.store_id,\n          p_trigger_type: \"event\",\n          p_trigger_payload: {\n            ...(event.event_payload || {}),\n            _event_id: event.id, _event_type: event.event_type, _event_source: event.source,\n          },\n          p_idempotency_key: idempotencyKey,\n        });\n\n        if (startErr || !result?.success) {\n          log.error({ workflowId: sub.workflow_id, eventId: event.id, err: startErr?.message || result?.error }, \"failed to start event-triggered workflow\");\n          continue;\n        }\n\n        if (result.run_id && !result.deduplicated) {\n          const traceId = randomUUID();\n          await supabase.from(\"workflow_runs\").update({ trace_id: traceId }).eq(\"id\", result.run_id);\n          try { await executeInlineChain(supabase, result.run_id); } catch (err) {\n            log.error({ runId: result.run_id, err: (err as Error).message }, \"inline chain failed for event run\");\n          }\n        }\n      }\n\n      await supabase.from(\"automation_events\")\n        .update({ status: \"processed\", processed_at: new Date().toISOString() })\n        .eq(\"id\", event.id);\n      processed++;\n    } catch (err) {\n      await supabase.from(\"automation_events\")\n        .update({ status: \"failed\", processed_at: new Date().toISOString(), error_message: sanitizeError(err) })\n        .eq(\"id\", event.id);\n      log.error({ eventId: event.id, err: sanitizeError(err) }, \"error processing event trigger\");\n    }\n  }\n\n  return processed;\n}\n"],"mappings":"AAAA;AACA;;AAEA,SAASA,UAAU,QAAQ,aAAa;AAExC,SAASC,iBAAiB,QAA8B,6BAA6B;AACrF,SAASC,aAAa,QAAQ,4BAA4B;AAC1D,SAASC,GAAG,QAAQ,2BAA2B;AAC/C,SAASC,kBAAkB,QAAQ,4BAA4B;;AAE/D;AACA;AACA;;AAEA,IAAIC,mBAAmB,GAAG,CAAC;AAC3B,MAAMC,0BAA0B,GAAG,MAAM;AAEzC,OAAO,eAAeC,oBAAoBA,CAACC,QAAwB,EAAmB;EACpF,IAAIC,IAAI,CAACC,GAAG,CAAC,CAAC,GAAGL,mBAAmB,GAAGC,0BAA0B,EAAE,OAAO,CAAC;EAC3ED,mBAAmB,GAAGI,IAAI,CAACC,GAAG,CAAC,CAAC;EAEhC,MAAM;IAAEC,IAAI,EAAEC;EAAQ,CAAC,GAAG,MAAMJ,QAAQ,CAACK,IAAI,CAAC,oBAAoB,CAAC,CAChEC,MAAM,CAAC,0FAA0F,CAAC,CAClGC,EAAE,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAChDA,EAAE,CAAC,sBAAsB,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAC3EC,KAAK,CAAC,GAAG,CAAC;EAEb,IAAI,CAACJ,OAAO,EAAEK,MAAM,EAAE,OAAO,CAAC;EAE9B,IAAIC,OAAO,GAAG,CAAC;EACf,KAAK,MAAMC,IAAI,IAAIP,OAAO,EAAE;IAC1B,MAAMQ,SAAS,GAAID,IAAI,CAASE,aAAa,EAAEC,MAAM;IACrD,MAAMd,QAAQ,CAACK,IAAI,CAAC,oBAAoB,CAAC,CAACU,MAAM,CAAC;MAC/CD,MAAM,EAAE,WAAW;MACnBE,aAAa,EAAE,gCAAgCJ,SAAS,EAAE;MAC1DK,YAAY,EAAE,IAAIhB,IAAI,CAAC,CAAC,CAACiB,WAAW,CAAC;IACvC,CAAC,CAAC,CAACC,EAAE,CAAC,IAAI,EAAER,IAAI,CAACS,EAAE,CAAC;IACpBV,OAAO,EAAE;EACX;EAEA,IAAIA,OAAO,GAAG,CAAC,EAAE;IACff,GAAG,CAAC0B,IAAI,CAAC;MAAEX;IAAQ,CAAC,EAAE,+BAA+B,CAAC;EACxD;EACA,OAAOA,OAAO;AAChB;;AAEA;AACA;AACA;;AAEA,IAAIY,cAAc,GAAG,CAAC;AACtB,MAAMC,qBAAqB,GAAG,MAAM;AACpC,MAAMC,oBAAoB,GAAG,CAAC;AAC9B,MAAMC,sBAAsB,GAAG,CAAC;AAEhC,OAAO,eAAeC,iBAAiBA,CAAC1B,QAAwB,EAAmB;EACjF,IAAIC,IAAI,CAACC,GAAG,CAAC,CAAC,GAAGoB,cAAc,GAAGC,qBAAqB,EAAE,OAAO,CAAC;EACjED,cAAc,GAAGrB,IAAI,CAACC,GAAG,CAAC,CAAC;EAE3B,MAAM;IAAEC,IAAI,EAAEwB;EAAQ,CAAC,GAAG,MAAM3B,QAAQ,CAACK,IAAI,CAAC,cAAc,CAAC,CAC1DC,MAAM,CAAC,qGAAqG,CAAC,CAC7GsB,EAAE,CAAC,mKAAmK,CAAC,CACvKT,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CACvBU,EAAE,CAAC,aAAa,EAAEJ,sBAAsB,CAAC,CACzCK,KAAK,CAAC,YAAY,EAAE;IAAEC,SAAS,EAAE;EAAK,CAAC,CAAC,CACxCvB,KAAK,CAACgB,oBAAoB,CAAC;EAE9B,IAAI,CAACG,OAAO,EAAElB,MAAM,EAAE,OAAO,CAAC;EAE9B,IAAIuB,OAAO,GAAG,CAAC;EACf,MAAM9B,GAAG,GAAGD,IAAI,CAACC,GAAG,CAAC,CAAC;EACtB,KAAK,MAAM+B,KAAK,IAAIN,OAAO,EAAE;IAC3B,IAAI;MACF,IAAIM,KAAK,CAACC,aAAa,EAAE;QACvB,MAAMC,SAAS,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC,EAAEJ,KAAK,CAACK,WAAW,IAAI,CAAC,CAAC,GAAG,OAAO;QAC/D,MAAMC,OAAO,GAAGrC,GAAG,GAAG,IAAID,IAAI,CAACgC,KAAK,CAACC,aAAa,CAAC,CAACM,OAAO,CAAC,CAAC;QAC7D,IAAID,OAAO,GAAGJ,SAAS,EAAE;MAC3B;MAEA,MAAM;QAAEhC,IAAI,EAAEsC,MAAM;QAAEC;MAAM,CAAC,GAAG,MAAM1C,QAAQ,CAAC2C,GAAG,CAAC,oBAAoB,EAAE;QACvEC,aAAa,EAAEX,KAAK,CAACY,WAAW;QAChCC,UAAU,EAAEb,KAAK,CAACc,QAAQ;QAC1BC,cAAc,EAAEf,KAAK,CAACgB,YAAY,IAAI,WAAW;QACjDC,iBAAiB,EAAE;UAAE,IAAIjB,KAAK,CAACkB,eAAe,IAAI,CAAC,CAAC,CAAC;UAAEC,UAAU,EAAE,IAAI;UAAEC,aAAa,EAAEpB,KAAK,CAACb;QAAG,CAAC;QAClGkC,iBAAiB,EAAE,aAAarB,KAAK,CAACb,EAAE,IAAI,CAACa,KAAK,CAACK,WAAW,IAAI,CAAC,IAAI,CAAC;MAC1E,CAAC,CAAC;MAEF,IAAII,KAAK,IAAI,CAACD,MAAM,EAAEc,OAAO,EAAE;QAC7B,MAAMvD,QAAQ,CAACK,IAAI,CAAC,cAAc,CAAC,CAACU,MAAM,CAAC;UACzCuB,WAAW,EAAE,CAACL,KAAK,CAACK,WAAW,IAAI,CAAC,IAAI,CAAC;UACzCkB,UAAU,EAAEd,KAAK,EAAEe,OAAO,IAAIhB,MAAM,EAAEC,KAAK,IAAI,cAAc;UAC7DR,aAAa,EAAE,IAAIjC,IAAI,CAAC,CAAC,CAACiB,WAAW,CAAC;QACxC,CAAC,CAAC,CAACC,EAAE,CAAC,IAAI,EAAEc,KAAK,CAACb,EAAE,CAAC;QACrB;MACF;MAEA,MAAMpB,QAAQ,CAACK,IAAI,CAAC,cAAc,CAAC,CAACU,MAAM,CAAC;QACzCD,MAAM,EAAE,SAAS;QACjBwB,WAAW,EAAE,CAACL,KAAK,CAACK,WAAW,IAAI,CAAC,IAAI,CAAC;QACzCoB,cAAc,EAAEjB,MAAM,CAACkB,MAAM;QAC7BzB,aAAa,EAAE,IAAIjC,IAAI,CAAC,CAAC,CAACiB,WAAW,CAAC;MACxC,CAAC,CAAC,CAACC,EAAE,CAAC,IAAI,EAAEc,KAAK,CAACb,EAAE,CAAC;MAErB,IAAIqB,MAAM,CAACkB,MAAM,EAAE;QACjB,MAAMC,OAAO,GAAGpE,UAAU,CAAC,CAAC;QAC5B,MAAMQ,QAAQ,CAACK,IAAI,CAAC,eAAe,CAAC,CAACU,MAAM,CAAC;UAAE8C,QAAQ,EAAED;QAAQ,CAAC,CAAC,CAACzC,EAAE,CAAC,IAAI,EAAEsB,MAAM,CAACkB,MAAM,CAAC;QAC1F,IAAI;UAAE,MAAM/D,kBAAkB,CAACI,QAAQ,EAAEyC,MAAM,CAACkB,MAAM,CAAC;QAAE,CAAC,CAAC,OAAOG,GAAG,EAAE;UACrEnE,GAAG,CAAC+C,KAAK,CAAC;YAAEqB,KAAK,EAAEtB,MAAM,CAACkB,MAAM;YAAEG,GAAG,EAAGA,GAAG,CAAWL;UAAQ,CAAC,EAAE,mCAAmC,CAAC;QACvG;MACF;MAEAzB,OAAO,EAAE;MACTrC,GAAG,CAAC0B,IAAI,CAAC;QAAE2C,UAAU,EAAE/B,KAAK,CAACb,EAAE;QAAE6C,UAAU,EAAEhC,KAAK,CAACY,WAAW;QAAEqB,UAAU,EAAE,CAACjC,KAAK,CAACK,WAAW,IAAI,CAAC,IAAI;MAAE,CAAC,EAAE,mBAAmB,CAAC;IAClI,CAAC,CAAC,OAAOwB,GAAG,EAAE;MACZnE,GAAG,CAACwE,IAAI,CAAC;QAAEH,UAAU,EAAE/B,KAAK,CAACb,EAAE;QAAE0C,GAAG,EAAEpE,aAAa,CAACoE,GAAG;MAAE,CAAC,EAAE,iBAAiB,CAAC;MAC9E,MAAM9D,QAAQ,CAACK,IAAI,CAAC,cAAc,CAAC,CAACU,MAAM,CAAC;QACzCuB,WAAW,EAAE,CAACL,KAAK,CAACK,WAAW,IAAI,CAAC,IAAI,CAAC;QACzCJ,aAAa,EAAE,IAAIjC,IAAI,CAAC,CAAC,CAACiB,WAAW,CAAC,CAAC;QACvCsC,UAAU,EAAE9D,aAAa,CAACoE,GAAG;MAC/B,CAAC,CAAC,CAAC3C,EAAE,CAAC,IAAI,EAAEc,KAAK,CAACb,EAAE,CAAC;IACvB;EACF;EAEA,OAAOY,OAAO;AAChB;;AAEA;AACA;AACA;;AAEA,OAAO,eAAeoC,oBAAoBA,CAACpE,QAAwB,EAAmB;EACpF,IAAIqE,MAA6H,GAAG,IAAI;EAExI,MAAM;IAAElE,IAAI,EAAEmE,OAAO;IAAE5B,KAAK,EAAE6B;EAAS,CAAC,GAAG,MAAMvE,QAAQ,CAAC2C,GAAG,CAAC,sBAAsB,EAAE;IAAE6B,UAAU,EAAE;EAAG,CAAC,CAAC;EACzG,IAAI,CAACD,QAAQ,IAAID,OAAO,EAAE7D,MAAM,EAAE;IAChC4D,MAAM,GAAGC,OAAO;EAClB,CAAC,MAAM;IACL,IAAIC,QAAQ,EAAE5E,GAAG,CAAC8E,KAAK,CAAC;MAAEX,GAAG,EAAES,QAAQ,CAACd;IAAQ,CAAC,EAAE,sDAAsD,CAAC;IAC1G,MAAM;MAAEtD,IAAI,EAAEuE;IAAe,CAAC,GAAG,MAAM1E,QAAQ,CAACK,IAAI,CAAC,mBAAmB,CAAC,CACtEC,MAAM,CAAC,iDAAiD,CAAC,CACzDa,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CACvBW,KAAK,CAAC,YAAY,EAAE;MAAEC,SAAS,EAAE;IAAK,CAAC,CAAC,CACxCvB,KAAK,CAAC,EAAE,CAAC;IACZ,IAAIkE,cAAc,EAAEjE,MAAM,EAAE;MAC1B,MAAMkE,QAAQ,GAAGD,cAAc,CAACE,GAAG,CAACC,CAAC,IAAIA,CAAC,CAACzD,EAAE,CAAC;MAC9C,MAAMpB,QAAQ,CAACK,IAAI,CAAC,mBAAmB,CAAC,CAACU,MAAM,CAAC;QAAED,MAAM,EAAE;MAAa,CAAC,CAAC,CAACP,EAAE,CAAC,IAAI,EAAEoE,QAAQ,CAAC;MAC5FN,MAAM,GAAGK,cAAc;IACzB;EACF;EAEA,IAAI,CAACL,MAAM,EAAE5D,MAAM,EAAE,OAAO,CAAC;EAE7B,MAAMqE,cAAc,GAAGC,KAAK,CAAC1E,IAAI,CAAC,IAAI2E,GAAG,CAACX,MAAM,CAACO,GAAG,CAACC,CAAC,IAAIA,CAAC,CAAC9B,QAAQ,CAAC,CAAC,CAAC;EACvE,MAAMkC,gBAAgB,GAAGF,KAAK,CAAC1E,IAAI,CAAC,IAAI2E,GAAG,CAACX,MAAM,CAACO,GAAG,CAACC,CAAC,IAAIA,CAAC,CAACK,UAAU,CAAC,CAAC,CAAC;EAC3E,MAAM;IAAE/E,IAAI,EAAEgF;EAAQ,CAAC,GAAG,MAAMnF,QAAQ,CAACK,IAAI,CAAC,8BAA8B,CAAC,CAC1EC,MAAM,CAAC,0DAA0D,CAAC,CAClEC,EAAE,CAAC,UAAU,EAAEuE,cAAc,CAAC,CAC9BvE,EAAE,CAAC,YAAY,EAAE0E,gBAAgB,CAAC,CAClC9D,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC;EAExB,MAAMiE,OAAO,GAAG,IAAIC,GAAG,CAAyB,CAAC;EACjD,KAAK,MAAMC,GAAG,IAAKH,OAAO,IAAI,EAAE,EAAG;IACjC,MAAMI,GAAG,GAAG,GAAGD,GAAG,CAACvC,QAAQ,IAAIuC,GAAG,CAACJ,UAAU,EAAE;IAC/C,IAAI,CAACE,OAAO,CAACI,GAAG,CAACD,GAAG,CAAC,EAAEH,OAAO,CAACK,GAAG,CAACF,GAAG,EAAE,EAAE,CAAC;IAC3CH,OAAO,CAACM,GAAG,CAACH,GAAG,CAAC,CAAEI,IAAI,CAACL,GAAG,CAAC;EAC7B;EAEA,IAAIM,SAAS,GAAG,CAAC;EAEjB,KAAK,MAAMC,KAAK,IAAIxB,MAAM,EAAE;IAC1B,IAAI;MACF,MAAMyB,IAAI,GAAGV,OAAO,CAACM,GAAG,CAAC,GAAGG,KAAK,CAAC9C,QAAQ,IAAI8C,KAAK,CAACX,UAAU,EAAE,CAAC,IAAI,EAAE;MAEvE,IAAI,CAACY,IAAI,CAACrF,MAAM,EAAE;QAChB,MAAMT,QAAQ,CAACK,IAAI,CAAC,mBAAmB,CAAC,CACrCU,MAAM,CAAC;UAAED,MAAM,EAAE,WAAW;UAAEiF,YAAY,EAAE,IAAI9F,IAAI,CAAC,CAAC,CAACiB,WAAW,CAAC;QAAE,CAAC,CAAC,CACvEC,EAAE,CAAC,IAAI,EAAE0E,KAAK,CAACzE,EAAE,CAAC;QACrBwE,SAAS,EAAE;QACX;MACF;MAEA,KAAK,MAAMN,GAAG,IAAIQ,IAAI,EAAE;QACtB,IAAIR,GAAG,CAACU,iBAAiB,EAAE;UACzB,IAAI;YACF,MAAMC,GAAoB,GAAG;cAAEC,OAAO,EAAEL,KAAK,CAACM,aAAa,IAAI,CAAC,CAAC;cAAEC,KAAK,EAAE,CAAC;YAAE,CAAC;YAC9E,MAAMC,IAAI,GAAG5G,iBAAiB,CAAC6F,GAAG,CAACU,iBAAiB,EAAEC,GAAG,CAAC;YAC1D,IAAI,CAACI,IAAI,EAAE;UACb,CAAC,CAAC,MAAM;YAAE;UAAU;QACtB;QAEA,MAAMC,cAAc,GAAG,SAAST,KAAK,CAACzE,EAAE,IAAIkE,GAAG,CAACzC,WAAW,EAAE;QAC7D,MAAM;UAAE1C,IAAI,EAAEsC,MAAM;UAAEC,KAAK,EAAE6D;QAAS,CAAC,GAAG,MAAMvG,QAAQ,CAAC2C,GAAG,CAAC,oBAAoB,EAAE;UACjFC,aAAa,EAAE0C,GAAG,CAACzC,WAAW;UAAEC,UAAU,EAAE+C,KAAK,CAAC9C,QAAQ;UAC1DC,cAAc,EAAE,OAAO;UACvBE,iBAAiB,EAAE;YACjB,IAAI2C,KAAK,CAACM,aAAa,IAAI,CAAC,CAAC,CAAC;YAC9BK,SAAS,EAAEX,KAAK,CAACzE,EAAE;YAAEqF,WAAW,EAAEZ,KAAK,CAACX,UAAU;YAAEwB,aAAa,EAAEb,KAAK,CAACc;UAC3E,CAAC;UACDrD,iBAAiB,EAAEgD;QACrB,CAAC,CAAC;QAEF,IAAIC,QAAQ,IAAI,CAAC9D,MAAM,EAAEc,OAAO,EAAE;UAChC5D,GAAG,CAAC+C,KAAK,CAAC;YAAEuB,UAAU,EAAEqB,GAAG,CAACzC,WAAW;YAAE+D,OAAO,EAAEf,KAAK,CAACzE,EAAE;YAAE0C,GAAG,EAAEyC,QAAQ,EAAE9C,OAAO,IAAIhB,MAAM,EAAEC;UAAM,CAAC,EAAE,0CAA0C,CAAC;UAClJ;QACF;QAEA,IAAID,MAAM,CAACkB,MAAM,IAAI,CAAClB,MAAM,CAACoE,YAAY,EAAE;UACzC,MAAMjD,OAAO,GAAGpE,UAAU,CAAC,CAAC;UAC5B,MAAMQ,QAAQ,CAACK,IAAI,CAAC,eAAe,CAAC,CAACU,MAAM,CAAC;YAAE8C,QAAQ,EAAED;UAAQ,CAAC,CAAC,CAACzC,EAAE,CAAC,IAAI,EAAEsB,MAAM,CAACkB,MAAM,CAAC;UAC1F,IAAI;YAAE,MAAM/D,kBAAkB,CAACI,QAAQ,EAAEyC,MAAM,CAACkB,MAAM,CAAC;UAAE,CAAC,CAAC,OAAOG,GAAG,EAAE;YACrEnE,GAAG,CAAC+C,KAAK,CAAC;cAAEqB,KAAK,EAAEtB,MAAM,CAACkB,MAAM;cAAEG,GAAG,EAAGA,GAAG,CAAWL;YAAQ,CAAC,EAAE,mCAAmC,CAAC;UACvG;QACF;MACF;MAEA,MAAMzD,QAAQ,CAACK,IAAI,CAAC,mBAAmB,CAAC,CACrCU,MAAM,CAAC;QAAED,MAAM,EAAE,WAAW;QAAEiF,YAAY,EAAE,IAAI9F,IAAI,CAAC,CAAC,CAACiB,WAAW,CAAC;MAAE,CAAC,CAAC,CACvEC,EAAE,CAAC,IAAI,EAAE0E,KAAK,CAACzE,EAAE,CAAC;MACrBwE,SAAS,EAAE;IACb,CAAC,CAAC,OAAO9B,GAAG,EAAE;MACZ,MAAM9D,QAAQ,CAACK,IAAI,CAAC,mBAAmB,CAAC,CACrCU,MAAM,CAAC;QAAED,MAAM,EAAE,QAAQ;QAAEiF,YAAY,EAAE,IAAI9F,IAAI,CAAC,CAAC,CAACiB,WAAW,CAAC,CAAC;QAAEF,aAAa,EAAEtB,aAAa,CAACoE,GAAG;MAAE,CAAC,CAAC,CACvG3C,EAAE,CAAC,IAAI,EAAE0E,KAAK,CAACzE,EAAE,CAAC;MACrBzB,GAAG,CAAC+C,KAAK,CAAC;QAAEkE,OAAO,EAAEf,KAAK,CAACzE,EAAE;QAAE0C,GAAG,EAAEpE,aAAa,CAACoE,GAAG;MAAE,CAAC,EAAE,gCAAgC,CAAC;IAC7F;EACF;EAEA,OAAO8B,SAAS;AAClB","ignoreList":[]}

package/dist/server/handlers/workflow-steps-types.d.ts

@@ -0,0 +1,84 @@
+import type { SupabaseClient } from "@supabase/supabase-js";
+export declare const log: import("pino").Logger<never, boolean>;
+export declare const webhookRateCounters: Map<string, {
+    timestamps: number[];
+}>;
+export declare const MAX_INLINE_DEPTH = 50;
+export declare const CODE_TIMEOUT_MS = 5000;
+export declare const CODE_OUTPUT_MAX = 102400;
+export declare const MAX_FOR_EACH_ITEMS = 1000;
+export declare const MAX_PARALLEL_CHILDREN = 100;
+export declare const GUEST_APPROVAL_SECRET: string;
+export declare const GUEST_APPROVAL_BASE_URL = "https://whale-agent.fly.dev/approvals/guest";
+export declare function generateGuestApprovalUrl(approvalId: string, action: string, expiresAt: string): string | null;
+export declare function verifyGuestApprovalSignature(approvalId: string, action: string, expiresAt: string, sig: string): boolean;
+export declare function logWorkflowEvent(supabase: SupabaseClient, runId: string, eventType: string, payload: Record<string, unknown>, stepRunId?: string): Promise<void>;
+export interface StepClaim {
+    step_run_id: string;
+    run_id: string;
+    workflow_id: string;
+    store_id: string;
+    step_id: string;
+    step_key: string;
+    step_type: string;
+    step_config: Record<string, unknown>;
+    on_success: string | null;
+    on_failure: string | null;
+    timeout_seconds: number;
+    input_schema: Record<string, unknown> | null;
+    step_outputs: Record<string, unknown>;
+    trigger_payload: Record<string, unknown>;
+    attempt_count: number;
+    max_attempts: number;
+    max_steps_per_run: number;
+    input: unknown | null;
+    parent_step_run_id: string | null;
+    retry_delay_seconds: number;
+}
+export interface StepResult {
+    success: boolean;
+    output?: unknown;
+    error?: string;
+    branch?: string;
+}
+export declare function checkFlowControl(supabase: SupabaseClient, step: StepClaim): Promise<{
+    allowed: boolean;
+    reason?: string;
+}>;
+export type ExecuteToolFn = (supabase: SupabaseClient, toolName: string, args: Record<string, unknown>, storeId?: string, traceId?: string) => Promise<{
+    success: boolean;
+    data?: unknown;
+    error?: string;
+}>;
+export type TokenBroadcastFn = (runId: string, stepKey: string, token: string) => void;
+export type StepErrorBroadcastFn = (runId: string, data: {
+    type: "workflow_error";
+    workflow_id: string;
+    run_id: string;
+    step_name: string;
+    step_type: string;
+    error: string;
+    timestamp: string;
+}) => void;
+export type RunAgentQueryFn = (supabase: SupabaseClient, agentId: string, prompt: string, storeId: string, maxTurns?: number, onToken?: (token: string) => void, traceId?: string) => Promise<{
+    success: boolean;
+    response?: string;
+    error?: string;
+}>;
+export declare function setToolExecutor(fn: ExecuteToolFn): void;
+export declare function setAgentExecutor(fn: RunAgentQueryFn): void;
+export declare function setTokenBroadcaster(fn: TokenBroadcastFn): void;
+export declare function setStepErrorBroadcaster(fn: StepErrorBroadcastFn): void;
+export declare function getToolExecutor(): ExecuteToolFn | null;
+export declare function getAgentExecutor(): RunAgentQueryFn | null;
+export declare function getTokenBroadcaster(): TokenBroadcastFn | null;
+export declare function getStepErrorBroadcaster(): StepErrorBroadcastFn | null;
+/** Broadcast a step error to SSE clients and persist error_details on the step run. */
+export declare function surfaceStepError(supabase: SupabaseClient, step: {
+    step_run_id: string;
+    run_id: string;
+    workflow_id: string;
+    step_key: string;
+    step_type: string;
+}, errorMessage: string): Promise<void>;
+export declare function isTransientError(errorMessage?: string | null): boolean;

package/dist/server/handlers/workflow-steps-types.js

@@ -0,0 +1,179 @@
+// workflow-steps-types.ts — Types, constants, guest approval, event journal, flow control, injected executors
+// Extracted from workflow-steps.ts for modularity.
+
+import { createHmac, timingSafeEqual } from "node:crypto";
+import { createLogger } from "../lib/logger.js";
+export const log = createLogger("workflow-steps");
+
+// In-memory sliding-window rate limiter for webhooks (replaces audit_logs read)
+export const webhookRateCounters = new Map();
+
+// ============================================================================
+// CONSTANTS
+// ============================================================================
+
+export const MAX_INLINE_DEPTH = 50;
+export const CODE_TIMEOUT_MS = 5000;
+export const CODE_OUTPUT_MAX = 102_400; // 100KB
+export const MAX_FOR_EACH_ITEMS = 1000; // P2 FIX: Prevent unbounded for_each expansion
+export const MAX_PARALLEL_CHILDREN = 100; // P1 FIX: Cap parallel step fan-out
+export const GUEST_APPROVAL_SECRET = process.env.GUEST_APPROVAL_SECRET || process.env.FLY_INTERNAL_SECRET || "";
+export const GUEST_APPROVAL_BASE_URL = "https://whale-agent.fly.dev/approvals/guest";
+
+// ============================================================================
+// GUEST APPROVAL — HMAC-signed URLs for unauthenticated approvers
+// ============================================================================
+
+export function generateGuestApprovalUrl(approvalId, action, expiresAt) {
+  if (!GUEST_APPROVAL_SECRET) return null;
+  const payload = `${approvalId}:${action}:${expiresAt}`;
+  const sig = createHmac("sha256", GUEST_APPROVAL_SECRET).update(payload).digest("hex");
+  return `${GUEST_APPROVAL_BASE_URL}/${approvalId}?action=${action}&expires=${encodeURIComponent(expiresAt)}&sig=${sig}`;
+}
+export function verifyGuestApprovalSignature(approvalId, action, expiresAt, sig) {
+  if (!GUEST_APPROVAL_SECRET) return false;
+  const payload = `${approvalId}:${action}:${expiresAt}`;
+  const expected = createHmac("sha256", GUEST_APPROVAL_SECRET).update(payload).digest("hex");
+  try {
+    return timingSafeEqual(Buffer.from(sig, "hex"), Buffer.from(expected, "hex"));
+  } catch {
+    return false;
+  }
+}
+
+// ============================================================================
+// EVENT JOURNAL — append-only state transition log
+// ============================================================================
+
+export async function logWorkflowEvent(supabase, runId, eventType, payload, stepRunId) {
+  const {
+    error
+  } = await supabase.from("workflow_events").insert({
+    run_id: runId,
+    step_run_id: stepRunId || null,
+    event_type: eventType,
+    payload
+  });
+  if (error) log.warn({
+    err: error.message,
+    runId,
+    eventType
+  }, "logWorkflowEvent insert failed");
+}
+
+// ============================================================================
+// TYPES
+// ============================================================================
+
+// ============================================================================
+// FLOW CONTROL — concurrency + rate limiting at step level
+// ============================================================================
+
+export async function checkFlowControl(supabase, step) {
+  const config = step.step_config;
+  const concurrencyLimit = config.concurrency_limit;
+  if (concurrencyLimit && concurrencyLimit > 0) {
+    const concurrencyKey = config.concurrency_key || step.step_key;
+    const {
+      count
+    } = await supabase.from("workflow_step_runs").select("id", {
+      count: "exact",
+      head: true
+    }).eq("step_key", concurrencyKey).eq("status", "running").eq("store_id", step.store_id).neq("id", step.step_run_id);
+    if ((count || 0) >= concurrencyLimit) {
+      return {
+        allowed: false,
+        reason: `Concurrency limit ${concurrencyLimit} reached for '${concurrencyKey}'`
+      };
+    }
+  }
+  const rateLimit = config.rate_limit;
+  const rateWindowSec = config.rate_window_seconds || 60;
+  if (rateLimit && rateLimit > 0) {
+    const windowStart = new Date(Date.now() - rateWindowSec * 1000).toISOString();
+    const {
+      count
+    } = await supabase.from("workflow_step_runs").select("id", {
+      count: "exact",
+      head: true
+    }).eq("step_key", step.step_key).eq("store_id", step.store_id).in("status", ["success", "running"]).gte("started_at", windowStart);
+    if ((count || 0) >= rateLimit) {
+      return {
+        allowed: false,
+        reason: `Rate limit ${rateLimit}/${rateWindowSec}s reached for '${step.step_key}'`
+      };
+    }
+  }
+  return {
+    allowed: true
+  };
+}
+
+// ============================================================================
+// INJECTED EXECUTORS (set from index.ts to avoid circular deps)
+// ============================================================================
+
+let _executeTool = null;
+let _runAgentQuery = null;
+let _broadcastToken = null;
+let _broadcastStepError = null;
+export function setToolExecutor(fn) {
+  _executeTool = fn;
+}
+export function setAgentExecutor(fn) {
+  _runAgentQuery = fn;
+}
+export function setTokenBroadcaster(fn) {
+  _broadcastToken = fn;
+}
+export function setStepErrorBroadcaster(fn) {
+  _broadcastStepError = fn;
+}
+export function getToolExecutor() {
+  return _executeTool;
+}
+export function getAgentExecutor() {
+  return _runAgentQuery;
+}
+export function getTokenBroadcaster() {
+  return _broadcastToken;
+}
+export function getStepErrorBroadcaster() {
+  return _broadcastStepError;
+}
+
+/** Broadcast a step error to SSE clients and persist error_details on the step run. */
+export async function surfaceStepError(supabase, step, errorMessage) {
+  const timestamp = new Date().toISOString();
+  await supabase.from("workflow_step_runs").update({
+    error_details: {
+      step_name: step.step_key,
+      step_type: step.step_type,
+      error_message: errorMessage,
+      timestamp
+    }
+  }).eq("id", step.step_run_id);
+  if (_broadcastStepError) {
+    _broadcastStepError(step.run_id, {
+      type: "workflow_error",
+      workflow_id: step.workflow_id,
+      run_id: step.run_id,
+      step_name: step.step_key,
+      step_type: step.step_type,
+      error: errorMessage,
+      timestamp
+    });
+  }
+}
+
+// ============================================================================
+// CIRCUIT BREAKER HELPERS
+// ============================================================================
+
+// P1 FIX: Transient error patterns
+const TRANSIENT_ERROR_PATTERNS = [/timed?\s*out/i, /timeout/i, /ECONNREFUSED/i, /ECONNRESET/i, /ETIMEDOUT/i, /fetch failed/i, /network/i, /socket hang up/i, /EPIPE/i, /EHOSTUNREACH/i, /503 Service Unavailable/i, /502 Bad Gateway/i, /429 Too Many Requests/i];
+export function isTransientError(errorMessage) {
+  if (!errorMessage) return false;
+  return TRANSIENT_ERROR_PATTERNS.some(pattern => pattern.test(errorMessage));
+}
+//# sourceMappingURL=workflow-steps-types.js.map

package/dist/server/handlers/workflow-steps-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-steps-types.js","names":["createHmac","timingSafeEqual","createLogger","log","webhookRateCounters","Map","MAX_INLINE_DEPTH","CODE_TIMEOUT_MS","CODE_OUTPUT_MAX","MAX_FOR_EACH_ITEMS","MAX_PARALLEL_CHILDREN","GUEST_APPROVAL_SECRET","process","env","FLY_INTERNAL_SECRET","GUEST_APPROVAL_BASE_URL","generateGuestApprovalUrl","approvalId","action","expiresAt","payload","sig","update","digest","encodeURIComponent","verifyGuestApprovalSignature","expected","Buffer","from","logWorkflowEvent","supabase","runId","eventType","stepRunId","error","insert","run_id","step_run_id","event_type","warn","err","message","checkFlowControl","step","config","step_config","concurrencyLimit","concurrency_limit","concurrencyKey","concurrency_key","step_key","count","select","head","eq","store_id","neq","allowed","reason","rateLimit","rate_limit","rateWindowSec","rate_window_seconds","windowStart","Date","now","toISOString","in","gte","_executeTool","_runAgentQuery","_broadcastToken","_broadcastStepError","setToolExecutor","fn","setAgentExecutor","setTokenBroadcaster","setStepErrorBroadcaster","getToolExecutor","getAgentExecutor","getTokenBroadcaster","getStepErrorBroadcaster","surfaceStepError","errorMessage","timestamp","error_details","step_name","step_type","error_message","type","workflow_id","TRANSIENT_ERROR_PATTERNS","isTransientError","some","pattern","test"],"sources":["../../../src/server/handlers/workflow-steps-types.ts"],"sourcesContent":["// workflow-steps-types.ts — Types, constants, guest approval, event journal, flow control, injected executors\n// Extracted from workflow-steps.ts for modularity.\n\nimport { createHmac, timingSafeEqual } from \"node:crypto\";\nimport type { SupabaseClient } from \"@supabase/supabase-js\";\nimport type { TemplateContext } from \"../lib/template-resolver.js\";\nimport { createLogger } from \"../lib/logger.js\";\n\nexport const log = createLogger(\"workflow-steps\");\n\n// In-memory sliding-window rate limiter for webhooks (replaces audit_logs read)\nexport const webhookRateCounters = new Map<string, { timestamps: number[] }>();\n\n// ============================================================================\n// CONSTANTS\n// ============================================================================\n\nexport const MAX_INLINE_DEPTH = 50;\nexport const CODE_TIMEOUT_MS = 5000;\nexport const CODE_OUTPUT_MAX = 102_400; // 100KB\nexport const MAX_FOR_EACH_ITEMS = 1000; // P2 FIX: Prevent unbounded for_each expansion\nexport const MAX_PARALLEL_CHILDREN = 100; // P1 FIX: Cap parallel step fan-out\nexport const GUEST_APPROVAL_SECRET = process.env.GUEST_APPROVAL_SECRET || process.env.FLY_INTERNAL_SECRET || \"\";\nexport const GUEST_APPROVAL_BASE_URL = \"https://whale-agent.fly.dev/approvals/guest\";\n\n// ============================================================================\n// GUEST APPROVAL — HMAC-signed URLs for unauthenticated approvers\n// ============================================================================\n\nexport function generateGuestApprovalUrl(approvalId: string, action: string, expiresAt: string): string | null {\n  if (!GUEST_APPROVAL_SECRET) return null;\n  const payload = `${approvalId}:${action}:${expiresAt}`;\n  const sig = createHmac(\"sha256\", GUEST_APPROVAL_SECRET).update(payload).digest(\"hex\");\n  return `${GUEST_APPROVAL_BASE_URL}/${approvalId}?action=${action}&expires=${encodeURIComponent(expiresAt)}&sig=${sig}`;\n}\n\nexport function verifyGuestApprovalSignature(approvalId: string, action: string, expiresAt: string, sig: string): boolean {\n  if (!GUEST_APPROVAL_SECRET) return false;\n  const payload = `${approvalId}:${action}:${expiresAt}`;\n  const expected = createHmac(\"sha256\", GUEST_APPROVAL_SECRET).update(payload).digest(\"hex\");\n  try {\n    return timingSafeEqual(Buffer.from(sig, \"hex\"), Buffer.from(expected, \"hex\"));\n  } catch {\n    return false;\n  }\n}\n\n// ============================================================================\n// EVENT JOURNAL — append-only state transition log\n// ============================================================================\n\nexport async function logWorkflowEvent(\n  supabase: SupabaseClient, runId: string, eventType: string,\n  payload: Record<string, unknown>, stepRunId?: string,\n): Promise<void> {\n  const { error } = await supabase.from(\"workflow_events\").insert({\n    run_id: runId,\n    step_run_id: stepRunId || null,\n    event_type: eventType,\n    payload,\n  });\n  if (error) log.warn({ err: error.message, runId, eventType }, \"logWorkflowEvent insert failed\");\n}\n\n// ============================================================================\n// TYPES\n// ============================================================================\n\nexport interface StepClaim {\n  step_run_id: string;\n  run_id: string;\n  workflow_id: string;\n  store_id: string;\n  step_id: string;\n  step_key: string;\n  step_type: string;\n  step_config: Record<string, unknown>;\n  on_success: string | null;\n  on_failure: string | null;\n  timeout_seconds: number;\n  input_schema: Record<string, unknown> | null;\n  step_outputs: Record<string, unknown>;\n  trigger_payload: Record<string, unknown>;\n  attempt_count: number;\n  max_attempts: number;\n  max_steps_per_run: number;\n  input: unknown | null;\n  parent_step_run_id: string | null;\n  retry_delay_seconds: number;\n}\n\nexport interface StepResult {\n  success: boolean;\n  output?: unknown;\n  error?: string;\n  branch?: string;\n}\n\n// ============================================================================\n// FLOW CONTROL — concurrency + rate limiting at step level\n// ============================================================================\n\nexport async function checkFlowControl(\n  supabase: SupabaseClient, step: StepClaim,\n): Promise<{ allowed: boolean; reason?: string }> {\n  const config = step.step_config;\n\n  const concurrencyLimit = config.concurrency_limit as number;\n  if (concurrencyLimit && concurrencyLimit > 0) {\n    const concurrencyKey = (config.concurrency_key as string) || step.step_key;\n    const { count } = await supabase.from(\"workflow_step_runs\")\n      .select(\"id\", { count: \"exact\", head: true })\n      .eq(\"step_key\", concurrencyKey)\n      .eq(\"status\", \"running\")\n      .eq(\"store_id\", step.store_id)\n      .neq(\"id\", step.step_run_id);\n    if ((count || 0) >= concurrencyLimit) {\n      return { allowed: false, reason: `Concurrency limit ${concurrencyLimit} reached for '${concurrencyKey}'` };\n    }\n  }\n\n  const rateLimit = config.rate_limit as number;\n  const rateWindowSec = (config.rate_window_seconds as number) || 60;\n  if (rateLimit && rateLimit > 0) {\n    const windowStart = new Date(Date.now() - rateWindowSec * 1000).toISOString();\n    const { count } = await supabase.from(\"workflow_step_runs\")\n      .select(\"id\", { count: \"exact\", head: true })\n      .eq(\"step_key\", step.step_key)\n      .eq(\"store_id\", step.store_id)\n      .in(\"status\", [\"success\", \"running\"])\n      .gte(\"started_at\", windowStart);\n    if ((count || 0) >= rateLimit) {\n      return { allowed: false, reason: `Rate limit ${rateLimit}/${rateWindowSec}s reached for '${step.step_key}'` };\n    }\n  }\n\n  return { allowed: true };\n}\n\n// ============================================================================\n// INJECTED EXECUTORS (set from index.ts to avoid circular deps)\n// ============================================================================\n\nexport type ExecuteToolFn = (\n  supabase: SupabaseClient,\n  toolName: string,\n  args: Record<string, unknown>,\n  storeId?: string,\n  traceId?: string,\n) => Promise<{ success: boolean; data?: unknown; error?: string }>;\n\nexport type TokenBroadcastFn = (runId: string, stepKey: string, token: string) => void;\n\nexport type StepErrorBroadcastFn = (runId: string, data: {\n  type: \"workflow_error\";\n  workflow_id: string;\n  run_id: string;\n  step_name: string;\n  step_type: string;\n  error: string;\n  timestamp: string;\n}) => void;\n\nexport type RunAgentQueryFn = (\n  supabase: SupabaseClient,\n  agentId: string,\n  prompt: string,\n  storeId: string,\n  maxTurns?: number,\n  onToken?: (token: string) => void,\n  traceId?: string,\n) => Promise<{ success: boolean; response?: string; error?: string }>;\n\nlet _executeTool: ExecuteToolFn | null = null;\nlet _runAgentQuery: RunAgentQueryFn | null = null;\nlet _broadcastToken: TokenBroadcastFn | null = null;\nlet _broadcastStepError: StepErrorBroadcastFn | null = null;\n\nexport function setToolExecutor(fn: ExecuteToolFn): void { _executeTool = fn; }\nexport function setAgentExecutor(fn: RunAgentQueryFn): void { _runAgentQuery = fn; }\nexport function setTokenBroadcaster(fn: TokenBroadcastFn): void { _broadcastToken = fn; }\nexport function setStepErrorBroadcaster(fn: StepErrorBroadcastFn): void { _broadcastStepError = fn; }\n\nexport function getToolExecutor(): ExecuteToolFn | null { return _executeTool; }\nexport function getAgentExecutor(): RunAgentQueryFn | null { return _runAgentQuery; }\nexport function getTokenBroadcaster(): TokenBroadcastFn | null { return _broadcastToken; }\nexport function getStepErrorBroadcaster(): StepErrorBroadcastFn | null { return _broadcastStepError; }\n\n/** Broadcast a step error to SSE clients and persist error_details on the step run. */\nexport async function surfaceStepError(\n  supabase: SupabaseClient,\n  step: { step_run_id: string; run_id: string; workflow_id: string; step_key: string; step_type: string },\n  errorMessage: string,\n): Promise<void> {\n  const timestamp = new Date().toISOString();\n\n  await supabase.from(\"workflow_step_runs\").update({\n    error_details: {\n      step_name: step.step_key,\n      step_type: step.step_type,\n      error_message: errorMessage,\n      timestamp,\n    },\n  }).eq(\"id\", step.step_run_id);\n\n  if (_broadcastStepError) {\n    _broadcastStepError(step.run_id, {\n      type: \"workflow_error\",\n      workflow_id: step.workflow_id,\n      run_id: step.run_id,\n      step_name: step.step_key,\n      step_type: step.step_type,\n      error: errorMessage,\n      timestamp,\n    });\n  }\n}\n\n// ============================================================================\n// CIRCUIT BREAKER HELPERS\n// ============================================================================\n\n// P1 FIX: Transient error patterns\nconst TRANSIENT_ERROR_PATTERNS = [\n  /timed?\\s*out/i, /timeout/i, /ECONNREFUSED/i, /ECONNRESET/i, /ETIMEDOUT/i,\n  /fetch failed/i, /network/i, /socket hang up/i, /EPIPE/i, /EHOSTUNREACH/i,\n  /503 Service Unavailable/i, /502 Bad Gateway/i, /429 Too Many Requests/i,\n];\n\nexport function isTransientError(errorMessage?: string | null): boolean {\n  if (!errorMessage) return false;\n  return TRANSIENT_ERROR_PATTERNS.some(pattern => pattern.test(errorMessage));\n}\n"],"mappings":"AAAA;AACA;;AAEA,SAASA,UAAU,EAAEC,eAAe,QAAQ,aAAa;AAGzD,SAASC,YAAY,QAAQ,kBAAkB;AAE/C,OAAO,MAAMC,GAAG,GAAGD,YAAY,CAAC,gBAAgB,CAAC;;AAEjD;AACA,OAAO,MAAME,mBAAmB,GAAG,IAAIC,GAAG,CAAmC,CAAC;;AAE9E;AACA;AACA;;AAEA,OAAO,MAAMC,gBAAgB,GAAG,EAAE;AAClC,OAAO,MAAMC,eAAe,GAAG,IAAI;AACnC,OAAO,MAAMC,eAAe,GAAG,OAAO,CAAC,CAAC;AACxC,OAAO,MAAMC,kBAAkB,GAAG,IAAI,CAAC,CAAC;AACxC,OAAO,MAAMC,qBAAqB,GAAG,GAAG,CAAC,CAAC;AAC1C,OAAO,MAAMC,qBAAqB,GAAGC,OAAO,CAACC,GAAG,CAACF,qBAAqB,IAAIC,OAAO,CAACC,GAAG,CAACC,mBAAmB,IAAI,EAAE;AAC/G,OAAO,MAAMC,uBAAuB,GAAG,6CAA6C;;AAEpF;AACA;AACA;;AAEA,OAAO,SAASC,wBAAwBA,CAACC,UAAkB,EAAEC,MAAc,EAAEC,SAAiB,EAAiB;EAC7G,IAAI,CAACR,qBAAqB,EAAE,OAAO,IAAI;EACvC,MAAMS,OAAO,GAAG,GAAGH,UAAU,IAAIC,MAAM,IAAIC,SAAS,EAAE;EACtD,MAAME,GAAG,GAAGrB,UAAU,CAAC,QAAQ,EAAEW,qBAAqB,CAAC,CAACW,MAAM,CAACF,OAAO,CAAC,CAACG,MAAM,CAAC,KAAK,CAAC;EACrF,OAAO,GAAGR,uBAAuB,IAAIE,UAAU,WAAWC,MAAM,YAAYM,kBAAkB,CAACL,SAAS,CAAC,QAAQE,GAAG,EAAE;AACxH;AAEA,OAAO,SAASI,4BAA4BA,CAACR,UAAkB,EAAEC,MAAc,EAAEC,SAAiB,EAAEE,GAAW,EAAW;EACxH,IAAI,CAACV,qBAAqB,EAAE,OAAO,KAAK;EACxC,MAAMS,OAAO,GAAG,GAAGH,UAAU,IAAIC,MAAM,IAAIC,SAAS,EAAE;EACtD,MAAMO,QAAQ,GAAG1B,UAAU,CAAC,QAAQ,EAAEW,qBAAqB,CAAC,CAACW,MAAM,CAACF,OAAO,CAAC,CAACG,MAAM,CAAC,KAAK,CAAC;EAC1F,IAAI;IACF,OAAOtB,eAAe,CAAC0B,MAAM,CAACC,IAAI,CAACP,GAAG,EAAE,KAAK,CAAC,EAAEM,MAAM,CAACC,IAAI,CAACF,QAAQ,EAAE,KAAK,CAAC,CAAC;EAC/E,CAAC,CAAC,MAAM;IACN,OAAO,KAAK;EACd;AACF;;AAEA;AACA;AACA;;AAEA,OAAO,eAAeG,gBAAgBA,CACpCC,QAAwB,EAAEC,KAAa,EAAEC,SAAiB,EAC1DZ,OAAgC,EAAEa,SAAkB,EACrC;EACf,MAAM;IAAEC;EAAM,CAAC,GAAG,MAAMJ,QAAQ,CAACF,IAAI,CAAC,iBAAiB,CAAC,CAACO,MAAM,CAAC;IAC9DC,MAAM,EAAEL,KAAK;IACbM,WAAW,EAAEJ,SAAS,IAAI,IAAI;IAC9BK,UAAU,EAAEN,SAAS;IACrBZ;EACF,CAAC,CAAC;EACF,IAAIc,KAAK,EAAE/B,GAAG,CAACoC,IAAI,CAAC;IAAEC,GAAG,EAAEN,KAAK,CAACO,OAAO;IAAEV,KAAK;IAAEC;EAAU,CAAC,EAAE,gCAAgC,CAAC;AACjG;;AAEA;AACA;AACA;;AAgCA;AACA;AACA;;AAEA,OAAO,eAAeU,gBAAgBA,CACpCZ,QAAwB,EAAEa,IAAe,EACO;EAChD,MAAMC,MAAM,GAAGD,IAAI,CAACE,WAAW;EAE/B,MAAMC,gBAAgB,GAAGF,MAAM,CAACG,iBAA2B;EAC3D,IAAID,gBAAgB,IAAIA,gBAAgB,GAAG,CAAC,EAAE;IAC5C,MAAME,cAAc,GAAIJ,MAAM,CAACK,eAAe,IAAeN,IAAI,CAACO,QAAQ;IAC1E,MAAM;MAAEC;IAAM,CAAC,GAAG,MAAMrB,QAAQ,CAACF,IAAI,CAAC,oBAAoB,CAAC,CACxDwB,MAAM,CAAC,IAAI,EAAE;MAAED,KAAK,EAAE,OAAO;MAAEE,IAAI,EAAE;IAAK,CAAC,CAAC,CAC5CC,EAAE,CAAC,UAAU,EAAEN,cAAc,CAAC,CAC9BM,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CACvBA,EAAE,CAAC,UAAU,EAAEX,IAAI,CAACY,QAAQ,CAAC,CAC7BC,GAAG,CAAC,IAAI,EAAEb,IAAI,CAACN,WAAW,CAAC;IAC9B,IAAI,CAACc,KAAK,IAAI,CAAC,KAAKL,gBAAgB,EAAE;MACpC,OAAO;QAAEW,OAAO,EAAE,KAAK;QAAEC,MAAM,EAAE,qBAAqBZ,gBAAgB,iBAAiBE,cAAc;MAAI,CAAC;IAC5G;EACF;EAEA,MAAMW,SAAS,GAAGf,MAAM,CAACgB,UAAoB;EAC7C,MAAMC,aAAa,GAAIjB,MAAM,CAACkB,mBAAmB,IAAe,EAAE;EAClE,IAAIH,SAAS,IAAIA,SAAS,GAAG,CAAC,EAAE;IAC9B,MAAMI,WAAW,GAAG,IAAIC,IAAI,CAACA,IAAI,CAACC,GAAG,CAAC,CAAC,GAAGJ,aAAa,GAAG,IAAI,CAAC,CAACK,WAAW,CAAC,CAAC;IAC7E,MAAM;MAAEf;IAAM,CAAC,GAAG,MAAMrB,QAAQ,CAACF,IAAI,CAAC,oBAAoB,CAAC,CACxDwB,MAAM,CAAC,IAAI,EAAE;MAAED,KAAK,EAAE,OAAO;MAAEE,IAAI,EAAE;IAAK,CAAC,CAAC,CAC5CC,EAAE,CAAC,UAAU,EAAEX,IAAI,CAACO,QAAQ,CAAC,CAC7BI,EAAE,CAAC,UAAU,EAAEX,IAAI,CAACY,QAAQ,CAAC,CAC7BY,EAAE,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CACpCC,GAAG,CAAC,YAAY,EAAEL,WAAW,CAAC;IACjC,IAAI,CAACZ,KAAK,IAAI,CAAC,KAAKQ,SAAS,EAAE;MAC7B,OAAO;QAAEF,OAAO,EAAE,KAAK;QAAEC,MAAM,EAAE,cAAcC,SAAS,IAAIE,aAAa,kBAAkBlB,IAAI,CAACO,QAAQ;MAAI,CAAC;IAC/G;EACF;EAEA,OAAO;IAAEO,OAAO,EAAE;EAAK,CAAC;AAC1B;;AAEA;AACA;AACA;;AAgCA,IAAIY,YAAkC,GAAG,IAAI;AAC7C,IAAIC,cAAsC,GAAG,IAAI;AACjD,IAAIC,eAAwC,GAAG,IAAI;AACnD,IAAIC,mBAAgD,GAAG,IAAI;AAE3D,OAAO,SAASC,eAAeA,CAACC,EAAiB,EAAQ;EAAEL,YAAY,GAAGK,EAAE;AAAE;AAC9E,OAAO,SAASC,gBAAgBA,CAACD,EAAmB,EAAQ;EAAEJ,cAAc,GAAGI,EAAE;AAAE;AACnF,OAAO,SAASE,mBAAmBA,CAACF,EAAoB,EAAQ;EAAEH,eAAe,GAAGG,EAAE;AAAE;AACxF,OAAO,SAASG,uBAAuBA,CAACH,EAAwB,EAAQ;EAAEF,mBAAmB,GAAGE,EAAE;AAAE;AAEpG,OAAO,SAASI,eAAeA,CAAA,EAAyB;EAAE,OAAOT,YAAY;AAAE;AAC/E,OAAO,SAASU,gBAAgBA,CAAA,EAA2B;EAAE,OAAOT,cAAc;AAAE;AACpF,OAAO,SAASU,mBAAmBA,CAAA,EAA4B;EAAE,OAAOT,eAAe;AAAE;AACzF,OAAO,SAASU,uBAAuBA,CAAA,EAAgC;EAAE,OAAOT,mBAAmB;AAAE;;AAErG;AACA,OAAO,eAAeU,gBAAgBA,CACpCpD,QAAwB,EACxBa,IAAuG,EACvGwC,YAAoB,EACL;EACf,MAAMC,SAAS,GAAG,IAAIpB,IAAI,CAAC,CAAC,CAACE,WAAW,CAAC,CAAC;EAE1C,MAAMpC,QAAQ,CAACF,IAAI,CAAC,oBAAoB,CAAC,CAACN,MAAM,CAAC;IAC/C+D,aAAa,EAAE;MACbC,SAAS,EAAE3C,IAAI,CAACO,QAAQ;MACxBqC,SAAS,EAAE5C,IAAI,CAAC4C,SAAS;MACzBC,aAAa,EAAEL,YAAY;MAC3BC;IACF;EACF,CAAC,CAAC,CAAC9B,EAAE,CAAC,IAAI,EAAEX,IAAI,CAACN,WAAW,CAAC;EAE7B,IAAImC,mBAAmB,EAAE;IACvBA,mBAAmB,CAAC7B,IAAI,CAACP,MAAM,EAAE;MAC/BqD,IAAI,EAAE,gBAAgB;MACtBC,WAAW,EAAE/C,IAAI,CAAC+C,WAAW;MAC7BtD,MAAM,EAAEO,IAAI,CAACP,MAAM;MACnBkD,SAAS,EAAE3C,IAAI,CAACO,QAAQ;MACxBqC,SAAS,EAAE5C,IAAI,CAAC4C,SAAS;MACzBrD,KAAK,EAAEiD,YAAY;MACnBC;IACF,CAAC,CAAC;EACJ;AACF;;AAEA;AACA;AACA;;AAEA;AACA,MAAMO,wBAAwB,GAAG,CAC/B,eAAe,EAAE,UAAU,EAAE,eAAe,EAAE,aAAa,EAAE,YAAY,EACzE,eAAe,EAAE,UAAU,EAAE,iBAAiB,EAAE,QAAQ,EAAE,eAAe,EACzE,0BAA0B,EAAE,kBAAkB,EAAE,wBAAwB,CACzE;AAED,OAAO,SAASC,gBAAgBA,CAACT,YAA4B,EAAW;EACtE,IAAI,CAACA,YAAY,EAAE,OAAO,KAAK;EAC/B,OAAOQ,wBAAwB,CAACE,IAAI,CAACC,OAAO,IAAIA,OAAO,CAACC,IAAI,CAACZ,YAAY,CAAC,CAAC;AAC7E","ignoreList":[]}

package/dist/server/handlers/workflow-steps-webhook.d.ts

@@ -0,0 +1,5 @@
+import type { SupabaseClient } from "@supabase/supabase-js";
+export declare function handleWebhookIngestion(supabase: SupabaseClient, slug: string, rawBody: string, headers: Record<string, string>, storeId?: string): Promise<{
+    status: number;
+    body: Record<string, unknown>;
+}>;