|
1 | | -import { createLogger } from '@sim/logger' |
2 | | -import { assertWorkflowMutable, WorkflowLockedError } from '@sim/platform-authz/workflow' |
3 | | -import { v1DeployWorkflowBodySchema } from '@/lib/api/contracts/v1/workflows' |
4 | 1 | import { |
5 | 2 | v2DeployWorkflowContract, |
6 | 3 | v2UndeployWorkflowContract, |
7 | 4 | } from '@/lib/api/contracts/v2/workflows' |
8 | | -import { parseOptionalJsonBody } from '@/lib/api/server' |
| 5 | +import { defineV2JsonRoute, v2ApiKeyAuth, v2RateLimits } from '@/lib/api/server/routes' |
| 6 | +import { generateRequestId } from '@/lib/core/utils/request' |
9 | 7 | import { captureServerEvent } from '@/lib/posthog/server' |
10 | | -import { performFullDeploy, performFullUndeploy } from '@/lib/workflows/orchestration' |
11 | | -import { withPublicApiRouteHandler } from '@/app/api/public-api-route-handler' |
12 | | -import { v2Data, v2Error, v2ValidationError } from '@/app/api/v2/lib/response' |
13 | | -import { resolveV2WorkflowTarget } from '@/app/api/v2/workflows/utils' |
14 | | - |
15 | | -const logger = createLogger('V2WorkflowDeployAPI') |
| 8 | +import { v2WorkflowErrorPolicies } from '@/lib/workflows/api' |
| 9 | +import { deployWorkflow, undeployWorkflow } from '@/lib/workflows/application/deployments' |
| 10 | +import { workflowOperations } from '@/lib/workflows/application/operations' |
| 11 | +import { v2Error } from '@/app/api/v2/lib/response' |
16 | 12 |
|
17 | 13 | export const dynamic = 'force-dynamic' |
18 | 14 | export const runtime = 'nodejs' |
19 | 15 | export const maxDuration = 120 |
20 | 16 |
|
21 | | -export const POST = withPublicApiRouteHandler({ |
| 17 | +export const POST = defineV2JsonRoute({ |
22 | 18 | contract: v2DeployWorkflowContract, |
23 | | - rateLimitEndpoint: 'workflow-deploy', |
24 | | - handler: async ({ request, input, auth: { requestId, userId, rateLimit } }) => { |
25 | | - try { |
26 | | - const { id } = input.params |
27 | | - |
28 | | - const rawBody = await parseOptionalJsonBody(request) |
29 | | - if (!rawBody.success) { |
30 | | - return rawBody.response.status === 413 |
31 | | - ? v2Error('PAYLOAD_TOO_LARGE', 'Request body is too large') |
32 | | - : v2Error('BAD_REQUEST', 'Request body must be valid JSON') |
33 | | - } |
34 | | - const body = v1DeployWorkflowBodySchema.safeParse(rawBody.data ?? {}) |
35 | | - if (!body.success) return v2ValidationError(body.error) |
36 | | - |
37 | | - const target = await resolveV2WorkflowTarget(rateLimit, userId, id, 'admin') |
38 | | - if (!target) return v2Error('NOT_FOUND', 'Workflow not found') |
39 | | - const { workspaceId } = target |
40 | | - |
41 | | - await assertWorkflowMutable(id) |
42 | | - |
43 | | - logger.info(`[${requestId}] Deploying workflow ${id} via v2 API`, { userId }) |
44 | | - |
45 | | - const result = await performFullDeploy({ |
46 | | - workflowId: id, |
47 | | - userId, |
48 | | - versionName: body.data.name, |
49 | | - versionDescription: body.data.description ?? undefined, |
50 | | - requestId, |
51 | | - }) |
52 | | - |
53 | | - if (!result.success) { |
54 | | - const code = |
55 | | - result.errorCode === 'not_found' |
56 | | - ? 'NOT_FOUND' |
57 | | - : result.errorCode === 'validation' |
58 | | - ? 'BAD_REQUEST' |
59 | | - : 'INTERNAL_ERROR' |
60 | | - return v2Error(code, result.error || 'Failed to deploy workflow') |
61 | | - } |
62 | | - |
63 | | - captureServerEvent( |
64 | | - userId, |
65 | | - 'workflow_deployed', |
66 | | - { workflow_id: id, workspace_id: workspaceId }, |
67 | | - { |
68 | | - groups: { workspace: workspaceId }, |
69 | | - setOnce: { first_workflow_deployed_at: new Date().toISOString() }, |
70 | | - } |
71 | | - ) |
72 | | - |
73 | | - return v2Data( |
74 | | - { |
75 | | - id, |
76 | | - isDeployed: true, |
77 | | - deployedAt: result.deployedAt?.toISOString() ?? null, |
78 | | - version: result.version, |
79 | | - warnings: result.warnings ?? [], |
80 | | - }, |
81 | | - { rateLimit } |
82 | | - ) |
83 | | - } catch (error) { |
84 | | - if (error instanceof WorkflowLockedError) { |
85 | | - return v2Error('LOCKED', error.message) |
86 | | - } |
87 | | - throw error |
| 19 | + auth: v2ApiKeyAuth, |
| 20 | + operation: workflowOperations.deploy, |
| 21 | + rateLimit: v2RateLimits.publicApi, |
| 22 | + errorPolicy: v2WorkflowErrorPolicies.concealWorkflowAuthorization, |
| 23 | + parseOptions: { |
| 24 | + optionalJsonBody: true, |
| 25 | + invalidJsonResponse: () => v2Error('BAD_REQUEST', 'Request body must be valid JSON'), |
| 26 | + payloadTooLargeResponse: () => v2Error('PAYLOAD_TOO_LARGE', 'Request body is too large'), |
| 27 | + }, |
| 28 | + mapInput: ({ params, body }) => ({ |
| 29 | + workflowId: params.id, |
| 30 | + name: body.name, |
| 31 | + description: body.description ?? undefined, |
| 32 | + requestId: generateRequestId(), |
| 33 | + }), |
| 34 | + useCase: deployWorkflow, |
| 35 | + present: (result) => ({ |
| 36 | + data: { |
| 37 | + id: result.workflowId, |
| 38 | + isDeployed: Boolean(result.activeDeployment), |
| 39 | + deployedAt: result.deployedAt?.toISOString() ?? null, |
| 40 | + version: result.version, |
| 41 | + warnings: result.warnings ?? [], |
| 42 | + activeDeployment: result.activeDeployment ?? null, |
| 43 | + latestDeploymentAttempt: result.latestDeploymentAttempt ?? null, |
| 44 | + }, |
| 45 | + }), |
| 46 | + onSuccess: ({ principal, result }) => { |
| 47 | + if (principal.kind !== 'personal_api_key') { |
| 48 | + throw new Error('Admin deployment unexpectedly admitted a workspace API key') |
88 | 49 | } |
| 50 | + captureServerEvent( |
| 51 | + principal.userId, |
| 52 | + 'workflow_deployed', |
| 53 | + { workflow_id: result.workflowId, workspace_id: result.workspaceId }, |
| 54 | + { |
| 55 | + groups: { workspace: result.workspaceId }, |
| 56 | + setOnce: { first_workflow_deployed_at: new Date().toISOString() }, |
| 57 | + } |
| 58 | + ) |
89 | 59 | }, |
90 | 60 | }) |
91 | 61 |
|
92 | | -export const DELETE = withPublicApiRouteHandler({ |
| 62 | +export const DELETE = defineV2JsonRoute({ |
93 | 63 | contract: v2UndeployWorkflowContract, |
94 | | - rateLimitEndpoint: 'workflow-deploy', |
95 | | - handler: async ({ input, auth: { requestId, userId, rateLimit } }) => { |
96 | | - try { |
97 | | - const { id } = input.params |
98 | | - |
99 | | - const target = await resolveV2WorkflowTarget(rateLimit, userId, id, 'admin') |
100 | | - if (!target) return v2Error('NOT_FOUND', 'Workflow not found') |
101 | | - const { workflow, workspaceId } = target |
102 | | - |
103 | | - if (!workflow.isDeployed) { |
104 | | - return v2Error('BAD_REQUEST', 'Workflow is not deployed') |
105 | | - } |
106 | | - |
107 | | - await assertWorkflowMutable(id) |
108 | | - |
109 | | - logger.info(`[${requestId}] Undeploying workflow ${id} via v2 API`, { userId }) |
110 | | - |
111 | | - const result = await performFullUndeploy({ workflowId: id, userId, requestId }) |
112 | | - if (!result.success) { |
113 | | - return v2Error('INTERNAL_ERROR', result.error || 'Failed to undeploy workflow') |
114 | | - } |
115 | | - |
116 | | - captureServerEvent( |
117 | | - userId, |
118 | | - 'workflow_undeployed', |
119 | | - { workflow_id: id, workspace_id: workspaceId }, |
120 | | - { groups: { workspace: workspaceId } } |
121 | | - ) |
122 | | - |
123 | | - return v2Data( |
124 | | - { |
125 | | - id, |
126 | | - isDeployed: false, |
127 | | - deployedAt: null, |
128 | | - warnings: result.warnings ?? [], |
129 | | - }, |
130 | | - { rateLimit } |
131 | | - ) |
132 | | - } catch (error) { |
133 | | - if (error instanceof WorkflowLockedError) { |
134 | | - return v2Error('LOCKED', error.message) |
135 | | - } |
136 | | - throw error |
| 64 | + auth: v2ApiKeyAuth, |
| 65 | + operation: workflowOperations.undeploy, |
| 66 | + rateLimit: v2RateLimits.publicApi, |
| 67 | + errorPolicy: v2WorkflowErrorPolicies.concealWorkflowAuthorization, |
| 68 | + mapInput: ({ params }) => ({ workflowId: params.id, requestId: generateRequestId() }), |
| 69 | + useCase: undeployWorkflow, |
| 70 | + present: (result) => ({ |
| 71 | + data: { |
| 72 | + id: result.workflowId, |
| 73 | + isDeployed: false, |
| 74 | + deployedAt: null, |
| 75 | + warnings: result.warnings ?? [], |
| 76 | + activeDeployment: null, |
| 77 | + latestDeploymentAttempt: null, |
| 78 | + }, |
| 79 | + }), |
| 80 | + onSuccess: ({ principal, result }) => { |
| 81 | + if (principal.kind !== 'personal_api_key') { |
| 82 | + throw new Error('Admin undeployment unexpectedly admitted a workspace API key') |
137 | 83 | } |
| 84 | + captureServerEvent( |
| 85 | + principal.userId, |
| 86 | + 'workflow_undeployed', |
| 87 | + { workflow_id: result.workflowId, workspace_id: result.workspaceId }, |
| 88 | + { groups: { workspace: result.workspaceId } } |
| 89 | + ) |
138 | 90 | }, |
139 | 91 | }) |
0 commit comments