feat(automation): implement public API for flows, triggers, keywords, ai-agents, reflinks, ai-triggers (#1102)

* refactor(builder): move flows, triggers, sequences, broadcasts, webhooks data access into business

Removes direct db usage from flows, triggers, sequences, broadcasts,
webhooks, the template resource picker and saved replies per
.agents/rules/data-access.md. Public oRPC router keys, paths and the
public-spec snapshot are unchanged.

- new flow, sequence, broadcast, trigger, condition and
  template-selectable-resource repositories; webhook repository gains
  paginated list + detail reads
- flowService.createWithDefaultDraft, flowVersionService.publish,
  triggerService/webhookService create/update/updateSettings/deleteMany
  (trigger and webhook condition-diff semantics kept separate),
  new sequenceService, broadcastService.create/resend,
  savedReplyService.listByWorkspaceId
- broadcastService.create validates each integration id independently
  so the validation error lands on the field that failed
- validationException added to errors.ts in the same form as #1093
- deleteSequence now also scopes by workspaceId (defense in depth)

* feat(automation): widen public API to full CRUD across flows, triggers, keywords, ai-agents, reflinks, ai-triggers

Finishes the data-access chain (action -> service -> repository -> DB)
for flows, sequences, broadcasts, saved-replies, reflinks, bot-fields,
and greenfield ai-triggers, then widens the `automation` token scope
from read-only to full CRUD so MCP/agent clients can build, publish,
and inspect automations end to end.

* fix(automation): close data-loss and correctness bugs in PR #1102's public API

Remediates review findings from PR #1102's data-access refactor and public
API widening:

- PUT /v1/keywords/{id} without `keywords` silently wiped the automation's
  keywords to `[]`; the service now leaves the column untouched when the
  caller omits it, and moves the text/flowId mutual-exclusion + cross-
  workspace flowId validation down from the action into the service so
  every caller gets the same invariants.
- POST /v1/ai-agents could return the wrong resource on a duplicate name
  (no unique constraint); `create` now returns the inserted id and the
  handler re-fetches by id instead of by name.
- public-spec-operations.test.ts had no explicit `beforeAll` timeout,
  causing CI-only flakiness as the OpenAPI snapshot grew.
- GET /v1/triggers loaded every trigger in the workspace then re-queried
  each one individually; added `triggerService.list` backed by a single
  SQL-paginated query with conditions joined in.
- Reflinks' `findReflink` swallowed every error (including infra failures)
  as not-found; added a nullable `reflinkService.find()`.
- Public flow imports attributed every import to the workspace owner;
  now pass `userId: null`, matching the contacts public-API precedent.
- `triggerResource` published `z.array(z.any())` for conditions; conditions
  now has a real, documented shape.
- `resendBroadcast` read a broadcast's contact filter before verifying it
  was resendable, and dropped the `deletedAt` predicate; added
  `broadcastService.assertResendable` to guard first.
- `updateSequenceAction` masked a 404 as a generic 500 by wrapping the
  whole call in a catch-all; now rethrows `ChatbotXException` unchanged.
- `aiTriggerService.list` divided pageCount by an unclamped `perPage`.

Also: dedicated tests for `webhookService.updateWithConditions`,
`sequence/step-payload.ts`'s defaulting logic, `broadcastService.create`'s
insert shape, and bot-field unique-violation mapping; replaced two
hand-rolled `UNIQUE_VIOLATION_CODE` checks with `isUniqueViolationError`;
collapsed `templateSelectableResourceRepository`'s 11 near-identical list
methods into one generic helper; removed dead double-mapping of trigger/
webhook conditions now that the service owns column normalization.

* fix(automation): restore flows list contract and field-level validation errors

- GET /v1/flows again defaults `active: true` and returns `{id, name}`
  instead of the full flow row plus embedded flowVersions, avoiding a
  breaking change to an existing public-API consumer contract.
- Add isValidationException (a real instanceof ChatbotXException guard)
  and use it in place of duck-typed `"code" in error` checks in reflinks,
  bot-fields, and sequences actions, which could mis-narrow on unrelated
  driver/system errors and always hardcoded the error message.
- Wrap automatedResponseService.update in update-automated-response-action
  so the flowId-not-found validation exception (moved into the service by
  the prior refactor) still surfaces as a field-level form error instead
  of a generic toast.
- Fix aiTriggerService.list to divide pageCount by the same clamped limit
  the repository uses (getPaginationWithDefaults), instead of a
  Math.min(maxLimit, perPage) expression that could divide by undefined.

* fix(automation): scope keyword writes by type and stabilize public API pagination

Third round of correctness fixes on the public API surface:

- Keywords endpoints now pass `type: "inbound"` through findOrFail, update,
  setStatus and deleteMany so an outbound (Page) automated response can no
  longer be read, mutated or deleted through the inbound Keywords routes —
  one table serves two FolderTypes, so workspaceId + id alone is not a
  sufficient scope.
- Add `flowVersionService.updateDraftByFlowId` for callers that only know the
  flow id; `PUT /v1/flows/{id}/draft` was passing a flow id where a
  flow-version id was expected.
- Give `triggerRepository.listPaginatedWithConditions` a deterministic
  `orderBy` so paginated results cannot repeat or skip rows.
- Skip no-op updates in ai-agent, ai-trigger and reflink services so an
  all-undefined payload no longer issues an empty SET or a spurious audit
  entry.
- Write `questions: []` explicitly on ai-trigger create — the column has no
  database default despite the drizzle `.default()`.
- Correct `flowService.list`'s return type to `limit`/`offset`, matching what
  `parsePagination` actually spreads.

* fix(automation): unify trigger/webhook list pagination and drop redundant broadcast query

Closes the remaining data-access gaps from the flows/triggers/sequences/
broadcasts/webhooks refactor: the public API and builder pages for triggers
and webhooks each maintained a separate, diverging list implementation, and
the webhook public API loaded every row in the workspace before paginating
in memory.

- webhookService.list: SQL-paginated, conditions joined, shared by
  GET /v1/webhooks and the builder's webhooks page (replaces the unbounded
  listByWorkspaceId + paginateInMemory path)
- triggerService.list: extended with folderId/name filters so the builder's
  triggers page can share it with GET /v1/triggers instead of hand-rolling
  a second, unordered pagination; added triggerService.findWithConditions
  to remove three direct repository reads from the public API
- resend-broadcast.action: read contactFilter off assertResendable's
  already-fetched row instead of issuing a second query for it
- create-broadcast.action: use isValidationException instead of a
  duck-typed error check, matching every sibling action
- flow detail pages: call flowService.findById instead of flowRepository
  directly

* fix(automation): move audience/list reads and step scheduling into business services

Closes remaining direct-repository access from the builder app layer for
broadcasts (list, audience, findByIdOrName), sequences (list, findWithSteps),
and moves sequence-step contact-schedule recalculation into
packages/business/src/sequence, alongside triggers/ai-agents write handlers
now returning their created/updated model instead of a redundant follow-up
findBy. Automated-response reads/writes are scoped by type end-to-end
(inbound vs outbound) to prevent cross-type leaks.

* fix(automation): move template picker query into business and scope reflink writes

Move the template picker's selectable-resource dispatch out of the builder
query layer into `templateService.listSelectableResources`, so the query file
is a thin adapter and the repository is no longer reached from `apps/`.

Scope `reflinkService` update/deleteMany/listOptions by `type = "refLink"` to
match what `create` stamps, so an entry-point-link row sharing the table can
never be updated or deleted through the reflink surface.

Stop swallowing every error on the flow pages: only a service-thrown
`notFoundException` becomes `notFound()`, and a DB failure propagates as a
real 500 instead of a misleading 404.

Drop the now-unused `broadcastRepository.findIdIfActive` and
`findContactFilter` along with their tests and service mocks.

Author: realcodesiman

apps/builder/__tests__/__snapshots__/public-spec-operations.test.ts.snap

@@ -2,11 +2,61 @@
 
 exports[`public API spec — operation naming guard > operation list (operationId, method, path) matches the committed snapshot 1`] = `
 [
+  {
+    "method": "POST",
+    "operationId": "aiAgents.create",
+    "path": "/v1/ai-agents",
+  },
+  {
+    "method": "DELETE",
+    "operationId": "aiAgents.delete",
+    "path": "/v1/ai-agents/{id}",
+  },
+  {
+    "method": "GET",
+    "operationId": "aiAgents.get",
+    "path": "/v1/ai-agents/{id}",
+  },
   {
     "method": "GET",
     "operationId": "aiAgents.list",
     "path": "/v1/ai-agents",
   },
+  {
+    "method": "PUT",
+    "operationId": "aiAgents.update",
+    "path": "/v1/ai-agents/{id}",
+  },
+  {
+    "method": "POST",
+    "operationId": "aiTriggers.create",
+    "path": "/v1/ai-triggers",
+  },
+  {
+    "method": "DELETE",
+    "operationId": "aiTriggers.delete",
+    "path": "/v1/ai-triggers/{id}",
+  },
+  {
+    "method": "POST",
+    "operationId": "aiTriggers.duplicate",
+    "path": "/v1/ai-triggers/{id}/duplicate",
+  },
+  {
+    "method": "GET",
+    "operationId": "aiTriggers.get",
+    "path": "/v1/ai-triggers/{id}",
+  },
+  {
+    "method": "GET",
+    "operationId": "aiTriggers.list",
+    "path": "/v1/ai-triggers",
+  },
+  {
+    "method": "PUT",
+    "operationId": "aiTriggers.update",
+    "path": "/v1/ai-triggers/{id}",
+  },
   {
     "method": "PUT",
     "operationId": "botFields.bulkUpdate",
@@ -412,11 +462,56 @@ exports[`public API spec — operation naming guard > operation list (operationI
     "operationId": "externalWebhooks.list",
     "path": "/v1/external-webhooks",
   },
+  {
+    "method": "POST",
+    "operationId": "flows.create",
+    "path": "/v1/flows",
+  },
+  {
+    "method": "DELETE",
+    "operationId": "flows.delete",
+    "path": "/v1/flows/{id}",
+  },
+  {
+    "method": "POST",
+    "operationId": "flows.duplicate",
+    "path": "/v1/flows/{id}/duplicate",
+  },
+  {
+    "method": "GET",
+    "operationId": "flows.get",
+    "path": "/v1/flows/{id}",
+  },
+  {
+    "method": "POST",
+    "operationId": "flows.import",
+    "path": "/v1/flows/import",
+  },
   {
     "method": "GET",
     "operationId": "flows.list",
     "path": "/v1/flows",
   },
+  {
+    "method": "POST",
+    "operationId": "flows.publish",
+    "path": "/v1/flows/{id}/publish",
+  },
+  {
+    "method": "PATCH",
+    "operationId": "flows.update",
+    "path": "/v1/flows/{id}",
+  },
+  {
+    "method": "PUT",
+    "operationId": "flows.updateDraft",
+    "path": "/v1/flows/{id}/draft",
+  },
+  {
+    "method": "GET",
+    "operationId": "flows.versions",
+    "path": "/v1/flows/{id}/versions",
+  },
   {
     "method": "POST",
     "operationId": "folders.create",
@@ -482,11 +577,36 @@ exports[`public API spec — operation naming guard > operation list (operationI
     "operationId": "integrations.tokenErrors",
     "path": "/v1/integrations/status/token-errors",
   },
+  {
+    "method": "POST",
+    "operationId": "keywords.create",
+    "path": "/v1/keywords",
+  },
+  {
+    "method": "DELETE",
+    "operationId": "keywords.delete",
+    "path": "/v1/keywords/{id}",
+  },
+  {
+    "method": "GET",
+    "operationId": "keywords.get",
+    "path": "/v1/keywords/{id}",
+  },
   {
     "method": "GET",
     "operationId": "keywords.list",
     "path": "/v1/keywords",
   },
+  {
+    "method": "PUT",
+    "operationId": "keywords.update",
+    "path": "/v1/keywords/{id}",
+  },
+  {
+    "method": "PATCH",
+    "operationId": "keywords.updateStatus",
+    "path": "/v1/keywords/{id}/status",
+  },
   {
     "method": "POST",
     "operationId": "productCategories.create",
@@ -532,11 +652,31 @@ exports[`public API spec — operation naming guard > operation list (operationI
     "operationId": "products.update",
     "path": "/v1/products/{id}",
   },
+  {
+    "method": "POST",
+    "operationId": "reflinks.create",
+    "path": "/v1/ref-links",
+  },
+  {
+    "method": "DELETE",
+    "operationId": "reflinks.delete",
+    "path": "/v1/ref-links/{id}",
+  },
   {
     "method": "GET",
     "operationId": "reflinks.get",
     "path": "/v1/ref-links/{id}",
   },
+  {
+    "method": "GET",
+    "operationId": "reflinks.list",
+    "path": "/v1/ref-links",
+  },
+  {
+    "method": "PUT",
+    "operationId": "reflinks.update",
+    "path": "/v1/ref-links/{id}",
+  },
   {
     "method": "GET",
     "operationId": "savedReplies.list",
@@ -582,11 +722,36 @@ exports[`public API spec — operation naming guard > operation list (operationI
     "operationId": "templateMessages.list",
     "path": "/v1/template-messages",
   },
+  {
+    "method": "POST",
+    "operationId": "triggers.create",
+    "path": "/v1/triggers",
+  },
+  {
+    "method": "DELETE",
+    "operationId": "triggers.delete",
+    "path": "/v1/triggers/{id}",
+  },
+  {
+    "method": "GET",
+    "operationId": "triggers.get",
+    "path": "/v1/triggers/{id}",
+  },
   {
     "method": "GET",
     "operationId": "triggers.list",
     "path": "/v1/triggers",
   },
+  {
+    "method": "PUT",
+    "operationId": "triggers.update",
+    "path": "/v1/triggers/{id}",
+  },
+  {
+    "method": "PATCH",
+    "operationId": "triggers.updateSettings",
+    "path": "/v1/triggers/{id}/settings",
+  },
   {
     "method": "POST",
     "operationId": "webhooks.create",