fix(webapp,webhook-sources): fix the production build and the internal test shard

The webhook API action routes exported action/loader via an inline destructured
`export const { action, loader } = createActionApiRoute(...)`, which the Remix
production build cannot strip, so it pulled the server-only ~/db.server into the
client bundle and failed the build. Split the export into a plain const plus a
separate `export { action, loader }`, matching the other API routes, so the
server code is removed as expected.

Also drop the extra --run from the @internal/webhook-sources test script; CI
appends its own --run and the duplicate flag failed the shard.

Author: ericallam

apps/webapp/app/routes/api.v1.webhooks.deliveries.$deliveryId.replay.ts

@@ -10,7 +10,7 @@ const ParamsSchema = z.object({ deliveryId: z.string() });
 
 // POST /api/v1/webhooks/deliveries/:deliveryId/replay — re-run the delivery's task from its stored
 // event as a NEW delivery (we don't keep the raw body, so this re-triggers rather than re-verifies).
-export const { action, loader } = createActionApiRoute(
+const { action, loader } = createActionApiRoute(
   {
     params: ParamsSchema,
     method: "POST",
@@ -56,3 +56,5 @@ export const { action, loader } = createActionApiRoute(
     }
   }
 );
+
+export { action, loader };

apps/webapp/app/routes/api.v1.webhooks.endpoints.$endpointId.disable.ts

@@ -8,7 +8,7 @@ import { webhookEngine } from "~/v3/webhookEngine.server";
 const ParamsSchema = z.object({ endpointId: z.string() });
 
 // POST /api/v1/webhooks/endpoints/:endpointId/disable — pause an endpoint (ingress returns 404).
-export const { action, loader } = createActionApiRoute(
+const { action, loader } = createActionApiRoute(
   {
     params: ParamsSchema,
     method: "POST",
@@ -32,3 +32,5 @@ export const { action, loader } = createActionApiRoute(
     return json(await findWebhookEndpointResource(authentication, params.endpointId));
   }
 );
+
+export { action, loader };

apps/webapp/app/routes/api.v1.webhooks.endpoints.$endpointId.enable.ts

@@ -8,7 +8,7 @@ import { webhookEngine } from "~/v3/webhookEngine.server";
 const ParamsSchema = z.object({ endpointId: z.string() });
 
 // POST /api/v1/webhooks/endpoints/:endpointId/enable — resume a paused endpoint.
-export const { action, loader } = createActionApiRoute(
+const { action, loader } = createActionApiRoute(
   {
     params: ParamsSchema,
     method: "POST",
@@ -32,3 +32,5 @@ export const { action, loader } = createActionApiRoute(
     return json(await findWebhookEndpointResource(authentication, params.endpointId));
   }
 );
+
+export { action, loader };

apps/webapp/app/routes/api.v1.webhooks.endpoints.$endpointId.rotate-secret.ts

@@ -11,7 +11,7 @@ const ParamsSchema = z.object({ endpointId: z.string() });
 
 // POST /api/v1/webhooks/endpoints/:endpointId/rotate-secret — mint a new signing secret and return
 // it ONCE. Only for schemes we generate (hmac / shared-secret); asymmetric endpoints set a public key.
-export const { action, loader } = createActionApiRoute(
+const { action, loader } = createActionApiRoute(
   {
     params: ParamsSchema,
     method: "POST",
@@ -49,3 +49,5 @@ export const { action, loader } = createActionApiRoute(
     return json({ id: endpoint.friendlyId, secretSet: true as const, secret });
   }
 );
+
+export { action, loader };

internal-packages/webhook-sources/package.json

@@ -14,7 +14,7 @@
   },
   "scripts": {
     "typecheck": "tsc --noEmit",
-    "test": "vitest --run",
+    "test": "vitest",
     "ingest": "tsx src/ingest.ts",
     "catalog:status": "tsx catalog/status.ts",
     "catalog:aggregate": "tsx catalog/build-aggregates.ts"