Admin Control Plane Matcher Subscriptions
Internal Admin Endpoints
Admin Control Plane Matcher Subscriptions
Internal-only admin contract that exposes normalized authored trigger subscriptions for a future centralized matcher fabric.
POST
Admin Control Plane Matcher Subscriptions
This route gives a centralized matcher service a stable, typed feed of active
authored workflow subscriptions without coupling that matcher to raw workflow
rows or Cloudflare dynamic worker internals.
Optional fields:
Scope
- Internal-only
- Protected by
ADMIN_AUTH_SECRET_TOKEN - Intended for matcher/control-plane infrastructure, not browser traffic
Request
limitownerAddressportfolioIdworkflowIds
Response
Notes
- The first cut intentionally includes only
authored_sdkworkflows. watchKeysare matcher indexing helpers, not replacements for canonical dependency descriptors.- Supported shared-fact families now include market, account, approval, and
portfolio-relative lanes such as
approval.pending_count,account.buying_power_usd,portfolio.cash_pct,portfolio.drift_from_target, andportfolio.concentration. evaluationTarget.providertells downstream infrastructure whether the authored evaluation path currently resolves to CloudflareStrategyFacetruntime or a temporary shared-service fallback.- Trigger delivery still flows through
POST /v1/admin/control-plane/workflow-monitors/notify-trigger-match. ownerAddressis useful for tenant-scoped matcher workers that only want subscriptions for one authenticated owner lane at a time.
Runtime behavior
The intended centralized matcher loop is:- load matcher subscriptions
- compile shared dependency watches from
trigger.dependenciesandwatchKeys - maintain cooldown/rearm state outside per-portfolio actors
- on match, call
notify-trigger-match - let Cloudflare resume or start the correct durable monitor workflow