Skip to main content
POST
Admin Control Plane Matcher Subscriptions
This route gives a centralized matcher service a stable, typed feed of active authored workflow subscriptions without coupling that matcher to raw workflow rows or Cloudflare dynamic worker internals.

Scope

  • Internal-only
  • Protected by ADMIN_AUTH_SECRET_TOKEN
  • Intended for matcher/control-plane infrastructure, not browser traffic

Request

Optional fields:
  • limit
  • ownerAddress
  • portfolioId
  • workflowIds

Response

Notes

  • The first cut intentionally includes only authored_sdk workflows.
  • watchKeys are matcher indexing helpers, not replacements for canonical dependency descriptors.
  • Supported shared-fact families now include market, account, approval, and portfolio-relative lanes such as approval.pending_count, account.buying_power_usd, portfolio.cash_pct, portfolio.drift_from_target, and portfolio.concentration.
  • evaluationTarget.provider tells downstream infrastructure whether the authored evaluation path currently resolves to Cloudflare StrategyFacet runtime or a temporary shared-service fallback.
  • Trigger delivery still flows through POST /v1/admin/control-plane/workflow-monitors/notify-trigger-match.
  • ownerAddress is useful for tenant-scoped matcher workers that only want subscriptions for one authenticated owner lane at a time.

Runtime behavior

The intended centralized matcher loop is:
  1. load matcher subscriptions
  2. compile shared dependency watches from trigger.dependencies and watchKeys
  3. maintain cooldown/rearm state outside per-portfolio actors
  4. on match, call notify-trigger-match
  5. let Cloudflare resume or start the correct durable monitor workflow