feat(windchill): add document webhook triggers - #6637

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
docs	Skipped		Aug 12, 2026 6:50pm

PR Summary

Medium Risk
Trigger config stores Windchill credentials and auto-provisions external subscriptions; callbacks rely on a secret URL with no documented signature verification, which increases exposure if the webhook URL leaks.

Overview
Adds provider-managed Windchill document triggers so workflows can start on PTC EventMgmt events instead of only via block actions.

The Windchill block now supports triggers (triggerAllowed, four trigger IDs, canvas trigger sentences, and shared trigger sub-blocks). Four new trigger types cover attribute changes, identity changes, lifecycle state entry, and custom installed events, with configuration for service root, Basic auth, and subscription scope (document, folder, or container).

A new windchill webhook provider registers EventMgmt subscriptions on deploy (POST to EventSubscriptions with the right OData entity type) and tears them down on cleanup, reusing existing Windchill session/mutation helpers and storing the returned subscription OID as externalId. Custom event IDs are validated before any Windchill call; inbound payloads stay raw (no typed outputs or formatInput/matchEvent until PTC documents callbacks).

Docs and integrations.json list the four triggers; tests cover subscription bodies per scope/event and block/trigger registration.

^{Reviewed by Cursor Bugbot for commit c25592c. Bugbot is set up for automated code reviews on this repo. Configure here.}

Greptile Summary

The PR adds four provider-managed Windchill document webhook triggers and wires their configuration, subscription lifecycle, registry metadata, tests, and documentation into Sim.

• Supports document, folder, and container scopes through Windchill EventMgmt.
• Adds attribute, identity, lifecycle-state, and custom document event triggers.
• Preserves raw inbound payloads and manages external subscription creation and deletion.

Confidence Score: 4/5

The PR appears safe to merge from a functional perspective, with only non-blocking repository-convention cleanup needed.

The Windchill subscription and delivery paths retain the existing request security controls, while the accepted findings are limited to import paths, filenames, and constant typing conventions.

Files Needing Attention: apps/sim/triggers/windchill/index.ts and apps/sim/triggers/windchill/utils.ts

sequenceDiagram
  participant User
  participant Sim as Sim Deployment
  participant WRS as Windchill EventMgmt
  participant Hook as Sim Webhook Ingress
  participant Exec as Workflow Executor
  User->>Sim: Configure and deploy Windchill trigger
  Sim->>WRS: Create EventSubscription
  WRS-->>Sim: Subscription ID
  WRS->>Hook: POST raw document event
  Hook->>Exec: Enqueue workflow execution
  User->>Sim: Undeploy or replace trigger
  Sim->>WRS: Delete EventSubscription

_{Reviews (1): Last reviewed commit: "docs(windchill): clarify trigger authent..." | Re-trigger Greptile}