From 56dd4a18af74bcce78e8319effe2f04f4963225c Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 1 Apr 2026 16:24:37 +0000
Subject: [PATCH 1/4] Initial plan


From 2d9e95aa3d8442c538e3b1f6b1abaea53c250e7f Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 1 Apr 2026 16:46:24 +0000
Subject: [PATCH 2/4] feat: implement post-job actions service, controller, and
 frontend

Agent-Logs-Url: https://github.com/MaximumTrainer/OpenDataMask/sessions/57b16640-b697-457b-9948-ba50ad6b410a

Co-authored-by: MaximumTrainer <1376575+MaximumTrainer@users.noreply.github.com>
---
 .../controller/PostJobActionController.kt     |   8 +
 .../service/PostJobActionService.kt           |   8 +
 .../controller/PostJobActionControllerTest.kt |  12 +
 .../service/PostJobActionServiceTest.kt       |  22 ++
 frontend/src/api/actions.ts                   |  34 +++
 frontend/src/router/index.ts                  |   7 +
 frontend/src/types/index.ts                   |  23 ++
 frontend/src/views/ActionsView.vue            | 285 ++++++++++++++++++
 frontend/src/views/WorkspaceDetailView.vue    |  13 +-
 .../src/views/__tests__/ActionsView.test.ts   |  14 +
 10 files changed, 425 insertions(+), 1 deletion(-)
 create mode 100644 frontend/src/api/actions.ts
 create mode 100644 frontend/src/views/ActionsView.vue
 create mode 100644 frontend/src/views/__tests__/ActionsView.test.ts

diff --git a/backend/src/main/kotlin/com/opendatamask/controller/PostJobActionController.kt b/backend/src/main/kotlin/com/opendatamask/controller/PostJobActionController.kt
index e752d95..d21e196 100644
--- a/backend/src/main/kotlin/com/opendatamask/controller/PostJobActionController.kt
+++ b/backend/src/main/kotlin/com/opendatamask/controller/PostJobActionController.kt
@@ -24,6 +24,14 @@ class PostJobActionController(
         return ResponseEntity.status(HttpStatus.CREATED).body(service.createAction(toSave))
     }
 
+    @PutMapping("/{actionId}")
+    fun updateAction(
+        @PathVariable workspaceId: Long,
+        @PathVariable actionId: Long,
+        @RequestBody action: PostJobAction
+    ): ResponseEntity<PostJobAction> =
+        ResponseEntity.ok(service.updateAction(actionId, action.copy(workspaceId = workspaceId)))
+
     @DeleteMapping("/{actionId}")
     fun deleteAction(
         @PathVariable workspaceId: Long,
diff --git a/backend/src/main/kotlin/com/opendatamask/service/PostJobActionService.kt b/backend/src/main/kotlin/com/opendatamask/service/PostJobActionService.kt
index 892341d..030a9fc 100644
--- a/backend/src/main/kotlin/com/opendatamask/service/PostJobActionService.kt
+++ b/backend/src/main/kotlin/com/opendatamask/service/PostJobActionService.kt
@@ -103,5 +103,13 @@ class PostJobActionService(
 
     fun createAction(action: PostJobAction): PostJobAction = repository.save(action)
     fun listActions(workspaceId: Long): List<PostJobAction> = repository.findByWorkspaceId(workspaceId)
+    fun updateAction(id: Long, updated: PostJobAction): PostJobAction {
+        val existing = repository.findById(id)
+            .orElseThrow { NoSuchElementException("PostJobAction not found: $id") }
+        existing.actionType = updated.actionType
+        existing.config = updated.config
+        existing.enabled = updated.enabled
+        return repository.save(existing)
+    }
     fun deleteAction(id: Long) = repository.deleteById(id)
 }
diff --git a/backend/src/test/kotlin/com/opendatamask/controller/PostJobActionControllerTest.kt b/backend/src/test/kotlin/com/opendatamask/controller/PostJobActionControllerTest.kt
index 2c5729a..94d2834 100644
--- a/backend/src/test/kotlin/com/opendatamask/controller/PostJobActionControllerTest.kt
+++ b/backend/src/test/kotlin/com/opendatamask/controller/PostJobActionControllerTest.kt
@@ -66,4 +66,16 @@ class PostJobActionControllerTest {
             .andExpect(status().isNoContent)
         verify(service).deleteAction(42L)
     }
+
+    @Test
+    fun `PUT update action returns 200`() {
+        val action = PostJobAction(workspaceId = 1L, actionType = ActionType.WEBHOOK, config = """{"url":"http://example.com"}""")
+        whenever(service.updateAction(eq(42L), any<PostJobAction>())).thenReturn(action.copy(id = 42L))
+        mockMvc.perform(
+            put("/api/workspaces/1/actions/42")
+                .contentType(MediaType.APPLICATION_JSON)
+                .content(mapper.writeValueAsString(action))
+        ).andExpect(status().isOk)
+        verify(service).updateAction(eq(42L), any<PostJobAction>())
+    }
 }
diff --git a/backend/src/test/kotlin/com/opendatamask/service/PostJobActionServiceTest.kt b/backend/src/test/kotlin/com/opendatamask/service/PostJobActionServiceTest.kt
index 1a290cb..ef931b7 100644
--- a/backend/src/test/kotlin/com/opendatamask/service/PostJobActionServiceTest.kt
+++ b/backend/src/test/kotlin/com/opendatamask/service/PostJobActionServiceTest.kt
@@ -68,4 +68,26 @@ class PostJobActionServiceTest {
         service.deleteAction(42L)
         verify(repository).deleteById(42L)
     }
+
+    @Test
+    fun `updateAction updates fields and saves`() {
+        val existing = PostJobAction(
+            id = 1L, workspaceId = 1L,
+            actionType = ActionType.EMAIL,
+            config = """{"to":"old@example.com"}"""
+        )
+        val updated = PostJobAction(
+            id = 1L, workspaceId = 1L,
+            actionType = ActionType.WEBHOOK,
+            config = """{"url":"http://new.example.com"}""",
+            enabled = false
+        )
+        whenever(repository.findById(1L)).thenReturn(java.util.Optional.of(existing))
+        whenever(repository.save(any<PostJobAction>())).thenReturn(existing)
+        service.updateAction(1L, updated)
+        verify(repository).save(existing)
+        assertEquals(ActionType.WEBHOOK, existing.actionType)
+        assertEquals("""{"url":"http://new.example.com"}""", existing.config)
+        assertEquals(false, existing.enabled)
+    }
 }
diff --git a/frontend/src/api/actions.ts b/frontend/src/api/actions.ts
new file mode 100644
index 0000000..bc42c43
--- /dev/null
+++ b/frontend/src/api/actions.ts
@@ -0,0 +1,34 @@
+import apiClient from './client'
+import type { PostJobAction, PostJobActionRequest } from '@/types'
+
+export async function listActions(workspaceId: number): Promise<PostJobAction[]> {
+  const { data } = await apiClient.get<PostJobAction[]>(`/workspaces/${workspaceId}/actions`)
+  return data
+}
+
+export async function createAction(
+  workspaceId: number,
+  payload: PostJobActionRequest
+): Promise<PostJobAction> {
+  const { data } = await apiClient.post<PostJobAction>(
+    `/workspaces/${workspaceId}/actions`,
+    payload
+  )
+  return data
+}
+
+export async function updateAction(
+  workspaceId: number,
+  actionId: number,
+  payload: PostJobActionRequest
+): Promise<PostJobAction> {
+  const { data } = await apiClient.put<PostJobAction>(
+    `/workspaces/${workspaceId}/actions/${actionId}`,
+    payload
+  )
+  return data
+}
+
+export async function deleteAction(workspaceId: number, actionId: number): Promise<void> {
+  await apiClient.delete(`/workspaces/${workspaceId}/actions/${actionId}`)
+}
diff --git a/frontend/src/router/index.ts b/frontend/src/router/index.ts
index ca8139f..9310537 100644
--- a/frontend/src/router/index.ts
+++ b/frontend/src/router/index.ts
@@ -8,6 +8,7 @@ import WorkspaceDetailView from '@/views/WorkspaceDetailView.vue'
 import ConnectionsView from '@/views/ConnectionsView.vue'
 import TablesView from '@/views/TablesView.vue'
 import JobsView from '@/views/JobsView.vue'
+import ActionsView from '@/views/ActionsView.vue'
 
 const router = createRouter({
   history: createWebHistory(import.meta.env.BASE_URL),
@@ -60,6 +61,12 @@ const router = createRouter({
       name: 'jobs',
       component: JobsView,
       meta: { requiresAuth: true }
+    },
+    {
+      path: '/workspaces/:id/actions',
+      name: 'actions',
+      component: ActionsView,
+      meta: { requiresAuth: true }
     }
   ]
 })
diff --git a/frontend/src/types/index.ts b/frontend/src/types/index.ts
index eacf1d6..6248537 100644
--- a/frontend/src/types/index.ts
+++ b/frontend/src/types/index.ts
@@ -204,6 +204,29 @@ export interface JobLog {
   timestamp: string
 }
 
+// ── Post-Job Action ───────────────────────────────────────────────────────
+
+export enum ActionType {
+  WEBHOOK = 'WEBHOOK',
+  EMAIL = 'EMAIL',
+  SCRIPT = 'SCRIPT'
+}
+
+export interface PostJobAction {
+  id: number
+  workspaceId: number
+  actionType: ActionType
+  config: string
+  enabled: boolean
+  createdAt: string
+}
+
+export interface PostJobActionRequest {
+  actionType: ActionType
+  config: string
+  enabled?: boolean
+}
+
 // ── Pagination ────────────────────────────────────────────────────────────
 
 export interface Page<T> {
diff --git a/frontend/src/views/ActionsView.vue b/frontend/src/views/ActionsView.vue
new file mode 100644
index 0000000..a95dd83
--- /dev/null
+++ b/frontend/src/views/ActionsView.vue
@@ -0,0 +1,285 @@
+<script setup lang="ts">
+import { ref, onMounted, computed } from 'vue'
+import { useRoute } from 'vue-router'
+import Modal from '@/components/Modal.vue'
+import * as actionsApi from '@/api/actions'
+import type { PostJobAction, PostJobActionRequest } from '@/types'
+import { ActionType } from '@/types'
+
+const route = useRoute()
+const workspaceId = computed(() => Number(route.params.id))
+
+const actions = ref<PostJobAction[]>([])
+const loading = ref(false)
+const error = ref('')
+const showModal = ref(false)
+const editingAction = ref<PostJobAction | null>(null)
+const saving = ref(false)
+const formError = ref('')
+
+const defaultForm = (): PostJobActionRequest => ({
+  actionType: ActionType.WEBHOOK,
+  config: '{}',
+  enabled: true
+})
+
+const form = ref<PostJobActionRequest>(defaultForm())
+const actionTypes = Object.values(ActionType)
+
+async function fetchActions() {
+  loading.value = true
+  error.value = ''
+  try {
+    actions.value = await actionsApi.listActions(workspaceId.value)
+  } catch {
+    error.value = 'Failed to load post-job actions.'
+  } finally {
+    loading.value = false
+  }
+}
+
+onMounted(fetchActions)
+
+function openCreate() {
+  editingAction.value = null
+  form.value = defaultForm()
+  formError.value = ''
+  showModal.value = true
+}
+
+function openEdit(action: PostJobAction) {
+  editingAction.value = action
+  form.value = {
+    actionType: action.actionType,
+    config: action.config,
+    enabled: action.enabled
+  }
+  formError.value = ''
+  showModal.value = true
+}
+
+async function submitForm() {
+  formError.value = ''
+  try {
+    const parsed = JSON.parse(form.value.config)
+    if (typeof parsed !== 'object' || parsed === null) throw new Error()
+  } catch {
+    formError.value = 'Config must be valid JSON object.'
+    return
+  }
+  saving.value = true
+  try {
+    if (editingAction.value) {
+      const updated = await actionsApi.updateAction(
+        workspaceId.value,
+        editingAction.value.id,
+        form.value
+      )
+      const idx = actions.value.findIndex((a) => a.id === updated.id)
+      if (idx !== -1) actions.value[idx] = updated
+    } else {
+      const created = await actionsApi.createAction(workspaceId.value, form.value)
+      actions.value.push(created)
+    }
+    showModal.value = false
+  } catch {
+    formError.value = 'Failed to save action.'
+  } finally {
+    saving.value = false
+  }
+}
+
+async function handleDelete(action: PostJobAction) {
+  if (!confirm(`Delete this ${action.actionType} action?`)) return
+  try {
+    await actionsApi.deleteAction(workspaceId.value, action.id)
+    actions.value = actions.value.filter((a) => a.id !== action.id)
+  } catch {
+    alert('Failed to delete action.')
+  }
+}
+
+async function toggleEnabled(action: PostJobAction) {
+  try {
+    const updated = await actionsApi.updateAction(workspaceId.value, action.id, {
+      actionType: action.actionType,
+      config: action.config,
+      enabled: !action.enabled
+    })
+    const idx = actions.value.findIndex((a) => a.id === action.id)
+    if (idx !== -1) actions.value[idx] = updated
+  } catch {
+    alert('Failed to update action.')
+  }
+}
+
+function actionTypeIcon(type: ActionType): string {
+  const icons: Record<ActionType, string> = {
+    [ActionType.WEBHOOK]: '🔗',
+    [ActionType.EMAIL]: '📧',
+    [ActionType.SCRIPT]: '📜'
+  }
+  return icons[type] ?? '⚡'
+}
+
+function configSummary(action: PostJobAction): string {
+  try {
+    const cfg = JSON.parse(action.config) as Record<string, string>
+    if (action.actionType === ActionType.WEBHOOK) return cfg.url ?? '—'
+    if (action.actionType === ActionType.EMAIL) return cfg.to ?? '—'
+    if (action.actionType === ActionType.SCRIPT) return cfg.path ?? '—'
+  } catch {
+    // ignore
+  }
+  return action.config
+}
+
+function formatDate(d: string) {
+  return new Date(d).toLocaleString()
+}
+</script>
+
+<template>
+  <div class="page">
+    <!-- Breadcrumb -->
+    <div class="breadcrumb">
+      <RouterLink to="/workspaces">Workspaces</RouterLink>
+      <span class="breadcrumb-sep">›</span>
+      <RouterLink :to="`/workspaces/${workspaceId}`">Workspace</RouterLink>
+      <span class="breadcrumb-sep">›</span>
+      <span>Actions</span>
+    </div>
+
+    <div class="page-header">
+      <div>
+        <h1>Post-Job Actions</h1>
+        <p class="text-gray-500 text-sm mt-1">Configure webhooks, emails, and scripts triggered after each job</p>
+      </div>
+      <button class="btn btn-primary" @click="openCreate">＋ Add Action</button>
+    </div>
+
+    <div v-if="loading" class="loading-overlay">
+      <span class="spinner spinner-lg" />
+    </div>
+    <div v-else-if="error" class="alert alert-error">{{ error }}</div>
+
+    <div v-else-if="actions.length === 0" class="empty-state">
+      <div class="empty-state-icon">⚡</div>
+      <h3>No post-job actions</h3>
+      <p>Add a webhook, email, or script to run automatically when a job completes.</p>
+      <button class="btn btn-primary mt-4" @click="openCreate">＋ Add Action</button>
+    </div>
+
+    <div v-else class="card">
+      <div class="table-wrapper">
+        <table>
+          <thead>
+            <tr>
+              <th>Type</th>
+              <th>Target</th>
+              <th>Enabled</th>
+              <th>Created</th>
+              <th>Actions</th>
+            </tr>
+          </thead>
+          <tbody>
+            <tr v-for="action in actions" :key="action.id">
+              <td>
+                <span class="badge badge-indigo">
+                  {{ actionTypeIcon(action.actionType) }} {{ action.actionType }}
+                </span>
+              </td>
+              <td class="text-gray-600 config-cell">{{ configSummary(action) }}</td>
+              <td>
+                <span
+                  class="badge"
+                  :class="action.enabled ? 'badge-green' : 'badge-gray'"
+                >
+                  {{ action.enabled ? 'Enabled' : 'Disabled' }}
+                </span>
+              </td>
+              <td class="text-gray-500 text-sm">{{ formatDate(action.createdAt) }}</td>
+              <td>
+                <div class="flex gap-2">
+                  <button
+                    class="btn btn-secondary btn-sm"
+                    @click="toggleEnabled(action)"
+                  >
+                    {{ action.enabled ? 'Disable' : 'Enable' }}
+                  </button>
+                  <button class="btn btn-secondary btn-sm" @click="openEdit(action)">Edit</button>
+                  <button class="btn btn-danger btn-sm" @click="handleDelete(action)">Delete</button>
+                </div>
+              </td>
+            </tr>
+          </tbody>
+        </table>
+      </div>
+    </div>
+
+    <!-- Modal -->
+    <Modal
+      v-if="showModal"
+      :title="editingAction ? 'Edit Action' : 'Add Post-Job Action'"
+      @close="showModal = false"
+    >
+      <form @submit.prevent="submitForm">
+        <div v-if="formError" class="alert alert-error">{{ formError }}</div>
+
+        <div class="form-group">
+          <label class="form-label">Action Type *</label>
+          <select v-model="form.actionType" class="form-control">
+            <option v-for="t in actionTypes" :key="t" :value="t">
+              {{ actionTypeIcon(t as ActionType) }} {{ t }}
+            </option>
+          </select>
+        </div>
+
+        <div class="form-group">
+          <label class="form-label">
+            Config (JSON) *
+            <span class="text-gray-400 font-normal text-xs ml-2">
+              <template v-if="form.actionType === ActionType.WEBHOOK">e.g. {"url":"https://…"}</template>
+              <template v-else-if="form.actionType === ActionType.EMAIL">e.g. {"to":"user@example.com"}</template>
+              <template v-else>e.g. {"path":"/scripts/notify.sh"}</template>
+            </span>
+          </label>
+          <textarea
+            v-model="form.config"
+            class="form-control"
+            rows="4"
+            style="font-family: monospace; font-size: 0.85rem;"
+            placeholder="{}"
+          />
+        </div>
+
+        <div class="form-group" style="display:flex;align-items:center;gap:.75rem;">
+          <input
+            id="enabled"
+            v-model="form.enabled"
+            type="checkbox"
+            style="width:1rem;height:1rem;cursor:pointer;"
+          />
+          <label for="enabled" class="form-label" style="margin:0;cursor:pointer;">Enabled</label>
+        </div>
+      </form>
+      <template #footer>
+        <button class="btn btn-secondary" @click="showModal = false">Cancel</button>
+        <button class="btn btn-primary" :disabled="saving" @click="submitForm">
+          <span v-if="saving" class="spinner" style="width:.9rem;height:.9rem;border-width:2px;" />
+          {{ editingAction ? 'Save Changes' : 'Add Action' }}
+        </button>
+      </template>
+    </Modal>
+  </div>
+</template>
+
+<style scoped>
+.config-cell {
+  max-width: 260px;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+  font-size: 0.875rem;
+}
+</style>
diff --git a/frontend/src/views/WorkspaceDetailView.vue b/frontend/src/views/WorkspaceDetailView.vue
index 187bb4f..81a1ebc 100644
--- a/frontend/src/views/WorkspaceDetailView.vue
+++ b/frontend/src/views/WorkspaceDetailView.vue
@@ -16,7 +16,8 @@ const tabs = [
   { label: 'Overview',    icon: '📋', path: () => `/workspaces/${workspaceId.value}` },
   { label: 'Connections', icon: '🔌', path: () => `/workspaces/${workspaceId.value}/connections` },
   { label: 'Tables',      icon: '📊', path: () => `/workspaces/${workspaceId.value}/tables` },
-  { label: 'Jobs',        icon: '⚙️', path: () => `/workspaces/${workspaceId.value}/jobs` }
+  { label: 'Jobs',        icon: '⚙️', path: () => `/workspaces/${workspaceId.value}/jobs` },
+  { label: 'Actions',     icon: '⚡', path: () => `/workspaces/${workspaceId.value}/actions` }
 ]
 
 function navigate(path: string) {
@@ -120,6 +121,16 @@ function formatDate(d: string) {
                 <div class="text-sm text-gray-500">Run & monitor jobs</div>
               </div>
             </button>
+            <button
+              class="quick-btn"
+              @click="navigate(`/workspaces/${workspaceId}/actions`)"
+            >
+              <span class="quick-icon">⚡</span>
+              <div>
+                <div class="font-semibold">Actions</div>
+                <div class="text-sm text-gray-500">Post-job webhooks & notifications</div>
+              </div>
+            </button>
           </div>
         </div>
       </div>
diff --git a/frontend/src/views/__tests__/ActionsView.test.ts b/frontend/src/views/__tests__/ActionsView.test.ts
new file mode 100644
index 0000000..1f2c863
--- /dev/null
+++ b/frontend/src/views/__tests__/ActionsView.test.ts
@@ -0,0 +1,14 @@
+import { describe, it, expect } from 'vitest'
+import { ActionType } from '../../types/index'
+
+describe('ActionType enum', () => {
+  it('includes all action types', () => {
+    expect(ActionType.WEBHOOK).toBe('WEBHOOK')
+    expect(ActionType.EMAIL).toBe('EMAIL')
+    expect(ActionType.SCRIPT).toBe('SCRIPT')
+  })
+
+  it('has exactly 3 action types', () => {
+    expect(Object.keys(ActionType).length).toBe(3)
+  })
+})

From c6c7bba45d4fc8037a49faaca9c88aa65cd35989 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 1 Apr 2026 18:19:51 +0000
Subject: [PATCH 3/4] fix: introduce PostJobActionRequest DTO, workspace
 ownership check, array rejection in config validation

Agent-Logs-Url: https://github.com/MaximumTrainer/OpenDataMask/sessions/d2b2fdb4-26f5-47f7-b1d2-085697bf7fed

Co-authored-by: MaximumTrainer <1376575+MaximumTrainer@users.noreply.github.com>
---
 .../controller/PostJobActionController.kt     | 14 +++++---
 .../com/opendatamask/dto/PostJobActionDto.kt  |  9 +++++
 .../service/PostJobActionService.kt           | 11 +++---
 .../controller/PostJobActionControllerTest.kt | 34 ++++++++++++++-----
 .../service/PostJobActionServiceTest.kt       | 21 ++++++++++--
 frontend/src/views/ActionsView.vue            |  2 +-
 6 files changed, 70 insertions(+), 21 deletions(-)
 create mode 100644 backend/src/main/kotlin/com/opendatamask/dto/PostJobActionDto.kt

diff --git a/backend/src/main/kotlin/com/opendatamask/controller/PostJobActionController.kt b/backend/src/main/kotlin/com/opendatamask/controller/PostJobActionController.kt
index d21e196..b220fa8 100644
--- a/backend/src/main/kotlin/com/opendatamask/controller/PostJobActionController.kt
+++ b/backend/src/main/kotlin/com/opendatamask/controller/PostJobActionController.kt
@@ -1,5 +1,6 @@
 package com.opendatamask.controller
 
+import com.opendatamask.dto.PostJobActionRequest
 import com.opendatamask.model.PostJobAction
 import com.opendatamask.service.PostJobActionService
 import org.springframework.http.HttpStatus
@@ -18,9 +19,14 @@ class PostJobActionController(
     @PostMapping
     fun createAction(
         @PathVariable workspaceId: Long,
-        @RequestBody action: PostJobAction
+        @RequestBody request: PostJobActionRequest
     ): ResponseEntity<PostJobAction> {
-        val toSave = action.copy(workspaceId = workspaceId)
+        val toSave = PostJobAction(
+            workspaceId = workspaceId,
+            actionType = request.actionType,
+            config = request.config,
+            enabled = request.enabled
+        )
         return ResponseEntity.status(HttpStatus.CREATED).body(service.createAction(toSave))
     }
 
@@ -28,9 +34,9 @@ class PostJobActionController(
     fun updateAction(
         @PathVariable workspaceId: Long,
         @PathVariable actionId: Long,
-        @RequestBody action: PostJobAction
+        @RequestBody request: PostJobActionRequest
     ): ResponseEntity<PostJobAction> =
-        ResponseEntity.ok(service.updateAction(actionId, action.copy(workspaceId = workspaceId)))
+        ResponseEntity.ok(service.updateAction(workspaceId, actionId, request))
 
     @DeleteMapping("/{actionId}")
     fun deleteAction(
diff --git a/backend/src/main/kotlin/com/opendatamask/dto/PostJobActionDto.kt b/backend/src/main/kotlin/com/opendatamask/dto/PostJobActionDto.kt
new file mode 100644
index 0000000..b916b38
--- /dev/null
+++ b/backend/src/main/kotlin/com/opendatamask/dto/PostJobActionDto.kt
@@ -0,0 +1,9 @@
+package com.opendatamask.dto
+
+import com.opendatamask.model.ActionType
+
+data class PostJobActionRequest(
+    val actionType: ActionType,
+    val config: String = "{}",
+    val enabled: Boolean = true
+)
diff --git a/backend/src/main/kotlin/com/opendatamask/service/PostJobActionService.kt b/backend/src/main/kotlin/com/opendatamask/service/PostJobActionService.kt
index 030a9fc..b9d6ac3 100644
--- a/backend/src/main/kotlin/com/opendatamask/service/PostJobActionService.kt
+++ b/backend/src/main/kotlin/com/opendatamask/service/PostJobActionService.kt
@@ -103,12 +103,15 @@ class PostJobActionService(
 
     fun createAction(action: PostJobAction): PostJobAction = repository.save(action)
     fun listActions(workspaceId: Long): List<PostJobAction> = repository.findByWorkspaceId(workspaceId)
-    fun updateAction(id: Long, updated: PostJobAction): PostJobAction {
+    fun updateAction(workspaceId: Long, id: Long, request: com.opendatamask.dto.PostJobActionRequest): PostJobAction {
         val existing = repository.findById(id)
             .orElseThrow { NoSuchElementException("PostJobAction not found: $id") }
-        existing.actionType = updated.actionType
-        existing.config = updated.config
-        existing.enabled = updated.enabled
+        if (existing.workspaceId != workspaceId) {
+            throw NoSuchElementException("PostJobAction $id does not belong to workspace $workspaceId")
+        }
+        existing.actionType = request.actionType
+        existing.config = request.config
+        existing.enabled = request.enabled
         return repository.save(existing)
     }
     fun deleteAction(id: Long) = repository.deleteById(id)
diff --git a/backend/src/test/kotlin/com/opendatamask/controller/PostJobActionControllerTest.kt b/backend/src/test/kotlin/com/opendatamask/controller/PostJobActionControllerTest.kt
index 94d2834..7357051 100644
--- a/backend/src/test/kotlin/com/opendatamask/controller/PostJobActionControllerTest.kt
+++ b/backend/src/test/kotlin/com/opendatamask/controller/PostJobActionControllerTest.kt
@@ -2,6 +2,7 @@ package com.opendatamask.controller
 
 import com.fasterxml.jackson.datatype.jsr310.JavaTimeModule
 import com.fasterxml.jackson.module.kotlin.jacksonObjectMapper
+import com.opendatamask.dto.PostJobActionRequest
 import com.opendatamask.model.ActionType
 import com.opendatamask.model.PostJobAction
 import com.opendatamask.security.JwtAuthenticationFilter
@@ -51,12 +52,13 @@ class PostJobActionControllerTest {
 
     @Test
     fun `POST create action returns 201`() {
-        val action = PostJobAction(workspaceId = 1L, actionType = ActionType.WEBHOOK, config = """{"url":"http://example.com"}""")
-        whenever(service.createAction(any<PostJobAction>())).thenReturn(action.copy(id = 1L))
+        val request = PostJobActionRequest(actionType = ActionType.WEBHOOK, config = """{"url":"http://example.com"}""")
+        val saved = PostJobAction(id = 1L, workspaceId = 1L, actionType = ActionType.WEBHOOK, config = """{"url":"http://example.com"}""")
+        whenever(service.createAction(any<PostJobAction>())).thenReturn(saved)
         mockMvc.perform(
             post("/api/workspaces/1/actions")
                 .contentType(MediaType.APPLICATION_JSON)
-                .content(mapper.writeValueAsString(action))
+                .content(mapper.writeValueAsString(request))
         ).andExpect(status().isCreated)
     }
 
@@ -68,14 +70,28 @@ class PostJobActionControllerTest {
     }
 
     @Test
-    fun `PUT update action returns 200`() {
-        val action = PostJobAction(workspaceId = 1L, actionType = ActionType.WEBHOOK, config = """{"url":"http://example.com"}""")
-        whenever(service.updateAction(eq(42L), any<PostJobAction>())).thenReturn(action.copy(id = 42L))
+    fun `PUT update action returns 200 with correct response body`() {
+        val request = PostJobActionRequest(
+            actionType = ActionType.WEBHOOK,
+            config = """{"url":"http://example.com"}"""
+        )
+        val returned = PostJobAction(
+            id = 42L,
+            workspaceId = 1L,
+            actionType = ActionType.WEBHOOK,
+            config = """{"url":"http://example.com"}"""
+        )
+        whenever(service.updateAction(eq(1L), eq(42L), any<PostJobActionRequest>())).thenReturn(returned)
         mockMvc.perform(
             put("/api/workspaces/1/actions/42")
                 .contentType(MediaType.APPLICATION_JSON)
-                .content(mapper.writeValueAsString(action))
-        ).andExpect(status().isOk)
-        verify(service).updateAction(eq(42L), any<PostJobAction>())
+                .content(mapper.writeValueAsString(request))
+        )
+            .andExpect(status().isOk)
+            .andExpect(jsonPath("$.id").value(42))
+            .andExpect(jsonPath("$.workspaceId").value(1))
+            .andExpect(jsonPath("$.actionType").value("WEBHOOK"))
+            .andExpect(jsonPath("$.config").value("""{"url":"http://example.com"}"""))
+        verify(service).updateAction(eq(1L), eq(42L), any<PostJobActionRequest>())
     }
 }
diff --git a/backend/src/test/kotlin/com/opendatamask/service/PostJobActionServiceTest.kt b/backend/src/test/kotlin/com/opendatamask/service/PostJobActionServiceTest.kt
index ef931b7..c987be6 100644
--- a/backend/src/test/kotlin/com/opendatamask/service/PostJobActionServiceTest.kt
+++ b/backend/src/test/kotlin/com/opendatamask/service/PostJobActionServiceTest.kt
@@ -1,5 +1,6 @@
 package com.opendatamask.service
 
+import com.opendatamask.dto.PostJobActionRequest
 import com.opendatamask.model.ActionType
 import com.opendatamask.model.Job
 import com.opendatamask.model.JobStatus
@@ -7,6 +8,7 @@ import com.opendatamask.model.PostJobAction
 import com.opendatamask.repository.PostJobActionRepository
 import org.junit.jupiter.api.Test
 import org.junit.jupiter.api.Assertions.*
+import org.junit.jupiter.api.assertThrows
 import org.mockito.kotlin.*
 import java.time.LocalDateTime
 
@@ -76,18 +78,31 @@ class PostJobActionServiceTest {
             actionType = ActionType.EMAIL,
             config = """{"to":"old@example.com"}"""
         )
-        val updated = PostJobAction(
-            id = 1L, workspaceId = 1L,
+        val request = PostJobActionRequest(
             actionType = ActionType.WEBHOOK,
             config = """{"url":"http://new.example.com"}""",
             enabled = false
         )
         whenever(repository.findById(1L)).thenReturn(java.util.Optional.of(existing))
         whenever(repository.save(any<PostJobAction>())).thenReturn(existing)
-        service.updateAction(1L, updated)
+        service.updateAction(1L, 1L, request)
         verify(repository).save(existing)
         assertEquals(ActionType.WEBHOOK, existing.actionType)
         assertEquals("""{"url":"http://new.example.com"}""", existing.config)
         assertEquals(false, existing.enabled)
     }
+
+    @Test
+    fun `updateAction throws when action belongs to different workspace`() {
+        val existing = PostJobAction(
+            id = 1L, workspaceId = 99L,
+            actionType = ActionType.EMAIL,
+            config = """{"to":"other@example.com"}"""
+        )
+        whenever(repository.findById(1L)).thenReturn(java.util.Optional.of(existing))
+        assertThrows<NoSuchElementException> {
+            service.updateAction(1L, 1L, PostJobActionRequest(actionType = ActionType.EMAIL, config = "{}"))
+        }
+        verify(repository, never()).save(any())
+    }
 }
diff --git a/frontend/src/views/ActionsView.vue b/frontend/src/views/ActionsView.vue
index a95dd83..63cb52a 100644
--- a/frontend/src/views/ActionsView.vue
+++ b/frontend/src/views/ActionsView.vue
@@ -62,7 +62,7 @@ async function submitForm() {
   formError.value = ''
   try {
     const parsed = JSON.parse(form.value.config)
-    if (typeof parsed !== 'object' || parsed === null) throw new Error()
+    if (parsed === null || typeof parsed !== 'object' || Array.isArray(parsed)) throw new Error()
   } catch {
     formError.value = 'Config must be valid JSON object.'
     return

From b4fd81a0aeec08e007f5edbf38b5d1aa71843ac1 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 1 Apr 2026 18:41:05 +0000
Subject: [PATCH 4/4] fix: use AppModal.vue to match main branch component
 naming

Agent-Logs-Url: https://github.com/MaximumTrainer/OpenDataMask/sessions/80938ceb-3097-4b4f-83b7-80b77dfb2470

Co-authored-by: MaximumTrainer <1376575+MaximumTrainer@users.noreply.github.com>
---
 frontend/src/components/AppModal.vue | 128 +++++++++++++++++++++++++++
 frontend/src/views/ActionsView.vue   |   6 +-
 2 files changed, 131 insertions(+), 3 deletions(-)
 create mode 100644 frontend/src/components/AppModal.vue

diff --git a/frontend/src/components/AppModal.vue b/frontend/src/components/AppModal.vue
new file mode 100644
index 0000000..07d77a8
--- /dev/null
+++ b/frontend/src/components/AppModal.vue
@@ -0,0 +1,128 @@
+<script setup lang="ts">
+import { onMounted, onUnmounted } from 'vue'
+
+const props = defineProps<{
+  title?: string
+  size?: 'sm' | 'md' | 'lg'
+}>()
+
+const emit = defineEmits<{
+  close: []
+}>()
+
+function handleKeydown(e: KeyboardEvent) {
+  if (e.key === 'Escape') emit('close')
+}
+
+onMounted(() => {
+  document.addEventListener('keydown', handleKeydown)
+  document.body.style.overflow = 'hidden'
+})
+onUnmounted(() => {
+  document.removeEventListener('keydown', handleKeydown)
+  document.body.style.overflow = ''
+})
+</script>
+
+<template>
+  <Teleport to="body">
+    <div class="modal-backdrop" @click.self="emit('close')">
+      <div
+        class="modal-box"
+        :class="[`modal-${props.size ?? 'md'}`]"
+        role="dialog"
+        aria-modal="true"
+      >
+        <!-- Header -->
+        <div v-if="title || $slots.header" class="modal-header">
+          <slot name="header">
+            <h3 class="modal-title">{{ title }}</h3>
+          </slot>
+          <button class="modal-close" aria-label="Close" @click="emit('close')">✕</button>
+        </div>
+
+        <!-- Body -->
+        <div class="modal-body">
+          <slot />
+        </div>
+
+        <!-- Footer -->
+        <div v-if="$slots.footer" class="modal-footer">
+          <slot name="footer" />
+        </div>
+      </div>
+    </div>
+  </Teleport>
+</template>
+
+<style scoped>
+.modal-backdrop {
+  position: fixed;
+  inset: 0;
+  background: rgba(0, 0, 0, 0.5);
+  z-index: 1000;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  padding: 1rem;
+  animation: fadeIn 0.15s ease;
+}
+@keyframes fadeIn { from { opacity: 0; } to { opacity: 1; } }
+
+.modal-box {
+  background: #fff;
+  border-radius: 0.5rem;
+  box-shadow: 0 20px 60px rgba(0, 0, 0, 0.3);
+  display: flex;
+  flex-direction: column;
+  max-height: 90vh;
+  width: 100%;
+  animation: slideUp 0.15s ease;
+}
+@keyframes slideUp {
+  from { transform: translateY(16px); opacity: 0; }
+  to   { transform: translateY(0);    opacity: 1; }
+}
+
+.modal-sm { max-width: 400px; }
+.modal-md { max-width: 560px; }
+.modal-lg { max-width: 800px; }
+
+.modal-header {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  padding: 1.25rem 1.5rem;
+  border-bottom: 1px solid #e5e7eb;
+  flex-shrink: 0;
+}
+.modal-title { font-size: 1.125rem; font-weight: 600; color: #111827; }
+.modal-close {
+  background: none;
+  border: none;
+  font-size: 1rem;
+  color: #6b7280;
+  cursor: pointer;
+  padding: 0.25rem;
+  line-height: 1;
+  border-radius: 0.25rem;
+  transition: background 0.15s;
+}
+.modal-close:hover { background: #f3f4f6; color: #111827; }
+
+.modal-body {
+  padding: 1.5rem;
+  overflow-y: auto;
+  flex: 1;
+}
+
+.modal-footer {
+  display: flex;
+  align-items: center;
+  justify-content: flex-end;
+  gap: 0.75rem;
+  padding: 1rem 1.5rem;
+  border-top: 1px solid #e5e7eb;
+  flex-shrink: 0;
+}
+</style>
diff --git a/frontend/src/views/ActionsView.vue b/frontend/src/views/ActionsView.vue
index 63cb52a..c371bfc 100644
--- a/frontend/src/views/ActionsView.vue
+++ b/frontend/src/views/ActionsView.vue
@@ -1,7 +1,7 @@
 <script setup lang="ts">
 import { ref, onMounted, computed } from 'vue'
 import { useRoute } from 'vue-router'
-import Modal from '@/components/Modal.vue'
+import AppModal from '@/components/AppModal.vue'
 import * as actionsApi from '@/api/actions'
 import type { PostJobAction, PostJobActionRequest } from '@/types'
 import { ActionType } from '@/types'
@@ -218,7 +218,7 @@ function formatDate(d: string) {
     </div>
 
     <!-- Modal -->
-    <Modal
+    <AppModal
       v-if="showModal"
       :title="editingAction ? 'Edit Action' : 'Add Post-Job Action'"
       @close="showModal = false"
@@ -270,7 +270,7 @@ function formatDate(d: string) {
           {{ editingAction ? 'Save Changes' : 'Add Action' }}
         </button>
       </template>
-    </Modal>
+    </AppModal>
   </div>
 </template>