fix(webhooks): use server-provided inboundUrl for copy on list page (#973)

## Summary

- The webhook list page's "Copy URL" button was constructing inbound
URLs client-side using a local `buildWebhookUrl` helper that always used
`session.user.id` and hardcoded the `/inbound/user/` path prefix. For
org webhooks, this produced URLs with the user's ID instead of the org's
ID and the wrong path prefix (`/inbound/user/` instead of
`/inbound/org/`).
- Fix: the `webhookTriggers.list` tRPC endpoint now includes
`inboundUrl` in each trigger's response (computed server-side via
`buildInboundUrl`, which correctly branches on `organizationId` vs
`userId`). The list page component now reads `trigger.inboundUrl`
directly instead of constructing URLs client-side. This matches the
pattern already used by the admin webhook list and the details page.
- Removed the now-unused `buildWebhookUrl` helper, `useSession` import,
and `encodeUserIdForPath` import from `WebhookTriggersListContent.tsx`.

## Verification

- [x] `pnpm typecheck` passes cleanly across all workspace projects

## Visual Changes

N/A

## Reviewer Notes

- The admin list page (`AdminWebhookTriggersList.tsx`) already followed
the correct pattern: its tRPC endpoint (`admin.webhookTriggers.list`)
calls `buildInboundUrl` per trigger and returns `inboundUrl` in the
response. This fix aligns the non-admin list endpoint to the same
approach.
- The details page was unaffected because it fetches via
`webhookTriggers.get`, which already returned the server-computed
`inboundUrl`.

Author: eshurakov

src/app/(app)/cloud/webhooks/WebhookTriggersListContent.tsx

@@ -1,7 +1,6 @@
 'use client';
 
 import { useState, useCallback, useMemo } from 'react';
-import { useSession } from 'next-auth/react';
 import { toast } from 'sonner';
 import { getWebhookRoutes } from '@/lib/webhook-routes';
 import {
@@ -18,20 +17,12 @@ import {
   type StatusFilterValue,
   type DeleteTarget,
 } from '@/components/webhook-triggers';
-import { encodeUserIdForPath } from '@/lib/webhook-agent/user-id-encoding';
-
-/** Build the inbound webhook URL for a trigger */
-function buildWebhookUrl(userId: string, triggerId: string): string {
-  return `https://hooks.kilosessions.ai/inbound/user/${encodeUserIdForPath(userId)}/${triggerId}`;
-}
 
 type WebhookTriggersListContentProps = {
   organizationId?: string;
 };
 
 export function WebhookTriggersListContent({ organizationId }: WebhookTriggersListContentProps) {
-  const { data: session } = useSession();
-
   // State
   const [statusFilter, setStatusFilter] = useState<StatusFilterValue>('all');
   const [copiedTriggerId, setCopiedTriggerId] = useState<string | null>(null);
@@ -63,23 +54,22 @@ export function WebhookTriggersListContent({ organizationId }: WebhookTriggersLi
   // Copy webhook URL to clipboard
   const handleCopyUrl = useCallback(
     async (triggerId: string) => {
-      const userId = session?.user?.id;
-      if (!userId) {
-        toast.error('User ID not available');
+      const trigger = triggers.find(t => t.triggerId === triggerId);
+      if (!trigger) {
+        toast.error('Trigger not found');
         return;
       }
 
-      const url = buildWebhookUrl(userId, triggerId);
       try {
-        await navigator.clipboard.writeText(url);
+        await navigator.clipboard.writeText(trigger.inboundUrl);
         setCopiedTriggerId(triggerId);
         toast.success('Webhook URL copied to clipboard');
         setTimeout(() => setCopiedTriggerId(null), 2000);
       } catch {
         toast.error('Failed to copy URL');
       }
     },
-    [session?.user?.id]
+    [triggers]
   );
 
   // Open delete confirmation dialog

src/routers/webhook-triggers-router.ts

@@ -181,7 +181,14 @@ export const webhookTriggersRouter = createTRPCRouter({
         .where(whereClause)
         .orderBy(cloud_agent_webhook_triggers.created_at);
 
-      return triggers;
+      return triggers.map(trigger => ({
+        ...trigger,
+        inboundUrl: buildInboundUrl(
+          input.organizationId ? undefined : userId,
+          input.organizationId,
+          trigger.triggerId
+        ),
+      }));
     }),
 
   /**