fix(ashby): fingerprint the full data payload, not just application

Hashing only data.application missed other fields (e.g. offer on
candidateHire) when updatedAt is absent, so two deliveries sharing an
application snapshot but differing elsewhere in data could collide
onto the same idempotency key.

Author: waleedlatif1

apps/sim/lib/webhooks/providers/ashby.test.ts

@@ -171,6 +171,21 @@ describe('ashbyHandler', () => {
       expect(ashbyHandler.extractIdempotencyId!(different)).not.toBe(key)
     })
 
+    it('distinguishes candidateHire deliveries that share an application snapshot but differ in offer', () => {
+      const application = { id: 'app-1', status: 'Hired' }
+      const first = {
+        action: 'candidateHire',
+        data: { application, offer: { id: 'offer-1' } },
+      }
+      const second = {
+        action: 'candidateHire',
+        data: { application, offer: { id: 'offer-2' } },
+      }
+      expect(ashbyHandler.extractIdempotencyId!(first)).not.toBe(
+        ashbyHandler.extractIdempotencyId!(second)
+      )
+    })
+
     it('returns null when no recognizable resource is present', () => {
       expect(ashbyHandler.extractIdempotencyId!({ action: 'ping', data: {} })).toBeNull()
       expect(ashbyHandler.extractIdempotencyId!({})).toBeNull()

apps/sim/lib/webhooks/providers/ashby.ts

@@ -48,7 +48,7 @@ export const ashbyHandler: WebhookProviderHandler = {
     const offer = data.offer as Record<string, unknown> | undefined
 
     if (application?.id) {
-      const discriminator = application.updatedAt ?? buildFallbackDeliveryFingerprint(application)
+      const discriminator = application.updatedAt ?? buildFallbackDeliveryFingerprint(data)
       return `ashby:${action}:${application.id}:${discriminator}`
     }
     if (offer?.id) {