fix(integrations): forward integration config to outbound hooks

getIntegrationTargets() only passed {accessToken, rootUrl} into each
hook's config, dropping integration-specific fields stored in
integrations.config (organizationName, cloudId, teamId, etc). Azure
DevOps work item creation failed with a misleading "reconnect" auth
error because organizationName never reached createWorkItem() -
same gap affects Jira/Teams/Monday/Trello/Asana.

Also stop discarding the Azure DevOps API response body on failure,
so future errors log the actual validation message instead of a
bare status code.

Author: jeroenterheerdt

apps/web/src/lib/server/events/targets.ts

@@ -317,15 +317,18 @@ async function getIntegrationTargets(
         const secrets = decryptSecrets<{ accessToken?: string }>(m.secrets)
         accessToken = secrets.accessToken
       } catch (error) {
-        log.error({ err: error, integration_type: m.integrationType }, 'failed to decrypt integration secrets')
+        log.error(
+          { err: error, integration_type: m.integrationType },
+          'failed to decrypt integration secrets'
+        )
         continue
       }
     }
 
     targets.push({
       type: m.integrationType,
       target: { channelId },
-      config: { accessToken, rootUrl: context.portalBaseUrl },
+      config: { ...integrationConfig, accessToken, rootUrl: context.portalBaseUrl },
     })
   }
 

apps/web/src/lib/server/integrations/azure-devops/api.ts

@@ -36,11 +36,12 @@ async function azureDevOpsApi(
 
   if (!response.ok) {
     const status = response.status
-    if (status === 401) throw Object.assign(new Error('Unauthorized'), { status })
-    if (status === 403) throw Object.assign(new Error('Forbidden'), { status })
-    if (status === 429) throw Object.assign(new Error('Rate limited'), { status })
-    if (status >= 500) throw Object.assign(new Error(`Server error ${status}`), { status })
-    throw Object.assign(new Error(`HTTP ${status}`), { status })
+    const detail = await response.text().catch(() => '')
+    if (status === 401) throw Object.assign(new Error('Unauthorized'), { status, detail })
+    if (status === 403) throw Object.assign(new Error('Forbidden'), { status, detail })
+    if (status === 429) throw Object.assign(new Error('Rate limited'), { status, detail })
+    if (status >= 500) throw Object.assign(new Error(`Server error ${status}`), { status, detail })
+    throw Object.assign(new Error(`HTTP ${status}: ${detail}`), { status, detail })
   }
 
   return response