fix: ensure job id is a clean string

apps/api/src/controllers/event.controller.ts

@@ -5,7 +5,7 @@ import { getSalts } from '@openpanel/db';
 import { getEventsGroupQueueShard } from '@openpanel/queue';
 import type { PostEventPayload } from '@openpanel/sdk';
 
-import { generateId } from '@openpanel/common';
+import { generateId, slug } from '@openpanel/common';
 import { getGeoLocation } from '@openpanel/geo';
 import { getStringHeaders, getTimestamp } from './track.controller';
 
@@ -54,7 +54,7 @@ export async function postEvent(
       : `${projectId}:${generateId()}`
     : currentDeviceId;
   const jobId = [
-    request.body.name,
+    slug(request.body.name),
     timestamp,
     projectId,
     currentDeviceId,

apps/api/src/controllers/track.controller.ts

@@ -1,7 +1,7 @@
 import type { FastifyReply, FastifyRequest } from 'fastify';
 import { assocPath, pathOr, pick } from 'ramda';
 
-import { generateId } from '@openpanel/common';
+import { generateId, slug } from '@openpanel/common';
 import { generateDeviceId, parseUserAgent } from '@openpanel/common/server';
 import { getProfileById, getSalts, upsertProfile } from '@openpanel/db';
 import { type GeoLocation, getGeoLocation } from '@openpanel/geo';
@@ -254,7 +254,13 @@ async function track({
       ? `${projectId}:${payload.profileId}`
       : `${projectId}:${generateId()}`
     : currentDeviceId;
-  const jobId = [payload.name, timestamp, projectId, currentDeviceId, groupId]
+  const jobId = [
+    slug(payload.name),
+    timestamp,
+    projectId,
+    currentDeviceId,
+    groupId,
+  ]
     .filter(Boolean)
     .join('-');
   await getEventsGroupQueueShard(groupId).add({