@codemation/core-nodes 0.10.1 → 0.10.2

package/dist/metadata.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "packageName": "@codemation/core-nodes",
-  "packageVersion": "0.10.1",
+  "packageVersion": "0.10.2",
   "description": "",
   "kind": "nodes",
   "nodes": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codemation/core-nodes",
-  "version": "0.10.1",
+  "version": "0.10.2",
   "publishConfig": {
     "access": "public"
   },
@@ -32,7 +32,7 @@
     "@ai-sdk/provider": "^3.0.8",
     "ai": "^6.0.168",
     "croner": "^10.0.1",
-    "@codemation/core": "0.13.1"
+    "@codemation/core": "0.13.2"
   },
   "devDependencies": {
     "@types/node": "^25.3.5",

package/src/http/HttpBodyBuilder.ts

@@ -28,6 +28,15 @@ export class HttpBodyBuilder {
     }
 
     if (spec.kind === "json") {
+      // Backstop for callers that reach this with a string despite the `data: object`
+      // type (e.g. via `unknown`/`as`, or a resolved expression): re-stringifying it
+      // would double-encode into `"\"...\""`. Fail loud instead of shipping bad JSON.
+      if (typeof spec.data === "string") {
+        throw new Error(
+          'HttpRequest body kind:"json" expects a serializable object for "data", but received a string. ' +
+            "Pass the object directly (e.g. { a: 1 }), not a pre-stringified JSON string (JSON.stringify(...)).",
+        );
+      }
       return {
         body: JSON.stringify(spec.data),
         contentType: "application/json",

package/src/http/httpRequest.types.ts

@@ -11,7 +11,16 @@ export type BinaryRef = string;
  */
 export type HttpBodySpec =
   | Readonly<{ kind: "none" }>
-  | Readonly<{ kind: "json"; data: unknown }>
+  | Readonly<{
+      kind: "json";
+      /**
+       * Serializable object/array to encode as the JSON body. Encoded exactly once via
+       * `JSON.stringify`, so pass the value directly (e.g. `{ a: 1 }`) — never a
+       * pre-stringified string (`JSON.stringify(...)`), which would double-encode it.
+       * Typed as `object` so a bare string/primitive is a compile-time error.
+       */
+      data: object;
+    }>
   | Readonly<{ kind: "form"; data: Readonly<Record<string, string>> }>
   | Readonly<{
       kind: "multipart";

package/src/nodes/AIAgentNode.ts

@@ -596,15 +596,18 @@ export class AIAgentNode implements RunnableNode<AIAgent<any, any>> {
   }
 
   /**
-   * Detects whether a tool config is backed by a `defineHumanApprovalNode` marker
-   * and returns the HITL behavior config, or `undefined` when not a HITL tool.
+   * Resolves the HITL behavior for a tool binding, or `undefined` when it is not a HITL tool.
+   * A binding is HITL if either the backing node carries a `defineHumanApprovalNode` marker or the
+   * binding sets a per-binding `onRejected` via `asTool(..., { onRejected })`. The per-binding value
+   * wins over the node marker, so two tools backed by the same node can reject differently.
    */
   private resolveHumanApprovalBehavior(config: ToolConfig): Readonly<{ onRejected: "halt" | "return" }> | undefined {
     if (!this.isNodeBackedToolConfig(config)) return undefined;
     const nodeConfig = config.node as unknown as { humanApprovalToolBehavior?: { onRejected?: "halt" | "return" } };
     const marker = nodeConfig.humanApprovalToolBehavior;
-    if (marker === undefined) return undefined;
-    return { onRejected: marker.onRejected ?? "return" };
+    const perBinding = config.onRejected;
+    if (marker === undefined && perBinding === undefined) return undefined;
+    return { onRejected: perBinding ?? marker?.onRejected ?? "return" };
   }
 
   /**

package/src/nodes/httpRequest.ts

@@ -79,7 +79,7 @@ export class HttpRequest<
       headers?: Readonly<Record<string, string>>;
       /** Query parameters to append to the URL. */
       query?: Readonly<Record<string, string>>;
-      /** Request body specification. For canvas use, pass a JSON string in `body.data`. */
+      /** Request body specification. For `kind:"json"`, pass the object directly in `body.data` — it is JSON-encoded exactly once, so never a pre-stringified string. */
       body?: HttpBodySpec;
       /**
        * Credential slot.