@friggframework/core 2.0.0--canary.698.b1a2d30.0 → 2.0.0--canary.699.0d57ee8.0

package/generated/prisma-postgresql/wasm.js

@@ -428,8 +428,8 @@ const config = {
       }
     }
   },
-  "inlineSchema": "// Frigg Framework - Prisma Schema (PostgreSQL)\n// PostgreSQL database schema for enterprise integration platform\n// Converted from MongoDB schema for relational database support\n\ngenerator client {\n  provider      = \"prisma-client-js\"\n  output        = \"../generated/prisma-postgresql\"\n  binaryTargets = [\"native\", \"rhel-openssl-3.0.x\"] // native for local dev, rhel for Lambda deployment\n  // Library engine (default since Prisma 3.x): Rust query engine loads as a\n  // Node-API addon inside the same process. The binary engine forks a child\n  // query-engine subprocess and communicates over a local HTTP/IPC pipe with\n  // NO client-side timeout — a zombied child wedges the Node process until\n  // Lambda's 900s cap. Switching to library eliminates that entire class of\n  // silent hangs. See friggframework/frigg#580 for the investigation.\n  engineType    = \"library\"\n}\n\ndatasource db {\n  provider = \"postgresql\"\n  url      = env(\"DATABASE_URL\")\n}\n\n// ============================================================================\n// USER MODELS\n// ============================================================================\n\n/// User model with discriminator pattern support\n/// Replaces Mongoose discriminators (IndividualUser, OrganizationUser)\nmodel User {\n  id   Int      @id @default(autoincrement())\n  type UserType\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // IndividualUser fields (nullable for organizations)\n  email          String?\n  username       String?\n  hashword       String? // Bcrypt hashed password (handled in application layer)\n  appUserId      String?\n  organizationId Int?\n\n  // Self-referential relation for organization membership\n  organization User?  @relation(\"OrgMembers\", fields: [organizationId], references: [id], onDelete: NoAction, onUpdate: NoAction)\n  members      User[] @relation(\"OrgMembers\")\n\n  // OrganizationUser fields (nullable for individuals)\n  appOrgId String?\n  name     String?\n\n  // Relations\n  tokens       Token[]\n  credentials  Credential[]\n  entities     Entity[]\n  integrations Integration[]\n  processes    Process[]\n\n  @@unique([username, appUserId])\n  @@index([type])\n  @@index([appUserId])\n  @@index([organizationId])\n}\n\nenum UserType {\n  INDIVIDUAL\n  ORGANIZATION\n}\n\n// ============================================================================\n// AUTHENTICATION MODELS\n// ============================================================================\n\n/// Authentication tokens with expiration\n/// Bcrypt hashed tokens stored (handled in application layer)\nmodel Token {\n  id      Int       @id @default(autoincrement())\n  token   String // Bcrypt hashed\n  created DateTime  @default(now())\n  expires DateTime?\n  userId  Int\n  user    User      @relation(fields: [userId], references: [id], onDelete: Cascade)\n\n  @@index([userId])\n  @@index([expires])\n}\n\n// ============================================================================\n// CREDENTIAL & ENTITY MODELS\n// ============================================================================\n\n/// OAuth credentials and API tokens\n/// All sensitive data encrypted with KMS at rest\nmodel Credential {\n  id          Int      @id @default(autoincrement())\n  userId      Int?\n  user        User?    @relation(fields: [userId], references: [id], onDelete: Cascade)\n  authIsValid Boolean?\n  externalId  String?\n\n  // Dynamic OAuth fields stored as JSON (encrypted via Prisma middleware)\n  // Contains: access_token, refresh_token, domain, expires_in, token_type, etc.\n  data Json @default(\"{}\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations\n  entities Entity[]\n\n  @@index([userId])\n  @@index([externalId])\n}\n\n/// External service entities (API connections)\nmodel Entity {\n  id           Int         @id @default(autoincrement())\n  credentialId Int?\n  credential   Credential? @relation(fields: [credentialId], references: [id], onDelete: SetNull)\n  userId       Int?\n  user         User?       @relation(fields: [userId], references: [id], onDelete: Cascade)\n  name         String?\n  moduleName   String?\n  externalId   String?\n\n  data Json @default(\"{}\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations - many-to-many with implicit join tables\n  integrations Integration[]\n  syncs        Sync[]\n\n  dataIdentifiers    DataIdentifier[]\n  associationObjects AssociationObject[]\n\n  @@index([userId])\n  @@index([externalId])\n  @@index([moduleName])\n  @@index([credentialId])\n}\n\n// ============================================================================\n// INTEGRATION MODELS\n// ============================================================================\n\n/// Main integration configuration and state\nmodel Integration {\n  id     Int               @id @default(autoincrement())\n  userId Int?\n  user   User?             @relation(fields: [userId], references: [id], onDelete: Cascade)\n  status IntegrationStatus @default(IN_CREATION)\n\n  // Configuration and version\n  config  Json? // Integration configuration object\n  version String?\n\n  // Entity references (many-to-many via implicit join table)\n  entities Entity[]\n\n  // Message arrays (stored as JSON)\n  errors   Json @default(\"[]\")\n  warnings Json @default(\"[]\")\n  info     Json @default(\"[]\")\n  logs     Json @default(\"[]\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations\n  associations Association[]\n  syncs        Sync[]\n  mappings     IntegrationMapping[]\n  processes    Process[]\n  workflowRuns WorkflowRun[]\n\n  @@index([userId])\n  @@index([status])\n}\n\nenum IntegrationStatus {\n  ENABLED\n  NEEDS_CONFIG\n  PROCESSING\n  DISABLED\n  ERROR\n  IN_CREATION\n  IN_DELETION\n}\n\n/// Integration-specific data mappings\n/// All mapping data encrypted with KMS\nmodel IntegrationMapping {\n  id            Int         @id @default(autoincrement())\n  integrationId Int\n  integration   Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  sourceId      String?\n\n  // Encrypted mapping data (handled via Prisma middleware)\n  mapping Json?\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@unique([integrationId, sourceId])\n  @@index([integrationId])\n  @@index([sourceId])\n}\n\n// ============================================================================\n// SYNC MODELS\n// ============================================================================\n\n/// Bidirectional data synchronization tracking\nmodel Sync {\n  id            Int          @id @default(autoincrement())\n  integrationId Int?\n  integration   Integration? @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n\n  // Entity references (many-to-many via implicit join table)\n  entities Entity[]\n\n  hash String\n  name String\n\n  // Data identifiers (extracted to separate model)\n  dataIdentifiers DataIdentifier[]\n\n  @@index([integrationId])\n  @@index([hash])\n  @@index([name])\n}\n\n/// Data identifier for sync operations\n/// Replaces nested array structure in Mongoose\nmodel DataIdentifier {\n  id       Int    @id @default(autoincrement())\n  syncId   Int?\n  sync     Sync?  @relation(fields: [syncId], references: [id], onDelete: Cascade)\n  entityId Int\n  entity   Entity @relation(fields: [entityId], references: [id], onDelete: Cascade)\n\n  // Identifier data (can be any structure)\n  idData Json\n\n  hash String\n\n  @@index([syncId])\n  @@index([entityId])\n  @@index([hash])\n}\n\n// ============================================================================\n// ASSOCIATION MODELS\n// ============================================================================\n\n/// Entity associations with cardinality tracking\nmodel Association {\n  id            Int             @id @default(autoincrement())\n  integrationId Int\n  integration   Integration     @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  name          String\n  type          AssociationType\n  primaryObject String\n\n  // Associated objects (extracted to separate model)\n  objects AssociationObject[]\n\n  @@index([integrationId])\n  @@index([name])\n}\n\n/// Association object entry\n/// Replaces nested array structure in Mongoose\nmodel AssociationObject {\n  id            Int         @id @default(autoincrement())\n  associationId Int\n  association   Association @relation(fields: [associationId], references: [id], onDelete: Cascade)\n  entityId      Int\n  entity        Entity      @relation(fields: [entityId], references: [id], onDelete: Cascade)\n  objectType    String\n  objId         String\n  metadata      Json? // Optional metadata\n\n  @@index([associationId])\n  @@index([entityId])\n}\n\nenum AssociationType {\n  ONE_TO_MANY\n  ONE_TO_ONE\n  MANY_TO_ONE\n}\n\n// ============================================================================\n// PROCESS MODELS\n// ============================================================================\n\n/// Generic Process Model - tracks any long-running operation\n/// Used for: CRM syncs, data migrations, bulk operations, etc.\nmodel Process {\n  id Int @id @default(autoincrement())\n\n  // Core references\n  userId        Int\n  user          User        @relation(fields: [userId], references: [id], onDelete: Cascade)\n  integrationId Int\n  integration   Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n\n  // Process identification\n  name String // e.g., \"zoho-crm-contact-sync\", \"pipedrive-lead-sync\"\n  type String // e.g., \"CRM_SYNC\", \"DATA_MIGRATION\", \"BULK_OPERATION\"\n\n  // State machine\n  state String // Current state (integration-defined states)\n\n  // Flexible storage\n  context Json @default(\"{}\") // Process-specific data (pagination, metadata, etc.)\n  results Json @default(\"{}\") // Process results and metrics\n\n  // Hierarchy support - self-referential relation\n  parentProcessId Int?\n  parentProcess   Process?  @relation(\"ProcessHierarchy\", fields: [parentProcessId], references: [id], onDelete: SetNull)\n  childProcesses  Process[] @relation(\"ProcessHierarchy\")\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([userId])\n  @@index([integrationId])\n  @@index([type])\n  @@index([state])\n  @@index([name])\n  @@index([parentProcessId])\n}\n\n// ============================================================================\n// UTILITY MODELS\n// ============================================================================\n\n/// Generic state storage\nmodel State {\n  id    Int   @id @default(autoincrement())\n  state Json?\n}\n\n/// AWS API Gateway WebSocket connection tracking\nmodel WebsocketConnection {\n  id           Int     @id @default(autoincrement())\n  connectionId String?\n\n  @@index([connectionId])\n}\n\n// ============================================================================\n// ADMIN PROCESS MODELS\n// ============================================================================\n\n/// Admin process state machine\nenum AdminScriptExecutionState {\n  PENDING\n  RUNNING\n  COMPLETED\n  FAILED\n}\n\n/// Admin process tracking (like Process but without user/integration FK)\n/// Used for: admin scripts, db migrations, system maintenance tasks\nmodel AdminScriptExecution {\n  id   Int    @id @default(autoincrement())\n  name String // e.g., \"oauth-token-refresh\", \"db-migration-xyz\"\n  type String // e.g., \"ADMIN_SCRIPT\", \"DB_MIGRATION\"\n\n  // State machine\n  state AdminScriptExecutionState @default(PENDING)\n\n  // Flexible storage (mirrors Process model pattern)\n  context Json @default(\"{}\") // input, trigger, audit info, script version\n  results Json @default(\"{}\") // output, logs, metrics, errors\n\n  // Hierarchy support - self-referential relation\n  parentExecutionId Int?\n  parentExecution   AdminScriptExecution?  @relation(\"AdminScriptExecutionHierarchy\", fields: [parentExecutionId], references: [id], onDelete: SetNull)\n  childExecutions   AdminScriptExecution[] @relation(\"AdminScriptExecutionHierarchy\")\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([name, createdAt(sort: Desc)])\n  @@index([state])\n  @@index([type])\n}\n\n/// Script scheduling configuration for hybrid scheduling (SQS + EventBridge)\nmodel ScriptSchedule {\n  id              Int       @id @default(autoincrement())\n  scriptName      String    @unique\n  enabled         Boolean   @default(false)\n  cronExpression  String?\n  timezone        String    @default(\"UTC\")\n  lastTriggeredAt DateTime?\n  nextTriggerAt   DateTime?\n\n  // External Scheduler (e.g., AWS EventBridge Scheduler)\n  externalScheduleId   String?\n  externalScheduleName String?\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([enabled])\n}\n\n/// Durable usage counters, deliberately isolated: no userId and no foreign key\n/// to Integration, so a user-scoped query can never return a usage row and usage\n/// history survives integration deletion.\nmodel UsageCounter {\n  id Int @id @default(autoincrement())\n\n  integrationId   String\n  integrationType String\n  metric          String\n  window          String // e.g. \"day:2026-07-05\" or \"hour:2026-07-05T14\"\n  value           BigInt @default(0) // BigInt: a busy day/hour counter can exceed 32-bit\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@unique([integrationId, integrationType, metric, window])\n  // Covers totals() (metric + window prefix/range, no integrationType filter).\n  @@index([metric, window])\n  // Covers series() (metric + integrationType + window range).\n  @@index([metric, integrationType, window])\n}\n\n// Data-defined integrations (ADR-063): one immutable row per published definition version.\nenum DefinitionStatus {\n  DRAFT\n  PUBLISHED\n  DEPRECATED\n  RETIRED\n}\n\nmodel IntegrationDefinitionVersion {\n  id              Int              @id @default(autoincrement())\n  definitionId    String\n  version         String\n  schemaVersion   String\n  status          DefinitionStatus @default(DRAFT)\n  checksum        String\n  document        Json\n  changeLevel     String?\n  previousVersion String?\n  notes           String?\n  createdBy       String?\n  // The workspace an integration a user built belongs to (null: the app's own catalogue, offered to everyone).\n  workspaceId     String?\n  publishedAt     DateTime?\n  createdAt       DateTime         @default(now())\n  updatedAt       DateTime         @updatedAt\n\n  @@unique([definitionId, version])\n  @@index([definitionId, status])\n  @@index([workspaceId, status])\n}\n\n// One row per data-defined workflow run. trace holds step ids, statuses, timings and error messages, never request or\n// response bodies.\nmodel WorkflowRun {\n  id                Int         @id @default(autoincrement())\n  integrationId     Int\n  integration       Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  definitionId      String\n  definitionVersion String\n  workflowId        String\n  triggerType       String\n  eventId           String?\n  status            String\n  reason            String?\n  error             String?\n  retryable         Boolean     @default(false)\n  trace             Json        @default(\"[]\")\n  /// The runtime's run id (run_...): how routes and resume jobs address a run\n  runKey            String?\n  /// A paused run (status waiting): which step, and what it waits for. Never request or response bodies.\n  waitingFor        Json?\n  resumeAt          DateTime?\n  startedAt         DateTime\n  endedAt           DateTime?\n  createdAt         DateTime    @default(now())\n\n  @@index([integrationId, runKey])\n  @@index([integrationId, startedAt])\n  @@index([integrationId, workflowId, startedAt])\n  @@index([integrationId, status])\n}\n",
-  "inlineSchemaHash": "7cbcf3d54afbe39160d69f8b640da30304af16dd1eb4ce3267842820b464be7a",
+  "inlineSchema": "// Frigg Framework - Prisma Schema (PostgreSQL)\n// PostgreSQL database schema for enterprise integration platform\n// Converted from MongoDB schema for relational database support\n\ngenerator client {\n  provider      = \"prisma-client-js\"\n  output        = \"../generated/prisma-postgresql\"\n  binaryTargets = [\"native\", \"rhel-openssl-3.0.x\"] // native for local dev, rhel for Lambda deployment\n  // Library engine (default since Prisma 3.x): Rust query engine loads as a\n  // Node-API addon inside the same process. The binary engine forks a child\n  // query-engine subprocess and communicates over a local HTTP/IPC pipe with\n  // NO client-side timeout — a zombied child wedges the Node process until\n  // Lambda's 900s cap. Switching to library eliminates that entire class of\n  // silent hangs. See friggframework/frigg#580 for the investigation.\n  engineType    = \"library\"\n}\n\ndatasource db {\n  provider = \"postgresql\"\n  url      = env(\"DATABASE_URL\")\n}\n\n// ============================================================================\n// USER MODELS\n// ============================================================================\n\n/// User model with discriminator pattern support\n/// Replaces Mongoose discriminators (IndividualUser, OrganizationUser)\nmodel User {\n  id   Int      @id @default(autoincrement())\n  type UserType\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // IndividualUser fields (nullable for organizations)\n  email          String?\n  username       String?\n  hashword       String? // Bcrypt hashed password (handled in application layer)\n  appUserId      String?\n  organizationId Int?\n\n  // Self-referential relation for organization membership\n  organization User?  @relation(\"OrgMembers\", fields: [organizationId], references: [id], onDelete: NoAction, onUpdate: NoAction)\n  members      User[] @relation(\"OrgMembers\")\n\n  // OrganizationUser fields (nullable for individuals)\n  appOrgId String?\n  name     String?\n\n  // Relations\n  tokens       Token[]\n  credentials  Credential[]\n  entities     Entity[]\n  integrations Integration[]\n  processes    Process[]\n\n  @@unique([username, appUserId])\n  @@index([type])\n  @@index([appUserId])\n  @@index([organizationId])\n}\n\nenum UserType {\n  INDIVIDUAL\n  ORGANIZATION\n}\n\n// ============================================================================\n// AUTHENTICATION MODELS\n// ============================================================================\n\n/// Authentication tokens with expiration\n/// Bcrypt hashed tokens stored (handled in application layer)\nmodel Token {\n  id      Int       @id @default(autoincrement())\n  token   String // Bcrypt hashed\n  created DateTime  @default(now())\n  expires DateTime?\n  userId  Int\n  user    User      @relation(fields: [userId], references: [id], onDelete: Cascade)\n\n  @@index([userId])\n  @@index([expires])\n}\n\n// ============================================================================\n// CREDENTIAL & ENTITY MODELS\n// ============================================================================\n\n/// OAuth credentials and API tokens\n/// All sensitive data encrypted with KMS at rest\nmodel Credential {\n  id          Int      @id @default(autoincrement())\n  userId      Int?\n  user        User?    @relation(fields: [userId], references: [id], onDelete: Cascade)\n  authIsValid Boolean?\n  externalId  String?\n\n  // Dynamic OAuth fields stored as JSON (encrypted via Prisma middleware)\n  // Contains: access_token, refresh_token, domain, expires_in, token_type, etc.\n  data Json @default(\"{}\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations\n  entities Entity[]\n\n  @@index([userId])\n  @@index([externalId])\n}\n\n/// External service entities (API connections)\nmodel Entity {\n  id           Int         @id @default(autoincrement())\n  credentialId Int?\n  credential   Credential? @relation(fields: [credentialId], references: [id], onDelete: SetNull)\n  userId       Int?\n  user         User?       @relation(fields: [userId], references: [id], onDelete: Cascade)\n  name         String?\n  moduleName   String?\n  externalId   String?\n\n  data Json @default(\"{}\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations - many-to-many with implicit join tables\n  integrations Integration[]\n  syncs        Sync[]\n\n  dataIdentifiers    DataIdentifier[]\n  associationObjects AssociationObject[]\n\n  @@index([userId])\n  @@index([externalId])\n  @@index([moduleName])\n  @@index([credentialId])\n}\n\n// ============================================================================\n// INTEGRATION MODELS\n// ============================================================================\n\n/// Main integration configuration and state\nmodel Integration {\n  id     Int               @id @default(autoincrement())\n  userId Int?\n  user   User?             @relation(fields: [userId], references: [id], onDelete: Cascade)\n  status IntegrationStatus @default(IN_CREATION)\n\n  // Configuration and version\n  config  Json? // Integration configuration object\n  version String?\n\n  // Entity references (many-to-many via implicit join table)\n  entities Entity[]\n\n  // Message arrays (stored as JSON)\n  errors   Json @default(\"[]\")\n  warnings Json @default(\"[]\")\n  info     Json @default(\"[]\")\n  logs     Json @default(\"[]\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations\n  associations Association[]\n  syncs        Sync[]\n  mappings     IntegrationMapping[]\n  processes    Process[]\n  workflowRuns WorkflowRun[]\n\n  @@index([userId])\n  @@index([status])\n}\n\nenum IntegrationStatus {\n  ENABLED\n  NEEDS_CONFIG\n  PROCESSING\n  DISABLED\n  ERROR\n  IN_CREATION\n  IN_DELETION\n}\n\n/// Integration-specific data mappings\n/// All mapping data encrypted with KMS\nmodel IntegrationMapping {\n  id            Int         @id @default(autoincrement())\n  integrationId Int\n  integration   Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  sourceId      String?\n\n  // Encrypted mapping data (handled via Prisma middleware)\n  mapping Json?\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@unique([integrationId, sourceId])\n  @@index([integrationId])\n  @@index([sourceId])\n}\n\n// ============================================================================\n// SYNC MODELS\n// ============================================================================\n\n/// Bidirectional data synchronization tracking\nmodel Sync {\n  id            Int          @id @default(autoincrement())\n  integrationId Int?\n  integration   Integration? @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n\n  // Entity references (many-to-many via implicit join table)\n  entities Entity[]\n\n  hash String\n  name String\n\n  // Data identifiers (extracted to separate model)\n  dataIdentifiers DataIdentifier[]\n\n  @@index([integrationId])\n  @@index([hash])\n  @@index([name])\n}\n\n/// Data identifier for sync operations\n/// Replaces nested array structure in Mongoose\nmodel DataIdentifier {\n  id       Int    @id @default(autoincrement())\n  syncId   Int?\n  sync     Sync?  @relation(fields: [syncId], references: [id], onDelete: Cascade)\n  entityId Int\n  entity   Entity @relation(fields: [entityId], references: [id], onDelete: Cascade)\n\n  // Identifier data (can be any structure)\n  idData Json\n\n  hash String\n\n  @@index([syncId])\n  @@index([entityId])\n  @@index([hash])\n}\n\n// ============================================================================\n// ASSOCIATION MODELS\n// ============================================================================\n\n/// Entity associations with cardinality tracking\nmodel Association {\n  id            Int             @id @default(autoincrement())\n  integrationId Int\n  integration   Integration     @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  name          String\n  type          AssociationType\n  primaryObject String\n\n  // Associated objects (extracted to separate model)\n  objects AssociationObject[]\n\n  @@index([integrationId])\n  @@index([name])\n}\n\n/// Association object entry\n/// Replaces nested array structure in Mongoose\nmodel AssociationObject {\n  id            Int         @id @default(autoincrement())\n  associationId Int\n  association   Association @relation(fields: [associationId], references: [id], onDelete: Cascade)\n  entityId      Int\n  entity        Entity      @relation(fields: [entityId], references: [id], onDelete: Cascade)\n  objectType    String\n  objId         String\n  metadata      Json? // Optional metadata\n\n  @@index([associationId])\n  @@index([entityId])\n}\n\nenum AssociationType {\n  ONE_TO_MANY\n  ONE_TO_ONE\n  MANY_TO_ONE\n}\n\n// ============================================================================\n// PROCESS MODELS\n// ============================================================================\n\n/// Generic Process Model - tracks any long-running operation\n/// Used for: CRM syncs, data migrations, bulk operations, etc.\nmodel Process {\n  id Int @id @default(autoincrement())\n\n  // Core references\n  userId        Int\n  user          User        @relation(fields: [userId], references: [id], onDelete: Cascade)\n  integrationId Int\n  integration   Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n\n  // Process identification\n  name String // e.g., \"zoho-crm-contact-sync\", \"pipedrive-lead-sync\"\n  type String // e.g., \"CRM_SYNC\", \"DATA_MIGRATION\", \"BULK_OPERATION\"\n\n  // State machine\n  state String // Current state (integration-defined states)\n\n  // Flexible storage\n  context Json @default(\"{}\") // Process-specific data (pagination, metadata, etc.)\n  results Json @default(\"{}\") // Process results and metrics\n\n  // Hierarchy support - self-referential relation\n  parentProcessId Int?\n  parentProcess   Process?  @relation(\"ProcessHierarchy\", fields: [parentProcessId], references: [id], onDelete: SetNull)\n  childProcesses  Process[] @relation(\"ProcessHierarchy\")\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([userId])\n  @@index([integrationId])\n  @@index([type])\n  @@index([state])\n  @@index([name])\n  @@index([parentProcessId])\n}\n\n// ============================================================================\n// UTILITY MODELS\n// ============================================================================\n\n/// Generic state storage\nmodel State {\n  id    Int   @id @default(autoincrement())\n  state Json?\n}\n\n/// AWS API Gateway WebSocket connection tracking\nmodel WebsocketConnection {\n  id           Int     @id @default(autoincrement())\n  connectionId String?\n\n  @@index([connectionId])\n}\n\n// ============================================================================\n// ADMIN PROCESS MODELS\n// ============================================================================\n\n/// Admin process state machine\nenum AdminScriptExecutionState {\n  PENDING\n  RUNNING\n  COMPLETED\n  FAILED\n}\n\n/// Admin process tracking (like Process but without user/integration FK)\n/// Used for: admin scripts, db migrations, system maintenance tasks\nmodel AdminScriptExecution {\n  id   Int    @id @default(autoincrement())\n  name String // e.g., \"oauth-token-refresh\", \"db-migration-xyz\"\n  type String // e.g., \"ADMIN_SCRIPT\", \"DB_MIGRATION\"\n\n  // State machine\n  state AdminScriptExecutionState @default(PENDING)\n\n  // Flexible storage (mirrors Process model pattern)\n  context Json @default(\"{}\") // input, trigger, audit info, script version\n  results Json @default(\"{}\") // output, logs, metrics, errors\n\n  // Hierarchy support - self-referential relation\n  parentExecutionId Int?\n  parentExecution   AdminScriptExecution?  @relation(\"AdminScriptExecutionHierarchy\", fields: [parentExecutionId], references: [id], onDelete: SetNull)\n  childExecutions   AdminScriptExecution[] @relation(\"AdminScriptExecutionHierarchy\")\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([name, createdAt(sort: Desc)])\n  @@index([state])\n  @@index([type])\n}\n\n/// Script scheduling configuration for hybrid scheduling (SQS + EventBridge)\nmodel ScriptSchedule {\n  id              Int       @id @default(autoincrement())\n  scriptName      String    @unique\n  enabled         Boolean   @default(false)\n  cronExpression  String?\n  timezone        String    @default(\"UTC\")\n  lastTriggeredAt DateTime?\n  nextTriggerAt   DateTime?\n\n  // External Scheduler (e.g., AWS EventBridge Scheduler)\n  externalScheduleId   String?\n  externalScheduleName String?\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([enabled])\n}\n\n/// Durable usage counters, deliberately isolated: no userId and no foreign key\n/// to Integration, so a user-scoped query can never return a usage row and usage\n/// history survives integration deletion.\nmodel UsageCounter {\n  id Int @id @default(autoincrement())\n\n  integrationId   String\n  integrationType String\n  metric          String\n  window          String // e.g. \"day:2026-07-05\" or \"hour:2026-07-05T14\"\n  value           BigInt @default(0) // BigInt: a busy day/hour counter can exceed 32-bit\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@unique([integrationId, integrationType, metric, window])\n  // Covers totals() (metric + window prefix/range, no integrationType filter).\n  @@index([metric, window])\n  // Covers series() (metric + integrationType + window range).\n  @@index([metric, integrationType, window])\n}\n\n// Integrations published as definitions (ADR-063): one immutable row per published definition version.\nenum DefinitionStatus {\n  DRAFT\n  PUBLISHED\n  DEPRECATED\n  RETIRED\n}\n\nmodel IntegrationDefinitionVersion {\n  id              Int              @id @default(autoincrement())\n  definitionId    String\n  version         String\n  schemaVersion   String\n  status          DefinitionStatus @default(DRAFT)\n  checksum        String\n  document        Json\n  changeLevel     String?\n  previousVersion String?\n  notes           String?\n  createdBy       String?\n  // The workspace an integration a user built belongs to (null: the app's own catalogue, offered to everyone).\n  workspaceId     String?\n  publishedAt     DateTime?\n  createdAt       DateTime         @default(now())\n  updatedAt       DateTime         @updatedAt\n\n  @@unique([definitionId, version])\n  @@index([definitionId, status])\n  @@index([workspaceId, status])\n}\n\n// One row per workflow run. trace holds step ids, statuses, timings and error messages, never request or\n// response bodies.\nmodel WorkflowRun {\n  id                Int         @id @default(autoincrement())\n  integrationId     Int\n  integration       Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  definitionId      String\n  definitionVersion String\n  workflowId        String\n  triggerType       String\n  eventId           String?\n  status            String\n  reason            String?\n  error             String?\n  retryable         Boolean     @default(false)\n  trace             Json        @default(\"[]\")\n  /// The runtime's run id (run_...): how routes and resume jobs address a run\n  runKey            String?\n  /// A paused run (status waiting): which step, and what it waits for. Never request or response bodies.\n  waitingFor        Json?\n  resumeAt          DateTime?\n  startedAt         DateTime\n  endedAt           DateTime?\n  createdAt         DateTime    @default(now())\n\n  @@index([integrationId, runKey])\n  @@index([integrationId, startedAt])\n  @@index([integrationId, workflowId, startedAt])\n  @@index([integrationId, status])\n}\n",
+  "inlineSchemaHash": "5d11039694b44af001971b7239ab8290b642c385239660aee17e709d4fa0b509",
   "copyEngine": true
 }
 config.dirname = '/'

package/handlers/app-handler-helpers.js

@@ -12,8 +12,11 @@ const log = getLogger('frigg.http');
 const createApp = (applyMiddleware) => {
     const app = express();
 
-    app.use(bodyParser.json({ limit: '10mb' }));
-    app.use(bodyParser.urlencoded({ extended: true }));
+    // Keep the bytes as received: webhook signatures (HubSpot, Slack, Stripe, Linear…) are computed over the exact
+    // raw body, which re-serialising the parsed body does not reproduce. A reference to the buffer, not a copy.
+    const keepRaw = (req, res, buf) => { req.rawBody = buf; };
+    app.use(bodyParser.json({ limit: '10mb', verify: keepRaw }));
+    app.use(bodyParser.urlencoded({ extended: true, verify: keepRaw }));
     app.use(
         cors({
             origin: '*',

package/handlers/integration-event-dispatcher.js

@@ -21,7 +21,7 @@ class IntegrationEventDispatcher {
     async dispatchJob({ event, data, context, delivery }) {
         return this._dispatch(event, (instance, handler) => {
             const invoke = () => handler.call(instance, { data, context, delivery });
-            // An integration that keeps run history records each queued event as a run (data-defined runtime).
+            // An integration that keeps run history records each queued event as a run (integration runtime).
             return typeof instance.runEvent === 'function'
                 ? instance.runEvent(event, invoke)
                 : invoke();

package/integrations/{data-defined → definitions}/README.md

@@ -1,4 +1,4 @@
-# Data-defined integrations (v0.1)
+# Integrations published as definitions (v0.1)
 
 ADR-063, implemented to the point where a definition can be validated, compiled into Frigg events, executed, rendered
 and versioned. An integration becomes a **document** (what it connects, what it syncs, which workflows and UI it has)
@@ -17,7 +17,7 @@ installation (Integration.config)         ─┘                          │
 |---|---|
 | `schema/integration-definition.v0.1.schema.json` | The definition format (JSON Schema 2020-12) |
 | `schema/capability-manifest.v0.1.schema.json` | What an API module declares it can do |
-| `schema/installation.v0.1.schema.json` | `Integration.config` for a data-defined installation |
+| `schema/installation.v0.1.schema.json` | `Integration.config` for an installation |
 | `schema/records.md` | Database records: definition versions, installation, mappings, workflow runs |
 | `capabilities/*.capabilities.json` | Capability manifests. Nine are checked against the real Api classes (`capabilities/AUDIT.md`); the other twelve are still mock-shaped |
 | `scripts/check-manifests.js` | Checks every manifest `method` exists on the real module's Api class, with the arguments it takes |
@@ -30,7 +30,7 @@ installation (Integration.config)         ─┘                          │
 | `sync-engine.js` | Syncs: link → identity → search → create/update, master rules, backfill pages, polls |
 | `runtime.js` | Ports (Api calls, link store), `runWorkflow`, `runQuery`, `renderSurface`, `runLifecycle`, `resolveOptions`, `installContext` |
 | `versioning.js` | `diff`, `checkBump`, `planUpgrade` |
-| `data-defined-integration.js` | `defineIntegrationClass`: the IntegrationBase subclass that runs it all |
+| `integration-runtime.js` | `defineIntegrationClass`: the IntegrationBase subclass that runs it all |
 | `use-cases/definition-use-cases.js` | Publish, deprecate, catalogue, history, upgrade plan; `createDefinitionCatalog()` (the store the runtime reads) |
 | `repositories/` | `IntegrationDefinitionVersion` and `WorkflowRun` rows (MongoDB, PostgreSQL, DocumentDB) |
 | `router.js` | The publish, catalogue, upgrade and run-history routes |
@@ -107,9 +107,9 @@ Definitions live in the `IntegrationDefinitionVersion` table (Prisma models in b
 `20261018000000_add_data_defined_integrations`), and runs in `WorkflowRun`. Point the class at the store:
 
 ```js
-const { defineSharedIntegrationClass, createDefinitionCatalog } = require('@friggframework/core/integrations/data-defined');
+const { defineSharedIntegrationClass, createDefinitionCatalog } = require('@friggframework/core/integrations/definitions');
 // A database store is read asynchronously, so it goes with the shared class (one class, every definition).
-const DataDefined = defineSharedIntegrationClass({ definitions: createDefinitionCatalog(), manifests, modules });
+const IntegrationRuntime = defineSharedIntegrationClass({ definitions: createDefinitionCatalog(), manifests, modules });
 ```
 
 | Route | Auth | |
@@ -118,8 +118,8 @@ const DataDefined = defineSharedIntegrationClass({ definitions: createDefinition
 | `GET /admin/integrations/:id/versions` | admin key | Version history |
 | `POST /admin/integrations/:id/versions/:v/deprecate` | admin key | Stop new installs of a version |
 | `GET /api/integrations` | user | What can be installed: code and published integrations in one list of options |
-| `GET /api/data-defined/definitions` | user | The published ones, with their counts |
-| `POST /api/integrations` with `config: { type: '<id>' }` | user | Install; pins the latest published version and its checksum (`{ type: 'data-defined', definition: { id } }` still works) |
+| `GET /api/integration-definitions` | user | The published ones, with their counts |
+| `POST /api/integrations` with `config: { type: '<id>' }` | user | Install; pins the latest published version and its checksum |
 | `GET` / `POST /api/integrations/:id/upgrade` `{ to? }` | user | Plan / apply an upgrade (409 with the plan while something is needed) |
 | `GET /api/integrations/:id/runs` | user | Run history, newest first |
 | `GET /api/integrations/:id/syncs` | user | Each sync's backfill progress and poll marks |
@@ -153,7 +153,7 @@ code production runs (`renderers/`):
 
 | Function | Does |
 |---|---|
-| `previewSurface({ def, installation, surfaceId, record, ports, host? })` | `{ surface, view, html, slack?, hubspot? }`. `slack` is Block Kit (`{ blocks, text, truncated }`), `hubspot` a data description of `@hubspot/ui-extensions` components, `html` the same card framed as its host looks. `host` defaults to the surface's own |
+| `previewSurface({ def, installation, surfaceId, record, ports, host? })` | `{ surface, view, html, slack?, hubspot? }`. `slack` is Block Kit (`{ blocks, text, truncated }`), `hubspot` a data description of `@hubspot/ui-extensions` components (names and props checked against 0.17.1; `props` are real component props, a userAction button carries our own node-level `action` for the card to post, an `open_url` button is a real `href`), `html` the same card framed as its host looks. `host` defaults to the surface's own |
 | `previewWorkflow({ def, installation, workflowId, event?, record?, manifests, fixtures? })` | Dry run: `{ status, sends, calls, trace, waiting? }`. Each call is `{ stepId, module, capability, kind, args, output, rendered }`; `rendered` is `{ html, slack? }` for writes (a Slack post renders as the message, anything else as a "would call" card) |
 | `recordingPorts({ def, manifests, fixtures })` | Ports that record and answer instead of calling an API; give them to `previewSurface` for sample data |
 | `viewToSlack`, `viewToHubSpot`, `viewToHtml`, `slackMessageToHtml` | The renderers on their own. `decodeAction(value)` reads a Slack button click back to `{ integrationId?, workflow, surface }` |
@@ -231,14 +231,14 @@ they were routed under and finish on it.
 ## Running the tests
 
 ```bash
-npx jest --config '{}' --rootDir packages/core/integrations/data-defined tests
+npx jest --config '{}' --rootDir packages/core/integrations/definitions tests
 ```
 
 `tests/persistence.test.js` runs the repositories and the publish rules against real databases. Each leg runs only
 when its URL is set. Point them at a migrated PostgreSQL database and a MongoDB replica set with the schema pushed:
 
 ```bash
-DATA_DEFINED_POSTGRES_URL=postgresql://… DATA_DEFINED_MONGO_URL=mongodb://… npx jest … tests
+INTEGRATION_DEFINITIONS_POSTGRES_URL=postgresql://… INTEGRATION_DEFINITIONS_MONGO_URL=mongodb://… npx jest … tests
 ```
 
 ## Validating
@@ -251,8 +251,8 @@ Validation is two layers, and a document is valid only when both pass (`schema-c
 
 ```bash
 npm run validate:definitions --workspace @friggframework/core          # bundled manifests + examples
-node packages/core/integrations/data-defined/scripts/validate.js my.definition.json --strict
-node packages/core/integrations/data-defined/scripts/validate.js --manifests ./capabilities --json defs/
+node packages/core/integrations/definitions/scripts/validate.js my.definition.json --strict
+node packages/core/integrations/definitions/scripts/validate.js --manifests ./capabilities --json defs/
 ```
 
 Exit codes: `0` valid, `1` invalid (or a warning with `--strict`), `2` could not run (unreadable JSON, missing file,

package/integrations/{data-defined → definitions}/capabilities/AUDIT.md

@@ -7,7 +7,7 @@ Api class and every call shape was read against the method's real signature.
 Re-run it (no network, nothing instantiated):
 
 ```bash
-node packages/core/integrations/data-defined/scripts/check-manifests.js --stub-missing \
+node packages/core/integrations/definitions/scripts/check-manifests.js --stub-missing \
   ~/phone-app/backend/src/api-modules ~/phone-app/backend/node_modules/@friggframework \
   ~/api-module-library/packages/v1-ready ~/api-module-library/packages/needs-updating
 ```
@@ -29,7 +29,8 @@ the Api's methods can be read. Roots are searched in order and the first module
   `runtime.js` `argumentsFor` spreads them. An input that is declared but never passed is refused by the manifest check,
   because it would be accepted and silently dropped.
 - **Webhook verification.** Every manifest names `verifyWebhookSignature`. No real module has it (only clio, which has no
-  manifest). Each real module's `webhook` block is marked `"status": "unimplemented"`, and a workflow that triggers on
+  manifest). Each real module's `webhook` block was marked `"status": "unimplemented"`; since api-module-library
+  659b90d eight of them verify signatures (Salesforce has no signed webhook and stays unimplemented), and a workflow that triggers on
   its events validates with a warning: every delivery would fail signature verification.
 
 ## Summary
@@ -81,7 +82,7 @@ Checked against `~/api-module-library/packages/v1-ready/asana` (@friggframework/
 | `workspace.list` | `listWorkspaces` | ok | `listWorkspaces()` | (method was `getWorkspaces`) |
 | `webhook.create` | `createWebhook` | unimplemented | none | Api has no webhook methods. |
 | `webhook.delete` | `deleteWebhook` | unimplemented | none | Api has no webhook methods. |
-| `webhook.verify` | `verifyWebhookSignature` | unimplemented | | The asana Api has no verifyWebhookSignature method; webhook signatures cannot be checked until the module adds one. |
+| `webhook.verify` | `verifyWebhookSignature` | ok (unreleased) | `verifyWebhookSignature({ headers, body, rawBody, method?, url?, now? })` | Implemented in api-module-library 659b90d per the vendor's signing docs; needs the release that includes it. |
 
 ## Calendly (`calendly`)
 
@@ -121,7 +122,7 @@ Checked against `~/api-module-library/packages/v1-ready/fathom` (@friggframework
 | `meeting.transcript` | `getTranscript` | ok | `getTranscript(recordingId, params = {})` | (method was `getRecordingTranscript`; called with one object; now positional) |
 | `webhook.create` | `createWebhook` | ok | `createWebhook(data)` |  |
 | `webhook.delete` | `deleteWebhook` | unimplemented | none | Api has createWebhook but no deleteWebhook. |
-| `webhook.verify` | `verifyWebhookSignature` | unimplemented | | The fathom Api has no verifyWebhookSignature method; webhook signatures cannot be checked until the module adds one. |
+| `webhook.verify` | `verifyWebhookSignature` | ok (unreleased) | `verifyWebhookSignature({ headers, body, rawBody, method?, url?, now? })` | Implemented in api-module-library 659b90d per the vendor's signing docs; needs the release that includes it. |
 
 ## GitHub (`github`)
 
@@ -166,7 +167,7 @@ Checked against `~/api-module-library/packages/v1-ready/hubspot` (@friggframewor
 | `owner.findByEmail` | `getOwnerByEmail` | unimplemented | none | Api has getOwnerById only. |
 | `subscription.definitions` | `listSubscriptionDefinitions` | unimplemented | none | Api has no email subscription methods. |
 | `subscription.unsubscribe` | `unsubscribeEmail` | unimplemented | none | Api has no email subscription methods. |
-| `webhook.verify` | `verifyWebhookSignature` | unimplemented | | The hubspot Api has no verifyWebhookSignature method; webhook signatures cannot be checked until the module adds one. |
+| `webhook.verify` | `verifyWebhookSignature` | ok (unreleased) | `verifyWebhookSignature({ headers, body, rawBody, method?, url?, now? })` | Implemented in api-module-library 659b90d per the vendor's signing docs; needs the release that includes it. |
 
 ## Jira Cloud (`jira`)
 
@@ -225,7 +226,7 @@ Checked against `~/api-module-library/packages/v1-ready/linear` (@friggframework
 | `attachment.link` | `attachmentLinkURL` | unimplemented | none | Api exposes getClient() (a @linear/sdk LinearClient) plus getUsers, getProjects and getUserIssues; issues, comments, attachments, teams and workflow states are reached through the SDK client, not Api methods. |
 | `team.list` | `teams` | unimplemented | none | Api exposes getClient() (a @linear/sdk LinearClient) plus getUsers, getProjects and getUserIssues; issues, comments, attachments, teams and workflow states are reached through the SDK client, not Api methods. |
 | `workflowState.list` | `workflowStates` | unimplemented | none | Api exposes getClient() (a @linear/sdk LinearClient) plus getUsers, getProjects and getUserIssues; issues, comments, attachments, teams and workflow states are reached through the SDK client, not Api methods. |
-| `webhook.verify` | `verifyWebhookSignature` | unimplemented | | The linear Api has no verifyWebhookSignature method; webhook signatures cannot be checked until the module adds one. |
+| `webhook.verify` | `verifyWebhookSignature` | ok (unreleased) | `verifyWebhookSignature({ headers, body, rawBody, method?, url?, now? })` | Implemented in api-module-library 659b90d per the vendor's signing docs; needs the release that includes it. |
 
 ## NetSuite (`netsuite`)
 
@@ -280,7 +281,7 @@ Checked against `~/phone-app/backend/node_modules/@friggframework/api-module-pip
 | `user.list` | `listUsers` | ok | `listUsers()` | (method was `getUsers`) |
 | `webhook.create` | `createWebhook` | ok | `createWebhook(params)` | (method was `addWebhook`) |
 | `webhook.delete` | `deleteWebhook` | ok | `deleteWebhook(webhookId)` | (called with one object; now positional) |
-| `webhook.verify` | `verifyWebhookSignature` | unimplemented | | The pipedrive Api has no verifyWebhookSignature method; webhook signatures cannot be checked until the module adds one. |
+| `webhook.verify` | `verifyWebhookSignature` | ok (unreleased) | `verifyWebhookSignature({ headers, body, rawBody, method?, url?, now? })` | Implemented in api-module-library 659b90d per the vendor's signing docs; needs the release that includes it. |
 
 ## QuickBooks Online (`quickbooks`)
 
@@ -323,7 +324,7 @@ Checked against `~/phone-app/backend/src/api-modules/phone` (@acme/api-module-ph
 | `user.list` | `listUsers` | ok | `listUsers(params = {})` |  |
 | `webhook.create` | `createUnifiedWebhook` | ok | `createUnifiedWebhook(data)` | (method was `createWebhook`) |
 | `webhook.delete` | `deleteWebhook` | ok | `deleteWebhook(id)` | (called with one object; now positional) |
-| `webhook.verify` | `verifyWebhookSignature` | unimplemented | | The phone Api has no verifyWebhookSignature method; webhook signatures cannot be checked until the module adds one. |
+| `webhook.verify` | `verifyWebhookSignature` | ok (unreleased) | `verifyWebhookSignature({ headers, body, rawBody, method?, url?, now? })` | Implemented in api-module-library 659b90d per the vendor's signing docs; needs the release that includes it. |
 
 ## Salesforce (`salesforce`)
 
@@ -343,7 +344,7 @@ Checked against `~/api-module-library/packages/v1-ready/salesforce` (@friggframe
 | `file.attach` | `createContentVersion` | unimplemented | none | Api has the generic create(object, data) only; ContentVersion field names differ from this capability's inputs. |
 | `note.create` | `createContentNote` | unimplemented | none | Api has the generic create(object, data) only; ContentNote field names differ from this capability's inputs. |
 | `user.list` | `listUsers` | unimplemented | none | Api has find(object, filter) but no user listing with an activeOnly filter. |
-| `webhook.verify` | `verifyWebhookSignature` | unimplemented | | The salesforce Api has no verifyWebhookSignature method; webhook signatures cannot be checked until the module adds one. |
+| `webhook.verify` | `verifyWebhookSignature` | unimplemented | | Not a webhook: CDC arrives over the Pub/Sub or CometD stream; Outbound Messages are unsigned (OrganizationId + IP allowlist). Deliveries are rejected. |
 
 ## Shopify (`shopify`)
 
@@ -381,7 +382,7 @@ Checked against `~/api-module-library/packages/needs-updating/slack` (@friggfram
 | `channel.list` | `listChannels` | ok | `listChannels(query)` | (method was `listConversations`) |
 | `user.list` | `listUsers` | unimplemented | none | Api has lookupUserByEmail, getUserById and getUserProfileById, but no user listing. |
 | `user.lookupByEmail` | `lookupUserByEmail` | ok | `lookupUserByEmail(email)` | (called with one object; now positional) |
-| `webhook.verify` | `verifyWebhookSignature` | unimplemented | | The slack Api has no verifyWebhookSignature method; webhook signatures cannot be checked until the module adds one. |
+| `webhook.verify` | `verifyWebhookSignature` | ok (unreleased) | `verifyWebhookSignature({ headers, body, rawBody, method?, url?, now? })` | Implemented in api-module-library 659b90d per the vendor's signing docs; needs the release that includes it. |
 
 ## Stripe (`stripe`)
 
@@ -398,7 +399,7 @@ Checked against `~/api-module-library/packages/v1-ready/stripe` (@friggframework
 | `refund.get` | `retrieveRefund` | unimplemented | none | Api wraps balance transactions, charges, accounts and webhook endpoints only; customers, payment intents, refunds and payouts are not exposed. |
 | `payout.list` | `listPayouts` | unimplemented | none | Api wraps balance transactions, charges, accounts and webhook endpoints only; customers, payment intents, refunds and payouts are not exposed. |
 | `balanceTransaction.list` | `getBalanceTransactions` | ok | `getBalanceTransactions(params)` | (method was `listBalanceTransactions`) |
-| `webhook.verify` | `verifyWebhookSignature` | unimplemented | | The stripe Api has no verifyWebhookSignature method; webhook signatures cannot be checked until the module adds one. |
+| `webhook.verify` | `verifyWebhookSignature` | ok (unreleased) | `verifyWebhookSignature({ headers, body, rawBody, method?, url?, now? })` | Implemented in api-module-library 659b90d per the vendor's signing docs; needs the release that includes it. |
 
 ## Acme ERP (`acmeerp`)
 

package/integrations/{data-defined → definitions}/capabilities/asana.capabilities.json

@@ -152,8 +152,7 @@
         "X-Hook-Secret": "$.headers.x-hook-secret"
       }
     },
-    "status": "unimplemented",
-    "note": "The asana Api has no verifyWebhookSignature method; webhook signatures cannot be checked until the module adds one."
+    "note": "X-Hook-Signature: HMAC-SHA256 of the raw body keyed with the handshake secret (per installation). Implemented in api-module-library 659b90d; needs the module release that includes it."
   },
   "capabilities": {
     "task.get": {

package/integrations/{data-defined → definitions}/capabilities/fathom.capabilities.json

@@ -143,8 +143,7 @@
     "topic": "meeting.ready",
     "eventId": "{{body.recording_id}}",
     "verify": "verifyWebhookSignature",
-    "status": "unimplemented",
-    "note": "The fathom Api has no verifyWebhookSignature method; webhook signatures cannot be checked until the module adds one."
+    "note": "Standard Webhooks: webhook-id, webhook-timestamp, webhook-signature (v1), 300 s. Implemented in api-module-library 659b90d; needs the module release that includes it."
   },
   "capabilities": {
     "meeting.list": {

package/integrations/{data-defined → definitions}/capabilities/hubspot.capabilities.json

@@ -388,8 +388,7 @@
     "eventId": "{{item.eventId}}",
     "account": "{{item.portalId}}",
     "verify": "verifyWebhookSignature",
-    "status": "unimplemented",
-    "note": "The hubspot Api has no verifyWebhookSignature method; webhook signatures cannot be checked until the module adds one."
+    "note": "HubSpot v3: X-HubSpot-Signature-v3 over method + URL + raw body + timestamp, 5 minutes. Needs the public URL and method (the runtime passes them). Implemented in api-module-library 659b90d; needs the module release that includes it."
   },
   "capabilities": {
     "contact.get": {

package/integrations/{data-defined → definitions}/capabilities/linear.capabilities.json

@@ -183,8 +183,7 @@
     ],
     "account": "{{body.organizationId}}",
     "verify": "verifyWebhookSignature",
-    "status": "unimplemented",
-    "note": "The linear Api has no verifyWebhookSignature method; webhook signatures cannot be checked until the module adds one."
+    "note": "Linear-Signature HMAC of the raw body, webhookTimestamp within 60 s. Implemented in api-module-library 659b90d; needs the module release that includes it."
   },
   "capabilities": {
     "issue.get": {

package/integrations/{data-defined → definitions}/capabilities/phone.capabilities.json

@@ -306,8 +306,7 @@
     "topic": "{{body.type}}",
     "eventId": "{{body.id}}",
     "verify": "verifyWebhookSignature",
-    "status": "unimplemented",
-    "note": "The phone Api has no verifyWebhookSignature method; webhook signatures cannot be checked until the module adds one."
+    "note": "Standard Webhooks (current) or a legacy signature header, chosen by header. Implemented in api-module-library 659b90d; needs the module release that includes it."
   },
   "capabilities": {
     "contact.get": {

package/integrations/{data-defined → definitions}/capabilities/pipedrive.capabilities.json

@@ -242,8 +242,7 @@
       "{{body.meta.entity}}:{{body.data.id}}:{{body.meta.timestamp}}"
     ],
     "verify": "verifyWebhookSignature",
-    "status": "unimplemented",
-    "note": "The pipedrive Api has no verifyWebhookSignature method; webhook signatures cannot be checked until the module adds one."
+    "note": "Pipedrive does not sign bodies: HTTP Basic credentials configured on the webhook are checked. Implemented in api-module-library 659b90d; needs the module release that includes it."
   },
   "capabilities": {
     "person.get": {

package/integrations/{data-defined → definitions}/capabilities/salesforce.capabilities.json

@@ -323,7 +323,7 @@
     "eventId": "{{body.id}}",
     "verify": "verifyWebhookSignature",
     "status": "unimplemented",
-    "note": "The salesforce Api has no verifyWebhookSignature method; webhook signatures cannot be checked until the module adds one."
+    "note": "Not a webhook: change-data-capture events arrive over the Pub/Sub or CometD stream the module opens itself, and Salesforce Outbound Messages are unsigned (check OrganizationId plus an IP allowlist). Stays unimplemented, so a delivery here is rejected, never accepted unchecked."
   },
   "capabilities": {
     "lead.get": {

package/integrations/{data-defined → definitions}/capabilities/slack.capabilities.json

@@ -207,8 +207,7 @@
         "challenge": "$.body.challenge"
       }
     },
-    "status": "unimplemented",
-    "note": "The slack Api has no verifyWebhookSignature method; webhook signatures cannot be checked until the module adds one."
+    "note": "Slack signing secret: v0 HMAC over v0:timestamp:raw body, 5 minutes. Implemented in api-module-library 659b90d; needs the module release that includes it."
   },
   "capabilities": {
     "message.post": {

package/integrations/{data-defined → definitions}/capabilities/stripe.capabilities.json

@@ -472,8 +472,7 @@
     "eventId": "{{body.id}}",
     "account": "{{body.account}}",
     "verify": "verifyWebhookSignature",
-    "status": "unimplemented",
-    "note": "The stripe Api has no verifyWebhookSignature method; webhook signatures cannot be checked until the module adds one."
+    "note": "Stripe-Signature t=…,v1=… over t.raw body, 300 s tolerance; rolling secrets accepted. Implemented in api-module-library 659b90d; needs the module release that includes it."
   },
   "capabilities": {
     "customer.get": {

package/integrations/{data-defined → definitions}/config-form.js

@@ -1,5 +1,5 @@
 /**
- * The configure form for a data-defined installation, generated from its definition: what GET_CONFIG_OPTIONS and
+ * The configure form for an installation, generated from its definition: what GET_CONFIG_OPTIONS and
  * REFRESH_CONFIG_OPTIONS return on Frigg's existing, authenticated /api/integrations/:id/config/options routes.
  *
  * The form's data has exactly the shape of Integration.config, so what the management UI PATCHes back is the config:

package/integrations/{data-defined → definitions}/examples/pipedrive-hubspot.definition.json

@@ -5,7 +5,7 @@
   "version": "1.0.0",
   "display": {
     "label": "Pipedrive \u21c4 HubSpot people",
-    "description": "Keeps Pipedrive people and HubSpot contacts the same person on both sides, matched by email then phone. Sync only: no workflows, no UI.",
+    "description": "Keeps Pipedrive people and HubSpot contacts the same person on both sides, matched by email, then by phone.",
     "category": "CRM",
     "tags": [
       "crm",

package/integrations/{data-defined → definitions}/examples/records/phone-hubspot.integration.json

@@ -69,7 +69,7 @@
       "installed": {
         "hook": {
           "id": "WHk2c9",
-          "url": "https://api.example.com/api/data-defined-integration/webhooks/int_7f3a9c?module=phone",
+          "url": "https://api.example.com/api/integration-runtime-integration/webhooks/int_7f3a9c?module=phone",
           "events": [
             "call.completed",
             "call.ringing",

package/integrations/{data-defined → definitions}/expressions.js

@@ -1,5 +1,5 @@
 /**
- * Expressions for data-defined integrations (v0.1).
+ * Expressions for integrations published as definitions (v0.1).
  *
  * Three forms, and no others (nothing is ever passed to eval):
  *   1. Reference   "$.event.contact.id"     A string that is exactly a path. Resolves to the value, keeping its type.

package/integrations/{data-defined → definitions}/index.js

@@ -1,5 +1,5 @@
 /**
- * Data-defined integrations, v0.1 (ADR-063). An integration as a document: modules, syncs, workflows, queries,
+ * Integrations published as definitions, v0.1 (ADR-063). An integration as a document: modules, syncs, workflows, queries,
  * UI surfaces and templates, run by one runtime class on the existing Frigg infrastructure.
  */
 const fs = require('fs');
@@ -9,7 +9,7 @@ const { compile, routeWebhook, eventName } = require('./compile');
 const { execute } = require('./interpreter');
 const { makePorts, runWorkflow, runQuery, renderSurface, resolveView, runLifecycle, resolveOptions } = require('./runtime');
 const { diff, checkBump, planUpgrade } = require('./versioning');
-const { defineIntegrationClass, defineSharedIntegrationClass, extendIntegrationClass, memoryDefinitions } = require('./data-defined-integration');
+const { defineIntegrationClass, defineSharedIntegrationClass, extendIntegrationClass, memoryDefinitions } = require('./integration-runtime');
 const { BUILTINS } = require('./steps');
 const { TRANSFORMS, applyMapping } = require('./transforms');
 const { FILTERS } = require('./expressions');