@friggframework/core 2.0.0--canary.698.b1a2d30.0 → 2.0.0--canary.700.80ec1cc.0

package/generated/prisma-postgresql/wasm.js

@@ -428,8 +428,8 @@ const config = {
       }
     }
   },
-  "inlineSchema": "// Frigg Framework - Prisma Schema (PostgreSQL)\n// PostgreSQL database schema for enterprise integration platform\n// Converted from MongoDB schema for relational database support\n\ngenerator client {\n  provider      = \"prisma-client-js\"\n  output        = \"../generated/prisma-postgresql\"\n  binaryTargets = [\"native\", \"rhel-openssl-3.0.x\"] // native for local dev, rhel for Lambda deployment\n  // Library engine (default since Prisma 3.x): Rust query engine loads as a\n  // Node-API addon inside the same process. The binary engine forks a child\n  // query-engine subprocess and communicates over a local HTTP/IPC pipe with\n  // NO client-side timeout — a zombied child wedges the Node process until\n  // Lambda's 900s cap. Switching to library eliminates that entire class of\n  // silent hangs. See friggframework/frigg#580 for the investigation.\n  engineType    = \"library\"\n}\n\ndatasource db {\n  provider = \"postgresql\"\n  url      = env(\"DATABASE_URL\")\n}\n\n// ============================================================================\n// USER MODELS\n// ============================================================================\n\n/// User model with discriminator pattern support\n/// Replaces Mongoose discriminators (IndividualUser, OrganizationUser)\nmodel User {\n  id   Int      @id @default(autoincrement())\n  type UserType\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // IndividualUser fields (nullable for organizations)\n  email          String?\n  username       String?\n  hashword       String? // Bcrypt hashed password (handled in application layer)\n  appUserId      String?\n  organizationId Int?\n\n  // Self-referential relation for organization membership\n  organization User?  @relation(\"OrgMembers\", fields: [organizationId], references: [id], onDelete: NoAction, onUpdate: NoAction)\n  members      User[] @relation(\"OrgMembers\")\n\n  // OrganizationUser fields (nullable for individuals)\n  appOrgId String?\n  name     String?\n\n  // Relations\n  tokens       Token[]\n  credentials  Credential[]\n  entities     Entity[]\n  integrations Integration[]\n  processes    Process[]\n\n  @@unique([username, appUserId])\n  @@index([type])\n  @@index([appUserId])\n  @@index([organizationId])\n}\n\nenum UserType {\n  INDIVIDUAL\n  ORGANIZATION\n}\n\n// ============================================================================\n// AUTHENTICATION MODELS\n// ============================================================================\n\n/// Authentication tokens with expiration\n/// Bcrypt hashed tokens stored (handled in application layer)\nmodel Token {\n  id      Int       @id @default(autoincrement())\n  token   String // Bcrypt hashed\n  created DateTime  @default(now())\n  expires DateTime?\n  userId  Int\n  user    User      @relation(fields: [userId], references: [id], onDelete: Cascade)\n\n  @@index([userId])\n  @@index([expires])\n}\n\n// ============================================================================\n// CREDENTIAL & ENTITY MODELS\n// ============================================================================\n\n/// OAuth credentials and API tokens\n/// All sensitive data encrypted with KMS at rest\nmodel Credential {\n  id          Int      @id @default(autoincrement())\n  userId      Int?\n  user        User?    @relation(fields: [userId], references: [id], onDelete: Cascade)\n  authIsValid Boolean?\n  externalId  String?\n\n  // Dynamic OAuth fields stored as JSON (encrypted via Prisma middleware)\n  // Contains: access_token, refresh_token, domain, expires_in, token_type, etc.\n  data Json @default(\"{}\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations\n  entities Entity[]\n\n  @@index([userId])\n  @@index([externalId])\n}\n\n/// External service entities (API connections)\nmodel Entity {\n  id           Int         @id @default(autoincrement())\n  credentialId Int?\n  credential   Credential? @relation(fields: [credentialId], references: [id], onDelete: SetNull)\n  userId       Int?\n  user         User?       @relation(fields: [userId], references: [id], onDelete: Cascade)\n  name         String?\n  moduleName   String?\n  externalId   String?\n\n  data Json @default(\"{}\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations - many-to-many with implicit join tables\n  integrations Integration[]\n  syncs        Sync[]\n\n  dataIdentifiers    DataIdentifier[]\n  associationObjects AssociationObject[]\n\n  @@index([userId])\n  @@index([externalId])\n  @@index([moduleName])\n  @@index([credentialId])\n}\n\n// ============================================================================\n// INTEGRATION MODELS\n// ============================================================================\n\n/// Main integration configuration and state\nmodel Integration {\n  id     Int               @id @default(autoincrement())\n  userId Int?\n  user   User?             @relation(fields: [userId], references: [id], onDelete: Cascade)\n  status IntegrationStatus @default(IN_CREATION)\n\n  // Configuration and version\n  config  Json? // Integration configuration object\n  version String?\n\n  // Entity references (many-to-many via implicit join table)\n  entities Entity[]\n\n  // Message arrays (stored as JSON)\n  errors   Json @default(\"[]\")\n  warnings Json @default(\"[]\")\n  info     Json @default(\"[]\")\n  logs     Json @default(\"[]\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations\n  associations Association[]\n  syncs        Sync[]\n  mappings     IntegrationMapping[]\n  processes    Process[]\n  workflowRuns WorkflowRun[]\n\n  @@index([userId])\n  @@index([status])\n}\n\nenum IntegrationStatus {\n  ENABLED\n  NEEDS_CONFIG\n  PROCESSING\n  DISABLED\n  ERROR\n  IN_CREATION\n  IN_DELETION\n}\n\n/// Integration-specific data mappings\n/// All mapping data encrypted with KMS\nmodel IntegrationMapping {\n  id            Int         @id @default(autoincrement())\n  integrationId Int\n  integration   Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  sourceId      String?\n\n  // Encrypted mapping data (handled via Prisma middleware)\n  mapping Json?\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@unique([integrationId, sourceId])\n  @@index([integrationId])\n  @@index([sourceId])\n}\n\n// ============================================================================\n// SYNC MODELS\n// ============================================================================\n\n/// Bidirectional data synchronization tracking\nmodel Sync {\n  id            Int          @id @default(autoincrement())\n  integrationId Int?\n  integration   Integration? @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n\n  // Entity references (many-to-many via implicit join table)\n  entities Entity[]\n\n  hash String\n  name String\n\n  // Data identifiers (extracted to separate model)\n  dataIdentifiers DataIdentifier[]\n\n  @@index([integrationId])\n  @@index([hash])\n  @@index([name])\n}\n\n/// Data identifier for sync operations\n/// Replaces nested array structure in Mongoose\nmodel DataIdentifier {\n  id       Int    @id @default(autoincrement())\n  syncId   Int?\n  sync     Sync?  @relation(fields: [syncId], references: [id], onDelete: Cascade)\n  entityId Int\n  entity   Entity @relation(fields: [entityId], references: [id], onDelete: Cascade)\n\n  // Identifier data (can be any structure)\n  idData Json\n\n  hash String\n\n  @@index([syncId])\n  @@index([entityId])\n  @@index([hash])\n}\n\n// ============================================================================\n// ASSOCIATION MODELS\n// ============================================================================\n\n/// Entity associations with cardinality tracking\nmodel Association {\n  id            Int             @id @default(autoincrement())\n  integrationId Int\n  integration   Integration     @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  name          String\n  type          AssociationType\n  primaryObject String\n\n  // Associated objects (extracted to separate model)\n  objects AssociationObject[]\n\n  @@index([integrationId])\n  @@index([name])\n}\n\n/// Association object entry\n/// Replaces nested array structure in Mongoose\nmodel AssociationObject {\n  id            Int         @id @default(autoincrement())\n  associationId Int\n  association   Association @relation(fields: [associationId], references: [id], onDelete: Cascade)\n  entityId      Int\n  entity        Entity      @relation(fields: [entityId], references: [id], onDelete: Cascade)\n  objectType    String\n  objId         String\n  metadata      Json? // Optional metadata\n\n  @@index([associationId])\n  @@index([entityId])\n}\n\nenum AssociationType {\n  ONE_TO_MANY\n  ONE_TO_ONE\n  MANY_TO_ONE\n}\n\n// ============================================================================\n// PROCESS MODELS\n// ============================================================================\n\n/// Generic Process Model - tracks any long-running operation\n/// Used for: CRM syncs, data migrations, bulk operations, etc.\nmodel Process {\n  id Int @id @default(autoincrement())\n\n  // Core references\n  userId        Int\n  user          User        @relation(fields: [userId], references: [id], onDelete: Cascade)\n  integrationId Int\n  integration   Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n\n  // Process identification\n  name String // e.g., \"zoho-crm-contact-sync\", \"pipedrive-lead-sync\"\n  type String // e.g., \"CRM_SYNC\", \"DATA_MIGRATION\", \"BULK_OPERATION\"\n\n  // State machine\n  state String // Current state (integration-defined states)\n\n  // Flexible storage\n  context Json @default(\"{}\") // Process-specific data (pagination, metadata, etc.)\n  results Json @default(\"{}\") // Process results and metrics\n\n  // Hierarchy support - self-referential relation\n  parentProcessId Int?\n  parentProcess   Process?  @relation(\"ProcessHierarchy\", fields: [parentProcessId], references: [id], onDelete: SetNull)\n  childProcesses  Process[] @relation(\"ProcessHierarchy\")\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([userId])\n  @@index([integrationId])\n  @@index([type])\n  @@index([state])\n  @@index([name])\n  @@index([parentProcessId])\n}\n\n// ============================================================================\n// UTILITY MODELS\n// ============================================================================\n\n/// Generic state storage\nmodel State {\n  id    Int   @id @default(autoincrement())\n  state Json?\n}\n\n/// AWS API Gateway WebSocket connection tracking\nmodel WebsocketConnection {\n  id           Int     @id @default(autoincrement())\n  connectionId String?\n\n  @@index([connectionId])\n}\n\n// ============================================================================\n// ADMIN PROCESS MODELS\n// ============================================================================\n\n/// Admin process state machine\nenum AdminScriptExecutionState {\n  PENDING\n  RUNNING\n  COMPLETED\n  FAILED\n}\n\n/// Admin process tracking (like Process but without user/integration FK)\n/// Used for: admin scripts, db migrations, system maintenance tasks\nmodel AdminScriptExecution {\n  id   Int    @id @default(autoincrement())\n  name String // e.g., \"oauth-token-refresh\", \"db-migration-xyz\"\n  type String // e.g., \"ADMIN_SCRIPT\", \"DB_MIGRATION\"\n\n  // State machine\n  state AdminScriptExecutionState @default(PENDING)\n\n  // Flexible storage (mirrors Process model pattern)\n  context Json @default(\"{}\") // input, trigger, audit info, script version\n  results Json @default(\"{}\") // output, logs, metrics, errors\n\n  // Hierarchy support - self-referential relation\n  parentExecutionId Int?\n  parentExecution   AdminScriptExecution?  @relation(\"AdminScriptExecutionHierarchy\", fields: [parentExecutionId], references: [id], onDelete: SetNull)\n  childExecutions   AdminScriptExecution[] @relation(\"AdminScriptExecutionHierarchy\")\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([name, createdAt(sort: Desc)])\n  @@index([state])\n  @@index([type])\n}\n\n/// Script scheduling configuration for hybrid scheduling (SQS + EventBridge)\nmodel ScriptSchedule {\n  id              Int       @id @default(autoincrement())\n  scriptName      String    @unique\n  enabled         Boolean   @default(false)\n  cronExpression  String?\n  timezone        String    @default(\"UTC\")\n  lastTriggeredAt DateTime?\n  nextTriggerAt   DateTime?\n\n  // External Scheduler (e.g., AWS EventBridge Scheduler)\n  externalScheduleId   String?\n  externalScheduleName String?\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([enabled])\n}\n\n/// Durable usage counters, deliberately isolated: no userId and no foreign key\n/// to Integration, so a user-scoped query can never return a usage row and usage\n/// history survives integration deletion.\nmodel UsageCounter {\n  id Int @id @default(autoincrement())\n\n  integrationId   String\n  integrationType String\n  metric          String\n  window          String // e.g. \"day:2026-07-05\" or \"hour:2026-07-05T14\"\n  value           BigInt @default(0) // BigInt: a busy day/hour counter can exceed 32-bit\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@unique([integrationId, integrationType, metric, window])\n  // Covers totals() (metric + window prefix/range, no integrationType filter).\n  @@index([metric, window])\n  // Covers series() (metric + integrationType + window range).\n  @@index([metric, integrationType, window])\n}\n\n// Data-defined integrations (ADR-063): one immutable row per published definition version.\nenum DefinitionStatus {\n  DRAFT\n  PUBLISHED\n  DEPRECATED\n  RETIRED\n}\n\nmodel IntegrationDefinitionVersion {\n  id              Int              @id @default(autoincrement())\n  definitionId    String\n  version         String\n  schemaVersion   String\n  status          DefinitionStatus @default(DRAFT)\n  checksum        String\n  document        Json\n  changeLevel     String?\n  previousVersion String?\n  notes           String?\n  createdBy       String?\n  // The workspace an integration a user built belongs to (null: the app's own catalogue, offered to everyone).\n  workspaceId     String?\n  publishedAt     DateTime?\n  createdAt       DateTime         @default(now())\n  updatedAt       DateTime         @updatedAt\n\n  @@unique([definitionId, version])\n  @@index([definitionId, status])\n  @@index([workspaceId, status])\n}\n\n// One row per data-defined workflow run. trace holds step ids, statuses, timings and error messages, never request or\n// response bodies.\nmodel WorkflowRun {\n  id                Int         @id @default(autoincrement())\n  integrationId     Int\n  integration       Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  definitionId      String\n  definitionVersion String\n  workflowId        String\n  triggerType       String\n  eventId           String?\n  status            String\n  reason            String?\n  error             String?\n  retryable         Boolean     @default(false)\n  trace             Json        @default(\"[]\")\n  /// The runtime's run id (run_...): how routes and resume jobs address a run\n  runKey            String?\n  /// A paused run (status waiting): which step, and what it waits for. Never request or response bodies.\n  waitingFor        Json?\n  resumeAt          DateTime?\n  startedAt         DateTime\n  endedAt           DateTime?\n  createdAt         DateTime    @default(now())\n\n  @@index([integrationId, runKey])\n  @@index([integrationId, startedAt])\n  @@index([integrationId, workflowId, startedAt])\n  @@index([integrationId, status])\n}\n",
-  "inlineSchemaHash": "7cbcf3d54afbe39160d69f8b640da30304af16dd1eb4ce3267842820b464be7a",
+  "inlineSchema": "// Frigg Framework - Prisma Schema (PostgreSQL)\n// PostgreSQL database schema for enterprise integration platform\n// Converted from MongoDB schema for relational database support\n\ngenerator client {\n  provider      = \"prisma-client-js\"\n  output        = \"../generated/prisma-postgresql\"\n  binaryTargets = [\"native\", \"rhel-openssl-3.0.x\"] // native for local dev, rhel for Lambda deployment\n  // Library engine (default since Prisma 3.x): Rust query engine loads as a\n  // Node-API addon inside the same process. The binary engine forks a child\n  // query-engine subprocess and communicates over a local HTTP/IPC pipe with\n  // NO client-side timeout — a zombied child wedges the Node process until\n  // Lambda's 900s cap. Switching to library eliminates that entire class of\n  // silent hangs. See friggframework/frigg#580 for the investigation.\n  engineType    = \"library\"\n}\n\ndatasource db {\n  provider = \"postgresql\"\n  url      = env(\"DATABASE_URL\")\n}\n\n// ============================================================================\n// USER MODELS\n// ============================================================================\n\n/// User model with discriminator pattern support\n/// Replaces Mongoose discriminators (IndividualUser, OrganizationUser)\nmodel User {\n  id   Int      @id @default(autoincrement())\n  type UserType\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // IndividualUser fields (nullable for organizations)\n  email          String?\n  username       String?\n  hashword       String? // Bcrypt hashed password (handled in application layer)\n  appUserId      String?\n  organizationId Int?\n\n  // Self-referential relation for organization membership\n  organization User?  @relation(\"OrgMembers\", fields: [organizationId], references: [id], onDelete: NoAction, onUpdate: NoAction)\n  members      User[] @relation(\"OrgMembers\")\n\n  // OrganizationUser fields (nullable for individuals)\n  appOrgId String?\n  name     String?\n\n  // Relations\n  tokens       Token[]\n  credentials  Credential[]\n  entities     Entity[]\n  integrations Integration[]\n  processes    Process[]\n\n  @@unique([username, appUserId])\n  @@index([type])\n  @@index([appUserId])\n  @@index([organizationId])\n}\n\nenum UserType {\n  INDIVIDUAL\n  ORGANIZATION\n}\n\n// ============================================================================\n// AUTHENTICATION MODELS\n// ============================================================================\n\n/// Authentication tokens with expiration\n/// Bcrypt hashed tokens stored (handled in application layer)\nmodel Token {\n  id      Int       @id @default(autoincrement())\n  token   String // Bcrypt hashed\n  created DateTime  @default(now())\n  expires DateTime?\n  userId  Int\n  user    User      @relation(fields: [userId], references: [id], onDelete: Cascade)\n\n  @@index([userId])\n  @@index([expires])\n}\n\n// ============================================================================\n// CREDENTIAL & ENTITY MODELS\n// ============================================================================\n\n/// OAuth credentials and API tokens\n/// All sensitive data encrypted with KMS at rest\nmodel Credential {\n  id          Int      @id @default(autoincrement())\n  userId      Int?\n  user        User?    @relation(fields: [userId], references: [id], onDelete: Cascade)\n  authIsValid Boolean?\n  externalId  String?\n\n  // Dynamic OAuth fields stored as JSON (encrypted via Prisma middleware)\n  // Contains: access_token, refresh_token, domain, expires_in, token_type, etc.\n  data Json @default(\"{}\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations\n  entities Entity[]\n\n  @@index([userId])\n  @@index([externalId])\n}\n\n/// External service entities (API connections)\nmodel Entity {\n  id           Int         @id @default(autoincrement())\n  credentialId Int?\n  credential   Credential? @relation(fields: [credentialId], references: [id], onDelete: SetNull)\n  userId       Int?\n  user         User?       @relation(fields: [userId], references: [id], onDelete: Cascade)\n  name         String?\n  moduleName   String?\n  externalId   String?\n\n  data Json @default(\"{}\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations - many-to-many with implicit join tables\n  integrations Integration[]\n  syncs        Sync[]\n\n  dataIdentifiers    DataIdentifier[]\n  associationObjects AssociationObject[]\n\n  @@index([userId])\n  @@index([externalId])\n  @@index([moduleName])\n  @@index([credentialId])\n}\n\n// ============================================================================\n// INTEGRATION MODELS\n// ============================================================================\n\n/// Main integration configuration and state\nmodel Integration {\n  id     Int               @id @default(autoincrement())\n  userId Int?\n  user   User?             @relation(fields: [userId], references: [id], onDelete: Cascade)\n  status IntegrationStatus @default(IN_CREATION)\n\n  // Configuration and version\n  config  Json? // Integration configuration object\n  version String?\n\n  // Entity references (many-to-many via implicit join table)\n  entities Entity[]\n\n  // Message arrays (stored as JSON)\n  errors   Json @default(\"[]\")\n  warnings Json @default(\"[]\")\n  info     Json @default(\"[]\")\n  logs     Json @default(\"[]\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations\n  associations Association[]\n  syncs        Sync[]\n  mappings     IntegrationMapping[]\n  processes    Process[]\n  workflowRuns WorkflowRun[]\n\n  @@index([userId])\n  @@index([status])\n}\n\nenum IntegrationStatus {\n  ENABLED\n  NEEDS_CONFIG\n  PROCESSING\n  DISABLED\n  ERROR\n  IN_CREATION\n  IN_DELETION\n}\n\n/// Integration-specific data mappings\n/// All mapping data encrypted with KMS\nmodel IntegrationMapping {\n  id            Int         @id @default(autoincrement())\n  integrationId Int\n  integration   Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  sourceId      String?\n\n  // Encrypted mapping data (handled via Prisma middleware)\n  mapping Json?\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@unique([integrationId, sourceId])\n  @@index([integrationId])\n  @@index([sourceId])\n}\n\n// ============================================================================\n// SYNC MODELS\n// ============================================================================\n\n/// Bidirectional data synchronization tracking\nmodel Sync {\n  id            Int          @id @default(autoincrement())\n  integrationId Int?\n  integration   Integration? @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n\n  // Entity references (many-to-many via implicit join table)\n  entities Entity[]\n\n  hash String\n  name String\n\n  // Data identifiers (extracted to separate model)\n  dataIdentifiers DataIdentifier[]\n\n  @@index([integrationId])\n  @@index([hash])\n  @@index([name])\n}\n\n/// Data identifier for sync operations\n/// Replaces nested array structure in Mongoose\nmodel DataIdentifier {\n  id       Int    @id @default(autoincrement())\n  syncId   Int?\n  sync     Sync?  @relation(fields: [syncId], references: [id], onDelete: Cascade)\n  entityId Int\n  entity   Entity @relation(fields: [entityId], references: [id], onDelete: Cascade)\n\n  // Identifier data (can be any structure)\n  idData Json\n\n  hash String\n\n  @@index([syncId])\n  @@index([entityId])\n  @@index([hash])\n}\n\n// ============================================================================\n// ASSOCIATION MODELS\n// ============================================================================\n\n/// Entity associations with cardinality tracking\nmodel Association {\n  id            Int             @id @default(autoincrement())\n  integrationId Int\n  integration   Integration     @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  name          String\n  type          AssociationType\n  primaryObject String\n\n  // Associated objects (extracted to separate model)\n  objects AssociationObject[]\n\n  @@index([integrationId])\n  @@index([name])\n}\n\n/// Association object entry\n/// Replaces nested array structure in Mongoose\nmodel AssociationObject {\n  id            Int         @id @default(autoincrement())\n  associationId Int\n  association   Association @relation(fields: [associationId], references: [id], onDelete: Cascade)\n  entityId      Int\n  entity        Entity      @relation(fields: [entityId], references: [id], onDelete: Cascade)\n  objectType    String\n  objId         String\n  metadata      Json? // Optional metadata\n\n  @@index([associationId])\n  @@index([entityId])\n}\n\nenum AssociationType {\n  ONE_TO_MANY\n  ONE_TO_ONE\n  MANY_TO_ONE\n}\n\n// ============================================================================\n// PROCESS MODELS\n// ============================================================================\n\n/// Generic Process Model - tracks any long-running operation\n/// Used for: CRM syncs, data migrations, bulk operations, etc.\nmodel Process {\n  id Int @id @default(autoincrement())\n\n  // Core references\n  userId        Int\n  user          User        @relation(fields: [userId], references: [id], onDelete: Cascade)\n  integrationId Int\n  integration   Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n\n  // Process identification\n  name String // e.g., \"zoho-crm-contact-sync\", \"pipedrive-lead-sync\"\n  type String // e.g., \"CRM_SYNC\", \"DATA_MIGRATION\", \"BULK_OPERATION\"\n\n  // State machine\n  state String // Current state (integration-defined states)\n\n  // Flexible storage\n  context Json @default(\"{}\") // Process-specific data (pagination, metadata, etc.)\n  results Json @default(\"{}\") // Process results and metrics\n\n  // Hierarchy support - self-referential relation\n  parentProcessId Int?\n  parentProcess   Process?  @relation(\"ProcessHierarchy\", fields: [parentProcessId], references: [id], onDelete: SetNull)\n  childProcesses  Process[] @relation(\"ProcessHierarchy\")\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([userId])\n  @@index([integrationId])\n  @@index([type])\n  @@index([state])\n  @@index([name])\n  @@index([parentProcessId])\n}\n\n// ============================================================================\n// UTILITY MODELS\n// ============================================================================\n\n/// Generic state storage\nmodel State {\n  id    Int   @id @default(autoincrement())\n  state Json?\n}\n\n/// AWS API Gateway WebSocket connection tracking\nmodel WebsocketConnection {\n  id           Int     @id @default(autoincrement())\n  connectionId String?\n\n  @@index([connectionId])\n}\n\n// ============================================================================\n// ADMIN PROCESS MODELS\n// ============================================================================\n\n/// Admin process state machine\nenum AdminScriptExecutionState {\n  PENDING\n  RUNNING\n  COMPLETED\n  FAILED\n}\n\n/// Admin process tracking (like Process but without user/integration FK)\n/// Used for: admin scripts, db migrations, system maintenance tasks\nmodel AdminScriptExecution {\n  id   Int    @id @default(autoincrement())\n  name String // e.g., \"oauth-token-refresh\", \"db-migration-xyz\"\n  type String // e.g., \"ADMIN_SCRIPT\", \"DB_MIGRATION\"\n\n  // State machine\n  state AdminScriptExecutionState @default(PENDING)\n\n  // Flexible storage (mirrors Process model pattern)\n  context Json @default(\"{}\") // input, trigger, audit info, script version\n  results Json @default(\"{}\") // output, logs, metrics, errors\n\n  // Hierarchy support - self-referential relation\n  parentExecutionId Int?\n  parentExecution   AdminScriptExecution?  @relation(\"AdminScriptExecutionHierarchy\", fields: [parentExecutionId], references: [id], onDelete: SetNull)\n  childExecutions   AdminScriptExecution[] @relation(\"AdminScriptExecutionHierarchy\")\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([name, createdAt(sort: Desc)])\n  @@index([state])\n  @@index([type])\n}\n\n/// Script scheduling configuration for hybrid scheduling (SQS + EventBridge)\nmodel ScriptSchedule {\n  id              Int       @id @default(autoincrement())\n  scriptName      String    @unique\n  enabled         Boolean   @default(false)\n  cronExpression  String?\n  timezone        String    @default(\"UTC\")\n  lastTriggeredAt DateTime?\n  nextTriggerAt   DateTime?\n\n  // External Scheduler (e.g., AWS EventBridge Scheduler)\n  externalScheduleId   String?\n  externalScheduleName String?\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([enabled])\n}\n\n/// Durable usage counters, deliberately isolated: no userId and no foreign key\n/// to Integration, so a user-scoped query can never return a usage row and usage\n/// history survives integration deletion.\nmodel UsageCounter {\n  id Int @id @default(autoincrement())\n\n  integrationId   String\n  integrationType String\n  metric          String\n  window          String // e.g. \"day:2026-07-05\" or \"hour:2026-07-05T14\"\n  value           BigInt @default(0) // BigInt: a busy day/hour counter can exceed 32-bit\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@unique([integrationId, integrationType, metric, window])\n  // Covers totals() (metric + window prefix/range, no integrationType filter).\n  @@index([metric, window])\n  // Covers series() (metric + integrationType + window range).\n  @@index([metric, integrationType, window])\n}\n\n// Integrations published as definitions (ADR-063): one immutable row per published definition version.\nenum DefinitionStatus {\n  DRAFT\n  PUBLISHED\n  DEPRECATED\n  RETIRED\n}\n\nmodel IntegrationDefinitionVersion {\n  id              Int              @id @default(autoincrement())\n  definitionId    String\n  version         String\n  schemaVersion   String\n  status          DefinitionStatus @default(DRAFT)\n  checksum        String\n  document        Json\n  changeLevel     String?\n  previousVersion String?\n  notes           String?\n  createdBy       String?\n  // The workspace an integration a user built belongs to (null: the app's own catalogue, offered to everyone).\n  workspaceId     String?\n  publishedAt     DateTime?\n  createdAt       DateTime         @default(now())\n  updatedAt       DateTime         @updatedAt\n\n  @@unique([definitionId, version])\n  @@index([definitionId, status])\n  @@index([workspaceId, status])\n}\n\n// One row per workflow run. trace holds step ids, statuses, timings and error messages, never request or\n// response bodies.\nmodel WorkflowRun {\n  id                Int         @id @default(autoincrement())\n  integrationId     Int\n  integration       Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  definitionId      String\n  definitionVersion String\n  workflowId        String\n  triggerType       String\n  eventId           String?\n  status            String\n  reason            String?\n  error             String?\n  retryable         Boolean     @default(false)\n  trace             Json        @default(\"[]\")\n  /// The runtime's run id (run_...): how routes and resume jobs address a run\n  runKey            String?\n  /// A paused run (status waiting): which step, and what it waits for. Never request or response bodies.\n  waitingFor        Json?\n  resumeAt          DateTime?\n  startedAt         DateTime\n  endedAt           DateTime?\n  createdAt         DateTime    @default(now())\n\n  @@index([integrationId, runKey])\n  @@index([integrationId, startedAt])\n  @@index([integrationId, workflowId, startedAt])\n  @@index([integrationId, status])\n}\n",
+  "inlineSchemaHash": "5d11039694b44af001971b7239ab8290b642c385239660aee17e709d4fa0b509",
   "copyEngine": true
 }
 config.dirname = '/'

package/handlers/app-handler-helpers.js

@@ -12,8 +12,11 @@ const log = getLogger('frigg.http');
 const createApp = (applyMiddleware) => {
     const app = express();
 
-    app.use(bodyParser.json({ limit: '10mb' }));
-    app.use(bodyParser.urlencoded({ extended: true }));
+    // Keep the bytes as received: webhook signatures (HubSpot, Slack, Stripe, Linear…) are computed over the exact
+    // raw body, which re-serialising the parsed body does not reproduce. A reference to the buffer, not a copy.
+    const keepRaw = (req, res, buf) => { req.rawBody = buf; };
+    app.use(bodyParser.json({ limit: '10mb', verify: keepRaw }));
+    app.use(bodyParser.urlencoded({ extended: true, verify: keepRaw }));
     app.use(
         cors({
             origin: '*',

package/handlers/integration-event-dispatcher.js

@@ -21,7 +21,7 @@ class IntegrationEventDispatcher {
     async dispatchJob({ event, data, context, delivery }) {
         return this._dispatch(event, (instance, handler) => {
             const invoke = () => handler.call(instance, { data, context, delivery });
-            // An integration that keeps run history records each queued event as a run (data-defined runtime).
+            // An integration that keeps run history records each queued event as a run (integration runtime).
             return typeof instance.runEvent === 'function'
                 ? instance.runEvent(event, invoke)
                 : invoke();

package/integrations/{data-defined → definitions}/README.md

@@ -1,4 +1,4 @@
-# Data-defined integrations (v0.1)
+# Integrations published as definitions (v0.1)
 
 ADR-063, implemented to the point where a definition can be validated, compiled into Frigg events, executed, rendered
 and versioned. An integration becomes a **document** (what it connects, what it syncs, which workflows and UI it has)
@@ -17,7 +17,7 @@ installation (Integration.config)         ─┘                          │
 |---|---|
 | `schema/integration-definition.v0.1.schema.json` | The definition format (JSON Schema 2020-12) |
 | `schema/capability-manifest.v0.1.schema.json` | What an API module declares it can do |
-| `schema/installation.v0.1.schema.json` | `Integration.config` for a data-defined installation |
+| `schema/installation.v0.1.schema.json` | `Integration.config` for an installation |
 | `schema/records.md` | Database records: definition versions, installation, mappings, workflow runs |
 | `capabilities/*.capabilities.json` | Capability manifests. Nine are checked against the real Api classes (`capabilities/AUDIT.md`); the other twelve are still mock-shaped |
 | `scripts/check-manifests.js` | Checks every manifest `method` exists on the real module's Api class, with the arguments it takes |
@@ -30,7 +30,7 @@ installation (Integration.config)         ─┘                          │
 | `sync-engine.js` | Syncs: link → identity → search → create/update, master rules, backfill pages, polls |
 | `runtime.js` | Ports (Api calls, link store), `runWorkflow`, `runQuery`, `renderSurface`, `runLifecycle`, `resolveOptions`, `installContext` |
 | `versioning.js` | `diff`, `checkBump`, `planUpgrade` |
-| `data-defined-integration.js` | `defineIntegrationClass`: the IntegrationBase subclass that runs it all |
+| `integration-runtime.js` | `defineIntegrationClass`: the IntegrationBase subclass that runs it all |
 | `use-cases/definition-use-cases.js` | Publish, deprecate, catalogue, history, upgrade plan; `createDefinitionCatalog()` (the store the runtime reads) |
 | `repositories/` | `IntegrationDefinitionVersion` and `WorkflowRun` rows (MongoDB, PostgreSQL, DocumentDB) |
 | `router.js` | The publish, catalogue, upgrade and run-history routes |
@@ -107,9 +107,9 @@ Definitions live in the `IntegrationDefinitionVersion` table (Prisma models in b
 `20261018000000_add_data_defined_integrations`), and runs in `WorkflowRun`. Point the class at the store:
 
 ```js
-const { defineSharedIntegrationClass, createDefinitionCatalog } = require('@friggframework/core/integrations/data-defined');
+const { defineSharedIntegrationClass, createDefinitionCatalog } = require('@friggframework/core/integrations/definitions');
 // A database store is read asynchronously, so it goes with the shared class (one class, every definition).
-const DataDefined = defineSharedIntegrationClass({ definitions: createDefinitionCatalog(), manifests, modules });
+const IntegrationRuntime = defineSharedIntegrationClass({ definitions: createDefinitionCatalog(), manifests, modules });
 ```
 
 | Route | Auth | |
@@ -118,8 +118,8 @@ const DataDefined = defineSharedIntegrationClass({ definitions: createDefinition
 | `GET /admin/integrations/:id/versions` | admin key | Version history |
 | `POST /admin/integrations/:id/versions/:v/deprecate` | admin key | Stop new installs of a version |
 | `GET /api/integrations` | user | What can be installed: code and published integrations in one list of options |
-| `GET /api/data-defined/definitions` | user | The published ones, with their counts |
-| `POST /api/integrations` with `config: { type: '<id>' }` | user | Install; pins the latest published version and its checksum (`{ type: 'data-defined', definition: { id } }` still works) |
+| `GET /api/integration-definitions` | user | The published ones, with their counts |
+| `POST /api/integrations` with `config: { type: '<id>' }` | user | Install; pins the latest published version and its checksum |
 | `GET` / `POST /api/integrations/:id/upgrade` `{ to? }` | user | Plan / apply an upgrade (409 with the plan while something is needed) |
 | `GET /api/integrations/:id/runs` | user | Run history, newest first |
 | `GET /api/integrations/:id/syncs` | user | Each sync's backfill progress and poll marks |
@@ -153,7 +153,7 @@ code production runs (`renderers/`):
 
 | Function | Does |
 |---|---|
-| `previewSurface({ def, installation, surfaceId, record, ports, host? })` | `{ surface, view, html, slack?, hubspot? }`. `slack` is Block Kit (`{ blocks, text, truncated }`), `hubspot` a data description of `@hubspot/ui-extensions` components, `html` the same card framed as its host looks. `host` defaults to the surface's own |
+| `previewSurface({ def, installation, surfaceId, record, ports, host? })` | `{ surface, view, html, slack?, hubspot? }`. `slack` is Block Kit (`{ blocks, text, truncated }`), `hubspot` a data description of `@hubspot/ui-extensions` components (names and props checked against 0.17.1; `props` are real component props, a userAction button carries our own node-level `action` for the card to post, an `open_url` button is a real `href`), `html` the same card framed as its host looks. `host` defaults to the surface's own |
 | `previewWorkflow({ def, installation, workflowId, event?, record?, manifests, fixtures? })` | Dry run: `{ status, sends, calls, trace, waiting? }`. Each call is `{ stepId, module, capability, kind, args, output, rendered }`; `rendered` is `{ html, slack? }` for writes (a Slack post renders as the message, anything else as a "would call" card) |
 | `recordingPorts({ def, manifests, fixtures })` | Ports that record and answer instead of calling an API; give them to `previewSurface` for sample data |
 | `viewToSlack`, `viewToHubSpot`, `viewToHtml`, `slackMessageToHtml` | The renderers on their own. `decodeAction(value)` reads a Slack button click back to `{ integrationId?, workflow, surface }` |
@@ -231,14 +231,14 @@ they were routed under and finish on it.
 ## Running the tests
 
 ```bash
-npx jest --config '{}' --rootDir packages/core/integrations/data-defined tests
+npx jest --config '{}' --rootDir packages/core/integrations/definitions tests
 ```
 
 `tests/persistence.test.js` runs the repositories and the publish rules against real databases. Each leg runs only
 when its URL is set. Point them at a migrated PostgreSQL database and a MongoDB replica set with the schema pushed:
 
 ```bash
-DATA_DEFINED_POSTGRES_URL=postgresql://… DATA_DEFINED_MONGO_URL=mongodb://… npx jest … tests
+INTEGRATION_DEFINITIONS_POSTGRES_URL=postgresql://… INTEGRATION_DEFINITIONS_MONGO_URL=mongodb://… npx jest … tests
 ```
 
 ## Validating
@@ -251,8 +251,8 @@ Validation is two layers, and a document is valid only when both pass (`schema-c
 
 ```bash
 npm run validate:definitions --workspace @friggframework/core          # bundled manifests + examples
-node packages/core/integrations/data-defined/scripts/validate.js my.definition.json --strict
-node packages/core/integrations/data-defined/scripts/validate.js --manifests ./capabilities --json defs/
+node packages/core/integrations/definitions/scripts/validate.js my.definition.json --strict
+node packages/core/integrations/definitions/scripts/validate.js --manifests ./capabilities --json defs/
 ```
 
 Exit codes: `0` valid, `1` invalid (or a warning with `--strict`), `2` could not run (unreadable JSON, missing file,

package/integrations/{data-defined → definitions}/capabilities/AUDIT.md

@@ -4,16 +4,45 @@ Audit of every `*.capabilities.json` in this directory against the Api class it
 began as bundled mocks; for each module whose source could be found, every `method` was checked to exist on the real
 Api class and every call shape was read against the method's real signature.
 
-Re-run it (no network, nothing instantiated):
+Re-run it (no network, nothing instantiated). **One run per module, with that module's checkout first**: the
+api-module-library branches that carry the new methods are separate worktrees, and every worktree also holds an older copy
+of the other modules, so a single run with several roots lets the first root's stale copy of (say) `stripe` win. The
+roots below are the specific module directories, so nothing else can match:
 
 ```bash
-node packages/core/integrations/data-defined/scripts/check-manifests.js --stub-missing \
-  ~/phone-app/backend/src/api-modules ~/phone-app/backend/node_modules/@friggframework \
-  ~/api-module-library/packages/v1-ready ~/api-module-library/packages/needs-updating
+M=packages/core/integrations/definitions/scripts/check-manifests.js
+node $M --stub-missing ~/aml-hubspot/packages/v1-ready/hubspot        # hubspot   (PR #106)
+node $M --stub-missing ~/aml-salesforce/packages/v1-ready/salesforce  # salesforce (PR #107)
+node $M --stub-missing ~/aml-stripe/packages/v1-ready/stripe          # stripe    (PR #108)
+node $M --stub-missing ~/aml-linear/packages/v1-ready/linear          # linear    (PR #109)
+node $M --stub-missing ~/aml-small/packages/v1-ready                  # asana, fathom (PR #110)
+node $M --stub-missing ~/aml-small/packages/needs-updating            # slack     (PR #110)
+node $M --stub-missing <built pipedrive>                              # pipedrive (PR #110): src/api.ts has no dist, so
+                                                                      # compile it first (tsc --outDir dist --noCheck)
+node $M --stub-missing ~/phone-app/backend/src/api-modules           # phone (the app's own module)
 ```
 
-(`--stub-missing` stands in for dependencies that are not installed here, such as jsforce, stripe and @linear/sdk, so
-the Api's methods can be read. Roots are searched in order and the first module that loads wins.)
+Each run reports every manifest, so read only the line for the module you are checking (the others resolve to nothing or
+to an older copy). Run from the repo root: loading an Api pulls in `@friggframework/core`, which reads `package.json`
+from the working directory. (`--stub-missing` stands in for dependencies that are not installed here, such as jsforce,
+stripe and @linear/sdk, so the Api's methods can be read.)
+
+## Methods that landed after this audit
+
+The capabilities this file first marked unimplemented for hubspot, salesforce, stripe, linear, asana, pipedrive, fathom
+and slack now have methods, on unmerged api-module-library branches: **#106 (hubspot), #107 (salesforce), #108 (stripe),
+#109 (linear), #110 (asana, pipedrive, fathom, slack)**, stacked on #105. The manifests describe those methods, so **a
+definition that uses them needs the module releases that carry those PRs**; against an older release the call fails at
+runtime with "not a function". Exceptions that stay unimplemented: Salesforce's signed webhook (it has none: CDC arrives
+over the Pub/Sub stream and Outbound Messages are unsigned), and Phone's `contact.search`, which is not part of that work.
+Two shape notes:
+
+- HubSpot `deal.search` was reshaped to the real `searchDeals({ filterGroups, sorts, props, limit, after, allProps })`;
+  the old open/closeDateBefore/closeDateAfter/minAmount inputs never existed in the Api and are now `filterGroups`
+  filters (`hs_is_closed`, `closedate`, `amount`). The Api returns HubSpot's `{ results, paging }` page, not a bare array,
+  so a step that indexes the result as a list (`$.steps.deals[0]`) reads the page object: the `hubspot-slack` example still
+  does and is a mock-era shape to revisit.
+- HubSpot `deal.update` is `updateDeal({ dealId, properties })`: one object, so the input is now `dealId` (it was `id`).
 
 ## How to read this
 
@@ -29,31 +58,32 @@ the Api's methods can be read. Roots are searched in order and the first module
   `runtime.js` `argumentsFor` spreads them. An input that is declared but never passed is refused by the manifest check,
   because it would be accepted and silently dropped.
 - **Webhook verification.** Every manifest names `verifyWebhookSignature`. No real module has it (only clio, which has no
-  manifest). Each real module's `webhook` block is marked `"status": "unimplemented"`, and a workflow that triggers on
+  manifest). Each real module's `webhook` block was marked `"status": "unimplemented"`; since api-module-library
+  659b90d eight of them verify signatures (Salesforce has no signed webhook and stays unimplemented), and a workflow that triggers on
   its events validates with a warning: every delivery would fail signature verification.
 
 ## Summary
 
 | Module | Source checked | Capabilities | Renamed method | Call shape fixed | Inputs changed | Unimplemented upstream |
 |---|---|---|---|---|---|---|
-| asana | ~/api-module-library/packages/v1-ready/asana | 6 | 3 | 1 | 2 | 3 |
+| asana | ~/api-module-library/packages/v1-ready/asana | 6 | 3 | 1 | 2 | 0 |
 | calendly | none found | 6 | - | - | - | - |
 | docusign | none found | 5 | - | - | - | - |
-| fathom | ~/api-module-library/packages/v1-ready/fathom | 5 | 2 | 2 | 0 | 1 |
+| fathom | ~/api-module-library/packages/v1-ready/fathom | 5 | 2 | 2 | 0 | 0 |
 | github | none found | 6 | - | - | - | - |
-| hubspot | ~/api-module-library/packages/v1-ready/hubspot | 23 | 0 | 5 | 1 | 17 |
+| hubspot | ~/api-module-library/packages/v1-ready/hubspot | 23 | 0 | 5 | 1 | 0 |
 | jira | none found | 12 | - | - | - | - |
 | klaviyo | none found | 14 | - | - | - | - |
-| linear | ~/api-module-library/packages/v1-ready/linear | 9 | 0 | 0 | 0 | 9 |
+| linear | ~/api-module-library/packages/v1-ready/linear | 9 | 0 | 0 | 0 | 0 |
 | netsuite | none found | 15 | - | - | - | - |
 | notion | none found | 6 | - | - | - | - |
-| pipedrive | ~/phone-app/backend/node_modules/@friggframework/api-module-pipedrive | 11 | 4 | 3 | 1 | 2 |
+| pipedrive | ~/aml-small/packages/v1-ready/pipedrive (compiled src/api.ts) | 11 | 4 | 3 | 1 | 0 |
 | quickbooks | none found | 14 | - | - | - | - |
 | phone | ~/phone-app/backend/src/api-modules/phone | 13 | 1 | 4 | 0 | 1 |
-| salesforce | ~/api-module-library/packages/v1-ready/salesforce | 12 | 5 | 5 | 0 | 7 |
+| salesforce | ~/api-module-library/packages/v1-ready/salesforce | 12 | 5 | 5 | 0 | 0 (webhook signing aside) |
 | shopify | none found | 15 | - | - | - | - |
-| slack | ~/api-module-library/packages/needs-updating/slack | 7 | 2 | 1 | 0 | 1 |
-| stripe | ~/api-module-library/packages/v1-ready/stripe | 9 | 1 | 0 | 0 | 8 |
+| slack | ~/api-module-library/packages/needs-updating/slack | 7 | 2 | 1 | 0 | 0 |
+| stripe | ~/api-module-library/packages/v1-ready/stripe | 9 | 1 | 0 | 0 | 0 |
 | acmeerp | none found | 13 | - | - | - | - |
 | webflow | none found | 5 | - | - | - | - |
 | zendesk | none found | 8 | - | - | - | - |
@@ -63,8 +93,7 @@ nothing in them is known to exist.
 
 Where a module has two candidates the first root given wins. Phone is checked against the deployed
 `phone-app/backend/src/api-modules/phone` (the app's own module: `createUnifiedWebhook`, `updateContact`). The library's `v1-ready/phone` 1.0.0 lacks `updateContact` and has `createCallWebhook` and friends
-instead of one webhook method. Pipedrive is checked against the built `@friggframework/api-module-pipedrive`
-2.1.0-next.7 (the library copy is TypeScript source with no `dist`).
+instead of one webhook method. Pipedrive is checked against the compiled TypeScript source of the api-module-library branch (the library copy has no `dist`).
 
 Manifest versions in the files (for example HubSpot 1.4.0, Asana 1.5.1) are ahead of the module sources audited (HubSpot
 1.1.7, Asana 1.1.5): the manifests describe modules that were never released as written.
@@ -76,12 +105,12 @@ Checked against `~/api-module-library/packages/v1-ready/asana` (@friggframework/
 | Capability | Method | Status | Real signature | Note |
 |---|---|---|---|---|
 | `task.get` | `getTaskById` | ok | `getTaskById(id)` | Api.getTaskById(id) takes only the id; field selection (opt_fields) is not supported. (method was `getTask`; called with one object; now positional; inputs were taskGid, opt_fields) |
-| `task.search` | `searchTasksInWorkspace` | unimplemented | none | Api.listTasks({ workspaceId, assigneeId }) filters by workspace and assignee only; due_on, completed, projects_any and limit have no equivalent. |
+| `task.search` | `searchTasksInWorkspace` | ok (unreleased) | `searchTasksInWorkspace(workspaceId, params = {})` | Implemented in api-module-library #110; needs the release that includes it. |
 | `project.list` | `listProjects` | ok | `listProjects(params)` | (method was `getProjects`; inputs were workspaceGid, archived) |
 | `workspace.list` | `listWorkspaces` | ok | `listWorkspaces()` | (method was `getWorkspaces`) |
-| `webhook.create` | `createWebhook` | unimplemented | none | Api has no webhook methods. |
-| `webhook.delete` | `deleteWebhook` | unimplemented | none | Api has no webhook methods. |
-| `webhook.verify` | `verifyWebhookSignature` | unimplemented | | The asana Api has no verifyWebhookSignature method; webhook signatures cannot be checked until the module adds one. |
+| `webhook.create` | `createWebhook` | ok (unreleased) | `createWebhook(resource, target, filters)` | Implemented in api-module-library #110; needs the release that includes it. |
+| `webhook.delete` | `deleteWebhook` | ok (unreleased) | `deleteWebhook(webhookGid)` | Implemented in api-module-library #110; needs the release that includes it. |
+| `webhook.verify` | `verifyWebhookSignature` | ok (unreleased) | `verifyWebhookSignature({ headers, body, rawBody, method?, url?, now? })` | Implemented in api-module-library 659b90d per the vendor's signing docs; needs the release that includes it. |
 
 ## Calendly (`calendly`)
 
@@ -120,8 +149,8 @@ Checked against `~/api-module-library/packages/v1-ready/fathom` (@friggframework
 | `meeting.summary` | `getSummary` | ok | `getSummary(recordingId, params = {})` | (method was `getRecordingSummary`; called with one object; now positional) |
 | `meeting.transcript` | `getTranscript` | ok | `getTranscript(recordingId, params = {})` | (method was `getRecordingTranscript`; called with one object; now positional) |
 | `webhook.create` | `createWebhook` | ok | `createWebhook(data)` |  |
-| `webhook.delete` | `deleteWebhook` | unimplemented | none | Api has createWebhook but no deleteWebhook. |
-| `webhook.verify` | `verifyWebhookSignature` | unimplemented | | The fathom Api has no verifyWebhookSignature method; webhook signatures cannot be checked until the module adds one. |
+| `webhook.delete` | `deleteWebhook` | ok (unreleased) | `deleteWebhook(id)` | Implemented in api-module-library #110; needs the release that includes it. |
+| `webhook.verify` | `verifyWebhookSignature` | ok (unreleased) | `verifyWebhookSignature({ headers, body, rawBody, method?, url?, now? })` | Implemented in api-module-library 659b90d per the vendor's signing docs; needs the release that includes it. |
 
 ## GitHub (`github`)
 
@@ -144,29 +173,29 @@ Checked against `~/api-module-library/packages/v1-ready/hubspot` (@friggframewor
 | Capability | Method | Status | Real signature | Note |
 |---|---|---|---|---|
 | `contact.get` | `getContactById` | ok | `getContactById(contactId)` | Api.getContactById(id) always requests the portal's full property list; a properties argument is not supported. (called with one object; now positional; inputs were id, properties) |
-| `contact.search` | `searchContacts` | unimplemented | none | Api has no contact search (searchCompanies, searchDeals, searchCustomObjects and searchLists only). |
+| `contact.search` | `searchContacts` | ok (unreleased) | `searchContacts(params = {})` | Implemented in api-module-library #106; needs the release that includes it. |
 | `contact.list` | `listContacts` | ok | `listContacts(params)` | Api.listContacts({ after, limit, properties }) has no modified-since filter, so updatedSince is ignored and a poll re-lists every contact. |
 | `contact.create` | `createContact` | ok | `createContact(body)` | (called with one object; now positional) |
 | `contact.update` | `updateContact` | ok | `updateContact(contactId, properties)` | (called with one object; now positional) |
 | `deal.get` | `getDealById` | ok | `getDealById(dealId)` | (called with one object; now positional) |
-| `deal.listForContact` | `listDealsForContact` | unimplemented | none | Api has no per-contact deal listing; associations come from getBatchAssociations(from, to, inputs). |
-| `deal.contacts` | `listContactsForDeal` | unimplemented | none | Api has no per-deal contact listing; associations come from getBatchAssociations(from, to, inputs). |
-| `task.create` | `createTask` | unimplemented | none | Api has no engagement or task methods. |
-| `call.create` | `createCallEngagement` | unimplemented | none | Api has no engagement or task methods. |
-| `note.create` | `createNote` | unimplemented | none | Api has no engagement or task methods. |
-| `owner.list` | `listOwners` | unimplemented | none | Api has getOwnerById only. |
-| `pipeline.stages` | `listDealStages` | unimplemented | none | Api.getPipelineDetails(objType) returns every pipeline for an object type, not the stages of one pipeline. |
-| `contact.upsertByEmail` | `upsertContactByEmail` | unimplemented | none | Api has no upsert and no contact search to build one from. |
-| `deal.update` | `updateDeal` | unimplemented (a method of that name exists, unusable as the capability is shaped) | `updateDeal(params)` | Api.updateDeal({ dealId, properties }) reads this.URLs.getDealById, which is not defined (the table has dealById), so it throws before sending. Fixed in api-module-library (claude/shared-conversation-8hgmbr, 5961c9a); stays unimplemented here until a release carries it. |
-| `deal.search` | `searchDeals` | unimplemented (a method of that name exists, unusable as the capability is shaped) | `searchDeals(params)` | Api.searchDeals takes HubSpot filterGroups, sorts, props, limit and after, not open/closeDate/amount filters. |
-| `task.get` | `getTaskById` | unimplemented | none | Api has no engagement or task methods. |
-| `task.update` | `updateTask` | unimplemented | none | Api has no engagement or task methods. |
-| `task.search` | `searchTasks` | unimplemented | none | Api has no engagement or task methods. |
+| `deal.listForContact` | `listDealsForContact` | ok (unreleased) | `listDealsForContact(contactId, open)` | Implemented in api-module-library #106; needs the release that includes it. |
+| `deal.contacts` | `listContactsForDeal` | ok (unreleased) | `listContactsForDeal(dealId)` | Implemented in api-module-library #106; needs the release that includes it. |
+| `task.create` | `createTask` | ok (unreleased) | `createTask(properties, contactId)` | Implemented in api-module-library #106; needs the release that includes it. |
+| `call.create` | `createCallEngagement` | ok (unreleased) | `createCallEngagement(properties, contactId)` | Implemented in api-module-library #106; needs the release that includes it. |
+| `note.create` | `createNote` | ok (unreleased) | `createNote(properties, contactId, dealId)` | Implemented in api-module-library #106; needs the release that includes it. |
+| `owner.list` | `listOwners` | ok (unreleased) | `listOwners()` | Implemented in api-module-library #106; needs the release that includes it. |
+| `pipeline.stages` | `listDealStages` | ok (unreleased) | `listDealStages(pipelineId)` | Implemented in api-module-library #106; needs the release that includes it. |
+| `contact.upsertByEmail` | `upsertContactByEmail` | ok (unreleased) | `upsertContactByEmail(email, properties)` | Implemented in api-module-library #106; needs the release that includes it. |
+| `deal.update` | `updateDeal` | ok (unreleased) | `updateDeal(params)` | Api.updateDeal({ dealId, properties }) takes one object, so the input is dealId (it was id). Implemented in api-module-library #106; needs the release that includes it. |
+| `deal.search` | `searchDeals` | ok (unreleased) | `searchDeals(params)` | Api.searchDeals takes HubSpot filterGroups ([{ filters: [{ propertyName, operator, value }] }]), sorts, props, limit, after and allProps (default true: every deal property when props is empty). The capability was reshaped from open/closeDateBefore/closeDateAfter/minAmount, which the Api never had; a definition expresses those as filterGroups. Implemented in api-module-library #106; needs the release that includes it. |
+| `task.get` | `getTaskById` | ok (unreleased) | `getTaskById(id, properties)` | Implemented in api-module-library #106; needs the release that includes it. |
+| `task.update` | `updateTask` | ok (unreleased) | `updateTask(id, properties)` | Implemented in api-module-library #106; needs the release that includes it. |
+| `task.search` | `searchTasks` | ok (unreleased) | `searchTasks(params = {})` | Implemented in api-module-library #106; needs the release that includes it. |
 | `owner.get` | `getOwnerById` | ok | `getOwnerById(ownerId)` | (called with one object; now positional) |
-| `owner.findByEmail` | `getOwnerByEmail` | unimplemented | none | Api has getOwnerById only. |
-| `subscription.definitions` | `listSubscriptionDefinitions` | unimplemented | none | Api has no email subscription methods. |
-| `subscription.unsubscribe` | `unsubscribeEmail` | unimplemented | none | Api has no email subscription methods. |
-| `webhook.verify` | `verifyWebhookSignature` | unimplemented | | The hubspot Api has no verifyWebhookSignature method; webhook signatures cannot be checked until the module adds one. |
+| `owner.findByEmail` | `getOwnerByEmail` | ok (unreleased) | `getOwnerByEmail(email)` | Implemented in api-module-library #106; needs the release that includes it. |
+| `subscription.definitions` | `listSubscriptionDefinitions` | ok (unreleased) | `listSubscriptionDefinitions()` | Implemented in api-module-library #106; needs the release that includes it. |
+| `subscription.unsubscribe` | `unsubscribeEmail` | ok (unreleased) | `unsubscribeEmail(emailAddress, subscriptionId, legalBasis, legalBasisExplanation)` | Implemented in api-module-library #106; needs the release that includes it. |
+| `webhook.verify` | `verifyWebhookSignature` | ok (unreleased) | `verifyWebhookSignature({ headers, body, rawBody, method?, url?, now? })` | Implemented in api-module-library 659b90d per the vendor's signing docs; needs the release that includes it. |
 
 ## Jira Cloud (`jira`)
 
@@ -216,16 +245,16 @@ Checked against `~/api-module-library/packages/v1-ready/linear` (@friggframework
 
 | Capability | Method | Status | Real signature | Note |
 |---|---|---|---|---|
-| `issue.get` | `issue` | unimplemented | none | Api exposes getClient() (a @linear/sdk LinearClient) plus getUsers, getProjects and getUserIssues; issues, comments, attachments, teams and workflow states are reached through the SDK client, not Api methods. |
-| `issue.byIdentifier` | `issueByIdentifier` | unimplemented | none | Api exposes getClient() (a @linear/sdk LinearClient) plus getUsers, getProjects and getUserIssues; issues, comments, attachments, teams and workflow states are reached through the SDK client, not Api methods. |
-| `issue.search` | `searchIssues` | unimplemented | none | Api exposes getClient() (a @linear/sdk LinearClient) plus getUsers, getProjects and getUserIssues; issues, comments, attachments, teams and workflow states are reached through the SDK client, not Api methods. |
-| `issue.create` | `issueCreate` | unimplemented | none | Api exposes getClient() (a @linear/sdk LinearClient) plus getUsers, getProjects and getUserIssues; issues, comments, attachments, teams and workflow states are reached through the SDK client, not Api methods. |
-| `issue.update` | `issueUpdate` | unimplemented | none | Api exposes getClient() (a @linear/sdk LinearClient) plus getUsers, getProjects and getUserIssues; issues, comments, attachments, teams and workflow states are reached through the SDK client, not Api methods. |
-| `comment.create` | `commentCreate` | unimplemented | none | Api exposes getClient() (a @linear/sdk LinearClient) plus getUsers, getProjects and getUserIssues; issues, comments, attachments, teams and workflow states are reached through the SDK client, not Api methods. |
-| `attachment.link` | `attachmentLinkURL` | unimplemented | none | Api exposes getClient() (a @linear/sdk LinearClient) plus getUsers, getProjects and getUserIssues; issues, comments, attachments, teams and workflow states are reached through the SDK client, not Api methods. |
-| `team.list` | `teams` | unimplemented | none | Api exposes getClient() (a @linear/sdk LinearClient) plus getUsers, getProjects and getUserIssues; issues, comments, attachments, teams and workflow states are reached through the SDK client, not Api methods. |
-| `workflowState.list` | `workflowStates` | unimplemented | none | Api exposes getClient() (a @linear/sdk LinearClient) plus getUsers, getProjects and getUserIssues; issues, comments, attachments, teams and workflow states are reached through the SDK client, not Api methods. |
-| `webhook.verify` | `verifyWebhookSignature` | unimplemented | | The linear Api has no verifyWebhookSignature method; webhook signatures cannot be checked until the module adds one. |
+| `issue.get` | `issue` | ok (unreleased) | `issue(id)` | Implemented in api-module-library #109; needs the release that includes it. |
+| `issue.byIdentifier` | `issueByIdentifier` | ok (unreleased) | `issueByIdentifier(identifier)` | Implemented in api-module-library #109; needs the release that includes it. |
+| `issue.search` | `searchIssues` | ok (unreleased) | `searchIssues(teamId, stateType, updatedBefore, first)` | Implemented in api-module-library #109; needs the release that includes it. |
+| `issue.create` | `issueCreate` | ok (unreleased) | `issueCreate(teamId, title, description, priority, stateName, labelIds)` | Implemented in api-module-library #109; needs the release that includes it. |
+| `issue.update` | `issueUpdate` | ok (unreleased) | `issueUpdate(id, input)` | Implemented in api-module-library #109; needs the release that includes it. |
+| `comment.create` | `commentCreate` | ok (unreleased) | `commentCreate(issueId, body)` | Implemented in api-module-library #109; needs the release that includes it. |
+| `attachment.link` | `attachmentLinkURL` | ok (unreleased) | `attachmentLinkURL(issueId, url, title)` | Implemented in api-module-library #109; needs the release that includes it. |
+| `team.list` | `teams` | ok (unreleased) | `teams()` | Implemented in api-module-library #109; needs the release that includes it. |
+| `workflowState.list` | `workflowStates` | ok (unreleased) | `workflowStates(teamId, name)` | Implemented in api-module-library #109; needs the release that includes it. |
+| `webhook.verify` | `verifyWebhookSignature` | ok (unreleased) | `verifyWebhookSignature({ headers, body, rawBody, method?, url?, now? })` | Implemented in api-module-library 659b90d per the vendor's signing docs; needs the release that includes it. |
 
 ## NetSuite (`netsuite`)
 
@@ -265,22 +294,22 @@ Checked against `~/api-module-library/packages/v1-ready/linear` (@friggframework
 
 ## Pipedrive (`pipedrive`)
 
-Checked against `~/phone-app/backend/node_modules/@friggframework/api-module-pipedrive` (@friggframework/api-module-pipedrive manifest 2.1.0).
+Checked against the api-module-library branch source `~/aml-small/packages/v1-ready/pipedrive` (src/api.ts, compiled; PR #110), manifest 2.1.0. The built 2.1.0 in `~/phone-app/backend/node_modules/@friggframework` predates `addPerson`/`updatePerson`.
 
 | Capability | Method | Status | Real signature | Note |
 |---|---|---|---|---|
 | `person.get` | `getPerson` | ok | `getPerson(personId, params)` | (called with one object; now positional) |
 | `person.search` | `searchPersons` | ok | `searchPersons(params)` |  |
 | `person.list` | `listPersons` | ok | `listPersons(params)` |  |
-| `person.create` | `addPerson` | unimplemented | none | Api has no addPerson (persons can be listed, fetched and searched only). |
-| `person.update` | `updatePerson` | unimplemented | none | Api has no updatePerson. |
+| `person.create` | `addPerson` | ok (unreleased) | `addPerson(person)` | Implemented in api-module-library #110; needs the release that includes it. |
+| `person.update` | `updatePerson` | ok (unreleased) | `updatePerson(personId, person)` | Implemented in api-module-library #110; needs the release that includes it. |
 | `activity.create` | `createActivity` | ok | `createActivity(params)` | (method was `addActivity`; called with one object; now positional) |
 | `activity.list` | `listActivities` | ok | `listActivities(params)` |  |
 | `deal.listForPerson` | `listDeals` | ok | `listDeals(params)` | (method was `listPersonDeals`; inputs were personId, status) |
 | `user.list` | `listUsers` | ok | `listUsers()` | (method was `getUsers`) |
 | `webhook.create` | `createWebhook` | ok | `createWebhook(params)` | (method was `addWebhook`) |
 | `webhook.delete` | `deleteWebhook` | ok | `deleteWebhook(webhookId)` | (called with one object; now positional) |
-| `webhook.verify` | `verifyWebhookSignature` | unimplemented | | The pipedrive Api has no verifyWebhookSignature method; webhook signatures cannot be checked until the module adds one. |
+| `webhook.verify` | `verifyWebhookSignature` | ok (unreleased) | `verifyWebhookSignature({ headers, body, rawBody, method?, url?, now? })` | Implemented in api-module-library 659b90d per the vendor's signing docs; needs the release that includes it. |
 
 ## QuickBooks Online (`quickbooks`)
 
@@ -323,7 +352,7 @@ Checked against `~/phone-app/backend/src/api-modules/phone` (@acme/api-module-ph
 | `user.list` | `listUsers` | ok | `listUsers(params = {})` |  |
 | `webhook.create` | `createUnifiedWebhook` | ok | `createUnifiedWebhook(data)` | (method was `createWebhook`) |
 | `webhook.delete` | `deleteWebhook` | ok | `deleteWebhook(id)` | (called with one object; now positional) |
-| `webhook.verify` | `verifyWebhookSignature` | unimplemented | | The phone Api has no verifyWebhookSignature method; webhook signatures cannot be checked until the module adds one. |
+| `webhook.verify` | `verifyWebhookSignature` | ok (unreleased) | `verifyWebhookSignature({ headers, body, rawBody, method?, url?, now? })` | Implemented in api-module-library 659b90d per the vendor's signing docs; needs the release that includes it. |
 
 ## Salesforce (`salesforce`)
 
@@ -333,17 +362,17 @@ Checked against `~/api-module-library/packages/v1-ready/salesforce` (@friggframe
 |---|---|---|---|---|
 | `lead.get` | `get` | ok | `get(object, id)` | (method was `getLead`; called with one object; now positional) |
 | `lead.create` | `create` | ok | `create(object, data)` | (method was `createLead`; called with one object; now positional) |
-| `lead.update` | `updateLead` | unimplemented | none | Api.update(object, data) needs the record id inside data (data.Id); the capability passes the id separately, so there is no way to call it. |
-| `person.searchByEmail` | `searchPeopleByEmail` | unimplemented | none | Api.find(object, filter) searches one sObject at a time; searching Lead and Contact together would need two calls. |
+| `lead.update` | `updateLead` | ok (unreleased) | `updateLead(id, fields)` | Implemented in api-module-library #107; needs the release that includes it. |
+| `person.searchByEmail` | `searchPeopleByEmail` | ok (unreleased) | `searchPeopleByEmail(email)` | Implemented in api-module-library #107; needs the release that includes it. |
 | `event.create` | `create` | ok | `create(object, data)` | (method was `createEvent`; called with one object; now positional) |
-| `event.update` | `updateEvent` | unimplemented | none | Api.update(object, data) needs the record id inside data (data.Id); the capability passes the id separately, so there is no way to call it. |
+| `event.update` | `updateEvent` | ok (unreleased) | `updateEvent(id, fields)` | Implemented in api-module-library #107; needs the release that includes it. |
 | `opportunity.get` | `get` | ok | `get(object, id)` | (method was `getOpportunity`; called with one object; now positional) |
-| `opportunity.update` | `updateOpportunity` | unimplemented | none | Api.update(object, data) needs the record id inside data (data.Id); the capability passes the id separately, so there is no way to call it. |
+| `opportunity.update` | `updateOpportunity` | ok (unreleased) | `updateOpportunity(id, fields)` | Implemented in api-module-library #107; needs the release that includes it. |
 | `task.create` | `create` | ok | `create(object, data)` | (method was `createTask`; called with one object; now positional) |
-| `file.attach` | `createContentVersion` | unimplemented | none | Api has the generic create(object, data) only; ContentVersion field names differ from this capability's inputs. |
-| `note.create` | `createContentNote` | unimplemented | none | Api has the generic create(object, data) only; ContentNote field names differ from this capability's inputs. |
-| `user.list` | `listUsers` | unimplemented | none | Api has find(object, filter) but no user listing with an activeOnly filter. |
-| `webhook.verify` | `verifyWebhookSignature` | unimplemented | | The salesforce Api has no verifyWebhookSignature method; webhook signatures cannot be checked until the module adds one. |
+| `file.attach` | `createContentVersion` | ok (unreleased) | `createContentVersion(title, pathOnClient, versionData, firstPublishLocationId)` | Implemented in api-module-library #107; needs the release that includes it. |
+| `note.create` | `createContentNote` | ok (unreleased) | `createContentNote(title, content, linkedEntityId)` | Implemented in api-module-library #107; needs the release that includes it. |
+| `user.list` | `listUsers` | ok (unreleased) | `listUsers(activeOnly = false)` | Implemented in api-module-library #107; needs the release that includes it. |
+| `webhook.verify` | `verifyWebhookSignature` | unimplemented | | Not a webhook: CDC arrives over the Pub/Sub or CometD stream; Outbound Messages are unsigned (OrganizationId + IP allowlist). Deliveries are rejected. |
 
 ## Shopify (`shopify`)
 
@@ -379,9 +408,9 @@ Checked against `~/api-module-library/packages/needs-updating/slack` (@friggfram
 | `message.postEphemeral` | `postEphemeral` | ok | `postEphemeral(body)` |  |
 | `message.permalink` | `getMessagePermalink` | ok | `getMessagePermalink(query)` | (method was `getPermalink`) |
 | `channel.list` | `listChannels` | ok | `listChannels(query)` | (method was `listConversations`) |
-| `user.list` | `listUsers` | unimplemented | none | Api has lookupUserByEmail, getUserById and getUserProfileById, but no user listing. |
+| `user.list` | `listUsers` | ok (unreleased) | `listUsers(query = {})` | Implemented in api-module-library #110; needs the release that includes it. |
 | `user.lookupByEmail` | `lookupUserByEmail` | ok | `lookupUserByEmail(email)` | (called with one object; now positional) |
-| `webhook.verify` | `verifyWebhookSignature` | unimplemented | | The slack Api has no verifyWebhookSignature method; webhook signatures cannot be checked until the module adds one. |
+| `webhook.verify` | `verifyWebhookSignature` | ok (unreleased) | `verifyWebhookSignature({ headers, body, rawBody, method?, url?, now? })` | Implemented in api-module-library 659b90d per the vendor's signing docs; needs the release that includes it. |
 
 ## Stripe (`stripe`)
 
@@ -389,16 +418,16 @@ Checked against `~/api-module-library/packages/v1-ready/stripe` (@friggframework
 
 | Capability | Method | Status | Real signature | Note |
 |---|---|---|---|---|
-| `customer.get` | `retrieveCustomer` | unimplemented | none | Api wraps balance transactions, charges, accounts and webhook endpoints only; customers, payment intents, refunds and payouts are not exposed. |
-| `customer.list` | `listCustomers` | unimplemented | none | Api wraps balance transactions, charges, accounts and webhook endpoints only; customers, payment intents, refunds and payouts are not exposed. |
-| `customer.search` | `searchCustomers` | unimplemented | none | Api wraps balance transactions, charges, accounts and webhook endpoints only; customers, payment intents, refunds and payouts are not exposed. |
-| `customer.create` | `createCustomer` | unimplemented | none | Api wraps balance transactions, charges, accounts and webhook endpoints only; customers, payment intents, refunds and payouts are not exposed. |
-| `customer.update` | `updateCustomer` | unimplemented | none | Api wraps balance transactions, charges, accounts and webhook endpoints only; customers, payment intents, refunds and payouts are not exposed. |
-| `paymentIntent.get` | `retrievePaymentIntent` | unimplemented | none | Api wraps balance transactions, charges, accounts and webhook endpoints only; customers, payment intents, refunds and payouts are not exposed. |
-| `refund.get` | `retrieveRefund` | unimplemented | none | Api wraps balance transactions, charges, accounts and webhook endpoints only; customers, payment intents, refunds and payouts are not exposed. |
-| `payout.list` | `listPayouts` | unimplemented | none | Api wraps balance transactions, charges, accounts and webhook endpoints only; customers, payment intents, refunds and payouts are not exposed. |
+| `customer.get` | `retrieveCustomer` | ok (unreleased) | `retrieveCustomer(id, params = {}, options = {})` | Implemented in api-module-library #108; needs the release that includes it. |
+| `customer.list` | `listCustomers` | ok (unreleased) | `listCustomers(params = {}, options = {})` | Implemented in api-module-library #108; needs the release that includes it. |
+| `customer.search` | `searchCustomers` | ok (unreleased) | `searchCustomers(query, params = {}, options = {})` | Implemented in api-module-library #108; needs the release that includes it. |
+| `customer.create` | `createCustomer` | ok (unreleased) | `createCustomer(params = {}, options = {})` | Implemented in api-module-library #108; needs the release that includes it. |
+| `customer.update` | `updateCustomer` | ok (unreleased) | `updateCustomer(id, params = {}, options = {})` | Implemented in api-module-library #108; needs the release that includes it. |
+| `paymentIntent.get` | `retrievePaymentIntent` | ok (unreleased) | `retrievePaymentIntent(id, params = {}, options = {})` | Implemented in api-module-library #108; needs the release that includes it. |
+| `refund.get` | `retrieveRefund` | ok (unreleased) | `retrieveRefund(id, params = {}, options = {})` | Implemented in api-module-library #108; needs the release that includes it. |
+| `payout.list` | `listPayouts` | ok (unreleased) | `listPayouts(params = {}, options = {})` | Implemented in api-module-library #108; needs the release that includes it. |
 | `balanceTransaction.list` | `getBalanceTransactions` | ok | `getBalanceTransactions(params)` | (method was `listBalanceTransactions`) |
-| `webhook.verify` | `verifyWebhookSignature` | unimplemented | | The stripe Api has no verifyWebhookSignature method; webhook signatures cannot be checked until the module adds one. |
+| `webhook.verify` | `verifyWebhookSignature` | ok (unreleased) | `verifyWebhookSignature({ headers, body, rawBody, method?, url?, now? })` | Implemented in api-module-library 659b90d per the vendor's signing docs; needs the release that includes it. |
 
 ## Acme ERP (`acmeerp`)