@friggframework/core 2.0.0--canary.698.b1a2d30.0 → 2.0.0--canary.700.80ec1cc.0

package/integrations/{data-defined → definitions}/capabilities/stripe.capabilities.json

@@ -472,8 +472,7 @@
     "eventId": "{{body.id}}",
     "account": "{{body.account}}",
     "verify": "verifyWebhookSignature",
-    "status": "unimplemented",
-    "note": "The stripe Api has no verifyWebhookSignature method; webhook signatures cannot be checked until the module adds one."
+    "note": "Stripe-Signature t=…,v1=… over t.raw body, 300 s tolerance; rolling secrets accepted. Implemented in api-module-library 659b90d; needs the module release that includes it."
   },
   "capabilities": {
     "customer.get": {
@@ -486,8 +485,9 @@
         }
       },
       "output": "customer",
-      "status": "unimplemented",
-      "note": "Api wraps balance transactions, charges, accounts and webhook endpoints only; customers, payment intents, refunds and payouts are not exposed."
+      "args": [
+        "id"
+      ]
     },
     "customer.list": {
       "kind": "read",
@@ -504,8 +504,9 @@
         }
       },
       "output": "page<customer>",
-      "status": "unimplemented",
-      "note": "Api wraps balance transactions, charges, accounts and webhook endpoints only; customers, payment intents, refunds and payouts are not exposed."
+      "args": [
+        "$rest"
+      ]
     },
     "customer.search": {
       "kind": "search",
@@ -517,8 +518,9 @@
         }
       },
       "output": "customer[]",
-      "status": "unimplemented",
-      "note": "Api wraps balance transactions, charges, accounts and webhook endpoints only; customers, payment intents, refunds and payouts are not exposed."
+      "args": [
+        "query"
+      ]
     },
     "customer.create": {
       "kind": "write",
@@ -530,8 +532,9 @@
         }
       },
       "output": "customer",
-      "status": "unimplemented",
-      "note": "Api wraps balance transactions, charges, accounts and webhook endpoints only; customers, payment intents, refunds and payouts are not exposed."
+      "args": [
+        "params"
+      ]
     },
     "customer.update": {
       "kind": "write",
@@ -547,8 +550,10 @@
         }
       },
       "output": "customer",
-      "status": "unimplemented",
-      "note": "Api wraps balance transactions, charges, accounts and webhook endpoints only; customers, payment intents, refunds and payouts are not exposed."
+      "args": [
+        "id",
+        "params"
+      ]
     },
     "paymentIntent.get": {
       "kind": "read",
@@ -563,8 +568,10 @@
         }
       },
       "output": "paymentIntent",
-      "status": "unimplemented",
-      "note": "Api wraps balance transactions, charges, accounts and webhook endpoints only; customers, payment intents, refunds and payouts are not exposed."
+      "args": [
+        "id",
+        "$rest"
+      ]
     },
     "refund.get": {
       "kind": "read",
@@ -576,8 +583,9 @@
         }
       },
       "output": "refund",
-      "status": "unimplemented",
-      "note": "Api wraps balance transactions, charges, accounts and webhook endpoints only; customers, payment intents, refunds and payouts are not exposed."
+      "args": [
+        "id"
+      ]
     },
     "payout.list": {
       "kind": "read",
@@ -597,8 +605,9 @@
         }
       },
       "output": "payout[]",
-      "status": "unimplemented",
-      "note": "Api wraps balance transactions, charges, accounts and webhook endpoints only; customers, payment intents, refunds and payouts are not exposed."
+      "args": [
+        "$rest"
+      ]
     },
     "balanceTransaction.list": {
       "kind": "read",

package/integrations/{data-defined → definitions}/config-form.js

@@ -1,5 +1,5 @@
 /**
- * The configure form for a data-defined installation, generated from its definition: what GET_CONFIG_OPTIONS and
+ * The configure form for an installation, generated from its definition: what GET_CONFIG_OPTIONS and
  * REFRESH_CONFIG_OPTIONS return on Frigg's existing, authenticated /api/integrations/:id/config/options routes.
  *
  * The form's data has exactly the shape of Integration.config, so what the management UI PATCHes back is the config:

package/integrations/{data-defined → definitions}/examples/fathom-hubspot-notion.definition.json

@@ -79,7 +79,7 @@
         },
         {
           "use": "stop",
-          "when": "$.steps.contacts[0] == null",
+          "when": "$.steps.contacts.results[0] == null",
           "with": {
             "reason": "Attendee is not a HubSpot contact"
           }
@@ -88,7 +88,7 @@
           "id": "deals",
           "use": "hubspot.deal.listForContact",
           "with": {
-            "contactId": "$.steps.contacts[0].id",
+            "contactId": "$.steps.contacts.results[0].id",
             "open": true
           }
         },
@@ -102,7 +102,7 @@
         {
           "use": "hubspot.note.create",
           "with": {
-            "contactId": "$.steps.contacts[0].id",
+            "contactId": "$.steps.contacts.results[0].id",
             "dealId": "$.steps.deals[0].id",
             "properties": {
               "hs_note_body": "$.steps.body",
@@ -163,7 +163,7 @@
         },
         {
           "use": "stop",
-          "when": "$.steps.contacts[0] == null",
+          "when": "$.steps.contacts.results[0] == null",
           "with": {
             "reason": "Attendee is not a HubSpot contact"
           }
@@ -189,7 +189,7 @@
               "use": "hubspot.task.create",
               "when": "$.item.completed != true",
               "with": {
-                "contactId": "$.steps.contacts[0].id",
+                "contactId": "$.steps.contacts.results[0].id",
                 "properties": {
                   "hs_task_subject": "{{item.description | truncate: 120}}",
                   "hs_task_body": "From \"{{record.title}}\" at {{item.recording_timestamp}}: {{record.share_url}}",
@@ -329,7 +329,7 @@
         },
         {
           "use": "stop",
-          "when": "$.steps.contacts[0] == null",
+          "when": "$.steps.contacts.results[0] == null",
           "with": {
             "reason": "Attendee is not a HubSpot contact"
           }
@@ -338,7 +338,7 @@
           "id": "deals",
           "use": "hubspot.deal.listForContact",
           "with": {
-            "contactId": "$.steps.contacts[0].id",
+            "contactId": "$.steps.contacts.results[0].id",
             "open": true
           }
         },
@@ -399,7 +399,7 @@
                 {
                   "use": "hubspot.deal.update",
                   "with": {
-                    "id": "$.steps.deals[0].id",
+                    "dealId": "$.steps.deals[0].id",
                     "properties": {
                       "hs_next_step": "$.steps.proposal.nextStep"
                     }
@@ -432,7 +432,7 @@
         {
           "use": "hubspot.deal.update",
           "with": {
-            "id": "$.record.metadata.event_payload.dealId",
+            "dealId": "$.record.metadata.event_payload.dealId",
             "properties": {
               "dealstage": "$.record.metadata.event_payload.stage",
               "hs_next_step": "$.record.metadata.event_payload.nextStep"

package/integrations/{data-defined → definitions}/examples/hubspot-slack.definition.json

@@ -159,15 +159,33 @@
           "id": "deals",
           "use": "hubspot.deal.search",
           "with": {
-            "open": true,
-            "closeDateBefore": "+7d",
-            "minAmount": "$.settings.minAmount",
+            "filterGroups": [
+              {
+                "filters": [
+                  {
+                    "propertyName": "hs_is_closed",
+                    "operator": "EQ",
+                    "value": "false"
+                  },
+                  {
+                    "propertyName": "closedate",
+                    "operator": "LT",
+                    "value": "{{now | to_unix | plus: 604800 | times: 1000}}"
+                  },
+                  {
+                    "propertyName": "amount",
+                    "operator": "GTE",
+                    "value": "$.settings.minAmount"
+                  }
+                ]
+              }
+            ],
             "limit": 50
           }
         },
         {
           "use": "stop",
-          "when": "$.steps.deals[0] == null",
+          "when": "$.steps.deals.results[0] == null",
           "with": {
             "reason": "Nothing closes this week"
           }
@@ -176,7 +194,7 @@
           "id": "build",
           "use": "foreach",
           "with": {
-            "over": "$.steps.deals",
+            "over": "$.steps.deals.results",
             "max": 50,
             "collect": "$.steps.line"
           },
@@ -231,7 +249,7 @@
           "id": "remind",
           "use": "foreach",
           "with": {
-            "over": "$.steps.tasks",
+            "over": "$.steps.tasks.results",
             "max": 100
           },
           "do": [
@@ -404,6 +422,6 @@
     "deal-won": ":tada: *{{steps.deal.properties.dealname | mrkdwn}}* closed won for ${{steps.deal.properties.amount | default: '?'}}. Nice work {{steps.owner.firstName | default: 'team' | mrkdwn}}! <https://app.hubspot.com/contacts/{{install.portalId}}/record/0-3/{{steps.deal.id}}|Open deal>",
     "high-value": ":moneybag: New deal over ${{settings.threshold}}: *{{steps.deal.properties.dealname | mrkdwn}}* (${{steps.deal.properties.amount}}), closing {{steps.deal.properties.closedate | date}}. <https://app.hubspot.com/contacts/{{install.portalId}}/record/0-3/{{steps.deal.id}}|Open deal>",
     "digest-line": "\u2022 <https://app.hubspot.com/contacts/{{install.portalId}}/record/0-3/{{item.id}}|{{item.properties.dealname | mrkdwn}}>: ${{item.properties.amount | default: 0}}, closes {{item.properties.closedate | date}}",
-    "digest": ":calendar: *Closing in the next 7 days* ({{steps.deals | size}} deals)\n{{steps.build | join: '\\n'}}"
+    "digest": ":calendar: *Closing in the next 7 days* ({{steps.deals.results | size}} deals)\n{{steps.build | join: '\\n'}}"
   }
 }

package/integrations/{data-defined → definitions}/examples/phone-hubspot.definition.json

@@ -381,7 +381,7 @@
           "id": "each",
           "use": "foreach",
           "with": {
-            "over": "$.steps.stale",
+            "over": "$.steps.stale.results",
             "max": 100
           },
           "do": [

package/integrations/{data-defined → definitions}/examples/pipedrive-hubspot.definition.json

@@ -5,7 +5,7 @@
   "version": "1.0.0",
   "display": {
     "label": "Pipedrive \u21c4 HubSpot people",
-    "description": "Keeps Pipedrive people and HubSpot contacts the same person on both sides, matched by email then phone. Sync only: no workflows, no UI.",
+    "description": "Keeps Pipedrive people and HubSpot contacts the same person on both sides, matched by email, then by phone.",
     "category": "CRM",
     "tags": [
       "crm",

package/integrations/{data-defined → definitions}/examples/records/phone-hubspot.definition-version.json

@@ -399,7 +399,7 @@
             "id": "each",
             "use": "foreach",
             "with": {
-              "over": "$.steps.stale",
+              "over": "$.steps.stale.results",
               "max": 100
             },
             "do": [

package/integrations/{data-defined → definitions}/examples/records/phone-hubspot.integration.json

@@ -69,7 +69,7 @@
       "installed": {
         "hook": {
           "id": "WHk2c9",
-          "url": "https://api.example.com/api/data-defined-integration/webhooks/int_7f3a9c?module=phone",
+          "url": "https://api.example.com/api/integration-runtime-integration/webhooks/int_7f3a9c?module=phone",
           "events": [
             "call.completed",
             "call.ringing",

package/integrations/{data-defined → definitions}/expressions.js

@@ -1,5 +1,5 @@
 /**
- * Expressions for data-defined integrations (v0.1).
+ * Expressions for integrations published as definitions (v0.1).
  *
  * Three forms, and no others (nothing is ever passed to eval):
  *   1. Reference   "$.event.contact.id"     A string that is exactly a path. Resolves to the value, keeping its type.

package/integrations/{data-defined → definitions}/index.js

@@ -1,5 +1,5 @@
 /**
- * Data-defined integrations, v0.1 (ADR-063). An integration as a document: modules, syncs, workflows, queries,
+ * Integrations published as definitions, v0.1 (ADR-063). An integration as a document: modules, syncs, workflows, queries,
  * UI surfaces and templates, run by one runtime class on the existing Frigg infrastructure.
  */
 const fs = require('fs');
@@ -9,7 +9,7 @@ const { compile, routeWebhook, eventName } = require('./compile');
 const { execute } = require('./interpreter');
 const { makePorts, runWorkflow, runQuery, renderSurface, resolveView, runLifecycle, resolveOptions } = require('./runtime');
 const { diff, checkBump, planUpgrade } = require('./versioning');
-const { defineIntegrationClass, defineSharedIntegrationClass, extendIntegrationClass, memoryDefinitions } = require('./data-defined-integration');
+const { defineIntegrationClass, defineSharedIntegrationClass, extendIntegrationClass, memoryDefinitions } = require('./integration-runtime');
 const { BUILTINS } = require('./steps');
 const { TRANSFORMS, applyMapping } = require('./transforms');
 const { FILTERS } = require('./expressions');

package/integrations/{data-defined/data-defined-integration.js → definitions/integration-runtime.js}

@@ -1,10 +1,10 @@
 /**
- * DataDefinedIntegration: one IntegrationBase subclass that runs any published definition.
+ * IntegrationRuntime: one IntegrationBase subclass that runs any published definition.
  *
- * Frigg registers integration classes at startup (appDefinition.integrations). For data-defined integrations the app
+ * Frigg registers integration classes at startup (appDefinition.integrations). For integrations published as definitions the app
  * registers one generated class per definition id:
  *
- *     const { defineIntegrationClass } = require('@friggframework/core/integrations/data-defined');
+ *     const { defineIntegrationClass } = require('@friggframework/core/integrations/definitions');
  *     integrations: [ defineIntegrationClass({ id: 'phone-hubspot', definitions, manifests, modules: { phone: PhoneModule, hubspot: HubSpotModule } }) ]
  *
  * The class's static Definition (name, modules) is what the infrastructure needs, and it is the same for every
@@ -23,7 +23,7 @@ const { createSyncEngine } = require('./sync-engine');
 const { eventsIn, handshakeFor, modulesFor } = require('./webhooks');
 const { buildConfigForm, missingRequired } = require('./config-form');
 
-/** The tick every data-defined trigger runs on: a chosen interval is rounded up to whole multiples of it. */
+/** The tick every trigger of a published definition runs on: a chosen interval is rounded up to whole multiples of it. */
 const INSTANCE_TICK = '5m';
 
 /** A compiled definition's triggers as IntegrationBase trigger declarations: each runs its compiled event. */
@@ -44,7 +44,7 @@ function triggersOf(def, config) {
  * definition. Publishing a new VERSION deploys nothing; a new definition ID is a new class (a deploy, and its own
  * functions and queue). Right for a product team with a handful of integrations.
  *
- * Shape B — one class for every definition (defineSharedIntegrationClass): registered once as "data-defined", its
+ * Shape B — one class for every definition (defineSharedIntegrationClass): registered once as "integration-runtime", its
  * static modules are every API module the app has installed, and each installation names its definition id and
  * version in config. A new integration is a row, not a deploy, and every installation shares one set of functions
  * and one queue. Right for a multi-tenant product, where definitions accumulate without bound.
@@ -60,11 +60,11 @@ function defineIntegrationClass({ id, definitions, manifests, modules, runCode,
     });
 }
 
-function defineSharedIntegrationClass({ name = 'data-defined', definitions, manifests, modules, runCode, IntegrationBase, lookup, runs }) {
+function defineSharedIntegrationClass({ name = 'integration-runtime', definitions, manifests, modules, runCode, IntegrationBase, lookup, runs }) {
     return makeClass({
         name, defaultId: null, definitions, manifests, runCode, IntegrationBase, lookup, runs,
         modules: Object.fromEntries(Object.entries(modules).map(([key, definition]) => [key, { definition }])),
-        display: { label: 'Data-defined integration', description: 'Runs any published integration definition.', category: 'Custom' },
+        display: { label: 'Integration runtime', description: 'Runs any published integration definition.', category: 'Custom' },
         version: '0.1.0',
     });
 }
@@ -132,7 +132,7 @@ function makeClass({ name, defaultId, definitions, manifests, runCode, Integrati
     // database can pass their own store or `false` to keep none).
     let runStore = runs;
     // App-level webhooks fan out to the installations of every type this deployment runs.
-    const findInstallations = (externalId, moduleName, Cls) => (lookup || friggLookup(async (type) => type === id || type === Cls.Definition.name || Boolean(await DataDefinedIntegration.IntegrationProvider?.resolve(type))))(externalId, moduleName);
+    const findInstallations = (externalId, moduleName, Cls) => (lookup || friggLookup(async (type) => type === id || type === Cls.Definition.name || Boolean(await IntegrationRuntime.IntegrationProvider?.resolve(type))))(externalId, moduleName);
     const runRepository = () => (runStore === undefined ? (runStore = require('./repositories/workflow-run-repository').createWorkflowRunRepository()) : runStore);
     const baseFor = (typeName) => `${process.env.FRIGG_PUBLIC_URL || ''}/api/${typeName}-integration/webhooks`;
     const pinnedDefinitions = new Map();   // `${id}@${version}` -> definition, for the trigger tick
@@ -142,7 +142,7 @@ function makeClass({ name, defaultId, definitions, manifests, runCode, Integrati
     // A code class's own Definition.triggers (IntegrationBase.triggersFor), kept beside the compiled ones.
     const codeTriggers = async (Cls, installation) => (embedded && typeof Base.triggersFor === 'function' ? Base.triggersFor.call(Cls, installation) : []);
 
-    class DataDefinedIntegration extends Base {
+    class IntegrationRuntime extends Base {
         // version is display only; installations pin their own. A code class keeps every part of its Definition.
         // instanceTriggers: schedule-triggered workflows and polling syncs are this class's recurring triggers,
         // resolved per installation (triggersFor) on one 5m tick.
@@ -190,8 +190,8 @@ function makeClass({ name, defaultId, definitions, manifests, runCode, Integrati
             return [...new Set([own, ...provided])];
         }
 
-        /** How the routers find data-defined classes and the store and manifests they run on. */
-        static DataDefined = { definitions, manifests, shared: !defaultId, runs: () => runRepository() };
+        /** How the routers find integration runtime classes and the store and manifests they run on. */
+        static IntegrationRuntime = { definitions, manifests, shared: !defaultId, runs: () => runRepository() };
 
         /** Shape A: the one definition this class runs. A class generated for a published definition sets its own. */
         static definitionId = defaultId;
@@ -315,7 +315,7 @@ function makeClass({ name, defaultId, definitions, manifests, runCode, Integrati
             if (embedded && !ownsWebhooks(this.def)) return super.onWebhook(params);
             const { data = {} } = params || {};
             if (data.module && data.topic) return this.routeEvents(data.module, [{ topic: data.topic, event: data.body, eventId: data.eventId || data.body?.id || null }]);
-            const delivery = { body: data.body, headers: data.headers || {}, query: data.query || {} };
+            const delivery = { body: data.body, headers: data.headers || {}, query: data.query || {}, rawBody: data.rawBody, method: data.method, url: data.url };
             // No installation yet (an app-level webhook): find the ones it is for.
             if (!this.id || !this.def) return this.fanOutAppWebhook(delivery);
 
@@ -325,7 +325,8 @@ function makeClass({ name, defaultId, definitions, manifests, runCode, Integrati
             const manifest = manifests[this.def.modules[key].module];
             if (manifest.webhook?.verify) {
                 let ok = false;
-                try { ok = await this.moduleFor(key).api[manifest.webhook.verify]({ headers: delivery.headers, body: delivery.body, query: delivery.query }); } catch { ok = false; }
+                // The raw body, method and URL travel from receipt (IntegrationBase.onWebhookReceived): vendors sign bytes.
+                try { ok = await this.moduleFor(key).api[manifest.webhook.verify]({ headers: delivery.headers, body: delivery.body, query: delivery.query, rawBody: delivery.rawBody, method: delivery.method, url: delivery.url }); } catch { ok = false; }
                 if (ok !== true) { this.logWebhook('webhook.rejected', { module: key }); return { routed: 0, rejected: true }; }
             }
             const own = this.accountOf(key);
@@ -352,7 +353,7 @@ function makeClass({ name, defaultId, definitions, manifests, runCode, Integrati
             let queued = 0;
             for (const account of accounts) {
                 for (const integrationId of await findInstallations(account, moduleName, this.constructor)) {
-                    await this.queueWebhook({ integrationId, body: delivery.body, headers: delivery.headers, query: delivery.query });
+                    await this.queueWebhook({ integrationId, body: delivery.body, headers: delivery.headers, query: delivery.query, rawBody: delivery.rawBody, method: delivery.method, url: delivery.url });
                     queued += 1;
                 }
             }
@@ -366,7 +367,7 @@ function makeClass({ name, defaultId, definitions, manifests, runCode, Integrati
         }
 
         logWebhook(eventName, fields) {
-            try { require('../../logs').getLogger('frigg.data-defined').info('Webhook not routed', { eventName: `frigg.data-defined.${eventName}`, integrationId: this.id || null, ...fields }); } catch { /* logging must never break delivery */ }
+            try { require('../../logs').getLogger('frigg.integrations.runtime').info('Webhook not routed', { eventName: `frigg.integrations.runtime.${eventName}`, integrationId: this.id || null, ...fields }); } catch { /* logging must never break delivery */ }
         }
 
         async onCreate(params) {
@@ -419,7 +420,7 @@ function makeClass({ name, defaultId, definitions, manifests, runCode, Integrati
                     const store = runRepository();
                     if (store) await store.createRun({ integrationId: this.id, definitionId: name, definitionVersion: this.def?.version, workflowId: event, triggerType: 'code', status, error: error ? String(error.message || error) : null, retryable: Boolean(error), trace: [], startedAt, endedAt: new Date().toISOString() });
                 } catch (e) {
-                    try { require('../../logs').getLogger('frigg.data-defined').warn('Workflow run not recorded', { eventName: 'frigg.data-defined.run.not_recorded', integrationId: this.id, workflowId: event, cause: e?.message }); } catch { /* ignore */ }
+                    try { require('../../logs').getLogger('frigg.integrations.runtime').warn('Workflow run not recorded', { eventName: 'frigg.integrations.runtime.run.not_recorded', integrationId: this.id, workflowId: event, cause: e?.message }); } catch { /* ignore */ }
                 }
             };
             let out;
@@ -527,7 +528,7 @@ function makeClass({ name, defaultId, definitions, manifests, runCode, Integrati
                 if (store && rowId && store.updateRun) row = await store.updateRun(rowId, { status: run.status, reason: run.reason, error: run.error, retryable: Boolean(run.retryable), trace: run.trace, waitingFor: run.waitingFor ?? null, resumeAt: run.resumeAt ?? null, endedAt: run.endedAt ?? null });
                 else if (store) row = await store.createRun({ ...stored, runKey: run.id, integrationId: this.id, definitionId: run.definition?.id, definitionVersion: run.definition?.version, triggerType: run.trigger?.type, eventId: run.trigger?.eventId });
             } catch (e) {
-                try { require('../../logs').getLogger('frigg.data-defined').warn('Workflow run not recorded', { eventName: 'frigg.data-defined.run.not_recorded', integrationId: this.id, workflowId: run.workflowId, cause: e?.message }); } catch { /* ignore */ }
+                try { require('../../logs').getLogger('frigg.integrations.runtime').warn('Workflow run not recorded', { eventName: 'frigg.integrations.runtime.run.not_recorded', integrationId: this.id, workflowId: run.workflowId, cause: e?.message }); } catch { /* ignore */ }
             }
             if (run.status === 'waiting' && row?.id && !rowId) await this.mappingStore().put(`wait:${run.id}`, { ...(await this.mappingStore().get(`wait:${run.id}`)), rowId: row.id });
             if (run.status === 'failed') { const e = new Error(run.error); e.run = run; throw e; } // the queue retries
@@ -560,7 +561,7 @@ function makeClass({ name, defaultId, definitions, manifests, runCode, Integrati
                 queueUrl: typeof this.scheduleQueueUrl === 'function' ? this.scheduleQueueUrl() : process.env[`${name.toUpperCase().replace(/-/g, '_')}_QUEUE_URL`],
             });
             if (booked?.error || booked?.warning) {
-                try { require('../../logs').getLogger('frigg.data-defined').error('Run resume not booked', { eventName: 'frigg.data-defined.run.resume_not_booked', integrationId: this.id, runId: run.id, kind: cp.wait.kind, reason: booked.reason || booked.warning }); } catch { /* ignore */ }
+                try { require('../../logs').getLogger('frigg.integrations.runtime').error('Run resume not booked', { eventName: 'frigg.integrations.runtime.run.resume_not_booked', integrationId: this.id, runId: run.id, kind: cp.wait.kind, reason: booked.reason || booked.warning }); } catch { /* ignore */ }
             }
         }
 
@@ -678,9 +679,9 @@ function makeClass({ name, defaultId, definitions, manifests, runCode, Integrati
             return out;
         }
     }
-    Object.defineProperty(DataDefinedIntegration, 'name', { value: `DataDefined_${id.replace(/-/g, '_')}` });
-    if (!defaultId) DataDefinedIntegration.IntegrationProvider = definitionProvider(DataDefinedIntegration, definitions);
-    return DataDefinedIntegration;
+    Object.defineProperty(IntegrationRuntime, 'name', { value: `IntegrationRuntime_${id.replace(/-/g, '_')}` });
+    if (!defaultId) IntegrationRuntime.IntegrationProvider = definitionProvider(IntegrationRuntime, definitions);
+    return IntegrationRuntime;
 }
 
 /**

package/integrations/{data-defined → definitions}/renderers/hubspot.js

@@ -1,9 +1,14 @@
 /**
- * Resolved view tree -> a JSON description of HubSpot UI-extension components (`@hubspot/ui-extensions` names). Data,
- * not React: a thin card deployed once maps `{ type, props, children }` onto `React.createElement(components[type], ...)`
- * and routes `props.action` to the actions endpoint, so a changed card is a publish, not a card deploy.
+ * Resolved view tree -> a JSON description of HubSpot UI-extension components. Names and prop values were checked
+ * against @hubspot/ui-extensions 0.17.1 (its shared.synced/types/components/*.d.ts). Data, not React: a thin card
+ * deployed once maps `{ type, props, children }` onto `React.createElement(components[type], props, ...children)`, so a
+ * changed card is a publish, not a card deploy.
  *
- * A node is `{ type, props?, children? }`; a child is a string (text) or a node. Strings are text, never markup.
+ * A node is `{ type, props?, children?, action? }`; a child is a string (text) or a node. Strings are text, never markup.
+ * `props` holds only real component props, passed straight through. `action` is OURS, not a HubSpot prop: the card must
+ * not spread it onto the component, but turn it into `onClick={() => runServerless(...)}` that posts it to the actions
+ * endpoint (a userAction button), because a UI extension cannot call out except through a serverless function.
+ * An `open_url` button needs no action: it is the real `href` prop, which the host opens in a new tab.
  */
 const { str, safeUrl, toneOf } = require('./common');
 
@@ -11,7 +16,7 @@ const { str, safeUrl, toneOf } = require('./common');
 const HUBSPOT_COMPONENTS = ['Flex', 'Heading', 'Text', 'List', 'Tag', 'Button', 'EmptyState', 'DescriptionList', 'DescriptionListItem', 'Divider', 'Table', 'TableHead', 'TableBody', 'TableRow', 'TableHeader', 'TableCell'];
 const TAG_VARIANT = { positive: 'success', warning: 'warning', critical: 'error', neutral: 'default' };
 
-const node = (type, props, children) => ({ type, ...(props && Object.keys(props).length ? { props } : {}), ...(children && children.length ? { children } : {}) });
+const node = (type, props, children, action) => ({ type, ...(props && Object.keys(props).length ? { props } : {}), ...(action ? { action } : {}), ...(children && children.length ? { children } : {}) });
 
 /**
  * @param {object|null} view
@@ -34,16 +39,16 @@ function viewToHubSpot(view, { integrationId, surface } = {}) {
                 node('TableBody', {}, (Array.isArray(p.rows) ? p.rows : []).map((r) => node('TableRow', {}, (Array.isArray(r) ? r : []).map((c) => node('TableCell', {}, [str(c)]))))),
             ]);
             case 'Badge': return node('Tag', { variant: TAG_VARIANT[toneOf(p.tone)] }, [str(p.text)]);
-            case 'Empty': return node('EmptyState', { title: str(p.text), layout: 'vertical' });
+            case 'Empty': return node('EmptyState', { layout: 'vertical' }, [node('Text', {}, [str(p.text)])]);
             case 'Divider': return node('Divider', { distance: 'sm' });
             case 'Button': {
                 const a = p.action;
                 const variant = p.style === 'primary' ? 'primary' : p.style === 'danger' ? 'destructive' : 'secondary';
                 let action;
                 if (a?.type === 'userAction' && typeof a.workflow === 'string') action = { type: 'userAction', workflow: a.workflow, surface, ...(integrationId ? { integrationId: String(integrationId) } : {}), ...(a.input ? { input: a.input } : {}) };
-                else if (a?.type === 'open_url' && safeUrl(a.url)) action = { type: 'open_url', url: safeUrl(a.url) };
+                const href = a?.type === 'open_url' ? safeUrl(a.url) : null;
                 // A button with no usable action still renders (disabled), so the card matches the definition.
-                return node('Button', { variant, ...(action ? { action } : { disabled: true }) }, [str(p.label) || 'Open']);
+                return node('Button', { variant, ...(href ? { href } : action ? {} : { disabled: true }) }, [str(p.label) || 'Open'], action);
             }
             default: return kids().length === 1 ? kids()[0] : node('Flex', { direction: 'column', gap: 'sm' }, kids());
         }

package/integrations/{data-defined → definitions}/router.js

@@ -1,11 +1,11 @@
 /**
  * HTTP routes for integration versions, run history, sync progress and approvals, mounted by createIntegrationRouter
- * when the app registers the integration runtime (a class with `DataDefined`). They answer for EVERY integration,
+ * when the app registers the integration runtime (a class with `IntegrationRuntime`). They answer for EVERY integration,
  * however it was made: an integration with no run history, syncs or other versions gets an empty answer, not a 404.
  * Thin adapters: authenticate, call a use case, map the result to a status.
  *
  * Signed-in users (Frigg's usual authentication: bearer token, x-frigg headers or adopter JWT):
- *   GET  /api/data-defined/definitions                   what can be installed: latest published version of each
+ *   GET  /api/integration-definitions                   what can be installed: latest published version of each
  *                                                        (GET /api/integrations lists the same types as options)
  *   GET  /api/integrations/:integrationId/upgrade?to=    the upgrade plan for an installation (changes nothing)
  *   POST /api/integrations/:integrationId/upgrade        { to? } apply it (refused while anything is needed)
@@ -46,7 +46,7 @@ const noUpgrade = (integration) => ({
  * auth: 'user' = a signed-in user (the workspace is the user's Frigg id), 'admin' = x-frigg-admin-api-key.
  */
 const DEFINITION_ROUTES = Object.freeze({
-    catalogue:        { method: 'GET',  path: '/api/data-defined/definitions', auth: 'user' },
+    catalogue:        { method: 'GET',  path: '/api/integration-definitions', auth: 'user' },
     upgradePlan:      { method: 'GET',  path: '/api/integrations/:integrationId/upgrade', auth: 'user' },
     upgradeApply:     { method: 'POST', path: '/api/integrations/:integrationId/upgrade', auth: 'user' },
     runs:             { method: 'GET',  path: '/api/integrations/:integrationId/runs', auth: 'user' },
@@ -71,21 +71,21 @@ const guard = (fn) => catchAsyncError(async (req, res) => { try { await fn(req,
  * @param {{ execute(req): Promise<{ getId(): string }> }} authenticateUser
  * @param {{ getIntegrationInstance, integrationClasses: Function[] }} deps
  */
-function setDataDefinedRoutes(router, authenticateUser, { getIntegrationInstance, integrationClasses }) {
-    const classes = integrationClasses.filter((c) => c.DataDefined);
+function setIntegrationRuntimeRoutes(router, authenticateUser, { getIntegrationInstance, integrationClasses }) {
+    const classes = integrationClasses.filter((c) => c.IntegrationRuntime);
     if (!classes.length) return false;
-    const catalogClass = classes.find((c) => c.DataDefined.shared) || classes[0];
-    const { definitions, manifests } = catalogClass.DataDefined;
+    const catalogClass = classes.find((c) => c.IntegrationRuntime.shared) || classes[0];
+    const { definitions, manifests } = catalogClass.IntegrationRuntime;
 
     const installation = async (req) => {
         const user = await authenticateUser.execute(req);
         return getIntegrationInstance.execute(req.params.integrationId, user.getId());
     };
-    const runtimeOf = (integration) => integration?.constructor?.DataDefined || null;
+    const runtimeOf = (integration) => integration?.constructor?.IntegrationRuntime || null;
 
     router.route(path('catalogue')).get(guard(async (req, res) => {
         const user = await authenticateUser.execute(req);
-        const lists = await Promise.all(classes.map((c) => (c.DataDefined.definitions.list ? c.DataDefined.definitions.list({ workspaceId: String(user.getId()) }) : [])));
+        const lists = await Promise.all(classes.map((c) => (c.IntegrationRuntime.definitions.list ? c.IntegrationRuntime.definitions.list({ workspaceId: String(user.getId()) }) : [])));
         const seen = new Set();
         res.json({ definitions: lists.flat().filter((d) => (seen.has(d.id) ? false : seen.add(d.id))) });
     }));
@@ -105,7 +105,7 @@ function setDataDefinedRoutes(router, authenticateUser, { getIntegrationInstance
 
     router.route(path('runs')).get(guard(async (req, res) => {
         const integration = await installation(req);
-        const store = runtimeOf(integration)?.runs() || catalogClass.DataDefined.runs();
+        const store = runtimeOf(integration)?.runs() || catalogClass.IntegrationRuntime.runs();
         if (!store) return res.json({ runs: [] });
         const { workflowId, status, before, limit } = req.query;
         res.json({ runs: await store.listRuns(integration.id, { workflowId, status, before, limit: limit ? Number(limit) : undefined }) });
@@ -167,4 +167,4 @@ function setDataDefinedRoutes(router, authenticateUser, { getIntegrationInstance
     return true;
 }
 
-module.exports = { setDataDefinedRoutes, DEFINITION_ROUTES };
+module.exports = { setIntegrationRuntimeRoutes, DEFINITION_ROUTES };

package/integrations/{data-defined → definitions}/runtime.js

@@ -1,5 +1,5 @@
 /**
- * The pieces DataDefinedIntegration wires to Frigg. Each takes its I/O as arguments, so the whole runtime can be
+ * The pieces IntegrationRuntime wires to Frigg. Each takes its I/O as arguments, so the whole runtime can be
  * driven in a test with fakes and the same code runs in Lambda.
  *
  *   makePorts      capability calls go through the module manifest to an Api method; links live in IntegrationMapping

package/integrations/{data-defined → definitions}/schema/installation.v0.1.schema.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://friggframework.org/schemas/installation/v0.1.json",
-  "title": "Data-defined installation config v0.1",
+  "title": "Installation config v0.1",
   "description": "What one customer chose, stored as Integration.config. The definition says what is possible; this says what is on.",
   "type": "object",
   "required": [

package/integrations/{data-defined → definitions}/schema/records.md

@@ -1,4 +1,4 @@
-# Data-defined integrations: database records (v0.1)
+# Integrations published as definitions: database records (v0.1)
 
 Three layers, stored separately. Worked examples for Phone ↔ HubSpot are in `examples/records/`.
 

package/integrations/{data-defined → definitions}/scripts/validate.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 /**
- * Validate data-defined integration definitions and capability manifests: JSON Schema, then references.
+ * Validate integration definitions and capability manifests: JSON Schema, then references.
  *
  *   node scripts/validate.js                       every bundled manifest and example
  *   node scripts/validate.js my.definition.json    one or more definitions (files or directories)