@intellia/workflow-sdk 0.2.1 → 0.3.0

package/dist/cjs/define-webhook.js

@@ -9,6 +9,7 @@ const defineWebhook = (spec) => ({
             description: spec.description,
             slug: spec.slug,
             responseRules: spec.responseRules,
+            signatureVerification: spec.signatureVerification,
         };
     },
 });

package/dist/cjs/define-webhook.js.map

@@ -1 +1 @@
-{"version":3,"file":"define-webhook.js","sourceRoot":"","sources":["../../src/define-webhook.ts"],"names":[],"mappings":";;;AAqCO,MAAM,aAAa,GAAG,CAAC,IAAiB,EAAiB,EAAE,CAAC,CAAC;IAClE,MAAM;QACJ,OAAO;YACL,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,aAAa,EAAE,IAAI,CAAC,aAAa;SAClC,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAVU,QAAA,aAAa,iBAUvB"}
+{"version":3,"file":"define-webhook.js","sourceRoot":"","sources":["../../src/define-webhook.ts"],"names":[],"mappings":";;;AAwDO,MAAM,aAAa,GAAG,CAAC,IAAiB,EAAiB,EAAE,CAAC,CAAC;IAClE,MAAM;QACJ,OAAO;YACL,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;SAClD,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAXU,QAAA,aAAa,iBAWvB"}

package/dist/cjs/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;AAAA,yCAAwD;AAA/C,8FAAA,CAAC,OAAA;AAAE,yGAAA,YAAY,OAAA;AAAE,qGAAA,QAAQ,OAAA;AAClC,qCAQmB;AAPjB,oGAAA,SAAS,OAAA;AACT,gGAAA,KAAK,OAAA;AACL,kGAAA,OAAO,OAAA;AACP,gGAAA,KAAK,OAAA;AACL,kGAAA,OAAO,OAAA;AACP,8FAAA,GAAG,OAAA;AACH,sGAAA,WAAW,OAAA;AAGb,mDAA4E;AAAnE,gHAAA,cAAc,OAAA;AAAE,0HAAA,wBAAwB,OAAA;AAEjD,mDAA8C;AAArC,4GAAA,UAAU,OAAA;AASnB,uEAAiE;AAAxD,+HAAA,mBAAmB,OAAA;AAE5B,6DAAuD;AAA9C,qHAAA,cAAc,OAAA;AAEvB,2DAAsD;AAA7C,oHAAA,cAAc,OAAA;AAEvB,yDAAoD;AAA3C,kHAAA,aAAa,OAAA;AAOtB,uCAAgD;AAAvC,8GAAA,kBAAkB,OAAA;AAC3B,2CAAoD;AAA3C,qGAAA,OAAO,OAAA;AAAE,yGAAA,WAAW,OAAA;AAU7B,2DAAsD;AAA7C,oHAAA,cAAc,OAAA;AAYvB,iDAA6F;AAApF,mGAAA,EAAE,OAAA;AAAE,mGAAA,EAAE,OAAA;AAAE,oGAAA,GAAG,OAAA;AAAE,mGAAA,EAAE,OAAA;AAAE,oGAAA,GAAG,OAAA;AAAE,yGAAA,QAAQ,OAAA;AAAE,uGAAA,MAAM,OAAA;AAAE,0GAAA,SAAS,OAAA;AAAE,wGAAA,OAAO,OAAA;AAEnE,qEAA+D;AAAtD,6HAAA,kBAAkB,OAAA;AAE3B,+DAA2D;AAAlD,yHAAA,iBAAiB,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;AAAA,yCAAwD;AAA/C,8FAAA,CAAC,OAAA;AAAE,yGAAA,YAAY,OAAA;AAAE,qGAAA,QAAQ,OAAA;AAClC,qCAQmB;AAPjB,oGAAA,SAAS,OAAA;AACT,gGAAA,KAAK,OAAA;AACL,kGAAA,OAAO,OAAA;AACP,gGAAA,KAAK,OAAA;AACL,kGAAA,OAAO,OAAA;AACP,8FAAA,GAAG,OAAA;AACH,sGAAA,WAAW,OAAA;AAGb,mDAA4E;AAAnE,gHAAA,cAAc,OAAA;AAAE,0HAAA,wBAAwB,OAAA;AAEjD,mDAA8C;AAArC,4GAAA,UAAU,OAAA;AASnB,uEAAiE;AAAxD,+HAAA,mBAAmB,OAAA;AAE5B,6DAAuD;AAA9C,qHAAA,cAAc,OAAA;AAEvB,2DAAsD;AAA7C,oHAAA,cAAc,OAAA;AAEvB,yDAAoD;AAA3C,kHAAA,aAAa,OAAA;AAQtB,uCAAgD;AAAvC,8GAAA,kBAAkB,OAAA;AAC3B,2CAAoD;AAA3C,qGAAA,OAAO,OAAA;AAAE,yGAAA,WAAW,OAAA;AAU7B,2DAAsD;AAA7C,oHAAA,cAAc,OAAA;AAYvB,iDAA6F;AAApF,mGAAA,EAAE,OAAA;AAAE,mGAAA,EAAE,OAAA;AAAE,oGAAA,GAAG,OAAA;AAAE,mGAAA,EAAE,OAAA;AAAE,oGAAA,GAAG,OAAA;AAAE,yGAAA,QAAQ,OAAA;AAAE,uGAAA,MAAM,OAAA;AAAE,0GAAA,SAAS,OAAA;AAAE,wGAAA,OAAO,OAAA;AAEnE,qEAA+D;AAAtD,6HAAA,kBAAkB,OAAA;AAE3B,+DAA2D;AAAlD,yHAAA,iBAAiB,OAAA"}

package/dist/cjs/schema.js

@@ -3,57 +3,85 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.artifact = exports.toJsonSchema = exports.z = void 0;
 const v4_1 = require("zod/v4");
 Object.defineProperty(exports, "z", { enumerable: true, get: function () { return v4_1.z; } });
-// `z.toJSONSchema` reads `.describe()`/`.meta()` metadata via `z.globalRegistry`
-// — a per-zod-module-instance `WeakMap`. A schema built by a DIFFERENT zod
-// module instance (e.g. bundled separately into a vm-executed workflow entry
-// — see `workflow-compiler/src/execute.ts`) has its own registry, so that
-// lookup silently finds nothing, even though structural fields
-// (type/properties/required) still convert correctly via duck-typed access.
-// The schema's own `.description` getter, though, is a closure bound to
-// whichever registry actually holds the metadata, so reading it works
-// regardless of which zod instance built the schema — it's a plain property
-// read, not an identity check. This walks the zod schema's PUBLIC, documented
-// shape accessors (`.def.type`, `.shape`, `.element`, `.unwrap()`) in
-// parallel with the JSON Schema `z.toJSONSchema` already produced, backfilling
-// any `description` the registry lookup missed. Covers the constructs the SDK
-// and the real corpus actually use (object/array/optional/default); anything
-// else (union, record, nullable's `anyOf` wrapping, ...) falls through
-// unmerged — no worse than before this existed, just not extended to those.
-const backfillDescriptions = (t, node) => {
-    var _a;
-    const description = t.description;
-    if (node.description === undefined && typeof description === "string") {
-        node.description = description;
+// `z.toJSONSchema` finds `.meta()` through a per-zod-instance registry, so a
+// schema built by another zod copy (a vm-executed workflow entry, see
+// `workflow-compiler/src/execute.ts`) loses it; the schema's own no-argument
+// `.meta()` still reads the right registry. This walks the zod schema beside
+// the JSON node `z.toJSONSchema` emitted for it, kind by kind, and copies the
+// keys every API Ajv accepts (`input` is registered there as a keyword).
+const BACKFILLED_META_KEYS = ["description", "title", "examples", "deprecated", "readOnly", "writeOnly", "input"];
+// Wrappers that add no JSON Schema level: the inner schema's keys land on the same node.
+const SAME_NODE_WRAPPERS = new Set(["optional", "default", "prefault", "nonoptional", "readonly", "catch"]);
+const asNode = (v) => typeof v === "object" && v !== null && !Array.isArray(v) ? v : undefined;
+const backfillMetadata = (t, node, seen = new Set()) => {
+    var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o, _p, _q;
+    if (seen.has(t))
+        return;
+    const path = new Set(seen).add(t);
+    const visit = (child, childNode) => {
+        const n = asNode(childNode);
+        if (child && n)
+            backfillMetadata(child, n, path);
+    };
+    const meta = (_b = (_a = t).meta) === null || _b === void 0 ? void 0 : _b.call(_a);
+    if (typeof meta === "object" && meta !== null) {
+        for (const key of BACKFILLED_META_KEYS) {
+            // Round-tripped into plain data from this realm, not the vm's.
+            const json = JSON.stringify(meta[key]);
+            if (json !== undefined && node[key] === undefined)
+                node[key] = JSON.parse(json);
+        }
     }
-    const kind = (_a = t.def) === null || _a === void 0 ? void 0 : _a.type;
-    if (kind === "object" && node.properties) {
+    const def = ((_c = t.def) !== null && _c !== void 0 ? _c : {});
+    const kind = (_d = def.type) !== null && _d !== void 0 ? _d : "";
+    if (kind === "object") {
         const shape = t.shape;
-        for (const [key, sub] of Object.entries(shape)) {
-            const propNode = node.properties[key];
-            if (propNode) {
-                backfillDescriptions(sub, propNode);
-            }
-        }
+        for (const [key, sub] of Object.entries(shape))
+            visit(sub, (_e = node.properties) === null || _e === void 0 ? void 0 : _e[key]);
     }
-    else if (kind === "array" && node.items) {
-        const element = t.element;
-        backfillDescriptions(element, node.items);
+    else if (kind === "array") {
+        visit(def.element, node.items);
     }
-    else if (kind === "optional" || kind === "default" || kind === "nonoptional") {
-        // These wrappers add no JSON Schema nesting level of their own (optional
-        // only affects `required`; default keeps the wrapped type's shape), so
-        // the inner schema's fields land at this SAME node.
-        const unwrap = t.unwrap;
-        if (typeof unwrap === "function") {
-            backfillDescriptions(unwrap(), node);
-        }
+    else if (kind === "record") {
+        visit(def.valueType, node.additionalProperties);
+    }
+    else if (kind === "union") {
+        const branches = (_g = (_f = node.anyOf) !== null && _f !== void 0 ? _f : node.oneOf) !== null && _g !== void 0 ? _g : [];
+        (_h = def.options) === null || _h === void 0 ? void 0 : _h.forEach((option, i) => visit(option, branches[i]));
+    }
+    else if (kind === "intersection") {
+        visit(def.left, (_j = node.allOf) === null || _j === void 0 ? void 0 : _j[0]);
+        visit(def.right, (_k = node.allOf) === null || _k === void 0 ? void 0 : _k[1]);
+    }
+    else if (kind === "tuple") {
+        const items = node.items;
+        if (Array.isArray(items))
+            (_l = def.items) === null || _l === void 0 ? void 0 : _l.forEach((item, i) => visit(item, items[i]));
+        else
+            (_m = def.items) === null || _m === void 0 ? void 0 : _m.forEach((item) => visit(item, items));
+        visit(def.rest, node.additionalItems);
+    }
+    else if (kind === "nullable") {
+        // `anyOf: [inner, { type: "null" }]`, or the inner node itself when it inlines.
+        visit(def.innerType, (_p = (_o = node.anyOf) === null || _o === void 0 ? void 0 : _o[0]) !== null && _p !== void 0 ? _p : node);
+    }
+    else if (SAME_NODE_WRAPPERS.has(kind)) {
+        visit(def.innerType, node);
+    }
+    else if (kind === "lazy") {
+        visit((_q = def.getter) === null || _q === void 0 ? void 0 : _q.call(def), node);
+    }
+    else if (kind === "pipe") {
+        // The node describes one side; a marker on either side keeps the field sensitive.
+        visit(def.out, node);
+        visit(def.in, node);
     }
 };
 // The repo's ajv schemas and every hand-written workflow use draft-07; zod's
 // default target is 2020-12, which ajv would reject.
 const toJsonSchema = (t) => {
     const result = v4_1.z.toJSONSchema(t, { target: "draft-7" });
-    backfillDescriptions(t, result);
+    backfillMetadata(t, result);
     return result;
 };
 exports.toJsonSchema = toJsonSchema;

package/dist/cjs/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/schema.ts"],"names":[],"mappings":";;;AAAA,+BAA2B;AAGlB,kFAHA,MAAC,OAGA;AAyCV,iFAAiF;AACjF,2EAA2E;AAC3E,6EAA6E;AAC7E,0EAA0E;AAC1E,+DAA+D;AAC/D,4EAA4E;AAC5E,wEAAwE;AACxE,sEAAsE;AACtE,4EAA4E;AAC5E,8EAA8E;AAC9E,sEAAsE;AACtE,+EAA+E;AAC/E,8EAA8E;AAC9E,6EAA6E;AAC7E,uEAAuE;AACvE,4EAA4E;AAC5E,MAAM,oBAAoB,GAAG,CAAC,CAAY,EAAE,IAAgB,EAAQ,EAAE;;IACpE,MAAM,WAAW,GAAI,CAA0C,CAAC,WAAW,CAAC;IAC5E,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACtE,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED,MAAM,IAAI,GAAG,MAAC,CAA4C,CAAC,GAAG,0CAAE,IAAI,CAAC;IACrE,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACzC,MAAM,KAAK,GAAI,CAAqD,CAAC,KAAK,CAAC;QAC3E,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACtC,IAAI,QAAQ,EAAE,CAAC;gBACb,oBAAoB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;IACH,CAAC;SAAM,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAI,CAAuC,CAAC,OAAO,CAAC;QACjE,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;SAAM,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAC/E,yEAAyE;QACzE,uEAAuE;QACvE,oDAAoD;QACpD,MAAM,MAAM,GAAI,CAA6C,CAAC,MAAM,CAAC;QACrE,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;YACjC,oBAAoB,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,6EAA6E;AAC7E,qDAAqD;AAC9C,MAAM,YAAY,GAAG,CAAC,CAAY,EAAc,EAAE;IACvD,MAAM,MAAM,GAAG,MAAC,CAAC,YAAY,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAe,CAAC;IACtE,oBAAoB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAChC,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAJW,QAAA,YAAY,gBAIvB;AAEF,0EAA0E;AAC1E,wBAAwB;AACjB,MAAM,QAAQ,GAAG,GAAG,EAAE,CAC3B,MAAC,CAAC,MAAM,CAAC;IACP,UAAU,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IAC9B,QAAQ,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;CAC9B,CAAC,CAAC;AAJQ,QAAA,QAAQ,YAIhB"}
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/schema.ts"],"names":[],"mappings":";;;AAAA,+BAA2B;AAGlB,kFAHA,MAAC,OAGA;AAyCV,6EAA6E;AAC7E,sEAAsE;AACtE,6EAA6E;AAC7E,6EAA6E;AAC7E,8EAA8E;AAC9E,yEAAyE;AACzE,MAAM,oBAAoB,GAAG,CAAC,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;AAElH,yFAAyF;AACzF,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;AAiB5G,MAAM,MAAM,GAAG,CAAC,CAAU,EAA0B,EAAE,CACpD,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;AAE3F,MAAM,gBAAgB,GAAG,CAAC,CAAY,EAAE,IAAgB,EAAE,OAAuB,IAAI,GAAG,EAAE,EAAQ,EAAE;;IAClG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAAE,OAAO;IACxB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,CAAC,KAAmC,EAAE,SAAkB,EAAE,EAAE;QACxE,MAAM,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;QAC5B,IAAI,KAAK,IAAI,CAAC;YAAE,gBAAgB,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACnD,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,MAAA,MAAC,CAAyC,EAAC,IAAI,kDAAI,CAAC;IACjE,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAC9C,KAAK,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;YACvC,+DAA+D;YAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAE,IAAgC,CAAC,GAAG,CAAC,CAAC,CAAC;YACpE,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,SAAS;gBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAG,CAAC,MAAC,CAAiC,CAAC,GAAG,mCAAI,EAAE,CAAW,CAAC;IACrE,MAAM,IAAI,GAAG,MAAA,GAAG,CAAC,IAAI,mCAAI,EAAE,CAAC;IAC5B,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,MAAM,KAAK,GAAI,CAAqD,CAAC,KAAK,CAAC;QAC3E,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,KAAK,CAAC,GAAG,EAAE,MAAA,IAAI,CAAC,UAAU,0CAAG,GAAG,CAAC,CAAC,CAAC;IACrF,CAAC;SAAM,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;SAAM,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAClD,CAAC;SAAM,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,MAAA,MAAA,IAAI,CAAC,KAAK,mCAAI,IAAI,CAAC,KAAK,mCAAI,EAAE,CAAC;QAChD,MAAA,GAAG,CAAC,OAAO,0CAAE,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC;SAAM,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;QACnC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,MAAA,IAAI,CAAC,KAAK,0CAAG,CAAC,CAAC,CAAC,CAAC;QACjC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAA,IAAI,CAAC,KAAK,0CAAG,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC;SAAM,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC;QAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,MAAA,GAAG,CAAC,KAAK,0CAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;;YAC5E,MAAA,GAAG,CAAC,KAAK,0CAAE,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QACtD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IACxC,CAAC;SAAM,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,gFAAgF;QAChF,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,MAAA,MAAA,IAAI,CAAC,KAAK,0CAAG,CAAC,CAAC,mCAAI,IAAI,CAAC,CAAC;IAChD,CAAC;SAAM,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;SAAM,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,MAAA,GAAG,CAAC,MAAM,mDAAI,EAAE,IAAI,CAAC,CAAC;IAC9B,CAAC;SAAM,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,kFAAkF;QAClF,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACrB,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACtB,CAAC;AACH,CAAC,CAAC;AAEF,6EAA6E;AAC7E,qDAAqD;AAC9C,MAAM,YAAY,GAAG,CAAC,CAAY,EAAc,EAAE;IACvD,MAAM,MAAM,GAAG,MAAC,CAAC,YAAY,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAe,CAAC;IACtE,gBAAgB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC5B,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAJW,QAAA,YAAY,gBAIvB;AAEF,0EAA0E;AAC1E,wBAAwB;AACjB,MAAM,QAAQ,GAAG,GAAG,EAAE,CAC3B,MAAC,CAAC,MAAM,CAAC;IACP,UAAU,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IAC9B,QAAQ,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;CAC9B,CAAC,CAAC;AAJQ,QAAA,QAAQ,YAIhB"}

package/dist/esm/define-webhook.js

@@ -6,6 +6,7 @@ export const defineWebhook = (spec) => ({
             description: spec.description,
             slug: spec.slug,
             responseRules: spec.responseRules,
+            signatureVerification: spec.signatureVerification,
         };
     },
 });

package/dist/esm/define-webhook.js.map

@@ -1 +1 @@
-{"version":3,"file":"define-webhook.js","sourceRoot":"","sources":["../../src/define-webhook.ts"],"names":[],"mappings":"AAqCA,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAiB,EAAiB,EAAE,CAAC,CAAC;IAClE,MAAM;QACJ,OAAO;YACL,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,aAAa,EAAE,IAAI,CAAC,aAAa;SAClC,CAAC;IACJ,CAAC;CACF,CAAC,CAAC"}
+{"version":3,"file":"define-webhook.js","sourceRoot":"","sources":["../../src/define-webhook.ts"],"names":[],"mappings":"AAwDA,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAiB,EAAiB,EAAE,CAAC,CAAC;IAClE,MAAM;QACJ,OAAO;YACL,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;SAClD,CAAC;IACJ,CAAC;CACF,CAAC,CAAC"}

package/dist/esm/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EACL,SAAS,EACT,KAAK,EACL,OAAO,EACP,KAAK,EACL,OAAO,EACP,GAAG,EACH,WAAW,GACZ,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAE5E,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAS9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAEjE,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAOpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAUpD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAYtD,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE7F,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAE/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EACL,SAAS,EACT,KAAK,EACL,OAAO,EACP,KAAK,EACL,OAAO,EACP,GAAG,EACH,WAAW,GACZ,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAE5E,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAS9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAEjE,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAQpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAUpD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAYtD,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE7F,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAE/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/esm/schema.js

@@ -1,56 +1,84 @@
 import { z } from "zod/v4";
 export { z };
-// `z.toJSONSchema` reads `.describe()`/`.meta()` metadata via `z.globalRegistry`
-// — a per-zod-module-instance `WeakMap`. A schema built by a DIFFERENT zod
-// module instance (e.g. bundled separately into a vm-executed workflow entry
-// — see `workflow-compiler/src/execute.ts`) has its own registry, so that
-// lookup silently finds nothing, even though structural fields
-// (type/properties/required) still convert correctly via duck-typed access.
-// The schema's own `.description` getter, though, is a closure bound to
-// whichever registry actually holds the metadata, so reading it works
-// regardless of which zod instance built the schema — it's a plain property
-// read, not an identity check. This walks the zod schema's PUBLIC, documented
-// shape accessors (`.def.type`, `.shape`, `.element`, `.unwrap()`) in
-// parallel with the JSON Schema `z.toJSONSchema` already produced, backfilling
-// any `description` the registry lookup missed. Covers the constructs the SDK
-// and the real corpus actually use (object/array/optional/default); anything
-// else (union, record, nullable's `anyOf` wrapping, ...) falls through
-// unmerged — no worse than before this existed, just not extended to those.
-const backfillDescriptions = (t, node) => {
-    var _a;
-    const description = t.description;
-    if (node.description === undefined && typeof description === "string") {
-        node.description = description;
-    }
-    const kind = (_a = t.def) === null || _a === void 0 ? void 0 : _a.type;
-    if (kind === "object" && node.properties) {
-        const shape = t.shape;
-        for (const [key, sub] of Object.entries(shape)) {
-            const propNode = node.properties[key];
-            if (propNode) {
-                backfillDescriptions(sub, propNode);
-            }
+// `z.toJSONSchema` finds `.meta()` through a per-zod-instance registry, so a
+// schema built by another zod copy (a vm-executed workflow entry, see
+// `workflow-compiler/src/execute.ts`) loses it; the schema's own no-argument
+// `.meta()` still reads the right registry. This walks the zod schema beside
+// the JSON node `z.toJSONSchema` emitted for it, kind by kind, and copies the
+// keys every API Ajv accepts (`input` is registered there as a keyword).
+const BACKFILLED_META_KEYS = ["description", "title", "examples", "deprecated", "readOnly", "writeOnly", "input"];
+// Wrappers that add no JSON Schema level: the inner schema's keys land on the same node.
+const SAME_NODE_WRAPPERS = new Set(["optional", "default", "prefault", "nonoptional", "readonly", "catch"]);
+const asNode = (v) => typeof v === "object" && v !== null && !Array.isArray(v) ? v : undefined;
+const backfillMetadata = (t, node, seen = new Set()) => {
+    var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o, _p, _q;
+    if (seen.has(t))
+        return;
+    const path = new Set(seen).add(t);
+    const visit = (child, childNode) => {
+        const n = asNode(childNode);
+        if (child && n)
+            backfillMetadata(child, n, path);
+    };
+    const meta = (_b = (_a = t).meta) === null || _b === void 0 ? void 0 : _b.call(_a);
+    if (typeof meta === "object" && meta !== null) {
+        for (const key of BACKFILLED_META_KEYS) {
+            // Round-tripped into plain data from this realm, not the vm's.
+            const json = JSON.stringify(meta[key]);
+            if (json !== undefined && node[key] === undefined)
+                node[key] = JSON.parse(json);
         }
     }
-    else if (kind === "array" && node.items) {
-        const element = t.element;
-        backfillDescriptions(element, node.items);
-    }
-    else if (kind === "optional" || kind === "default" || kind === "nonoptional") {
-        // These wrappers add no JSON Schema nesting level of their own (optional
-        // only affects `required`; default keeps the wrapped type's shape), so
-        // the inner schema's fields land at this SAME node.
-        const unwrap = t.unwrap;
-        if (typeof unwrap === "function") {
-            backfillDescriptions(unwrap(), node);
-        }
+    const def = ((_c = t.def) !== null && _c !== void 0 ? _c : {});
+    const kind = (_d = def.type) !== null && _d !== void 0 ? _d : "";
+    if (kind === "object") {
+        const shape = t.shape;
+        for (const [key, sub] of Object.entries(shape))
+            visit(sub, (_e = node.properties) === null || _e === void 0 ? void 0 : _e[key]);
+    }
+    else if (kind === "array") {
+        visit(def.element, node.items);
+    }
+    else if (kind === "record") {
+        visit(def.valueType, node.additionalProperties);
+    }
+    else if (kind === "union") {
+        const branches = (_g = (_f = node.anyOf) !== null && _f !== void 0 ? _f : node.oneOf) !== null && _g !== void 0 ? _g : [];
+        (_h = def.options) === null || _h === void 0 ? void 0 : _h.forEach((option, i) => visit(option, branches[i]));
+    }
+    else if (kind === "intersection") {
+        visit(def.left, (_j = node.allOf) === null || _j === void 0 ? void 0 : _j[0]);
+        visit(def.right, (_k = node.allOf) === null || _k === void 0 ? void 0 : _k[1]);
+    }
+    else if (kind === "tuple") {
+        const items = node.items;
+        if (Array.isArray(items))
+            (_l = def.items) === null || _l === void 0 ? void 0 : _l.forEach((item, i) => visit(item, items[i]));
+        else
+            (_m = def.items) === null || _m === void 0 ? void 0 : _m.forEach((item) => visit(item, items));
+        visit(def.rest, node.additionalItems);
+    }
+    else if (kind === "nullable") {
+        // `anyOf: [inner, { type: "null" }]`, or the inner node itself when it inlines.
+        visit(def.innerType, (_p = (_o = node.anyOf) === null || _o === void 0 ? void 0 : _o[0]) !== null && _p !== void 0 ? _p : node);
+    }
+    else if (SAME_NODE_WRAPPERS.has(kind)) {
+        visit(def.innerType, node);
+    }
+    else if (kind === "lazy") {
+        visit((_q = def.getter) === null || _q === void 0 ? void 0 : _q.call(def), node);
+    }
+    else if (kind === "pipe") {
+        // The node describes one side; a marker on either side keeps the field sensitive.
+        visit(def.out, node);
+        visit(def.in, node);
     }
 };
 // The repo's ajv schemas and every hand-written workflow use draft-07; zod's
 // default target is 2020-12, which ajv would reject.
 export const toJsonSchema = (t) => {
     const result = z.toJSONSchema(t, { target: "draft-7" });
-    backfillDescriptions(t, result);
+    backfillMetadata(t, result);
     return result;
 };
 // A pointer to bytes held out-of-band, so a large payload never rides the

package/dist/esm/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAG3B,OAAO,EAAE,CAAC,EAAE,CAAC;AAyCb,iFAAiF;AACjF,2EAA2E;AAC3E,6EAA6E;AAC7E,0EAA0E;AAC1E,+DAA+D;AAC/D,4EAA4E;AAC5E,wEAAwE;AACxE,sEAAsE;AACtE,4EAA4E;AAC5E,8EAA8E;AAC9E,sEAAsE;AACtE,+EAA+E;AAC/E,8EAA8E;AAC9E,6EAA6E;AAC7E,uEAAuE;AACvE,4EAA4E;AAC5E,MAAM,oBAAoB,GAAG,CAAC,CAAY,EAAE,IAAgB,EAAQ,EAAE;;IACpE,MAAM,WAAW,GAAI,CAA0C,CAAC,WAAW,CAAC;IAC5E,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACtE,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED,MAAM,IAAI,GAAG,MAAC,CAA4C,CAAC,GAAG,0CAAE,IAAI,CAAC;IACrE,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACzC,MAAM,KAAK,GAAI,CAAqD,CAAC,KAAK,CAAC;QAC3E,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACtC,IAAI,QAAQ,EAAE,CAAC;gBACb,oBAAoB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;IACH,CAAC;SAAM,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAI,CAAuC,CAAC,OAAO,CAAC;QACjE,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;SAAM,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAC/E,yEAAyE;QACzE,uEAAuE;QACvE,oDAAoD;QACpD,MAAM,MAAM,GAAI,CAA6C,CAAC,MAAM,CAAC;QACrE,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;YACjC,oBAAoB,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,6EAA6E;AAC7E,qDAAqD;AACrD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAY,EAAc,EAAE;IACvD,MAAM,MAAM,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAe,CAAC;IACtE,oBAAoB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAChC,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,0EAA0E;AAC1E,wBAAwB;AACxB,MAAM,CAAC,MAAM,QAAQ,GAAG,GAAG,EAAE,CAC3B,CAAC,CAAC,MAAM,CAAC;IACP,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;CAC9B,CAAC,CAAC"}
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAG3B,OAAO,EAAE,CAAC,EAAE,CAAC;AAyCb,6EAA6E;AAC7E,sEAAsE;AACtE,6EAA6E;AAC7E,6EAA6E;AAC7E,8EAA8E;AAC9E,yEAAyE;AACzE,MAAM,oBAAoB,GAAG,CAAC,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;AAElH,yFAAyF;AACzF,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;AAiB5G,MAAM,MAAM,GAAG,CAAC,CAAU,EAA0B,EAAE,CACpD,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;AAE3F,MAAM,gBAAgB,GAAG,CAAC,CAAY,EAAE,IAAgB,EAAE,OAAuB,IAAI,GAAG,EAAE,EAAQ,EAAE;;IAClG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAAE,OAAO;IACxB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,CAAC,KAAmC,EAAE,SAAkB,EAAE,EAAE;QACxE,MAAM,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;QAC5B,IAAI,KAAK,IAAI,CAAC;YAAE,gBAAgB,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACnD,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,MAAA,MAAC,CAAyC,EAAC,IAAI,kDAAI,CAAC;IACjE,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAC9C,KAAK,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;YACvC,+DAA+D;YAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAE,IAAgC,CAAC,GAAG,CAAC,CAAC,CAAC;YACpE,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,SAAS;gBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAG,CAAC,MAAC,CAAiC,CAAC,GAAG,mCAAI,EAAE,CAAW,CAAC;IACrE,MAAM,IAAI,GAAG,MAAA,GAAG,CAAC,IAAI,mCAAI,EAAE,CAAC;IAC5B,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,MAAM,KAAK,GAAI,CAAqD,CAAC,KAAK,CAAC;QAC3E,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,KAAK,CAAC,GAAG,EAAE,MAAA,IAAI,CAAC,UAAU,0CAAG,GAAG,CAAC,CAAC,CAAC;IACrF,CAAC;SAAM,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;SAAM,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAClD,CAAC;SAAM,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,MAAA,MAAA,IAAI,CAAC,KAAK,mCAAI,IAAI,CAAC,KAAK,mCAAI,EAAE,CAAC;QAChD,MAAA,GAAG,CAAC,OAAO,0CAAE,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC;SAAM,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;QACnC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,MAAA,IAAI,CAAC,KAAK,0CAAG,CAAC,CAAC,CAAC,CAAC;QACjC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAA,IAAI,CAAC,KAAK,0CAAG,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC;SAAM,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC;QAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,MAAA,GAAG,CAAC,KAAK,0CAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;;YAC5E,MAAA,GAAG,CAAC,KAAK,0CAAE,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QACtD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IACxC,CAAC;SAAM,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,gFAAgF;QAChF,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,MAAA,MAAA,IAAI,CAAC,KAAK,0CAAG,CAAC,CAAC,mCAAI,IAAI,CAAC,CAAC;IAChD,CAAC;SAAM,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;SAAM,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,MAAA,GAAG,CAAC,MAAM,mDAAI,EAAE,IAAI,CAAC,CAAC;IAC9B,CAAC;SAAM,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,kFAAkF;QAClF,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACrB,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACtB,CAAC;AACH,CAAC,CAAC;AAEF,6EAA6E;AAC7E,qDAAqD;AACrD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAY,EAAc,EAAE;IACvD,MAAM,MAAM,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAe,CAAC;IACtE,gBAAgB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC5B,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,0EAA0E;AAC1E,wBAAwB;AACxB,MAAM,CAAC,MAAM,QAAQ,GAAG,GAAG,EAAE,CAC3B,CAAC,CAAC,MAAM,CAAC;IACP,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;CAC9B,CAAC,CAAC"}

package/dist/index.d.ts

@@ -53,7 +53,7 @@ type Condition = {
     value: string | number | boolean;
 };
 type WaitForCallbackResume = {
-    /** Stable scope for the lookup key (e.g. "concierge:signing"). */
+    /** Stable scope for the lookup key (e.g. "esign:completed"). */
     namespace: string;
     /** Composed at runtime via JSONata. Resumer reads the same key. */
     lookupKey: string;
@@ -233,6 +233,16 @@ interface WebhookResponseRuleSpec {
     responseBody?: Record<string, string>;
     skipHandlers?: boolean;
 }
+interface WebhookSignatureSpec {
+    /** The request header carrying the signature, e.g. `x-xero-signature`. */
+    header: string;
+    /** Default `hmac-sha256`, the only one supported. */
+    algorithm?: "hmac-sha256";
+    /** Default `base64`. */
+    encoding?: "base64" | "hex";
+    /** Stripped from the header value before comparing, e.g. `sha256=`. */
+    prefix?: string;
+}
 interface WebhookSpec {
     name: string;
     description?: string;
@@ -241,6 +251,9 @@ interface WebhookSpec {
      *  slug-less webhook retargets which row it updates. */
     slug?: string;
     responseRules?: WebhookResponseRuleSpec[];
+    /** Verify each call's HMAC signature. Omitted: the deployed webhook keeps
+     *  whatever check it has. In a module, a webhook with a check needs a `slug`. */
+    signatureVerification?: WebhookSignatureSpec;
 }
 interface RecordedWebhook {
     kind: "webhook";
@@ -248,6 +261,7 @@ interface RecordedWebhook {
     description?: string;
     slug?: string;
     responseRules?: WebhookResponseRuleSpec[];
+    signatureVerification?: WebhookSignatureSpec;
 }
 interface WebhookModule {
     record(): RecordedWebhook;
@@ -593,4 +607,4 @@ type NodeTypeSupport = {
 declare const NODE_TYPE_SUPPORT: Record<WorkflowNodeType, NodeTypeSupport>;
 
 export { Builder, IdAllocator, NODE_TYPE_SUPPORT, artifact, contains, defineAgentRef, defineFunction, defineKnowledgeBase, defineSchedule, defineTool, defineToolWorkflow, defineWebhook, defineWholeStateFunction, defineWorkflow, encodeValue, eq, gt, gte, handleFor, isNull, isPresent, isRecordedResource, isRef, isTpl, jsonata, lt, lte, refPath, toJsonSchema, tpl, tplText };
-export type { AgentRefDef, AgentSpec, ApprovalSpec, BashSpec, Cond, ExecuteWorkflowSpec, FunctionDef, Handle, HutlyApi, KnowledgeBaseDef, NodeInput, NodeSpec, NodeTypeSupport, OnFailure, RecordedEntry, RecordedSchedule, RecordedWebhook, RecordedWorkflow, RefLike, ScheduleModule, ScheduleSpec, ScheduleTriggerSpec, Scope, ToolBuilder, ToolCallInput, ToolConfigFor, ToolConfigRegistry, ToolDef, ToolInstanceRegistry, ToolInstanceShape, ToolInstancesFor, ToolWorkflowSpec, TplLike, TriggerBindingsSpec, TriggerSpec, WaitForCallbackSpec, WebhookModule, WebhookResponseRuleSpec, WebhookSpec, WebhookTriggerSpec, WholeStateFunctionDef, WorkflowModule, WorkflowSpec };
+export type { AgentRefDef, AgentSpec, ApprovalSpec, BashSpec, Cond, ExecuteWorkflowSpec, FunctionDef, Handle, HutlyApi, KnowledgeBaseDef, NodeInput, NodeSpec, NodeTypeSupport, OnFailure, RecordedEntry, RecordedSchedule, RecordedWebhook, RecordedWorkflow, RefLike, ScheduleModule, ScheduleSpec, ScheduleTriggerSpec, Scope, ToolBuilder, ToolCallInput, ToolConfigFor, ToolConfigRegistry, ToolDef, ToolInstanceRegistry, ToolInstanceShape, ToolInstancesFor, ToolWorkflowSpec, TplLike, TriggerBindingsSpec, TriggerSpec, WaitForCallbackSpec, WebhookModule, WebhookResponseRuleSpec, WebhookSignatureSpec, WebhookSpec, WebhookTriggerSpec, WholeStateFunctionDef, WorkflowModule, WorkflowSpec };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intellia/workflow-sdk",
-  "version": "0.2.1",
+  "version": "0.3.0",
   "license": "MIT",
   "description": "TypeScript authoring surface for Hutly workflows",
   "publishConfig": {