@process.co/element-types 0.0.25 → 0.0.27

package/src/ingress-filters.ts

@@ -1,8 +1,10 @@
 /**
  * Webhook ingress filter chain — author-facing types.
  *
- * Authors call `params.$.http.configureIngressFilters(...)` from `hooks.save`
- * to declare a Go-native filter chain that runs at the edge **instead of**
+ * Authors declare a static Go-native filter chain with
+ * `defineSignal({ ingress: { filters } })`, and may call
+ * `params.$.http.configureIngressFilters(...)` from `hooks.save` to replace
+ * that default chain. The final chain runs at the edge **instead of**
  * proxying the request back to Node. The chain is validated at publish time
  * and persisted onto the element's stash row at {@link INGRESS_FILTERS_KEY}.
  *
@@ -10,8 +12,8 @@
  * each filter in order. When the chain is absent the edge falls back to
  * `ext_proc` (proxy back to the Node API).
  *
- * Style mirrors {@link ./http-request-cache.ts}: a single save-hook host
- * method with a typed options shape that materializes onto the element row.
+ * Style mirrors {@link ./http-request-cache.ts}: public authoring shape first,
+ * reserved `$` materialized row field at save/publish time.
  */
 
 /** Where to read auth material from on the inbound HTTP request. */
@@ -45,17 +47,83 @@ export type IngressVerifyAuthFilter = {
 /**
  * Native Go implementation of `http::signal:new-requests`.
  *
- * Receives the published instance row as `config` and uses it to render the
- * static response, optionally body-only emit, and project the inbound HTTP
- * envelope onto Pulsar in the same shape the Node executor produced.
+ * This is a built-in filter for a specific element shape. The chain entry
+ * should usually be `{ type: 'http_new_requests' }`; the Go runtime reads
+ * authored fields such as `responseType`, `resBodyJSON`, `eventData`, and
+ * `resIncludeProcessTicket` from the published element row.
  */
 export type IngressHttpNewRequestsFilter = {
     type: 'http_new_requests';
-    config: {
+    config?: {
         resStatusCode?: number;
         resBody?: string;
         resContentType?: string;
         emitBodyOnly?: boolean;
+        eventData?: 'full' | 'body';
+        responseType?: 'OK' | 'NO_CONTENT' | 'STATIC' | 'CUSTOM' | string;
+        responseTimeout?: number;
+        includeProcessTicket?: boolean;
+        summary?: string;
+    };
+};
+
+/** Validate the selected inbound payload against JSON Schema before emit. */
+export type IngressValidateJSONSchemaFilter = {
+    type: 'validate_json_schema';
+    config: {
+        schema: Record<string, unknown>;
+        eventData?: 'full' | 'body';
+        responseType?: 'OK' | 'NO_CONTENT' | 'STATIC' | 'CUSTOM' | string;
+    };
+};
+
+/**
+ * Validate the inbound payload against a Zod schema hosted on Node.
+ *
+ * The Go edge cannot evaluate Zod schemas natively (they are TypeScript
+ * runtime objects, not data), so this filter delegates to a Node
+ * "validate" microservice at `_internal/zod-validate/:schemaBuildId`.
+ * The schema is registered against `schemaBuildId` at element publish
+ * time; the edge calls it as a sidecar and reads back a structured
+ * result. Aligns with the envoy-style filter chain so we keep full Zod
+ * validation on the edge without porting the engine to Go.
+ *
+ * `failOpen=true` lets the chain continue when the validate endpoint is
+ * unreachable. Default is `false` (reject with 502 on outage).
+ */
+export type IngressValidateZodFilter = {
+    type: 'validate_zod';
+    config: {
+        /** Stable identity for the registered Zod schema. Required. */
+        schemaBuildId: string;
+        /** Optional S3 key for the edge-compatible validator artifact. */
+        artifactKey?: string;
+        /** Legacy/current S3 key for the compiled validator module. */
+        compiledValidatorKey?: string;
+        /** Optional friendly name used in error messages. */
+        schemaName?: string;
+        eventData?: 'full' | 'body';
+        responseType?: 'OK' | 'NO_CONTENT' | 'STATIC' | 'CUSTOM' | string;
+        /** Continue the chain when the validate endpoint cannot be reached. */
+        failOpen?: boolean;
+        /**
+         * Compile-time hint for how the edge should run this validator:
+         * `inline` (embedded QuickJS/Zod) or `sidecar` (trusted-tier endpoint).
+         * Absent ⇒ edge uses its deployment default (inline, sidecar fallback).
+         */
+        validatorBackend?: 'inline' | 'sidecar';
+    };
+};
+
+/**
+ * Generic chain equivalent of a source calling `$emit`. Compound filters such
+ * as `http_new_requests` may emit directly instead of composing this filter.
+ */
+export type IngressEmitFilter = {
+    type: '$emit';
+    config: {
+        eventData?: 'full' | 'body';
+        emitBodyOnly?: boolean;
         summary?: string;
     };
 };
@@ -117,13 +185,16 @@ export type IngressJSONPathMetaFilter = {
  */
 export type IngressFilterDescriptor =
     | IngressVerifyAuthFilter
+    | IngressValidateJSONSchemaFilter
+    | IngressValidateZodFilter
+    | IngressEmitFilter
     | IngressHttpNewRequestsFilter
     | IngressRespondThenEmitFilter
     | IngressHMACVerifyFilter
     | IngressChallengeResponseFilter
     | IngressJSONPathMetaFilter;
 
-/** Save-only: hooks.save → `$.http.configureIngressFilters`. */
+/** Save-only override: hooks.save → `$.http.configureIngressFilters`. */
 export type ConfigureIngressFiltersOptions = {
     filters: IngressFilterDescriptor[];
 };
@@ -138,6 +209,9 @@ export const INGRESS_FILTERS_KEY = '$ingressFilters' as const;
 /** Names accepted at publish time. Keep in sync with the Go filter registry. */
 export const INGRESS_FILTER_TYPES: ReadonlyArray<IngressFilterDescriptor['type']> = [
     'verify_auth',
+    'validate_json_schema',
+    'validate_zod',
+    '$emit',
     'http_new_requests',
     'respond_then_emit',
     'hmac_verify',

package/src/slot-definition.ts

@@ -12,6 +12,16 @@ export type ISlotInstanceDefinition = {
   hideOnDisable?: boolean;
   actionsPath?: string;
   exportsPath?: string;
+  /** Milliseconds until the container scope times out (element data path). */
+  timeoutMsPath?: string;
+  /** FERN of the handler to run on timeout (element data path). */
+  timeoutHandlerFernPath?: string;
+  /** Dispatch mode: `execute` | `signal` (element data path). */
+  timeoutHandlerModePath?: string;
+  /** Payload path resolved at fire time (element data path). */
+  timeoutHandlerDataPath?: string;
+  /** Recovery policy: `resurrect` | `drop` (element data path). */
+  timeoutRecoveryPolicyPath?: string;
 };
 
 export type ISlotStaticInstanceDefinition = ISlotInstanceDefinition & {