@slates/provider-handler 1.0.0-rc.43 → 1.0.0-rc.44

package/dist/index.cjs

@@ -77,7 +77,8 @@ var validate = (schema, data, entity, message) => {
   }
   return result.data;
 };
-var toJsonSchema = (schema) => schema.toJSONSchema({
+var toJsonSchema = (schema, io = "output") => schema.toJSONSchema({
+  io,
   unrepresentable: "any",
   override: (ctx) => {
     let def = ctx.zodSchema._zod.def;
@@ -240,15 +241,30 @@ var getWebhookAutoRegistration = (group) => {
   return group.webhook.autoRegistration;
 };
 var getWebhookManualRegistration = (group) => {
-  if (group.source !== "webhook" || !group.webhook?.manualRegistration) {
+  let registration = group.source === "webhook" ? group.webhook?.manualRegistration ?? group.webhook?.deliveryConfig : void 0;
+  if (!registration) {
     throw new import_error2.ServiceError(
       (0, import_error2.badRequestError)({
         message: `Trigger group does not support manual webhook registration: ${group.key}`
       })
     );
   }
-  return group.webhook.manualRegistration;
+  return registration;
 };
+var getWebhookDeliveryConfig = (group) => {
+  if (group.source !== "webhook" || !group.webhook?.deliveryConfig) {
+    throw new import_error2.ServiceError(
+      (0, import_error2.badRequestError)({
+        message: `Trigger group does not support webhook delivery authentication: ${group.key}`
+      })
+    );
+  }
+  return group.webhook.deliveryConfig;
+};
+var mapWebhookConfigSchemas = (config) => ({
+  userConfigSchema: toJsonSchema(config.userConfigSchema),
+  fullConfigSchema: toJsonSchema(config.fullConfigSchema)
+});
 var mapToolCategory = (category) => ({
   id: category.key,
   name: category.name,
@@ -268,20 +284,24 @@ var mapTriggerGroup = (group) => ({
   name: group.name,
   description: group.description,
   metadata: group.metadata,
+  ...group.selectionSchema ? { selectionSchema: toJsonSchema(group.selectionSchema, "input") } : {},
   invocation: group.source === "polling" ? {
     type: "polling",
     intervalSeconds: group.polling?.intervalSeconds ?? import_provider.SlateDefaultPollingIntervalSeconds
   } : group.source === "gateway" ? { type: "gateway" } : {
     type: "webhook",
+    ...group.webhook?.expandWebhook ? { supportsExpansion: true } : {},
+    ...group.webhook?.autoRegistration?.webhookRenew ? { supportsRenewal: true } : {},
+    ...group.webhook?.reconcileIntervalSeconds !== void 0 ? { reconcileIntervalSeconds: group.webhook.reconcileIntervalSeconds } : {},
     registration: group.webhook?.manualRegistration ? {
       mode: "manual",
-      userConfigSchema: toJsonSchema(
-        group.webhook.manualRegistration.userConfigSchema
-      ),
-      fullConfigSchema: toJsonSchema(
-        group.webhook.manualRegistration.fullConfigSchema
-      )
-    } : { mode: "auto" }
+      ...mapWebhookConfigSchemas(group.webhook.manualRegistration)
+    } : {
+      mode: "auto",
+      ...group.webhook?.deliveryConfig ? {
+        deliveryConfig: mapWebhookConfigSchemas(group.webhook.deliveryConfig)
+      } : {}
+    }
   }
 });
 
@@ -358,6 +378,23 @@ var serializeWebhookHttpResponse = async (response) => {
 
 // src/index.ts
 var DEFAULT_MAX_ATTACHMENT_SIZE_BYTES = 1e8;
+var validateTriggerGroupSelection = (group, selection) => group.selectionSchema ? validate(
+  group.selectionSchema,
+  selection === void 0 ? {} : selection,
+  "trigger_group.selection",
+  `Invalid selection for trigger group "${group.key}"`
+) : selection ?? {};
+var validateWebhookRegistration = (result) => validate(
+  import_proto.slatesTriggerGroupWebhookRegistrationResult,
+  result,
+  "trigger_group.webhook.registration",
+  "Webhook registration returned an invalid result"
+);
+var toWebhookRequest = (params) => new Request(params.url, {
+  method: params.method,
+  headers: params.headers,
+  body: params.body ? Uint8Array.from(atob(params.body.content), (c) => c.charCodeAt(0)) : null
+});
 var routeAttachmentsThroughDirectUpload = async (attachments, live) => {
   if (!attachments || attachments.length === 0 || !live) return attachments;
   let contentEntries = attachments.map((attachment, index) => ({ attachment, index })).filter((entry) => entry.attachment.content.type === "content");
@@ -1324,7 +1361,10 @@ var createProviderHandler = (slate, listeners) => (0, import_proto.createSlatesP
     let autoRegistration = getWebhookAutoRegistration(group);
     let context = createContext(
       ctx.config,
-      { pageToken: params.pageToken ?? null },
+      {
+        pageToken: params.pageToken ?? null,
+        selection: validateTriggerGroupSelection(group, params.selection)
+      },
       ctx.auth?.output
     );
     let res = await traceProviderCall(
@@ -1360,7 +1400,10 @@ var createProviderHandler = (slate, listeners) => (0, import_proto.createSlatesP
       {
         webhookTargetIdentifier: params.webhookTargetIdentifier,
         webhookTargetPayload: params.webhookTargetPayload,
-        webhookUrl: params.webhookUrl
+        webhookUrl: params.webhookUrl,
+        operationId: params.operationId,
+        selection: validateTriggerGroupSelection(group, params.selection),
+        deliveryConfig: params.deliveryConfig
       },
       ctx.auth?.output
     );
@@ -1377,12 +1420,54 @@ var createProviderHandler = (slate, listeners) => (0, import_proto.createSlatesP
           webhookTargetIdentifier: params.webhookTargetIdentifier
         }
       },
-      () => (0, import_provider2.runWithContext)(context, () => autoRegistration.webhookRegister(context))
+      () => (0, import_provider2.runWithContext)(
+        context,
+        async () => validateWebhookRegistration(await autoRegistration.webhookRegister(context))
+      )
     );
-    return withRequestTraces(context, {
-      webhookRegistrationIdentifier: res.webhookRegistrationIdentifier,
-      webhookRegistrationPayload: res.webhookRegistrationPayload
-    });
+    return withRequestTraces(context, res);
+  });
+  manager.onRequest("slates/trigger_group.webhook.renew", async ({ params }) => {
+    let ctx = getContextFull();
+    let group = getTriggerGroup(slate, params.triggerGroupId);
+    let autoRegistration = getWebhookAutoRegistration(group);
+    let renew = autoRegistration.webhookRenew;
+    if (!renew) {
+      throw new import_error4.ServiceError(
+        (0, import_error4.badRequestError)({
+          message: `Trigger group does not support webhook renewal: ${params.triggerGroupId}`
+        })
+      );
+    }
+    let context = createContext(
+      ctx.config,
+      {
+        webhookRegistrationIdentifier: params.webhookRegistrationIdentifier,
+        webhookRegistrationPayload: params.webhookRegistrationPayload,
+        webhookUrl: params.webhookUrl,
+        webhookTargetIdentifier: params.webhookTargetIdentifier,
+        webhookTargetPayload: params.webhookTargetPayload,
+        operationId: params.operationId,
+        selection: validateTriggerGroupSelection(group, params.selection),
+        deliveryConfig: params.deliveryConfig
+      },
+      ctx.auth?.output
+    );
+    let res = await traceProviderCall(
+      {
+        component: "action",
+        functionName: "webhookRenew",
+        message: `Renewing webhook for trigger group ${formatEntityLabel(group.name, group.key)}`,
+        successMessage: `Renewed webhook for trigger group ${formatEntityLabel(group.name, group.key)}`,
+        errorMessage: `Trigger group ${formatEntityLabel(group.name, group.key)} failed while renewing a webhook`,
+        metadata: { triggerGroupId: group.key, triggerGroupName: group.name }
+      },
+      () => (0, import_provider2.runWithContext)(
+        context,
+        async () => validateWebhookRegistration(await renew(context))
+      )
+    );
+    return withRequestTraces(context, res);
   });
   manager.onRequest("slates/trigger_group.webhook.unregister", async ({ params }) => {
     let ctx = getContextFull();
@@ -1484,15 +1569,10 @@ var createProviderHandler = (slate, listeners) => (0, import_proto.createSlatesP
         })
       );
     }
-    let req = new Request(params.url, {
-      method: params.method,
-      headers: params.headers,
-      body: params.body ? Uint8Array.from(atob(params.body.content), (c) => c.charCodeAt(0)) : null
-    });
     let context = createContext(
       {},
       {
-        request: req,
+        request: toWebhookRequest(params),
         webhookRegistrationPayload: params.webhookRegistrationPayload
       },
       {}
@@ -1533,12 +1613,106 @@ var createProviderHandler = (slate, listeners) => (0, import_proto.createSlatesP
         matchers: event.matchers,
         payload: event.payload,
         idempotencyKey: event.idempotencyKey,
-        triggerIds: evaluateTriggerMatches(slate, group.key, event.payload)
+        triggerIds: group.webhook?.expandWebhook ? [] : evaluateTriggerMatches(slate, group.key, event.payload)
       })),
+      ...group.webhook?.expandWebhook ? { requiresExpansion: true } : {},
       response,
       skipped: res.skipped ?? null
     });
   });
+  manager.onRequest(
+    "slates/trigger_group.webhook.delivery_authenticate",
+    async ({ params }) => {
+      let group = getTriggerGroup(slate, params.triggerGroupId);
+      let deliveryConfig = getWebhookDeliveryConfig(group);
+      let context = createContext(
+        {},
+        {
+          request: toWebhookRequest(params),
+          deliveryConfig: params.deliveryConfig
+        },
+        {}
+      );
+      let res = await traceProviderCall(
+        {
+          component: "action",
+          functionName: "webhookDeliveryAuthenticate",
+          message: `Authenticating a delivery for trigger group ${formatEntityLabel(group.name, group.key)}`,
+          successMessage: (result) => result.rejected ? `Rejected a delivery with status ${result.rejected.status} for trigger group ${formatEntityLabel(group.name, group.key)}` : `Authenticated a delivery for ${result.routingKeys.length} routing key(s) for trigger group ${formatEntityLabel(group.name, group.key)}`,
+          errorMessage: `Trigger group ${formatEntityLabel(group.name, group.key)} failed while authenticating a delivery`,
+          metadata: {
+            triggerGroupId: group.key,
+            triggerGroupName: group.name,
+            requestMethod: params.method,
+            hasRequestBody: !!params.body
+          },
+          onSuccess: (result) => ({
+            routingKeyCount: result.routingKeys.length,
+            rejectedStatus: result.rejected?.status ?? null
+          })
+        },
+        () => (0, import_provider2.runWithContext)(context, async () => {
+          let authentication = await deliveryConfig.authenticate(context);
+          return validate(
+            import_proto.slatesTriggerGroupWebhookDeliveryAuthentication,
+            authentication.rejected ? { routingKeys: [], rejected: authentication.rejected } : { routingKeys: authentication.routingKeys, rejected: null },
+            "trigger_group.webhook.delivery_authentication",
+            "Webhook delivery authentication returned an invalid result"
+          );
+        })
+      );
+      return withRequestTraces(context, res);
+    }
+  );
+  manager.onRequest("slates/trigger_group.webhook.expand", async ({ params }) => {
+    let ctx = getContextFull();
+    let group = getTriggerGroup(slate, params.triggerGroupId);
+    let expand = group.source === "webhook" ? group.webhook?.expandWebhook : void 0;
+    if (!expand) {
+      throw new import_error4.ServiceError(
+        (0, import_error4.badRequestError)({
+          message: `Trigger group does not support webhook expansion: ${params.triggerGroupId}`
+        })
+      );
+    }
+    let context = createContext(
+      ctx.config,
+      {
+        payload: params.payload,
+        state: params.state ?? null,
+        selection: validateTriggerGroupSelection(group, params.selection),
+        deliveryId: params.deliveryId,
+        webhookRegistrationPayload: params.webhookRegistrationPayload
+      },
+      ctx.auth?.output
+    );
+    let res = await traceProviderCall(
+      {
+        component: "action",
+        functionName: "expandWebhook",
+        message: `Expanding webhook delivery for trigger group ${formatEntityLabel(group.name, group.key)}`,
+        successMessage: `Expanded webhook delivery for trigger group ${formatEntityLabel(group.name, group.key)}`,
+        errorMessage: `Trigger group ${formatEntityLabel(group.name, group.key)} failed while expanding a webhook delivery`,
+        metadata: { triggerGroupId: group.key, triggerGroupName: group.name }
+      },
+      () => (0, import_provider2.runWithContext)(
+        context,
+        async () => validate(
+          import_proto.slatesTriggerGroupWebhookExpansionResult,
+          await expand(context),
+          "trigger_group.webhook.expansion",
+          "Webhook expansion returned an invalid result"
+        )
+      )
+    );
+    return withRequestTraces(context, {
+      ...res.updatedState !== void 0 ? { updatedState: res.updatedState } : {},
+      events: res.events.map((event) => ({
+        ...event,
+        triggerIds: evaluateTriggerMatches(slate, group.key, event.payload)
+      }))
+    });
+  });
   manager.onRequest("slates/trigger_group.routing_matchers.get", async ({ params }) => {
     let ctx = getContextFull();
     let group = getTriggerGroup(slate, params.triggerGroupId);
@@ -1572,7 +1746,14 @@ var createProviderHandler = (slate, listeners) => (0, import_proto.createSlatesP
         })
       );
     }
-    let context = createContext(ctx.config, { state: params.state }, ctx.auth?.output);
+    let context = createContext(
+      ctx.config,
+      {
+        state: params.state,
+        selection: validateTriggerGroupSelection(group, params.selection)
+      },
+      ctx.auth?.output
+    );
     let res = await traceProviderCall(
       {
         component: "action",

package/dist/index.module.js

@@ -7,7 +7,10 @@ import {
 } from "@lowerdeck/error";
 import {
   createSlatesProviderProtoHandler,
-  SLATES_PROTOCOL_VERSION
+  SLATES_PROTOCOL_VERSION,
+  slatesTriggerGroupWebhookDeliveryAuthentication,
+  slatesTriggerGroupWebhookExpansionResult,
+  slatesTriggerGroupWebhookRegistrationResult
 } from "@slates/proto";
 import {
   AuthConfigSecretRedactor,
@@ -61,7 +64,8 @@ var validate = (schema, data, entity, message) => {
   }
   return result.data;
 };
-var toJsonSchema = (schema) => schema.toJSONSchema({
+var toJsonSchema = (schema, io = "output") => schema.toJSONSchema({
+  io,
   unrepresentable: "any",
   override: (ctx) => {
     let def = ctx.zodSchema._zod.def;
@@ -224,15 +228,30 @@ var getWebhookAutoRegistration = (group) => {
   return group.webhook.autoRegistration;
 };
 var getWebhookManualRegistration = (group) => {
-  if (group.source !== "webhook" || !group.webhook?.manualRegistration) {
+  let registration = group.source === "webhook" ? group.webhook?.manualRegistration ?? group.webhook?.deliveryConfig : void 0;
+  if (!registration) {
     throw new ServiceError2(
       badRequestError({
         message: `Trigger group does not support manual webhook registration: ${group.key}`
       })
     );
   }
-  return group.webhook.manualRegistration;
+  return registration;
 };
+var getWebhookDeliveryConfig = (group) => {
+  if (group.source !== "webhook" || !group.webhook?.deliveryConfig) {
+    throw new ServiceError2(
+      badRequestError({
+        message: `Trigger group does not support webhook delivery authentication: ${group.key}`
+      })
+    );
+  }
+  return group.webhook.deliveryConfig;
+};
+var mapWebhookConfigSchemas = (config) => ({
+  userConfigSchema: toJsonSchema(config.userConfigSchema),
+  fullConfigSchema: toJsonSchema(config.fullConfigSchema)
+});
 var mapToolCategory = (category) => ({
   id: category.key,
   name: category.name,
@@ -252,20 +271,24 @@ var mapTriggerGroup = (group) => ({
   name: group.name,
   description: group.description,
   metadata: group.metadata,
+  ...group.selectionSchema ? { selectionSchema: toJsonSchema(group.selectionSchema, "input") } : {},
   invocation: group.source === "polling" ? {
     type: "polling",
     intervalSeconds: group.polling?.intervalSeconds ?? SlateDefaultPollingIntervalSeconds
   } : group.source === "gateway" ? { type: "gateway" } : {
     type: "webhook",
+    ...group.webhook?.expandWebhook ? { supportsExpansion: true } : {},
+    ...group.webhook?.autoRegistration?.webhookRenew ? { supportsRenewal: true } : {},
+    ...group.webhook?.reconcileIntervalSeconds !== void 0 ? { reconcileIntervalSeconds: group.webhook.reconcileIntervalSeconds } : {},
     registration: group.webhook?.manualRegistration ? {
       mode: "manual",
-      userConfigSchema: toJsonSchema(
-        group.webhook.manualRegistration.userConfigSchema
-      ),
-      fullConfigSchema: toJsonSchema(
-        group.webhook.manualRegistration.fullConfigSchema
-      )
-    } : { mode: "auto" }
+      ...mapWebhookConfigSchemas(group.webhook.manualRegistration)
+    } : {
+      mode: "auto",
+      ...group.webhook?.deliveryConfig ? {
+        deliveryConfig: mapWebhookConfigSchemas(group.webhook.deliveryConfig)
+      } : {}
+    }
   }
 });
 
@@ -342,6 +365,23 @@ var serializeWebhookHttpResponse = async (response) => {
 
 // src/index.ts
 var DEFAULT_MAX_ATTACHMENT_SIZE_BYTES = 1e8;
+var validateTriggerGroupSelection = (group, selection) => group.selectionSchema ? validate(
+  group.selectionSchema,
+  selection === void 0 ? {} : selection,
+  "trigger_group.selection",
+  `Invalid selection for trigger group "${group.key}"`
+) : selection ?? {};
+var validateWebhookRegistration = (result) => validate(
+  slatesTriggerGroupWebhookRegistrationResult,
+  result,
+  "trigger_group.webhook.registration",
+  "Webhook registration returned an invalid result"
+);
+var toWebhookRequest = (params) => new Request(params.url, {
+  method: params.method,
+  headers: params.headers,
+  body: params.body ? Uint8Array.from(atob(params.body.content), (c) => c.charCodeAt(0)) : null
+});
 var routeAttachmentsThroughDirectUpload = async (attachments, live) => {
   if (!attachments || attachments.length === 0 || !live) return attachments;
   let contentEntries = attachments.map((attachment, index) => ({ attachment, index })).filter((entry) => entry.attachment.content.type === "content");
@@ -1308,7 +1348,10 @@ var createProviderHandler = (slate, listeners) => createSlatesProviderProtoHandl
     let autoRegistration = getWebhookAutoRegistration(group);
     let context = createContext(
       ctx.config,
-      { pageToken: params.pageToken ?? null },
+      {
+        pageToken: params.pageToken ?? null,
+        selection: validateTriggerGroupSelection(group, params.selection)
+      },
       ctx.auth?.output
     );
     let res = await traceProviderCall(
@@ -1344,7 +1387,10 @@ var createProviderHandler = (slate, listeners) => createSlatesProviderProtoHandl
       {
         webhookTargetIdentifier: params.webhookTargetIdentifier,
         webhookTargetPayload: params.webhookTargetPayload,
-        webhookUrl: params.webhookUrl
+        webhookUrl: params.webhookUrl,
+        operationId: params.operationId,
+        selection: validateTriggerGroupSelection(group, params.selection),
+        deliveryConfig: params.deliveryConfig
       },
       ctx.auth?.output
     );
@@ -1361,12 +1407,54 @@ var createProviderHandler = (slate, listeners) => createSlatesProviderProtoHandl
           webhookTargetIdentifier: params.webhookTargetIdentifier
         }
       },
-      () => runWithContext(context, () => autoRegistration.webhookRegister(context))
+      () => runWithContext(
+        context,
+        async () => validateWebhookRegistration(await autoRegistration.webhookRegister(context))
+      )
     );
-    return withRequestTraces(context, {
-      webhookRegistrationIdentifier: res.webhookRegistrationIdentifier,
-      webhookRegistrationPayload: res.webhookRegistrationPayload
-    });
+    return withRequestTraces(context, res);
+  });
+  manager.onRequest("slates/trigger_group.webhook.renew", async ({ params }) => {
+    let ctx = getContextFull();
+    let group = getTriggerGroup(slate, params.triggerGroupId);
+    let autoRegistration = getWebhookAutoRegistration(group);
+    let renew = autoRegistration.webhookRenew;
+    if (!renew) {
+      throw new ServiceError4(
+        badRequestError3({
+          message: `Trigger group does not support webhook renewal: ${params.triggerGroupId}`
+        })
+      );
+    }
+    let context = createContext(
+      ctx.config,
+      {
+        webhookRegistrationIdentifier: params.webhookRegistrationIdentifier,
+        webhookRegistrationPayload: params.webhookRegistrationPayload,
+        webhookUrl: params.webhookUrl,
+        webhookTargetIdentifier: params.webhookTargetIdentifier,
+        webhookTargetPayload: params.webhookTargetPayload,
+        operationId: params.operationId,
+        selection: validateTriggerGroupSelection(group, params.selection),
+        deliveryConfig: params.deliveryConfig
+      },
+      ctx.auth?.output
+    );
+    let res = await traceProviderCall(
+      {
+        component: "action",
+        functionName: "webhookRenew",
+        message: `Renewing webhook for trigger group ${formatEntityLabel(group.name, group.key)}`,
+        successMessage: `Renewed webhook for trigger group ${formatEntityLabel(group.name, group.key)}`,
+        errorMessage: `Trigger group ${formatEntityLabel(group.name, group.key)} failed while renewing a webhook`,
+        metadata: { triggerGroupId: group.key, triggerGroupName: group.name }
+      },
+      () => runWithContext(
+        context,
+        async () => validateWebhookRegistration(await renew(context))
+      )
+    );
+    return withRequestTraces(context, res);
   });
   manager.onRequest("slates/trigger_group.webhook.unregister", async ({ params }) => {
     let ctx = getContextFull();
@@ -1468,15 +1556,10 @@ var createProviderHandler = (slate, listeners) => createSlatesProviderProtoHandl
         })
       );
     }
-    let req = new Request(params.url, {
-      method: params.method,
-      headers: params.headers,
-      body: params.body ? Uint8Array.from(atob(params.body.content), (c) => c.charCodeAt(0)) : null
-    });
     let context = createContext(
       {},
       {
-        request: req,
+        request: toWebhookRequest(params),
         webhookRegistrationPayload: params.webhookRegistrationPayload
       },
       {}
@@ -1517,12 +1600,106 @@ var createProviderHandler = (slate, listeners) => createSlatesProviderProtoHandl
         matchers: event.matchers,
         payload: event.payload,
         idempotencyKey: event.idempotencyKey,
-        triggerIds: evaluateTriggerMatches(slate, group.key, event.payload)
+        triggerIds: group.webhook?.expandWebhook ? [] : evaluateTriggerMatches(slate, group.key, event.payload)
       })),
+      ...group.webhook?.expandWebhook ? { requiresExpansion: true } : {},
       response,
       skipped: res.skipped ?? null
     });
   });
+  manager.onRequest(
+    "slates/trigger_group.webhook.delivery_authenticate",
+    async ({ params }) => {
+      let group = getTriggerGroup(slate, params.triggerGroupId);
+      let deliveryConfig = getWebhookDeliveryConfig(group);
+      let context = createContext(
+        {},
+        {
+          request: toWebhookRequest(params),
+          deliveryConfig: params.deliveryConfig
+        },
+        {}
+      );
+      let res = await traceProviderCall(
+        {
+          component: "action",
+          functionName: "webhookDeliveryAuthenticate",
+          message: `Authenticating a delivery for trigger group ${formatEntityLabel(group.name, group.key)}`,
+          successMessage: (result) => result.rejected ? `Rejected a delivery with status ${result.rejected.status} for trigger group ${formatEntityLabel(group.name, group.key)}` : `Authenticated a delivery for ${result.routingKeys.length} routing key(s) for trigger group ${formatEntityLabel(group.name, group.key)}`,
+          errorMessage: `Trigger group ${formatEntityLabel(group.name, group.key)} failed while authenticating a delivery`,
+          metadata: {
+            triggerGroupId: group.key,
+            triggerGroupName: group.name,
+            requestMethod: params.method,
+            hasRequestBody: !!params.body
+          },
+          onSuccess: (result) => ({
+            routingKeyCount: result.routingKeys.length,
+            rejectedStatus: result.rejected?.status ?? null
+          })
+        },
+        () => runWithContext(context, async () => {
+          let authentication = await deliveryConfig.authenticate(context);
+          return validate(
+            slatesTriggerGroupWebhookDeliveryAuthentication,
+            authentication.rejected ? { routingKeys: [], rejected: authentication.rejected } : { routingKeys: authentication.routingKeys, rejected: null },
+            "trigger_group.webhook.delivery_authentication",
+            "Webhook delivery authentication returned an invalid result"
+          );
+        })
+      );
+      return withRequestTraces(context, res);
+    }
+  );
+  manager.onRequest("slates/trigger_group.webhook.expand", async ({ params }) => {
+    let ctx = getContextFull();
+    let group = getTriggerGroup(slate, params.triggerGroupId);
+    let expand = group.source === "webhook" ? group.webhook?.expandWebhook : void 0;
+    if (!expand) {
+      throw new ServiceError4(
+        badRequestError3({
+          message: `Trigger group does not support webhook expansion: ${params.triggerGroupId}`
+        })
+      );
+    }
+    let context = createContext(
+      ctx.config,
+      {
+        payload: params.payload,
+        state: params.state ?? null,
+        selection: validateTriggerGroupSelection(group, params.selection),
+        deliveryId: params.deliveryId,
+        webhookRegistrationPayload: params.webhookRegistrationPayload
+      },
+      ctx.auth?.output
+    );
+    let res = await traceProviderCall(
+      {
+        component: "action",
+        functionName: "expandWebhook",
+        message: `Expanding webhook delivery for trigger group ${formatEntityLabel(group.name, group.key)}`,
+        successMessage: `Expanded webhook delivery for trigger group ${formatEntityLabel(group.name, group.key)}`,
+        errorMessage: `Trigger group ${formatEntityLabel(group.name, group.key)} failed while expanding a webhook delivery`,
+        metadata: { triggerGroupId: group.key, triggerGroupName: group.name }
+      },
+      () => runWithContext(
+        context,
+        async () => validate(
+          slatesTriggerGroupWebhookExpansionResult,
+          await expand(context),
+          "trigger_group.webhook.expansion",
+          "Webhook expansion returned an invalid result"
+        )
+      )
+    );
+    return withRequestTraces(context, {
+      ...res.updatedState !== void 0 ? { updatedState: res.updatedState } : {},
+      events: res.events.map((event) => ({
+        ...event,
+        triggerIds: evaluateTriggerMatches(slate, group.key, event.payload)
+      }))
+    });
+  });
   manager.onRequest("slates/trigger_group.routing_matchers.get", async ({ params }) => {
     let ctx = getContextFull();
     let group = getTriggerGroup(slate, params.triggerGroupId);
@@ -1556,7 +1733,14 @@ var createProviderHandler = (slate, listeners) => createSlatesProviderProtoHandl
         })
       );
     }
-    let context = createContext(ctx.config, { state: params.state }, ctx.auth?.output);
+    let context = createContext(
+      ctx.config,
+      {
+        state: params.state,
+        selection: validateTriggerGroupSelection(group, params.selection)
+      },
+      ctx.auth?.output
+    );
     let res = await traceProviderCall(
       {
         component: "action",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@slates/provider-handler",
-  "version": "1.0.0-rc.43",
+  "version": "1.0.0-rc.44",
   "publishConfig": {
     "access": "public"
   },
@@ -32,8 +32,8 @@
   },
   "dependencies": {
     "@lowerdeck/error": "^1.1.0",
-    "@slates/proto": "1.0.0-rc.28",
-    "@slates/provider": "1.0.0-rc.33",
+    "@slates/proto": "1.0.0-rc.29",
+    "@slates/provider": "1.0.0-rc.34",
     "p-queue": "^6.6.2",
     "zod": "^4.2.1"
   },