@xyne/workflow-sdk 3.2.29 → 3.2.32

package/dist/testing/mock-step-context.d.ts

@@ -2,6 +2,7 @@ import type { StepExecutionContext, ControlFlowExecutionContext } from '../steps
 import { ServiceRegistry } from '../engine/service-registry.js';
 import type { WorkflowContext } from '../types/context.js';
 import type { StepProgressEvent } from '../types/step-events.js';
+import type { ResolvedCredential, AuthSpecificValues, CredentialAuthType, CredentialStatus } from '../common/credentials.js';
 interface MockStepContextOptions<TServices extends Record<string, unknown> = Record<string, unknown>> {
     /** Override the full workflow context. */
     workflow?: WorkflowContext;
@@ -9,8 +10,6 @@ interface MockStepContextOptions<TServices extends Record<string, unknown> = Rec
     runtime?: Partial<StepExecutionContext['runtime']>;
     /** Provide a pre-built ServiceRegistry. */
     services?: ServiceRegistry<TServices>;
-    /** Pre-resolved credentials. */
-    credentials?: StepExecutionContext['credentials'];
     /** Override static data methods. */
     staticData?: Partial<StepExecutionContext['staticData']>;
     /** Override logger methods. */
@@ -25,6 +24,8 @@ interface MockStepContextOptions<TServices extends Record<string, unknown> = Rec
     storage?: StepExecutionContext['storage'];
     /** Inject a sandbox adapter (code execution). */
     sandbox?: StepExecutionContext['sandbox'];
+    /** Inject credentials already resolved by the executor. */
+    credentials?: StepExecutionContext<TServices>['credentials'];
 }
 /**
  * Create a mock StepExecutionContext for testing action steps.
@@ -49,5 +50,9 @@ export declare function createMockControlFlowContext<TServices extends Record<st
         branchKey: string | undefined;
     }>;
 };
+export declare function mockResolvedCredential(authType: CredentialAuthType, values: AuthSpecificValues, opts?: {
+    name?: string;
+    status?: CredentialStatus;
+}): ResolvedCredential;
 export {};
 //# sourceMappingURL=mock-step-context.d.ts.map

package/dist/testing/mock-step-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mock-step-context.d.ts","sourceRoot":"","sources":["../../src/testing/mock-step-context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,oBAAoB,EACpB,2BAA2B,EAC5B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAGjE,UAAU,sBAAsB,CAC9B,SAAS,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAEnE,0CAA0C;IAC1C,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,iCAAiC;IACjC,OAAO,CAAC,EAAE,OAAO,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC;IACnD,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;IACtC,gCAAgC;IAChC,WAAW,CAAC,EAAE,oBAAoB,CAAC,aAAa,CAAC,CAAC;IAClD,oCAAoC;IACpC,UAAU,CAAC,EAAE,OAAO,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC,CAAC;IACzD,+BAA+B;IAC/B,GAAG,CAAC,EAAE,OAAO,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3C,8BAA8B;IAC9B,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,CAAC;IAC1C,mEAAmE;IACnE,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/C,yEAAyE;IACzE,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,0DAA0D;IAC1D,OAAO,CAAC,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC1C,iDAAiD;IACjD,OAAO,CAAC,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;CAC3C;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,SAAS,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAEnE,OAAO,CAAC,EAAE,sBAAsB,CAAC,SAAS,CAAC,GAC1C,oBAAoB,CAAC,SAAS,CAAC,CAqCjC;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,SAAS,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAEnE,OAAO,CAAC,EAAE,sBAAsB,CAAC,SAAS,CAAC,GAAG;IAC5C,wDAAwD;IACxD,UAAU,CAAC,EAAE,2BAA2B,CAAC,YAAY,CAAC,CAAC;CACxD,GACA,2BAA2B,CAAC,SAAS,CAAC,GAAG;IAC1C,iDAAiD;IACjD,eAAe,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAAC,OAAO,EAAE,eAAe,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,CAAC,CAAC;CACvG,CAaA"}
+{"version":3,"file":"mock-step-context.d.ts","sourceRoot":"","sources":["../../src/testing/mock-step-context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,oBAAoB,EACpB,2BAA2B,EAC5B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,OAAO,KAAK,EACV,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,gBAAgB,EACjB,MAAM,0BAA0B,CAAC;AAGlC,UAAU,sBAAsB,CAC9B,SAAS,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAEnE,0CAA0C;IAC1C,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,iCAAiC;IACjC,OAAO,CAAC,EAAE,OAAO,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC;IACnD,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;IACtC,oCAAoC;IACpC,UAAU,CAAC,EAAE,OAAO,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC,CAAC;IACzD,+BAA+B;IAC/B,GAAG,CAAC,EAAE,OAAO,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3C,8BAA8B;IAC9B,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,CAAC;IAC1C,mEAAmE;IACnE,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/C,yEAAyE;IACzE,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,0DAA0D;IAC1D,OAAO,CAAC,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC1C,iDAAiD;IACjD,OAAO,CAAC,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC1C,2DAA2D;IAC3D,WAAW,CAAC,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC,CAAC;CAC9D;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,SAAS,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAEnE,OAAO,CAAC,EAAE,sBAAsB,CAAC,SAAS,CAAC,GAC1C,oBAAoB,CAAC,SAAS,CAAC,CAqCjC;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,SAAS,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAEnE,OAAO,CAAC,EAAE,sBAAsB,CAAC,SAAS,CAAC,GAAG;IAC5C,wDAAwD;IACxD,UAAU,CAAC,EAAE,2BAA2B,CAAC,YAAY,CAAC,CAAC;CACxD,GACA,2BAA2B,CAAC,SAAS,CAAC,GAAG;IAC1C,iDAAiD;IACjD,eAAe,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAAC,OAAO,EAAE,eAAe,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,CAAC,CAAC;CACvG,CAaA;AAED,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,kBAAkB,EAC5B,MAAM,EAAE,kBAAkB,EAC1B,IAAI,CAAC,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,gBAAgB,CAAA;CAAE,GAClD,kBAAkB,CAMpB"}

package/dist/testing/mock-step-context.js

@@ -1,6 +1,7 @@
 import { createPauseFunction } from '../steps/base-step.js';
 import { ServiceRegistry } from '../engine/service-registry.js';
 import { createMockContext } from './mock-context.js';
+import { validateCredentialAuth } from '../common/credentials.js';
 /**
  * Create a mock StepExecutionContext for testing action steps.
  *
@@ -26,9 +27,9 @@ export function createMockStepContext(options) {
         ...(options?.rawConfig ? { rawConfig: options.rawConfig } : {}),
         ...(options?.storage ? { storage: options.storage } : {}),
         ...(options?.sandbox ? { sandbox: options.sandbox } : {}),
+        credentials: options?.credentials ?? {},
         services: options?.services ??
             new ServiceRegistry(),
-        credentials: options?.credentials ?? {},
         staticData: {
             get: options?.staticData?.get ?? (() => Promise.resolve(undefined)),
             set: options?.staticData?.set ?? noopAsync,
@@ -60,4 +61,11 @@ export function createMockControlFlowContext(options) {
         walkBranchCalls: calls,
     };
 }
+export function mockResolvedCredential(authType, values, opts) {
+    return {
+        name: opts?.name ?? `mock_${authType}`,
+        status: opts?.status ?? 'ACTIVE',
+        ...validateCredentialAuth(authType, values),
+    };
+}
 //# sourceMappingURL=mock-step-context.js.map

package/dist/testing/mock-step-context.js.map

@@ -1 +1 @@
-{"version":3,"file":"mock-step-context.js","sourceRoot":"","sources":["../../src/testing/mock-step-context.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAIhE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AA6BtD;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAGnC,OAA2C;IAE3C,MAAM,IAAI,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;IACtB,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IAE1C,OAAO;QACL,QAAQ,EAAE,OAAO,EAAE,QAAQ,IAAI,iBAAiB,EAAE;QAClD,OAAO,EAAE;YACP,WAAW,EAAE,WAAW;YACxB,MAAM,EAAE,cAAc;YACtB,QAAQ,EAAE,WAAW;YACrB,UAAU,EAAE,KAAK;YACjB,UAAU,EAAE,SAA2C;YACvD,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,EAAE;YACX,GAAG,OAAO,EAAE,OAAO;SACpB;QACD,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,QAAQ,EACN,OAAO,EAAE,QAAQ;YAChB,IAAI,eAAe,EAA4C;QAClE,WAAW,EAAE,OAAO,EAAE,WAAW,IAAI,EAAE;QACvC,UAAU,EAAE;YACV,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACnE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,SAAS;YAC1C,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,SAAS;SACjD;QACD,KAAK,EAAE,mBAAmB,EAAE;QAC5B,IAAI,EAAE,OAAO,EAAE,IAAI,IAAI,IAAI;QAC3B,GAAG,EAAE;YACH,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,IAAI,IAAI;YAChC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,IAAI,IAAI;YAChC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,IAAI,IAAI;SACnC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAG1C,OAGC;IAKD,MAAM,KAAK,GAAyF,EAAE,CAAC;IACvG,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAE/C,OAAO;QACL,GAAG,OAAO;QACV,UAAU,EACR,OAAO,EAAE,UAAU;YACnB,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE;gBACnC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;YAC5C,CAAC,CAAC;QACJ,eAAe,EAAE,KAAK;KACvB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"mock-step-context.js","sourceRoot":"","sources":["../../src/testing/mock-step-context.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAIhE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAOtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AA6BlE;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAGnC,OAA2C;IAE3C,MAAM,IAAI,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;IACtB,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IAE1C,OAAO;QACL,QAAQ,EAAE,OAAO,EAAE,QAAQ,IAAI,iBAAiB,EAAE;QAClD,OAAO,EAAE;YACP,WAAW,EAAE,WAAW;YACxB,MAAM,EAAE,cAAc;YACtB,QAAQ,EAAE,WAAW;YACrB,UAAU,EAAE,KAAK;YACjB,UAAU,EAAE,SAA2C;YACvD,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,EAAE;YACX,GAAG,OAAO,EAAE,OAAO;SACpB;QACD,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,WAAW,EAAE,OAAO,EAAE,WAAW,IAAI,EAAE;QACvC,QAAQ,EACN,OAAO,EAAE,QAAQ;YAChB,IAAI,eAAe,EAA4C;QAClE,UAAU,EAAE;YACV,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACnE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,SAAS;YAC1C,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,SAAS;SACjD;QACD,KAAK,EAAE,mBAAmB,EAAE;QAC5B,IAAI,EAAE,OAAO,EAAE,IAAI,IAAI,IAAI;QAC3B,GAAG,EAAE;YACH,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,IAAI,IAAI;YAChC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,IAAI,IAAI;YAChC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,IAAI,IAAI;SACnC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAG1C,OAGC;IAKD,MAAM,KAAK,GAAyF,EAAE,CAAC;IACvG,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAE/C,OAAO;QACL,GAAG,OAAO;QACV,UAAU,EACR,OAAO,EAAE,UAAU;YACnB,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE;gBACnC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;YAC5C,CAAC,CAAC;QACJ,eAAe,EAAE,KAAK;KACvB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,QAA4B,EAC5B,MAA0B,EAC1B,IAAmD;IAEnD,OAAO;QACL,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,QAAQ,QAAQ,EAAE;QACtC,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,QAAQ;QAChC,GAAG,sBAAsB,CAAC,QAAQ,EAAE,MAAM,CAAC;KAC5C,CAAC;AACJ,CAAC"}

package/dist/triggers/webhook-trigger.d.ts

@@ -20,11 +20,7 @@ export interface WebhookHandleResult {
 export interface WebhookActivationContext {
     /** The full URL the webhook will be reachable at. */
     webhookUrl: string;
-    /** Resolved credentials if the trigger declares credentialSlots. */
-    credentials: Record<string, {
-        type: string;
-        data: Record<string, unknown>;
-    }>;
+    credentials: Record<string, never>;
 }
 /**
  * Webhook trigger — fires when an external HTTP request hits the webhook URL.

package/dist/triggers/webhook-trigger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"webhook-trigger.d.ts","sourceRoot":"","sources":["../../src/triggers/webhook-trigger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAIhD,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IACvD,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;CACtD;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,yDAAyD;IACzD,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,qDAAqD;IACrD,YAAY,EAAE,eAAe,CAAC;CAC/B;AAED,MAAM,WAAW,wBAAwB;IACvC,qDAAqD;IACrD,UAAU,EAAE,MAAM,CAAC;IACnB,oEAAoE;IACpE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;CAC9E;AAID;;;;;;;GAOG;AACH,8BAAsB,cAAc,CAClC,OAAO,SAAS,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAC3C,SAAQ,WAAW,CAAC,OAAO,CAAC;IAC5B;;;OAGG;IACH,QAAQ,CAAC,aAAa,CACpB,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GACvB,OAAO,CAAC,mBAAmB,CAAC;IAE/B;;;OAGG;IACH,UAAU,CAAC,CACT,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EACxB,GAAG,EAAE,wBAAwB,GAC5B,OAAO,CAAC,IAAI,CAAC;IAEhB;;;OAGG;IACH,YAAY,CAAC,CACX,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EACxB,GAAG,EAAE,wBAAwB,GAC5B,OAAO,CAAC,IAAI,CAAC;CACjB"}
+{"version":3,"file":"webhook-trigger.d.ts","sourceRoot":"","sources":["../../src/triggers/webhook-trigger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAIhD,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IACvD,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;CACtD;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,yDAAyD;IACzD,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,qDAAqD;IACrD,YAAY,EAAE,eAAe,CAAC;CAC/B;AAED,MAAM,WAAW,wBAAwB;IACvC,qDAAqD;IACrD,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;CACpC;AAID;;;;;;;GAOG;AACH,8BAAsB,cAAc,CAClC,OAAO,SAAS,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAC3C,SAAQ,WAAW,CAAC,OAAO,CAAC;IAC5B;;;OAGG;IACH,QAAQ,CAAC,aAAa,CACpB,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GACvB,OAAO,CAAC,mBAAmB,CAAC;IAE/B;;;OAGG;IACH,UAAU,CAAC,CACT,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EACxB,GAAG,EAAE,wBAAwB,GAC5B,OAAO,CAAC,IAAI,CAAC;IAEhB;;;OAGG;IACH,YAAY,CAAC,CACX,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EACxB,GAAG,EAAE,wBAAwB,GAC5B,OAAO,CAAC,IAAI,CAAC;CACjB"}

package/dist/triggers/webhook-trigger.js.map

@@ -1 +1 @@
-{"version":3,"file":"webhook-trigger.js","sourceRoot":"","sources":["../../src/triggers/webhook-trigger.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AA+BhD,yBAAyB;AAEzB;;;;;;;GAOG;AACH,MAAM,OAAgB,cAEpB,SAAQ,WAAoB;CA2B7B"}
+{"version":3,"file":"webhook-trigger.js","sourceRoot":"","sources":["../../src/triggers/webhook-trigger.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AA8BhD,yBAAyB;AAEzB;;;;;;;GAOG;AACH,MAAM,OAAgB,cAEpB,SAAQ,WAAoB;CA2B7B"}

package/dist/types/attachment.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Attachment — opaque reference to a file managed by the host's StorageAdapter.
+ *
+ * Used everywhere the framework carries a file:
+ * - Trigger inputs (uploaded via `POST /uploads`, attached to `context.trigger.attachments`)
+ * - Resume payloads (uploaded with feedback in a review-gate retry)
+ * - Step inputs (rerunFromStep with attachments in configOverrides)
+ *
+ * The framework never opens `data` — it's a host-defined reference (URL,
+ * blob ID, signed token, `mem://uuid`). Steps that need the bytes call
+ * `StorageAdapter.read()` via a service the host registers.
+ */
+export interface Attachment {
+    /** Original filename — e.g. "contract.pdf". */
+    name: string;
+    /** MIME type — e.g. "application/pdf", "image/png". */
+    mimeType: string;
+    /** Opaque host reference. Framework treats this as a string. */
+    data: string;
+    /** Size in bytes — set by storage after upload. Useful for UI display + size budgets. */
+    size?: number;
+}
+//# sourceMappingURL=attachment.d.ts.map

package/dist/types/attachment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment.d.ts","sourceRoot":"","sources":["../../src/types/attachment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,UAAU;IACzB,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,QAAQ,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,IAAI,EAAE,MAAM,CAAC;IACb,yFAAyF;IACzF,IAAI,CAAC,EAAE,MAAM,CAAC;CACf"}

package/dist/types/attachment.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=attachment.js.map

package/dist/types/attachment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment.js","sourceRoot":"","sources":["../../src/types/attachment.ts"],"names":[],"mappings":""}

package/dist/types/resume-payload.d.ts

@@ -0,0 +1,34 @@
+/**
+ * ResumePayload — the unified shape for resuming a paused execution.
+ *
+ * One contract for every pause type:
+ * - Mid-execution agent pauses (tool approval, input required, user interrupted)
+ * - Review gates (`onComplete: 'review'`)
+ *
+ * The router validates incoming bodies into this shape; persistence stores it
+ * verbatim; the executor and step `onResume` handlers consume it.
+ */
+import type { Attachment } from './attachment.js';
+/**
+ * Alias for {@link Attachment} kept for clarity at call sites that historically
+ * said "resume attachment". The shape is shared across the framework.
+ */
+export type ResumeAttachment = Attachment;
+/**
+ * What the user decided.
+ * - `approve`: continue from a mid-pause OR advance past a review gate
+ * - `retry`:   re-execute the current step with `priorState` + `feedback` (review gate)
+ * - `abort`:   cancel the execution
+ */
+export type ResumeAction = 'approve' | 'retry' | 'abort';
+/** Payload from the host when resuming a paused execution. */
+export interface ResumePayload {
+    action: ResumeAction;
+    /** User-provided text input (form feedback, instruction, additional context). */
+    feedback?: string;
+    /** Files uploaded alongside the feedback. Opaque references — host resolves. */
+    attachments?: ResumeAttachment[];
+    /** Step-specific extras from custom form fields. Opaque to the framework. */
+    data?: Record<string, unknown>;
+}
+//# sourceMappingURL=resume-payload.d.ts.map

package/dist/types/resume-payload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume-payload.d.ts","sourceRoot":"","sources":["../../src/types/resume-payload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAElD;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,UAAU,CAAC;AAE1C;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;AAEzD,8DAA8D;AAC9D,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,YAAY,CAAC;IACrB,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gFAAgF;IAChF,WAAW,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACjC,6EAA6E;IAC7E,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC"}

package/dist/types/resume-payload.js

@@ -0,0 +1,12 @@
+/**
+ * ResumePayload — the unified shape for resuming a paused execution.
+ *
+ * One contract for every pause type:
+ * - Mid-execution agent pauses (tool approval, input required, user interrupted)
+ * - Review gates (`onComplete: 'review'`)
+ *
+ * The router validates incoming bodies into this shape; persistence stores it
+ * verbatim; the executor and step `onResume` handlers consume it.
+ */
+export {};
+//# sourceMappingURL=resume-payload.js.map

package/dist/types/resume-payload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume-payload.js","sourceRoot":"","sources":["../../src/types/resume-payload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG"}

package/dist/util/executable-check.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Executable upload safety check.
+ *
+ * Allow-by-default with a deny-list of known dangerous types — covers the
+ * common attack surface (native binaries, scripts that auto-run, installers,
+ * macro-enabled Office docs) without forcing workflow authors to enumerate
+ * every safe MIME type.
+ *
+ * Two checks run in parallel so spoofed MIME types alone can't bypass:
+ *   1. MIME type matches the deny-list
+ *   2. Filename extension matches the deny-list
+ *
+ * Either match blocks the upload. To accept executables (e.g. a security-
+ * analysis workflow that intentionally examines binaries), the host opts
+ * in via `RuntimeOptions.allowExecutableUploads = true`.
+ */
+/**
+ * MIME types treated as executable / unsafe (lowercase — input is also
+ * lowercased before comparison).
+ */
+export declare const BLOCKED_EXECUTABLE_MIME_TYPES: ReadonlySet<string>;
+/**
+ * File extensions treated as executable / unsafe (case-insensitive, no dot).
+ * The check uses the LAST extension so `report.exe.txt` is treated as text
+ * (Windows shows the trailing extension, which is what the user actually sees).
+ */
+export declare const BLOCKED_EXECUTABLE_EXTENSIONS: ReadonlySet<string>;
+/**
+ * Extract the lowercase extension (no dot) from a filename, or '' if none.
+ * A leading dot doesn't count — `.bashrc` has no extension, not "bashrc".
+ */
+export declare function extensionOf(name: string): string;
+/**
+ * Returns a human-readable reason if the file should be blocked as
+ * executable, or `null` if it's safe.
+ *
+ * Always check both the MIME type and the filename — clients can spoof one
+ * but rarely both. This is defense-in-depth, not authoritative malware
+ * detection (run real AV at the storage layer for that).
+ */
+export declare function isExecutable(mimeType: string, name: string): string | null;
+//# sourceMappingURL=executable-check.d.ts.map

package/dist/util/executable-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executable-check.d.ts","sourceRoot":"","sources":["../../src/util/executable-check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH;;;GAGG;AACH,eAAO,MAAM,6BAA6B,EAAE,WAAW,CAAC,MAAM,CAwC5D,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,EAAE,WAAW,CAAC,MAAM,CAmB5D,CAAC;AAEH;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAIhD;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAS1E"}

package/dist/util/executable-check.js

@@ -0,0 +1,115 @@
+/**
+ * Executable upload safety check.
+ *
+ * Allow-by-default with a deny-list of known dangerous types — covers the
+ * common attack surface (native binaries, scripts that auto-run, installers,
+ * macro-enabled Office docs) without forcing workflow authors to enumerate
+ * every safe MIME type.
+ *
+ * Two checks run in parallel so spoofed MIME types alone can't bypass:
+ *   1. MIME type matches the deny-list
+ *   2. Filename extension matches the deny-list
+ *
+ * Either match blocks the upload. To accept executables (e.g. a security-
+ * analysis workflow that intentionally examines binaries), the host opts
+ * in via `RuntimeOptions.allowExecutableUploads = true`.
+ */
+/**
+ * MIME types treated as executable / unsafe (lowercase — input is also
+ * lowercased before comparison).
+ */
+export const BLOCKED_EXECUTABLE_MIME_TYPES = new Set([
+    // Native binaries
+    'application/x-msdownload',
+    'application/x-msdos-program',
+    'application/x-executable',
+    'application/x-mach-binary',
+    'application/vnd.microsoft.portable-executable',
+    'application/x-msi',
+    'application/x-ms-installer',
+    // Shell + Windows scripts
+    'application/x-sh',
+    'application/x-shellscript',
+    'application/x-bat',
+    'application/x-csh',
+    'application/x-cmd',
+    'application/x-msmetafile',
+    // JavaScript / ECMAScript
+    'text/javascript',
+    'application/javascript',
+    'application/ecmascript',
+    'application/x-javascript',
+    // Java / Flash
+    'application/java-archive',
+    'application/x-java-archive',
+    'application/x-java-jnlp-file',
+    'application/x-shockwave-flash',
+    // Installer / package formats that bundle executables
+    'application/vnd.android.package-archive',
+    'application/x-debian-package',
+    'application/x-rpm',
+    // Macro-enabled Office documents (lowercased — IANA tokens are case-insensitive)
+    'application/vnd.ms-word.document.macroenabled.12',
+    'application/vnd.ms-word.template.macroenabled.12',
+    'application/vnd.ms-excel.sheet.macroenabled.12',
+    'application/vnd.ms-excel.template.macroenabled.12',
+    'application/vnd.ms-excel.addin.macroenabled.12',
+    'application/vnd.ms-excel.sheet.binary.macroenabled.12',
+    'application/vnd.ms-powerpoint.presentation.macroenabled.12',
+    'application/vnd.ms-powerpoint.template.macroenabled.12',
+    'application/vnd.ms-powerpoint.addin.macroenabled.12',
+]);
+/**
+ * File extensions treated as executable / unsafe (case-insensitive, no dot).
+ * The check uses the LAST extension so `report.exe.txt` is treated as text
+ * (Windows shows the trailing extension, which is what the user actually sees).
+ */
+export const BLOCKED_EXECUTABLE_EXTENSIONS = new Set([
+    // Windows
+    'exe', 'msi', 'com', 'scr', 'cmd', 'bat', 'ps1', 'psm1',
+    'vbs', 'vbe', 'wsf', 'wsh', 'hta', 'cpl', 'lnk',
+    'dll', 'sys', 'drv', 'ocx',
+    // macOS / Unix
+    'app', 'dmg', 'pkg',
+    'sh', 'bash', 'zsh', 'fish', 'csh', 'ksh', 'command', 'tool',
+    // Java / Flash
+    'jar', 'war', 'jnlp', 'swf',
+    // Mobile installers
+    'apk', 'ipa', 'xap',
+    // Linux installers
+    'deb', 'rpm', 'run', 'bin',
+    // JavaScript (auto-executes in browser / Node contexts)
+    'js', 'mjs', 'cjs',
+    // Macro-enabled Office
+    'docm', 'dotm', 'xlsm', 'xltm', 'xlam', 'xlsb',
+    'pptm', 'potm', 'ppam', 'ppsm', 'sldm',
+]);
+/**
+ * Extract the lowercase extension (no dot) from a filename, or '' if none.
+ * A leading dot doesn't count — `.bashrc` has no extension, not "bashrc".
+ */
+export function extensionOf(name) {
+    const dot = name.lastIndexOf('.');
+    if (dot <= 0 || dot === name.length - 1)
+        return '';
+    return name.slice(dot + 1).toLowerCase();
+}
+/**
+ * Returns a human-readable reason if the file should be blocked as
+ * executable, or `null` if it's safe.
+ *
+ * Always check both the MIME type and the filename — clients can spoof one
+ * but rarely both. This is defense-in-depth, not authoritative malware
+ * detection (run real AV at the storage layer for that).
+ */
+export function isExecutable(mimeType, name) {
+    if (BLOCKED_EXECUTABLE_MIME_TYPES.has(mimeType.toLowerCase())) {
+        return `Executable MIME type "${mimeType}" is not allowed.`;
+    }
+    const ext = extensionOf(name);
+    if (ext && BLOCKED_EXECUTABLE_EXTENSIONS.has(ext)) {
+        return `Files with .${ext} extension are not allowed.`;
+    }
+    return null;
+}
+//# sourceMappingURL=executable-check.js.map

package/dist/util/executable-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executable-check.js","sourceRoot":"","sources":["../../src/util/executable-check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwB,IAAI,GAAG,CAAC;IACxE,kBAAkB;IAClB,0BAA0B;IAC1B,6BAA6B;IAC7B,0BAA0B;IAC1B,2BAA2B;IAC3B,+CAA+C;IAC/C,mBAAmB;IACnB,4BAA4B;IAC5B,0BAA0B;IAC1B,kBAAkB;IAClB,2BAA2B;IAC3B,mBAAmB;IACnB,mBAAmB;IACnB,mBAAmB;IACnB,0BAA0B;IAC1B,0BAA0B;IAC1B,iBAAiB;IACjB,wBAAwB;IACxB,wBAAwB;IACxB,0BAA0B;IAC1B,eAAe;IACf,0BAA0B;IAC1B,4BAA4B;IAC5B,8BAA8B;IAC9B,+BAA+B;IAC/B,sDAAsD;IACtD,yCAAyC;IACzC,8BAA8B;IAC9B,mBAAmB;IACnB,iFAAiF;IACjF,kDAAkD;IAClD,kDAAkD;IAClD,gDAAgD;IAChD,mDAAmD;IACnD,gDAAgD;IAChD,uDAAuD;IACvD,4DAA4D;IAC5D,wDAAwD;IACxD,qDAAqD;CACtD,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwB,IAAI,GAAG,CAAC;IACxE,UAAU;IACV,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM;IACvD,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;IAC/C,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;IAC1B,eAAe;IACf,KAAK,EAAE,KAAK,EAAE,KAAK;IACnB,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM;IAC5D,eAAe;IACf,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK;IAC3B,oBAAoB;IACpB,KAAK,EAAE,KAAK,EAAE,KAAK;IACnB,mBAAmB;IACnB,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;IAC1B,wDAAwD;IACxD,IAAI,EAAE,KAAK,EAAE,KAAK;IAClB,uBAAuB;IACvB,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAC9C,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CACvC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AAC3C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,IAAY;IACzD,IAAI,6BAA6B,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QAC9D,OAAO,yBAAyB,QAAQ,mBAAmB,CAAC;IAC9D,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,GAAG,IAAI,6BAA6B,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO,eAAe,GAAG,6BAA6B,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xyne/workflow-sdk",
-  "version": "3.2.29",
+  "version": "3.2.32",
   "description": "Workflow engine SDK — steps, triggers, executor, agents, and a framework-agnostic HTTP router.",
   "license": "UNLICENSED",
   "repository": {
@@ -90,7 +90,7 @@
     "test": "vitest run",
     "test:watch": "vitest",
     "test:coverage": "vitest run --coverage",
-    "prepublishOnly": "npm run typecheck && npm run build && npm test"
+    "prepublishOnly": "npm run typecheck && npm run build"
   },
   "dependencies": {
     "zod": "^3.25.76",

package/dist/authz/principal-field.d.ts

@@ -1,23 +0,0 @@
-/**
- * Schema-authoring helpers for principal-reference fields (approval `assignee`,
- * access grants). A field marked with one of these formats is rendered by the
- * UI's host-supplied `PrincipalPicker` slot; the stored value is an opaque
- * `{ kind, id }` reference the authorizer resolves. The SDK never interprets it.
- */
-/**
- * JSON Schema `format` marker for a principal reference. Whether the field holds
- * one principal or a list is the field's own `type` (`object` vs `array`) — the
- * builder derives multi-select from that, so a single format marker suffices.
- */
-export declare const PRINCIPAL_FORMAT = "principal";
-/**
- * Stamp `format: 'principal'` onto the named properties of a config JSON Schema,
- * so the builder renders the host's `PrincipalPicker` for them. Works for both
- * single (`type: 'object'`) and list (`type: 'array'`) fields — the author
- * declares the type; this only adds the marker.
- *
- * Mirrors {@link markAttachmentFields}. Use it in a step's
- * `decorateConfigSchema` for its `assignee`-style fields.
- */
-export declare function markPrincipalFields(jsonSchema: Record<string, unknown>, fields: readonly string[]): Record<string, unknown>;
-//# sourceMappingURL=principal-field.d.ts.map

package/dist/authz/principal-field.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"principal-field.d.ts","sourceRoot":"","sources":["../../src/authz/principal-field.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,cAAc,CAAC;AAE5C;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACnC,MAAM,EAAE,SAAS,MAAM,EAAE,GACxB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAWzB"}

package/dist/authz/principal-field.js

@@ -1,34 +0,0 @@
-/**
- * Schema-authoring helpers for principal-reference fields (approval `assignee`,
- * access grants). A field marked with one of these formats is rendered by the
- * UI's host-supplied `PrincipalPicker` slot; the stored value is an opaque
- * `{ kind, id }` reference the authorizer resolves. The SDK never interprets it.
- */
-/**
- * JSON Schema `format` marker for a principal reference. Whether the field holds
- * one principal or a list is the field's own `type` (`object` vs `array`) — the
- * builder derives multi-select from that, so a single format marker suffices.
- */
-export const PRINCIPAL_FORMAT = 'principal';
-/**
- * Stamp `format: 'principal'` onto the named properties of a config JSON Schema,
- * so the builder renders the host's `PrincipalPicker` for them. Works for both
- * single (`type: 'object'`) and list (`type: 'array'`) fields — the author
- * declares the type; this only adds the marker.
- *
- * Mirrors {@link markAttachmentFields}. Use it in a step's
- * `decorateConfigSchema` for its `assignee`-style fields.
- */
-export function markPrincipalFields(jsonSchema, fields) {
-    const props = jsonSchema['properties'];
-    if (!props)
-        return jsonSchema;
-    for (const field of fields) {
-        const prop = props[field];
-        if (!prop)
-            continue;
-        props[field] = { ...prop, format: PRINCIPAL_FORMAT };
-    }
-    return jsonSchema;
-}
-//# sourceMappingURL=principal-field.js.map

package/dist/authz/principal-field.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"principal-field.js","sourceRoot":"","sources":["../../src/authz/principal-field.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,CAAC;AAE5C;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CACjC,UAAmC,EACnC,MAAyB;IAEzB,MAAM,KAAK,GAAG,UAAU,CAAC,YAAY,CAExB,CAAC;IACd,IAAI,CAAC,KAAK;QAAE,OAAO,UAAU,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACvD,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC"}