@xyne/workflow-sdk 3.2.37 → 3.2.39

package/dist/testing/test-connector.d.ts

@@ -0,0 +1,40 @@
+/**
+ * A throwaway connector for tests.
+ *
+ * `ConnectorRegistry` has no `registerStep` on purpose — a component may only
+ * enter the system as part of a connector, because every check the registry
+ * makes depends on knowing the owner. That is right in production and
+ * inconvenient in a test that wants one fake step, so this wraps loose
+ * components in a connector named `test`.
+ */
+import { BaseConnector } from '../connectors/core/base-connector.js';
+import type { AnyStep, AnyTrigger } from '../connectors/core/base-connector.js';
+import { ConnectorRegistry } from '../connectors/core/connector-registry.js';
+import type { CredentialDefinition } from '../connectors/core/credentials.js';
+export declare class TestConnector extends BaseConnector {
+    readonly id = "test";
+    readonly version = "1.0.0";
+    readonly name = "Test";
+    readonly description = "Components under test";
+    /** Whatever the components under test accept; empty unless a case sets it. */
+    readonly credentials: readonly CredentialDefinition[];
+    readonly steps: readonly AnyStep[];
+    readonly triggers: readonly AnyTrigger[];
+    constructor(components?: {
+        steps?: readonly AnyStep[];
+        triggers?: readonly AnyTrigger[];
+        credentials?: readonly CredentialDefinition[];
+    });
+}
+/**
+ * A registry holding these components, under one test connector.
+ *
+ * The built-ins (CODE, WAIT, LOOP, …) come with every `ConnectorRegistry`, so
+ * cases that drive a real control-flow step need nothing extra here.
+ */
+export declare function testRegistry(components?: {
+    steps?: readonly AnyStep[];
+    triggers?: readonly AnyTrigger[];
+    credentials?: readonly CredentialDefinition[];
+}): ConnectorRegistry;
+//# sourceMappingURL=test-connector.d.ts.map

package/dist/testing/test-connector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-connector.d.ts","sourceRoot":"","sources":["../../src/testing/test-connector.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AACrE,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,sCAAsC,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAC7E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAE9E,qBAAa,aAAc,SAAQ,aAAa;IAC9C,SAAkB,EAAE,UAAU;IAC9B,SAAkB,OAAO,WAAW;IACpC,SAAkB,IAAI,UAAU;IAChC,SAAkB,WAAW,2BAA2B;IACxD,8EAA8E;IAC9E,SAAkB,WAAW,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAC/D,SAAkB,KAAK,EAAE,SAAS,OAAO,EAAE,CAAC;IAC5C,SAAkB,QAAQ,EAAE,SAAS,UAAU,EAAE,CAAC;gBAEtC,UAAU,CAAC,EAAE;QACvB,KAAK,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;QAC3B,QAAQ,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;QACjC,WAAW,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;KAC/C;CAMF;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,UAAU,CAAC,EAAE;IACxC,KAAK,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IAC3B,QAAQ,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;IACjC,WAAW,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;CAC/C,GAAG,iBAAiB,CAIpB"}

package/dist/testing/test-connector.js

@@ -0,0 +1,39 @@
+/**
+ * A throwaway connector for tests.
+ *
+ * `ConnectorRegistry` has no `registerStep` on purpose — a component may only
+ * enter the system as part of a connector, because every check the registry
+ * makes depends on knowing the owner. That is right in production and
+ * inconvenient in a test that wants one fake step, so this wraps loose
+ * components in a connector named `test`.
+ */
+import { BaseConnector } from '../connectors/core/base-connector.js';
+import { ConnectorRegistry } from '../connectors/core/connector-registry.js';
+export class TestConnector extends BaseConnector {
+    id = 'test';
+    version = '1.0.0';
+    name = 'Test';
+    description = 'Components under test';
+    /** Whatever the components under test accept; empty unless a case sets it. */
+    credentials;
+    steps;
+    triggers;
+    constructor(components) {
+        super();
+        this.steps = components?.steps ?? [];
+        this.triggers = components?.triggers ?? [];
+        this.credentials = components?.credentials ?? [];
+    }
+}
+/**
+ * A registry holding these components, under one test connector.
+ *
+ * The built-ins (CODE, WAIT, LOOP, …) come with every `ConnectorRegistry`, so
+ * cases that drive a real control-flow step need nothing extra here.
+ */
+export function testRegistry(components) {
+    const registry = new ConnectorRegistry();
+    registry.register(new TestConnector(components));
+    return registry;
+}
+//# sourceMappingURL=test-connector.js.map

package/dist/testing/test-connector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-connector.js","sourceRoot":"","sources":["../../src/testing/test-connector.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAErE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAG7E,MAAM,OAAO,aAAc,SAAQ,aAAa;IAC5B,EAAE,GAAG,MAAM,CAAC;IACZ,OAAO,GAAG,OAAO,CAAC;IAClB,IAAI,GAAG,MAAM,CAAC;IACd,WAAW,GAAG,uBAAuB,CAAC;IACxD,8EAA8E;IAC5D,WAAW,CAAkC;IAC7C,KAAK,CAAqB;IAC1B,QAAQ,CAAwB;IAElD,YAAY,UAIX;QACC,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,KAAK,GAAG,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,QAAQ,GAAG,UAAU,EAAE,QAAQ,IAAI,EAAE,CAAC;QAC3C,IAAI,CAAC,WAAW,GAAG,UAAU,EAAE,WAAW,IAAI,EAAE,CAAC;IACnD,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,UAI5B;IACC,MAAM,QAAQ,GAAG,IAAI,iBAAiB,EAAE,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,IAAI,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC;IACjD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/triggers/api-trigger.d.ts

@@ -0,0 +1,15 @@
+import type { z } from 'zod';
+import { ManualTrigger } from './manual-trigger.js';
+/**
+ * API trigger — started by a client calling the workflow's API trigger route.
+ *
+ * The SDK does not authenticate that caller; a host that exposes the route
+ * guards it, for example with an API key. Like a manual trigger, the payload is
+ * described by the author's input schema.
+ *
+ * The API trigger route accepts only workflows whose trigger is an `ApiTrigger`,
+ * the same way the webhook route accepts only a `WebhookTrigger`.
+ */
+export declare abstract class ApiTrigger<TConfig extends z.ZodTypeAny = z.ZodTypeAny> extends ManualTrigger<TConfig> {
+}
+//# sourceMappingURL=api-trigger.d.ts.map

package/dist/triggers/api-trigger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-trigger.d.ts","sourceRoot":"","sources":["../../src/triggers/api-trigger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD;;;;;;;;;GASG;AACH,8BAAsB,UAAU,CAC9B,OAAO,SAAS,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAC3C,SAAQ,aAAa,CAAC,OAAO,CAAC;CAAG"}

package/dist/triggers/api-trigger.js

@@ -0,0 +1,14 @@
+import { ManualTrigger } from './manual-trigger.js';
+/**
+ * API trigger — started by a client calling the workflow's API trigger route.
+ *
+ * The SDK does not authenticate that caller; a host that exposes the route
+ * guards it, for example with an API key. Like a manual trigger, the payload is
+ * described by the author's input schema.
+ *
+ * The API trigger route accepts only workflows whose trigger is an `ApiTrigger`,
+ * the same way the webhook route accepts only a `WebhookTrigger`.
+ */
+export class ApiTrigger extends ManualTrigger {
+}
+//# sourceMappingURL=api-trigger.js.map

package/dist/triggers/api-trigger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-trigger.js","sourceRoot":"","sources":["../../src/triggers/api-trigger.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD;;;;;;;;;GASG;AACH,MAAM,OAAgB,UAEpB,SAAQ,aAAsB;CAAG"}

package/dist/triggers/base-trigger.d.ts

@@ -1,6 +1,19 @@
 import type { z } from 'zod';
 import type { TriggerType } from '../types/trigger-types.js';
 import type { TriggerCategory } from '../types/categories.js';
+import type { CredentialSlot } from '../steps/base-step.js';
+import type { CredentialRequirement } from '../connectors/core/credentials.js';
+import type { ResolvedCredential } from '../common/credentials.js';
+import type { ResourceAttributes } from '../authz/attributes.js';
+/** What the engine hands a trigger's server-side methods. */
+export interface TriggerExecutionContext {
+    /** Credentials the trigger's slots resolved to, keyed by slot name. */
+    readonly credentials: Readonly<Record<string, ResolvedCredential>>;
+    /** The tenant the workflow belongs to. */
+    readonly attributes: ResourceAttributes<'workflow'>;
+    /** Base URL the deployment is reachable at. Empty when unconfigured. */
+    readonly baseUrl: string;
+}
 /**
  * Abstract base for all triggers.
  *
@@ -20,6 +33,23 @@ export declare abstract class BaseTrigger<TConfig extends z.ZodTypeAny> {
     abstract readonly outputSchema: z.ZodTypeAny;
     abstract readonly category: TriggerCategory;
     readonly icon?: string;
+    /**
+     * Which connector provides this trigger. Written by
+     * `ConnectorRegistry.register()`, never by the trigger — see BaseStep.
+     */
+    readonly connectorId?: string;
+    readonly connectorName?: string;
+    readonly connectorIcon?: string;
+    /**
+     * Config fields holding a credential name, resolved by the engine. Same
+     * contract as a step's slots.
+     */
+    readonly credentialSlots?: readonly CredentialSlot[];
+    /**
+     * Which credential types this trigger accepts. The registry checks each is
+     * declared by the trigger's own connector.
+     */
+    readonly credential?: CredentialRequirement;
     /** Whether this trigger requires scope-based filtering in the UI. */
     readonly requiresScopeFilter?: boolean;
     /** Fields used for scope filtering (e.g. channelIds, boardIds). */

package/dist/triggers/base-trigger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base-trigger.d.ts","sourceRoot":"","sources":["../../src/triggers/base-trigger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9D;;;;;;;;;;GAUG;AACH,8BAAsB,WAAW,CAAC,OAAO,SAAS,CAAC,CAAC,UAAU;IAC5D,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IACpC,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IACxC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,UAAU,CAAC;IAC7C,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IAC5C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAEvB,qEAAqE;IACrE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAEvC,mEAAmE;IACnE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAE/C,wDAAwD;IACxD,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;IAI3C;;;OAGG;IACH,cAAc,CAAC,CACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnC;;;OAGG;IACH,YAAY,CACV,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,OAAO;IAIV;;;OAGG;IACH,oBAAoB,CAClB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAClC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAI1B;;;;;;;;;;;OAWG;IACH,uBAAuB,CAAC,CACtB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAC3B"}
+{"version":3,"file":"base-trigger.d.ts","sourceRoot":"","sources":["../../src/triggers/base-trigger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC/E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAEjE,6DAA6D;AAC7D,MAAM,WAAW,uBAAuB;IACtC,uEAAuE;IACvE,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACnE,0CAA0C;IAC1C,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC,UAAU,CAAC,CAAC;IACpD,wEAAwE;IACxE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;;;GAUG;AACH,8BAAsB,WAAW,CAAC,OAAO,SAAS,CAAC,CAAC,UAAU;IAC5D,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IACpC,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IACxC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,UAAU,CAAC;IAC7C,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IAC5C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAEvB;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAEhC;;;OAGG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAErD;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,qBAAqB,CAAC;IAE5C,qEAAqE;IACrE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAEvC,mEAAmE;IACnE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAE/C,wDAAwD;IACxD,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;IAI3C;;;OAGG;IACH,cAAc,CAAC,CACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnC;;;OAGG;IACH,YAAY,CACV,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,OAAO;IAIV;;;OAGG;IACH,oBAAoB,CAClB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAClC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAI1B;;;;;;;;;;;OAWG;IACH,uBAAuB,CAAC,CACtB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAC3B"}

package/dist/triggers/base-trigger.js

@@ -11,6 +11,23 @@
  */
 export class BaseTrigger {
     icon;
+    /**
+     * Which connector provides this trigger. Written by
+     * `ConnectorRegistry.register()`, never by the trigger — see BaseStep.
+     */
+    connectorId;
+    connectorName;
+    connectorIcon;
+    /**
+     * Config fields holding a credential name, resolved by the engine. Same
+     * contract as a step's slots.
+     */
+    credentialSlots;
+    /**
+     * Which credential types this trigger accepts. The registry checks each is
+     * declared by the trigger's own connector.
+     */
+    credential;
     /** Whether this trigger requires scope-based filtering in the UI. */
     requiresScopeFilter;
     /** Fields used for scope filtering (e.g. channelIds, boardIds). */

package/dist/triggers/base-trigger.js.map

@@ -1 +1 @@
-{"version":3,"file":"base-trigger.js","sourceRoot":"","sources":["../../src/triggers/base-trigger.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;GAUG;AACH,MAAM,OAAgB,WAAW;IAOtB,IAAI,CAAU;IAEvB,qEAAqE;IAC5D,mBAAmB,CAAW;IAEvC,mEAAmE;IAC1D,iBAAiB,CAAqB;IAE/C,wDAAwD;IACxD,QAAQ,CAAC,MAAe;QACtB,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAqB,CAAC;IAC7D,CAAC;IAUD;;;OAGG;IACH,YAAY,CACV,OAAgC,EAChC,QAAiC;QAEjC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,oBAAoB,CAClB,UAAmC;QAEnC,OAAO,UAAU,CAAC;IACpB,CAAC;CAiBF"}
+{"version":3,"file":"base-trigger.js","sourceRoot":"","sources":["../../src/triggers/base-trigger.ts"],"names":[],"mappings":"AAkBA;;;;;;;;;;GAUG;AACH,MAAM,OAAgB,WAAW;IAOtB,IAAI,CAAU;IAEvB;;;OAGG;IACM,WAAW,CAAU;IACrB,aAAa,CAAU;IACvB,aAAa,CAAU;IAEhC;;;OAGG;IACM,eAAe,CAA6B;IAErD;;;OAGG;IACM,UAAU,CAAyB;IAE5C,qEAAqE;IAC5D,mBAAmB,CAAW;IAEvC,mEAAmE;IAC1D,iBAAiB,CAAqB;IAE/C,wDAAwD;IACxD,QAAQ,CAAC,MAAe;QACtB,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAqB,CAAC;IAC7D,CAAC;IAUD;;;OAGG;IACH,YAAY,CACV,OAAgC,EAChC,QAAiC;QAEjC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,oBAAoB,CAClB,UAAmC;QAEnC,OAAO,UAAU,CAAC;IACpB,CAAC;CAiBF"}

package/dist/triggers/trigger-descriptor.d.ts

@@ -0,0 +1,44 @@
+/**
+ * How a trigger describes itself to the builder — the `StepDescriptor`
+ * counterpart, moved out of the deleted `TriggerRegistry` for the same reason:
+ * connectors hold triggers now, but the palette still needs them described.
+ */
+import type { z } from 'zod';
+import type { TriggerType } from '../types/trigger-types.js';
+import type { TriggerCategory } from '../types/categories.js';
+import { BaseTrigger } from './base-trigger.js';
+import type { CredentialSlot } from '../steps/base-step.js';
+import type { CredentialTypeRef } from '../common/credentials.js';
+type AnyTrigger = BaseTrigger<z.ZodTypeAny>;
+export interface TriggerSummary {
+    type: TriggerType;
+    name: string;
+    description: string;
+    category: TriggerCategory;
+    icon?: string;
+    /** The connector that provides this trigger. Stamped at registration. */
+    connectorId?: string;
+    connectorName?: string;
+    /** Its icon name, for the palette's connector list. Absent when the connector sets none. */
+    connectorIcon?: string;
+}
+export interface TriggerDescriptor extends TriggerSummary {
+    /** JSON Schema for the trigger's config — generated from the Zod schema. */
+    configSchema: Record<string, unknown>;
+    /** JSON Schema for the trigger's output — generated from the Zod schema. */
+    outputSchema: Record<string, unknown>;
+    /** Whether this trigger requires scope-based filtering in the UI. */
+    requiresScopeFilter: boolean;
+    /** Fields used for scope filtering (e.g. channelIds, boardIds). */
+    scopeFilterFields: readonly string[];
+    /** Credential slots this trigger declares. Empty array if none. */
+    credentialSlots: readonly CredentialSlot[];
+    /** Credential types the trigger accepts. Empty means any type. */
+    credential: readonly CredentialTypeRef[];
+    /** True for a webhook trigger, which an external provider calls. */
+    webhook: boolean;
+}
+export declare function buildTriggerSummary(t: AnyTrigger): TriggerSummary;
+export declare function buildTriggerDescriptor(t: AnyTrigger): TriggerDescriptor;
+export {};
+//# sourceMappingURL=trigger-descriptor.d.ts.map

package/dist/triggers/trigger-descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trigger-descriptor.d.ts","sourceRoot":"","sources":["../../src/triggers/trigger-descriptor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAIlE,KAAK,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;AAI5C,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,WAAW,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,eAAe,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,yEAAyE;IACzE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,4FAA4F;IAC5F,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAID,MAAM,WAAW,iBAAkB,SAAQ,cAAc;IACvD,4EAA4E;IAC5E,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,4EAA4E;IAC5E,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,qEAAqE;IACrE,mBAAmB,EAAE,OAAO,CAAC;IAC7B,mEAAmE;IACnE,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,mEAAmE;IACnE,eAAe,EAAE,SAAS,cAAc,EAAE,CAAC;IAC3C,kEAAkE;IAClE,UAAU,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACzC,oEAAoE;IACpE,OAAO,EAAE,OAAO,CAAC;CAClB;AAID,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,UAAU,GAAG,cAAc,CAWjE;AAED,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,UAAU,GAAG,iBAAiB,CAWvE"}

package/dist/triggers/trigger-descriptor.js

@@ -0,0 +1,30 @@
+import { BaseTrigger } from './base-trigger.js';
+import { WebhookTrigger } from './webhook-trigger.js';
+import { zodToJsonSchemaRecord } from '../util/schema-convert.js';
+import { credentialTypeRefs } from '../util/credential-slot-schema.js';
+// ─── Builders ───
+export function buildTriggerSummary(t) {
+    return {
+        type: t.type,
+        name: t.name,
+        description: t.description,
+        category: t.category,
+        ...(t.icon !== undefined ? { icon: t.icon } : {}),
+        ...(t.connectorId !== undefined ? { connectorId: t.connectorId } : {}),
+        ...(t.connectorName !== undefined ? { connectorName: t.connectorName } : {}),
+        ...(t.connectorIcon !== undefined ? { connectorIcon: t.connectorIcon } : {}),
+    };
+}
+export function buildTriggerDescriptor(t) {
+    return {
+        ...buildTriggerSummary(t),
+        configSchema: t.decorateConfigSchema(zodToJsonSchemaRecord(t.configSchema)),
+        outputSchema: zodToJsonSchemaRecord(t.outputSchema),
+        requiresScopeFilter: t.requiresScopeFilter ?? false,
+        scopeFilterFields: t.scopeFilterFields ?? [],
+        credentialSlots: t.credentialSlots ?? [],
+        credential: credentialTypeRefs(t.credential),
+        webhook: t instanceof WebhookTrigger,
+    };
+}
+//# sourceMappingURL=trigger-descriptor.js.map

package/dist/triggers/trigger-descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trigger-descriptor.js","sourceRoot":"","sources":["../../src/triggers/trigger-descriptor.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAGtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAsCvE,mBAAmB;AAEnB,MAAM,UAAU,mBAAmB,CAAC,CAAa;IAC/C,OAAO;QACL,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,CAAC,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,GAAG,CAAC,CAAC,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,CAAa;IAClD,OAAO;QACL,GAAG,mBAAmB,CAAC,CAAC,CAAC;QACzB,YAAY,EAAE,CAAC,CAAC,oBAAoB,CAAC,qBAAqB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QAC3E,YAAY,EAAE,qBAAqB,CAAC,CAAC,CAAC,YAAY,CAAC;QACnD,mBAAmB,EAAE,CAAC,CAAC,mBAAmB,IAAI,KAAK;QACnD,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,IAAI,EAAE;QAC5C,eAAe,EAAE,CAAC,CAAC,eAAe,IAAI,EAAE;QACxC,UAAU,EAAE,kBAAkB,CAAC,CAAC,CAAC,UAAU,CAAC;QAC5C,OAAO,EAAE,CAAC,YAAY,cAAc;KACrC,CAAC;AACJ,CAAC"}

package/dist/triggers/webhook-trigger.d.ts

@@ -1,50 +1,62 @@
 import type { z } from 'zod';
 import { BaseTrigger } from './base-trigger.js';
-export interface WebhookRequest {
-    method: string;
-    headers: Record<string, string | string[] | undefined>;
-    body: unknown;
-    query: Record<string, string | string[] | undefined>;
-}
-export interface WebhookResponse {
-    status: number;
-    headers?: Record<string, string>;
-    body?: unknown;
-}
-export interface WebhookHandleResult {
-    /** Data to pass into the workflow as trigger context. */
-    triggerData: Record<string, unknown>;
-    /** HTTP response to return to the webhook caller. */
-    httpResponse: WebhookResponse;
-}
-export interface WebhookActivationContext {
-    /** The full URL the webhook will be reachable at. */
-    webhookUrl: string;
-    credentials: Record<string, never>;
-}
+import type { TriggerExecutionContext } from './base-trigger.js';
+import type { InboundHttpRequest, InboundReply, RawInboundRequest, Translation } from '../ingest/types.js';
 /**
- * Webhook trigger — fires when an external HTTP request hits the webhook URL.
+ * Webhook trigger — fires when an external service POSTs to
+ * `<baseUrl>/webhooks/<workflowId>`.
+ *
+ * The author registers that URL with the provider by hand. On each request the
+ * engine:
+ *
+ * 1. finds the workflow and checks it is active,
+ * 2. resolves the trigger's credentials, rejecting the request if one is
+ *    missing, revoked, or of a type the trigger does not accept,
+ * 3. calls {@link handshake}, and sends its reply if it returns one,
+ * 4. calls {@link verify} with the exact bytes and those credentials,
+ * 5. parses the body,
+ *
+ * and only then calls {@link handleRequest}. Each event it returns must pass
+ * the workflow's trigger filter to become a run.
  *
- * On activation, the runtime generates a unique webhook path and calls
- * `onActivate()` so the trigger can register it with the external service.
- * On incoming requests, `handleRequest()` validates the request and
- * returns the trigger data + HTTP response.
+ * How a request is verified belongs to the connector: its provider's signing
+ * scheme, its own utilities. The engine's part is that verification always
+ * runs first and receives the right credentials. The URL carries no secret, so
+ * an implementation that accepts everything leaves the workflow open to anyone
+ * who learns its id.
  */
 export declare abstract class WebhookTrigger<TConfig extends z.ZodTypeAny = z.ZodTypeAny> extends BaseTrigger<TConfig> {
     /**
-     * Process an incoming webhook request.
-     * Return the data to inject as trigger context and the HTTP response.
+     * Answer a provider's URL handshake: the request some providers send when the
+     * URL is registered, before any real delivery, expecting a reply in their own
+     * format. Return that reply, or `undefined` for every other request.
+     *
+     * Runs before {@link verify}, so the request is unauthenticated: some handshakes
+     * are unsigned (Microsoft Graph's `validationToken`), and some arrive as GET
+     * (Meta's `hub.challenge`). That is why a handshake can only reply, never start
+     * a run. Match the provider's handshake exactly, echo only what it expects echoed,
+     * and check a token it sends against the credentials where it sends one.
+     *
+     * A GET reaches no other method: when this returns `undefined` for one, the
+     * sender gets 404. A signed handshake, such as Slack's `url_verification`, is
+     * better answered from {@link handleRequest}, after verification.
+     *
+     * A thrown error is logged and the request carries on to {@link verify}.
      */
-    abstract handleRequest(request: WebhookRequest, config: z.infer<TConfig>): Promise<WebhookHandleResult>;
+    handshake(_request: InboundHttpRequest, _config: z.infer<TConfig>, _ctx: TriggerExecutionContext): Promise<InboundReply | undefined>;
     /**
-     * Called when the workflow is activated. Use to register the webhook URL
-     * with the external service (e.g. Stripe, GitHub).
+     * Is this request really from the provider? Return false, or throw, to reject
+     * it with 401. Runs before the body is parsed.
+     *
+     * Read a secret with `credentialValues(ctx.credentials, slot, 'secret')`.
      */
-    onActivate?(config: z.infer<TConfig>, ctx: WebhookActivationContext): Promise<void>;
+    abstract verify(request: InboundHttpRequest, config: z.infer<TConfig>, ctx: TriggerExecutionContext): Promise<boolean>;
     /**
-     * Called when the workflow is deactivated. Use to unregister from the
-     * external service.
+     * Turn a verified request into events, and say what to reply.
+     *
+     * Should be pure: no network calls. Enrichment that needs the provider's API
+     * belongs in `hydratePayload`, which runs inside the execution.
      */
-    onDeactivate?(config: z.infer<TConfig>, ctx: WebhookActivationContext): Promise<void>;
+    abstract handleRequest(request: RawInboundRequest, config: z.infer<TConfig>, ctx: TriggerExecutionContext): Promise<Translation>;
 }
 //# sourceMappingURL=webhook-trigger.d.ts.map

package/dist/triggers/webhook-trigger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"webhook-trigger.d.ts","sourceRoot":"","sources":["../../src/triggers/webhook-trigger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAIhD,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IACvD,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;CACtD;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,yDAAyD;IACzD,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,qDAAqD;IACrD,YAAY,EAAE,eAAe,CAAC;CAC/B;AAED,MAAM,WAAW,wBAAwB;IACvC,qDAAqD;IACrD,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;CACpC;AAID;;;;;;;GAOG;AACH,8BAAsB,cAAc,CAClC,OAAO,SAAS,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAC3C,SAAQ,WAAW,CAAC,OAAO,CAAC;IAC5B;;;OAGG;IACH,QAAQ,CAAC,aAAa,CACpB,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GACvB,OAAO,CAAC,mBAAmB,CAAC;IAE/B;;;OAGG;IACH,UAAU,CAAC,CACT,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EACxB,GAAG,EAAE,wBAAwB,GAC5B,OAAO,CAAC,IAAI,CAAC;IAEhB;;;OAGG;IACH,YAAY,CAAC,CACX,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EACxB,GAAG,EAAE,wBAAwB,GAC5B,OAAO,CAAC,IAAI,CAAC;CACjB"}
+{"version":3,"file":"webhook-trigger.d.ts","sourceRoot":"","sources":["../../src/triggers/webhook-trigger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,KAAK,EAAE,kBAAkB,EAAE,YAAY,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAE3G;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,8BAAsB,cAAc,CAClC,OAAO,SAAS,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAC3C,SAAQ,WAAW,CAAC,OAAO,CAAC;IAC5B;;;;;;;;;;;;;;;;OAgBG;IACH,SAAS,CACP,QAAQ,EAAE,kBAAkB,EAC5B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EACzB,IAAI,EAAE,uBAAuB,GAC5B,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;IAIpC;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,CACb,OAAO,EAAE,kBAAkB,EAC3B,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EACxB,GAAG,EAAE,uBAAuB,GAC3B,OAAO,CAAC,OAAO,CAAC;IAEnB;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CACpB,OAAO,EAAE,iBAAiB,EAC1B,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EACxB,GAAG,EAAE,uBAAuB,GAC3B,OAAO,CAAC,WAAW,CAAC;CACxB"}

package/dist/triggers/webhook-trigger.js

@@ -1,13 +1,47 @@
 import { BaseTrigger } from './base-trigger.js';
-// ─── WebhookTrigger ───
 /**
- * Webhook trigger — fires when an external HTTP request hits the webhook URL.
+ * Webhook trigger — fires when an external service POSTs to
+ * `<baseUrl>/webhooks/<workflowId>`.
  *
- * On activation, the runtime generates a unique webhook path and calls
- * `onActivate()` so the trigger can register it with the external service.
- * On incoming requests, `handleRequest()` validates the request and
- * returns the trigger data + HTTP response.
+ * The author registers that URL with the provider by hand. On each request the
+ * engine:
+ *
+ * 1. finds the workflow and checks it is active,
+ * 2. resolves the trigger's credentials, rejecting the request if one is
+ *    missing, revoked, or of a type the trigger does not accept,
+ * 3. calls {@link handshake}, and sends its reply if it returns one,
+ * 4. calls {@link verify} with the exact bytes and those credentials,
+ * 5. parses the body,
+ *
+ * and only then calls {@link handleRequest}. Each event it returns must pass
+ * the workflow's trigger filter to become a run.
+ *
+ * How a request is verified belongs to the connector: its provider's signing
+ * scheme, its own utilities. The engine's part is that verification always
+ * runs first and receives the right credentials. The URL carries no secret, so
+ * an implementation that accepts everything leaves the workflow open to anyone
+ * who learns its id.
  */
 export class WebhookTrigger extends BaseTrigger {
+    /**
+     * Answer a provider's URL handshake: the request some providers send when the
+     * URL is registered, before any real delivery, expecting a reply in their own
+     * format. Return that reply, or `undefined` for every other request.
+     *
+     * Runs before {@link verify}, so the request is unauthenticated: some handshakes
+     * are unsigned (Microsoft Graph's `validationToken`), and some arrive as GET
+     * (Meta's `hub.challenge`). That is why a handshake can only reply, never start
+     * a run. Match the provider's handshake exactly, echo only what it expects echoed,
+     * and check a token it sends against the credentials where it sends one.
+     *
+     * A GET reaches no other method: when this returns `undefined` for one, the
+     * sender gets 404. A signed handshake, such as Slack's `url_verification`, is
+     * better answered from {@link handleRequest}, after verification.
+     *
+     * A thrown error is logged and the request carries on to {@link verify}.
+     */
+    handshake(_request, _config, _ctx) {
+        return Promise.resolve(undefined);
+    }
 }
 //# sourceMappingURL=webhook-trigger.js.map

package/dist/triggers/webhook-trigger.js.map

@@ -1 +1 @@
-{"version":3,"file":"webhook-trigger.js","sourceRoot":"","sources":["../../src/triggers/webhook-trigger.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AA8BhD,yBAAyB;AAEzB;;;;;;;GAOG;AACH,MAAM,OAAgB,cAEpB,SAAQ,WAAoB;CA2B7B"}
+{"version":3,"file":"webhook-trigger.js","sourceRoot":"","sources":["../../src/triggers/webhook-trigger.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAIhD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,OAAgB,cAEpB,SAAQ,WAAoB;IAC5B;;;;;;;;;;;;;;;;OAgBG;IACH,SAAS,CACP,QAA4B,EAC5B,OAAyB,EACzB,IAA6B;QAE7B,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC;CAyBF"}

package/dist/types/known-types.d.ts

@@ -26,7 +26,6 @@ export declare const ControlFlowStepTypeSchema: z.ZodEnum<[BuiltinStepType.CONDI
  */
 export declare enum BuiltinTriggerType {
     EVENT = "EVENT",
-    WEBHOOK = "WEBHOOK",
     CRON = "CRON",
     MANUAL = "MANUAL",
     WEBHOOK_V2 = "WEBHOOK_V2"

package/dist/types/known-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"known-types.d.ts","sourceRoot":"","sources":["../../src/types/known-types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;;GAGG;AACH,oBAAY,eAAe;IAEzB,WAAW,gBAAgB;IAC3B,MAAM,WAAW;IACjB,IAAI,SAAS;IACb,QAAQ,aAAa;IACrB,GAAG,QAAQ;IAEX,IAAI,SAAS;IACb,IAAI,SAAS;IACb,YAAY,iBAAiB;IAC7B,KAAK,UAAU;CAChB;AAED,eAAO,MAAM,qBAAqB,yCAAgC,CAAC;AAInE,QAAA,MAAM,wBAAwB,qIAMpB,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5E,yGAAyG;AACzG,eAAO,MAAM,uBAAuB,EAAE,WAAW,CAAC,MAAM,CAEvD,CAAC;AAEF,eAAO,MAAM,yBAAyB,uIAMpC,CAAC;AAIH;;;GAGG;AACH,oBAAY,kBAAkB;IAC5B,KAAK,UAAU;IACf,OAAO,YAAY;IACnB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,UAAU,eAAe;CAC1B;AAED,eAAO,MAAM,wBAAwB,4CAAmC,CAAC"}
+{"version":3,"file":"known-types.d.ts","sourceRoot":"","sources":["../../src/types/known-types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;;GAGG;AACH,oBAAY,eAAe;IAEzB,WAAW,gBAAgB;IAC3B,MAAM,WAAW;IACjB,IAAI,SAAS;IACb,QAAQ,aAAa;IACrB,GAAG,QAAQ;IAEX,IAAI,SAAS;IACb,IAAI,SAAS;IACb,YAAY,iBAAiB;IAC7B,KAAK,UAAU;CAChB;AAED,eAAO,MAAM,qBAAqB,yCAAgC,CAAC;AAInE,QAAA,MAAM,wBAAwB,qIAMpB,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5E,yGAAyG;AACzG,eAAO,MAAM,uBAAuB,EAAE,WAAW,CAAC,MAAM,CAEvD,CAAC;AAEF,eAAO,MAAM,yBAAyB,uIAMpC,CAAC;AAIH;;;GAGG;AACH,oBAAY,kBAAkB;IAC5B,KAAK,UAAU;IACf,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,UAAU,eAAe;CAC1B;AAED,eAAO,MAAM,wBAAwB,4CAAmC,CAAC"}

package/dist/types/known-types.js

@@ -44,7 +44,6 @@ export const ControlFlowStepTypeSchema = z.enum([
 export var BuiltinTriggerType;
 (function (BuiltinTriggerType) {
     BuiltinTriggerType["EVENT"] = "EVENT";
-    BuiltinTriggerType["WEBHOOK"] = "WEBHOOK";
     BuiltinTriggerType["CRON"] = "CRON";
     BuiltinTriggerType["MANUAL"] = "MANUAL";
     BuiltinTriggerType["WEBHOOK_V2"] = "WEBHOOK_V2";

package/dist/types/known-types.js.map

@@ -1 +1 @@
-{"version":3,"file":"known-types.js","sourceRoot":"","sources":["../../src/types/known-types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,8BAA8B;AAE9B;;;GAGG;AACH,MAAM,CAAN,IAAY,eAYX;AAZD,WAAY,eAAe;IACzB,eAAe;IACf,8CAA2B,CAAA;IAC3B,oCAAiB,CAAA;IACjB,gCAAa,CAAA;IACb,wCAAqB,CAAA;IACrB,8BAAW,CAAA;IACX,SAAS;IACT,gCAAa,CAAA;IACb,gCAAa,CAAA;IACb,gDAA6B,CAAA;IAC7B,kCAAe,CAAA;AACjB,CAAC,EAZW,eAAe,KAAf,eAAe,QAY1B;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AAEnE,8BAA8B;AAE9B,MAAM,wBAAwB,GAAG;IAC/B,eAAe,CAAC,WAAW;IAC3B,eAAe,CAAC,MAAM;IACtB,eAAe,CAAC,IAAI;IACpB,eAAe,CAAC,QAAQ;IACxB,eAAe,CAAC,GAAG;CACX,CAAC;AAIX,yGAAyG;AACzG,MAAM,CAAC,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CACjE,wBAAwB,CACzB,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC9C,eAAe,CAAC,WAAW;IAC3B,eAAe,CAAC,MAAM;IACtB,eAAe,CAAC,IAAI;IACpB,eAAe,CAAC,QAAQ;IACxB,eAAe,CAAC,GAAG;CACpB,CAAC,CAAC;AAEH,iCAAiC;AAEjC;;;GAGG;AACH,MAAM,CAAN,IAAY,kBAMX;AAND,WAAY,kBAAkB;IAC5B,qCAAe,CAAA;IACf,yCAAmB,CAAA;IACnB,mCAAa,CAAA;IACb,uCAAiB,CAAA;IACjB,+CAAyB,CAAA;AAC3B,CAAC,EANW,kBAAkB,KAAlB,kBAAkB,QAM7B;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC"}
+{"version":3,"file":"known-types.js","sourceRoot":"","sources":["../../src/types/known-types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,8BAA8B;AAE9B;;;GAGG;AACH,MAAM,CAAN,IAAY,eAYX;AAZD,WAAY,eAAe;IACzB,eAAe;IACf,8CAA2B,CAAA;IAC3B,oCAAiB,CAAA;IACjB,gCAAa,CAAA;IACb,wCAAqB,CAAA;IACrB,8BAAW,CAAA;IACX,SAAS;IACT,gCAAa,CAAA;IACb,gCAAa,CAAA;IACb,gDAA6B,CAAA;IAC7B,kCAAe,CAAA;AACjB,CAAC,EAZW,eAAe,KAAf,eAAe,QAY1B;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AAEnE,8BAA8B;AAE9B,MAAM,wBAAwB,GAAG;IAC/B,eAAe,CAAC,WAAW;IAC3B,eAAe,CAAC,MAAM;IACtB,eAAe,CAAC,IAAI;IACpB,eAAe,CAAC,QAAQ;IACxB,eAAe,CAAC,GAAG;CACX,CAAC;AAIX,yGAAyG;AACzG,MAAM,CAAC,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CACjE,wBAAwB,CACzB,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC9C,eAAe,CAAC,WAAW;IAC3B,eAAe,CAAC,MAAM;IACtB,eAAe,CAAC,IAAI;IACpB,eAAe,CAAC,QAAQ;IACxB,eAAe,CAAC,GAAG;CACpB,CAAC,CAAC;AAEH,iCAAiC;AAEjC;;;GAGG;AACH,MAAM,CAAN,IAAY,kBAKX;AALD,WAAY,kBAAkB;IAC5B,qCAAe,CAAA;IACf,mCAAa,CAAA;IACb,uCAAiB,CAAA;IACjB,+CAAyB,CAAA;AAC3B,CAAC,EALW,kBAAkB,KAAlB,kBAAkB,QAK7B;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC"}

package/dist/types/validation.d.ts

@@ -4,7 +4,9 @@ export declare enum ValidationIssueCode {
     UNKNOWN_REFERENCE = "unknownReference",
     FORWARD_REFERENCE = "forwardReference",
     TYPE_MISMATCH = "typeMismatch",
-    DUPLICATE_STEP_ID = "duplicateStepId"
+    DUPLICATE_STEP_ID = "duplicateStepId",
+    MISSING_CREDENTIAL = "missingCredential",
+    INVALID_FILTER = "invalidFilter"
 }
 export declare const ValidationIssueCodeSchema: z.ZodNativeEnum<typeof ValidationIssueCode>;
 /**

package/dist/types/validation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/types/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,oBAAY,mBAAmB;IAC7B,KAAK,UAAU;IACf,iBAAiB,qBAAqB;IACtC,iBAAiB,qBAAqB;IACtC,aAAa,iBAAiB;IAC9B,iBAAiB,oBAAoB;CACtC;AAED,eAAO,MAAM,yBAAyB,6CAAoC,CAAC;AAE3E;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,SAAS,GAAG,MAAM,CAAC;IAC1B,iFAAiF;IACjF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qHAAqH;IACrH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,mBAAmB,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,gFAAgF;IAChF,QAAQ,CAAC,EAAE,uBAAuB,CAAC;CACpC;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,eAAe,EAAE,CAAC;CAC3B"}
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/types/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,oBAAY,mBAAmB;IAC7B,KAAK,UAAU;IACf,iBAAiB,qBAAqB;IACtC,iBAAiB,qBAAqB;IACtC,aAAa,iBAAiB;IAC9B,iBAAiB,oBAAoB;IACrC,kBAAkB,sBAAsB;IACxC,cAAc,kBAAkB;CACjC;AAED,eAAO,MAAM,yBAAyB,6CAAoC,CAAC;AAE3E;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,SAAS,GAAG,MAAM,CAAC;IAC1B,iFAAiF;IACjF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qHAAqH;IACrH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,mBAAmB,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,gFAAgF;IAChF,QAAQ,CAAC,EAAE,uBAAuB,CAAC;CACpC;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,eAAe,EAAE,CAAC;CAC3B"}

package/dist/types/validation.js

@@ -6,6 +6,8 @@ export var ValidationIssueCode;
     ValidationIssueCode["FORWARD_REFERENCE"] = "forwardReference";
     ValidationIssueCode["TYPE_MISMATCH"] = "typeMismatch";
     ValidationIssueCode["DUPLICATE_STEP_ID"] = "duplicateStepId";
+    ValidationIssueCode["MISSING_CREDENTIAL"] = "missingCredential";
+    ValidationIssueCode["INVALID_FILTER"] = "invalidFilter";
 })(ValidationIssueCode || (ValidationIssueCode = {}));
 export const ValidationIssueCodeSchema = z.nativeEnum(ValidationIssueCode);
 //# sourceMappingURL=validation.js.map

package/dist/types/validation.js.map

@@ -1 +1 @@
-{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/types/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAN,IAAY,mBAMX;AAND,WAAY,mBAAmB;IAC7B,sCAAe,CAAA;IACf,6DAAsC,CAAA;IACtC,6DAAsC,CAAA;IACtC,qDAA8B,CAAA;IAC9B,4DAAqC,CAAA;AACvC,CAAC,EANW,mBAAmB,KAAnB,mBAAmB,QAM9B;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC"}
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/types/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAN,IAAY,mBAQX;AARD,WAAY,mBAAmB;IAC7B,sCAAe,CAAA;IACf,6DAAsC,CAAA;IACtC,6DAAsC,CAAA;IACtC,qDAA8B,CAAA;IAC9B,4DAAqC,CAAA;IACrC,+DAAwC,CAAA;IACxC,uDAAgC,CAAA;AAClC,CAAC,EARW,mBAAmB,KAAnB,mBAAmB,QAQ9B;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC"}

package/dist/types/workflow-config.d.ts

@@ -178,6 +178,12 @@ export interface WorkflowConfig {
     trigger: {
         type: TriggerType;
         config: Record<string, unknown>;
+        /**
+         * Which arriving events start a run. Separate from `config` because it has a
+         * different lifecycle: config is what the trigger is connected to, the filter
+         * is which of its events the workflow wants. See {@link TriggerFilter}.
+         */
+        filter?: TriggerFilter;
     };
     steps: WorkflowStepConfig[];
     settings?: WorkflowSettings;
@@ -193,6 +199,23 @@ export interface WorkflowConfig {
      */
     variables?: WorkflowVariable[];
 }
+/**
+ * An author-configured condition on the trigger's events, evaluated by the
+ * engine before a run is created. An event that fails it leaves no trace.
+ */
+export interface TriggerFilter {
+    /**
+     * The same condition tree the Conditional step uses. Variables may reference
+     * `{{trigger.*}}` and `{{vars.*}}` only — nothing else exists before a run.
+     */
+    conditions?: Condition;
+}
+export declare const TriggerFilterSchema: z.ZodType<TriggerFilter>;
+/**
+ * The scope id that asks for the context a trigger filter can see — the trigger
+ * output and variables, no steps. Pass it wherever an `atStepId` is expected.
+ */
+export declare const TRIGGER_FILTER_SCOPE = "$trigger";
 /**
  * Read a dotted path from a nested object.
  * `readDottedPath({ a: { b: 1 } }, 'a.b')` → `1`

package/dist/types/workflow-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workflow-config.d.ts","sourceRoot":"","sources":["../../src/types/workflow-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAE5D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAKxD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAQ/D;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,CAAC,SAAS,CAAC,CAAC,UAAU,EAChD,KAAK,EAAE,CAAC,GACP,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAM9B;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,CAAC,CAAC,UAAU,GACnB,CAAC,CAAC,UAAU,GAAG,IAAI,CAWrB;AAID,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,MAAM,SAAS,GACjB,aAAa,GACb;IAAE,GAAG,EAAE,SAAS,EAAE,CAAA;CAAE,GACpB;IAAE,GAAG,EAAE,SAAS,EAAE,CAAA;CAAE,CAAC;AAEzB,eAAO,MAAM,mBAAmB,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAIvD,CAAC;AAEH,eAAO,MAAM,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAMhD,CAAC;AAIF;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEvD;;;;;GAKG;AACH,MAAM,WAAW,QAAQ;IACvB,sEAAsE;IACtE,GAAG,EAAE,MAAM,CAAC;IACZ,sEAAsE;IACtE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uDAAuD;IACvD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,iEAAiE;IACjE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0DAA0D;IAC1D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4FAA4F;IAC5F,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,gBAAiB,SAAQ,cAAc;IACtD,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IAC7C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,2CAA2C;IAC3C,UAAU,CAAC,EAAE,kBAAkB,CAAC;CACjC;AAED,MAAM,WAAW,qBAAsB,SAAQ,cAAc;IAC3D,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,eAAe,CAAC,WAAW,CAAC;IAClC,MAAM,EAAE;QACN,SAAS,EAAE,SAAS,CAAC;QACrB,OAAO,EAAE,kBAAkB,EAAE,CAAC;QAC9B,QAAQ,CAAC,EAAE,kBAAkB,EAAE,CAAC;KACjC,CAAC;IACF,UAAU,CAAC,EAAE,kBAAkB,CAAC;CACjC;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,SAAS,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,kBAAkB,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,gBAAiB,SAAQ,cAAc;IACtD,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC;IAC7B,MAAM,EAAE;QACN;;;WAGG;QACH,KAAK,EAAE,eAAe,EAAE,CAAC;QACzB;;;WAGG;QACH,OAAO,EAAE,kBAAkB,EAAE,CAAC;KAC/B,CAAC;IACF,UAAU,CAAC,EAAE,kBAAkB,CAAC;CACjC;AAED,MAAM,MAAM,kBAAkB,GAC1B,gBAAgB,GAChB,qBAAqB,GACrB,gBAAgB,CAAC;AAIrB;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;kCACkC;AAClC,MAAM,WAAW,eAAe;IAC9B;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAID,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;EAQjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAItE;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE;QACP,IAAI,EAAE,WAAW,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACjC,CAAC;IACF,KAAK,EAAE,kBAAkB,EAAE,CAAC;IAC5B,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,kEAAkE;IAClE,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC;IACrB,6FAA6F;IAC7F,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B;;;;;OAKG;IACH,SAAS,CAAC,EAAE,gBAAgB,EAAE,CAAC;CAChC;AAID;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,IAAI,EAAE,MAAM,GACX,OAAO,CAcT"}
+{"version":3,"file":"workflow-config.d.ts","sourceRoot":"","sources":["../../src/types/workflow-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAE5D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAKxD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAQ/D;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,CAAC,SAAS,CAAC,CAAC,UAAU,EAChD,KAAK,EAAE,CAAC,GACP,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAM9B;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,CAAC,CAAC,UAAU,GACnB,CAAC,CAAC,UAAU,GAAG,IAAI,CAWrB;AAID,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,MAAM,SAAS,GACjB,aAAa,GACb;IAAE,GAAG,EAAE,SAAS,EAAE,CAAA;CAAE,GACpB;IAAE,GAAG,EAAE,SAAS,EAAE,CAAA;CAAE,CAAC;AAEzB,eAAO,MAAM,mBAAmB,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAIvD,CAAC;AAEH,eAAO,MAAM,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAMhD,CAAC;AAIF;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEvD;;;;;GAKG;AACH,MAAM,WAAW,QAAQ;IACvB,sEAAsE;IACtE,GAAG,EAAE,MAAM,CAAC;IACZ,sEAAsE;IACtE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uDAAuD;IACvD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,iEAAiE;IACjE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0DAA0D;IAC1D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4FAA4F;IAC5F,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,gBAAiB,SAAQ,cAAc;IACtD,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IAC7C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,2CAA2C;IAC3C,UAAU,CAAC,EAAE,kBAAkB,CAAC;CACjC;AAED,MAAM,WAAW,qBAAsB,SAAQ,cAAc;IAC3D,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,eAAe,CAAC,WAAW,CAAC;IAClC,MAAM,EAAE;QACN,SAAS,EAAE,SAAS,CAAC;QACrB,OAAO,EAAE,kBAAkB,EAAE,CAAC;QAC9B,QAAQ,CAAC,EAAE,kBAAkB,EAAE,CAAC;KACjC,CAAC;IACF,UAAU,CAAC,EAAE,kBAAkB,CAAC;CACjC;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,SAAS,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,kBAAkB,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,gBAAiB,SAAQ,cAAc;IACtD,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC;IAC7B,MAAM,EAAE;QACN;;;WAGG;QACH,KAAK,EAAE,eAAe,EAAE,CAAC;QACzB;;;WAGG;QACH,OAAO,EAAE,kBAAkB,EAAE,CAAC;KAC/B,CAAC;IACF,UAAU,CAAC,EAAE,kBAAkB,CAAC;CACjC;AAED,MAAM,MAAM,kBAAkB,GAC1B,gBAAgB,GAChB,qBAAqB,GACrB,gBAAgB,CAAC;AAIrB;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;kCACkC;AAClC,MAAM,WAAW,eAAe;IAC9B;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAID,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;EAQjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAItE;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE;QACP,IAAI,EAAE,WAAW,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAChC;;;;WAIG;QACH,MAAM,CAAC,EAAE,aAAa,CAAC;KACxB,CAAC;IACF,KAAK,EAAE,kBAAkB,EAAE,CAAC;IAC5B,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,kEAAkE;IAClE,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC;IACrB,6FAA6F;IAC7F,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B;;;;;OAKG;IACH,SAAS,CAAC,EAAE,gBAAgB,EAAE,CAAC;CAChC;AAID;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B;;;OAGG;IACH,UAAU,CAAC,EAAE,SAAS,CAAC;CACxB;AAED,eAAO,MAAM,mBAAmB,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAElB,CAAC;AAExC;;;GAGG;AACH,eAAO,MAAM,oBAAoB,aAAa,CAAC;AAI/C;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,IAAI,EAAE,MAAM,GACX,OAAO,CAcT"}

package/dist/types/workflow-config.js

@@ -50,6 +50,14 @@ export const WorkflowSettingsSchema = z.object({
     })
         .optional(),
 });
+export const TriggerFilterSchema = z
+    .object({ conditions: ConditionSchema.optional() })
+    .strict();
+/**
+ * The scope id that asks for the context a trigger filter can see — the trigger
+ * output and variables, no steps. Pass it wherever an `atStepId` is expected.
+ */
+export const TRIGGER_FILTER_SCOPE = '$trigger';
 // ─── Utility ───
 /**
  * Read a dotted path from a nested object.