@zapier/zapier-sdk 0.99.0 → 0.101.0

package/dist/experimental.mjs

@@ -1,5 +1,5 @@
-import { defineMethod, DEFAULT_PAGE_SIZE, apiPluginRef, workflowIdResolver, openEnum, durableRunIdResolver, defineResolver, ZapierConflictError, extractErrorDetail, workflowVersionIdResolver, workflowDraftIdResolver, ZapierApiError, workflowRunIdResolver, definePlugin, zapierSdkPlugin, ZapierValidationError, ZapierConfigurationError, createSdk, zapierCoreOptions, CORE_OPTIONS_ID, SDK_OPTIONS_ID } from './chunk-VXVMVORI.mjs';
-export { ACTION_RUNS_PATH, API_ID, ActionKeyPropertySchema, ActionPropertySchema, ActionTimeoutMillisecondsPropertySchema, ActionTimeoutSecondsPropertySchema, ActionTypePropertySchema, AppKeyPropertySchema, AppPropertySchema, AppsPropertySchema, AuthMechanism, AuthenticationIdPropertySchema, BaseSdkOptionsSchema, CONNECTIONS_ID, CONTEXT, CONTEXT_CACHE_MAX_SIZE, CONTEXT_CACHE_TTL_MILLISECONDS, CORE_ERROR_SYMBOL, CORE_OPTIONS_ID, CORE_SIGNAL_SYMBOL, ClientCredentialsObjectSchema, ConnectionEntrySchema, ConnectionIdPropertySchema, ConnectionPropertySchema, ConnectionsMapSchema, ConnectionsPropertySchema, CoreCancelledSignal, CoreDisposeError, CoreErrorCode, CoreSignal, CredentialsFunctionSchema, CredentialsObjectSchema, CredentialsSchema, DEFAULT_ACTION_TIMEOUT_MILLISECONDS, DEFAULT_APPROVAL_TIMEOUT_MILLISECONDS, DEFAULT_CONFIG_PATH, DEFAULT_MAX_APPROVAL_RETRIES, DEFAULT_PAGE_SIZE, DEPRECATION_NOTICE_EVENT, DebugPropertySchema, DrainTriggerInboxSchema, EVENT_EMISSION_ID, FieldsPropertySchema, InputFieldPropertySchema, InputsPropertySchema, LeaseLimitPropertySchema, LeasePropertySchema, LeaseSecondsPropertySchema, LimitPropertySchema, MANIFEST_ID, MAX_CONCURRENCY_LIMIT, MAX_PAGE_LIMIT, OffsetPropertySchema, OutputPropertySchema, ParamsPropertySchema, PkceCredentialsObjectSchema, RESOLVE_CREDENTIALS_ID, RecordPropertySchema, RecordsPropertySchema, RelayFetchSchema, RelayRequestSchema, ResolvedCredentialsSchema, SDK_OPTIONS_ID, TablePropertySchema, TablesPropertySchema, TriggerInboxKeyPropertySchema, TriggerInboxNamePropertySchema, TriggerInboxPropertySchema, WatchTriggerInboxSchema, ZAPIER_BASE_URL, ZAPIER_MAX_CONCURRENT_REQUESTS, ZAPIER_MAX_NETWORK_RETRIES, ZAPIER_MAX_NETWORK_RETRY_DELAY_MILLISECONDS, ZapierAbortDrainSignal, ZapierActionError, ZapierApiError, ZapierAppNotFoundError, ZapierApprovalError, ZapierAuthenticationError, ZapierBundleError, ZapierConfigurationError, ZapierConflictError, ZapierError, ZapierNotFoundError, ZapierRateLimitError, ZapierRelayError, ZapierReleaseTriggerMessageSignal, ZapierResourceNotFoundError, ZapierSignal, ZapierTimeoutError, ZapierUnknownError, ZapierValidationError, actionKeyResolver, actionTypeResolver, addPlugin, apiPlugin, apiPluginRef, appKeyResolver, appsPlugin, batch, buildApplicationLifecycleEvent, buildCapabilityMessage, buildErrorEvent, buildErrorEventWithContext, buildMethodCalledEvent, cleanupEventListeners, clearTokenCache, clientCredentialsNameResolver, clientIdResolver, composePlugins, connectionIdGenericResolver, connectionIdResolver, connectionsPlugin, connectionsPluginRef, createActionRunPlugin, createBaseEvent, createClientCredentialsPlugin, createController, createCorePlugin, createFunction, createMemoryCache, createPaginatedFunction, createPaginatedPluginMethod, createPluginMethod, createPluginStack, createSdk, createTableFieldsPlugin, createTablePlugin, createTableRecordsPlugin, createZapierApi, createZapierSdkWithoutRegistry, declareMethod, declareOptionalProperty, declarePlugin, declareProperty, defineFormatter, defineLegacyMerge, defineMethod, defineMethodOverride, defineOverride, definePlugin, defineProperty, defineResolver, deleteClientCredentialsPlugin, deleteTableFieldsPlugin, deleteTablePlugin, deleteTableRecordsPlugin, disposeSdk, durableRunIdResolver, eventEmissionHookPlugin, eventEmissionPlugin, eventEmissionPluginRef, fetchPlugin, findFirstConnectionPlugin, findManifestEntry, findUniqueConnectionPlugin, formatErrorMessage, fromFunctionPlugin, generateEventId, getActionInputFieldsSchemaPlugin, getActionPlugin, getActionRunPlugin, getAgent, getAppPlugin, getBaseUrlFromCredentials, getCallerContext, getCiPlatform, getClientIdFromCredentials, getConnectionPlugin, getContext, getCoreErrorCause, getCoreErrorCode, getCpuTime, getCurrentTimestamp, getMemoryUsage, getNegatable, getOrCreateApiClient, getOsInfo, getPlatformVersions, getPreferredManifestEntryKey, getProfilePlugin, getRegistryPlugin, getReleaseId, getTablePlugin, getTableRecordPlugin, getTokenFromCliLogin, getTtyContext, getZapierApprovalMode, getZapierDefaultApprovalMode, getZapierOpenAutoModeApprovalsInBrowser, getZapierSdkService, injectCliLogin, inputFieldKeyResolver, inputsAllOptionalResolver, inputsResolver, invalidateCachedToken, invalidateCredentialsToken, isCi, isCliLoginAvailable, isClientCredentials, isCoreCancelledSignal, isCoreError, isCoreSignal, isCredentialsFunction, isCredentialsObject, isPermanentHttpError, isPkceCredentials, isPositional, isZapierAbortDrainSignal, isZapierActionError, isZapierAppNotFoundError, isZapierApprovalError, isZapierAuthenticationError, isZapierBundleError, isZapierConflictError, isZapierError, isZapierNotFoundError, isZapierRateLimitError, isZapierReleaseTriggerMessageSignal, isZapierResourceNotFoundError, isZapierSignal, isZapierTimeoutError, isZapierValidationError, listActionInputFieldChoicesPlugin, listActionInputFieldsPlugin, listActionsPlugin, listAppsPlugin, listClientCredentialsPlugin, listConnectionsPlugin, listTableFieldsPlugin, listTableRecordsPlugin, listTablesPlugin, logDeprecation, manifestPlugin, manifestPluginRef, omitExports, operationAnnotatorPlugin, parseConcurrencyEnvVar, readManifestFromFile, registryPlugin, requestPlugin, resetDeprecationWarnings, resolveAuth, resolveAuthToken, resolveCredentials, resolveCredentialsFromEnv, resolveCredentialsPlugin, resolveCredentialsPluginRef, resolvePlugin, runActionPlugin, runInMethodScope, runWithCallerContext, runWithTelemetryContext, sdkOptionsPluginRef, selectExports, tableFieldIdsResolver, tableFieldsResolver, tableFiltersResolver, tableIdResolver, tableNameResolver, tableRecordIdResolver, tableRecordIdsResolver, tableRecordsResolver, tableSortResolver, tableUpdateRecordsResolver, toSnakeCase, toTitleCase, triggerInboxResolver, triggerMessagesResolver, updateTableRecordsPlugin, workflowDraftIdResolver, workflowIdResolver, workflowRunIdResolver, workflowVersionIdResolver, zapierAdaptError, zapierCoreOptions, zapierSdkPlugin } from './chunk-VXVMVORI.mjs';
+import { defineMethod, DEFAULT_PAGE_SIZE, apiPluginRef, workflowIdResolver, extractErrorDetail, ZapierApiError, openEnum, durableRunIdResolver, defineResolver, ZapierConflictError, workflowVersionIdResolver, workflowDraftIdResolver, workflowRunIdResolver, definePlugin, zapierSdkPlugin, ZapierValidationError, ZapierConfigurationError, createSdk, zapierCoreOptions, CORE_OPTIONS_ID, SDK_OPTIONS_ID } from './chunk-R6U6HNVF.mjs';
+export { ACTION_RUNS_PATH, API_ID, ActionKeyPropertySchema, ActionPropertySchema, ActionTimeoutMillisecondsPropertySchema, ActionTimeoutSecondsPropertySchema, ActionTypePropertySchema, AppKeyPropertySchema, AppPropertySchema, AppsPropertySchema, AuthMechanism, AuthenticationIdPropertySchema, BaseSdkOptionsSchema, CONNECTIONS_ID, CONTEXT, CONTEXT_CACHE_MAX_SIZE, CONTEXT_CACHE_TTL_MILLISECONDS, CORE_ERROR_SYMBOL, CORE_OPTIONS_ID, CORE_SIGNAL_SYMBOL, ClientCredentialsObjectSchema, ConnectionEntrySchema, ConnectionIdPropertySchema, ConnectionPropertySchema, ConnectionsMapSchema, ConnectionsPropertySchema, CoreCancelledSignal, CoreDisposeError, CoreErrorCode, CoreSignal, CredentialsFunctionSchema, CredentialsObjectSchema, CredentialsSchema, DEFAULT_ACTION_TIMEOUT_MILLISECONDS, DEFAULT_APPROVAL_TIMEOUT_MILLISECONDS, DEFAULT_CONFIG_PATH, DEFAULT_MAX_APPROVAL_RETRIES, DEFAULT_PAGE_SIZE, DEPRECATION_NOTICE_EVENT, DebugPropertySchema, DrainTriggerInboxSchema, EVENT_EMISSION_ID, FieldsPropertySchema, InputFieldPropertySchema, InputsPropertySchema, LeaseLimitPropertySchema, LeasePropertySchema, LeaseSecondsPropertySchema, LimitPropertySchema, MANIFEST_ID, MAX_CONCURRENCY_LIMIT, MAX_PAGE_LIMIT, OffsetPropertySchema, OutputPropertySchema, ParamsPropertySchema, PkceCredentialsObjectSchema, RESOLVE_CREDENTIALS_ID, RecordPropertySchema, RecordsPropertySchema, RelayFetchSchema, RelayRequestSchema, ResolvedCredentialsSchema, SDK_OPTIONS_ID, TablePropertySchema, TablesPropertySchema, TriggerInboxKeyPropertySchema, TriggerInboxNamePropertySchema, TriggerInboxPropertySchema, WatchTriggerInboxSchema, ZAPIER_BASE_URL, ZAPIER_MAX_CONCURRENT_REQUESTS, ZAPIER_MAX_NETWORK_RETRIES, ZAPIER_MAX_NETWORK_RETRY_DELAY_MILLISECONDS, ZapierAbortDrainSignal, ZapierActionError, ZapierApiError, ZapierAppNotFoundError, ZapierApprovalError, ZapierAuthenticationError, ZapierBundleError, ZapierConfigurationError, ZapierConflictError, ZapierError, ZapierNotFoundError, ZapierRateLimitError, ZapierRelayError, ZapierReleaseTriggerMessageSignal, ZapierResourceNotFoundError, ZapierSignal, ZapierTimeoutError, ZapierUnknownError, ZapierValidationError, actionKeyResolver, actionTypeResolver, addPlugin, apiPlugin, apiPluginRef, appKeyResolver, appsPlugin, batch, buildApplicationLifecycleEvent, buildCapabilityMessage, buildErrorEvent, buildErrorEventWithContext, buildMethodCalledEvent, cleanupEventListeners, clearTokenCache, clientCredentialsNameResolver, clientIdResolver, composePlugins, connectionIdGenericResolver, connectionIdResolver, connectionsPlugin, connectionsPluginRef, createActionRunPlugin, createBaseEvent, createClientCredentialsPlugin, createController, createCorePlugin, createFunction, createMemoryCache, createPaginatedFunction, createPaginatedPluginMethod, createPluginMethod, createPluginStack, createSdk, createTableFieldsPlugin, createTablePlugin, createTableRecordsPlugin, createZapierApi, createZapierSdkWithoutRegistry, declareMethod, declareOptionalProperty, declarePlugin, declareProperty, defineFormatter, defineLegacyMerge, defineMethod, defineMethodOverride, defineOverride, definePlugin, defineProperty, defineResolver, deleteClientCredentialsPlugin, deleteTableFieldsPlugin, deleteTablePlugin, deleteTableRecordsPlugin, disposeSdk, durableRunIdResolver, eventEmissionHookPlugin, eventEmissionPlugin, eventEmissionPluginRef, fetchPlugin, findFirstConnectionPlugin, findManifestEntry, findUniqueConnectionPlugin, formatErrorMessage, fromFunctionPlugin, generateEventId, getActionInputFieldsSchemaPlugin, getActionPlugin, getActionRunPlugin, getAgent, getAppPlugin, getBaseUrlFromCredentials, getCallerContext, getCiPlatform, getClientIdFromCredentials, getConnectionPlugin, getContext, getCoreErrorCause, getCoreErrorCode, getCpuTime, getCurrentTimestamp, getMemoryUsage, getNegatable, getOrCreateApiClient, getOsInfo, getPlatformVersions, getPreferredManifestEntryKey, getProfilePlugin, getRegistryPlugin, getReleaseId, getTablePlugin, getTableRecordPlugin, getTokenFromCliLogin, getTtyContext, getZapierApprovalMode, getZapierDefaultApprovalMode, getZapierOpenAutoModeApprovalsInBrowser, getZapierSdkService, injectCliLogin, inputFieldKeyResolver, inputsAllOptionalResolver, inputsResolver, invalidateCachedToken, invalidateCredentialsToken, isCi, isCliLoginAvailable, isClientCredentials, isCoreCancelledSignal, isCoreError, isCoreSignal, isCredentialsFunction, isCredentialsObject, isPermanentHttpError, isPkceCredentials, isPositional, isZapierAbortDrainSignal, isZapierActionError, isZapierAppNotFoundError, isZapierApprovalError, isZapierAuthenticationError, isZapierBundleError, isZapierConflictError, isZapierError, isZapierNotFoundError, isZapierRateLimitError, isZapierReleaseTriggerMessageSignal, isZapierResourceNotFoundError, isZapierSignal, isZapierTimeoutError, isZapierValidationError, listActionInputFieldChoicesPlugin, listActionInputFieldsPlugin, listActionsPlugin, listAppsPlugin, listClientCredentialsPlugin, listConnectionsPlugin, listTableFieldsPlugin, listTableRecordsPlugin, listTablesPlugin, logDeprecation, manifestPlugin, manifestPluginRef, omitExports, operationAnnotatorPlugin, parseConcurrencyEnvVar, readManifestFromFile, registryPlugin, requestPlugin, resetDeprecationWarnings, resolveAuth, resolveAuthToken, resolveCredentials, resolveCredentialsFromEnv, resolveCredentialsPlugin, resolveCredentialsPluginRef, resolvePlugin, runActionPlugin, runInMethodScope, runWithCallerContext, runWithTelemetryContext, sdkOptionsPluginRef, selectExports, tableFieldIdsResolver, tableFieldsResolver, tableFiltersResolver, tableIdResolver, tableNameResolver, tableRecordIdResolver, tableRecordIdsResolver, tableRecordsResolver, tableSortResolver, tableUpdateRecordsResolver, toSnakeCase, toTitleCase, triggerInboxResolver, triggerMessagesResolver, updateTableRecordsPlugin, workflowDraftIdResolver, workflowIdResolver, workflowRunIdResolver, workflowVersionIdResolver, zapierAdaptError, zapierCoreOptions, zapierSdkPlugin } from './chunk-R6U6HNVF.mjs';
 import './chunk-Y6FXYEAI.mjs';
 import { z } from 'zod';
 
@@ -7,6 +7,7 @@ var codeSubstrateDefaults = {
   categories: ["code-workflow"],
   experimental: true
 };
+var CODE_SUBSTRATE_ANALYZER_API = "/code-substrate-analyzer";
 var CODE_SUBSTRATE_RUNNER_API = "/code-substrate-runner/api/v0";
 var CODE_SUBSTRATE_WORKFLOWS_API = "/code-substrate-workflows/api/v0";
 var JsonPayloadSchema = z.preprocess((val) => {
@@ -424,6 +425,111 @@ var createWorkflowPlugin = defineMethod({
     return { data: CreateWorkflowResponseSchema.parse(raw) };
   }
 });
+var ImportWorkflowOptionsSchema = z.object({
+  zap: z.string().min(1).max(128).describe(
+    "ID of the Zap to import. Must be owned by the requesting user. Recorded on the created workflow as source_zap_id."
+  ),
+  name: z.string().optional().describe(
+    `Name for the created workflow. Defaults to a kebab-cased form of the Zap's title, or "imported-workflow" when the Zap has no title.`
+  ),
+  private: z.boolean().optional().describe(
+    "Restrict the created workflow to the creating user. Defaults to false, which makes it account-visible."
+  )
+}).describe(
+  "Convert an existing Zap into a durable workflow. Transforms the Zap's latest published version (falling back to its draft only when the Zap has never been published) and puts the resulting source in an open draft. The workflow is created disabled with no published version, so publish the draft to make it live. The original Zap is untouched and keeps running."
+);
+var TranslationIssueSchema = z.object({
+  line: z.number().int().describe(
+    "1-based line in the generated source the issue relates to, or 0 when not line-specific."
+  ),
+  column: z.number().int().describe("1-based column, or 0 when not column-specific."),
+  node_kind: z.string().describe(
+    'Category of the issue, used to group and message them, e.g. "invalid-connection-id", "DelayStep", "app-version-conflict".'
+  ),
+  step_name: z.string().optional().describe("ZDL step id or name the issue originated from, when known."),
+  message: z.string().describe("Human-readable description of the issue."),
+  blocking: z.boolean().describe(
+    "Whether the issue must be resolved before the draft can be published. Computed server-side, so callers do not re-derive it. A blocking issue does not prevent the draft being created."
+  )
+});
+var ImportedWorkflowSchema = z.object({
+  id: z.string().describe("Workflow ID (UUID)"),
+  name: z.string().describe("Workflow name"),
+  description: z.string().nullable().optional().describe("Optional workflow description (null if unset)"),
+  trigger_url: WorkflowTriggerUrlSchema,
+  enabled: z.boolean().describe(
+    "Whether the workflow accepts triggers. An import always lands disabled."
+  ),
+  disabled_reason: WorkflowDisabledReasonSchema.nullable().optional().describe("Why the workflow is off, when system-disabled."),
+  is_private: z.boolean().describe(
+    "Whether the workflow is private to the creating user. False means account-visible."
+  ),
+  source_zap_id: z.string().nullable().optional().describe("The Zap this workflow was imported from."),
+  created_by_user_id: z.string(),
+  updated_by_user_id: z.string().nullable().optional(),
+  current_version_id: z.string().nullable().optional().describe("Null on a fresh import, which has no published version yet."),
+  triggers: z.array(WorkflowTriggerSchema).describe("Empty on a fresh import, which has no published version yet."),
+  created_at: z.string(),
+  updated_at: z.string().optional()
+});
+var ImportWorkflowResponseSchema = z.object({
+  workflow: ImportedWorkflowSchema.describe(
+    "The created workflow. Disabled, with no published version, and source_zap_id set to the imported Zap."
+  ),
+  draft: WorkflowDraftSchema.describe(
+    "The open draft holding the transformed source."
+  ),
+  issues: z.array(TranslationIssueSchema).describe(
+    "Blocking and non-blocking translation issues from the transform, passed through unchanged. Blocking issues do not prevent draft creation; they must be resolved before the draft will publish."
+  )
+});
+
+// src/plugins/codeSubstrate/importWorkflow/index.ts
+var importWorkflowPlugin = defineMethod({
+  ...codeSubstrateDefaults,
+  name: "importWorkflow",
+  imports: [apiPluginRef],
+  type: "create",
+  itemType: "Workflow",
+  // The response is the composite `{ workflow, draft, issues }`, not the bare
+  // `WorkflowItem` the docs generator derives from itemType.
+  returnType: "ImportWorkflowResponse",
+  inputSchema: ImportWorkflowOptionsSchema,
+  outputSchema: ImportWorkflowResponseSchema,
+  skipOutputValidation: true,
+  output: "item",
+  run: async ({ imports, input }) => {
+    const api = imports.api;
+    const body = { zap_id: input.zap };
+    if (input.name !== void 0) {
+      body.name = input.name;
+    }
+    if (input.private !== void 0) {
+      body.is_private = input.private;
+    }
+    const raw = await api.post(
+      `${CODE_SUBSTRATE_WORKFLOWS_API}/workflows/import`,
+      body,
+      {
+        authRequired: true,
+        // Import is owner-gated upstream: the endpoint refuses a Zap the
+        // requesting user does not own. A bare 403 tells the caller nothing
+        // about which gate they hit or what to do, so name both.
+        customErrorHandler: ({ status, data }) => {
+          if (status === 403) {
+            const detail = extractErrorDetail(data);
+            return new ZapierApiError(
+              `${detail ?? "Zap import forbidden"} \u2014 only Zaps owned by the requesting user can be imported. Check the Zap ID belongs to this user, or ask its owner to run the import. Retrying will not help.`,
+              { statusCode: status }
+            );
+          }
+          return void 0;
+        }
+      }
+    );
+    return { data: ImportWorkflowResponseSchema.parse(raw) };
+  }
+});
 var UpdateWorkflowOptionsSchema = z.object({
   workflow: z.string().uuid().describe("Durable workflow ID"),
   name: z.string().min(1).optional().describe("New name for the workflow"),
@@ -1844,6 +1950,91 @@ var triggerWorkflowPlugin = defineMethod({
     return { data: TriggerWorkflowResponseSchema.parse(raw) };
   }
 });
+var MAX_SOURCE_FILES_COUNT = 50;
+var MAX_SOURCE_FILE_LENGTH = 2e5;
+var DEFAULT_ENTRYPOINT_FILE = "/workflow.ts";
+var EXAMPLE_SOURCE_FILES = {
+  [DEFAULT_ENTRYPOINT_FILE]: 'import { defineDurable } from "@zapier/zapier-durable"; export default defineDurable("hello-world", async (ctx, input) => { return ctx.step("greet", async () => "Hello, world!"); });'
+};
+var WorkflowValidationSourceFilesSchema = z.record(
+  z.string().regex(/^\//, "source file paths must start with /"),
+  z.string().max(MAX_SOURCE_FILE_LENGTH)
+).refine((files) => Object.keys(files).length > 0, {
+  message: "sourceFiles must contain at least one file"
+}).refine((files) => Object.keys(files).length <= MAX_SOURCE_FILES_COUNT, {
+  message: `sourceFiles must contain at most ${MAX_SOURCE_FILES_COUNT} files`
+}).describe("Exact TypeScript sources keyed by absolute logical path.").meta({ example: EXAMPLE_SOURCE_FILES });
+var ValidateWorkflowOptionsSchema = z.object({
+  sourceFiles: WorkflowValidationSourceFilesSchema,
+  entrypointFile: z.string().regex(/^\//, "entrypointFile must start with /").optional().describe(
+    "Absolute logical path of the entry file in sourceFiles. Defaults to /workflow.ts."
+  )
+}).refine(
+  ({ sourceFiles, entrypointFile }) => (entrypointFile ?? DEFAULT_ENTRYPOINT_FILE) in sourceFiles,
+  {
+    path: ["entrypointFile"],
+    message: "entrypointFile must identify a file in sourceFiles"
+  }
+).describe(
+  "Validate durable workflow source without publishing it. Returns source diagnostics; issue kinds are extensible and may be unfamiliar to the client."
+);
+var WorkflowValidationSourceLocationSchema = z.object({
+  file_id: z.string().describe("Source file containing the diagnostic."),
+  start_line: z.number().int().positive().describe("Inclusive 1-based start line."),
+  start_column: z.number().int().positive().describe("Inclusive 1-based start column."),
+  end_line: z.number().int().positive().describe("Inclusive 1-based end line."),
+  end_column: z.number().int().positive().describe("Inclusive 1-based end column.")
+}).describe("1-based source coordinates within a single sourceFiles entry.");
+var WorkflowValidationIssueSchema = z.object({
+  kind: z.string().describe(
+    "Extensible diagnostic category; clients must accept unfamiliar values."
+  ),
+  message: z.string().describe("Safe human-readable explanation."),
+  // Unlike `kind`, severity is a closed vocabulary on the analyzer side: a
+  // new value requires a new API version, and every issue carries one, so
+  // callers can rank findings without a missing-severity branch.
+  severity: z.enum(["error", "warning", "info", "hint"]).describe("Diagnostic severity."),
+  suggestion: z.string().optional().describe("Actionable fix hint."),
+  source: WorkflowValidationSourceLocationSchema.optional().describe(
+    "Affected source location."
+  ),
+  source_excerpt: z.string().optional().describe(
+    "Source text the diagnostic was raised against, truncated to 240 characters."
+  ),
+  syntax_kind: z.string().optional().describe(
+    "TypeScript AST node kind the diagnostic was raised against (e.g. `CallExpression`)."
+  )
+});
+var ValidateWorkflowResponseSchema = z.object({
+  issues: z.array(WorkflowValidationIssueSchema).describe("Source diagnostics, or an empty array when validation passes.")
+});
+
+// src/plugins/codeSubstrate/validateWorkflow/index.ts
+var validateWorkflowPlugin = defineMethod({
+  ...codeSubstrateDefaults,
+  name: "validateWorkflow",
+  imports: [apiPluginRef],
+  itemType: "WorkflowValidation",
+  inputSchema: ValidateWorkflowOptionsSchema,
+  outputSchema: ValidateWorkflowResponseSchema,
+  skipOutputValidation: true,
+  output: "item",
+  resolvers: { sourceFiles: sourceFilesResolver },
+  run: async ({ imports, input }) => {
+    const body = {
+      source_files: input.sourceFiles
+    };
+    if (input.entrypointFile !== void 0) {
+      body.entrypoint_file = input.entrypointFile;
+    }
+    const raw = await imports.api.post(
+      `${CODE_SUBSTRATE_ANALYZER_API}/validations`,
+      body,
+      { authRequired: true }
+    );
+    return { data: ValidateWorkflowResponseSchema.parse(raw) };
+  }
+});
 
 // src/plugins/humanInput/shared.ts
 var humanInputDefaults = {
@@ -2192,6 +2383,7 @@ var zapierExperimentalSdkPlugin = definePlugin({
     listWorkflowsPlugin,
     getWorkflowPlugin,
     createWorkflowPlugin,
+    importWorkflowPlugin,
     updateWorkflowPlugin,
     enableWorkflowPlugin,
     disableWorkflowPlugin,
@@ -2213,6 +2405,7 @@ var zapierExperimentalSdkPlugin = definePlugin({
     cancelDurableRunPlugin,
     triggerWorkflowPlugin,
     getTriggerRunPlugin,
+    validateWorkflowPlugin,
     // Human input (experimental). Routed through the Public API Gateway
     // rather than the sdkapi proxy — see the `/forms` entry in api/client.ts.
     createFormPlugin