@zixt/host 0.0.100 → 0.0.102

package/dist/index.js

@@ -28,7 +28,7 @@ import { homedir as homedir3 } from "node:os";
 // package.json
 var package_default = {
   name: "@zixt/host",
-  version: "0.0.100",
+  version: "0.0.102",
   type: "module",
   exports: {
     ".": "./src/client.ts",
@@ -14618,6 +14618,10 @@ var ID_PREFIXES = {
   timer: "tmr",
   event: "evt",
   schedule: "sch",
+  /** Organization-owned inbound Webhook Automation. */
+  webhookAutomation: "wha",
+  /** One admitted or rejected delivery for a Webhook Automation. */
+  webhookDelivery: "whd",
   /** Organization-owned reusable AI-teammate skill. */
   orgSkill: "skl",
   /** Organization-owned reusable Automation routine. */
@@ -14666,6 +14670,8 @@ var ID_PREFIXES = {
   managerCredentialRequest: "mcr",
   /** One Manager-prepared generic API setup or invocation card (MG-20). */
   managerApiAction: "maa",
+  /** One Manager-prepared Webhook Automation setup card (MG-21). */
+  managerWebhookAction: "mwa",
   /** One Manager inference call's token-metering row (MG-8). */
   managerUsage: "mgu",
   /** One ordered Manager reply awaiting Slack delivery. */
@@ -14708,6 +14714,8 @@ var IntegrationDefinitionId = idSchema(
 var IntegrationLogoId = idSchema(ID_PREFIXES.integrationLogo, "Integration logo id");
 var ApprovalId = idSchema(ID_PREFIXES.approval, "approval id");
 var ScheduleId = idSchema(ID_PREFIXES.schedule, "schedule id");
+var WebhookAutomationId = idSchema(ID_PREFIXES.webhookAutomation, "Webhook Automation id");
+var WebhookDeliveryId = idSchema(ID_PREFIXES.webhookDelivery, "webhook delivery id");
 var OrgSkillId = idSchema(ID_PREFIXES.orgSkill, "organization skill id");
 var OrgRoutineId = idSchema(ID_PREFIXES.orgRoutine, "organization routine id");
 var BrowserSessionId = idSchema(ID_PREFIXES.browserSession, "browser session id");
@@ -14727,6 +14735,10 @@ var ManagerCredentialRequestId = idSchema(
   "Manager credential request id"
 );
 var ManagerApiActionId = idSchema(ID_PREFIXES.managerApiAction, "Manager API action id");
+var ManagerWebhookActionId = idSchema(
+  ID_PREFIXES.managerWebhookAction,
+  "Manager webhook action id"
+);
 var ManagerEmailInboxId = idSchema(
   ID_PREFIXES.managerEmailInbox,
   "Manager email inbox id"
@@ -18755,6 +18767,138 @@ var CLOSE_CODES = {
 var UNSUPPORTED_PROTOCOL_CLOSE_REASON = "unsupported protocol version";
 var CLOSE_REASON_MAX_BYTES = 123;
 
+// ../../packages/contracts/src/webhook-automations.ts
+var WebhookHeaderName = external_exports.string().min(1).max(100).regex(/^[A-Za-z0-9-]+$/, "header names may contain letters, numbers, and hyphens");
+var WebhookSecret = external_exports.string().min(8).max(2e3);
+var RotatingSecretProjection = {
+  secretConfigured: external_exports.literal(true),
+  previousSecretValidUntil: IsoDate.nullable()
+};
+var WebhookAuthenticationProjection = external_exports.discriminatedUnion("kind", [
+  external_exports.object({ kind: external_exports.literal("none") }).strict(),
+  external_exports.object({ kind: external_exports.literal("bearer"), ...RotatingSecretProjection }).strict(),
+  external_exports.object({
+    kind: external_exports.literal("basic"),
+    username: external_exports.string().min(1).max(200),
+    ...RotatingSecretProjection
+  }).strict(),
+  external_exports.object({ kind: external_exports.literal("github"), ...RotatingSecretProjection }).strict(),
+  external_exports.object({
+    kind: external_exports.literal("stripe"),
+    toleranceSeconds: external_exports.number().int().min(30).max(86400),
+    ...RotatingSecretProjection
+  }).strict(),
+  external_exports.object({
+    kind: external_exports.literal("hmac"),
+    signatureHeader: WebhookHeaderName,
+    signaturePrefix: external_exports.string().max(40),
+    timestampHeader: WebhookHeaderName.nullable(),
+    deliveryIdHeader: WebhookHeaderName.nullable(),
+    digestEncoding: external_exports.enum(["hex", "base64"]),
+    toleranceSeconds: external_exports.number().int().min(30).max(86400),
+    ...RotatingSecretProjection
+  }).strict()
+]);
+var WebhookAuthenticationSetup = external_exports.discriminatedUnion("kind", [
+  external_exports.object({ kind: external_exports.literal("none"), acknowledgedRisk: external_exports.literal(true) }).strict(),
+  external_exports.object({ kind: external_exports.literal("bearer"), token: WebhookSecret }).strict(),
+  external_exports.object({
+    kind: external_exports.literal("basic"),
+    username: external_exports.string().min(1).max(200),
+    password: external_exports.string().min(1).max(2e3)
+  }).strict(),
+  external_exports.object({ kind: external_exports.literal("github"), secret: WebhookSecret }).strict(),
+  external_exports.object({
+    kind: external_exports.literal("stripe"),
+    secret: WebhookSecret,
+    toleranceSeconds: external_exports.number().int().min(30).max(86400).default(300)
+  }).strict(),
+  external_exports.object({
+    kind: external_exports.literal("hmac"),
+    secret: WebhookSecret,
+    signatureHeader: WebhookHeaderName.default("X-Webhook-Signature"),
+    signaturePrefix: external_exports.string().max(40).default("sha256="),
+    timestampHeader: WebhookHeaderName.nullable().default("X-Webhook-Timestamp"),
+    deliveryIdHeader: WebhookHeaderName.nullable().default("X-Webhook-Id"),
+    digestEncoding: external_exports.enum(["hex", "base64"]).default("hex"),
+    toleranceSeconds: external_exports.number().int().min(30).max(86400).default(300)
+  }).strict()
+]);
+var WebhookAutomation = external_exports.object({
+  id: WebhookAutomationId,
+  orgId: OrgId,
+  name: external_exports.string().min(1).max(120),
+  instructions: external_exports.string().min(1).max(1e5),
+  assignedAgentId: AgentId.nullable(),
+  enabled: external_exports.boolean(),
+  endpointUrl: external_exports.string().url(),
+  authentication: WebhookAuthenticationProjection,
+  rateLimitPerMinute: external_exports.number().int().min(1).max(1e3),
+  retentionDays: external_exports.number().int().min(1).max(90),
+  lastDeliveryAt: IsoDate.nullable(),
+  createdAt: IsoDate,
+  updatedAt: IsoDate
+}).strict();
+var CreateWebhookAutomationRequest = external_exports.object({
+  name: WebhookAutomation.shape.name,
+  instructions: WebhookAutomation.shape.instructions,
+  assignedAgentId: AgentId.nullable().optional(),
+  authentication: WebhookAuthenticationSetup,
+  rateLimitPerMinute: WebhookAutomation.shape.rateLimitPerMinute.optional(),
+  retentionDays: WebhookAutomation.shape.retentionDays.optional()
+}).strict();
+var UpdateWebhookAutomationRequest = external_exports.object({
+  name: WebhookAutomation.shape.name.optional(),
+  instructions: WebhookAutomation.shape.instructions.optional(),
+  assignedAgentId: AgentId.nullable().optional(),
+  enabled: external_exports.boolean().optional(),
+  rateLimitPerMinute: WebhookAutomation.shape.rateLimitPerMinute.optional(),
+  retentionDays: WebhookAutomation.shape.retentionDays.optional()
+}).strict().refine((value) => Object.keys(value).length > 0, "empty update");
+var ListWebhookAutomationsResponse = external_exports.object({ webhooks: external_exports.array(WebhookAutomation) }).strict();
+var WebhookDeliveryStatus = external_exports.enum([
+  "received",
+  "processing",
+  "needs_attention",
+  "completed",
+  "failed",
+  "rejected"
+]);
+var WebhookDeliveryFailureCode = external_exports.enum([
+  "authentication_failed",
+  "payload_too_large",
+  "rate_limited",
+  "manager_unavailable",
+  "processing_failed"
+]);
+var WebhookDelivery = external_exports.object({
+  id: WebhookDeliveryId,
+  webhookAutomationId: WebhookAutomationId,
+  status: WebhookDeliveryStatus,
+  externalDeliveryId: external_exports.string().max(500).nullable(),
+  contentType: external_exports.string().max(200),
+  byteLength: external_exports.number().int().min(0),
+  isTest: external_exports.boolean(),
+  replayedFromDeliveryId: WebhookDeliveryId.nullable(),
+  failureCode: WebhookDeliveryFailureCode.nullable(),
+  resultSummary: external_exports.string().max(4e3).nullable(),
+  receivedAt: IsoDate,
+  completedAt: IsoDate.nullable()
+}).strict();
+var WebhookDeliveryDetail = WebhookDelivery.extend({
+  /** Admin-only retained body. Null for rejected deliveries and expired bodies. */
+  payload: external_exports.string().max(1e6).nullable()
+}).strict();
+var ListWebhookDeliveriesResponse = external_exports.object({
+  deliveries: external_exports.array(WebhookDelivery).max(100),
+  nextCursor: external_exports.string().max(1e3).nullable()
+}).strict();
+var TestWebhookDeliveryRequest = external_exports.object({
+  payload: external_exports.string().min(1).max(1e5),
+  contentType: external_exports.string().min(1).max(200).default("application/json"),
+  externalDeliveryId: external_exports.string().min(1).max(500).optional()
+}).strict();
+
 // ../../packages/contracts/src/manager.ts
 var MANAGER_DEFAULT_MODEL = "gpt-5.6-luna";
 var MANAGER_DISPLAY_NAME_MAX = 60;
@@ -18919,7 +19063,9 @@ var ConversationEventProjection = external_exports.discriminatedUnion("kind", [
     /** Present only for a secure Credential entry card; never a value (MG-17). */
     credentialRequestId: ManagerCredentialRequestId.nullable().optional(),
     /** Present only for a generic API setup/invocation card; never credentials (MG-20). */
-    apiActionId: ManagerApiActionId.nullable().optional()
+    apiActionId: ManagerApiActionId.nullable().optional(),
+    /** Present only for a Webhook Automation secure setup card (MG-21). */
+    webhookActionId: ManagerWebhookActionId.nullable().optional()
   }).strict(),
   /** A mirrored child-Task event: what the teammate wrote or became. */
   external_exports.object({
@@ -19125,6 +19271,45 @@ var ManagerApiActionResponse = external_exports.object({
   action: ManagerApiActionProjection,
   oauth: ManagerIntegrationOAuthStart.nullable()
 }).strict();
+var ManagerWebhookActionStatus = external_exports.enum([
+  "awaiting_entry",
+  "completed",
+  "cancelled",
+  "expired",
+  "failed"
+]);
+var ManagerWebhookActionBase = {
+  id: ManagerWebhookActionId,
+  conversationId: ConversationId,
+  status: ManagerWebhookActionStatus,
+  suggestedAuthentication: external_exports.enum(["hmac", "github", "stripe", "bearer", "basic", "none"]),
+  outcome: external_exports.string().max(2e3).nullable(),
+  createdAt: external_exports.string(),
+  expiresAt: external_exports.string()
+};
+var ManagerWebhookCreateActionProjection = external_exports.object({
+  ...ManagerWebhookActionBase,
+  kind: external_exports.literal("create"),
+  name: external_exports.string().min(1).max(120),
+  instructions: external_exports.string().min(1).max(1e5),
+  assignedAgentId: AgentId.nullable(),
+  rateLimitPerMinute: external_exports.number().int().min(1).max(1e3),
+  retentionDays: external_exports.number().int().min(1).max(90),
+  webhook: WebhookAutomation.nullable()
+}).strict();
+var ManagerWebhookAuthenticationActionProjection = external_exports.object({
+  ...ManagerWebhookActionBase,
+  kind: external_exports.literal("authentication"),
+  webhook: WebhookAutomation.nullable()
+}).strict();
+var ManagerWebhookActionProjection = external_exports.discriminatedUnion("kind", [
+  ManagerWebhookCreateActionProjection,
+  ManagerWebhookAuthenticationActionProjection
+]);
+var SubmitManagerWebhookActionRequest = external_exports.object({
+  requestId: external_exports.uuid(),
+  authentication: WebhookAuthenticationSetup
+}).strict();
 var NonEmptyTaskRunnerSelection = TaskRunnerSelection.refine(
   (selection) => selection.type !== void 0 || selection.model !== void 0 || selection.effort !== void 0,
   "choose at least one runtime preference"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zixt/host",
-  "version": "0.0.100",
+  "version": "0.0.102",
   "type": "module",
   "exports": {
     ".": "./src/client.ts",