corsair 0.1.17 → 0.1.19

package/dist/core/client/index.d.ts

@@ -1,11 +1,11 @@
 import type { ZodTypeAny } from 'zod';
 import type { CorsairDatabase } from '../../db/kysely/database';
-import { type CorsairInspectMethods } from '../inspect';
 import type { CorsairPluginSchema, PluginEntityClients } from '../../db/orm';
 import type { AccountKeyManagerFor, IntegrationKeyManagerFor, PluginAuthConfig } from '../auth/types';
 import type { AuthTypes } from '../constants';
 import type { BindEndpoints, EndpointTree } from '../endpoints';
 import type { CorsairErrorHandler } from '../errors';
+import type { CorsairInspectMethods } from '../inspect';
 import type { CorsairPlugin } from '../plugins';
 import type { BindWebhooks, RawWebhookRequest, WebhookTree } from '../webhooks';
 /**

package/dist/core/client/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../core/client/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,KAAK,CAAC;AACtC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAEhE,OAAO,EAEN,KAAK,qBAAqB,EAC1B,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EACX,mBAAmB,EAEnB,mBAAmB,EACnB,MAAM,cAAc,CAAC;AAKtB,OAAO,KAAK,EACX,oBAAoB,EACpB,wBAAwB,EACxB,gBAAgB,EAChB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEhE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,KAAK,EAEX,aAAa,EAIb,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAOhF;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,CAC9B,MAAM,SAAS,mBAAmB,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,GAAG,SAAS,IACvE,MAAM,SAAS,mBAAmB,CAAC,MAAM,QAAQ,CAAC,GACnD;IAAE,EAAE,EAAE,mBAAmB,CAAC,QAAQ,CAAC,CAAA;CAAE,GACrC,EAAE,CAAC;AAMN;;GAEG;AACH,KAAK,mBAAmB,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,IAAI,GAAG,KAAK,CAAC,SAAS,CAC9E,CAAC,EAAE,MAAM,CAAC,KACN,IAAI,GACN,CAAC,GACD,KAAK,CAAC;AAET;;;;;;;;;;GAUG;AACH,MAAM,MAAM,eAAe,CAC1B,OAAO,EACP,eAAe,SAAS,SAAS,GAAG,SAAS,GAAG,SAAS,IACtD,UAAU,SAAS,MAAM,OAAO,GAElC,OAAO,CAAC,UAAU,CAAC,SAAS,SAAS,GAEpC,OAAO,CAAC,UAAU,CAAC,GAEnB,eAAe,SAAS,SAAS,GAC/B,eAAe,GACf,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,SAAS,SAAS,GACjD,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,GAChC,KAAK,GAET,eAAe,SAAS,SAAS,GAC/B,eAAe,GACf,KAAK,CAAC;AAEV;;GAEG;AACH,KAAK,kBAAkB,CAAC,CAAC,IAAI,CAAC,SAAS;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAA;CAAE,GAAG,CAAC,GAAG,KAAK,CAAC;AAEzE;;;;GAIG;AACH,KAAK,oBAAoB,CAAC,CAAC,IAAI,CAAC,SAAS;IAAE,iBAAiB,CAAC,EAAE,MAAM,CAAC,CAAA;CAAE,GACrE,WAAW,CAAC,CAAC,CAAC,SAAS,SAAS,GAC/B,WAAW,CAAC,CAAC,CAAC,GACd,SAAS,GACV,SAAS,CAAC;AAEb;;GAEG;AACH,KAAK,eAAe,CAAC,CAAC,IAAI,CAAC,SAAS;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAAA;CAAE,GACzD,CAAC,SAAS,gBAAgB,GACzB,CAAC,GACD,SAAS,GACV,SAAS,CAAC;AAEb;;;GAGG;AACH,KAAK,oBAAoB,CAAC,CAAC,SAAS,aAAa,IAAI,CAAC,SAAS,aAAa,CAC3E,MAAM,EAAE,EACR,MAAM,MAAM,EACZ,MAAM,SAAS,EACf,MAAM,QAAQ,CACd,GACE;KACC,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,SAAS,YAAY,GACvC;QAAE,GAAG,EAAE,aAAa,CAAC,SAAS,CAAC,CAAA;KAAE,GACjC,EAAE,CAAC,GACL,mBAAmB,CAAC,MAAM,CAAC,GAC3B,CAAC,QAAQ,SAAS,WAAW,GAC1B;QACA,QAAQ,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;QACjC;;;;WAIG;QACH,oBAAoB,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC;KAC/D,GACA,EAAE,CAAC,GAEN,CAAC,eAAe,CACf,kBAAkB,CAAC,CAAC,CAAC,EACrB,oBAAoB,CAAC,CAAC,CAAC,CACvB,SAAS,SAAS,GAChB;QACA,IAAI,EAAE,oBAAoB,CACzB,eAAe,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAC/D,eAAe,CAAC,CAAC,CAAC,CAClB,CAAC;KACF,GACA,EAAE,CAAC;CACP,GACA,KAAK,CAAC;AAET;;GAEG;AACH,KAAK,oBAAoB,CAAC,CAAC,SAAS,aAAa,IAAI,CAAC,SAAS,aAAa,CAC3E,MAAM,EAAE,CACR,GACE,eAAe,CACf,kBAAkB,CAAC,CAAC,CAAC,EACrB,oBAAoB,CAAC,CAAC,CAAC,CACvB,SAAS,SAAS,GACjB;KACC,CAAC,IAAI,EAAE,GAAG,wBAAwB,CAClC,eAAe,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAC/D,eAAe,CAAC,CAAC,CAAC,CAClB;CACD,GACA,KAAK,GACN,KAAK,CAAC;AAET;;GAEG;AACH,KAAK,uBAAuB,CAAC,OAAO,SAAS,SAAS,aAAa,EAAE,IACpE,mBAAmB,CAAC,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAE5D;;GAEG;AACH,KAAK,qBAAqB,CAAC,OAAO,SAAS,SAAS,aAAa,EAAE,IAClE,mBAAmB,CAAC,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAE5D;;;GAGG;AACH,MAAM,MAAM,aAAa,CAAC,OAAO,SAAS,SAAS,aAAa,EAAE,IACjE,qBAAqB,CAAC,OAAO,CAAC,GAAG,qBAAqB,CAAC;AAExD;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,CAAC,OAAO,SAAS,SAAS,aAAa,EAAE,IAAI;IAC5E,UAAU,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,aAAa,CAAC,OAAO,CAAC,CAAC;IACzD;;;OAGG;IACH,IAAI,EAAE,uBAAuB,CAAC,OAAO,CAAC,CAAC;CACvC,GAAG,qBAAqB,CAAC;AAE1B;;GAEG;AACH,MAAM,MAAM,yBAAyB,CACpC,OAAO,SAAS,SAAS,aAAa,EAAE,IACrC,aAAa,CAAC,OAAO,CAAC,GAAG;IAC5B;;;OAGG;IACH,IAAI,EAAE,uBAAuB,CAAC,OAAO,CAAC,CAAC;CACvC,CAAC;AAsGF,MAAM,MAAM,yBAAyB,GAAG;IACvC,QAAQ,EAAE,eAAe,GAAG,SAAS,CAAC;IACtC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,iBAAiB,CAAC,EAAE,mBAAmB,CAAC;IACxC,iGAAiG;IACjG,cAAc,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,CAAC;CACpE,CAAC;AAMF;;;;;GAKG;AACH,wBAAgB,kBAAkB,CACjC,KAAK,CAAC,OAAO,SAAS,SAAS,aAAa,EAAE,EAE9C,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,yBAAyB,GAChC,aAAa,CAAC,OAAO,CAAC,CAyKxB;AAMD;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CACnC,KAAK,CAAC,OAAO,SAAS,SAAS,aAAa,EAAE,EAE9C,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,eAAe,EACzB,GAAG,EAAE,MAAM,GACT,uBAAuB,CAAC,OAAO,CAAC,CAyBlC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../core/client/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,KAAK,CAAC;AACtC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAEhE,OAAO,KAAK,EACX,mBAAmB,EAEnB,mBAAmB,EACnB,MAAM,cAAc,CAAC;AAKtB,OAAO,KAAK,EACX,oBAAoB,EACpB,wBAAwB,EACxB,gBAAgB,EAChB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEhE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAExD,OAAO,KAAK,EAEX,aAAa,EAIb,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAOhF;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,CAC9B,MAAM,SAAS,mBAAmB,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,GAAG,SAAS,IACvE,MAAM,SAAS,mBAAmB,CAAC,MAAM,QAAQ,CAAC,GACnD;IAAE,EAAE,EAAE,mBAAmB,CAAC,QAAQ,CAAC,CAAA;CAAE,GACrC,EAAE,CAAC;AAMN;;GAEG;AACH,KAAK,mBAAmB,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,IAAI,GAAG,KAAK,CAAC,SAAS,CAC9E,CAAC,EAAE,MAAM,CAAC,KACN,IAAI,GACN,CAAC,GACD,KAAK,CAAC;AAET;;;;;;;;;;GAUG;AACH,MAAM,MAAM,eAAe,CAC1B,OAAO,EACP,eAAe,SAAS,SAAS,GAAG,SAAS,GAAG,SAAS,IACtD,UAAU,SAAS,MAAM,OAAO,GAElC,OAAO,CAAC,UAAU,CAAC,SAAS,SAAS,GAEpC,OAAO,CAAC,UAAU,CAAC,GAEnB,eAAe,SAAS,SAAS,GAC/B,eAAe,GACf,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,SAAS,SAAS,GACjD,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,GAChC,KAAK,GAET,eAAe,SAAS,SAAS,GAC/B,eAAe,GACf,KAAK,CAAC;AAEV;;GAEG;AACH,KAAK,kBAAkB,CAAC,CAAC,IAAI,CAAC,SAAS;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAA;CAAE,GAAG,CAAC,GAAG,KAAK,CAAC;AAEzE;;;;GAIG;AACH,KAAK,oBAAoB,CAAC,CAAC,IAAI,CAAC,SAAS;IAAE,iBAAiB,CAAC,EAAE,MAAM,CAAC,CAAA;CAAE,GACrE,WAAW,CAAC,CAAC,CAAC,SAAS,SAAS,GAC/B,WAAW,CAAC,CAAC,CAAC,GACd,SAAS,GACV,SAAS,CAAC;AAEb;;GAEG;AACH,KAAK,eAAe,CAAC,CAAC,IAAI,CAAC,SAAS;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAAA;CAAE,GACzD,CAAC,SAAS,gBAAgB,GACzB,CAAC,GACD,SAAS,GACV,SAAS,CAAC;AAEb;;;GAGG;AACH,KAAK,oBAAoB,CAAC,CAAC,SAAS,aAAa,IAAI,CAAC,SAAS,aAAa,CAC3E,MAAM,EAAE,EACR,MAAM,MAAM,EACZ,MAAM,SAAS,EACf,MAAM,QAAQ,CACd,GACE;KACC,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,SAAS,YAAY,GACvC;QAAE,GAAG,EAAE,aAAa,CAAC,SAAS,CAAC,CAAA;KAAE,GACjC,EAAE,CAAC,GACL,mBAAmB,CAAC,MAAM,CAAC,GAC3B,CAAC,QAAQ,SAAS,WAAW,GAC1B;QACA,QAAQ,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;QACjC;;;;WAIG;QACH,oBAAoB,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC;KAC/D,GACA,EAAE,CAAC,GAEN,CAAC,eAAe,CACf,kBAAkB,CAAC,CAAC,CAAC,EACrB,oBAAoB,CAAC,CAAC,CAAC,CACvB,SAAS,SAAS,GAChB;QACA,IAAI,EAAE,oBAAoB,CACzB,eAAe,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAC/D,eAAe,CAAC,CAAC,CAAC,CAClB,CAAC;KACF,GACA,EAAE,CAAC;CACP,GACA,KAAK,CAAC;AAET;;GAEG;AACH,KAAK,oBAAoB,CAAC,CAAC,SAAS,aAAa,IAAI,CAAC,SAAS,aAAa,CAC3E,MAAM,EAAE,CACR,GACE,eAAe,CACf,kBAAkB,CAAC,CAAC,CAAC,EACrB,oBAAoB,CAAC,CAAC,CAAC,CACvB,SAAS,SAAS,GACjB;KACC,CAAC,IAAI,EAAE,GAAG,wBAAwB,CAClC,eAAe,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAC/D,eAAe,CAAC,CAAC,CAAC,CAClB;CACD,GACA,KAAK,GACN,KAAK,CAAC;AAET;;GAEG;AACH,KAAK,uBAAuB,CAAC,OAAO,SAAS,SAAS,aAAa,EAAE,IACpE,mBAAmB,CAAC,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAE5D;;GAEG;AACH,KAAK,qBAAqB,CAAC,OAAO,SAAS,SAAS,aAAa,EAAE,IAClE,mBAAmB,CAAC,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAE5D;;;GAGG;AACH,MAAM,MAAM,aAAa,CAAC,OAAO,SAAS,SAAS,aAAa,EAAE,IACjE,qBAAqB,CAAC,OAAO,CAAC,GAAG,qBAAqB,CAAC;AAExD;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,CAAC,OAAO,SAAS,SAAS,aAAa,EAAE,IAAI;IAC5E,UAAU,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,aAAa,CAAC,OAAO,CAAC,CAAC;IACzD;;;OAGG;IACH,IAAI,EAAE,uBAAuB,CAAC,OAAO,CAAC,CAAC;CACvC,GAAG,qBAAqB,CAAC;AAE1B;;GAEG;AACH,MAAM,MAAM,yBAAyB,CACpC,OAAO,SAAS,SAAS,aAAa,EAAE,IACrC,aAAa,CAAC,OAAO,CAAC,GAAG;IAC5B;;;OAGG;IACH,IAAI,EAAE,uBAAuB,CAAC,OAAO,CAAC,CAAC;CACvC,CAAC;AAsGF,MAAM,MAAM,yBAAyB,GAAG;IACvC,QAAQ,EAAE,eAAe,GAAG,SAAS,CAAC;IACtC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,iBAAiB,CAAC,EAAE,mBAAmB,CAAC;IACxC,iGAAiG;IACjG,cAAc,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,CAAC;CACpE,CAAC;AAMF;;;;;GAKG;AACH,wBAAgB,kBAAkB,CACjC,KAAK,CAAC,OAAO,SAAS,SAAS,aAAa,EAAE,EAE9C,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,yBAAyB,GAChC,aAAa,CAAC,OAAO,CAAC,CAoKxB;AAMD;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CACnC,KAAK,CAAC,OAAO,SAAS,SAAS,aAAa,EAAE,EAE9C,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,eAAe,EACzB,GAAG,EAAE,MAAM,GACT,uBAAuB,CAAC,OAAO,CAAC,CAyBlC"}

package/dist/core/client/index.js

@@ -1,7 +1,7 @@
 import { createKyselyEntityClient } from '../../db/kysely/orm';
-import { buildInspectMethods, } from '../inspect';
 import { createAccountKeyManager, createIntegrationKeyManager, } from '../auth/key-manager';
 import { bindEndpointsRecursively } from '../endpoints/bind';
+import { buildInspectMethods } from '../inspect';
 import { bindWebhooksRecursively } from '../webhooks/bind';
 // ─────────────────────────────────────────────────────────────────────────────
 // Account ID Resolver
@@ -79,7 +79,7 @@ function createEntityClient(database, getAccountId, entityTypeName, version, dat
  * @returns A fully configured Corsair client with account-level keys
  */
 export function buildCorsairClient(plugins, options) {
-    const { database, tenantId, kek, rootErrorHandlers, approvalConfig, } = options;
+    const { database, tenantId, kek, rootErrorHandlers, approvalConfig } = options;
     const apiUnsafe = {};
     const pluginEntitiesUnsafe = {};
     for (const plugin of plugins) {

package/dist/core/endpoints/bind.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bind.d.ts","sourceRoot":"","sources":["../../../core/endpoints/bind.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAGrD,OAAO,KAAK,EACX,qBAAqB,EAErB,iBAAiB,EACjB,cAAc,EACd,gBAAgB,EAChB,MAAM,YAAY,CAAC;AAMpB;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,QAAQ,CAE5D;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,wBAAwB,CAAC,EACxC,SAAS,EACT,KAAK,EACL,GAAG,EACH,IAAI,EACJ,QAAQ,EACR,aAAa,EACb,WAAgB,EAChB,UAAU,EACV,iBAAiB,EACjB,YAAY,EACZ,QAAQ,EACR,cAAc,GACd,EAAE;IACF,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAC3C,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,mBAAmB,CAAC;IACnC,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,UAAU,CAAC,EAAE,qBAAqB,CAAC;IACnC,mGAAmG;IACnG,iBAAiB,CAAC,EAAE;QACnB,IAAI,EAAE,cAAc,CAAC;QACrB,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;KAC7C,CAAC;IACF,sGAAsG;IACtG,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACjD,gFAAgF;IAChF,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,qEAAqE;IACrE,cAAc,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,CAAC;CACpE,GAAG,IAAI,CAwJP"}
+{"version":3,"file":"bind.d.ts","sourceRoot":"","sources":["../../../core/endpoints/bind.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAGrD,OAAO,KAAK,EACX,qBAAqB,EAErB,iBAAiB,EACjB,cAAc,EACd,gBAAgB,EAChB,MAAM,YAAY,CAAC;AAMpB;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,QAAQ,CAE5D;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,wBAAwB,CAAC,EACxC,SAAS,EACT,KAAK,EACL,GAAG,EACH,IAAI,EACJ,QAAQ,EACR,aAAa,EACb,WAAgB,EAChB,UAAU,EACV,iBAAiB,EACjB,YAAY,EACZ,QAAQ,EACR,cAAc,GACd,EAAE;IACF,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAC3C,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,mBAAmB,CAAC;IACnC,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,UAAU,CAAC,EAAE,qBAAqB,CAAC;IACnC,mGAAmG;IACnG,iBAAiB,CAAC,EAAE;QACnB,IAAI,EAAE,cAAc,CAAC;QACrB,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;KAC7C,CAAC;IACF,sGAAsG;IACtG,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACjD,gFAAgF;IAChF,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,qEAAqE;IACrE,cAAc,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,CAAC;CACpE,GAAG,IAAI,CA2JP"}

package/dist/core/endpoints/bind.js

@@ -33,9 +33,10 @@ export function bindEndpointsRecursively({ endpoints, hooks, ctx, tree, pluginId
             const operationPath = [...currentPath, key].join('.');
             const boundFn = async (args) => {
                 // ── Permission guard ────────────────────────────────────────────────────────────────
+                let onPermissionComplete;
                 if (permissionsConfig) {
                     const meta = endpointMeta?.[operationPath];
-                    const permResult = await enforcePermission({
+                    const { result: permResult, onComplete } = await enforcePermission({
                         pluginId,
                         endpointPath: operationPath,
                         args,
@@ -51,6 +52,7 @@ export function bindEndpointsRecursively({ endpoints, hooks, ctx, tree, pluginId
                     });
                     if (permResult === 'blocked')
                         return null;
+                    onPermissionComplete = onComplete;
                 }
                 const call = async (attemptNumber, callCtx, callArgs) => {
                     try {
@@ -105,24 +107,25 @@ export function bindEndpointsRecursively({ endpoints, hooks, ctx, tree, pluginId
                 };
                 const key = keyBuilder ? await keyBuilder(ctx, 'endpoint') : undefined;
                 if (!endpointHooks?.before && !endpointHooks?.after) {
-                    return call(0, { ...ctx, key }, args);
-                }
-                return (async () => {
-                    const ctxWithKey = { ...ctx, key };
-                    const beforeResult = endpointHooks.before
-                        ? await endpointHooks.before(ctxWithKey, args)
-                        : {
-                            ctx: ctxWithKey,
-                            args,
-                            continue: true,
-                            passToAfter: undefined,
-                        };
-                    if (beforeResult.continue === false)
-                        return;
-                    const res = await call(0, beforeResult.ctx, beforeResult.args);
-                    await endpointHooks.after?.(beforeResult.ctx, res, beforeResult.passToAfter);
+                    const res = await call(0, { ...ctx, key }, args);
+                    await onPermissionComplete?.();
                     return res;
-                })();
+                }
+                const ctxWithKey = { ...ctx, key };
+                const beforeResult = endpointHooks.before
+                    ? await endpointHooks.before(ctxWithKey, args)
+                    : {
+                        ctx: ctxWithKey,
+                        args,
+                        continue: true,
+                        passToAfter: undefined,
+                    };
+                if (beforeResult.continue === false)
+                    return;
+                const res = await call(0, beforeResult.ctx, beforeResult.args);
+                await endpointHooks.after?.(beforeResult.ctx, res, beforeResult.passToAfter);
+                await onPermissionComplete?.();
+                return res;
             };
             tree[key] = boundFn;
         }

package/dist/core/index.d.ts

@@ -34,12 +34,12 @@ export declare function createCorsair<const Plugins extends readonly CorsairPlug
 export type { AccountFieldNames, AccountKeyManagerFor, BaseAuthFieldConfig, BaseKeyManager, IntegrationFieldNames, IntegrationKeyManagerFor, OAuth2IntegrationCredentials, PluginAuthConfig, } from './auth';
 export { BASE_AUTH_FIELDS, createAccountKeyManager, createIntegrationKeyManager, decryptConfig, decryptDEK, decryptWithDEK, encryptConfig, encryptDEK, encryptWithDEK, generateDEK, initializeAccountDEK, initializeIntegrationDEK, reEncryptConfig, } from './auth';
 export type { CorsairClient, CorsairSingleTenantClient, CorsairTenantWrapper, } from './client';
-export type { CorsairInspectMethods, EndpointSchemaResult } from './inspect';
 export type { AllProviders, AuthTypes, BaseProviders } from './constants';
 export type { BindEndpoints, BoundEndpointFn, BoundEndpointTree, CorsairContext, CorsairEndpoint, EndpointPathsOf, EndpointTree, } from './endpoints';
 export type { CorsairErrorHandler, ErrorContext, ErrorHandler, ErrorHandlerAndMatchFunction, ErrorMatcher, RetryStrategies, RetryStrategy, } from './errors';
-export type { EnforcePermissionOptions } from './permissions';
-export type { BeforeHookResult, CorsairIntegration, CorsairKeyBuilder, CorsairKeyBuilderBase, CorsairPlugin, CorsairPluginContext, EndpointHooks, EndpointMetaEntry, EndpointRiskLevel, KeyBuilderContext, PermissionMode, PermissionPolicy, PluginEndpointMeta, PluginPermissionsConfig, WebhookHooks, } from './plugins';
+export type { CorsairInspectMethods, EndpointSchemaResult } from './inspect';
+export type { EnforcePermissionOptions, EnforcePermissionResult } from './permissions';
+export type { BeforeHookResult, CorsairIntegration, CorsairKeyBuilder, CorsairKeyBuilderBase, CorsairPlugin, CorsairPluginContext, EndpointHooks, EndpointMetaEntry, EndpointRiskLevel, KeyBuilderContext, PermissionMode, PermissionPolicy, PluginEndpointMeta, PluginPermissionsConfig, RequiredPluginEndpointMeta, RequiredPluginEndpointSchemas, RequiredPluginWebhookSchemas, WebhookHooks, } from './plugins';
 export type { Bivariant, UnionToIntersection } from './utils';
-export type { BindWebhooks, BoundWebhook, BoundWebhookTree, CorsairWebhook, CorsairWebhookHandler, CorsairWebhookMatcher, RawWebhookRequest, WebhookRequest, WebhookResponse, WebhookTree, } from './webhooks';
+export type { BindWebhooks, BoundWebhook, BoundWebhookTree, CorsairWebhook, CorsairWebhookHandler, CorsairWebhookMatcher, RawWebhookRequest, WebhookPathsOf, WebhookRequest, WebhookResponse, WebhookTree, } from './webhooks';
 //# sourceMappingURL=index.d.ts.map

package/dist/core/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../core/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAG7D,OAAO,KAAK,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAGhF,OAAO,KAAK,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAMnE,eAAO,MAAM,gBAAgB,eAAiC,CAAC;AAE/D,MAAM,MAAM,qBAAqB,GAAG;IACnC,OAAO,EAAE,SAAS,aAAa,EAAE,CAAC;IAClC,QAAQ,EAAE,eAAe,GAAG,SAAS,CAAC;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,EAAE;QACV,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;KAC9B,CAAC;CACF,CAAC;AAMF;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,KAAK,CAAC,OAAO,SAAS,SAAS,aAAa,EAAE,EAC3E,MAAM,EAAE,kBAAkB,CAAC,OAAO,CAAC,GAAG;IAAE,YAAY,EAAE,IAAI,CAAA;CAAE,GAC1D,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAEjC;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,KAAK,CAAC,OAAO,SAAS,SAAS,aAAa,EAAE,EAC3E,MAAM,EAAE,kBAAkB,CAAC,OAAO,CAAC,GAAG;IAAE,YAAY,CAAC,EAAE,KAAK,GAAG,SAAS,CAAA;CAAE,GACxE,yBAAyB,CAAC,OAAO,CAAC,CAAC;AA6EtC,YAAY,EACX,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,qBAAqB,EACrB,wBAAwB,EACxB,4BAA4B,EAC5B,gBAAgB,GAChB,MAAM,QAAQ,CAAC;AAEhB,OAAO,EACN,gBAAgB,EAChB,uBAAuB,EACvB,2BAA2B,EAC3B,aAAa,EACb,UAAU,EACV,cAAc,EACd,aAAa,EACb,UAAU,EACV,cAAc,EACd,WAAW,EACX,oBAAoB,EACpB,wBAAwB,EACxB,eAAe,GACf,MAAM,QAAQ,CAAC;AAEhB,YAAY,EACX,aAAa,EACb,yBAAyB,EACzB,oBAAoB,GACpB,MAAM,UAAU,CAAC;AAElB,YAAY,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAE7E,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAG1E,YAAY,EACX,aAAa,EACb,eAAe,EACf,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,eAAe,EACf,YAAY,GACZ,MAAM,aAAa,CAAC;AAErB,YAAY,EACX,mBAAmB,EACnB,YAAY,EACZ,YAAY,EACZ,4BAA4B,EAC5B,YAAY,EACZ,eAAe,EACf,aAAa,GACb,MAAM,UAAU,CAAC;AAClB,YAAY,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAG9D,YAAY,EACX,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACjB,qBAAqB,EACrB,aAAa,EACb,oBAAoB,EACpB,aAAa,EACb,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EAClB,uBAAuB,EACvB,YAAY,GACZ,MAAM,WAAW,CAAC;AAGnB,YAAY,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAE9D,YAAY,EACX,YAAY,EACZ,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,WAAW,GACX,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../core/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAG7D,OAAO,KAAK,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAGhF,OAAO,KAAK,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAMnE,eAAO,MAAM,gBAAgB,eAAiC,CAAC;AAE/D,MAAM,MAAM,qBAAqB,GAAG;IACnC,OAAO,EAAE,SAAS,aAAa,EAAE,CAAC;IAClC,QAAQ,EAAE,eAAe,GAAG,SAAS,CAAC;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,EAAE;QACV,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;KAC9B,CAAC;CACF,CAAC;AAMF;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,KAAK,CAAC,OAAO,SAAS,SAAS,aAAa,EAAE,EAC3E,MAAM,EAAE,kBAAkB,CAAC,OAAO,CAAC,GAAG;IAAE,YAAY,EAAE,IAAI,CAAA;CAAE,GAC1D,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAEjC;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,KAAK,CAAC,OAAO,SAAS,SAAS,aAAa,EAAE,EAC3E,MAAM,EAAE,kBAAkB,CAAC,OAAO,CAAC,GAAG;IAAE,YAAY,CAAC,EAAE,KAAK,GAAG,SAAS,CAAA;CAAE,GACxE,yBAAyB,CAAC,OAAO,CAAC,CAAC;AA6EtC,YAAY,EACX,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,qBAAqB,EACrB,wBAAwB,EACxB,4BAA4B,EAC5B,gBAAgB,GAChB,MAAM,QAAQ,CAAC;AAEhB,OAAO,EACN,gBAAgB,EAChB,uBAAuB,EACvB,2BAA2B,EAC3B,aAAa,EACb,UAAU,EACV,cAAc,EACd,aAAa,EACb,UAAU,EACV,cAAc,EACd,WAAW,EACX,oBAAoB,EACpB,wBAAwB,EACxB,eAAe,GACf,MAAM,QAAQ,CAAC;AAEhB,YAAY,EACX,aAAa,EACb,yBAAyB,EACzB,oBAAoB,GACpB,MAAM,UAAU,CAAC;AAElB,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE1E,YAAY,EACX,aAAa,EACb,eAAe,EACf,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,eAAe,EACf,YAAY,GACZ,MAAM,aAAa,CAAC;AAErB,YAAY,EACX,mBAAmB,EACnB,YAAY,EACZ,YAAY,EACZ,4BAA4B,EAC5B,YAAY,EACZ,eAAe,EACf,aAAa,GACb,MAAM,UAAU,CAAC;AAElB,YAAY,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAC7E,YAAY,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAGvF,YAAY,EACX,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACjB,qBAAqB,EACrB,aAAa,EACb,oBAAoB,EACpB,aAAa,EACb,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EAClB,uBAAuB,EACvB,0BAA0B,EAC1B,6BAA6B,EAC7B,4BAA4B,EAC5B,YAAY,GACZ,MAAM,WAAW,CAAC;AAGnB,YAAY,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAE9D,YAAY,EACX,YAAY,EACZ,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,eAAe,EACf,WAAW,GACX,MAAM,YAAY,CAAC"}

package/dist/core/inspect/index.d.ts

@@ -16,6 +16,24 @@ export type EndpointSchemaResult = {
      */
     availableMethods?: Record<string, string[]>;
 };
+export type WebhookSchemaResult = {
+    /** Human-readable description of what triggers this webhook. */
+    description?: string;
+    /** JSON Schema for the webhook payload — the type of `request.payload` in the before hook. */
+    payload?: unknown;
+    /** JSON Schema for the webhook response data — the type of `response.data` in the after hook. */
+    response?: unknown;
+    /**
+     * Ready-to-copy code example showing exactly how to configure this webhook,
+     * including response.data type as an inline comment.
+     */
+    usage?: string;
+    /**
+     * Present when the requested webhook path was not found.
+     * Lists all available webhook dot-paths per plugin so the caller can self-correct.
+     */
+    availableWebhooks?: Record<string, string[]>;
+};
 export type CorsairInspectMethods = {
     /**
      * Returns all available endpoint paths for every registered plugin.
@@ -52,10 +70,66 @@ export type CorsairInspectMethods = {
      * // { availableMethods: { slack: ['slack.api.channels.list', ...], ... } }
      */
     get_schema(method: string): EndpointSchemaResult;
+    /**
+     * Returns all available webhook paths for every registered plugin.
+     * Keys are plugin IDs, values are arrays of full dot-paths (pluginId.group.event).
+     * Pass a path directly to get_webhook_schema() to get its usage example and type info.
+     *
+     * @example
+     * corsair.get_webhooks()
+     * // {
+     * //   slack: ['slack.messages.message', 'slack.channels.created', ...],
+     * //   googlecalendar: ['googlecalendar.onEventChanged', 'googlecalendar.onEventCreated', ...],
+     * // }
+     */
+    get_webhooks(): Record<string, string[]>;
+    /**
+     * Returns all available webhook paths for a specific plugin.
+     *
+     * @example
+     * corsair.get_webhooks('slack')
+     * // ['slack.messages.message', 'slack.channels.created', ...]
+     */
+    get_webhooks(plugin: string): string[];
+    /**
+     * Returns a ready-to-copy usage example plus type information for a specific webhook.
+     * Pass the dot-path from get_webhooks(): 'slack.messages.message'.
+     * Casing is ignored — the path is lowercased before lookup.
+     *
+     * The `usage` field is a complete code snippet showing how to configure this webhook
+     * inside the plugin options, with the response.data type embedded as an inline comment.
+     *
+     * If the webhook path is not found, returns `availableWebhooks` for self-correction.
+     *
+     * @example
+     * corsair.get_webhook_schema('slack.messages.message')
+     * // {
+     * //   description: 'Fires when a message is posted',
+     * //   usage: `
+     * //     slack({
+     * //         webhookHooks: {
+     * //             messages: {
+     * //                 message: {
+     * //                     before(ctx, args) {
+     * //                         return { ctx, args };
+     * //                     },
+     * //                     after(ctx, response) {
+     * //                         // response.data:
+     * //                         // { "type": "object", ... }
+     * //                     },
+     * //                 },
+     * //             },
+     * //         },
+     * //     })`,
+     * //   payload: { ... },
+     * //   response: { ... },
+     * // }
+     */
+    get_webhook_schema(webhook: string): WebhookSchemaResult;
 };
 /**
- * Creates the get_methods / get_schema functions bound to a specific plugin list.
- * Used by both single-tenant and multi-tenant client builders.
+ * Creates the get_methods / get_schema / get_webhooks / get_webhook_schema functions
+ * bound to a specific plugin list. Used by both single-tenant and multi-tenant client builders.
  */
 export declare function buildInspectMethods(plugins: readonly CorsairPlugin[]): CorsairInspectMethods;
 //# sourceMappingURL=index.d.ts.map

package/dist/core/inspect/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../core/inspect/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAqB,MAAM,YAAY,CAAC;AAqFnE,MAAM,MAAM,oBAAoB,GAAG;IAClC,6DAA6D;IAC7D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4DAA4D;IAC5D,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,aAAa,CAAC;IAC7C,4CAA4C;IAC5C,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,gEAAgE;IAChE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,yDAAyD;IACzD,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CAC5C,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IACnC;;;;;;;OAOG;IACH,WAAW,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACxC;;;;;;;OAOG;IACH,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACtC;;;;;;;;;;;;;;;OAeG;IACH,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,oBAAoB,CAAC;CACjD,CAAC;AA+GF;;;GAGG;AACH,wBAAgB,mBAAmB,CAClC,OAAO,EAAE,SAAS,aAAa,EAAE,GAC/B,qBAAqB,CASvB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../core/inspect/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAqB,MAAM,YAAY,CAAC;AAqFnE,MAAM,MAAM,oBAAoB,GAAG;IAClC,6DAA6D;IAC7D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4DAA4D;IAC5D,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,aAAa,CAAC;IAC7C,4CAA4C;IAC5C,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,gEAAgE;IAChE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,yDAAyD;IACzD,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CAC5C,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IACjC,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8FAA8F;IAC9F,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,iGAAiG;IACjG,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CAC7C,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IACnC;;;;;;;OAOG;IACH,WAAW,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACxC;;;;;;;OAOG;IACH,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACtC;;;;;;;;;;;;;;;OAeG;IACH,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,oBAAoB,CAAC;IACjD;;;;;;;;;;;OAWG;IACH,YAAY,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACzC;;;;;;OAMG;IACH,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACvC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiCG;IACH,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,mBAAmB,CAAC;CACzD,CAAC;AAkUF;;;GAGG;AACH,wBAAgB,mBAAmB,CAClC,OAAO,EAAE,SAAS,aAAa,EAAE,GAC/B,qBAAqB,CAgBvB"}

package/dist/core/inspect/index.js

@@ -45,8 +45,10 @@ function zodToJsonSchema(schema) {
             const required = [];
             for (const [key, val] of Object.entries(shape)) {
                 properties[key] = zodToJsonSchema(val);
-                const fieldTypeName = val._def.typeName;
-                if (fieldTypeName !== 'ZodOptional' && fieldTypeName !== 'ZodNullable') {
+                const fieldTypeName = val._def
+                    .typeName;
+                if (fieldTypeName !== 'ZodOptional' &&
+                    fieldTypeName !== 'ZodNullable') {
                     required.push(key);
                 }
             }
@@ -86,6 +88,108 @@ function walkEndpointTree(tree, pathParts, result) {
     }
 }
 // ─────────────────────────────────────────────────────────────────────────────
+// Webhook Tree Helpers
+// ─────────────────────────────────────────────────────────────────────────────
+/**
+ * Returns true if a value is a webhook leaf (has both `match` and `handler` functions).
+ * Mirrors the isWebhook guard in core/webhooks/bind.ts without importing it.
+ */
+function isWebhookLeaf(value) {
+    return (value !== null &&
+        typeof value === 'object' &&
+        'match' in value &&
+        'handler' in value &&
+        typeof value.match === 'function' &&
+        typeof value.handler === 'function');
+}
+/**
+ * Recursively collects all webhook leaf paths in a webhook tree.
+ * Preserves original key casing so paths can be used as object keys in webhookHooks config.
+ */
+function walkWebhookTree(tree, pathParts, result) {
+    for (const [key, value] of Object.entries(tree)) {
+        const current = [...pathParts, key];
+        if (isWebhookLeaf(value)) {
+            result.push(current.join('.'));
+        }
+        else if (value !== null && typeof value === 'object') {
+            walkWebhookTree(value, current, result);
+        }
+    }
+}
+/**
+ * Walks a webhook tree with a normalised (lowercased) path and returns the original-cased
+ * key segments when found. Used to reconstruct the exact key names for usage examples.
+ * Returns null if the path does not resolve to a webhook leaf.
+ */
+function resolveWebhookPathOriginalCase(tree, normalizedParts) {
+    if (normalizedParts.length === 0)
+        return null;
+    const [head, ...tail] = normalizedParts;
+    const entry = Object.entries(tree).find(([k]) => k.toLowerCase() === head);
+    if (!entry)
+        return null;
+    const [originalKey, value] = entry;
+    if (tail.length === 0) {
+        return isWebhookLeaf(value) ? [originalKey] : null;
+    }
+    if (value !== null && typeof value === 'object' && !isWebhookLeaf(value)) {
+        const rest = resolveWebhookPathOriginalCase(value, tail);
+        if (rest !== null)
+            return [originalKey, ...rest];
+    }
+    return null;
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Webhook Usage Example Builder
+// ─────────────────────────────────────────────────────────────────────────────
+/**
+ * Builds a ready-to-copy code snippet showing how to configure a specific webhook.
+ * The response.data type (if available) is embedded as an inline comment inside the after hook.
+ *
+ * @param pluginId       Plugin ID (e.g. 'slack')
+ * @param pathParts      Original-cased path segments (e.g. ['messages', 'message'])
+ * @param responseSchema JSON Schema for response.data, or null if no schema registered
+ */
+function buildWebhookUsageExample(pluginId, pathParts, responseSchema) {
+    const lines = [];
+    lines.push(`${pluginId}({`);
+    lines.push(`    webhookHooks: {`);
+    // Open nested key blocks
+    for (let i = 0; i < pathParts.length; i++) {
+        const indent = '    '.repeat(i + 2);
+        lines.push(`${indent}${pathParts[i]}: {`);
+    }
+    // Hook body — indented one level deeper than the innermost key
+    const hookIndent = '    '.repeat(pathParts.length + 2);
+    const bodyIndent = hookIndent + '    ';
+    lines.push(`${hookIndent}before(ctx, args) {`);
+    lines.push(`${bodyIndent}return { ctx, args };`);
+    lines.push(`${hookIndent}},`);
+    lines.push(`${hookIndent}after(ctx, response) {`);
+    if (responseSchema !== null) {
+        const json = JSON.stringify(responseSchema, null, 2);
+        const commentLines = json
+            .split('\n')
+            .map((l, i) => i === 0
+            ? `${bodyIndent}// response.data: ${l}`
+            : `${bodyIndent}// ${l}`);
+        lines.push(...commentLines);
+    }
+    else {
+        lines.push(`${bodyIndent}// response.data: unknown (register webhookSchemas to see the type)`);
+    }
+    lines.push(`${hookIndent}},`);
+    // Close nested key blocks (innermost first)
+    for (let i = pathParts.length - 1; i >= 0; i--) {
+        const indent = '    '.repeat(i + 2);
+        lines.push(`${indent}},`);
+    }
+    lines.push(`    },`);
+    lines.push(`})`);
+    return lines.join('\n');
+}
+// ─────────────────────────────────────────────────────────────────────────────
 // Core Functions
 // ─────────────────────────────────────────────────────────────────────────────
 function getMethods(plugins, plugin) {
@@ -107,6 +211,25 @@ function getMethods(plugins, plugin) {
     }
     return result;
 }
+function getWebhooks(plugins, plugin) {
+    if (plugin !== undefined) {
+        const found = plugins.find((p) => p.id === plugin);
+        if (!found?.webhooks)
+            return [];
+        const paths = [];
+        walkWebhookTree(found.webhooks, [], paths);
+        return paths.map((path) => `${found.id}.${path}`);
+    }
+    const result = {};
+    for (const p of plugins) {
+        if (!p.webhooks)
+            continue;
+        const paths = [];
+        walkWebhookTree(p.webhooks, [], paths);
+        result[p.id] = paths.map((path) => `${p.id}.${path}`);
+    }
+    return result;
+}
 /**
  * Case-insensitive lookup in an endpoint record (endpointMeta or endpointSchemas).
  * Keys in those records use camelCase (e.g. 'channels.getHistory') while the
@@ -151,12 +274,46 @@ function getSchema(plugins, method) {
     // Invalid or unknown method — return all available methods so the caller can self-correct
     return { availableMethods: getMethods(plugins) };
 }
+function getWebhookSchema(plugins, webhook) {
+    // Normalise casing so the agent can call with any capitalisation
+    const normalised = webhook.toLowerCase();
+    const dotIndex = normalised.indexOf('.');
+    if (dotIndex !== -1) {
+        const pluginId = normalised.slice(0, dotIndex);
+        const webhookPathNormalised = normalised.slice(dotIndex + 1);
+        const plugin = plugins.find((p) => p.id === pluginId);
+        if (plugin?.webhooks) {
+            // Resolve original-cased key segments from the webhook tree
+            const originalPathParts = resolveWebhookPathOriginalCase(plugin.webhooks, webhookPathNormalised.split('.'));
+            if (originalPathParts !== null) {
+                // Look up optional schemas using original-cased path (case-insensitive fallback)
+                const originalPath = originalPathParts.join('.');
+                const schemas = findEndpointCaseInsensitive(plugin.webhookSchemas, originalPath.toLowerCase());
+                const responseSchema = schemas?.response
+                    ? zodToJsonSchema(schemas.response)
+                    : null;
+                return {
+                    description: schemas?.description,
+                    payload: schemas?.payload
+                        ? zodToJsonSchema(schemas.payload)
+                        : undefined,
+                    response: responseSchema ?? undefined,
+                    usage: buildWebhookUsageExample(pluginId, originalPathParts, responseSchema),
+                };
+            }
+        }
+    }
+    // Invalid or unknown webhook — return all available webhooks so the caller can self-correct
+    return {
+        availableWebhooks: getWebhooks(plugins),
+    };
+}
 // ─────────────────────────────────────────────────────────────────────────────
 // Factory — binds inspect methods to a fixed plugin list
 // ─────────────────────────────────────────────────────────────────────────────
 /**
- * Creates the get_methods / get_schema functions bound to a specific plugin list.
- * Used by both single-tenant and multi-tenant client builders.
+ * Creates the get_methods / get_schema / get_webhooks / get_webhook_schema functions
+ * bound to a specific plugin list. Used by both single-tenant and multi-tenant client builders.
  */
 export function buildInspectMethods(plugins) {
     return {
@@ -166,5 +323,11 @@ export function buildInspectMethods(plugins) {
         get_schema(method) {
             return getSchema(plugins, method);
         },
+        get_webhooks(plugin) {
+            return getWebhooks(plugins, plugin);
+        },
+        get_webhook_schema(webhook) {
+            return getWebhookSchema(plugins, webhook);
+        },
     };
 }

package/dist/core/permissions/index.d.ts

@@ -17,13 +17,28 @@ export type EnforcePermissionOptions = {
     db?: CorsairDatabase;
     timeoutMs?: number;
 };
+export type EnforcePermissionResult = {
+    result: 'allow' | 'blocked';
+    /**
+     * Called by the endpoint binding layer after the endpoint executes successfully.
+     * Marks the permission record as 'completed' (single-use approval consumed).
+     * Only present when an 'approved' record was found and the call is allowed through.
+     */
+    onComplete?: () => Promise<void>;
+};
 /**
  * Evaluates the permission policy and returns whether the action is allowed.
  *
- * - `'allow'`            → returns 'allow', caller proceeds normally
- * - `'deny'`             → logs a blocked message, returns 'blocked'
- * - `'require_approval'` → creates a `corsair_permissions` record, logs the token, returns 'blocked'
- *                          (falls back to deny if no database is configured)
+ * Lifecycle:
+ * - `'allow'`            → policy permits, caller proceeds normally
+ * - `'deny'`             → blocked by policy mode; no DB record created
+ * - `'require_approval'` → checks for an existing matching permission record first:
+ *     - `pending`  (not expired) → already waiting for approval, returns 'blocked'
+ *     - `approved` (not expired) → approved and ready; returns 'allow' + onComplete callback
+ *                                  that marks the record 'completed' after the endpoint runs
+ *     - otherwise               → creates a new 'pending' record, returns 'blocked'
+ *
+ * Falls back to deny if no database is configured.
  */
-export declare function enforcePermission(opts: EnforcePermissionOptions): Promise<'allow' | 'blocked'>;
+export declare function enforcePermission(opts: EnforcePermissionOptions): Promise<EnforcePermissionResult>;
 //# sourceMappingURL=index.d.ts.map

package/dist/core/permissions/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../core/permissions/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,KAAK,EACX,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,gBAAgB,EAChB,MAAM,YAAY,CAAC;AAgBpB,4HAA4H;AAC5H,wBAAgB,kBAAkB,CACjC,SAAS,EAAE,iBAAiB,EAC5B,IAAI,EAAE,cAAc,EACpB,QAAQ,CAAC,EAAE,gBAAgB,GACzB,gBAAgB,CAGlB;AAMD,sFAAsF;AACtF,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAsBxD;AAMD,MAAM,MAAM,wBAAwB,GAAG;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,qFAAqF;IACrF,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,EAAE,cAAc,CAAC;IACrB,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,SAAS,EAAE,iBAAiB,CAAC;IAC7B,IAAI,CAAC,EAAE,iBAAiB,CAAC;IACzB,kGAAkG;IAClG,EAAE,CAAC,EAAE,eAAe,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CACtC,IAAI,EAAE,wBAAwB,GAC5B,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAkD9B"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../core/permissions/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,KAAK,EACX,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,gBAAgB,EAChB,MAAM,YAAY,CAAC;AAgBpB,4HAA4H;AAC5H,wBAAgB,kBAAkB,CACjC,SAAS,EAAE,iBAAiB,EAC5B,IAAI,EAAE,cAAc,EACpB,QAAQ,CAAC,EAAE,gBAAgB,GACzB,gBAAgB,CAGlB;AAMD,sFAAsF;AACtF,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAsBxD;AAMD,MAAM,MAAM,wBAAwB,GAAG;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,qFAAqF;IACrF,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,EAAE,cAAc,CAAC;IACrB,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,SAAS,EAAE,iBAAiB,CAAC;IAC7B,IAAI,CAAC,EAAE,iBAAiB,CAAC;IACzB,kGAAkG;IAClG,EAAE,CAAC,EAAE,eAAe,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACrC,MAAM,EAAE,OAAO,GAAG,SAAS,CAAC;IAC5B;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,wBAAsB,iBAAiB,CACtC,IAAI,EAAE,wBAAwB,GAC5B,OAAO,CAAC,uBAAuB,CAAC,CA4FlC"}

package/dist/core/permissions/index.js

@@ -45,24 +45,64 @@ export function parseDurationMs(duration) {
 /**
  * Evaluates the permission policy and returns whether the action is allowed.
  *
- * - `'allow'`            → returns 'allow', caller proceeds normally
- * - `'deny'`             → logs a blocked message, returns 'blocked'
- * - `'require_approval'` → creates a `corsair_permissions` record, logs the token, returns 'blocked'
- *                          (falls back to deny if no database is configured)
+ * Lifecycle:
+ * - `'allow'`            → policy permits, caller proceeds normally
+ * - `'deny'`             → blocked by policy mode; no DB record created
+ * - `'require_approval'` → checks for an existing matching permission record first:
+ *     - `pending`  (not expired) → already waiting for approval, returns 'blocked'
+ *     - `approved` (not expired) → approved and ready; returns 'allow' + onComplete callback
+ *                                  that marks the record 'completed' after the endpoint runs
+ *     - otherwise               → creates a new 'pending' record, returns 'blocked'
+ *
+ * Falls back to deny if no database is configured.
  */
 export async function enforcePermission(opts) {
     const policy = evaluatePermission(opts.riskLevel, opts.mode, opts.override);
     if (policy === 'allow')
-        return 'allow';
+        return { result: 'allow' };
     const irreversibleNote = opts.meta?.irreversible ? ' (irreversible)' : '';
     const description = opts.meta?.description
         ? `${opts.meta.description}${irreversibleNote}`
         : `${opts.pluginId}.${opts.endpointPath}${irreversibleNote}`;
     if (policy === 'deny' || !opts.db) {
         console.log(`[corsair/${opts.pluginId}] '${opts.endpointPath}' blocked — denied by permission mode '${opts.mode}'.`, `\n  Action: ${description}`, `\n  To allow this, update the permission mode or add an override in your corsair config.`);
-        return 'blocked';
+        return { result: 'blocked' };
+    }
+    const argsJson = JSON.stringify(opts.args);
+    const now = new Date().toISOString();
+    // Check for an existing, non-expired permission record for this plugin + endpoint + args
+    const existing = await opts.db.db
+        .selectFrom('corsair_permissions')
+        .selectAll()
+        .where('plugin', '=', opts.pluginId)
+        .where('endpoint', '=', opts.endpointPath)
+        .where('args', '=', argsJson)
+        .where('expires_at', '>', now)
+        .where('status', 'in', ['pending', 'approved'])
+        .orderBy('created_at', 'desc')
+        .limit(1)
+        .executeTakeFirst();
+    if (existing) {
+        if (existing.status === 'approved') {
+            // Single-use: let the call through; onComplete will mark it 'completed'
+            const db = opts.db;
+            const permissionId = existing.id;
+            return {
+                result: 'allow',
+                onComplete: async () => {
+                    await db.db
+                        .updateTable('corsair_permissions')
+                        .set({ status: 'completed', updated_at: new Date() })
+                        .where('id', '=', permissionId)
+                        .execute();
+                },
+            };
+        }
+        // status === 'pending': already waiting for approval, don't create a duplicate
+        console.log(`[corsair/${opts.pluginId}] '${opts.endpointPath}' blocked — approval already pending.`, `\n  Action: ${description}`, `\n  Permission ID: ${existing.id}`, `\n  Use the token to approve or deny this request.`);
+        return { result: 'blocked' };
     }
-    // require_approval: create a pending record and log the token
+    // No existing actionable record — create a new pending approval request
     const id = uuidv4();
     const token = randomBytes(32).toString('hex');
     const timeoutMs = opts.timeoutMs ?? 10 * 60 * 1_000;
@@ -76,12 +116,11 @@ export async function enforcePermission(opts) {
         token,
         plugin: opts.pluginId,
         endpoint: opts.endpointPath,
-        // unknown args serialized to JSON; available for inspection or re-execution
-        args: JSON.stringify(opts.args),
+        args: argsJson,
         status: 'pending',
         expires_at: expiresAt,
     })
         .execute();
     console.log(`[corsair/${opts.pluginId}] '${opts.endpointPath}' blocked — approval required.`, `\n  Action: ${description}`, `\n  Permission ID:    ${id}`, `\n  Permission token: ${token}`, `\n  Expires at:       ${expiresAt}`, `\n  Use the token to approve or deny this request.`);
-    return 'blocked';
+    return { result: 'blocked' };
 }