deepline 0.2.48 → 0.2.50

package/dist/{compiler-manifest-CGZadg-v.d.mts → compiler-manifest-BPA3r-VG.d.mts}

@@ -876,6 +876,16 @@ declare class ProviderTransientError extends ToolExecutionError {
 declare const SUPPORTED_PLAY_AUTHORING_CONTRACT_EDITIONS: readonly [1, 2, 3];
 type PlayAuthoringContractEdition = (typeof SUPPORTED_PLAY_AUTHORING_CONTRACT_EDITIONS)[number];
 type PlaySqlListenerOperation = 'INSERT' | 'UPDATE' | 'DELETE';
+type PlayStandardWebhookHeaderFamily = 'standard' | 'svix';
+type PlayStandardWebhookAuth = {
+    type: 'standard-webhooks';
+    /** `webhook-*` for Standard Webhooks, `svix-*` for Svix senders. */
+    headerFamily: PlayStandardWebhookHeaderFamily;
+    /** Deepline Secret names used for ordinary operation and rotation overlap. */
+    signingSecrets: string[];
+    /** Replay-protection window. Omitted means the Standard Webhooks 5-minute default. */
+    toleranceSeconds?: number;
+};
 type PlaySqlListenerFilterScalar = string | number | boolean | null;
 type PlaySqlListenerFilterOperator = {
     eq?: PlaySqlListenerFilterScalar;
@@ -928,6 +938,7 @@ type PlayAuthoringAstBindings = {
             header?: string;
             secretEnv: string;
         };
+        auth?: PlayStandardWebhookAuth;
     };
     cron?: {
         schedule: string;
@@ -958,6 +969,7 @@ type PlayAuthoringBindings = {
             header?: string;
             secretEnv: string;
         };
+        auth?: PlayStandardWebhookAuth;
     };
     cron?: {
         schedule: string;
@@ -1362,6 +1374,78 @@ declare const PLAY_AUTHORING_FIELD_REGISTRY: {
         readonly description: "HTTP header containing the webhook signature.";
         readonly errorMessage: "bindings.webhook.hmac.header must be a non-empty static string.";
     };
+    readonly 'bindings.webhook.auth.type': {
+        readonly schema: _sinclair_typebox.TLiteral<"standard-webhooks">;
+        readonly fixtures: {
+            readonly valid: "standard-webhooks";
+            readonly invalid: "svix";
+            readonly absent: undefined;
+            readonly unresolved: {
+                readonly expression: "type";
+            };
+            readonly edition1: undefined;
+        };
+        readonly referenceType: "'standard-webhooks'";
+        readonly required: false;
+        readonly resolution: "static-required";
+        readonly issueCode: "play_authoring_standard_webhooks_invalid";
+        readonly description: "Uses the Standard Webhooks v1 symmetric signing scheme.";
+        readonly errorMessage: "bindings.webhook.auth.type must be the static literal \"standard-webhooks\".";
+    };
+    readonly 'bindings.webhook.auth.headerFamily': {
+        readonly schema: _sinclair_typebox.TUnion<[_sinclair_typebox.TLiteral<"standard">, _sinclair_typebox.TLiteral<"svix">]>;
+        readonly fixtures: {
+            readonly valid: "svix";
+            readonly invalid: "webhook";
+            readonly absent: undefined;
+            readonly unresolved: {
+                readonly expression: "headerFamily";
+            };
+            readonly edition1: undefined;
+        };
+        readonly referenceType: "'standard' | 'svix'";
+        readonly required: false;
+        readonly resolution: "static-required";
+        readonly issueCode: "play_authoring_standard_webhooks_invalid";
+        readonly description: "Header namespace expected from the webhook provider.";
+        readonly errorMessage: "bindings.webhook.auth.headerFamily must be the static literal \"standard\" or \"svix\".";
+    };
+    readonly 'bindings.webhook.auth.signingSecrets[]': {
+        readonly schema: _sinclair_typebox.TString;
+        readonly fixtures: {
+            readonly valid: "VECTOR_WEBHOOK_SECRET";
+            readonly invalid: "vector_webhook_secret";
+            readonly absent: undefined;
+            readonly unresolved: {
+                readonly expression: "secret";
+            };
+            readonly edition1: undefined;
+        };
+        readonly referenceType: "string";
+        readonly required: false;
+        readonly resolution: "static-required";
+        readonly issueCode: "play_authoring_standard_webhooks_invalid";
+        readonly description: "Deepline Secret name used to verify Standard Webhooks.";
+        readonly errorMessage: "bindings.webhook.auth.signingSecrets entries must be uppercase Deepline Secret names beginning with a letter.";
+    };
+    readonly 'bindings.webhook.auth.toleranceSeconds': {
+        readonly schema: _sinclair_typebox.TInteger;
+        readonly fixtures: {
+            readonly valid: 300;
+            readonly invalid: 0;
+            readonly absent: undefined;
+            readonly unresolved: {
+                readonly expression: "toleranceSeconds";
+            };
+            readonly edition1: undefined;
+        };
+        readonly referenceType: "number";
+        readonly required: false;
+        readonly resolution: "static-required";
+        readonly issueCode: "play_authoring_standard_webhooks_invalid";
+        readonly description: "Accepted delivery timestamp skew in seconds, from 1 through 3600.";
+        readonly errorMessage: "bindings.webhook.auth.toleranceSeconds must be a static whole number from 1 through 3600.";
+    };
     readonly 'bindings.cron.schedule': {
         readonly schema: _sinclair_typebox.TString;
         readonly fixtures: {

package/dist/{compiler-manifest-CGZadg-v.d.ts → compiler-manifest-BPA3r-VG.d.ts}

@@ -876,6 +876,16 @@ declare class ProviderTransientError extends ToolExecutionError {
 declare const SUPPORTED_PLAY_AUTHORING_CONTRACT_EDITIONS: readonly [1, 2, 3];
 type PlayAuthoringContractEdition = (typeof SUPPORTED_PLAY_AUTHORING_CONTRACT_EDITIONS)[number];
 type PlaySqlListenerOperation = 'INSERT' | 'UPDATE' | 'DELETE';
+type PlayStandardWebhookHeaderFamily = 'standard' | 'svix';
+type PlayStandardWebhookAuth = {
+    type: 'standard-webhooks';
+    /** `webhook-*` for Standard Webhooks, `svix-*` for Svix senders. */
+    headerFamily: PlayStandardWebhookHeaderFamily;
+    /** Deepline Secret names used for ordinary operation and rotation overlap. */
+    signingSecrets: string[];
+    /** Replay-protection window. Omitted means the Standard Webhooks 5-minute default. */
+    toleranceSeconds?: number;
+};
 type PlaySqlListenerFilterScalar = string | number | boolean | null;
 type PlaySqlListenerFilterOperator = {
     eq?: PlaySqlListenerFilterScalar;
@@ -928,6 +938,7 @@ type PlayAuthoringAstBindings = {
             header?: string;
             secretEnv: string;
         };
+        auth?: PlayStandardWebhookAuth;
     };
     cron?: {
         schedule: string;
@@ -958,6 +969,7 @@ type PlayAuthoringBindings = {
             header?: string;
             secretEnv: string;
         };
+        auth?: PlayStandardWebhookAuth;
     };
     cron?: {
         schedule: string;
@@ -1362,6 +1374,78 @@ declare const PLAY_AUTHORING_FIELD_REGISTRY: {
         readonly description: "HTTP header containing the webhook signature.";
         readonly errorMessage: "bindings.webhook.hmac.header must be a non-empty static string.";
     };
+    readonly 'bindings.webhook.auth.type': {
+        readonly schema: _sinclair_typebox.TLiteral<"standard-webhooks">;
+        readonly fixtures: {
+            readonly valid: "standard-webhooks";
+            readonly invalid: "svix";
+            readonly absent: undefined;
+            readonly unresolved: {
+                readonly expression: "type";
+            };
+            readonly edition1: undefined;
+        };
+        readonly referenceType: "'standard-webhooks'";
+        readonly required: false;
+        readonly resolution: "static-required";
+        readonly issueCode: "play_authoring_standard_webhooks_invalid";
+        readonly description: "Uses the Standard Webhooks v1 symmetric signing scheme.";
+        readonly errorMessage: "bindings.webhook.auth.type must be the static literal \"standard-webhooks\".";
+    };
+    readonly 'bindings.webhook.auth.headerFamily': {
+        readonly schema: _sinclair_typebox.TUnion<[_sinclair_typebox.TLiteral<"standard">, _sinclair_typebox.TLiteral<"svix">]>;
+        readonly fixtures: {
+            readonly valid: "svix";
+            readonly invalid: "webhook";
+            readonly absent: undefined;
+            readonly unresolved: {
+                readonly expression: "headerFamily";
+            };
+            readonly edition1: undefined;
+        };
+        readonly referenceType: "'standard' | 'svix'";
+        readonly required: false;
+        readonly resolution: "static-required";
+        readonly issueCode: "play_authoring_standard_webhooks_invalid";
+        readonly description: "Header namespace expected from the webhook provider.";
+        readonly errorMessage: "bindings.webhook.auth.headerFamily must be the static literal \"standard\" or \"svix\".";
+    };
+    readonly 'bindings.webhook.auth.signingSecrets[]': {
+        readonly schema: _sinclair_typebox.TString;
+        readonly fixtures: {
+            readonly valid: "VECTOR_WEBHOOK_SECRET";
+            readonly invalid: "vector_webhook_secret";
+            readonly absent: undefined;
+            readonly unresolved: {
+                readonly expression: "secret";
+            };
+            readonly edition1: undefined;
+        };
+        readonly referenceType: "string";
+        readonly required: false;
+        readonly resolution: "static-required";
+        readonly issueCode: "play_authoring_standard_webhooks_invalid";
+        readonly description: "Deepline Secret name used to verify Standard Webhooks.";
+        readonly errorMessage: "bindings.webhook.auth.signingSecrets entries must be uppercase Deepline Secret names beginning with a letter.";
+    };
+    readonly 'bindings.webhook.auth.toleranceSeconds': {
+        readonly schema: _sinclair_typebox.TInteger;
+        readonly fixtures: {
+            readonly valid: 300;
+            readonly invalid: 0;
+            readonly absent: undefined;
+            readonly unresolved: {
+                readonly expression: "toleranceSeconds";
+            };
+            readonly edition1: undefined;
+        };
+        readonly referenceType: "number";
+        readonly required: false;
+        readonly resolution: "static-required";
+        readonly issueCode: "play_authoring_standard_webhooks_invalid";
+        readonly description: "Accepted delivery timestamp skew in seconds, from 1 through 3600.";
+        readonly errorMessage: "bindings.webhook.auth.toleranceSeconds must be a static whole number from 1 through 3600.";
+    };
     readonly 'bindings.cron.schedule': {
         readonly schema: _sinclair_typebox.TString;
         readonly fixtures: {

package/dist/index.d.mts

@@ -1,5 +1,5 @@
-import { e as PlayRuntimeBackendId, c as PlayCompilerManifest, D as DeeplineError, f as ToolExecutionError, g as ToolExecutionErrorOptions, h as PlayAuthoringColumnMap, i as PlayAuthoringColumnResolver, j as PlayAuthoringRuntimeContext, k as PlayAuthoringConditionalStepResolver, l as PlayAuthoringCsvInput, m as PlayAuthoringCsvOptions, n as PlayAuthoringDatasetBuilder, o as PlayAuthoringDatasetColumnDefinition, p as PlayAuthoringDatasetColumnRunInput, q as ToolExecuteResult, r as PlayAuthoringReferenceLike, s as PlayReturnObject$1, t as PlayAuthoringDefineConfig, u as PlayAuthoringDefinedPlay, v as PlayAuthoringFetchOptions, w as PlayAuthoringFileInput, x as PlayAuthoringBindings, y as PlayAuthoringCallExecution, z as PlayAuthoringCallOptions, A as PlayAuthoringFetchResponse, B as PlayAuthoringInputContract, C as PlayAuthoringStepProgramStep, E as PlayAuthoringRuntimeStepOptions, F as PlaySqlListenerDeclaration, G as PlaySqlListenerEvent, H as PlaySqlListenerOperation, I as PlaySqlQuery, J as PlayAuthoringStepOptions, K as PlayAuthoringStepProgram, L as PlayAuthoringStepProgramResolver, M as PlayAuthoringStepResolver, N as PlayToolExecutionRequest } from './compiler-manifest-CGZadg-v.mjs';
-export { O as DEEPLINE_EXTRACTOR_TARGETS, Q as DEEPLINE_EXTRACTOR_TARGET_DEFINITIONS, R as DeeplineEmailStatusGetterValue, S as DeeplineExtractorTarget, U as DeeplineGetterValue, V as DeeplineGetterValueMap, W as JOB_CHANGE_STATUS_VALUES, X as JobChangeStatus, Y as PHONE_STATUS_VALUES, Z as PhoneStatus, _ as PlayDataset, $ as PlayDatasetInput, a0 as PreviousCell, a1 as ProviderTransientError, a2 as ProviderTransientErrorCategory, a3 as ToolExecutionErrorCategory, a4 as ToolExecutionErrorOrigin, a5 as ToolExecutionFailureV1, a6 as ToolExecutionNetworkKind, a7 as ToolExecutionNetworkScope, a8 as isDeeplineExtractorTarget } from './compiler-manifest-CGZadg-v.mjs';
+import { e as PlayRuntimeBackendId, c as PlayCompilerManifest, D as DeeplineError, f as ToolExecutionError, g as ToolExecutionErrorOptions, h as PlayAuthoringColumnMap, i as PlayAuthoringColumnResolver, j as PlayAuthoringRuntimeContext, k as PlayAuthoringConditionalStepResolver, l as PlayAuthoringCsvInput, m as PlayAuthoringCsvOptions, n as PlayAuthoringDatasetBuilder, o as PlayAuthoringDatasetColumnDefinition, p as PlayAuthoringDatasetColumnRunInput, q as ToolExecuteResult, r as PlayAuthoringReferenceLike, s as PlayReturnObject$1, t as PlayAuthoringDefineConfig, u as PlayAuthoringDefinedPlay, v as PlayAuthoringFetchOptions, w as PlayAuthoringFileInput, x as PlayAuthoringBindings, y as PlayAuthoringCallExecution, z as PlayAuthoringCallOptions, A as PlayAuthoringFetchResponse, B as PlayAuthoringInputContract, C as PlayAuthoringStepProgramStep, E as PlayAuthoringRuntimeStepOptions, F as PlaySqlListenerDeclaration, G as PlaySqlListenerEvent, H as PlaySqlListenerOperation, I as PlaySqlQuery, J as PlayAuthoringStepOptions, K as PlayAuthoringStepProgram, L as PlayAuthoringStepProgramResolver, M as PlayAuthoringStepResolver, N as PlayToolExecutionRequest } from './compiler-manifest-BPA3r-VG.mjs';
+export { O as DEEPLINE_EXTRACTOR_TARGETS, Q as DEEPLINE_EXTRACTOR_TARGET_DEFINITIONS, R as DeeplineEmailStatusGetterValue, S as DeeplineExtractorTarget, U as DeeplineGetterValue, V as DeeplineGetterValueMap, W as JOB_CHANGE_STATUS_VALUES, X as JobChangeStatus, Y as PHONE_STATUS_VALUES, Z as PhoneStatus, _ as PlayDataset, $ as PlayDatasetInput, a0 as PreviousCell, a1 as ProviderTransientError, a2 as ProviderTransientErrorCategory, a3 as ToolExecutionErrorCategory, a4 as ToolExecutionErrorOrigin, a5 as ToolExecutionFailureV1, a6 as ToolExecutionNetworkKind, a7 as ToolExecutionNetworkScope, a8 as isDeeplineExtractorTarget } from './compiler-manifest-BPA3r-VG.mjs';
 import '@sinclair/typebox';
 
 declare const FIXTURE_BEHAVIOR_VERSION: 1;
@@ -2187,8 +2187,13 @@ type MonitorsNamespace = {
     list: (options?: MonitorsListOptions) => Promise<MonitorsListResult>;
     /** Fetch one deployed monitor by public key (without dependents). */
     get: (key: string) => Promise<MonitorDetail>;
-    /** Send an explicit payload through the deployed monitor's normal webhook path. */
-    test: (key: string, payload: Record<string, unknown>) => Promise<MonitorTestResult>;
+    /**
+     * Test a deployed monitor. `validationOnly` safely verifies the callback
+     * envelope; omitted options preserve the historic full-ingestion behavior.
+     */
+    test: (key: string, payload: Record<string, unknown>, options?: {
+        validationOnly?: boolean;
+    }) => Promise<MonitorTestResult>;
     validate: (key: string) => Promise<MonitorValidateResult>;
     /** List the published plays depending on one monitor's output streams. */
     dependents: (key: string) => Promise<MonitorDependents>;
@@ -3520,7 +3525,9 @@ declare class DeeplineClient {
     listMonitors(options?: MonitorsListOptions): Promise<MonitorsListResult>;
     /** Fetch one deployed monitor by public key. Prefer `client.monitors.get(...)`. */
     getMonitor(key: string): Promise<MonitorDetail>;
-    testMonitorWebhook(key: string, payload: Record<string, unknown>): Promise<MonitorTestResult>;
+    testMonitorWebhook(key: string, payload: Record<string, unknown>, options?: {
+        validationOnly?: boolean;
+    }): Promise<MonitorTestResult>;
     setupMonitor(tool: string, payload: Record<string, unknown>): Promise<Record<string, unknown>>;
     validateMonitor(key: string): Promise<MonitorValidateResult>;
     /** Published plays depending on one monitor. Prefer `client.monitors.dependents(...)`. */
@@ -3720,7 +3727,8 @@ type PlayFetchResponse = PlayAuthoringFetchResponse;
  *
  * A play can be triggered three ways, declared as the third argument to
  * {@link definePlay}:
- * - `webhook` — an inbound HTTP call (with optional HMAC signature verification);
+ * - `webhook` — an inbound HTTP call (with optional legacy HMAC or Standard
+ *   Webhooks signature verification);
  * - `cron` — a schedule; or
  * - `sqlListeners` — a **monitor**: the play runs whenever a monitor writes a new
  *   row to its output stream. This is how you build a play "on top of" a monitor
@@ -3742,6 +3750,19 @@ type PlayFetchResponse = PlayAuthoringFetchResponse;
  * });
  * ```
  *
+ * @example Svix / Standard Webhooks verification with Deepline Secrets
+ * ```typescript
+ * definePlay('visitor-webhook', handler, {
+ *   webhook: {
+ *     auth: {
+ *       type: 'standard-webhooks',
+ *       headerFamily: 'svix',
+ *       signingSecrets: ['VECTOR_WEBHOOK_SECRET'],
+ *     },
+ *   },
+ * });
+ * ```
+ *
  * @example Cron schedule
  * ```typescript
  * definePlay('nightly-sync', handler, {

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { e as PlayRuntimeBackendId, c as PlayCompilerManifest, D as DeeplineError, f as ToolExecutionError, g as ToolExecutionErrorOptions, h as PlayAuthoringColumnMap, i as PlayAuthoringColumnResolver, j as PlayAuthoringRuntimeContext, k as PlayAuthoringConditionalStepResolver, l as PlayAuthoringCsvInput, m as PlayAuthoringCsvOptions, n as PlayAuthoringDatasetBuilder, o as PlayAuthoringDatasetColumnDefinition, p as PlayAuthoringDatasetColumnRunInput, q as ToolExecuteResult, r as PlayAuthoringReferenceLike, s as PlayReturnObject$1, t as PlayAuthoringDefineConfig, u as PlayAuthoringDefinedPlay, v as PlayAuthoringFetchOptions, w as PlayAuthoringFileInput, x as PlayAuthoringBindings, y as PlayAuthoringCallExecution, z as PlayAuthoringCallOptions, A as PlayAuthoringFetchResponse, B as PlayAuthoringInputContract, C as PlayAuthoringStepProgramStep, E as PlayAuthoringRuntimeStepOptions, F as PlaySqlListenerDeclaration, G as PlaySqlListenerEvent, H as PlaySqlListenerOperation, I as PlaySqlQuery, J as PlayAuthoringStepOptions, K as PlayAuthoringStepProgram, L as PlayAuthoringStepProgramResolver, M as PlayAuthoringStepResolver, N as PlayToolExecutionRequest } from './compiler-manifest-CGZadg-v.js';
-export { O as DEEPLINE_EXTRACTOR_TARGETS, Q as DEEPLINE_EXTRACTOR_TARGET_DEFINITIONS, R as DeeplineEmailStatusGetterValue, S as DeeplineExtractorTarget, U as DeeplineGetterValue, V as DeeplineGetterValueMap, W as JOB_CHANGE_STATUS_VALUES, X as JobChangeStatus, Y as PHONE_STATUS_VALUES, Z as PhoneStatus, _ as PlayDataset, $ as PlayDatasetInput, a0 as PreviousCell, a1 as ProviderTransientError, a2 as ProviderTransientErrorCategory, a3 as ToolExecutionErrorCategory, a4 as ToolExecutionErrorOrigin, a5 as ToolExecutionFailureV1, a6 as ToolExecutionNetworkKind, a7 as ToolExecutionNetworkScope, a8 as isDeeplineExtractorTarget } from './compiler-manifest-CGZadg-v.js';
+import { e as PlayRuntimeBackendId, c as PlayCompilerManifest, D as DeeplineError, f as ToolExecutionError, g as ToolExecutionErrorOptions, h as PlayAuthoringColumnMap, i as PlayAuthoringColumnResolver, j as PlayAuthoringRuntimeContext, k as PlayAuthoringConditionalStepResolver, l as PlayAuthoringCsvInput, m as PlayAuthoringCsvOptions, n as PlayAuthoringDatasetBuilder, o as PlayAuthoringDatasetColumnDefinition, p as PlayAuthoringDatasetColumnRunInput, q as ToolExecuteResult, r as PlayAuthoringReferenceLike, s as PlayReturnObject$1, t as PlayAuthoringDefineConfig, u as PlayAuthoringDefinedPlay, v as PlayAuthoringFetchOptions, w as PlayAuthoringFileInput, x as PlayAuthoringBindings, y as PlayAuthoringCallExecution, z as PlayAuthoringCallOptions, A as PlayAuthoringFetchResponse, B as PlayAuthoringInputContract, C as PlayAuthoringStepProgramStep, E as PlayAuthoringRuntimeStepOptions, F as PlaySqlListenerDeclaration, G as PlaySqlListenerEvent, H as PlaySqlListenerOperation, I as PlaySqlQuery, J as PlayAuthoringStepOptions, K as PlayAuthoringStepProgram, L as PlayAuthoringStepProgramResolver, M as PlayAuthoringStepResolver, N as PlayToolExecutionRequest } from './compiler-manifest-BPA3r-VG.js';
+export { O as DEEPLINE_EXTRACTOR_TARGETS, Q as DEEPLINE_EXTRACTOR_TARGET_DEFINITIONS, R as DeeplineEmailStatusGetterValue, S as DeeplineExtractorTarget, U as DeeplineGetterValue, V as DeeplineGetterValueMap, W as JOB_CHANGE_STATUS_VALUES, X as JobChangeStatus, Y as PHONE_STATUS_VALUES, Z as PhoneStatus, _ as PlayDataset, $ as PlayDatasetInput, a0 as PreviousCell, a1 as ProviderTransientError, a2 as ProviderTransientErrorCategory, a3 as ToolExecutionErrorCategory, a4 as ToolExecutionErrorOrigin, a5 as ToolExecutionFailureV1, a6 as ToolExecutionNetworkKind, a7 as ToolExecutionNetworkScope, a8 as isDeeplineExtractorTarget } from './compiler-manifest-BPA3r-VG.js';
 import '@sinclair/typebox';
 
 declare const FIXTURE_BEHAVIOR_VERSION: 1;
@@ -2187,8 +2187,13 @@ type MonitorsNamespace = {
     list: (options?: MonitorsListOptions) => Promise<MonitorsListResult>;
     /** Fetch one deployed monitor by public key (without dependents). */
     get: (key: string) => Promise<MonitorDetail>;
-    /** Send an explicit payload through the deployed monitor's normal webhook path. */
-    test: (key: string, payload: Record<string, unknown>) => Promise<MonitorTestResult>;
+    /**
+     * Test a deployed monitor. `validationOnly` safely verifies the callback
+     * envelope; omitted options preserve the historic full-ingestion behavior.
+     */
+    test: (key: string, payload: Record<string, unknown>, options?: {
+        validationOnly?: boolean;
+    }) => Promise<MonitorTestResult>;
     validate: (key: string) => Promise<MonitorValidateResult>;
     /** List the published plays depending on one monitor's output streams. */
     dependents: (key: string) => Promise<MonitorDependents>;
@@ -3520,7 +3525,9 @@ declare class DeeplineClient {
     listMonitors(options?: MonitorsListOptions): Promise<MonitorsListResult>;
     /** Fetch one deployed monitor by public key. Prefer `client.monitors.get(...)`. */
     getMonitor(key: string): Promise<MonitorDetail>;
-    testMonitorWebhook(key: string, payload: Record<string, unknown>): Promise<MonitorTestResult>;
+    testMonitorWebhook(key: string, payload: Record<string, unknown>, options?: {
+        validationOnly?: boolean;
+    }): Promise<MonitorTestResult>;
     setupMonitor(tool: string, payload: Record<string, unknown>): Promise<Record<string, unknown>>;
     validateMonitor(key: string): Promise<MonitorValidateResult>;
     /** Published plays depending on one monitor. Prefer `client.monitors.dependents(...)`. */
@@ -3720,7 +3727,8 @@ type PlayFetchResponse = PlayAuthoringFetchResponse;
  *
  * A play can be triggered three ways, declared as the third argument to
  * {@link definePlay}:
- * - `webhook` — an inbound HTTP call (with optional HMAC signature verification);
+ * - `webhook` — an inbound HTTP call (with optional legacy HMAC or Standard
+ *   Webhooks signature verification);
  * - `cron` — a schedule; or
  * - `sqlListeners` — a **monitor**: the play runs whenever a monitor writes a new
  *   row to its output stream. This is how you build a play "on top of" a monitor
@@ -3742,6 +3750,19 @@ type PlayFetchResponse = PlayAuthoringFetchResponse;
  * });
  * ```
  *
+ * @example Svix / Standard Webhooks verification with Deepline Secrets
+ * ```typescript
+ * definePlay('visitor-webhook', handler, {
+ *   webhook: {
+ *     auth: {
+ *       type: 'standard-webhooks',
+ *       headerFamily: 'svix',
+ *       signingSecrets: ['VECTOR_WEBHOOK_SECRET'],
+ *     },
+ *   },
+ * });
+ * ```
+ *
  * @example Cron schedule
  * ```typescript
  * definePlay('nightly-sync', handler, {

package/dist/index.js

@@ -763,7 +763,7 @@ var SDK_RELEASE = {
   // 0.2.0 makes Dataset Handles uniformly async-only after 0.1.320 briefly
   // exposed storage-dependent synchronous access. This deliberate minor
   // release keeps lazy paging semantics independent of row residency.
-  version: "0.2.48",
+  version: "0.2.50",
   contracts: {
     api: {
       name: "sdk-http-api",
@@ -3598,7 +3598,7 @@ var DeeplineClient = class {
       deploy: (definition, options2) => this.deployMonitor(definition, options2),
       list: (options2) => this.listMonitors(options2),
       get: (key) => this.getMonitor(key),
-      test: (key, payload) => this.testMonitorWebhook(key, payload),
+      test: (key, payload, options2) => this.testMonitorWebhook(key, payload, options2),
       validate: (key) => this.validateMonitor(key),
       dependents: (key) => this.getMonitorDependents(key),
       update: (key, patch) => this.updateMonitor(key, patch),
@@ -5767,10 +5767,16 @@ var DeeplineClient = class {
       { method: "GET" }
     );
   }
-  async testMonitorWebhook(key, payload) {
+  async testMonitorWebhook(key, payload, options) {
     return this.http.request(
       `/api/v2/monitors/deployed/${encodeURIComponent(key)}/test`,
-      { method: "POST", body: { payload } }
+      {
+        method: "POST",
+        body: {
+          payload,
+          ...options?.validationOnly ? { mode: "validation_only" } : {}
+        }
+      }
     );
   }
   async setupMonitor(tool, payload) {

package/dist/index.mjs

@@ -689,7 +689,7 @@ var SDK_RELEASE = {
   // 0.2.0 makes Dataset Handles uniformly async-only after 0.1.320 briefly
   // exposed storage-dependent synchronous access. This deliberate minor
   // release keeps lazy paging semantics independent of row residency.
-  version: "0.2.48",
+  version: "0.2.50",
   contracts: {
     api: {
       name: "sdk-http-api",
@@ -3524,7 +3524,7 @@ var DeeplineClient = class {
       deploy: (definition, options2) => this.deployMonitor(definition, options2),
       list: (options2) => this.listMonitors(options2),
       get: (key) => this.getMonitor(key),
-      test: (key, payload) => this.testMonitorWebhook(key, payload),
+      test: (key, payload, options2) => this.testMonitorWebhook(key, payload, options2),
       validate: (key) => this.validateMonitor(key),
       dependents: (key) => this.getMonitorDependents(key),
       update: (key, patch) => this.updateMonitor(key, patch),
@@ -5693,10 +5693,16 @@ var DeeplineClient = class {
       { method: "GET" }
     );
   }
-  async testMonitorWebhook(key, payload) {
+  async testMonitorWebhook(key, payload, options) {
     return this.http.request(
       `/api/v2/monitors/deployed/${encodeURIComponent(key)}/test`,
-      { method: "POST", body: { payload } }
+      {
+        method: "POST",
+        body: {
+          payload,
+          ...options?.validationOnly ? { mode: "validation_only" } : {}
+        }
+      }
     );
   }
   async setupMonitor(tool, payload) {

package/dist/install-integrity.json

@@ -191,6 +191,8 @@
     "dist/bundling-sources/shared_libs/plays/dataset-summary.ts",
     "dist/bundling-sources/shared_libs/plays/dataset.ts",
     "dist/bundling-sources/shared_libs/plays/definition.ts",
+    "dist/bundling-sources/shared_libs/plays/enrich-compat-adapter.ts",
+    "dist/bundling-sources/shared_libs/plays/enrich-play-compiler.ts",
     "dist/bundling-sources/shared_libs/plays/file-refs.ts",
     "dist/bundling-sources/shared_libs/plays/input-contract-definition.ts",
     "dist/bundling-sources/shared_libs/plays/input-contract.ts",
@@ -202,6 +204,7 @@
     "dist/bundling-sources/shared_libs/plays/static-pipeline.ts",
     "dist/bundling-sources/shared_libs/plays/tool-category-descriptions.ts",
     "dist/bundling-sources/shared_libs/plays/tool-codegen.ts",
+    "dist/bundling-sources/shared_libs/plays/user-code-safety.ts",
     "dist/bundling-sources/shared_libs/product-notifications/contract.ts",
     "dist/bundling-sources/shared_libs/runtime-env.ts",
     "dist/bundling-sources/shared_libs/security/outbound-url-policy.ts",
@@ -212,8 +215,8 @@
     "dist/cli/index.d.ts",
     "dist/cli/index.js",
     "dist/cli/index.mjs",
-    "dist/compiler-manifest-CGZadg-v.d.mts",
-    "dist/compiler-manifest-CGZadg-v.d.ts",
+    "dist/compiler-manifest-BPA3r-VG.d.mts",
+    "dist/compiler-manifest-BPA3r-VG.d.ts",
     "dist/helpers.d.mts",
     "dist/helpers.d.ts",
     "dist/helpers.js",

package/dist/plays/bundle-play-file.d.mts

@@ -1,5 +1,5 @@
-import { T as ToolExecutionErrorSchemaVersion, P as PlayAuthoringContractEdition, a as PlayArtifactKind$1, b as PlaySandboxRuntimeDeclaration, c as PlayCompilerManifest } from '../compiler-manifest-CGZadg-v.mjs';
-export { d as PLAY_ARTIFACT_KINDS } from '../compiler-manifest-CGZadg-v.mjs';
+import { T as ToolExecutionErrorSchemaVersion, P as PlayAuthoringContractEdition, a as PlayArtifactKind$1, b as PlaySandboxRuntimeDeclaration, c as PlayCompilerManifest } from '../compiler-manifest-BPA3r-VG.mjs';
+export { d as PLAY_ARTIFACT_KINDS } from '../compiler-manifest-BPA3r-VG.mjs';
 import '@sinclair/typebox';
 
 type PlayPackageImport = {
@@ -65,6 +65,8 @@ type PlayLocalFileDiscoveryResult = {
 };
 type PlayBundlingAdapter = {
     projectRoot: string;
+    /** Optional root used only to make source-graph identity independent of temporary absolute paths. */
+    sourceIdentityRoot?: string;
     nodeModulesDir: string;
     cacheDir?: string;
     sdkSourceRoot: string;

package/dist/plays/bundle-play-file.d.ts

@@ -1,5 +1,5 @@
-import { T as ToolExecutionErrorSchemaVersion, P as PlayAuthoringContractEdition, a as PlayArtifactKind$1, b as PlaySandboxRuntimeDeclaration, c as PlayCompilerManifest } from '../compiler-manifest-CGZadg-v.js';
-export { d as PLAY_ARTIFACT_KINDS } from '../compiler-manifest-CGZadg-v.js';
+import { T as ToolExecutionErrorSchemaVersion, P as PlayAuthoringContractEdition, a as PlayArtifactKind$1, b as PlaySandboxRuntimeDeclaration, c as PlayCompilerManifest } from '../compiler-manifest-BPA3r-VG.js';
+export { d as PLAY_ARTIFACT_KINDS } from '../compiler-manifest-BPA3r-VG.js';
 import '@sinclair/typebox';
 
 type PlayPackageImport = {
@@ -65,6 +65,8 @@ type PlayLocalFileDiscoveryResult = {
 };
 type PlayBundlingAdapter = {
     projectRoot: string;
+    /** Optional root used only to make source-graph identity independent of temporary absolute paths. */
+    sourceIdentityRoot?: string;
     nodeModulesDir: string;
     cacheDir?: string;
     sdkSourceRoot: string;