robotrock 0.3.0 → 0.5.0

package/dist/{client-Dhk9qxhL.d.ts → client-BOm2Ce2f.d.ts}

@@ -1,4 +1,4 @@
-import { TaskContextInput, AssignToInput, TaskResponse, DiscriminatedApprovalResult, Task } from './schemas/index.js';
+import { TaskContextInput, AssignToInput, ThreadUpdateStatus, TaskResponse, DiscriminatedApprovalResult, Task, ThreadUpdate } from './schemas/index.js';
 
 type RobotRockWebhookConfig = {
     url: string;
@@ -59,11 +59,29 @@ type SendToHumanInput<A extends readonly SendToHumanActionInput[] = readonly Sen
      * one (returned as `task.threadId`) and reuse it on later tasks in the thread.
      */
     threadId?: string;
+    /**
+     * Optional initial status update logged against the task's thread. Shows in
+     * the inbox status bar and the thread update log.
+     */
+    update?: {
+        /** A short status update (1-2 sentences). */
+        message: string;
+        /** Lifecycle status for the icon/color in the status bar. @default "info" */
+        status?: ThreadUpdateStatus;
+    };
 };
 type SendToHumanWithAppInput<A extends readonly SendToHumanActionInput[] = readonly SendToHumanActionInput[]> = (SendToHumanInput<A> | Readonly<SendToHumanInput<A>>) & {
     /** Inbox app bucket. Overrides the client `app` when set. */
     app?: string;
 };
+type SendUpdateInput = {
+    /** The thread to log the update against (from `task.threadId`). */
+    threadId: string;
+    /** A short status update (1-2 sentences). */
+    message: string;
+    /** Lifecycle status for the icon/color in the status bar. @default "info" */
+    status?: ThreadUpdateStatus;
+};
 type SendToHumanResult<A extends readonly SendToHumanActionInput[] = readonly SendToHumanActionInput[]> = {
     mode: "created";
     task: TaskResponse["task"];
@@ -96,9 +114,14 @@ declare class RobotRock {
      * Get a task by public task id (returned as `task.taskId` from {@link sendToHuman}).
      */
     getTask(taskId: string): Promise<Task | null>;
+    /**
+     * Log a status update against a thread. The update shows in the inbox status
+     * bar and thread update log for every task in the thread.
+     */
+    sendUpdate({ threadId, message, status }: SendUpdateInput): Promise<ThreadUpdate>;
     cancelTask(taskId: string): Promise<void>;
 }
 declare function createClient(config: RobotRockConfig): RobotRock;
 declare function attachWebhookToActions(actions: readonly SendToHumanActionInput[], webhook: RobotRockWebhookConfig): TaskContextInput["actions"];
 
-export { type RobotRockConfig as R, type SendToHumanActionInput as S, type SendToHumanInput as a, RobotRock as b, RobotRockError as c, attachWebhookToActions as d, createClient as e, type RobotRockWebhookClientConfig as f, type RobotRockPollingClientConfig as g, type RobotRockWebhookConfig as h, type RobotRockPollingOptions as i, type SendToHumanValidUntil as j, type SendToHumanResult as k };
+export { type RobotRockConfig as R, type SendToHumanActionInput as S, type SendToHumanInput as a, RobotRock as b, RobotRockError as c, attachWebhookToActions as d, createClient as e, type RobotRockWebhookClientConfig as f, type RobotRockPollingClientConfig as g, type RobotRockWebhookConfig as h, type RobotRockPollingOptions as i, type SendToHumanValidUntil as j, type SendToHumanResult as k, type SendUpdateInput as l };

package/dist/index.d.ts

@@ -1,7 +1,7 @@
-import { R as RobotRockConfig, b as RobotRock } from './client-Dhk9qxhL.js';
-export { c as RobotRockError, g as RobotRockPollingClientConfig, i as RobotRockPollingOptions, f as RobotRockWebhookClientConfig, h as RobotRockWebhookConfig, S as SendToHumanActionInput, a as SendToHumanInput, k as SendToHumanResult, j as SendToHumanValidUntil, d as attachWebhookToActions, e as createClient } from './client-Dhk9qxhL.js';
+import { R as RobotRockConfig, b as RobotRock } from './client-BOm2Ce2f.js';
+export { c as RobotRockError, g as RobotRockPollingClientConfig, i as RobotRockPollingOptions, f as RobotRockWebhookClientConfig, h as RobotRockWebhookConfig, S as SendToHumanActionInput, a as SendToHumanInput, k as SendToHumanResult, j as SendToHumanValidUntil, l as SendUpdateInput, d as attachWebhookToActions, e as createClient } from './client-BOm2Ce2f.js';
 import { Task, DiscriminatedApprovalResult } from './schemas/index.js';
-export { ApprovalResult, AssignToInput, CreateTaskBody, CreateTaskBodyInput, Handler, InferActionData, TaskAction, TaskContext, TaskContextInput, TaskResponse, TaskResult, TaskStatus, TriggerHandler, TupleElementIndices, WebhookHandler, assignToSchema, createTaskBodySchema, taskContextSchema } from './schemas/index.js';
+export { ApprovalResult, AssignToInput, CreateTaskBody, CreateTaskBodyInput, DEFAULT_THREAD_UPDATE_STATUS, Handler, InferActionData, TaskAction, TaskContext, TaskContextInput, TaskResponse, TaskResult, TaskStatus, ThreadUpdate, ThreadUpdateBody, ThreadUpdateBodyInput, ThreadUpdateInput, ThreadUpdateResponse, ThreadUpdateSource, ThreadUpdateStatus, TriggerHandler, TupleElementIndices, WebhookHandler, assignToSchema, createTaskBodySchema, taskContextSchema, threadUpdateBodySchema, threadUpdateInputSchema, threadUpdateStatusSchema, threadUpdateStatuses } from './schemas/index.js';
 import { z } from 'zod';
 export { R as RobotRockHandlerWebhookPayload } from './handler-webhook-BqEi6Bk-.js';
 

package/dist/{index.js → index.mjs}

@@ -8,30 +8,35 @@ import {
   resolveRobotRockClient,
   resolveRobotRockConfig,
   toDiscriminatedApprovalResult
-} from "./chunk-KOXJCIST.js";
+} from "./chunk-E7ZWBFZ6.mjs";
 import {
+  DEFAULT_THREAD_UPDATE_STATUS,
   assignToSchema,
   createTaskBodySchema,
-  taskContextSchema
-} from "./chunk-LXM7VS4Q.js";
+  external_exports,
+  taskContextSchema,
+  threadUpdateBodySchema,
+  threadUpdateInputSchema,
+  threadUpdateStatusSchema,
+  threadUpdateStatuses
+} from "./chunk-VNXWLPRV.mjs";
 
 // src/webhook.ts
 import { createHmac, timingSafeEqual } from "crypto";
-import { z } from "zod";
 var ROBOTROCK_SIGNATURE_HEADER = "x-robotrock-signature";
-var robotRockWebhookPayloadBodySchema = z.object({
-  taskId: z.string().min(1),
-  action: z.object({
-    id: z.string().min(1),
-    title: z.string().min(1),
-    data: z.unknown()
+var robotRockWebhookPayloadBodySchema = external_exports.object({
+  taskId: external_exports.string().min(1),
+  action: external_exports.object({
+    id: external_exports.string().min(1),
+    title: external_exports.string().min(1),
+    data: external_exports.unknown()
   }),
-  handledBy: z.string().min(1).optional(),
-  handledAt: z.string().min(1),
-  handlerType: z.string().min(1)
+  handledBy: external_exports.string().min(1).optional(),
+  handledAt: external_exports.string().min(1),
+  handlerType: external_exports.string().min(1)
 });
 var robotRockWebhookPayloadSchema = robotRockWebhookPayloadBodySchema.extend({
-  headers: z.record(z.string())
+  headers: external_exports.record(external_exports.string())
 });
 var RobotRockWebhookError = class extends Error {
   constructor(message, code, details) {
@@ -121,6 +126,7 @@ function normalizeHeaders(headers) {
   return result;
 }
 export {
+  DEFAULT_THREAD_UPDATE_STATUS,
   RobotRock,
   RobotRockError,
   RobotRockWebhookError,
@@ -133,7 +139,11 @@ export {
   resolveRobotRockClient,
   resolveRobotRockConfig,
   taskContextSchema,
+  threadUpdateBodySchema,
+  threadUpdateInputSchema,
+  threadUpdateStatusSchema,
+  threadUpdateStatuses,
   toDiscriminatedApprovalResult,
   verifyRobotRockWebhook
 };
-//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.mjs.map

package/dist/{index.js.map → index.mjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/webhook.ts"],"sourcesContent":["import { createHmac, timingSafeEqual } from \"node:crypto\";\nimport { z } from \"zod\";\n\nconst ROBOTROCK_SIGNATURE_HEADER = \"x-robotrock-signature\";\n\nconst robotRockWebhookPayloadBodySchema = z.object({\n  taskId: z.string().min(1),\n  action: z.object({\n    id: z.string().min(1),\n    title: z.string().min(1),\n    data: z.unknown(),\n  }),\n  handledBy: z.string().min(1).optional(),\n  handledAt: z.string().min(1),\n  handlerType: z.string().min(1),\n});\n\nconst robotRockWebhookPayloadSchema = robotRockWebhookPayloadBodySchema.extend({\n  headers: z.record(z.string()),\n});\n\nexport type RobotRockWebhookErrorCode =\n  | \"MISSING_WEBHOOK_SECRET\"\n  | \"MISSING_SIGNATURE\"\n  | \"INVALID_SIGNATURE\"\n  | \"INVALID_JSON\"\n  | \"INVALID_PAYLOAD\";\n\nexport class RobotRockWebhookError extends Error {\n  constructor(\n    message: string,\n    public readonly code: RobotRockWebhookErrorCode,\n    public readonly details?: unknown\n  ) {\n    super(message);\n    this.name = \"RobotRockWebhookError\";\n  }\n}\n\nexport type RobotRockWebhookPayload = z.infer<typeof robotRockWebhookPayloadSchema>;\n\nexport interface VerifyRobotRockWebhookOptions {\n  /**\n   * Override shared secret (defaults to ROBOTROCK_WEBHOOK_SECRET).\n   * Keep undefined in production to enforce the canonical env var.\n   */\n  secret?: string;\n  /**\n   * Resolve the tenant signing secret by public task id (hosted MCP uses Convex).\n   * Used when secret is not passed explicitly.\n   */\n  resolveSecret?: (taskId: string) => Promise<string | undefined>;\n  /** Signature header to read. @default \"x-robotrock-signature\" */\n  signatureHeader?: string;\n}\n\n/**\n * Verify a RobotRock webhook request and return a validated payload.\n * Throws RobotRockWebhookError with machine-readable `code` for audit logging.\n */\nexport async function verifyRobotRockWebhook(\n  request: Request,\n  options: VerifyRobotRockWebhookOptions = {}\n): Promise<RobotRockWebhookPayload> {\n  const signatureHeaderName = options.signatureHeader ?? ROBOTROCK_SIGNATURE_HEADER;\n  const signature = request.headers.get(signatureHeaderName);\n\n  if (!signature) {\n    throw new RobotRockWebhookError(\n      `Missing webhook signature header: ${signatureHeaderName}`,\n      \"MISSING_SIGNATURE\"\n    );\n  }\n\n  const rawBody = await request.text();\n  const secret = await resolveWebhookSigningSecret(rawBody, options);\n\n  if (!secret) {\n    throw new RobotRockWebhookError(\n      \"Missing webhook signing secret for verification\",\n      \"MISSING_WEBHOOK_SECRET\"\n    );\n  }\n\n  assertValidSignature(rawBody, signature, secret);\n\n  let parsedBody: unknown;\n  try {\n    parsedBody = JSON.parse(rawBody);\n  } catch (error) {\n    throw new RobotRockWebhookError(\"Webhook body is not valid JSON\", \"INVALID_JSON\", {\n      cause: error instanceof Error ? error.message : String(error),\n    });\n  }\n\n  const payloadResult = robotRockWebhookPayloadBodySchema.safeParse(parsedBody);\n  if (!payloadResult.success) {\n    throw new RobotRockWebhookError(\n      \"Webhook payload schema validation failed\",\n      \"INVALID_PAYLOAD\",\n      payloadResult.error.flatten()\n    );\n  }\n\n  return {\n    ...payloadResult.data,\n    headers: normalizeHeaders(request.headers),\n  };\n}\n\nasync function resolveWebhookSigningSecret(\n  rawBody: string,\n  options: VerifyRobotRockWebhookOptions\n): Promise<string | undefined> {\n  if (options.secret) {\n    return options.secret;\n  }\n\n  if (options.resolveSecret) {\n    const taskId = peekWebhookTaskId(rawBody);\n    if (taskId) {\n      const resolved = await options.resolveSecret(taskId);\n      if (resolved) {\n        return resolved;\n      }\n    }\n  }\n\n  return process.env.ROBOTROCK_WEBHOOK_SECRET;\n}\n\nfunction peekWebhookTaskId(rawBody: string): string | undefined {\n  try {\n    const parsed: unknown = JSON.parse(rawBody);\n    if (\n      typeof parsed === \"object\" &&\n      parsed !== null &&\n      \"taskId\" in parsed &&\n      typeof (parsed as { taskId: unknown }).taskId === \"string\"\n    ) {\n      return (parsed as { taskId: string }).taskId;\n    }\n  } catch {\n    // fall through\n  }\n  return undefined;\n}\n\nfunction assertValidSignature(rawBody: string, signature: string, secret: string): void {\n  const expected = `sha256=${createHmac(\"sha256\", secret).update(rawBody).digest(\"hex\")}`;\n  const expectedBuffer = Buffer.from(expected);\n  const receivedBuffer = Buffer.from(signature);\n\n  if (\n    expectedBuffer.length !== receivedBuffer.length ||\n    !timingSafeEqual(expectedBuffer, receivedBuffer)\n  ) {\n    throw new RobotRockWebhookError(\"Webhook signature verification failed\", \"INVALID_SIGNATURE\");\n  }\n}\n\nfunction normalizeHeaders(headers: Headers): Record<string, string> {\n  const result: Record<string, string> = {};\n  headers.forEach((value, key) => {\n    result[key] = value;\n  });\n  return result;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA,SAAS,YAAY,uBAAuB;AAC5C,SAAS,SAAS;AAElB,IAAM,6BAA6B;AAEnC,IAAM,oCAAoC,EAAE,OAAO;AAAA,EACjD,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACxB,QAAQ,EAAE,OAAO;AAAA,IACf,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,IACpB,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,IACvB,MAAM,EAAE,QAAQ;AAAA,EAClB,CAAC;AAAA,EACD,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACtC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC3B,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC;AAC/B,CAAC;AAED,IAAM,gCAAgC,kCAAkC,OAAO;AAAA,EAC7E,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC;AAC9B,CAAC;AASM,IAAM,wBAAN,cAAoC,MAAM;AAAA,EAC/C,YACE,SACgB,MACA,SAChB;AACA,UAAM,OAAO;AAHG;AACA;AAGhB,SAAK,OAAO;AAAA,EACd;AACF;AAuBA,eAAsB,uBACpB,SACA,UAAyC,CAAC,GACR;AAClC,QAAM,sBAAsB,QAAQ,mBAAmB;AACvD,QAAM,YAAY,QAAQ,QAAQ,IAAI,mBAAmB;AAEzD,MAAI,CAAC,WAAW;AACd,UAAM,IAAI;AAAA,MACR,qCAAqC,mBAAmB;AAAA,MACxD;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAU,MAAM,QAAQ,KAAK;AACnC,QAAM,SAAS,MAAM,4BAA4B,SAAS,OAAO;AAEjE,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,uBAAqB,SAAS,WAAW,MAAM;AAE/C,MAAI;AACJ,MAAI;AACF,iBAAa,KAAK,MAAM,OAAO;AAAA,EACjC,SAAS,OAAO;AACd,UAAM,IAAI,sBAAsB,kCAAkC,gBAAgB;AAAA,MAChF,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,IAC9D,CAAC;AAAA,EACH;AAEA,QAAM,gBAAgB,kCAAkC,UAAU,UAAU;AAC5E,MAAI,CAAC,cAAc,SAAS;AAC1B,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA,cAAc,MAAM,QAAQ;AAAA,IAC9B;AAAA,EACF;AAEA,SAAO;AAAA,IACL,GAAG,cAAc;AAAA,IACjB,SAAS,iBAAiB,QAAQ,OAAO;AAAA,EAC3C;AACF;AAEA,eAAe,4BACb,SACA,SAC6B;AAC7B,MAAI,QAAQ,QAAQ;AAClB,WAAO,QAAQ;AAAA,EACjB;AAEA,MAAI,QAAQ,eAAe;AACzB,UAAM,SAAS,kBAAkB,OAAO;AACxC,QAAI,QAAQ;AACV,YAAM,WAAW,MAAM,QAAQ,cAAc,MAAM;AACnD,UAAI,UAAU;AACZ,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AAEA,SAAO,QAAQ,IAAI;AACrB;AAEA,SAAS,kBAAkB,SAAqC;AAC9D,MAAI;AACF,UAAM,SAAkB,KAAK,MAAM,OAAO;AAC1C,QACE,OAAO,WAAW,YAClB,WAAW,QACX,YAAY,UACZ,OAAQ,OAA+B,WAAW,UAClD;AACA,aAAQ,OAA8B;AAAA,IACxC;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO;AACT;AAEA,SAAS,qBAAqB,SAAiB,WAAmB,QAAsB;AACtF,QAAM,WAAW,UAAU,WAAW,UAAU,MAAM,EAAE,OAAO,OAAO,EAAE,OAAO,KAAK,CAAC;AACrF,QAAM,iBAAiB,OAAO,KAAK,QAAQ;AAC3C,QAAM,iBAAiB,OAAO,KAAK,SAAS;AAE5C,MACE,eAAe,WAAW,eAAe,UACzC,CAAC,gBAAgB,gBAAgB,cAAc,GAC/C;AACA,UAAM,IAAI,sBAAsB,yCAAyC,mBAAmB;AAAA,EAC9F;AACF;AAEA,SAAS,iBAAiB,SAA0C;AAClE,QAAM,SAAiC,CAAC;AACxC,UAAQ,QAAQ,CAAC,OAAO,QAAQ;AAC9B,WAAO,GAAG,IAAI;AAAA,EAChB,CAAC;AACD,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../src/webhook.ts"],"sourcesContent":["import { createHmac, timingSafeEqual } from \"node:crypto\";\nimport { z } from \"zod\";\n\nconst ROBOTROCK_SIGNATURE_HEADER = \"x-robotrock-signature\";\n\nconst robotRockWebhookPayloadBodySchema = z.object({\n  taskId: z.string().min(1),\n  action: z.object({\n    id: z.string().min(1),\n    title: z.string().min(1),\n    data: z.unknown(),\n  }),\n  handledBy: z.string().min(1).optional(),\n  handledAt: z.string().min(1),\n  handlerType: z.string().min(1),\n});\n\nconst robotRockWebhookPayloadSchema = robotRockWebhookPayloadBodySchema.extend({\n  headers: z.record(z.string()),\n});\n\nexport type RobotRockWebhookErrorCode =\n  | \"MISSING_WEBHOOK_SECRET\"\n  | \"MISSING_SIGNATURE\"\n  | \"INVALID_SIGNATURE\"\n  | \"INVALID_JSON\"\n  | \"INVALID_PAYLOAD\";\n\nexport class RobotRockWebhookError extends Error {\n  constructor(\n    message: string,\n    public readonly code: RobotRockWebhookErrorCode,\n    public readonly details?: unknown\n  ) {\n    super(message);\n    this.name = \"RobotRockWebhookError\";\n  }\n}\n\nexport type RobotRockWebhookPayload = z.infer<typeof robotRockWebhookPayloadSchema>;\n\nexport interface VerifyRobotRockWebhookOptions {\n  /**\n   * Override shared secret (defaults to ROBOTROCK_WEBHOOK_SECRET).\n   * Keep undefined in production to enforce the canonical env var.\n   */\n  secret?: string;\n  /**\n   * Resolve the tenant signing secret by public task id (hosted MCP uses Convex).\n   * Used when secret is not passed explicitly.\n   */\n  resolveSecret?: (taskId: string) => Promise<string | undefined>;\n  /** Signature header to read. @default \"x-robotrock-signature\" */\n  signatureHeader?: string;\n}\n\n/**\n * Verify a RobotRock webhook request and return a validated payload.\n * Throws RobotRockWebhookError with machine-readable `code` for audit logging.\n */\nexport async function verifyRobotRockWebhook(\n  request: Request,\n  options: VerifyRobotRockWebhookOptions = {}\n): Promise<RobotRockWebhookPayload> {\n  const signatureHeaderName = options.signatureHeader ?? ROBOTROCK_SIGNATURE_HEADER;\n  const signature = request.headers.get(signatureHeaderName);\n\n  if (!signature) {\n    throw new RobotRockWebhookError(\n      `Missing webhook signature header: ${signatureHeaderName}`,\n      \"MISSING_SIGNATURE\"\n    );\n  }\n\n  const rawBody = await request.text();\n  const secret = await resolveWebhookSigningSecret(rawBody, options);\n\n  if (!secret) {\n    throw new RobotRockWebhookError(\n      \"Missing webhook signing secret for verification\",\n      \"MISSING_WEBHOOK_SECRET\"\n    );\n  }\n\n  assertValidSignature(rawBody, signature, secret);\n\n  let parsedBody: unknown;\n  try {\n    parsedBody = JSON.parse(rawBody);\n  } catch (error) {\n    throw new RobotRockWebhookError(\"Webhook body is not valid JSON\", \"INVALID_JSON\", {\n      cause: error instanceof Error ? error.message : String(error),\n    });\n  }\n\n  const payloadResult = robotRockWebhookPayloadBodySchema.safeParse(parsedBody);\n  if (!payloadResult.success) {\n    throw new RobotRockWebhookError(\n      \"Webhook payload schema validation failed\",\n      \"INVALID_PAYLOAD\",\n      payloadResult.error.flatten()\n    );\n  }\n\n  return {\n    ...payloadResult.data,\n    headers: normalizeHeaders(request.headers),\n  };\n}\n\nasync function resolveWebhookSigningSecret(\n  rawBody: string,\n  options: VerifyRobotRockWebhookOptions\n): Promise<string | undefined> {\n  if (options.secret) {\n    return options.secret;\n  }\n\n  if (options.resolveSecret) {\n    const taskId = peekWebhookTaskId(rawBody);\n    if (taskId) {\n      const resolved = await options.resolveSecret(taskId);\n      if (resolved) {\n        return resolved;\n      }\n    }\n  }\n\n  return process.env.ROBOTROCK_WEBHOOK_SECRET;\n}\n\nfunction peekWebhookTaskId(rawBody: string): string | undefined {\n  try {\n    const parsed: unknown = JSON.parse(rawBody);\n    if (\n      typeof parsed === \"object\" &&\n      parsed !== null &&\n      \"taskId\" in parsed &&\n      typeof (parsed as { taskId: unknown }).taskId === \"string\"\n    ) {\n      return (parsed as { taskId: string }).taskId;\n    }\n  } catch {\n    // fall through\n  }\n  return undefined;\n}\n\nfunction assertValidSignature(rawBody: string, signature: string, secret: string): void {\n  const expected = `sha256=${createHmac(\"sha256\", secret).update(rawBody).digest(\"hex\")}`;\n  const expectedBuffer = Buffer.from(expected);\n  const receivedBuffer = Buffer.from(signature);\n\n  if (\n    expectedBuffer.length !== receivedBuffer.length ||\n    !timingSafeEqual(expectedBuffer, receivedBuffer)\n  ) {\n    throw new RobotRockWebhookError(\"Webhook signature verification failed\", \"INVALID_SIGNATURE\");\n  }\n}\n\nfunction normalizeHeaders(headers: Headers): Record<string, string> {\n  const result: Record<string, string> = {};\n  headers.forEach((value, key) => {\n    result[key] = value;\n  });\n  return result;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,YAAY,uBAAuB;AAG5C,IAAM,6BAA6B;AAEnC,IAAM,oCAAoC,iBAAE,OAAO;AAAA,EACjD,QAAQ,iBAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACxB,QAAQ,iBAAE,OAAO;AAAA,IACf,IAAI,iBAAE,OAAO,EAAE,IAAI,CAAC;AAAA,IACpB,OAAO,iBAAE,OAAO,EAAE,IAAI,CAAC;AAAA,IACvB,MAAM,iBAAE,QAAQ;AAAA,EAClB,CAAC;AAAA,EACD,WAAW,iBAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACtC,WAAW,iBAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC3B,aAAa,iBAAE,OAAO,EAAE,IAAI,CAAC;AAC/B,CAAC;AAED,IAAM,gCAAgC,kCAAkC,OAAO;AAAA,EAC7E,SAAS,iBAAE,OAAO,iBAAE,OAAO,CAAC;AAC9B,CAAC;AASM,IAAM,wBAAN,cAAoC,MAAM;AAAA,EAC/C,YACE,SACgB,MACA,SAChB;AACA,UAAM,OAAO;AAHG;AACA;AAGhB,SAAK,OAAO;AAAA,EACd;AACF;AAuBA,eAAsB,uBACpB,SACA,UAAyC,CAAC,GACR;AAClC,QAAM,sBAAsB,QAAQ,mBAAmB;AACvD,QAAM,YAAY,QAAQ,QAAQ,IAAI,mBAAmB;AAEzD,MAAI,CAAC,WAAW;AACd,UAAM,IAAI;AAAA,MACR,qCAAqC,mBAAmB;AAAA,MACxD;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAU,MAAM,QAAQ,KAAK;AACnC,QAAM,SAAS,MAAM,4BAA4B,SAAS,OAAO;AAEjE,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,uBAAqB,SAAS,WAAW,MAAM;AAE/C,MAAI;AACJ,MAAI;AACF,iBAAa,KAAK,MAAM,OAAO;AAAA,EACjC,SAAS,OAAO;AACd,UAAM,IAAI,sBAAsB,kCAAkC,gBAAgB;AAAA,MAChF,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,IAC9D,CAAC;AAAA,EACH;AAEA,QAAM,gBAAgB,kCAAkC,UAAU,UAAU;AAC5E,MAAI,CAAC,cAAc,SAAS;AAC1B,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA,cAAc,MAAM,QAAQ;AAAA,IAC9B;AAAA,EACF;AAEA,SAAO;AAAA,IACL,GAAG,cAAc;AAAA,IACjB,SAAS,iBAAiB,QAAQ,OAAO;AAAA,EAC3C;AACF;AAEA,eAAe,4BACb,SACA,SAC6B;AAC7B,MAAI,QAAQ,QAAQ;AAClB,WAAO,QAAQ;AAAA,EACjB;AAEA,MAAI,QAAQ,eAAe;AACzB,UAAM,SAAS,kBAAkB,OAAO;AACxC,QAAI,QAAQ;AACV,YAAM,WAAW,MAAM,QAAQ,cAAc,MAAM;AACnD,UAAI,UAAU;AACZ,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AAEA,SAAO,QAAQ,IAAI;AACrB;AAEA,SAAS,kBAAkB,SAAqC;AAC9D,MAAI;AACF,UAAM,SAAkB,KAAK,MAAM,OAAO;AAC1C,QACE,OAAO,WAAW,YAClB,WAAW,QACX,YAAY,UACZ,OAAQ,OAA+B,WAAW,UAClD;AACA,aAAQ,OAA8B;AAAA,IACxC;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO;AACT;AAEA,SAAS,qBAAqB,SAAiB,WAAmB,QAAsB;AACtF,QAAM,WAAW,UAAU,WAAW,UAAU,MAAM,EAAE,OAAO,OAAO,EAAE,OAAO,KAAK,CAAC;AACrF,QAAM,iBAAiB,OAAO,KAAK,QAAQ;AAC3C,QAAM,iBAAiB,OAAO,KAAK,SAAS;AAE5C,MACE,eAAe,WAAW,eAAe,UACzC,CAAC,gBAAgB,gBAAgB,cAAc,GAC/C;AACA,UAAM,IAAI,sBAAsB,yCAAyC,mBAAmB;AAAA,EAC9F;AACF;AAEA,SAAS,iBAAiB,SAA0C;AAClE,QAAM,SAAiC,CAAC;AACxC,UAAQ,QAAQ,CAAC,OAAO,QAAQ;AAC9B,WAAO,GAAG,IAAI;AAAA,EAChB,CAAC;AACD,SAAO;AACT;","names":[]}

package/dist/schemas/index.d.ts

@@ -355,6 +355,27 @@ declare const assignToSchema: z.ZodEffects<z.ZodObject<{
     users?: string[] | undefined;
     groups?: string[] | undefined;
 }>;
+/** A short thread-scoped status update message (1-2 sentences). */
+declare const threadUpdateMessageSchema: z.ZodString;
+/**
+ * Lifecycle status carried by a thread update. Drives the icon and color shown
+ * in the inbox status bar. Defaults to `info` when omitted.
+ */
+declare const threadUpdateStatuses: readonly ["info", "queued", "running", "waiting", "succeeded", "failed", "cancelled"];
+declare const threadUpdateStatusSchema: z.ZodEnum<["info", "queued", "running", "waiting", "succeeded", "failed", "cancelled"]>;
+/** The default status applied when an update omits one. */
+declare const DEFAULT_THREAD_UPDATE_STATUS: ThreadUpdateStatus;
+/** Shared shape for a thread update (standalone and at task creation). */
+declare const threadUpdateInputSchema: z.ZodObject<{
+    message: z.ZodString;
+    status: z.ZodOptional<z.ZodEnum<["info", "queued", "running", "waiting", "succeeded", "failed", "cancelled"]>>;
+}, "strip", z.ZodTypeAny, {
+    message: string;
+    status?: "info" | "queued" | "running" | "waiting" | "succeeded" | "failed" | "cancelled" | undefined;
+}, {
+    message: string;
+    status?: "info" | "queued" | "running" | "waiting" | "succeeded" | "failed" | "cancelled" | undefined;
+}>;
 declare const createTaskBodySchema: z.ZodObject<{
     app: z.ZodOptional<z.ZodString>;
     type: z.ZodString;
@@ -465,6 +486,20 @@ declare const createTaskBodySchema: z.ZodObject<{
      * returns it so the caller can reuse it on later tasks in the same thread.
      */
     threadId: z.ZodOptional<z.ZodString>;
+    /**
+     * Optional initial status update logged against the task's thread. Shows in
+     * the inbox status bar and the thread update log.
+     */
+    update: z.ZodOptional<z.ZodObject<{
+        message: z.ZodString;
+        status: z.ZodOptional<z.ZodEnum<["info", "queued", "running", "waiting", "succeeded", "failed", "cancelled"]>>;
+    }, "strip", z.ZodTypeAny, {
+        message: string;
+        status?: "info" | "queued" | "running" | "waiting" | "succeeded" | "failed" | "cancelled" | undefined;
+    }, {
+        message: string;
+        status?: "info" | "queued" | "running" | "waiting" | "succeeded" | "failed" | "cancelled" | undefined;
+    }>>;
 }, "strip", z.ZodTypeAny, {
     type: string;
     name: string;
@@ -499,6 +534,10 @@ declare const createTaskBodySchema: z.ZodObject<{
         groups?: string[] | undefined;
     } | undefined;
     threadId?: string | undefined;
+    update?: {
+        message: string;
+        status?: "info" | "queued" | "running" | "waiting" | "succeeded" | "failed" | "cancelled" | undefined;
+    } | undefined;
 }, {
     type: string;
     name: string;
@@ -533,10 +572,41 @@ declare const createTaskBodySchema: z.ZodObject<{
         groups?: string[] | undefined;
     } | undefined;
     threadId?: string | undefined;
+    update?: {
+        message: string;
+        status?: "info" | "queued" | "running" | "waiting" | "succeeded" | "failed" | "cancelled" | undefined;
+    } | undefined;
+}>;
+/** POST /v1/threads/:threadId/updates body: a standalone thread update. */
+declare const threadUpdateBodySchema: z.ZodObject<{
+    message: z.ZodString;
+    status: z.ZodOptional<z.ZodEnum<["info", "queued", "running", "waiting", "succeeded", "failed", "cancelled"]>>;
+}, "strip", z.ZodTypeAny, {
+    message: string;
+    status?: "info" | "queued" | "running" | "waiting" | "succeeded" | "failed" | "cancelled" | undefined;
+}, {
+    message: string;
+    status?: "info" | "queued" | "running" | "waiting" | "succeeded" | "failed" | "cancelled" | undefined;
 }>;
+/** Where a thread update originated. */
+type ThreadUpdateSource = "api" | "task_create" | "dashboard";
+/** Lifecycle status carried by a thread update. */
+type ThreadUpdateStatus = (typeof threadUpdateStatuses)[number];
+/** A logged thread update as returned by the API. */
+interface ThreadUpdate {
+    id: string;
+    threadId: string;
+    message: string;
+    status: ThreadUpdateStatus;
+    source: ThreadUpdateSource;
+    createdAt: number;
+}
 type AssignToInput = z.infer<typeof assignToSchema>;
 type CreateTaskBodyInput = z.input<typeof createTaskBodySchema>;
 type CreateTaskBody = z.output<typeof createTaskBodySchema>;
+type ThreadUpdateBodyInput = z.input<typeof threadUpdateBodySchema>;
+type ThreadUpdateBody = z.output<typeof threadUpdateBodySchema>;
+type ThreadUpdateInput = z.input<typeof threadUpdateInputSchema>;
 type TaskContextInput = z.input<typeof taskContextSchema>;
 type TaskContextOutput = z.output<typeof taskContextSchema>;
 type TaskContext = TaskContextOutput;
@@ -589,6 +659,11 @@ interface TaskResponse {
     };
     message: string;
 }
+interface ThreadUpdateResponse {
+    success: boolean;
+    update: ThreadUpdate;
+    message: string;
+}
 interface Task {
     id: string;
     threadId?: string;
@@ -640,4 +715,4 @@ type DiscriminatedApprovalResult<TActions extends readonly {
     } : never;
 }[TupleElementIndices<TActions>];
 
-export { type ApprovalResult, type AssignToInput, type CreateTaskBody, type CreateTaskBodyInput, type DiscriminatedApprovalResult, type ExtendedJSONSchema7, type Handler, type InferActionData, type InferJsonSchema7, type JSONSchema7, type JSONSchema7TypeName, type Task, type TaskAction, type TaskContext, type TaskContextInput, type TaskContextOutput, type TaskResponse, type TaskResult, type TaskStatus, type TriggerHandler, type TupleElementIndices, type UiSchema, type WebhookHandler, assignToSchema, createTaskBodySchema, taskContextSchema };
+export { type ApprovalResult, type AssignToInput, type CreateTaskBody, type CreateTaskBodyInput, DEFAULT_THREAD_UPDATE_STATUS, type DiscriminatedApprovalResult, type ExtendedJSONSchema7, type Handler, type InferActionData, type InferJsonSchema7, type JSONSchema7, type JSONSchema7TypeName, type Task, type TaskAction, type TaskContext, type TaskContextInput, type TaskContextOutput, type TaskResponse, type TaskResult, type TaskStatus, type ThreadUpdate, type ThreadUpdateBody, type ThreadUpdateBodyInput, type ThreadUpdateInput, type ThreadUpdateResponse, type ThreadUpdateSource, type ThreadUpdateStatus, type TriggerHandler, type TupleElementIndices, type UiSchema, type WebhookHandler, assignToSchema, createTaskBodySchema, taskContextSchema, threadUpdateBodySchema, threadUpdateInputSchema, threadUpdateMessageSchema, threadUpdateStatusSchema, threadUpdateStatuses };

package/dist/schemas/index.mjs

@@ -0,0 +1,23 @@
+import {
+  DEFAULT_THREAD_UPDATE_STATUS,
+  assignToSchema,
+  createTaskBodySchema,
+  taskContextSchema,
+  threadUpdateBodySchema,
+  threadUpdateInputSchema,
+  threadUpdateMessageSchema,
+  threadUpdateStatusSchema,
+  threadUpdateStatuses
+} from "../chunk-VNXWLPRV.mjs";
+export {
+  DEFAULT_THREAD_UPDATE_STATUS,
+  assignToSchema,
+  createTaskBodySchema,
+  taskContextSchema,
+  threadUpdateBodySchema,
+  threadUpdateInputSchema,
+  threadUpdateMessageSchema,
+  threadUpdateStatusSchema,
+  threadUpdateStatuses
+};
+//# sourceMappingURL=index.mjs.map

package/dist/trigger/index.d.ts

@@ -1,5 +1,5 @@
 import * as _trigger_dev_sdk from '@trigger.dev/sdk';
-import { S as SendToHumanActionInput, a as SendToHumanInput } from '../client-Dhk9qxhL.js';
+import { S as SendToHumanActionInput, a as SendToHumanInput } from '../client-BOm2Ce2f.js';
 export { R as RobotRockHandlerWebhookPayload } from '../handler-webhook-BqEi6Bk-.js';
 export { ApprovalResult, DiscriminatedApprovalResult, TaskContextInput, TaskResult } from '../schemas/index.js';
 import 'zod';

package/dist/trigger/{index.js → index.mjs}

@@ -1,13 +1,13 @@
 import {
   isRobotRockHandlerWebhookPayload,
   resolveWaitTiming
-} from "../chunk-D2FBSEZK.js";
+} from "../chunk-3ZYQE5LF.mjs";
 import {
   createClient,
   resolveRobotRockConfig,
   toDiscriminatedApprovalResult
-} from "../chunk-KOXJCIST.js";
-import "../chunk-LXM7VS4Q.js";
+} from "../chunk-E7ZWBFZ6.mjs";
+import "../chunk-VNXWLPRV.mjs";
 
 // src/trigger/index.ts
 import { task, wait } from "@trigger.dev/sdk";
@@ -75,4 +75,4 @@ export {
   approveByHumanTask,
   sendToHumanTask
 };
-//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.mjs.map

package/dist/workflow/index.d.ts

@@ -1,6 +1,6 @@
-import { DiscriminatedApprovalResult } from '../schemas/index.js';
+import { DiscriminatedApprovalResult, ThreadUpdateStatus, ThreadUpdate } from '../schemas/index.js';
 export { ApprovalResult, TaskContextInput, TaskResult } from '../schemas/index.js';
-import { S as SendToHumanActionInput, a as SendToHumanInput } from '../client-Dhk9qxhL.js';
+import { S as SendToHumanActionInput, a as SendToHumanInput } from '../client-BOm2Ce2f.js';
 export { R as RobotRockHandlerWebhookPayload } from '../handler-webhook-BqEi6Bk-.js';
 import 'zod';
 
@@ -31,5 +31,25 @@ declare function sendToHumanInWorkflow<const A extends readonly SendToHumanActio
  * Approve / decline gate for Vercel Workflow (`sendToHumanInWorkflow` with fixed actions).
  */
 declare function approveByHumanInWorkflow(payload: ApproveByHumanWorkflowPayload): Promise<Expand<DiscriminatedApprovalResult<typeof APPROVE_BY_HUMAN_ACTIONS>>>;
+type SendUpdateWorkflowPayload = {
+    /** Thread to log the update against (from a prior task's `threadId`). */
+    threadId: string;
+    /** Short status update (1-2 sentences) shown in the inbox status bar. */
+    message: string;
+    /** Lifecycle status driving the status-bar icon/color. @default "info" */
+    status?: ThreadUpdateStatus;
+    /** Inbox app bucket. Overrides `ROBOTROCK_APP` when set. */
+    app?: string;
+};
+/**
+ * Durable thread update for Vercel Workflow.
+ *
+ * Wraps {@link createClient}'s `sendUpdate` in a `"use step"` so progress
+ * reports are retried and recorded in the run. Fire-and-forget: returns the
+ * created update without suspending the workflow (no human wait involved).
+ *
+ * Call from a function with `"use workflow"` as its first statement.
+ */
+declare function sendUpdateInWorkflow(payload: SendUpdateWorkflowPayload): Promise<ThreadUpdate>;
 
-export { type ApproveByHumanWorkflowPayload, DiscriminatedApprovalResult, type SendToHumanWorkflowPayload, approveByHumanInWorkflow, sendToHumanInWorkflow };
+export { type ApproveByHumanWorkflowPayload, DiscriminatedApprovalResult, type SendToHumanWorkflowPayload, type SendUpdateWorkflowPayload, ThreadUpdate, ThreadUpdateStatus, approveByHumanInWorkflow, sendToHumanInWorkflow, sendUpdateInWorkflow };

package/dist/workflow/{index.js → index.mjs}

@@ -2,16 +2,16 @@ import {
   isRobotRockHandlerWebhookPayload,
   parseValidUntilMs,
   resolveWaitTiming
-} from "../chunk-D2FBSEZK.js";
+} from "../chunk-3ZYQE5LF.mjs";
 import {
   createClient,
   resolveRobotRockConfig,
   toDiscriminatedApprovalResult
-} from "../chunk-KOXJCIST.js";
+} from "../chunk-E7ZWBFZ6.mjs";
 import {
   __callDispose,
   __using
-} from "../chunk-LXM7VS4Q.js";
+} from "../chunk-VNXWLPRV.mjs";
 
 // src/workflow/index.ts
 import { createWebhook, sleep } from "workflow";
@@ -92,8 +92,24 @@ async function approveByHumanInWorkflow(payload) {
     actions: APPROVE_BY_HUMAN_ACTIONS
   });
 }
+async function sendRobotRockUpdate(payload) {
+  "use step";
+  const { app, ...update } = payload;
+  const baseConfig = resolveRobotRockConfig();
+  const client = createClient({
+    apiKey: baseConfig.apiKey,
+    baseUrl: baseConfig.baseUrl,
+    ...app ?? baseConfig.app ? { app: app ?? baseConfig.app } : {},
+    ...baseConfig.version ? { version: baseConfig.version } : {}
+  });
+  return client.sendUpdate(update);
+}
+async function sendUpdateInWorkflow(payload) {
+  return sendRobotRockUpdate(payload);
+}
 export {
   approveByHumanInWorkflow,
-  sendToHumanInWorkflow
+  sendToHumanInWorkflow,
+  sendUpdateInWorkflow
 };
-//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.mjs.map

package/dist/workflow/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/workflow/index.ts"],"sourcesContent":["import { createWebhook, sleep } from \"workflow\";\nimport type {\n  DiscriminatedApprovalResult,\n  ThreadUpdate,\n  ThreadUpdateStatus,\n} from \"../schemas/index.js\";\nimport {\n  createClient,\n  type SendToHumanActionInput,\n  type SendToHumanInput,\n} from \"../client.js\";\nimport { resolveRobotRockConfig } from \"../env.js\";\nimport { toDiscriminatedApprovalResult } from \"../approval-result.js\";\nimport {\n  isRobotRockHandlerWebhookPayload,\n  type RobotRockHandlerWebhookPayload,\n} from \"../handler-webhook.js\";\nimport { parseValidUntilMs, resolveWaitTiming } from \"../wait-timing.js\";\n\nexport type SendToHumanWorkflowPayload<\n  A extends readonly SendToHumanActionInput[] = readonly SendToHumanActionInput[],\n> = SendToHumanInput<A> & {\n  /** Inbox app bucket. Overrides `ROBOTROCK_APP` when set. */\n  app?: string;\n};\n\nexport type ApproveByHumanWorkflowPayload = Omit<SendToHumanWorkflowPayload, \"actions\">;\n\ntype Expand<T> = T extends unknown ? { [K in keyof T]: T[K] } : never;\n\nconst APPROVE_BY_HUMAN_ACTIONS = [\n  { id: \"approve\", title: \"Approve\" },\n  { id: \"decline\", title: \"Decline\" },\n] as const;\n\ntype CreateTaskStepInput = {\n  webhookUrl: string;\n  app?: string;\n  validUntil: Date | string;\n  taskInput: Omit<SendToHumanWorkflowPayload, \"validUntil\" | \"app\">;\n};\n\n/**\n * Creates the RobotRock inbox task with the workflow webhook URL as the handler.\n * Marked as a step so API calls run in full Node.js with retries.\n */\nasync function createRobotRockTaskForWebhook(input: CreateTaskStepInput) {\n  \"use step\";\n\n  const baseConfig = resolveRobotRockConfig();\n  const client = createClient({\n    apiKey: baseConfig.apiKey,\n    baseUrl: baseConfig.baseUrl,\n    ...((input.app ?? baseConfig.app) ? { app: input.app ?? baseConfig.app } : {}),\n    ...(baseConfig.version ? { version: baseConfig.version } : {}),\n    webhook: { url: input.webhookUrl },\n  });\n\n  return client.sendToHuman({\n    ...input.taskInput,\n    validUntil: input.validUntil,\n  });\n}\n\nasync function parseRobotRockWebhookRequest(request: Request) {\n  \"use step\";\n\n  const body: unknown = await request.json();\n  if (!isRobotRockHandlerWebhookPayload(body)) {\n    throw new Error(\n      \"Workflow webhook completed with unexpected payload; expected RobotRock handler body (taskId, action.id, action.data).\"\n    );\n  }\n\n  return body;\n}\n\n/**\n * Durable human-in-the-loop wait for Vercel Workflow.\n *\n * Call from a function with `\"use workflow\"` as its first statement. Creates a\n * {@link createWebhook} URL, registers it as the RobotRock task webhook, and\n * suspends until a human handles an action or `validUntil` passes.\n */\nexport async function sendToHumanInWorkflow<\n  const A extends readonly SendToHumanActionInput[],\n>(\n  payload: SendToHumanWorkflowPayload<A>\n): Promise<Expand<DiscriminatedApprovalResult<A>>> {\n  const { validUntil: validUntilInput, app, ...taskInput } = payload;\n  const { validUntil, timeout } = resolveWaitTiming(validUntilInput);\n  const timeoutMs = parseValidUntilMs(validUntil) - Date.now();\n\n  using webhook = createWebhook();\n\n  const sendResult = await createRobotRockTaskForWebhook({\n    webhookUrl: webhook.url,\n    app,\n    validUntil,\n    taskInput,\n  });\n\n  const outcome = await Promise.race([\n    webhook.then((request) => parseRobotRockWebhookRequest(request)),\n    sleep(timeoutMs).then(() => ({ timedOut: true }) as const),\n  ]);\n\n  if (\"timedOut\" in outcome) {\n    throw new Error(`Human response timed out before validUntil (${timeout})`);\n  }\n\n  const output: RobotRockHandlerWebhookPayload = outcome;\n\n  return toDiscriminatedApprovalResult(payload.actions, {\n    id: output.taskId,\n    createdAt: new Date(),\n    status: \"handled\",\n    context: sendResult.task.context,\n    validUntil: Date.now(),\n    handledAt: new Date(output.handledAt).getTime(),\n    handled: {\n      action: {\n        id: output.action.id,\n        data: output.action.data,\n      },\n      handledBy: output.handledBy,\n    },\n  }) as unknown as Expand<DiscriminatedApprovalResult<A>>;\n}\n\n/**\n * Approve / decline gate for Vercel Workflow (`sendToHumanInWorkflow` with fixed actions).\n */\nexport async function approveByHumanInWorkflow(\n  payload: ApproveByHumanWorkflowPayload\n): Promise<Expand<DiscriminatedApprovalResult<typeof APPROVE_BY_HUMAN_ACTIONS>>> {\n  return sendToHumanInWorkflow({\n    ...payload,\n    actions: APPROVE_BY_HUMAN_ACTIONS,\n  });\n}\n\nexport type SendUpdateWorkflowPayload = {\n  /** Thread to log the update against (from a prior task's `threadId`). */\n  threadId: string;\n  /** Short status update (1-2 sentences) shown in the inbox status bar. */\n  message: string;\n  /** Lifecycle status driving the status-bar icon/color. @default \"info\" */\n  status?: ThreadUpdateStatus;\n  /** Inbox app bucket. Overrides `ROBOTROCK_APP` when set. */\n  app?: string;\n};\n\n/**\n * Posts a thread update via `client.sendUpdate()`. Marked as a step so the API\n * call runs in full Node.js with retries and is recorded in the workflow run.\n */\nasync function sendRobotRockUpdate(payload: SendUpdateWorkflowPayload): Promise<ThreadUpdate> {\n  \"use step\";\n\n  const { app, ...update } = payload;\n  const baseConfig = resolveRobotRockConfig();\n  const client = createClient({\n    apiKey: baseConfig.apiKey,\n    baseUrl: baseConfig.baseUrl,\n    ...((app ?? baseConfig.app) ? { app: app ?? baseConfig.app } : {}),\n    ...(baseConfig.version ? { version: baseConfig.version } : {}),\n  });\n\n  return client.sendUpdate(update);\n}\n\n/**\n * Durable thread update for Vercel Workflow.\n *\n * Wraps {@link createClient}'s `sendUpdate` in a `\"use step\"` so progress\n * reports are retried and recorded in the run. Fire-and-forget: returns the\n * created update without suspending the workflow (no human wait involved).\n *\n * Call from a function with `\"use workflow\"` as its first statement.\n */\nexport async function sendUpdateInWorkflow(\n  payload: SendUpdateWorkflowPayload\n): Promise<ThreadUpdate> {\n  return sendRobotRockUpdate(payload);\n}\n\nexport type { RobotRockHandlerWebhookPayload } from \"../handler-webhook.js\";\nexport type {\n  ApprovalResult,\n  DiscriminatedApprovalResult,\n  TaskContextInput,\n  TaskResult,\n  ThreadUpdate,\n  ThreadUpdateStatus,\n} from \"../schemas/index.js\";\n"],"mappings":";;;;;;;;;;;;;;;;AAAA,SAAS,eAAe,aAAa;AA8BrC,IAAM,2BAA2B;AAAA,EAC/B,EAAE,IAAI,WAAW,OAAO,UAAU;AAAA,EAClC,EAAE,IAAI,WAAW,OAAO,UAAU;AACpC;AAaA,eAAe,8BAA8B,OAA4B;AACvE;AAEA,QAAM,aAAa,uBAAuB;AAC1C,QAAM,SAAS,aAAa;AAAA,IAC1B,QAAQ,WAAW;AAAA,IACnB,SAAS,WAAW;AAAA,IACpB,GAAK,MAAM,OAAO,WAAW,MAAO,EAAE,KAAK,MAAM,OAAO,WAAW,IAAI,IAAI,CAAC;AAAA,IAC5E,GAAI,WAAW,UAAU,EAAE,SAAS,WAAW,QAAQ,IAAI,CAAC;AAAA,IAC5D,SAAS,EAAE,KAAK,MAAM,WAAW;AAAA,EACnC,CAAC;AAED,SAAO,OAAO,YAAY;AAAA,IACxB,GAAG,MAAM;AAAA,IACT,YAAY,MAAM;AAAA,EACpB,CAAC;AACH;AAEA,eAAe,6BAA6B,SAAkB;AAC5D;AAEA,QAAM,OAAgB,MAAM,QAAQ,KAAK;AACzC,MAAI,CAAC,iCAAiC,IAAI,GAAG;AAC3C,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AASA,eAAsB,sBAGpB,SACiD;AAKjD;AAAA;AAJA,UAAM,EAAE,YAAY,iBAAiB,KAAK,GAAG,UAAU,IAAI;AAC3D,UAAM,EAAE,YAAY,QAAQ,IAAI,kBAAkB,eAAe;AACjE,UAAM,YAAY,kBAAkB,UAAU,IAAI,KAAK,IAAI;AAE3D,UAAM,UAAU,8BAAc;AAE9B,UAAM,aAAa,MAAM,8BAA8B;AAAA,MACrD,YAAY,QAAQ;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAED,UAAM,UAAU,MAAM,QAAQ,KAAK;AAAA,MACjC,QAAQ,KAAK,CAAC,YAAY,6BAA6B,OAAO,CAAC;AAAA,MAC/D,MAAM,SAAS,EAAE,KAAK,OAAO,EAAE,UAAU,KAAK,EAAW;AAAA,IAC3D,CAAC;AAED,QAAI,cAAc,SAAS;AACzB,YAAM,IAAI,MAAM,+CAA+C,OAAO,GAAG;AAAA,IAC3E;AAEA,UAAM,SAAyC;AAE/C,WAAO,8BAA8B,QAAQ,SAAS;AAAA,MACpD,IAAI,OAAO;AAAA,MACX,WAAW,oBAAI,KAAK;AAAA,MACpB,QAAQ;AAAA,MACR,SAAS,WAAW,KAAK;AAAA,MACzB,YAAY,KAAK,IAAI;AAAA,MACrB,WAAW,IAAI,KAAK,OAAO,SAAS,EAAE,QAAQ;AAAA,MAC9C,SAAS;AAAA,QACP,QAAQ;AAAA,UACN,IAAI,OAAO,OAAO;AAAA,UAClB,MAAM,OAAO,OAAO;AAAA,QACtB;AAAA,QACA,WAAW,OAAO;AAAA,MACpB;AAAA,IACF,CAAC;AAAA,WAlCD;AAAA;AAAA;AAAA;AAAA;AAmCF;AAKA,eAAsB,yBACpB,SAC+E;AAC/E,SAAO,sBAAsB;AAAA,IAC3B,GAAG;AAAA,IACH,SAAS;AAAA,EACX,CAAC;AACH;AAiBA,eAAe,oBAAoB,SAA2D;AAC5F;AAEA,QAAM,EAAE,KAAK,GAAG,OAAO,IAAI;AAC3B,QAAM,aAAa,uBAAuB;AAC1C,QAAM,SAAS,aAAa;AAAA,IAC1B,QAAQ,WAAW;AAAA,IACnB,SAAS,WAAW;AAAA,IACpB,GAAK,OAAO,WAAW,MAAO,EAAE,KAAK,OAAO,WAAW,IAAI,IAAI,CAAC;AAAA,IAChE,GAAI,WAAW,UAAU,EAAE,SAAS,WAAW,QAAQ,IAAI,CAAC;AAAA,EAC9D,CAAC;AAED,SAAO,OAAO,WAAW,MAAM;AACjC;AAWA,eAAsB,qBACpB,SACuB;AACvB,SAAO,oBAAoB,OAAO;AACpC;","names":[]}