functions capability actions

Named functions (FaaS): pure transform invoke of published function versions. HTTP token/hmac on POST /service/automate/functions/call only; Pipeline and capability.Invoke do not validate function HTTP secrets.

Part of the workflow capability catalog. Result envelope and usage patterns: ../capabilities.md.

capability:functions.get

Get published function metadata without secrets for the signed-in caller. Read-only.
Example: {"name":"example"}

Inputs (params):

Outputs: InvokeResult JSON (see ../capabilities.md). Read domain fields under data; use text when present.

Usage:

  - id: get_step
    action: capability:functions.get
    params:
      name: "..."  # required
      version: 0

capability:functions.health

Functions subsystem health for the signed-in caller. Read-only.
Example: {}

Inputs (params):

(none)

Outputs: InvokeResult JSON (see ../capabilities.md). Read domain fields under data; use text when present.

Usage:

  - id: health_step
    action: capability:functions.health

capability:functions.invoke

Invoke a published named function version (platform path; does not check function HTTP token/hmac) for the signed-in caller. Creates or updates data.
Example: {"name":"example"} (mutation)

Inputs (params):

Outputs: InvokeResult JSON (see ../capabilities.md). Read domain fields under data; use text when present.

Usage:

  - id: invoke_step
    action: capability:functions.invoke
    params:
      name: "..."  # required
      version: 0  # required
      event: ...