One prompt, one tag, or no code at all.

const rec = await tenure.recommend({ customerId: user.id, reason: "too_expensive",
  conversation: "It's too expensive for us now" });

if (rec.decision === "offer" && rec.offer) {
  await tenure.deliveries.report(rec.deliveryId!, "rendered");
  await tenure.enable({ sessionId: rec.sessionId!, action: "accept" });  // on an explicit yes
} else if (rec.sessionId) {
  await tenure.enable({ sessionId: rec.sessionId, action: "cancel" });   // cancel always exits
}

SDK-style example for teams with the source package. It is not published on npm; use the package-free REST examples in the docs. The decision runs your published Cancellations plan.

// Node 18+, no SDK package required. Pass the ORIGINAL raw body.
import { createHmac, timingSafeEqual } from "node:crypto";

export function verifyTenureWebhook(rawBody, signature, timestamp, secret) {
  if (!secret || typeof signature !== "string" ||
      !/^[a-f0-9]{64}$/i.test(signature) ||
      typeof timestamp !== "string" || !/^\d+$/.test(timestamp)) return null;
  if (Math.abs(Date.now() / 1000 - Number(timestamp)) > 300) return null;
  const expected = createHmac("sha256", secret)
    .update(timestamp + ".").update(rawBody).digest();
  const received = Buffer.from(signature, "hex");
  if (!timingSafeEqual(expected, received)) return null;
  try {
    const event = JSON.parse(rawBody.toString());
    return event && typeof event.event === "string" ? event : null;
  } catch { return null; }
}

// In your handler, pass x-tenure-signature and x-tenure-timestamp
// headers plus your webhook signing secret. Reject a null result.
// Handle each eventId once: retries reuse it. Do not parse or
// re-serialize the body before verification.

Verify the original raw body with your signing secret, then deduplicate by eventId. HMAC-SHA256; retries reuse the event ID.