respond#

Terminates the pipeline. Sets the status, headers, and body. No step after respond runs once it fires.

#Declaration

respond {
  condition = steps.find_user.rows_affected == 0
  status    = 404
  headers = {
    "Cache-Control" = "no-store"
    "X-Trace-ID"    = uuid()
  }
  body = {
    error = "User not found"
  }
}

#Attributes

#Serialization

• If Content-Type is absent, hclapi sets application/json and JSON-encodes body.
• If a custom content type is provided and body is a string or byte slice, the raw payload is written.
• Header names and values are sanitized to remove carriage-return and newline characters, preventing response-splitting attacks.