@action-llama/action-llama 0.18.4 → 0.18.6

package/dist/webhooks/providers/discord.js

@@ -0,0 +1,112 @@
+import { truncateEventText as truncate, validateEd25519Signature } from "../validation.js";
+// Discord interaction types
+const INTERACTION_TYPE_PING = 1;
+const INTERACTION_TYPE_APPLICATION_COMMAND = 2;
+const INTERACTION_TYPE_MESSAGE_COMPONENT = 3;
+const INTERACTION_TYPE_AUTOCOMPLETE = 4;
+const INTERACTION_TYPE_MODAL_SUBMIT = 5;
+const INTERACTION_TYPE_NAMES = {
+    [INTERACTION_TYPE_APPLICATION_COMMAND]: "application_command",
+    [INTERACTION_TYPE_MESSAGE_COMPONENT]: "message_component",
+    [INTERACTION_TYPE_AUTOCOMPLETE]: "autocomplete",
+    [INTERACTION_TYPE_MODAL_SUBMIT]: "modal_submit",
+};
+export class DiscordWebhookProvider {
+    source = "discord";
+    getDeliveryId(headers) {
+        return headers["x-interaction-id"] ?? null;
+    }
+    validateRequest(headers, rawBody, secrets, allowUnsigned) {
+        return validateEd25519Signature(rawBody, headers["x-signature-timestamp"], headers["x-signature-ed25519"], secrets, allowUnsigned);
+    }
+    parseEvent(headers, body) {
+        if (!body || typeof body !== "object")
+            return null;
+        const interactionType = body.type;
+        if (!interactionType || interactionType === INTERACTION_TYPE_PING)
+            return null;
+        const event = INTERACTION_TYPE_NAMES[interactionType];
+        if (!event)
+            return null;
+        const data = body.data;
+        const user = body.member?.user || body.user;
+        const guildId = body.guild_id || "";
+        const channelId = body.channel_id || "";
+        const base = {
+            source: "discord",
+            event,
+            repo: guildId,
+            branch: channelId,
+            sender: user?.username || "unknown",
+            timestamp: new Date().toISOString(),
+        };
+        switch (interactionType) {
+            case INTERACTION_TYPE_APPLICATION_COMMAND: {
+                const commandName = data?.name || "unknown";
+                const options = data?.options;
+                let bodyText;
+                if (options?.length) {
+                    bodyText = options.map((o) => `${o.name}: ${o.value}`).join(", ");
+                }
+                return {
+                    ...base,
+                    action: commandName,
+                    title: commandName,
+                    body: truncate(bodyText),
+                    number: undefined,
+                };
+            }
+            case INTERACTION_TYPE_MESSAGE_COMPONENT: {
+                return {
+                    ...base,
+                    action: String(data?.component_type || "unknown"),
+                    title: data?.custom_id || "component",
+                };
+            }
+            case INTERACTION_TYPE_AUTOCOMPLETE: {
+                const commandName = data?.name || "unknown";
+                return {
+                    ...base,
+                    action: commandName,
+                    title: commandName,
+                };
+            }
+            case INTERACTION_TYPE_MODAL_SUBMIT: {
+                return {
+                    ...base,
+                    action: data?.custom_id || "modal",
+                    title: data?.custom_id || "modal",
+                };
+            }
+            default:
+                return {
+                    ...base,
+                    title: event,
+                };
+        }
+    }
+    matchesFilter(context, filter) {
+        const f = filter;
+        if (f.events?.length && !f.events.includes(context.event)) {
+            return false;
+        }
+        if (f.guilds?.length && !f.guilds.includes(context.repo)) {
+            return false;
+        }
+        // channel_id is stored in context.branch
+        if (f.channels?.length && context.branch && !f.channels.includes(context.branch)) {
+            return false;
+        }
+        // commands filter: match against title (command name) for command-type events
+        if (f.commands?.length) {
+            if (context.event === "application_command" || context.event === "autocomplete") {
+                if (!context.title || !f.commands.includes(context.title)) {
+                    return false;
+                }
+            }
+            // For non-command events (components, modals), commands filter does not apply — pass through
+        }
+        return true;
+    }
+}
+//# sourceMappingURL=discord.js.map

package/dist/webhooks/providers/discord.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discord.js","sourceRoot":"","sources":["../../../src/webhooks/providers/discord.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,IAAI,QAAQ,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAE3F,4BAA4B;AAC5B,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAChC,MAAM,oCAAoC,GAAG,CAAC,CAAC;AAC/C,MAAM,kCAAkC,GAAG,CAAC,CAAC;AAC7C,MAAM,6BAA6B,GAAG,CAAC,CAAC;AACxC,MAAM,6BAA6B,GAAG,CAAC,CAAC;AAExC,MAAM,sBAAsB,GAA2B;IACrD,CAAC,oCAAoC,CAAC,EAAE,qBAAqB;IAC7D,CAAC,kCAAkC,CAAC,EAAE,mBAAmB;IACzD,CAAC,6BAA6B,CAAC,EAAE,cAAc;IAC/C,CAAC,6BAA6B,CAAC,EAAE,cAAc;CAChD,CAAC;AAEF,MAAM,OAAO,sBAAsB;IACjC,MAAM,GAAG,SAAS,CAAC;IAEnB,aAAa,CAAC,OAA2C;QACvD,OAAO,OAAO,CAAC,kBAAkB,CAAC,IAAI,IAAI,CAAC;IAC7C,CAAC;IAED,eAAe,CACb,OAA2C,EAC3C,OAAe,EACf,OAAgC,EAChC,aAAuB;QAEvB,OAAO,wBAAwB,CAC7B,OAAO,EACP,OAAO,CAAC,uBAAuB,CAAC,EAChC,OAAO,CAAC,qBAAqB,CAAC,EAC9B,OAAO,EACP,aAAa,CACd,CAAC;IACJ,CAAC;IAED,UAAU,CAAC,OAA2C,EAAE,IAAS;QAC/D,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAEnD,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC;QAClC,IAAI,CAAC,eAAe,IAAI,eAAe,KAAK,qBAAqB;YAAE,OAAO,IAAI,CAAC;QAE/E,MAAM,KAAK,GAAG,sBAAsB,CAAC,eAAe,CAAC,CAAC;QACtD,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QAExB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;QACpC,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;QAExC,MAAM,IAAI,GAA4B;YACpC,MAAM,EAAE,SAAS;YACjB,KAAK;YACL,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,IAAI,EAAE,QAAQ,IAAI,SAAS;YACnC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QAEF,QAAQ,eAAe,EAAE,CAAC;YACxB,KAAK,oCAAoC,CAAC,CAAC,CAAC;gBAC1C,MAAM,WAAW,GAAG,IAAI,EAAE,IAAI,IAAI,SAAS,CAAC;gBAC5C,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,CAAC;gBAC9B,IAAI,QAA4B,CAAC;gBACjC,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;oBACpB,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzE,CAAC;gBACD,OAAO;oBACL,GAAG,IAAI;oBACP,MAAM,EAAE,WAAW;oBACnB,KAAK,EAAE,WAAW;oBAClB,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC;oBACxB,MAAM,EAAE,SAAS;iBACA,CAAC;YACtB,CAAC;YAED,KAAK,kCAAkC,CAAC,CAAC,CAAC;gBACxC,OAAO;oBACL,GAAG,IAAI;oBACP,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,cAAc,IAAI,SAAS,CAAC;oBACjD,KAAK,EAAE,IAAI,EAAE,SAAS,IAAI,WAAW;iBACpB,CAAC;YACtB,CAAC;YAED,KAAK,6BAA6B,CAAC,CAAC,CAAC;gBACnC,MAAM,WAAW,GAAG,IAAI,EAAE,IAAI,IAAI,SAAS,CAAC;gBAC5C,OAAO;oBACL,GAAG,IAAI;oBACP,MAAM,EAAE,WAAW;oBACnB,KAAK,EAAE,WAAW;iBACD,CAAC;YACtB,CAAC;YAED,KAAK,6BAA6B,CAAC,CAAC,CAAC;gBACnC,OAAO;oBACL,GAAG,IAAI;oBACP,MAAM,EAAE,IAAI,EAAE,SAAS,IAAI,OAAO;oBAClC,KAAK,EAAE,IAAI,EAAE,SAAS,IAAI,OAAO;iBAChB,CAAC;YACtB,CAAC;YAED;gBACE,OAAO;oBACL,GAAG,IAAI;oBACP,KAAK,EAAE,KAAK;iBACK,CAAC;QACxB,CAAC;IACH,CAAC;IAED,aAAa,CAAC,OAAuB,EAAE,MAAqB;QAC1D,MAAM,CAAC,GAAG,MAA8B,CAAC;QAEzC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACzD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,yCAAyC;QACzC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACjF,OAAO,KAAK,CAAC;QACf,CAAC;QAED,8EAA8E;QAC9E,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;YACvB,IAAI,OAAO,CAAC,KAAK,KAAK,qBAAqB,IAAI,OAAO,CAAC,KAAK,KAAK,cAAc,EAAE,CAAC;gBAChF,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC1D,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC;YACD,6FAA6F;QAC/F,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/webhooks/providers/index.d.ts

@@ -18,8 +18,20 @@ export declare const mintlifyWebhookExtension: WebhookExtension;
  * Sentry webhook provider extension
  */
 export declare const sentryWebhookExtension: WebhookExtension;
+/**
+ * Slack webhook provider extension
+ */
+export declare const slackWebhookExtension: WebhookExtension;
 /**
  * Test webhook provider extension
  */
 export declare const testWebhookExtension: WebhookExtension;
+/**
+ * Discord webhook provider extension
+ */
+export declare const discordWebhookExtension: WebhookExtension;
+/**
+ * Twitter webhook provider extension
+ */
+export declare const twitterWebhookExtension: WebhookExtension;
 //# sourceMappingURL=index.d.ts.map

package/dist/webhooks/providers/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/webhooks/providers/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAOlE;;GAEG;AACH,eAAO,MAAM,sBAAsB,EAAE,gBAyBpC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,sBAAsB,EAAE,gBAyBpC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,wBAAwB,EAAE,gBAyBtC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,sBAAsB,EAAE,gBAyBpC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,gBAelC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/webhooks/providers/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAUlE;;GAEG;AACH,eAAO,MAAM,sBAAsB,EAAE,gBAyBpC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,sBAAsB,EAAE,gBAyBpC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,wBAAwB,EAAE,gBAyBtC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,sBAAsB,EAAE,gBAyBpC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,qBAAqB,EAAE,gBAyBnC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,gBAelC,CAAC;AACF;;GAEG;AACH,eAAO,MAAM,uBAAuB,EAAE,gBA6BrC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,uBAAuB,EAAE,gBAiDrC,CAAC"}

package/dist/webhooks/providers/index.js

@@ -5,7 +5,10 @@ import { GitHubWebhookProvider } from "./github.js";
 import { LinearWebhookProvider } from "./linear.js";
 import { MintlifyWebhookProvider } from "./mintlify.js";
 import { SentryWebhookProvider } from "./sentry.js";
+import { DiscordWebhookProvider } from "./discord.js";
+import { SlackWebhookProvider } from "./slack.js";
 import { TestWebhookProvider } from "./test.js";
+import { TwitterWebhookProvider } from "./twitter.js";
 /**
  * GitHub webhook provider extension
  */
@@ -122,6 +125,35 @@ export const sentryWebhookExtension = {
         // No cleanup required
     }
 };
+/**
+ * Slack webhook provider extension
+ */
+export const slackWebhookExtension = {
+    metadata: {
+        name: "slack",
+        version: "1.0.0",
+        description: "Slack Events API webhook provider",
+        type: "webhook",
+        requiredCredentials: [
+            { type: "slack_signing_secret", description: "Slack signing secret for request verification", optional: true }
+        ],
+        providesCredentialTypes: [
+            {
+                type: "slack_signing_secret",
+                fields: ["secret"],
+                description: "Slack signing secret",
+                envMapping: { secret: "SLACK_SIGNING_SECRET" }
+            }
+        ]
+    },
+    provider: new SlackWebhookProvider(),
+    async init() {
+        // No special initialization required
+    },
+    async shutdown() {
+        // No cleanup required
+    }
+};
 /**
  * Test webhook provider extension
  */
@@ -141,4 +173,90 @@ export const testWebhookExtension = {
         // No cleanup required
     }
 };
+/**
+ * Discord webhook provider extension
+ */
+export const discordWebhookExtension = {
+    metadata: {
+        name: "discord",
+        version: "1.0.0",
+        description: "Discord webhook provider (Interactions Endpoint)",
+        type: "webhook",
+        requiredCredentials: [
+            { type: "discord_bot", description: "Discord bot credentials for Ed25519 signature validation", optional: true }
+        ],
+        providesCredentialTypes: [
+            {
+                type: "discord_bot",
+                fields: ["application_id", "public_key", "bot_token"],
+                description: "Discord bot credentials",
+                envMapping: {
+                    application_id: "DISCORD_APPLICATION_ID",
+                    public_key: "DISCORD_PUBLIC_KEY",
+                    bot_token: "DISCORD_BOT_TOKEN",
+                }
+            }
+        ]
+    },
+    provider: new DiscordWebhookProvider(),
+    async init() {
+        // No special initialization required
+    },
+    async shutdown() {
+        // No cleanup required
+    }
+};
+/**
+ * Twitter webhook provider extension
+ */
+export const twitterWebhookExtension = {
+    metadata: {
+        name: "twitter",
+        version: "1.0.0",
+        description: "X (Twitter) webhook provider with CRC support",
+        type: "webhook",
+        requiredCredentials: [
+            { type: "x_twitter_api", description: "X API credentials (consumer secret used for CRC handshake and HMAC validation)", optional: true }
+        ],
+        providesCredentialTypes: [
+            {
+                type: "x_twitter_api",
+                fields: ["consumer_key", "consumer_secret", "bearer_token"],
+                description: "X (Twitter) app-level API credentials",
+                envMapping: {
+                    consumer_key: "X_CONSUMER_KEY",
+                    consumer_secret: "X_CONSUMER_SECRET",
+                    bearer_token: "X_BEARER_TOKEN",
+                }
+            },
+            {
+                type: "x_twitter_user_oauth1",
+                fields: ["access_token", "access_token_secret"],
+                description: "X (Twitter) OAuth 1.0a user-context access tokens",
+                envMapping: {
+                    access_token: "X_ACCESS_TOKEN",
+                    access_token_secret: "X_ACCESS_TOKEN_SECRET",
+                }
+            },
+            {
+                type: "x_twitter_user_oauth2",
+                fields: ["client_id", "client_secret", "access_token", "refresh_token"],
+                description: "X (Twitter) OAuth 2.0 user-context credentials (PKCE flow, used for Account Activity subscriptions)",
+                envMapping: {
+                    client_id: "X_OAUTH2_CLIENT_ID",
+                    client_secret: "X_OAUTH2_CLIENT_SECRET",
+                    access_token: "X_OAUTH2_ACCESS_TOKEN",
+                    refresh_token: "X_OAUTH2_REFRESH_TOKEN",
+                }
+            }
+        ]
+    },
+    provider: new TwitterWebhookProvider(),
+    async init() {
+        // No special initialization required
+    },
+    async shutdown() {
+        // No cleanup required
+    }
+};
 //# sourceMappingURL=index.js.map

package/dist/webhooks/providers/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/webhooks/providers/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAEhD;;GAEG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAqB;IACtD,QAAQ,EAAE;QACR,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,yBAAyB;QACtC,IAAI,EAAE,SAAS;QACf,mBAAmB,EAAE;YACnB,EAAE,IAAI,EAAE,uBAAuB,EAAE,WAAW,EAAE,2CAA2C,EAAE,QAAQ,EAAE,IAAI,EAAE;SAC5G;QACD,uBAAuB,EAAE;YACvB;gBACE,IAAI,EAAE,uBAAuB;gBAC7B,MAAM,EAAE,CAAC,QAAQ,CAAC;gBAClB,WAAW,EAAE,uBAAuB;gBACpC,UAAU,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE;aAChD;SACF;KACF;IACD,QAAQ,EAAE,IAAI,qBAAqB,EAAE;IACrC,KAAK,CAAC,IAAI;QACR,qCAAqC;IACvC,CAAC;IACD,KAAK,CAAC,QAAQ;QACZ,sBAAsB;IACxB,CAAC;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAqB;IACtD,QAAQ,EAAE;QACR,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,yBAAyB;QACtC,IAAI,EAAE,SAAS;QACf,mBAAmB,EAAE;YACnB,EAAE,IAAI,EAAE,uBAAuB,EAAE,WAAW,EAAE,2CAA2C,EAAE,QAAQ,EAAE,IAAI,EAAE;SAC5G;QACD,uBAAuB,EAAE;YACvB;gBACE,IAAI,EAAE,uBAAuB;gBAC7B,MAAM,EAAE,CAAC,QAAQ,CAAC;gBAClB,WAAW,EAAE,uBAAuB;gBACpC,UAAU,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE;aAChD;SACF;KACF;IACD,QAAQ,EAAE,IAAI,qBAAqB,EAAE;IACrC,KAAK,CAAC,IAAI;QACR,qCAAqC;IACvC,CAAC;IACD,KAAK,CAAC,QAAQ;QACZ,sBAAsB;IACxB,CAAC;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAqB;IACxD,QAAQ,EAAE;QACR,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,2BAA2B;QACxC,IAAI,EAAE,SAAS;QACf,mBAAmB,EAAE;YACnB,EAAE,IAAI,EAAE,yBAAyB,EAAE,WAAW,EAAE,6CAA6C,EAAE,QAAQ,EAAE,IAAI,EAAE;SAChH;QACD,uBAAuB,EAAE;YACvB;gBACE,IAAI,EAAE,yBAAyB;gBAC/B,MAAM,EAAE,CAAC,QAAQ,CAAC;gBAClB,WAAW,EAAE,yBAAyB;gBACtC,UAAU,EAAE,EAAE,MAAM,EAAE,yBAAyB,EAAE;aAClD;SACF;KACF;IACD,QAAQ,EAAE,IAAI,uBAAuB,EAAE;IACvC,KAAK,CAAC,IAAI;QACR,qCAAqC;IACvC,CAAC;IACD,KAAK,CAAC,QAAQ;QACZ,sBAAsB;IACxB,CAAC;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAqB;IACtD,QAAQ,EAAE;QACR,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,yBAAyB;QACtC,IAAI,EAAE,SAAS;QACf,mBAAmB,EAAE;YACnB,EAAE,IAAI,EAAE,sBAAsB,EAAE,WAAW,EAAE,0CAA0C,EAAE,QAAQ,EAAE,IAAI,EAAE;SAC1G;QACD,uBAAuB,EAAE;YACvB;gBACE,IAAI,EAAE,sBAAsB;gBAC5B,MAAM,EAAE,CAAC,QAAQ,CAAC;gBAClB,WAAW,EAAE,sBAAsB;gBACnC,UAAU,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE;aAC/C;SACF;KACF;IACD,QAAQ,EAAE,IAAI,qBAAqB,EAAE;IACrC,KAAK,CAAC,IAAI;QACR,qCAAqC;IACvC,CAAC;IACD,KAAK,CAAC,QAAQ;QACZ,sBAAsB;IACxB,CAAC;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAqB;IACpD,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,uCAAuC;QACpD,IAAI,EAAE,SAAS;QACf,mBAAmB,EAAE,EAAE,CAAC,4CAA4C;KACrE;IACD,QAAQ,EAAE,IAAI,mBAAmB,EAAE;IACnC,KAAK,CAAC,IAAI;QACR,qCAAqC;IACvC,CAAC;IACD,KAAK,CAAC,QAAQ;QACZ,sBAAsB;IACxB,CAAC;CACF,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/webhooks/providers/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAEtD;;GAEG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAqB;IACtD,QAAQ,EAAE;QACR,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,yBAAyB;QACtC,IAAI,EAAE,SAAS;QACf,mBAAmB,EAAE;YACnB,EAAE,IAAI,EAAE,uBAAuB,EAAE,WAAW,EAAE,2CAA2C,EAAE,QAAQ,EAAE,IAAI,EAAE;SAC5G;QACD,uBAAuB,EAAE;YACvB;gBACE,IAAI,EAAE,uBAAuB;gBAC7B,MAAM,EAAE,CAAC,QAAQ,CAAC;gBAClB,WAAW,EAAE,uBAAuB;gBACpC,UAAU,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE;aAChD;SACF;KACF;IACD,QAAQ,EAAE,IAAI,qBAAqB,EAAE;IACrC,KAAK,CAAC,IAAI;QACR,qCAAqC;IACvC,CAAC;IACD,KAAK,CAAC,QAAQ;QACZ,sBAAsB;IACxB,CAAC;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAqB;IACtD,QAAQ,EAAE;QACR,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,yBAAyB;QACtC,IAAI,EAAE,SAAS;QACf,mBAAmB,EAAE;YACnB,EAAE,IAAI,EAAE,uBAAuB,EAAE,WAAW,EAAE,2CAA2C,EAAE,QAAQ,EAAE,IAAI,EAAE;SAC5G;QACD,uBAAuB,EAAE;YACvB;gBACE,IAAI,EAAE,uBAAuB;gBAC7B,MAAM,EAAE,CAAC,QAAQ,CAAC;gBAClB,WAAW,EAAE,uBAAuB;gBACpC,UAAU,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE;aAChD;SACF;KACF;IACD,QAAQ,EAAE,IAAI,qBAAqB,EAAE;IACrC,KAAK,CAAC,IAAI;QACR,qCAAqC;IACvC,CAAC;IACD,KAAK,CAAC,QAAQ;QACZ,sBAAsB;IACxB,CAAC;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAqB;IACxD,QAAQ,EAAE;QACR,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,2BAA2B;QACxC,IAAI,EAAE,SAAS;QACf,mBAAmB,EAAE;YACnB,EAAE,IAAI,EAAE,yBAAyB,EAAE,WAAW,EAAE,6CAA6C,EAAE,QAAQ,EAAE,IAAI,EAAE;SAChH;QACD,uBAAuB,EAAE;YACvB;gBACE,IAAI,EAAE,yBAAyB;gBAC/B,MAAM,EAAE,CAAC,QAAQ,CAAC;gBAClB,WAAW,EAAE,yBAAyB;gBACtC,UAAU,EAAE,EAAE,MAAM,EAAE,yBAAyB,EAAE;aAClD;SACF;KACF;IACD,QAAQ,EAAE,IAAI,uBAAuB,EAAE;IACvC,KAAK,CAAC,IAAI;QACR,qCAAqC;IACvC,CAAC;IACD,KAAK,CAAC,QAAQ;QACZ,sBAAsB;IACxB,CAAC;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAqB;IACtD,QAAQ,EAAE;QACR,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,yBAAyB;QACtC,IAAI,EAAE,SAAS;QACf,mBAAmB,EAAE;YACnB,EAAE,IAAI,EAAE,sBAAsB,EAAE,WAAW,EAAE,0CAA0C,EAAE,QAAQ,EAAE,IAAI,EAAE;SAC1G;QACD,uBAAuB,EAAE;YACvB;gBACE,IAAI,EAAE,sBAAsB;gBAC5B,MAAM,EAAE,CAAC,QAAQ,CAAC;gBAClB,WAAW,EAAE,sBAAsB;gBACnC,UAAU,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE;aAC/C;SACF;KACF;IACD,QAAQ,EAAE,IAAI,qBAAqB,EAAE;IACrC,KAAK,CAAC,IAAI;QACR,qCAAqC;IACvC,CAAC;IACD,KAAK,CAAC,QAAQ;QACZ,sBAAsB;IACxB,CAAC;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAqB;IACrD,QAAQ,EAAE;QACR,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,mCAAmC;QAChD,IAAI,EAAE,SAAS;QACf,mBAAmB,EAAE;YACnB,EAAE,IAAI,EAAE,sBAAsB,EAAE,WAAW,EAAE,+CAA+C,EAAE,QAAQ,EAAE,IAAI,EAAE;SAC/G;QACD,uBAAuB,EAAE;YACvB;gBACE,IAAI,EAAE,sBAAsB;gBAC5B,MAAM,EAAE,CAAC,QAAQ,CAAC;gBAClB,WAAW,EAAE,sBAAsB;gBACnC,UAAU,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE;aAC/C;SACF;KACF;IACD,QAAQ,EAAE,IAAI,oBAAoB,EAAE;IACpC,KAAK,CAAC,IAAI;QACR,qCAAqC;IACvC,CAAC;IACD,KAAK,CAAC,QAAQ;QACZ,sBAAsB;IACxB,CAAC;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAqB;IACpD,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,uCAAuC;QACpD,IAAI,EAAE,SAAS;QACf,mBAAmB,EAAE,EAAE,CAAC,4CAA4C;KACrE;IACD,QAAQ,EAAE,IAAI,mBAAmB,EAAE;IACnC,KAAK,CAAC,IAAI;QACR,qCAAqC;IACvC,CAAC;IACD,KAAK,CAAC,QAAQ;QACZ,sBAAsB;IACxB,CAAC;CACF,CAAC;AACF;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAqB;IACvD,QAAQ,EAAE;QACR,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,kDAAkD;QAC/D,IAAI,EAAE,SAAS;QACf,mBAAmB,EAAE;YACnB,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,0DAA0D,EAAE,QAAQ,EAAE,IAAI,EAAE;SACjH;QACD,uBAAuB,EAAE;YACvB;gBACE,IAAI,EAAE,aAAa;gBACnB,MAAM,EAAE,CAAC,gBAAgB,EAAE,YAAY,EAAE,WAAW,CAAC;gBACrD,WAAW,EAAE,yBAAyB;gBACtC,UAAU,EAAE;oBACV,cAAc,EAAE,wBAAwB;oBACxC,UAAU,EAAE,oBAAoB;oBAChC,SAAS,EAAE,mBAAmB;iBAC/B;aACF;SACF;KACF;IACD,QAAQ,EAAE,IAAI,sBAAsB,EAAE;IACtC,KAAK,CAAC,IAAI;QACR,qCAAqC;IACvC,CAAC;IACD,KAAK,CAAC,QAAQ;QACZ,sBAAsB;IACxB,CAAC;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAqB;IACvD,QAAQ,EAAE;QACR,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,+CAA+C;QAC5D,IAAI,EAAE,SAAS;QACf,mBAAmB,EAAE;YACnB,EAAE,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,gFAAgF,EAAE,QAAQ,EAAE,IAAI,EAAE;SACzI;QACD,uBAAuB,EAAE;YACvB;gBACE,IAAI,EAAE,eAAe;gBACrB,MAAM,EAAE,CAAC,cAAc,EAAE,iBAAiB,EAAE,cAAc,CAAC;gBAC3D,WAAW,EAAE,uCAAuC;gBACpD,UAAU,EAAE;oBACV,YAAY,EAAE,gBAAgB;oBAC9B,eAAe,EAAE,mBAAmB;oBACpC,YAAY,EAAE,gBAAgB;iBAC/B;aACF;YACD;gBACE,IAAI,EAAE,uBAAuB;gBAC7B,MAAM,EAAE,CAAC,cAAc,EAAE,qBAAqB,CAAC;gBAC/C,WAAW,EAAE,mDAAmD;gBAChE,UAAU,EAAE;oBACV,YAAY,EAAE,gBAAgB;oBAC9B,mBAAmB,EAAE,uBAAuB;iBAC7C;aACF;YACD;gBACE,IAAI,EAAE,uBAAuB;gBAC7B,MAAM,EAAE,CAAC,WAAW,EAAE,eAAe,EAAE,cAAc,EAAE,eAAe,CAAC;gBACvE,WAAW,EAAE,qGAAqG;gBAClH,UAAU,EAAE;oBACV,SAAS,EAAE,oBAAoB;oBAC/B,aAAa,EAAE,wBAAwB;oBACvC,YAAY,EAAE,uBAAuB;oBACrC,aAAa,EAAE,wBAAwB;iBACxC;aACF;SACF;KACF;IACD,QAAQ,EAAE,IAAI,sBAAsB,EAAE;IACtC,KAAK,CAAC,IAAI;QACR,qCAAqC;IACvC,CAAC;IACD,KAAK,CAAC,QAAQ;QACZ,sBAAsB;IACxB,CAAC;CACF,CAAC"}

package/dist/webhooks/providers/slack.d.ts

@@ -0,0 +1,9 @@
+import type { WebhookProvider, WebhookContext, WebhookFilter } from "../types.js";
+export declare class SlackWebhookProvider implements WebhookProvider {
+    source: string;
+    validateRequest(headers: Record<string, string | undefined>, rawBody: string, secrets?: Record<string, string>, allowUnsigned?: boolean): string | null;
+    parseEvent(headers: Record<string, string | undefined>, body: any): WebhookContext | null;
+    matchesFilter(context: WebhookContext, filter: WebhookFilter): boolean;
+    handleChallenge(headers: Record<string, string | undefined>, rawBody: string, secrets?: Record<string, string>, allowUnsigned?: boolean): object | null;
+}
+//# sourceMappingURL=slack.d.ts.map

package/dist/webhooks/providers/slack.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack.d.ts","sourceRoot":"","sources":["../../../src/webhooks/providers/slack.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,aAAa,EAAsB,MAAM,aAAa,CAAC;AAKtG,qBAAa,oBAAqB,YAAW,eAAe;IAC1D,MAAM,SAAW;IAEjB,eAAe,CACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EAC3C,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAChC,aAAa,CAAC,EAAE,OAAO,GACtB,MAAM,GAAG,IAAI;IAgChB,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EAAE,IAAI,EAAE,GAAG,GAAG,cAAc,GAAG,IAAI;IAyDzF,aAAa,CAAC,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO;IAwBtE,eAAe,CACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EAC3C,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAChC,aAAa,CAAC,EAAE,OAAO,GACtB,MAAM,GAAG,IAAI;CAoBjB"}

package/dist/webhooks/providers/slack.js

@@ -0,0 +1,120 @@
+import { createHmac, timingSafeEqual } from "crypto";
+import { truncateEventText as truncate } from "../validation.js";
+const MAX_TIMESTAMP_AGE_SECONDS = 5 * 60; // 5 minutes
+export class SlackWebhookProvider {
+    source = "slack";
+    validateRequest(headers, rawBody, secrets, allowUnsigned) {
+        // If no secrets configured, check allowUnsigned policy
+        if (!secrets || Object.keys(secrets).length === 0) {
+            return allowUnsigned ? "_unsigned" : null;
+        }
+        const timestamp = headers["x-slack-request-timestamp"];
+        const signature = headers["x-slack-signature"];
+        if (!timestamp || !signature)
+            return null;
+        // Replay protection: reject if timestamp is older than 5 minutes
+        const now = Math.floor(Date.now() / 1000);
+        if (Math.abs(now - parseInt(timestamp, 10)) > MAX_TIMESTAMP_AGE_SECONDS) {
+            return null;
+        }
+        const signingBase = `v0:${timestamp}:${rawBody}`;
+        for (const [instanceName, secret] of Object.entries(secrets)) {
+            const expected = "v0=" + createHmac("sha256", secret).update(signingBase).digest("hex");
+            if (signature.length === expected.length &&
+                timingSafeEqual(Buffer.from(signature), Buffer.from(expected))) {
+                return instanceName;
+            }
+        }
+        return null;
+    }
+    parseEvent(headers, body) {
+        // URL verification challenges are handled by handleChallenge, not dispatched
+        if (body.type === "url_verification") {
+            return null;
+        }
+        if (body.type !== "event_callback") {
+            return null;
+        }
+        const event = body.event;
+        if (!event)
+            return null;
+        const eventType = event.type;
+        const teamId = body.team_id;
+        const sender = event.user || event.bot_id || "unknown";
+        const base = {
+            source: "slack",
+            event: eventType,
+            repo: teamId,
+            sender,
+            timestamp: new Date().toISOString(),
+        };
+        switch (eventType) {
+            case "message":
+                return {
+                    ...base,
+                    body: truncate(event.text),
+                    comment: event.channel ? `channel:${event.channel}` : undefined,
+                };
+            case "app_mention":
+                return {
+                    ...base,
+                    body: truncate(event.text),
+                    comment: event.channel ? `channel:${event.channel}` : undefined,
+                };
+            case "reaction_added":
+            case "reaction_removed":
+                return {
+                    ...base,
+                    title: event.reaction,
+                    comment: event.item ? `${event.item.type}:${event.item.channel || ""}` : undefined,
+                };
+            default:
+                return {
+                    ...base,
+                    title: eventType,
+                    body: truncate(event.text),
+                };
+        }
+    }
+    matchesFilter(context, filter) {
+        const f = filter;
+        if (f.events?.length && !f.events.includes(context.event)) {
+            return false;
+        }
+        if (f.team_ids?.length && !f.team_ids.includes(context.repo)) {
+            return false;
+        }
+        // Channel matching: stored as comment field with "channel:<id>" format
+        if (f.channels?.length) {
+            const channelComment = context.comment;
+            if (!channelComment)
+                return false;
+            const match = channelComment.match(/^channel:(.+)$/);
+            if (!match)
+                return false;
+            const channelId = match[1];
+            if (!f.channels.includes(channelId))
+                return false;
+        }
+        return true;
+    }
+    handleChallenge(headers, rawBody, secrets, allowUnsigned) {
+        let body;
+        try {
+            body = JSON.parse(rawBody);
+        }
+        catch {
+            return null;
+        }
+        if (body.type !== "url_verification" || !body.challenge) {
+            return null;
+        }
+        // Validate the request signature before responding
+        const validationResult = this.validateRequest(headers, rawBody, secrets, allowUnsigned);
+        if (!validationResult) {
+            return null;
+        }
+        return { challenge: body.challenge };
+    }
+}
+//# sourceMappingURL=slack.js.map

package/dist/webhooks/providers/slack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack.js","sourceRoot":"","sources":["../../../src/webhooks/providers/slack.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAErD,OAAO,EAAE,iBAAiB,IAAI,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAEjE,MAAM,yBAAyB,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,YAAY;AAEtD,MAAM,OAAO,oBAAoB;IAC/B,MAAM,GAAG,OAAO,CAAC;IAEjB,eAAe,CACb,OAA2C,EAC3C,OAAe,EACf,OAAgC,EAChC,aAAuB;QAEvB,uDAAuD;QACvD,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,OAAO,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5C,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;QACvD,MAAM,SAAS,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;QAE/C,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QAE1C,iEAAiE;QACjE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,GAAG,yBAAyB,EAAE,CAAC;YACxE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,SAAS,IAAI,OAAO,EAAE,CAAC;QAEjD,KAAK,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7D,MAAM,QAAQ,GAAG,KAAK,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACxF,IACE,SAAS,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;gBACpC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAC9D,CAAC;gBACD,OAAO,YAAY,CAAC;YACtB,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,UAAU,CAAC,OAA2C,EAAE,IAAS;QAC/D,6EAA6E;QAC7E,IAAI,IAAI,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QAExB,MAAM,SAAS,GAAW,KAAK,CAAC,IAAI,CAAC;QACrC,MAAM,MAAM,GAAW,IAAI,CAAC,OAAO,CAAC;QACpC,MAAM,MAAM,GAAW,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,IAAI,SAAS,CAAC;QAE/D,MAAM,IAAI,GAA4B;YACpC,MAAM,EAAE,OAAO;YACf,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE,MAAM;YACZ,MAAM;YACN,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QAEF,QAAQ,SAAS,EAAE,CAAC;YAClB,KAAK,SAAS;gBACZ,OAAO;oBACL,GAAG,IAAI;oBACP,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;oBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS;iBAC9C,CAAC;YAEtB,KAAK,aAAa;gBAChB,OAAO;oBACL,GAAG,IAAI;oBACP,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;oBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS;iBAC9C,CAAC;YAEtB,KAAK,gBAAgB,CAAC;YACtB,KAAK,kBAAkB;gBACrB,OAAO;oBACL,GAAG,IAAI;oBACP,KAAK,EAAE,KAAK,CAAC,QAAQ;oBACrB,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS;iBACjE,CAAC;YAEtB;gBACE,OAAO;oBACL,GAAG,IAAI;oBACP,KAAK,EAAE,SAAS;oBAChB,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;iBACT,CAAC;QACxB,CAAC;IACH,CAAC;IAED,aAAa,CAAC,OAAuB,EAAE,MAAqB;QAC1D,MAAM,CAAC,GAAG,MAA4B,CAAC;QAEvC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,uEAAuE;QACvE,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;YACvB,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC;YACvC,IAAI,CAAC,cAAc;gBAAE,OAAO,KAAK,CAAC;YAClC,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;YACrD,IAAI,CAAC,KAAK;gBAAE,OAAO,KAAK,CAAC;YACzB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAC3B,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAAE,OAAO,KAAK,CAAC;QACpD,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,eAAe,CACb,OAA2C,EAC3C,OAAe,EACf,OAAgC,EAChC,aAAuB;QAEvB,IAAI,IAAS,CAAC;QACd,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,KAAK,kBAAkB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACxD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,mDAAmD;QACnD,MAAM,gBAAgB,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;QACxF,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;IACvC,CAAC;CACF"}

package/dist/webhooks/providers/twitter-subscribe.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Twitter Account Activity API v2 auto-subscribe.
+ *
+ * On gateway startup, checks if a webhook URL is registered and the bot user
+ * is subscribed. Warns if no webhook URL exists; subscribes if needed.
+ *
+ * Uses OAuth 2.0 user tokens for subscription management (per API reference).
+ * Uses app-only Bearer token for webhook listing.
+ */
+import type { Logger } from "../../shared/logger.js";
+export interface TwitterSubscribeOpts {
+    bearerToken: string;
+    oauth2AccessToken: string;
+    oauth2RefreshToken: string;
+    oauth2ClientId: string;
+    oauth2ClientSecret: string;
+    /** Credential instance name for persisting refreshed tokens */
+    credentialInstance: string;
+    logger: Logger;
+}
+/**
+ * Check webhook registration and auto-subscribe the bot user.
+ * Never throws — all errors are logged as warnings.
+ */
+export declare function twitterAutoSubscribe(opts: TwitterSubscribeOpts): Promise<void>;
+//# sourceMappingURL=twitter-subscribe.d.ts.map

package/dist/webhooks/providers/twitter-subscribe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"twitter-subscribe.d.ts","sourceRoot":"","sources":["../../../src/webhooks/providers/twitter-subscribe.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAGrD,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,+DAA+D;IAC/D,kBAAkB,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;CAChB;AA+FD;;;GAGG;AACH,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqEpF"}

package/dist/webhooks/providers/twitter-subscribe.js

@@ -0,0 +1,158 @@
+/**
+ * Twitter Account Activity API v2 auto-subscribe.
+ *
+ * On gateway startup, checks if a webhook URL is registered and the bot user
+ * is subscribed. Warns if no webhook URL exists; subscribes if needed.
+ *
+ * Uses OAuth 2.0 user tokens for subscription management (per API reference).
+ * Uses app-only Bearer token for webhook listing.
+ */
+import { writeCredentialField } from "../../shared/credentials.js";
+const TOKEN_URL = "https://api.x.com/2/oauth2/token";
+/**
+ * Refresh the OAuth 2.0 access token using the refresh token.
+ * Returns the new access token and refresh token, and persists them to disk.
+ */
+async function refreshOAuth2Token(opts) {
+    const { oauth2ClientId, oauth2ClientSecret, oauth2RefreshToken, credentialInstance, logger } = opts;
+    if (!oauth2RefreshToken) {
+        logger.warn("no OAuth 2.0 refresh token available — cannot refresh access token");
+        return null;
+    }
+    const basicAuth = Buffer.from(`${oauth2ClientId}:${oauth2ClientSecret}`).toString("base64");
+    const res = await fetch(TOKEN_URL, {
+        method: "POST",
+        headers: {
+            "Content-Type": "application/x-www-form-urlencoded",
+            Authorization: `Basic ${basicAuth}`,
+        },
+        body: new URLSearchParams({
+            grant_type: "refresh_token",
+            refresh_token: oauth2RefreshToken,
+            client_id: oauth2ClientId,
+        }),
+    });
+    if (!res.ok) {
+        const body = await res.text();
+        logger.warn({ status: res.status, body }, "failed to refresh OAuth 2.0 token");
+        return null;
+    }
+    const data = (await res.json());
+    if (!data.access_token) {
+        logger.warn("refresh response missing access_token");
+        return null;
+    }
+    // Persist new tokens to disk
+    try {
+        await writeCredentialField("x_twitter_user_oauth2", credentialInstance, "access_token", data.access_token);
+        if (data.refresh_token) {
+            await writeCredentialField("x_twitter_user_oauth2", credentialInstance, "refresh_token", data.refresh_token);
+        }
+        logger.info("refreshed and persisted OAuth 2.0 tokens");
+    }
+    catch (err) {
+        logger.warn({ err }, "refreshed OAuth 2.0 token but failed to persist — token will expire");
+    }
+    return {
+        accessToken: data.access_token,
+        refreshToken: data.refresh_token ?? oauth2RefreshToken,
+    };
+}
+/**
+ * Make an authenticated request with OAuth 2.0 user token, retrying once with
+ * a refreshed token on 401.
+ */
+async function oauth2Fetch(url, method, opts) {
+    const res = await fetch(url, {
+        method,
+        headers: {
+            Authorization: `Bearer ${opts.oauth2AccessToken}`,
+            "Content-Type": "application/json",
+        },
+    });
+    if (res.status === 401) {
+        opts.logger.info("OAuth 2.0 access token expired, attempting refresh...");
+        const refreshed = await refreshOAuth2Token(opts);
+        if (refreshed) {
+            opts.oauth2AccessToken = refreshed.accessToken;
+            opts.oauth2RefreshToken = refreshed.refreshToken;
+            return fetch(url, {
+                method,
+                headers: {
+                    Authorization: `Bearer ${refreshed.accessToken}`,
+                    "Content-Type": "application/json",
+                },
+            });
+        }
+    }
+    return res;
+}
+/**
+ * Check webhook registration and auto-subscribe the bot user.
+ * Never throws — all errors are logged as warnings.
+ */
+export async function twitterAutoSubscribe(opts) {
+    const { logger, bearerToken } = opts;
+    // Step 1: List webhooks to find webhook_id (uses app-only Bearer Token)
+    let webhookId;
+    try {
+        const listUrl = "https://api.x.com/2/webhooks";
+        const res = await fetch(listUrl, {
+            headers: { Authorization: `Bearer ${bearerToken}` },
+        });
+        if (!res.ok) {
+            const body = await res.text();
+            logger.warn({ status: res.status, body }, "failed to check Twitter webhook registration");
+            return;
+        }
+        const data = (await res.json());
+        const webhooks = data.data ?? [];
+        if (webhooks.length === 0) {
+            logger.warn("no webhook URL registered with Twitter — register one in the X Developer Portal or via the API");
+            return;
+        }
+        const webhook = webhooks[0];
+        webhookId = webhook.id;
+        logger.info({ webhookId, url: webhook.url, valid: webhook.valid }, "Twitter webhook URL registered");
+        if (!webhook.valid) {
+            logger.warn({ url: webhook.url }, "Twitter webhook URL is marked as invalid — CRC challenge may be failing");
+        }
+    }
+    catch (err) {
+        logger.warn({ err }, "failed to check Twitter webhook registration");
+        return;
+    }
+    // Step 2: Check if bot user is already subscribed (uses OAuth 2.0 user token)
+    try {
+        const subUrl = `https://api.x.com/2/account_activity/webhooks/${webhookId}/subscriptions/all`;
+        const res = await oauth2Fetch(subUrl, "GET", opts);
+        if (res.ok) {
+            const body = (await res.json());
+            if (body.data?.subscribed) {
+                logger.info("Twitter bot user already subscribed to Account Activity API");
+                return;
+            }
+        }
+        // Not subscribed or error — proceed to subscribe
+    }
+    catch (err) {
+        logger.warn({ err }, "failed to check Twitter subscription status");
+        // Proceed to attempt subscribe anyway
+    }
+    // Step 3: Subscribe bot user (uses OAuth 2.0 user token)
+    try {
+        const subUrl = `https://api.x.com/2/account_activity/webhooks/${webhookId}/subscriptions/all`;
+        const res = await oauth2Fetch(subUrl, "POST", opts);
+        if (res.ok) {
+            logger.info("Twitter bot user subscribed to Account Activity API");
+        }
+        else {
+            const body = await res.text();
+            logger.warn({ status: res.status, body }, "failed to subscribe Twitter bot user to Account Activity API");
+        }
+    }
+    catch (err) {
+        logger.warn({ err }, "failed to subscribe Twitter bot user");
+    }
+}
+//# sourceMappingURL=twitter-subscribe.js.map

package/dist/webhooks/providers/twitter-subscribe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"twitter-subscribe.js","sourceRoot":"","sources":["../../../src/webhooks/providers/twitter-subscribe.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAanE,MAAM,SAAS,GAAG,kCAAkC,CAAC;AAErD;;;GAGG;AACH,KAAK,UAAU,kBAAkB,CAAC,IAA0B;IAC1D,MAAM,EAAE,cAAc,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAEpG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;QAClF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,cAAc,IAAI,kBAAkB,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC5F,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;QACjC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,mCAAmC;YACnD,aAAa,EAAE,SAAS,SAAS,EAAE;SACpC;QACD,IAAI,EAAE,IAAI,eAAe,CAAC;YACxB,UAAU,EAAE,eAAe;YAC3B,aAAa,EAAE,kBAAkB;YACjC,SAAS,EAAE,cAAc;SAC1B,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,mCAAmC,CAAC,CAAC;QAC/E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAsD,CAAC;IACrF,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QACvB,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,6BAA6B;IAC7B,IAAI,CAAC;QACH,MAAM,oBAAoB,CAAC,uBAAuB,EAAE,kBAAkB,EAAE,cAAc,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QAC3G,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,oBAAoB,CAAC,uBAAuB,EAAE,kBAAkB,EAAE,eAAe,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QAC/G,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,qEAAqE,CAAC,CAAC;IAC9F,CAAC;IAED,OAAO;QACL,WAAW,EAAE,IAAI,CAAC,YAAY;QAC9B,YAAY,EAAE,IAAI,CAAC,aAAa,IAAI,kBAAkB;KACvD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,WAAW,CACxB,GAAW,EACX,MAAc,EACd,IAA0B;IAE1B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,MAAM;QACN,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,IAAI,CAAC,iBAAiB,EAAE;YACjD,cAAc,EAAE,kBAAkB;SACnC;KACF,CAAC,CAAC;IAEH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;QAC1E,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,iBAAiB,GAAG,SAAS,CAAC,WAAW,CAAC;YAC/C,IAAI,CAAC,kBAAkB,GAAG,SAAS,CAAC,YAAY,CAAC;YACjD,OAAO,KAAK,CAAC,GAAG,EAAE;gBAChB,MAAM;gBACN,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,SAAS,CAAC,WAAW,EAAE;oBAChD,cAAc,EAAE,kBAAkB;iBACnC;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAA0B;IACnE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;IAErC,wEAAwE;IACxE,IAAI,SAA6B,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,8BAA8B,CAAC;QAC/C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE;YAC/B,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE;SACpD,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,8CAA8C,CAAC,CAAC;YAC1F,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAkE,CAAC;QACjG,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QAEjC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC,gGAAgG,CAAC,CAAC;YAC9G,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC5B,SAAS,GAAG,OAAO,CAAC,EAAE,CAAC;QACvB,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,gCAAgC,CAAC,CAAC;QAErG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,yEAAyE,CAAC,CAAC;QAC/G,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,8CAA8C,CAAC,CAAC;QACrE,OAAO;IACT,CAAC;IAED,8EAA8E;IAC9E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,iDAAiD,SAAS,oBAAoB,CAAC;QAC9F,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAEnD,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;YACX,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAwC,CAAC;YACvE,IAAI,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC;gBAC1B,MAAM,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;gBAC3E,OAAO;YACT,CAAC;QACH,CAAC;QACD,iDAAiD;IACnD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,6CAA6C,CAAC,CAAC;QACpE,sCAAsC;IACxC,CAAC;IAED,yDAAyD;IACzD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,iDAAiD,SAAS,oBAAoB,CAAC;QAC9F,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAEpD,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;QACrE,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,8DAA8D,CAAC,CAAC;QAC5G,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,sCAAsC,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC"}