@agent-native/core 0.92.12 → 0.94.0

package/dist/integrations/adapters/whatsapp.js

@@ -2,6 +2,7 @@ import { getQuery, getHeader, readRawBody as h3ReadRawBody } from "h3";
 import { resolveSecret } from "../../server/credential-provider.js";
 /** WhatsApp's max message length */
 const WHATSAPP_MAX_LENGTH = 4096;
+const WHATSAPP_GRAPH_API_VERSION = "v25.0";
 /**
  * One-shot warning flag — log once per process when accepting unverified
  * webhooks (M6 in the webhook security audit).
@@ -25,14 +26,20 @@ function shouldRefuseWhenSecretMissing() {
  * - WHATSAPP_ACCESS_TOKEN — Permanent access token from Meta
  * - WHATSAPP_VERIFY_TOKEN — Custom token for webhook verification
  * - WHATSAPP_PHONE_NUMBER_ID — Phone number ID from Meta dashboard
- *
- * Optional env vars:
  * - WHATSAPP_APP_SECRET — App secret for signature verification
  */
 export function whatsappAdapter() {
     return {
         platform: "whatsapp",
         label: "WhatsApp",
+        capabilities: {
+            replyText: true,
+            proactiveMessages: false,
+            nativeThreads: false,
+            contextualReplies: true,
+            deferredWebhookResponse: false,
+            interactionOnly: false,
+        },
         getRequiredEnvKeys() {
             return [
                 {
@@ -56,8 +63,8 @@ export function whatsappAdapter() {
                 {
                     key: "WHATSAPP_APP_SECRET",
                     label: "WhatsApp App Secret",
-                    required: false,
-                    helpText: "Optional. From Meta App Dashboard → Basic Settings → App Secret. Enables HMAC signature verification on inbound webhooks.",
+                    required: true,
+                    helpText: "From Meta App Dashboard → Basic Settings → App Secret. Used for HMAC verification on every inbound webhook.",
                 },
             ];
         },
@@ -170,14 +177,18 @@ export function whatsappAdapter() {
                 return null;
             const contact = value.contacts?.[0];
             const from = message.from; // Phone number
+            const phoneNumberId = value.metadata?.phone_number_id;
+            if (!from || !phoneNumberId || !message.id)
+                return null;
             return {
                 platform: "whatsapp",
-                externalThreadId: from,
+                externalThreadId: `phone:${String(phoneNumberId)}:user:${String(from)}`,
                 text,
                 senderName: contact?.profile?.name,
                 senderId: from,
+                replyRef: String(message.id),
                 platformContext: {
-                    phoneNumberId: value.metadata?.phone_number_id,
+                    phoneNumberId,
                     displayPhoneNumber: value.metadata?.display_phone_number,
                     messageId: message.id,
                     from,
@@ -186,6 +197,12 @@ export function whatsappAdapter() {
                 timestamp: parseInt(message.timestamp, 10) * 1000,
             };
         },
+        getLegacyExternalThreadIds(incoming) {
+            const from = incoming.platformContext.from ?? incoming.senderId;
+            return typeof from === "string" || typeof from === "number"
+                ? [String(from)]
+                : [];
+        },
         async sendResponse(message, context) {
             const accessToken = await resolveSecret("WHATSAPP_ACCESS_TOKEN");
             const phoneNumberId = await resolveSecret("WHATSAPP_PHONE_NUMBER_ID");
@@ -195,21 +212,25 @@ export function whatsappAdapter() {
             }
             const to = context.senderId;
             const chunks = splitMessage(message.text, WHATSAPP_MAX_LENGTH);
-            for (const chunk of chunks) {
+            for (const [index, chunk] of chunks.entries()) {
                 try {
-                    const res = await fetch(`https://graph.facebook.com/v21.0/${phoneNumberId}/messages`, {
+                    const body = {
+                        messaging_product: "whatsapp",
+                        recipient_type: "individual",
+                        to,
+                        type: "text",
+                        text: { body: chunk },
+                    };
+                    if (index === 0 && context.replyRef) {
+                        body.context = { message_id: context.replyRef };
+                    }
+                    const res = await fetch(`https://graph.facebook.com/${WHATSAPP_GRAPH_API_VERSION}/${phoneNumberId}/messages`, {
                         method: "POST",
                         headers: {
                             Authorization: `Bearer ${accessToken}`,
                             "Content-Type": "application/json",
                         },
-                        body: JSON.stringify({
-                            messaging_product: "whatsapp",
-                            recipient_type: "individual",
-                            to,
-                            type: "text",
-                            text: { body: chunk },
-                        }),
+                        body: JSON.stringify(body),
                     });
                     if (!res.ok) {
                         const data = await res.json().catch(() => ({}));
@@ -228,7 +249,8 @@ export function whatsappAdapter() {
             const hasAccessToken = !!(await resolveSecret("WHATSAPP_ACCESS_TOKEN"));
             const hasVerifyToken = !!(await resolveSecret("WHATSAPP_VERIFY_TOKEN"));
             const hasPhoneNumberId = !!(await resolveSecret("WHATSAPP_PHONE_NUMBER_ID"));
-            const configured = hasAccessToken && hasVerifyToken && hasPhoneNumberId;
+            const hasAppSecret = !!(await resolveSecret("WHATSAPP_APP_SECRET"));
+            const configured = hasAccessToken && hasVerifyToken && hasPhoneNumberId && hasAppSecret;
             return {
                 platform: "whatsapp",
                 label: "WhatsApp",
@@ -238,9 +260,10 @@ export function whatsappAdapter() {
                     hasAccessToken,
                     hasVerifyToken,
                     hasPhoneNumberId,
+                    hasAppSecret,
                 },
                 error: !configured
-                    ? "Save WHATSAPP_ACCESS_TOKEN, WHATSAPP_VERIFY_TOKEN, and WHATSAPP_PHONE_NUMBER_ID in settings"
+                    ? "Save WHATSAPP_ACCESS_TOKEN, WHATSAPP_VERIFY_TOKEN, WHATSAPP_PHONE_NUMBER_ID, and WHATSAPP_APP_SECRET in settings"
                     : undefined,
             };
         },

package/dist/integrations/adapters/whatsapp.js.map

@@ -1 +1 @@
-{"version":3,"file":"whatsapp.js","sourceRoot":"","sources":["../../../src/integrations/adapters/whatsapp.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,IAAI,aAAa,EAAE,MAAM,IAAI,CAAC;AAGvE,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAQpE,oCAAoC;AACpC,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAEjC;;;GAGG;AACH,IAAI,yBAAyB,GAAG,KAAK,CAAC;AAEtC;;;;;GAKG;AACH,SAAS,6BAA6B;IACpC,IAAI,OAAO,CAAC,GAAG,CAAC,sCAAsC,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IAC7E,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO;QACL,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,UAAU;QAEjB,kBAAkB;YAChB,OAAO;gBACL;oBACE,GAAG,EAAE,uBAAuB;oBAC5B,KAAK,EAAE,uBAAuB;oBAC9B,QAAQ,EAAE,IAAI;oBACd,QAAQ,EACN,yHAAyH;iBAC5H;gBACD;oBACE,GAAG,EAAE,uBAAuB;oBAC5B,KAAK,EAAE,uBAAuB;oBAC9B,QAAQ,EAAE,IAAI;oBACd,QAAQ,EACN,wIAAwI;iBAC3I;gBACD;oBACE,GAAG,EAAE,0BAA0B;oBAC/B,KAAK,EAAE,0BAA0B;oBACjC,QAAQ,EAAE,IAAI;oBACd,QAAQ,EACN,uGAAuG;iBAC1G;gBACD;oBACE,GAAG,EAAE,qBAAqB;oBAC1B,KAAK,EAAE,qBAAqB;oBAC5B,QAAQ,EAAE,KAAK;oBACf,QAAQ,EACN,2HAA2H;iBAC9H;aACF,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,kBAAkB,CACtB,KAAc;YAEd,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,IAAI,MAAM,CAAC;YAEjD,qEAAqE;YACrE,kEAAkE;YAClE,iEAAiE;YACjE,mEAAmE;YACnE,kEAAkE;YAClE,yCAAyC;YACzC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACtB,IAAI,CAAC;oBACH,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC;gBAC3B,CAAC;gBAAC,MAAM,CAAC;oBACP,2EAA2E;gBAC7E,CAAC;gBACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAC5B,CAAC;YAED,uCAAuC;YACvC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;YAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACxC,MAAM,SAAS,GAAG,KAAK,CAAC,eAAe,CAAC,CAAC;YACzC,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,uBAAuB,CAAC,CAAC;YAE9D,IAAI,IAAI,KAAK,WAAW,IAAI,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAClE,kEAAkE;gBAClE,uDAAuD;gBACvD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBACrC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACxC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;oBAC1B,IAAI,CAAC;wBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;wBAC3C,IAAI,MAAM,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;4BACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;wBAChD,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,eAAe;oBACjB,CAAC;gBACH,CAAC;YACH,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,KAAc;YAChC,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,qBAAqB,CAAC,CAAC;YAC7D,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,IAAI,6BAA6B,EAAE,EAAE,CAAC;oBACpC,IAAI,CAAC,yBAAyB,EAAE,CAAC;wBAC/B,yBAAyB,GAAG,IAAI,CAAC;wBACjC,OAAO,CAAC,KAAK,CACX,2EAA2E;4BACzE,kGAAkG,CACrG,CAAC;oBACJ,CAAC;oBACD,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,IAAI,CAAC,yBAAyB,EAAE,CAAC;oBAC/B,yBAAyB,GAAG,IAAI,CAAC;oBACjC,OAAO,CAAC,IAAI,CACV,4FAA4F,CAC7F,CAAC;gBACJ,CAAC;gBACD,oEAAoE;gBACpE,OAAO,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,uBAAuB,CAAC,CAAC,CAAC;YAC1D,CAAC;YAED,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;YAC1D,IAAI,CAAC,SAAS;gBAAE,OAAO,KAAK,CAAC;YAE7B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC;YACtC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;YAC3C,MAAM,iBAAiB,GACrB,SAAS;gBACT,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAEpE,IAAI,CAAC;gBACH,OAAO,MAAM,CAAC,eAAe,CAC3B,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EACtB,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAC/B,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,KAAK,CAAC,oBAAoB,CACxB,KAAc;YAEd,sEAAsE;YACtE,qEAAqE;YACrE,kEAAkE;YAClE,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC;YACrC,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YACtB,IAAI,IAAS,CAAC;YACd,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC;YAEvB,+CAA+C;YAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;YAC9B,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC;YAExB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YACnC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU;gBAAE,OAAO,IAAI,CAAC;YAE1D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;YAC5B,MAAM,OAAO,GAAG,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;YACrC,IAAI,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAC;YAE1B,4BAA4B;YAC5B,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC;YACzC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YACxC,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC;YAEvB,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;YACpC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,eAAe;YAE1C,OAAO;gBACL,QAAQ,EAAE,UAAU;gBACpB,gBAAgB,EAAE,IAAI;gBACtB,IAAI;gBACJ,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI;gBAClC,QAAQ,EAAE,IAAI;gBACd,eAAe,EAAE;oBACf,aAAa,EAAE,KAAK,CAAC,QAAQ,EAAE,eAAe;oBAC9C,kBAAkB,EAAE,KAAK,CAAC,QAAQ,EAAE,oBAAoB;oBACxD,SAAS,EAAE,OAAO,CAAC,EAAE;oBACrB,IAAI;oBACJ,SAAS,EAAE,OAAO,CAAC,SAAS;iBAC7B;gBACD,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,IAAI;aAClD,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,YAAY,CAChB,OAAwB,EACxB,OAAwB;YAExB,MAAM,WAAW,GAAG,MAAM,aAAa,CAAC,uBAAuB,CAAC,CAAC;YACjE,MAAM,aAAa,GAAG,MAAM,aAAa,CAAC,0BAA0B,CAAC,CAAC;YACtE,IAAI,CAAC,WAAW,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnC,OAAO,CAAC,KAAK,CACX,6EAA6E,CAC9E,CAAC;gBACF,OAAO;YACT,CAAC;YAED,MAAM,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC;YAC5B,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;YAE/D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,oCAAoC,aAAa,WAAW,EAC5D;wBACE,MAAM,EAAE,MAAM;wBACd,OAAO,EAAE;4BACP,aAAa,EAAE,UAAU,WAAW,EAAE;4BACtC,cAAc,EAAE,kBAAkB;yBACnC;wBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BACnB,iBAAiB,EAAE,UAAU;4BAC7B,cAAc,EAAE,YAAY;4BAC5B,EAAE;4BACF,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;yBACtB,CAAC;qBACH,CACF,CAAC;oBACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;wBACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;wBAChD,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,IAAI,CAAC,CAAC;oBACvD,CAAC;gBACH,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,GAAG,CAAC,CAAC;gBAC3D,CAAC;YACH,CAAC;QACH,CAAC;QAED,mBAAmB,CAAC,IAAY;YAC9B,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;QACvC,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,QAAiB;YAC/B,MAAM,cAAc,GAAG,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,uBAAuB,CAAC,CAAC,CAAC;YACxE,MAAM,cAAc,GAAG,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,uBAAuB,CAAC,CAAC,CAAC;YACxE,MAAM,gBAAgB,GAAG,CAAC,CAAC,CAAC,MAAM,aAAa,CAC7C,0BAA0B,CAC3B,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,cAAc,IAAI,cAAc,IAAI,gBAAgB,CAAC;YAExE,OAAO;gBACL,QAAQ,EAAE,UAAU;gBACpB,KAAK,EAAE,UAAU;gBACjB,OAAO,EAAE,KAAK,EAAE,uBAAuB;gBACvC,UAAU;gBACV,OAAO,EAAE;oBACP,cAAc;oBACd,cAAc;oBACd,gBAAgB;iBACjB;gBACD,KAAK,EAAE,CAAC,UAAU;oBAChB,CAAC,CAAC,6FAA6F;oBAC/F,CAAC,CAAC,SAAS;aACd,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,WAAW,CAAC,KAAc;IACvC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;IACvC,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC9C,MAAM,GAAG,GAAG,CAAC,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,KAAK,CAAC,OAAO,CAAC,SAAS,GAAG,GAAG,CAAC;IAC9B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,SAAiB;IACnD,IAAI,IAAI,CAAC,MAAM,IAAI,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,SAAS,GAAG,IAAI,CAAC;IACrB,OAAO,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,IAAI,SAAS,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACvB,MAAM;QACR,CAAC;QACD,IAAI,QAAQ,GAAG,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACtD,IAAI,QAAQ,IAAI,CAAC;YAAE,QAAQ,GAAG,SAAS,CAAC,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACpE,IAAI,QAAQ,IAAI,CAAC;YAAE,QAAQ,GAAG,SAAS,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC1C,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,SAAS,EAAE,CAAC;IACpD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import type { H3Event } from \"h3\";\nimport { getQuery, getHeader, readRawBody as h3ReadRawBody } from \"h3\";\n\nimport type { EnvKeyConfig } from \"../../server/create-server.js\";\nimport { resolveSecret } from \"../../server/credential-provider.js\";\nimport type {\n  PlatformAdapter,\n  IncomingMessage,\n  OutgoingMessage,\n  IntegrationStatus,\n} from \"../types.js\";\n\n/** WhatsApp's max message length */\nconst WHATSAPP_MAX_LENGTH = 4096;\n\n/**\n * One-shot warning flag — log once per process when accepting unverified\n * webhooks (M6 in the webhook security audit).\n */\nlet _whatsappUnverifiedWarned = false;\n\n/**\n * Returns true when the deployment is running in production mode and the\n * operator has NOT explicitly opted into accepting unverified webhooks for\n * local testing. In production we MUST refuse webhooks whose signature can't\n * be verified (C2 in the webhook security audit).\n */\nfunction shouldRefuseWhenSecretMissing(): boolean {\n  if (process.env.AGENT_NATIVE_ALLOW_UNVERIFIED_WEBHOOKS === \"1\") return false;\n  return process.env.NODE_ENV === \"production\";\n}\n\n/**\n * Create a WhatsApp Cloud API platform adapter.\n *\n * Required env vars:\n * - WHATSAPP_ACCESS_TOKEN — Permanent access token from Meta\n * - WHATSAPP_VERIFY_TOKEN — Custom token for webhook verification\n * - WHATSAPP_PHONE_NUMBER_ID — Phone number ID from Meta dashboard\n *\n * Optional env vars:\n * - WHATSAPP_APP_SECRET — App secret for signature verification\n */\nexport function whatsappAdapter(): PlatformAdapter {\n  return {\n    platform: \"whatsapp\",\n    label: \"WhatsApp\",\n\n    getRequiredEnvKeys(): EnvKeyConfig[] {\n      return [\n        {\n          key: \"WHATSAPP_ACCESS_TOKEN\",\n          label: \"WhatsApp Access Token\",\n          required: true,\n          helpText:\n            \"From your Meta app → WhatsApp → API Setup → Permanent access token. Generate one under System Users for production use.\",\n        },\n        {\n          key: \"WHATSAPP_VERIFY_TOKEN\",\n          label: \"WhatsApp Verify Token\",\n          required: true,\n          helpText:\n            \"Any random string you choose. You'll paste the same value into Meta's webhook configuration so Meta can confirm dispatch owns the URL.\",\n        },\n        {\n          key: \"WHATSAPP_PHONE_NUMBER_ID\",\n          label: \"WhatsApp Phone Number ID\",\n          required: true,\n          helpText:\n            \"From your Meta app → WhatsApp → API Setup. The numeric Phone number ID (not the actual phone number).\",\n        },\n        {\n          key: \"WHATSAPP_APP_SECRET\",\n          label: \"WhatsApp App Secret\",\n          required: false,\n          helpText:\n            \"Optional. From Meta App Dashboard → Basic Settings → App Secret. Enables HMAC signature verification on inbound webhooks.\",\n        },\n      ];\n    },\n\n    async handleVerification(\n      event: H3Event,\n    ): Promise<{ handled: boolean; response?: unknown }> {\n      const method = event.node?.req?.method || \"POST\";\n\n      // For POST flows, pre-cache the raw body so verifyWebhook (HMAC) and\n      // parseIncomingMessage don't both try to consume the request body\n      // stream — h3 v2's body stream is consume-once, so a second read\n      // hangs (M3 in the webhook security audit). Reads raw bytes; never\n      // re-stringifies a parsed body, since Meta computes HMAC over the\n      // exact bytes it sent (M2 in the audit).\n      if (method === \"POST\") {\n        try {\n          await readRawBody(event);\n        } catch {\n          // Surfaces in verifyWebhook / parseIncomingMessage if it actually matters.\n        }\n        return { handled: false };\n      }\n\n      // GET: WhatsApp's challenge handshake.\n      const query = getQuery(event);\n      const mode = query[\"hub.mode\"];\n      const token = query[\"hub.verify_token\"];\n      const challenge = query[\"hub.challenge\"];\n      const expected = await resolveSecret(\"WHATSAPP_VERIFY_TOKEN\");\n\n      if (mode === \"subscribe\" && expected && typeof token === \"string\") {\n        // Timing-safe compare so an attacker can't measure character-wise\n        // mismatch latency (H6 in the webhook security audit).\n        const a = Buffer.from(String(token));\n        const b = Buffer.from(String(expected));\n        if (a.length === b.length) {\n          try {\n            const crypto = await import(\"node:crypto\");\n            if (crypto.timingSafeEqual(a, b)) {\n              return { handled: true, response: challenge };\n            }\n          } catch {\n            // fall through\n          }\n        }\n      }\n\n      return { handled: false };\n    },\n\n    async verifyWebhook(event: H3Event): Promise<boolean> {\n      const appSecret = await resolveSecret(\"WHATSAPP_APP_SECRET\");\n      if (!appSecret) {\n        if (shouldRefuseWhenSecretMissing()) {\n          if (!_whatsappUnverifiedWarned) {\n            _whatsappUnverifiedWarned = true;\n            console.error(\n              \"[whatsapp] WHATSAPP_APP_SECRET not set — refusing webhook in production. \" +\n                \"Set WHATSAPP_APP_SECRET, or set AGENT_NATIVE_ALLOW_UNVERIFIED_WEBHOOKS=1 for local testing only.\",\n            );\n          }\n          return false;\n        }\n        if (!_whatsappUnverifiedWarned) {\n          _whatsappUnverifiedWarned = true;\n          console.warn(\n            \"[whatsapp] WHATSAPP_APP_SECRET not set — accepting webhook without verification (dev mode)\",\n          );\n        }\n        // Dev mode: still require the access token to be configured at all.\n        return !!(await resolveSecret(\"WHATSAPP_ACCESS_TOKEN\"));\n      }\n\n      const signature = getHeader(event, \"x-hub-signature-256\");\n      if (!signature) return false;\n\n      const body = await readRawBody(event);\n      const crypto = await import(\"node:crypto\");\n      const expectedSignature =\n        \"sha256=\" +\n        crypto.createHmac(\"sha256\", appSecret).update(body).digest(\"hex\");\n\n      try {\n        return crypto.timingSafeEqual(\n          Buffer.from(signature),\n          Buffer.from(expectedSignature),\n        );\n      } catch {\n        return false;\n      }\n    },\n\n    async parseIncomingMessage(\n      event: H3Event,\n    ): Promise<IncomingMessage | null> {\n      // Always read via the cached raw body so HMAC and parse see identical\n      // bytes — h3 v2's body stream is consume-once, and re-stringifying a\n      // parsed body breaks Meta's signature check (M2/M3 in the audit).\n      const raw = await readRawBody(event);\n      if (!raw) return null;\n      let body: any;\n      try {\n        body = JSON.parse(raw);\n      } catch {\n        return null;\n      }\n      if (!body) return null;\n\n      // WhatsApp Cloud API webhook payload structure\n      const entry = body.entry?.[0];\n      if (!entry) return null;\n\n      const changes = entry.changes?.[0];\n      if (!changes || changes.field !== \"messages\") return null;\n\n      const value = changes.value;\n      const message = value?.messages?.[0];\n      if (!message) return null;\n\n      // Only handle text messages\n      if (message.type !== \"text\") return null;\n      const text = message.text?.body?.trim();\n      if (!text) return null;\n\n      const contact = value.contacts?.[0];\n      const from = message.from; // Phone number\n\n      return {\n        platform: \"whatsapp\",\n        externalThreadId: from,\n        text,\n        senderName: contact?.profile?.name,\n        senderId: from,\n        platformContext: {\n          phoneNumberId: value.metadata?.phone_number_id,\n          displayPhoneNumber: value.metadata?.display_phone_number,\n          messageId: message.id,\n          from,\n          timestamp: message.timestamp,\n        },\n        timestamp: parseInt(message.timestamp, 10) * 1000,\n      };\n    },\n\n    async sendResponse(\n      message: OutgoingMessage,\n      context: IncomingMessage,\n    ): Promise<void> {\n      const accessToken = await resolveSecret(\"WHATSAPP_ACCESS_TOKEN\");\n      const phoneNumberId = await resolveSecret(\"WHATSAPP_PHONE_NUMBER_ID\");\n      if (!accessToken || !phoneNumberId) {\n        console.error(\n          \"[whatsapp] WHATSAPP_ACCESS_TOKEN or WHATSAPP_PHONE_NUMBER_ID not configured\",\n        );\n        return;\n      }\n\n      const to = context.senderId;\n      const chunks = splitMessage(message.text, WHATSAPP_MAX_LENGTH);\n\n      for (const chunk of chunks) {\n        try {\n          const res = await fetch(\n            `https://graph.facebook.com/v21.0/${phoneNumberId}/messages`,\n            {\n              method: \"POST\",\n              headers: {\n                Authorization: `Bearer ${accessToken}`,\n                \"Content-Type\": \"application/json\",\n              },\n              body: JSON.stringify({\n                messaging_product: \"whatsapp\",\n                recipient_type: \"individual\",\n                to,\n                type: \"text\",\n                text: { body: chunk },\n              }),\n            },\n          );\n          if (!res.ok) {\n            const data = await res.json().catch(() => ({}));\n            console.error(\"[whatsapp] sendMessage error:\", data);\n          }\n        } catch (err) {\n          console.error(\"[whatsapp] Failed to send message:\", err);\n        }\n      }\n    },\n\n    formatAgentResponse(text: string): OutgoingMessage {\n      return { text, platformContext: {} };\n    },\n\n    async getStatus(_baseUrl?: string): Promise<IntegrationStatus> {\n      const hasAccessToken = !!(await resolveSecret(\"WHATSAPP_ACCESS_TOKEN\"));\n      const hasVerifyToken = !!(await resolveSecret(\"WHATSAPP_VERIFY_TOKEN\"));\n      const hasPhoneNumberId = !!(await resolveSecret(\n        \"WHATSAPP_PHONE_NUMBER_ID\",\n      ));\n      const configured = hasAccessToken && hasVerifyToken && hasPhoneNumberId;\n\n      return {\n        platform: \"whatsapp\",\n        label: \"WhatsApp\",\n        enabled: false, // overridden by plugin\n        configured,\n        details: {\n          hasAccessToken,\n          hasVerifyToken,\n          hasPhoneNumberId,\n        },\n        error: !configured\n          ? \"Save WHATSAPP_ACCESS_TOKEN, WHATSAPP_VERIFY_TOKEN, and WHATSAPP_PHONE_NUMBER_ID in settings\"\n          : undefined,\n      };\n    },\n  };\n}\n\n/**\n * Read the raw request body as a string and cache it on the event context.\n *\n * Reads raw bytes from the request stream, NEVER `JSON.stringify`s a parsed\n * body — Meta's signature is computed over the exact bytes Meta sent\n * (M2/M3 in the webhook security audit). h3 v2's body stream is consume-once\n * so we cache the raw string after the first read.\n */\nasync function readRawBody(event: H3Event): Promise<string> {\n  const cached = event.context.__rawBody;\n  if (typeof cached === \"string\") return cached;\n  const raw = (await h3ReadRawBody(event)) ?? \"\";\n  event.context.__rawBody = raw;\n  return raw;\n}\n\nfunction splitMessage(text: string, maxLength: number): string[] {\n  if (text.length <= maxLength) return [text];\n  const chunks: string[] = [];\n  let remaining = text;\n  while (remaining.length > 0) {\n    if (remaining.length <= maxLength) {\n      chunks.push(remaining);\n      break;\n    }\n    let splitIdx = remaining.lastIndexOf(\"\\n\", maxLength);\n    if (splitIdx <= 0) splitIdx = remaining.lastIndexOf(\" \", maxLength);\n    if (splitIdx <= 0) splitIdx = maxLength;\n    chunks.push(remaining.slice(0, splitIdx));\n    remaining = remaining.slice(splitIdx).trimStart();\n  }\n  return chunks;\n}\n"]}
+{"version":3,"file":"whatsapp.js","sourceRoot":"","sources":["../../../src/integrations/adapters/whatsapp.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,IAAI,aAAa,EAAE,MAAM,IAAI,CAAC;AAGvE,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAQpE,oCAAoC;AACpC,MAAM,mBAAmB,GAAG,IAAI,CAAC;AACjC,MAAM,0BAA0B,GAAG,OAAO,CAAC;AAE3C;;;GAGG;AACH,IAAI,yBAAyB,GAAG,KAAK,CAAC;AAEtC;;;;;GAKG;AACH,SAAS,6BAA6B;IACpC,IAAI,OAAO,CAAC,GAAG,CAAC,sCAAsC,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IAC7E,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;AAC/C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO;QACL,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,UAAU;QACjB,YAAY,EAAE;YACZ,SAAS,EAAE,IAAI;YACf,iBAAiB,EAAE,KAAK;YACxB,aAAa,EAAE,KAAK;YACpB,iBAAiB,EAAE,IAAI;YACvB,uBAAuB,EAAE,KAAK;YAC9B,eAAe,EAAE,KAAK;SACvB;QAED,kBAAkB;YAChB,OAAO;gBACL;oBACE,GAAG,EAAE,uBAAuB;oBAC5B,KAAK,EAAE,uBAAuB;oBAC9B,QAAQ,EAAE,IAAI;oBACd,QAAQ,EACN,yHAAyH;iBAC5H;gBACD;oBACE,GAAG,EAAE,uBAAuB;oBAC5B,KAAK,EAAE,uBAAuB;oBAC9B,QAAQ,EAAE,IAAI;oBACd,QAAQ,EACN,wIAAwI;iBAC3I;gBACD;oBACE,GAAG,EAAE,0BAA0B;oBAC/B,KAAK,EAAE,0BAA0B;oBACjC,QAAQ,EAAE,IAAI;oBACd,QAAQ,EACN,uGAAuG;iBAC1G;gBACD;oBACE,GAAG,EAAE,qBAAqB;oBAC1B,KAAK,EAAE,qBAAqB;oBAC5B,QAAQ,EAAE,IAAI;oBACd,QAAQ,EACN,6GAA6G;iBAChH;aACF,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,kBAAkB,CACtB,KAAc;YAEd,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,IAAI,MAAM,CAAC;YAEjD,qEAAqE;YACrE,kEAAkE;YAClE,iEAAiE;YACjE,mEAAmE;YACnE,kEAAkE;YAClE,yCAAyC;YACzC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACtB,IAAI,CAAC;oBACH,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC;gBAC3B,CAAC;gBAAC,MAAM,CAAC;oBACP,2EAA2E;gBAC7E,CAAC;gBACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAC5B,CAAC;YAED,uCAAuC;YACvC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;YAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACxC,MAAM,SAAS,GAAG,KAAK,CAAC,eAAe,CAAC,CAAC;YACzC,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,uBAAuB,CAAC,CAAC;YAE9D,IAAI,IAAI,KAAK,WAAW,IAAI,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAClE,kEAAkE;gBAClE,uDAAuD;gBACvD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBACrC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACxC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;oBAC1B,IAAI,CAAC;wBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;wBAC3C,IAAI,MAAM,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;4BACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;wBAChD,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,eAAe;oBACjB,CAAC;gBACH,CAAC;YACH,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,KAAc;YAChC,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,qBAAqB,CAAC,CAAC;YAC7D,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,IAAI,6BAA6B,EAAE,EAAE,CAAC;oBACpC,IAAI,CAAC,yBAAyB,EAAE,CAAC;wBAC/B,yBAAyB,GAAG,IAAI,CAAC;wBACjC,OAAO,CAAC,KAAK,CACX,2EAA2E;4BACzE,kGAAkG,CACrG,CAAC;oBACJ,CAAC;oBACD,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,IAAI,CAAC,yBAAyB,EAAE,CAAC;oBAC/B,yBAAyB,GAAG,IAAI,CAAC;oBACjC,OAAO,CAAC,IAAI,CACV,4FAA4F,CAC7F,CAAC;gBACJ,CAAC;gBACD,oEAAoE;gBACpE,OAAO,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,uBAAuB,CAAC,CAAC,CAAC;YAC1D,CAAC;YAED,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;YAC1D,IAAI,CAAC,SAAS;gBAAE,OAAO,KAAK,CAAC;YAE7B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC;YACtC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;YAC3C,MAAM,iBAAiB,GACrB,SAAS;gBACT,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAEpE,IAAI,CAAC;gBACH,OAAO,MAAM,CAAC,eAAe,CAC3B,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EACtB,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAC/B,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,KAAK,CAAC,oBAAoB,CACxB,KAAc;YAEd,sEAAsE;YACtE,qEAAqE;YACrE,kEAAkE;YAClE,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC;YACrC,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YACtB,IAAI,IAAS,CAAC;YACd,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC;YAEvB,+CAA+C;YAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;YAC9B,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC;YAExB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YACnC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU;gBAAE,OAAO,IAAI,CAAC;YAE1D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;YAC5B,MAAM,OAAO,GAAG,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;YACrC,IAAI,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAC;YAE1B,4BAA4B;YAC5B,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC;YACzC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YACxC,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC;YAEvB,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;YACpC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,eAAe;YAC1C,MAAM,aAAa,GAAG,KAAK,CAAC,QAAQ,EAAE,eAAe,CAAC;YACtD,IAAI,CAAC,IAAI,IAAI,CAAC,aAAa,IAAI,CAAC,OAAO,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;YAExD,OAAO;gBACL,QAAQ,EAAE,UAAU;gBACpB,gBAAgB,EAAE,SAAS,MAAM,CAAC,aAAa,CAAC,SAAS,MAAM,CAAC,IAAI,CAAC,EAAE;gBACvE,IAAI;gBACJ,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI;gBAClC,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5B,eAAe,EAAE;oBACf,aAAa;oBACb,kBAAkB,EAAE,KAAK,CAAC,QAAQ,EAAE,oBAAoB;oBACxD,SAAS,EAAE,OAAO,CAAC,EAAE;oBACrB,IAAI;oBACJ,SAAS,EAAE,OAAO,CAAC,SAAS;iBAC7B;gBACD,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,IAAI;aAClD,CAAC;QACJ,CAAC;QAED,0BAA0B,CAAC,QAAyB;YAClD,MAAM,IAAI,GAAG,QAAQ,CAAC,eAAe,CAAC,IAAI,IAAI,QAAQ,CAAC,QAAQ,CAAC;YAChE,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,QAAQ;gBACzD,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAChB,CAAC,CAAC,EAAE,CAAC;QACT,CAAC;QAED,KAAK,CAAC,YAAY,CAChB,OAAwB,EACxB,OAAwB;YAExB,MAAM,WAAW,GAAG,MAAM,aAAa,CAAC,uBAAuB,CAAC,CAAC;YACjE,MAAM,aAAa,GAAG,MAAM,aAAa,CAAC,0BAA0B,CAAC,CAAC;YACtE,IAAI,CAAC,WAAW,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnC,OAAO,CAAC,KAAK,CACX,6EAA6E,CAC9E,CAAC;gBACF,OAAO;YACT,CAAC;YAED,MAAM,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC;YAC5B,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;YAE/D,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC9C,IAAI,CAAC;oBACH,MAAM,IAAI,GAA4B;wBACpC,iBAAiB,EAAE,UAAU;wBAC7B,cAAc,EAAE,YAAY;wBAC5B,EAAE;wBACF,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;qBACtB,CAAC;oBACF,IAAI,KAAK,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;wBACpC,IAAI,CAAC,OAAO,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;oBAClD,CAAC;oBACD,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,8BAA8B,0BAA0B,IAAI,aAAa,WAAW,EACpF;wBACE,MAAM,EAAE,MAAM;wBACd,OAAO,EAAE;4BACP,aAAa,EAAE,UAAU,WAAW,EAAE;4BACtC,cAAc,EAAE,kBAAkB;yBACnC;wBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;qBAC3B,CACF,CAAC;oBACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;wBACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;wBAChD,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,IAAI,CAAC,CAAC;oBACvD,CAAC;gBACH,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,GAAG,CAAC,CAAC;gBAC3D,CAAC;YACH,CAAC;QACH,CAAC;QAED,mBAAmB,CAAC,IAAY;YAC9B,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;QACvC,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,QAAiB;YAC/B,MAAM,cAAc,GAAG,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,uBAAuB,CAAC,CAAC,CAAC;YACxE,MAAM,cAAc,GAAG,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,uBAAuB,CAAC,CAAC,CAAC;YACxE,MAAM,gBAAgB,GAAG,CAAC,CAAC,CAAC,MAAM,aAAa,CAC7C,0BAA0B,CAC3B,CAAC,CAAC;YACH,MAAM,YAAY,GAAG,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,qBAAqB,CAAC,CAAC,CAAC;YACpE,MAAM,UAAU,GACd,cAAc,IAAI,cAAc,IAAI,gBAAgB,IAAI,YAAY,CAAC;YAEvE,OAAO;gBACL,QAAQ,EAAE,UAAU;gBACpB,KAAK,EAAE,UAAU;gBACjB,OAAO,EAAE,KAAK,EAAE,uBAAuB;gBACvC,UAAU;gBACV,OAAO,EAAE;oBACP,cAAc;oBACd,cAAc;oBACd,gBAAgB;oBAChB,YAAY;iBACb;gBACD,KAAK,EAAE,CAAC,UAAU;oBAChB,CAAC,CAAC,kHAAkH;oBACpH,CAAC,CAAC,SAAS;aACd,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,WAAW,CAAC,KAAc;IACvC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;IACvC,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC9C,MAAM,GAAG,GAAG,CAAC,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,KAAK,CAAC,OAAO,CAAC,SAAS,GAAG,GAAG,CAAC;IAC9B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,SAAiB;IACnD,IAAI,IAAI,CAAC,MAAM,IAAI,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,SAAS,GAAG,IAAI,CAAC;IACrB,OAAO,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,IAAI,SAAS,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACvB,MAAM;QACR,CAAC;QACD,IAAI,QAAQ,GAAG,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACtD,IAAI,QAAQ,IAAI,CAAC;YAAE,QAAQ,GAAG,SAAS,CAAC,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACpE,IAAI,QAAQ,IAAI,CAAC;YAAE,QAAQ,GAAG,SAAS,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC1C,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,SAAS,EAAE,CAAC;IACpD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import type { H3Event } from \"h3\";\nimport { getQuery, getHeader, readRawBody as h3ReadRawBody } from \"h3\";\n\nimport type { EnvKeyConfig } from \"../../server/create-server.js\";\nimport { resolveSecret } from \"../../server/credential-provider.js\";\nimport type {\n  PlatformAdapter,\n  IncomingMessage,\n  OutgoingMessage,\n  IntegrationStatus,\n} from \"../types.js\";\n\n/** WhatsApp's max message length */\nconst WHATSAPP_MAX_LENGTH = 4096;\nconst WHATSAPP_GRAPH_API_VERSION = \"v25.0\";\n\n/**\n * One-shot warning flag — log once per process when accepting unverified\n * webhooks (M6 in the webhook security audit).\n */\nlet _whatsappUnverifiedWarned = false;\n\n/**\n * Returns true when the deployment is running in production mode and the\n * operator has NOT explicitly opted into accepting unverified webhooks for\n * local testing. In production we MUST refuse webhooks whose signature can't\n * be verified (C2 in the webhook security audit).\n */\nfunction shouldRefuseWhenSecretMissing(): boolean {\n  if (process.env.AGENT_NATIVE_ALLOW_UNVERIFIED_WEBHOOKS === \"1\") return false;\n  return process.env.NODE_ENV === \"production\";\n}\n\n/**\n * Create a WhatsApp Cloud API platform adapter.\n *\n * Required env vars:\n * - WHATSAPP_ACCESS_TOKEN — Permanent access token from Meta\n * - WHATSAPP_VERIFY_TOKEN — Custom token for webhook verification\n * - WHATSAPP_PHONE_NUMBER_ID — Phone number ID from Meta dashboard\n * - WHATSAPP_APP_SECRET — App secret for signature verification\n */\nexport function whatsappAdapter(): PlatformAdapter {\n  return {\n    platform: \"whatsapp\",\n    label: \"WhatsApp\",\n    capabilities: {\n      replyText: true,\n      proactiveMessages: false,\n      nativeThreads: false,\n      contextualReplies: true,\n      deferredWebhookResponse: false,\n      interactionOnly: false,\n    },\n\n    getRequiredEnvKeys(): EnvKeyConfig[] {\n      return [\n        {\n          key: \"WHATSAPP_ACCESS_TOKEN\",\n          label: \"WhatsApp Access Token\",\n          required: true,\n          helpText:\n            \"From your Meta app → WhatsApp → API Setup → Permanent access token. Generate one under System Users for production use.\",\n        },\n        {\n          key: \"WHATSAPP_VERIFY_TOKEN\",\n          label: \"WhatsApp Verify Token\",\n          required: true,\n          helpText:\n            \"Any random string you choose. You'll paste the same value into Meta's webhook configuration so Meta can confirm dispatch owns the URL.\",\n        },\n        {\n          key: \"WHATSAPP_PHONE_NUMBER_ID\",\n          label: \"WhatsApp Phone Number ID\",\n          required: true,\n          helpText:\n            \"From your Meta app → WhatsApp → API Setup. The numeric Phone number ID (not the actual phone number).\",\n        },\n        {\n          key: \"WHATSAPP_APP_SECRET\",\n          label: \"WhatsApp App Secret\",\n          required: true,\n          helpText:\n            \"From Meta App Dashboard → Basic Settings → App Secret. Used for HMAC verification on every inbound webhook.\",\n        },\n      ];\n    },\n\n    async handleVerification(\n      event: H3Event,\n    ): Promise<{ handled: boolean; response?: unknown }> {\n      const method = event.node?.req?.method || \"POST\";\n\n      // For POST flows, pre-cache the raw body so verifyWebhook (HMAC) and\n      // parseIncomingMessage don't both try to consume the request body\n      // stream — h3 v2's body stream is consume-once, so a second read\n      // hangs (M3 in the webhook security audit). Reads raw bytes; never\n      // re-stringifies a parsed body, since Meta computes HMAC over the\n      // exact bytes it sent (M2 in the audit).\n      if (method === \"POST\") {\n        try {\n          await readRawBody(event);\n        } catch {\n          // Surfaces in verifyWebhook / parseIncomingMessage if it actually matters.\n        }\n        return { handled: false };\n      }\n\n      // GET: WhatsApp's challenge handshake.\n      const query = getQuery(event);\n      const mode = query[\"hub.mode\"];\n      const token = query[\"hub.verify_token\"];\n      const challenge = query[\"hub.challenge\"];\n      const expected = await resolveSecret(\"WHATSAPP_VERIFY_TOKEN\");\n\n      if (mode === \"subscribe\" && expected && typeof token === \"string\") {\n        // Timing-safe compare so an attacker can't measure character-wise\n        // mismatch latency (H6 in the webhook security audit).\n        const a = Buffer.from(String(token));\n        const b = Buffer.from(String(expected));\n        if (a.length === b.length) {\n          try {\n            const crypto = await import(\"node:crypto\");\n            if (crypto.timingSafeEqual(a, b)) {\n              return { handled: true, response: challenge };\n            }\n          } catch {\n            // fall through\n          }\n        }\n      }\n\n      return { handled: false };\n    },\n\n    async verifyWebhook(event: H3Event): Promise<boolean> {\n      const appSecret = await resolveSecret(\"WHATSAPP_APP_SECRET\");\n      if (!appSecret) {\n        if (shouldRefuseWhenSecretMissing()) {\n          if (!_whatsappUnverifiedWarned) {\n            _whatsappUnverifiedWarned = true;\n            console.error(\n              \"[whatsapp] WHATSAPP_APP_SECRET not set — refusing webhook in production. \" +\n                \"Set WHATSAPP_APP_SECRET, or set AGENT_NATIVE_ALLOW_UNVERIFIED_WEBHOOKS=1 for local testing only.\",\n            );\n          }\n          return false;\n        }\n        if (!_whatsappUnverifiedWarned) {\n          _whatsappUnverifiedWarned = true;\n          console.warn(\n            \"[whatsapp] WHATSAPP_APP_SECRET not set — accepting webhook without verification (dev mode)\",\n          );\n        }\n        // Dev mode: still require the access token to be configured at all.\n        return !!(await resolveSecret(\"WHATSAPP_ACCESS_TOKEN\"));\n      }\n\n      const signature = getHeader(event, \"x-hub-signature-256\");\n      if (!signature) return false;\n\n      const body = await readRawBody(event);\n      const crypto = await import(\"node:crypto\");\n      const expectedSignature =\n        \"sha256=\" +\n        crypto.createHmac(\"sha256\", appSecret).update(body).digest(\"hex\");\n\n      try {\n        return crypto.timingSafeEqual(\n          Buffer.from(signature),\n          Buffer.from(expectedSignature),\n        );\n      } catch {\n        return false;\n      }\n    },\n\n    async parseIncomingMessage(\n      event: H3Event,\n    ): Promise<IncomingMessage | null> {\n      // Always read via the cached raw body so HMAC and parse see identical\n      // bytes — h3 v2's body stream is consume-once, and re-stringifying a\n      // parsed body breaks Meta's signature check (M2/M3 in the audit).\n      const raw = await readRawBody(event);\n      if (!raw) return null;\n      let body: any;\n      try {\n        body = JSON.parse(raw);\n      } catch {\n        return null;\n      }\n      if (!body) return null;\n\n      // WhatsApp Cloud API webhook payload structure\n      const entry = body.entry?.[0];\n      if (!entry) return null;\n\n      const changes = entry.changes?.[0];\n      if (!changes || changes.field !== \"messages\") return null;\n\n      const value = changes.value;\n      const message = value?.messages?.[0];\n      if (!message) return null;\n\n      // Only handle text messages\n      if (message.type !== \"text\") return null;\n      const text = message.text?.body?.trim();\n      if (!text) return null;\n\n      const contact = value.contacts?.[0];\n      const from = message.from; // Phone number\n      const phoneNumberId = value.metadata?.phone_number_id;\n      if (!from || !phoneNumberId || !message.id) return null;\n\n      return {\n        platform: \"whatsapp\",\n        externalThreadId: `phone:${String(phoneNumberId)}:user:${String(from)}`,\n        text,\n        senderName: contact?.profile?.name,\n        senderId: from,\n        replyRef: String(message.id),\n        platformContext: {\n          phoneNumberId,\n          displayPhoneNumber: value.metadata?.display_phone_number,\n          messageId: message.id,\n          from,\n          timestamp: message.timestamp,\n        },\n        timestamp: parseInt(message.timestamp, 10) * 1000,\n      };\n    },\n\n    getLegacyExternalThreadIds(incoming: IncomingMessage): string[] {\n      const from = incoming.platformContext.from ?? incoming.senderId;\n      return typeof from === \"string\" || typeof from === \"number\"\n        ? [String(from)]\n        : [];\n    },\n\n    async sendResponse(\n      message: OutgoingMessage,\n      context: IncomingMessage,\n    ): Promise<void> {\n      const accessToken = await resolveSecret(\"WHATSAPP_ACCESS_TOKEN\");\n      const phoneNumberId = await resolveSecret(\"WHATSAPP_PHONE_NUMBER_ID\");\n      if (!accessToken || !phoneNumberId) {\n        console.error(\n          \"[whatsapp] WHATSAPP_ACCESS_TOKEN or WHATSAPP_PHONE_NUMBER_ID not configured\",\n        );\n        return;\n      }\n\n      const to = context.senderId;\n      const chunks = splitMessage(message.text, WHATSAPP_MAX_LENGTH);\n\n      for (const [index, chunk] of chunks.entries()) {\n        try {\n          const body: Record<string, unknown> = {\n            messaging_product: \"whatsapp\",\n            recipient_type: \"individual\",\n            to,\n            type: \"text\",\n            text: { body: chunk },\n          };\n          if (index === 0 && context.replyRef) {\n            body.context = { message_id: context.replyRef };\n          }\n          const res = await fetch(\n            `https://graph.facebook.com/${WHATSAPP_GRAPH_API_VERSION}/${phoneNumberId}/messages`,\n            {\n              method: \"POST\",\n              headers: {\n                Authorization: `Bearer ${accessToken}`,\n                \"Content-Type\": \"application/json\",\n              },\n              body: JSON.stringify(body),\n            },\n          );\n          if (!res.ok) {\n            const data = await res.json().catch(() => ({}));\n            console.error(\"[whatsapp] sendMessage error:\", data);\n          }\n        } catch (err) {\n          console.error(\"[whatsapp] Failed to send message:\", err);\n        }\n      }\n    },\n\n    formatAgentResponse(text: string): OutgoingMessage {\n      return { text, platformContext: {} };\n    },\n\n    async getStatus(_baseUrl?: string): Promise<IntegrationStatus> {\n      const hasAccessToken = !!(await resolveSecret(\"WHATSAPP_ACCESS_TOKEN\"));\n      const hasVerifyToken = !!(await resolveSecret(\"WHATSAPP_VERIFY_TOKEN\"));\n      const hasPhoneNumberId = !!(await resolveSecret(\n        \"WHATSAPP_PHONE_NUMBER_ID\",\n      ));\n      const hasAppSecret = !!(await resolveSecret(\"WHATSAPP_APP_SECRET\"));\n      const configured =\n        hasAccessToken && hasVerifyToken && hasPhoneNumberId && hasAppSecret;\n\n      return {\n        platform: \"whatsapp\",\n        label: \"WhatsApp\",\n        enabled: false, // overridden by plugin\n        configured,\n        details: {\n          hasAccessToken,\n          hasVerifyToken,\n          hasPhoneNumberId,\n          hasAppSecret,\n        },\n        error: !configured\n          ? \"Save WHATSAPP_ACCESS_TOKEN, WHATSAPP_VERIFY_TOKEN, WHATSAPP_PHONE_NUMBER_ID, and WHATSAPP_APP_SECRET in settings\"\n          : undefined,\n      };\n    },\n  };\n}\n\n/**\n * Read the raw request body as a string and cache it on the event context.\n *\n * Reads raw bytes from the request stream, NEVER `JSON.stringify`s a parsed\n * body — Meta's signature is computed over the exact bytes Meta sent\n * (M2/M3 in the webhook security audit). h3 v2's body stream is consume-once\n * so we cache the raw string after the first read.\n */\nasync function readRawBody(event: H3Event): Promise<string> {\n  const cached = event.context.__rawBody;\n  if (typeof cached === \"string\") return cached;\n  const raw = (await h3ReadRawBody(event)) ?? \"\";\n  event.context.__rawBody = raw;\n  return raw;\n}\n\nfunction splitMessage(text: string, maxLength: number): string[] {\n  if (text.length <= maxLength) return [text];\n  const chunks: string[] = [];\n  let remaining = text;\n  while (remaining.length > 0) {\n    if (remaining.length <= maxLength) {\n      chunks.push(remaining);\n      break;\n    }\n    let splitIdx = remaining.lastIndexOf(\"\\n\", maxLength);\n    if (splitIdx <= 0) splitIdx = remaining.lastIndexOf(\" \", maxLength);\n    if (splitIdx <= 0) splitIdx = maxLength;\n    chunks.push(remaining.slice(0, splitIdx));\n    remaining = remaining.slice(splitIdx).trimStart();\n  }\n  return chunks;\n}\n"]}

package/dist/integrations/awaiting-input-store.d.ts

@@ -0,0 +1,27 @@
+/** Channel-thread clarification windows are deliberately short-lived. */
+export declare const INTEGRATION_AWAITING_INPUT_TTL_MS: number;
+/**
+ * Open (or refresh) the bounded reply window after an integration explicitly
+ * asks the originating Slack user a question. The workspace-qualified external
+ * thread id and requester id prevent unrelated channel messages from opting in.
+ */
+export declare function setIntegrationAwaitingInput(input: {
+    platform: string;
+    externalThreadId: string;
+    requesterId: string;
+    expiresAt?: number;
+}): Promise<void>;
+/**
+ * Atomically consume the one reply window for this exact requester. Competing
+ * Slack deliveries cannot both claim it, and expired rows never authorize a
+ * later unmentioned reply.
+ */
+export declare function consumeIntegrationAwaitingInput(input: {
+    platform: string;
+    externalThreadId: string;
+    requesterId: string;
+}): Promise<boolean>;
+/** Clear any outstanding clarification window once the thread resolves. */
+export declare function clearIntegrationAwaitingInput(platform: string, externalThreadId: string): Promise<void>;
+export declare function _resetIntegrationAwaitingInputStoreForTests(): void;
+//# sourceMappingURL=awaiting-input-store.d.ts.map

package/dist/integrations/awaiting-input-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"awaiting-input-store.d.ts","sourceRoot":"","sources":["../../src/integrations/awaiting-input-store.ts"],"names":[],"mappings":"AAKA,yEAAyE;AACzE,eAAO,MAAM,iCAAiC,QAAsB,CAAC;AA8BrE;;;;GAIG;AACH,wBAAsB,2BAA2B,CAAC,KAAK,EAAE;IACvD,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,IAAI,CAAC,CA0BhB;AAED;;;;GAIG;AACH,wBAAsB,+BAA+B,CAAC,KAAK,EAAE;IAC3D,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC,OAAO,CAAC,CA8BnB;AAED,2EAA2E;AAC3E,wBAAsB,6BAA6B,CACjD,QAAQ,EAAE,MAAM,EAChB,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC,IAAI,CAAC,CAMf;AAED,wBAAgB,2CAA2C,IAAI,IAAI,CAElE"}

package/dist/integrations/awaiting-input-store.js

@@ -0,0 +1,112 @@
+import { getDbExec, intType, isPostgres } from "../db/client.js";
+import { ensureTableExists } from "../db/ddl-guard.js";
+let initPromise;
+/** Channel-thread clarification windows are deliberately short-lived. */
+export const INTEGRATION_AWAITING_INPUT_TTL_MS = 24 * 60 * 60 * 1000;
+async function ensureTable() {
+    if (!initPromise) {
+        initPromise = (async () => {
+            const client = getDbExec();
+            const createSql = `
+        CREATE TABLE IF NOT EXISTS integration_awaiting_inputs (
+          platform TEXT NOT NULL,
+          external_thread_id TEXT NOT NULL,
+          requester_id TEXT NOT NULL,
+          expires_at ${intType()} NOT NULL,
+          created_at ${intType()} NOT NULL,
+          updated_at ${intType()} NOT NULL,
+          PRIMARY KEY (platform, external_thread_id)
+        )
+      `;
+            if (isPostgres()) {
+                await ensureTableExists("integration_awaiting_inputs", createSql);
+                return;
+            }
+            await client.execute(createSql);
+        })().catch((error) => {
+            initPromise = undefined;
+            throw error;
+        });
+    }
+    return initPromise;
+}
+/**
+ * Open (or refresh) the bounded reply window after an integration explicitly
+ * asks the originating Slack user a question. The workspace-qualified external
+ * thread id and requester id prevent unrelated channel messages from opting in.
+ */
+export async function setIntegrationAwaitingInput(input) {
+    await ensureTable();
+    const requesterId = input.requesterId.trim();
+    if (!requesterId)
+        throw new Error("requesterId is required");
+    const now = Date.now();
+    const expiresAt = input.expiresAt ?? now + INTEGRATION_AWAITING_INPUT_TTL_MS;
+    const client = getDbExec();
+    await client.execute({
+        sql: isPostgres()
+            ? `INSERT INTO integration_awaiting_inputs (platform, external_thread_id, requester_id, expires_at, created_at, updated_at)
+           VALUES (?, ?, ?, ?, ?, ?)
+           ON CONFLICT (platform, external_thread_id) DO UPDATE SET
+             requester_id = EXCLUDED.requester_id,
+             expires_at = EXCLUDED.expires_at,
+             updated_at = EXCLUDED.updated_at`
+            : `INSERT OR REPLACE INTO integration_awaiting_inputs (platform, external_thread_id, requester_id, expires_at, created_at, updated_at)
+           VALUES (?, ?, ?, ?, ?, ?)`,
+        args: [
+            input.platform,
+            input.externalThreadId,
+            requesterId,
+            expiresAt,
+            now,
+            now,
+        ],
+    });
+}
+/**
+ * Atomically consume the one reply window for this exact requester. Competing
+ * Slack deliveries cannot both claim it, and expired rows never authorize a
+ * later unmentioned reply.
+ */
+export async function consumeIntegrationAwaitingInput(input) {
+    await ensureTable();
+    const client = getDbExec();
+    const result = await client.execute({
+        sql: isPostgres()
+            ? `DELETE FROM integration_awaiting_inputs
+           WHERE platform = ?
+             AND external_thread_id = ?
+             AND requester_id = ?
+             AND expires_at > ?
+           RETURNING platform`
+            : `DELETE FROM integration_awaiting_inputs
+           WHERE platform = ?
+             AND external_thread_id = ?
+             AND requester_id = ?
+             AND expires_at > ?`,
+        args: [
+            input.platform,
+            input.externalThreadId,
+            input.requesterId,
+            Date.now(),
+        ],
+    });
+    if (isPostgres())
+        return (result.rows ?? []).length > 0;
+    const affected = result.rowsAffected ??
+        result.rowCount ??
+        0;
+    return affected > 0;
+}
+/** Clear any outstanding clarification window once the thread resolves. */
+export async function clearIntegrationAwaitingInput(platform, externalThreadId) {
+    await ensureTable();
+    await getDbExec().execute({
+        sql: `DELETE FROM integration_awaiting_inputs WHERE platform = ? AND external_thread_id = ?`,
+        args: [platform, externalThreadId],
+    });
+}
+export function _resetIntegrationAwaitingInputStoreForTests() {
+    initPromise = undefined;
+}
+//# sourceMappingURL=awaiting-input-store.js.map

package/dist/integrations/awaiting-input-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"awaiting-input-store.js","sourceRoot":"","sources":["../../src/integrations/awaiting-input-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,IAAI,WAAsC,CAAC;AAE3C,yEAAyE;AACzE,MAAM,CAAC,MAAM,iCAAiC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAErE,KAAK,UAAU,WAAW;IACxB,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,WAAW,GAAG,CAAC,KAAK,IAAI,EAAE;YACxB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAC3B,MAAM,SAAS,GAAG;;;;;uBAKD,OAAO,EAAE;uBACT,OAAO,EAAE;uBACT,OAAO,EAAE;;;OAGzB,CAAC;YACF,IAAI,UAAU,EAAE,EAAE,CAAC;gBACjB,MAAM,iBAAiB,CAAC,6BAA6B,EAAE,SAAS,CAAC,CAAC;gBAClE,OAAO;YACT,CAAC;YACD,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAClC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACnB,WAAW,GAAG,SAAS,CAAC;YACxB,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAKjD;IACC,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;IAC7C,IAAI,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,GAAG,GAAG,iCAAiC,CAAC;IAC7E,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE,UAAU,EAAE;YACf,CAAC,CAAC;;;;;8CAKsC;YACxC,CAAC,CAAC;qCAC6B;QACjC,IAAI,EAAE;YACJ,KAAK,CAAC,QAAQ;YACd,KAAK,CAAC,gBAAgB;YACtB,WAAW;YACX,SAAS;YACT,GAAG;YACH,GAAG;SACJ;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,KAIrD;IACC,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE,UAAU,EAAE;YACf,CAAC,CAAC;;;;;8BAKsB;YACxB,CAAC,CAAC;;;;gCAIwB;QAC5B,IAAI,EAAE;YACJ,KAAK,CAAC,QAAQ;YACd,KAAK,CAAC,gBAAgB;YACtB,KAAK,CAAC,WAAW;YACjB,IAAI,CAAC,GAAG,EAAE;SACX;KACF,CAAC,CAAC;IAEH,IAAI,UAAU,EAAE;QAAE,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IACxD,MAAM,QAAQ,GACX,MAAuD,CAAC,YAAY;QACpE,MAAuD,CAAC,QAAQ;QACjE,CAAC,CAAC;IACJ,OAAO,QAAQ,GAAG,CAAC,CAAC;AACtB,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,QAAgB,EAChB,gBAAwB;IAExB,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACxB,GAAG,EAAE,uFAAuF;QAC5F,IAAI,EAAE,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KACnC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,2CAA2C;IACzD,WAAW,GAAG,SAAS,CAAC;AAC1B,CAAC","sourcesContent":["import { getDbExec, intType, isPostgres } from \"../db/client.js\";\nimport { ensureTableExists } from \"../db/ddl-guard.js\";\n\nlet initPromise: Promise<void> | undefined;\n\n/** Channel-thread clarification windows are deliberately short-lived. */\nexport const INTEGRATION_AWAITING_INPUT_TTL_MS = 24 * 60 * 60 * 1000;\n\nasync function ensureTable(): Promise<void> {\n  if (!initPromise) {\n    initPromise = (async () => {\n      const client = getDbExec();\n      const createSql = `\n        CREATE TABLE IF NOT EXISTS integration_awaiting_inputs (\n          platform TEXT NOT NULL,\n          external_thread_id TEXT NOT NULL,\n          requester_id TEXT NOT NULL,\n          expires_at ${intType()} NOT NULL,\n          created_at ${intType()} NOT NULL,\n          updated_at ${intType()} NOT NULL,\n          PRIMARY KEY (platform, external_thread_id)\n        )\n      `;\n      if (isPostgres()) {\n        await ensureTableExists(\"integration_awaiting_inputs\", createSql);\n        return;\n      }\n      await client.execute(createSql);\n    })().catch((error) => {\n      initPromise = undefined;\n      throw error;\n    });\n  }\n  return initPromise;\n}\n\n/**\n * Open (or refresh) the bounded reply window after an integration explicitly\n * asks the originating Slack user a question. The workspace-qualified external\n * thread id and requester id prevent unrelated channel messages from opting in.\n */\nexport async function setIntegrationAwaitingInput(input: {\n  platform: string;\n  externalThreadId: string;\n  requesterId: string;\n  expiresAt?: number;\n}): Promise<void> {\n  await ensureTable();\n  const requesterId = input.requesterId.trim();\n  if (!requesterId) throw new Error(\"requesterId is required\");\n  const now = Date.now();\n  const expiresAt = input.expiresAt ?? now + INTEGRATION_AWAITING_INPUT_TTL_MS;\n  const client = getDbExec();\n  await client.execute({\n    sql: isPostgres()\n      ? `INSERT INTO integration_awaiting_inputs (platform, external_thread_id, requester_id, expires_at, created_at, updated_at)\n           VALUES (?, ?, ?, ?, ?, ?)\n           ON CONFLICT (platform, external_thread_id) DO UPDATE SET\n             requester_id = EXCLUDED.requester_id,\n             expires_at = EXCLUDED.expires_at,\n             updated_at = EXCLUDED.updated_at`\n      : `INSERT OR REPLACE INTO integration_awaiting_inputs (platform, external_thread_id, requester_id, expires_at, created_at, updated_at)\n           VALUES (?, ?, ?, ?, ?, ?)`,\n    args: [\n      input.platform,\n      input.externalThreadId,\n      requesterId,\n      expiresAt,\n      now,\n      now,\n    ],\n  });\n}\n\n/**\n * Atomically consume the one reply window for this exact requester. Competing\n * Slack deliveries cannot both claim it, and expired rows never authorize a\n * later unmentioned reply.\n */\nexport async function consumeIntegrationAwaitingInput(input: {\n  platform: string;\n  externalThreadId: string;\n  requesterId: string;\n}): Promise<boolean> {\n  await ensureTable();\n  const client = getDbExec();\n  const result = await client.execute({\n    sql: isPostgres()\n      ? `DELETE FROM integration_awaiting_inputs\n           WHERE platform = ?\n             AND external_thread_id = ?\n             AND requester_id = ?\n             AND expires_at > ?\n           RETURNING platform`\n      : `DELETE FROM integration_awaiting_inputs\n           WHERE platform = ?\n             AND external_thread_id = ?\n             AND requester_id = ?\n             AND expires_at > ?`,\n    args: [\n      input.platform,\n      input.externalThreadId,\n      input.requesterId,\n      Date.now(),\n    ],\n  });\n\n  if (isPostgres()) return (result.rows ?? []).length > 0;\n  const affected =\n    (result as { rowsAffected?: number; rowCount?: number }).rowsAffected ??\n    (result as { rowsAffected?: number; rowCount?: number }).rowCount ??\n    0;\n  return affected > 0;\n}\n\n/** Clear any outstanding clarification window once the thread resolves. */\nexport async function clearIntegrationAwaitingInput(\n  platform: string,\n  externalThreadId: string,\n): Promise<void> {\n  await ensureTable();\n  await getDbExec().execute({\n    sql: `DELETE FROM integration_awaiting_inputs WHERE platform = ? AND external_thread_id = ?`,\n    args: [platform, externalThreadId],\n  });\n}\n\nexport function _resetIntegrationAwaitingInputStoreForTests(): void {\n  initPromise = undefined;\n}\n"]}

package/dist/integrations/catalog.d.ts

@@ -0,0 +1,75 @@
+/**
+ * Framework-owned integration taxonomy and metadata.
+ *
+ * This module deliberately describes integrations without implementing them.
+ * Runtime behavior stays in adapters and plugins; consumers must use
+ * availability and support maturity before offering a connection flow.
+ */
+export declare const INTEGRATION_CATEGORIES: readonly ["channel", "provider", "automation", "agent-runtime", "tool-protocol"];
+export type IntegrationCategory = (typeof INTEGRATION_CATEGORIES)[number];
+export type IntegrationAvailability = "available" | "preview" | "planned" | "unavailable";
+export type IntegrationSupportMaturity = "built-in" | "blueprint" | "experimental";
+export type IntegrationIconKey = "slack" | "telegram" | "whatsapp" | "microsoft-teams" | "discord" | "email" | "n8n" | "zapier";
+export interface IntegrationCredentialRequirement {
+    /** Stable runtime key; this is a name only, never a credential value. */
+    readonly key: string;
+    readonly label: string;
+    readonly required: boolean;
+    readonly helpText?: string;
+    /**
+     * Credential groups model alternatives such as Resend or SendGrid. At least
+     * one credential in a group must be configured when `required` is true.
+     */
+    readonly alternativeGroup?: string;
+}
+export interface ChannelCapabilities {
+    readonly inboundText: boolean;
+    readonly replyText: boolean;
+    readonly proactiveMessages: boolean;
+    readonly directMessages?: boolean;
+    readonly mentions?: boolean;
+    readonly nativeThreads?: boolean;
+    readonly contextualReplies?: boolean;
+    readonly interactionOnly?: boolean;
+    readonly webhookSetup?: "automatic" | "manual";
+}
+export interface AutomationCapabilities {
+    /**
+     * `configured-webhook` uses the generic automation runtime after an app
+     * owner supplies a workflow URL and credentials. `blueprint-only` has no
+     * generic execution path in Agent Native.
+     */
+    readonly runtime: "configured-webhook" | "blueprint-only";
+    readonly invokeWorkflow: boolean;
+    readonly receiveCallback: boolean;
+    readonly responseModes: readonly ("synchronous" | "asynchronous")[];
+    readonly idempotency: boolean;
+}
+export interface IntegrationCatalogEntry {
+    readonly id: string;
+    readonly name: string;
+    readonly categories: readonly IntegrationCategory[];
+    readonly availability: IntegrationAvailability;
+    readonly supportMaturity: IntegrationSupportMaturity;
+    /** A semantic key for consumers to map to their own icon library or asset. */
+    readonly iconKey: IntegrationIconKey;
+    readonly description: string;
+    readonly caveats: readonly string[];
+    readonly documentation: {
+        readonly href: string;
+        readonly externalHref?: string;
+        readonly externalLabel?: string;
+    };
+    readonly setup: {
+        readonly steps: readonly string[];
+    };
+    readonly credentialRequirements: readonly IntegrationCredentialRequirement[];
+    readonly channelCapabilities?: ChannelCapabilities;
+    readonly automationCapabilities?: AutomationCapabilities;
+}
+export type BuiltInChannelId = "slack" | "microsoft-teams" | "discord" | "telegram" | "whatsapp" | "email";
+export declare const BUILT_IN_INTEGRATION_CATALOG: readonly IntegrationCatalogEntry[];
+export declare function listIntegrationCatalog(category?: IntegrationCategory): readonly IntegrationCatalogEntry[];
+export declare function getIntegrationCatalogEntry(id: string): IntegrationCatalogEntry | undefined;
+export declare function listBuiltInChannelIntegrations(): readonly IntegrationCatalogEntry[];
+//# sourceMappingURL=catalog.d.ts.map

package/dist/integrations/catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../src/integrations/catalog.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,eAAO,MAAM,sBAAsB,YACjC,SAAS,EACT,UAAU,EACV,YAAY,EACZ,eAAe,EACf,eAAe,CACP,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1E,MAAM,MAAM,uBAAuB,GAC/B,WAAW,GACX,SAAS,GACT,SAAS,GACT,aAAa,CAAC;AAElB,MAAM,MAAM,0BAA0B,GAClC,UAAU,GACV,WAAW,GACX,cAAc,CAAC;AAEnB,MAAM,MAAM,kBAAkB,GAC1B,OAAO,GACP,UAAU,GACV,UAAU,GACV,iBAAiB,GACjB,SAAS,GACT,OAAO,GACP,KAAK,GACL,QAAQ,CAAC;AAEb,MAAM,WAAW,gCAAgC;IAC/C,yEAAyE;IACzE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,YAAY,CAAC,EAAE,WAAW,GAAG,QAAQ,CAAC;CAChD;AAED,MAAM,WAAW,sBAAsB;IACrC;;;;OAIG;IACH,QAAQ,CAAC,OAAO,EAAE,oBAAoB,GAAG,gBAAgB,CAAC;IAC1D,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,aAAa,EAAE,SAAS,CAAC,aAAa,GAAG,cAAc,CAAC,EAAE,CAAC;IACpE,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACpD,QAAQ,CAAC,YAAY,EAAE,uBAAuB,CAAC;IAC/C,QAAQ,CAAC,eAAe,EAAE,0BAA0B,CAAC;IACrD,8EAA8E;IAC9E,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,aAAa,EAAE;QACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;KACjC,CAAC;IACF,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;KACnC,CAAC;IACF,QAAQ,CAAC,sBAAsB,EAAE,SAAS,gCAAgC,EAAE,CAAC;IAC7E,QAAQ,CAAC,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IACnD,QAAQ,CAAC,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;CAC1D;AAED,MAAM,MAAM,gBAAgB,GACxB,OAAO,GACP,iBAAiB,GACjB,SAAS,GACT,UAAU,GACV,UAAU,GACV,OAAO,CAAC;AAwbZ,eAAO,MAAM,4BAA4B,EAAE,SAAS,uBAAuB,EACT,CAAC;AAEnE,wBAAgB,sBAAsB,CACpC,QAAQ,CAAC,EAAE,mBAAmB,GAC7B,SAAS,uBAAuB,EAAE,CAKpC;AAED,wBAAgB,0BAA0B,CACxC,EAAE,EAAE,MAAM,GACT,uBAAuB,GAAG,SAAS,CAErC;AAED,wBAAgB,8BAA8B,IAAI,SAAS,uBAAuB,EAAE,CAMnF"}