@channel.io/app-sdk-server 0.1.0

package/dist/discovery/extension-discovery.service.js

@@ -0,0 +1,192 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var ExtensionDiscoveryService_1;
+import { Injectable, Logger } from "@nestjs/common";
+import { DiscoveryService, Reflector } from "@nestjs/core";
+import { zodToJsonSchema } from "zod-to-json-schema";
+import { EXTENSION_METADATA, FUNCTION_METADATA, FUNCTIONS_METADATA, INPUT_SCHEMA_METADATA, OUTPUT_SCHEMA_METADATA, DESCRIPTION_METADATA, PARAM_METADATA, FunctionParamType, } from "../decorators/index.js";
+let ExtensionDiscoveryService = ExtensionDiscoveryService_1 = class ExtensionDiscoveryService {
+    discoveryService;
+    reflector;
+    logger = new Logger(ExtensionDiscoveryService_1.name);
+    extensions = new Map();
+    functionRegistry = new Map();
+    constructor(discoveryService, reflector) {
+        this.discoveryService = discoveryService;
+        this.reflector = reflector;
+    }
+    onModuleInit() {
+        this.discoverExtensions();
+    }
+    /**
+     * Discover all @Extension decorated classes
+     */
+    discoverExtensions() {
+        const providers = this.discoveryService.getProviders();
+        for (const wrapper of providers) {
+            const { instance, metatype } = wrapper;
+            // eslint-disable-next-line @typescript-eslint/no-unnecessary-condition
+            if (!instance || !metatype)
+                continue;
+            const extensionMeta = this.reflector.get(EXTENSION_METADATA, metatype);
+            if (!extensionMeta)
+                continue;
+            this.logger.log(`Discovered extension: ${extensionMeta.name}`);
+            // Discover functions on this extension
+            const functions = this.discoverFunctions(instance, metatype, extensionMeta.name);
+            const metadata = {
+                name: extensionMeta.name,
+                systemVersion: extensionMeta.systemVersion ?? "v1",
+                exclusive: extensionMeta.exclusive ?? false,
+                description: extensionMeta.description,
+                instance,
+                functions,
+            };
+            this.extensions.set(extensionMeta.name, metadata);
+            // Register functions globally for routing
+            for (const func of functions) {
+                this.functionRegistry.set(func.fullName, func);
+                this.logger.debug(`Registered function: ${func.fullName}`);
+            }
+        }
+    }
+    /**
+     * Discover @Function decorated methods on an extension class
+     */
+    discoverFunctions(instance, metatype, extensionName) {
+        const functionKeys = Reflect.getMetadata(FUNCTIONS_METADATA, metatype) ?? [];
+        const results = [];
+        for (const methodName of functionKeys) {
+            const funcMeta = Reflect.getMetadata(FUNCTION_METADATA, metatype, methodName);
+            if (!funcMeta)
+                continue;
+            // Get schema metadata
+            const inputSchema = Reflect.getMetadata(INPUT_SCHEMA_METADATA, metatype, methodName);
+            const outputSchema = Reflect.getMetadata(OUTPUT_SCHEMA_METADATA, metatype, methodName);
+            const description = Reflect.getMetadata(DESCRIPTION_METADATA, metatype, methodName) ?? funcMeta.description;
+            // Get parameter metadata for injection
+            const paramMeta = Reflect.getMetadata(PARAM_METADATA, metatype, methodName) ?? [];
+            // Build full method name for routing
+            const fullName = `extension.${extensionName}.${funcMeta.name}`;
+            // Convert schemas to JSON Schema
+            const inputJsonSchema = inputSchema
+                ? zodToJsonSchema(inputSchema, { $refStrategy: "none" })
+                : undefined;
+            const outputJsonSchema = outputSchema
+                ? zodToJsonSchema(outputSchema, { $refStrategy: "none" })
+                : undefined;
+            // Create bound handler with parameter injection
+            const handler = this.createHandler(instance, methodName, paramMeta, inputSchema, outputSchema);
+            const funcMetadata = {
+                name: funcMeta.name,
+                fullName,
+                methodName,
+                handler,
+            };
+            if (description) {
+                funcMetadata.description = description;
+            }
+            if (inputSchema) {
+                funcMetadata.inputSchema = inputSchema;
+            }
+            if (outputSchema) {
+                funcMetadata.outputSchema = outputSchema;
+            }
+            if (inputJsonSchema) {
+                funcMetadata.inputJsonSchema = inputJsonSchema;
+            }
+            if (outputJsonSchema) {
+                funcMetadata.outputJsonSchema = outputJsonSchema;
+            }
+            results.push(funcMetadata);
+        }
+        return results;
+    }
+    /**
+     * Create a handler function with parameter injection and validation
+     */
+    createHandler(instance, methodName, paramMeta, inputSchema, outputSchema) {
+        const method = instance[methodName];
+        return async (ctx, params) => {
+            // Validate input if schema is defined
+            let validatedParams = params;
+            if (inputSchema) {
+                validatedParams = inputSchema.parse(params);
+            }
+            // Build arguments based on parameter decorators
+            const args = [];
+            // Sort by index to maintain order
+            const sortedParams = [...paramMeta].sort((a, b) => a.index - b.index);
+            for (const param of sortedParams) {
+                switch (param.type) {
+                    case FunctionParamType.CTX:
+                        args[param.index] = ctx;
+                        break;
+                    case FunctionParamType.INPUT:
+                        args[param.index] = validatedParams;
+                        break;
+                    case FunctionParamType.BODY:
+                        args[param.index] = { context: ctx, params: validatedParams };
+                        break;
+                }
+            }
+            // If no parameter decorators, use default order: (ctx, params)
+            if (sortedParams.length === 0) {
+                args.push(ctx, validatedParams);
+            }
+            // Call the method
+            const result = await method.apply(instance, args);
+            // Validate output if schema is defined
+            if (outputSchema) {
+                // eslint-disable-next-line @typescript-eslint/no-unsafe-return
+                return outputSchema.parse(result);
+            }
+            // eslint-disable-next-line @typescript-eslint/no-unsafe-return
+            return result;
+        };
+    }
+    /**
+     * Get all discovered extensions
+     */
+    getExtensions() {
+        return Array.from(this.extensions.values());
+    }
+    /**
+     * Get a specific extension by name
+     */
+    getExtension(name) {
+        return this.extensions.get(name);
+    }
+    /**
+     * Get a function by its full name (e.g., "extension.calendar.getAvailability")
+     */
+    getFunction(fullName) {
+        return this.functionRegistry.get(fullName);
+    }
+    /**
+     * Get all registered functions
+     */
+    getAllFunctions() {
+        return Array.from(this.functionRegistry.values());
+    }
+    /**
+     * Check if any extensions are registered
+     */
+    hasExtensions() {
+        return this.extensions.size > 0;
+    }
+};
+ExtensionDiscoveryService = ExtensionDiscoveryService_1 = __decorate([
+    Injectable(),
+    __metadata("design:paramtypes", [DiscoveryService,
+        Reflector])
+], ExtensionDiscoveryService);
+export { ExtensionDiscoveryService };
+//# sourceMappingURL=extension-discovery.service.js.map

package/dist/discovery/extension-discovery.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension-discovery.service.js","sourceRoot":"","sources":["../../src/discovery/extension-discovery.service.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,OAAO,EAAE,UAAU,EAAqB,MAAM,EAAa,MAAM,gBAAgB,CAAC;AAClF,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,cAAc,EACd,iBAAiB,GAGlB,MAAM,wBAAwB,CAAC;AAIzB,IAAM,yBAAyB,iCAA/B,MAAM,yBAAyB;IAMjB;IACA;IANF,MAAM,GAAG,IAAI,MAAM,CAAC,2BAAyB,CAAC,IAAI,CAAC,CAAC;IACpD,UAAU,GAAG,IAAI,GAAG,EAA6B,CAAC;IAClD,gBAAgB,GAAG,IAAI,GAAG,EAA4B,CAAC;IAExE,YACmB,gBAAkC,EAClC,SAAoB;QADpB,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,cAAS,GAAT,SAAS,CAAW;IACpC,CAAC;IAEJ,YAAY;QACV,IAAI,CAAC,kBAAkB,EAAE,CAAC;IAC5B,CAAC;IAED;;OAEG;IACK,kBAAkB;QACxB,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,YAAY,EAAE,CAAC;QAEvD,KAAK,MAAM,OAAO,IAAI,SAAS,EAAE,CAAC;YAChC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;YACvC,uEAAuE;YACvE,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ;gBAAE,SAAS;YAErC,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;YACvE,IAAI,CAAC,aAAa;gBAAE,SAAS;YAE7B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,yBAAyB,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC;YAE/D,uCAAuC;YACvC,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,QAAgB,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC;YAEzF,MAAM,QAAQ,GAAsB;gBAClC,IAAI,EAAE,aAAa,CAAC,IAAI;gBACxB,aAAa,EAAE,aAAa,CAAC,aAAa,IAAI,IAAI;gBAClD,SAAS,EAAE,aAAa,CAAC,SAAS,IAAI,KAAK;gBAC3C,WAAW,EAAE,aAAa,CAAC,WAAW;gBACtC,QAAQ;gBACR,SAAS;aACV,CAAC;YAEF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAElD,0CAA0C;YAC1C,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;gBAC7B,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;gBAC/C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACK,iBAAiB,CACvB,QAAiB,EACjB,QAAc,EACd,aAAqB;QAErB,MAAM,YAAY,GAChB,OAAO,CAAC,WAAW,CAAC,kBAAkB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;QAE1D,MAAM,OAAO,GAAuB,EAAE,CAAC;QAEvC,KAAK,MAAM,UAAU,IAAI,YAAY,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAsC,OAAO,CAAC,WAAW,CACrE,iBAAiB,EACjB,QAAQ,EACR,UAAU,CACX,CAAC;YAEF,IAAI,CAAC,QAAQ;gBAAE,SAAS;YAExB,sBAAsB;YACtB,MAAM,WAAW,GAA4B,OAAO,CAAC,WAAW,CAC9D,qBAAqB,EACrB,QAAQ,EACR,UAAU,CACX,CAAC;YACF,MAAM,YAAY,GAA4B,OAAO,CAAC,WAAW,CAC/D,sBAAsB,EACtB,QAAQ,EACR,UAAU,CACX,CAAC;YACF,MAAM,WAAW,GACf,OAAO,CAAC,WAAW,CAAC,oBAAoB,EAAE,QAAQ,EAAE,UAAU,CAAC,IAAI,QAAQ,CAAC,WAAW,CAAC;YAE1F,uCAAuC;YACvC,MAAM,SAAS,GACb,OAAO,CAAC,WAAW,CAAC,cAAc,EAAE,QAAQ,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;YAElE,qCAAqC;YACrC,MAAM,QAAQ,GAAG,aAAa,aAAa,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;YAE/D,iCAAiC;YACjC,MAAM,eAAe,GAAG,WAAW;gBACjC,CAAC,CAAE,eAAe,CAAC,WAAW,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,CAA6B;gBACrF,CAAC,CAAC,SAAS,CAAC;YACd,MAAM,gBAAgB,GAAG,YAAY;gBACnC,CAAC,CAAE,eAAe,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,CAA6B;gBACtF,CAAC,CAAC,SAAS,CAAC;YAEd,gDAAgD;YAChD,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAChC,QAAQ,EACR,UAAU,EACV,SAAS,EACT,WAAW,EACX,YAAY,CACb,CAAC;YAEF,MAAM,YAAY,GAAqB;gBACrC,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,QAAQ;gBACR,UAAU;gBACV,OAAO;aACR,CAAC;YAEF,IAAI,WAAW,EAAE,CAAC;gBAChB,YAAY,CAAC,WAAW,GAAG,WAAW,CAAC;YACzC,CAAC;YACD,IAAI,WAAW,EAAE,CAAC;gBAChB,YAAY,CAAC,WAAW,GAAG,WAAW,CAAC;YACzC,CAAC;YACD,IAAI,YAAY,EAAE,CAAC;gBACjB,YAAY,CAAC,YAAY,GAAG,YAAY,CAAC;YAC3C,CAAC;YACD,IAAI,eAAe,EAAE,CAAC;gBACpB,YAAY,CAAC,eAAe,GAAG,eAAe,CAAC;YACjD,CAAC;YACD,IAAI,gBAAgB,EAAE,CAAC;gBACrB,YAAY,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;YACnD,CAAC;YAED,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC7B,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,aAAa,CACnB,QAAiB,EACjB,UAA2B,EAC3B,SAAkC,EAClC,WAAyB,EACzB,YAA0B;QAE1B,MAAM,MAAM,GAAI,QAA6C,CAAC,UAAU,CAEnD,CAAC;QAEtB,OAAO,KAAK,EAAE,GAAY,EAAE,MAAe,EAAE,EAAE;YAC7C,sCAAsC;YACtC,IAAI,eAAe,GAAG,MAAM,CAAC;YAC7B,IAAI,WAAW,EAAE,CAAC;gBAChB,eAAe,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC9C,CAAC;YAED,gDAAgD;YAChD,MAAM,IAAI,GAAc,EAAE,CAAC;YAE3B,kCAAkC;YAClC,MAAM,YAAY,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;YAEtE,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;gBACjC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;oBACnB,KAAK,iBAAiB,CAAC,GAAG;wBACxB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC;wBACxB,MAAM;oBACR,KAAK,iBAAiB,CAAC,KAAK;wBAC1B,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,eAAe,CAAC;wBACpC,MAAM;oBACR,KAAK,iBAAiB,CAAC,IAAI;wBACzB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;wBAC9D,MAAM;gBACV,CAAC;YACH,CAAC;YAED,+DAA+D;YAC/D,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC9B,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;YAClC,CAAC;YAED,kBAAkB;YAClB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAElD,uCAAuC;YACvC,IAAI,YAAY,EAAE,CAAC;gBACjB,+DAA+D;gBAC/D,OAAO,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACpC,CAAC;YAED,+DAA+D;YAC/D,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,aAAa;QACX,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,IAAY;QACvB,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,QAAgB;QAC1B,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,eAAe;QACb,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,aAAa;QACX,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,CAAC;IAClC,CAAC;CACF,CAAA;AA3OY,yBAAyB;IADrC,UAAU,EAAE;qCAO0B,gBAAgB;QACvB,SAAS;GAP5B,yBAAyB,CA2OrC"}

package/dist/discovery/index.d.ts

@@ -0,0 +1,3 @@
+export { ExtensionDiscoveryService } from "./extension-discovery.service.js";
+export type { ExtensionMetadata, FunctionMetadata } from "./metadata.interface.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/discovery/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/discovery/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAC7E,YAAY,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/discovery/index.js

@@ -0,0 +1,2 @@
+export { ExtensionDiscoveryService } from "./extension-discovery.service.js";
+//# sourceMappingURL=index.js.map

package/dist/discovery/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/discovery/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC"}

package/dist/discovery/metadata.interface.d.ts

@@ -0,0 +1,42 @@
+import type { z } from "zod";
+/**
+ * Metadata for a discovered extension
+ */
+export interface ExtensionMetadata {
+    /** Extension name */
+    name: string;
+    /** System version (e.g., "v1") */
+    systemVersion: string;
+    /** Whether this is an exclusive extension */
+    exclusive: boolean;
+    /** Extension description */
+    description?: string;
+    /** Class instance */
+    instance: unknown;
+    /** Discovered functions */
+    functions: FunctionMetadata[];
+}
+/**
+ * Metadata for a discovered function
+ */
+export interface FunctionMetadata {
+    /** Function name (e.g., "getAvailability" or "booking.create") */
+    name: string;
+    /** Full method name for routing (e.g., "extension.calendar.getAvailability") */
+    fullName: string;
+    /** Method name on the class */
+    methodName: string | symbol;
+    /** Function description */
+    description?: string;
+    /** Input schema (Zod) */
+    inputSchema?: z.ZodSchema;
+    /** Output schema (Zod) */
+    outputSchema?: z.ZodSchema;
+    /** JSON Schema for input */
+    inputJsonSchema?: Record<string, unknown>;
+    /** JSON Schema for output */
+    outputJsonSchema?: Record<string, unknown>;
+    /** Bound handler function */
+    handler: (ctx: unknown, params: unknown) => Promise<unknown>;
+}
+//# sourceMappingURL=metadata.interface.d.ts.map

package/dist/discovery/metadata.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metadata.interface.d.ts","sourceRoot":"","sources":["../../src/discovery/metadata.interface.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAE7B;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,qBAAqB;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,kCAAkC;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB,6CAA6C;IAC7C,SAAS,EAAE,OAAO,CAAC;IACnB,4BAA4B;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qBAAqB;IACrB,QAAQ,EAAE,OAAO,CAAC;IAClB,2BAA2B;IAC3B,SAAS,EAAE,gBAAgB,EAAE,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,kEAAkE;IAClE,IAAI,EAAE,MAAM,CAAC;IACb,gFAAgF;IAChF,QAAQ,EAAE,MAAM,CAAC;IACjB,+BAA+B;IAC/B,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,2BAA2B;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yBAAyB;IACzB,WAAW,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC;IAC1B,0BAA0B;IAC1B,YAAY,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC;IAC3B,4BAA4B;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,6BAA6B;IAC7B,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C,6BAA6B;IAC7B,OAAO,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC9D"}

package/dist/discovery/metadata.interface.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=metadata.interface.js.map

package/dist/discovery/metadata.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metadata.interface.js","sourceRoot":"","sources":["../../src/discovery/metadata.interface.ts"],"names":[],"mappings":""}

package/dist/guards/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./signature.guard.js";
+export * from "./signature.middleware.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/guards/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/guards/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC"}

package/dist/guards/index.js

@@ -0,0 +1,3 @@
+export * from "./signature.guard.js";
+export * from "./signature.middleware.js";
+//# sourceMappingURL=index.js.map

package/dist/guards/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/guards/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC"}

package/dist/guards/signature.guard.d.ts

@@ -0,0 +1,65 @@
+import { CanActivate, ExecutionContext, type Type } from "@nestjs/common";
+import { type ChannelAppModuleOptions } from "../nestjs/types.js";
+/**
+ * Header name for the signature
+ */
+export declare const SIGNATURE_HEADER = "x-signature";
+/**
+ * Verify HMAC-SHA256 signature from ch-app-store
+ *
+ * Algorithm:
+ * 1. Decode signing key from hex format
+ * 2. Create HMAC-SHA256 hash of the raw request body
+ * 3. Encode result as Base64
+ * 4. Compare with X-Signature header using timing-safe comparison
+ *
+ * @param signature The X-Signature header value
+ * @param signingKey The hex-encoded signing key (from app secret or dedicated signing key)
+ * @param body Raw request body bytes
+ * @returns true if signature is valid
+ */
+export declare function verifySignature(signature: string, signingKey: string, body: Buffer): boolean;
+/**
+ * NestJS Guard for verifying X-Signature header from ch-app-store
+ *
+ * This guard verifies that incoming requests are authentically from ch-app-store
+ * by validating the HMAC-SHA256 signature in the X-Signature header.
+ *
+ * @example
+ * ```typescript
+ * // Apply to a specific controller
+ * @UseGuards(SignatureGuard)
+ * @Controller('functions')
+ * export class FunctionsController { ... }
+ *
+ * // Or apply globally in module
+ * @Module({
+ *   providers: [
+ *     { provide: APP_GUARD, useClass: SignatureGuard },
+ *   ],
+ * })
+ * export class AppModule {}
+ * ```
+ *
+ * IMPORTANT: For this guard to work, you must configure raw body parsing:
+ * ```typescript
+ * // main.ts
+ * app.useBodyParser('raw', { type: 'application/json' });
+ * ```
+ *
+ * Or use the `SignatureMiddleware` which handles body buffering automatically.
+ */
+export declare class SignatureGuard implements CanActivate {
+    private readonly options;
+    private readonly logger;
+    constructor(options: ChannelAppModuleOptions);
+    canActivate(context: ExecutionContext): boolean;
+}
+/**
+ * Factory function to create SignatureGuard with custom options
+ * Useful when you need to customize the guard behavior
+ */
+export declare function createSignatureGuard(options?: {
+    skipForRoutes?: string[];
+}): Type<CanActivate>;
+//# sourceMappingURL=signature.guard.d.ts.map

package/dist/guards/signature.guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.guard.d.ts","sourceRoot":"","sources":["../../src/guards/signature.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,WAAW,EACX,gBAAgB,EAIhB,KAAK,IAAI,EACV,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAuB,KAAK,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAEvF;;GAEG;AACH,eAAO,MAAM,gBAAgB,gBAAgB,CAAC;AAE9C;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAyB5F;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,qBACa,cAAe,YAAW,WAAW;IAK9C,OAAO,CAAC,QAAQ,CAAC,OAAO;IAJ1B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmC;gBAIvC,OAAO,EAAE,uBAAuB;IAGnD,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO;CA0ChD;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,IAAI,CAAC,WAAW,CAAC,CAiB9F"}

package/dist/guards/signature.guard.js

@@ -0,0 +1,156 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var SignatureGuard_1;
+import { Injectable, UnauthorizedException, Logger, Inject, } from "@nestjs/common";
+import { createHmac, timingSafeEqual } from "crypto";
+import { CHANNEL_APP_OPTIONS } from "../nestjs/types.js";
+/**
+ * Header name for the signature
+ */
+export const SIGNATURE_HEADER = "x-signature";
+/**
+ * Verify HMAC-SHA256 signature from ch-app-store
+ *
+ * Algorithm:
+ * 1. Decode signing key from hex format
+ * 2. Create HMAC-SHA256 hash of the raw request body
+ * 3. Encode result as Base64
+ * 4. Compare with X-Signature header using timing-safe comparison
+ *
+ * @param signature The X-Signature header value
+ * @param signingKey The hex-encoded signing key (from app secret or dedicated signing key)
+ * @param body Raw request body bytes
+ * @returns true if signature is valid
+ */
+export function verifySignature(signature, signingKey, body) {
+    try {
+        // Decode the signing key from hex format
+        const keyBuffer = Buffer.from(signingKey, "hex");
+        // Create HMAC-SHA256 hash
+        const hmac = createHmac("sha256", keyBuffer);
+        hmac.update(body);
+        // Get Base64 encoded signature
+        const computedSignature = hmac.digest("base64");
+        // Use timing-safe comparison to prevent timing attacks
+        const signatureBuffer = Buffer.from(signature, "utf-8");
+        const computedBuffer = Buffer.from(computedSignature, "utf-8");
+        // Buffers must be same length for timingSafeEqual
+        if (signatureBuffer.length !== computedBuffer.length) {
+            return false;
+        }
+        return timingSafeEqual(signatureBuffer, computedBuffer);
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * NestJS Guard for verifying X-Signature header from ch-app-store
+ *
+ * This guard verifies that incoming requests are authentically from ch-app-store
+ * by validating the HMAC-SHA256 signature in the X-Signature header.
+ *
+ * @example
+ * ```typescript
+ * // Apply to a specific controller
+ * @UseGuards(SignatureGuard)
+ * @Controller('functions')
+ * export class FunctionsController { ... }
+ *
+ * // Or apply globally in module
+ * @Module({
+ *   providers: [
+ *     { provide: APP_GUARD, useClass: SignatureGuard },
+ *   ],
+ * })
+ * export class AppModule {}
+ * ```
+ *
+ * IMPORTANT: For this guard to work, you must configure raw body parsing:
+ * ```typescript
+ * // main.ts
+ * app.useBodyParser('raw', { type: 'application/json' });
+ * ```
+ *
+ * Or use the `SignatureMiddleware` which handles body buffering automatically.
+ */
+let SignatureGuard = SignatureGuard_1 = class SignatureGuard {
+    options;
+    logger = new Logger(SignatureGuard_1.name);
+    constructor(options) {
+        this.options = options;
+    }
+    canActivate(context) {
+        // Skip if signature verification is disabled
+        if (this.options.skipSignatureVerification) {
+            return true;
+        }
+        const request = context.switchToHttp().getRequest();
+        const signature = request.headers[SIGNATURE_HEADER];
+        if (!signature) {
+            this.logger.warn("Missing X-Signature header");
+            throw new UnauthorizedException("Missing X-Signature header");
+        }
+        // Get the signing key (use signingKey if provided, otherwise derive from appSecret)
+        const signingKey = this.options.signingKey ?? this.options.appSecret;
+        if (!signingKey) {
+            this.logger.error("No signing key configured");
+            throw new UnauthorizedException("Signature verification not configured");
+        }
+        // Get raw body - requires raw body middleware
+        const rawBody = request.rawBody;
+        if (!rawBody) {
+            this.logger.error("Raw body not available. Ensure raw body middleware is configured.");
+            throw new UnauthorizedException("Cannot verify signature - raw body not available");
+        }
+        const isValid = verifySignature(signature, signingKey, rawBody);
+        if (!isValid) {
+            this.logger.warn("Invalid signature");
+            throw new UnauthorizedException("Invalid signature");
+        }
+        if (this.options.debug) {
+            this.logger.debug("Signature verified successfully");
+        }
+        return true;
+    }
+};
+SignatureGuard = SignatureGuard_1 = __decorate([
+    Injectable(),
+    __param(0, Inject(CHANNEL_APP_OPTIONS)),
+    __metadata("design:paramtypes", [Object])
+], SignatureGuard);
+export { SignatureGuard };
+/**
+ * Factory function to create SignatureGuard with custom options
+ * Useful when you need to customize the guard behavior
+ */
+export function createSignatureGuard(options) {
+    let ConfigurableSignatureGuard = class ConfigurableSignatureGuard extends SignatureGuard {
+        canActivate(context) {
+            // Check if route should be skipped
+            if (options?.skipForRoutes) {
+                const request = context.switchToHttp().getRequest();
+                const path = request.path || request.url;
+                if (options.skipForRoutes.some((route) => path.startsWith(route))) {
+                    return true;
+                }
+            }
+            return super.canActivate(context);
+        }
+    };
+    ConfigurableSignatureGuard = __decorate([
+        Injectable()
+    ], ConfigurableSignatureGuard);
+    return ConfigurableSignatureGuard;
+}
+//# sourceMappingURL=signature.guard.js.map

package/dist/guards/signature.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.guard.js","sourceRoot":"","sources":["../../src/guards/signature.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,OAAO,EACL,UAAU,EAGV,qBAAqB,EACrB,MAAM,EACN,MAAM,GAEP,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAgC,MAAM,oBAAoB,CAAC;AAEvF;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,aAAa,CAAC;AAE9C;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,eAAe,CAAC,SAAiB,EAAE,UAAkB,EAAE,IAAY;IACjF,IAAI,CAAC;QACH,yCAAyC;QACzC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAEjD,0BAA0B;QAC1B,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAElB,+BAA+B;QAC/B,MAAM,iBAAiB,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAEhD,uDAAuD;QACvD,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACxD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;QAE/D,kDAAkD;QAClD,IAAI,eAAe,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM,EAAE,CAAC;YACrD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,eAAe,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEI,IAAM,cAAc,sBAApB,MAAM,cAAc;IAKN;IAJF,MAAM,GAAG,IAAI,MAAM,CAAC,gBAAc,CAAC,IAAI,CAAC,CAAC;IAE1D,YAEmB,OAAgC;QAAhC,YAAO,GAAP,OAAO,CAAyB;IAChD,CAAC;IAEJ,WAAW,CAAC,OAAyB;QACnC,6CAA6C;QAC7C,IAAI,IAAI,CAAC,OAAO,CAAC,yBAAyB,EAAE,CAAC;YAC3C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;QACpD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAEpD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YAC/C,MAAM,IAAI,qBAAqB,CAAC,4BAA4B,CAAC,CAAC;QAChE,CAAC;QAED,oFAAoF;QACpF,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QAErE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC/C,MAAM,IAAI,qBAAqB,CAAC,uCAAuC,CAAC,CAAC;QAC3E,CAAC;QAED,8CAA8C;QAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mEAAmE,CAAC,CAAC;YACvF,MAAM,IAAI,qBAAqB,CAAC,kDAAkD,CAAC,CAAC;QACtF,CAAC;QAED,MAAM,OAAO,GAAG,eAAe,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QAEhE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YACtC,MAAM,IAAI,qBAAqB,CAAC,mBAAmB,CAAC,CAAC;QACvD,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACvB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACvD,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AAlDY,cAAc;IAD1B,UAAU,EAAE;IAKR,WAAA,MAAM,CAAC,mBAAmB,CAAC,CAAA;;GAJnB,cAAc,CAkD1B;;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAsC;IAEzE,IAAM,0BAA0B,GAAhC,MAAM,0BAA2B,SAAQ,cAAc;QAC5C,WAAW,CAAC,OAAyB;YAC5C,mCAAmC;YACnC,IAAI,OAAO,EAAE,aAAa,EAAE,CAAC;gBAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;gBACpD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC;gBACzC,IAAI,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;oBAClE,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YACD,OAAO,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;KACF,CAAA;IAZK,0BAA0B;QAD/B,UAAU,EAAE;OACP,0BAA0B,CAY/B;IAED,OAAO,0BAA0B,CAAC;AACpC,CAAC"}

package/dist/guards/signature.middleware.d.ts

@@ -0,0 +1,76 @@
+import { type NestMiddleware } from "@nestjs/common";
+import type { Request, Response, NextFunction } from "express";
+/**
+ * Extend Express Request to include rawBody
+ */
+declare global {
+    namespace Express {
+        interface Request {
+            rawBody?: Buffer;
+        }
+    }
+}
+/**
+ * Middleware to capture raw request body for signature verification
+ *
+ * This middleware reads the raw body and stores it in `request.rawBody`
+ * while still allowing the body to be parsed by subsequent middlewares.
+ *
+ * @example
+ * ```typescript
+ * // Apply in NestJS module
+ * export class AppModule implements NestModule {
+ *   configure(consumer: MiddlewareConsumer) {
+ *     consumer
+ *       .apply(SignatureMiddleware)
+ *       .forRoutes('functions');
+ *   }
+ * }
+ * ```
+ *
+ * Or configure globally in main.ts:
+ * ```typescript
+ * // main.ts - Alternative approach with express
+ * import express from 'express';
+ *
+ * app.use(express.json({
+ *   verify: (req, res, buf) => {
+ *     req.rawBody = buf;
+ *   },
+ * }));
+ * ```
+ */
+export declare class SignatureMiddleware implements NestMiddleware {
+    use(req: Request, _res: Response, next: NextFunction): void;
+}
+/**
+ * Express middleware function for raw body capture
+ * Use this if you prefer a function-based middleware
+ *
+ * @example
+ * ```typescript
+ * // main.ts
+ * app.use('/functions', rawBodyMiddleware);
+ * ```
+ */
+export declare function rawBodyMiddleware(req: Request, _res: Response, next: NextFunction): void;
+/**
+ * Create express.json() options with raw body capture
+ * This is the recommended approach for signature verification
+ *
+ * @example
+ * ```typescript
+ * // main.ts
+ * import express from 'express';
+ *
+ * const app = await NestFactory.create(AppModule, {
+ *   bodyParser: false, // Disable default body parser
+ * });
+ *
+ * app.use(express.json(jsonWithRawBody()));
+ * ```
+ */
+export declare function jsonWithRawBody(): {
+    verify: (req: Request, res: Response, buf: Buffer) => void;
+};
+//# sourceMappingURL=signature.middleware.d.ts.map

package/dist/guards/signature.middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.middleware.d.ts","sourceRoot":"","sources":["../../src/guards/signature.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACjE,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAE/D;;GAEG;AACH,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,OAAO,CAAC;QAChB,UAAU,OAAO;YACf,OAAO,CAAC,EAAE,MAAM,CAAC;SAClB;KACF;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,qBACa,mBAAoB,YAAW,cAAc;IACxD,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,IAAI;CAqB5D;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,IAAI,CAmBxF;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,eAAe,IAAI;IACjC,MAAM,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC5D,CAMA"}