@contractspec/integration.runtime 2.10.0 → 3.0.0

package/dist/channel/whatsapp-meta.js

@@ -0,0 +1,66 @@
+// @bun
+// src/channel/whatsapp-meta.ts
+import { createHmac, timingSafeEqual } from "crypto";
+function verifyMetaSignature(input) {
+  if (!input.signatureHeader) {
+    return { valid: false, reason: "missing_signature" };
+  }
+  const expected = `sha256=${createHmac("sha256", input.appSecret).update(input.rawBody).digest("hex")}`;
+  const expectedBuffer = Buffer.from(expected, "utf8");
+  const providedBuffer = Buffer.from(input.signatureHeader, "utf8");
+  if (expectedBuffer.length !== providedBuffer.length) {
+    return { valid: false, reason: "signature_length_mismatch" };
+  }
+  return timingSafeEqual(expectedBuffer, providedBuffer) ? { valid: true } : { valid: false, reason: "signature_mismatch" };
+}
+function parseMetaWebhookPayload(rawBody) {
+  return JSON.parse(rawBody);
+}
+function normalizeMetaWhatsappInboundEvents(input) {
+  const events = [];
+  for (const entry of input.payload.entry ?? []) {
+    for (const change of entry.changes ?? []) {
+      const value = change.value;
+      if (!value)
+        continue;
+      const phoneNumberId = value.metadata?.phone_number_id;
+      for (const message of value.messages ?? []) {
+        const from = message.from;
+        const messageId = message.id;
+        const text = message.text?.body;
+        if (!from || !messageId || !text)
+          continue;
+        const occurredAt = message.timestamp ? new Date(Number(message.timestamp) * 1000) : new Date;
+        events.push({
+          workspaceId: input.workspaceId,
+          providerKey: "messaging.whatsapp.meta",
+          externalEventId: messageId,
+          eventType: "whatsapp.meta.message",
+          occurredAt,
+          signatureValid: input.signatureValid,
+          traceId: input.traceId,
+          rawPayload: input.rawBody,
+          thread: {
+            externalThreadId: from,
+            externalChannelId: phoneNumberId,
+            externalUserId: from
+          },
+          message: {
+            text,
+            externalMessageId: messageId
+          },
+          metadata: {
+            messageType: message.type ?? "text",
+            phoneNumberId: phoneNumberId ?? ""
+          }
+        });
+      }
+    }
+  }
+  return events;
+}
+export {
+  verifyMetaSignature,
+  parseMetaWebhookPayload,
+  normalizeMetaWhatsappInboundEvents
+};

package/dist/channel/whatsapp-meta.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/channel/whatsapp-twilio.d.ts

@@ -0,0 +1,20 @@
+import type { ChannelInboundEvent } from './types';
+export interface TwilioWebhookVerificationInput {
+    authToken: string;
+    signatureHeader: string | null;
+    requestUrl: string;
+    formBody: URLSearchParams;
+}
+export interface TwilioSignatureVerificationResult {
+    valid: boolean;
+    reason?: string;
+}
+export declare function verifyTwilioSignature(input: TwilioWebhookVerificationInput): TwilioSignatureVerificationResult;
+export declare function parseTwilioFormPayload(rawBody: string): URLSearchParams;
+export declare function normalizeTwilioWhatsappInboundEvent(input: {
+    workspaceId: string;
+    formBody: URLSearchParams;
+    signatureValid: boolean;
+    traceId?: string;
+    rawBody?: string;
+}): ChannelInboundEvent | null;

package/dist/channel/whatsapp-twilio.js

@@ -0,0 +1,61 @@
+// @bun
+// src/channel/whatsapp-twilio.ts
+import { createHmac, timingSafeEqual } from "crypto";
+function verifyTwilioSignature(input) {
+  if (!input.signatureHeader) {
+    return { valid: false, reason: "missing_signature" };
+  }
+  const sortedKeys = Array.from(input.formBody.keys()).sort();
+  let payload = input.requestUrl;
+  for (const key of sortedKeys) {
+    const value = input.formBody.get(key) ?? "";
+    payload += `${key}${value}`;
+  }
+  const expected = createHmac("sha1", input.authToken).update(payload).digest("base64");
+  const expectedBuffer = Buffer.from(expected, "utf8");
+  const providedBuffer = Buffer.from(input.signatureHeader, "utf8");
+  if (expectedBuffer.length !== providedBuffer.length) {
+    return { valid: false, reason: "signature_length_mismatch" };
+  }
+  return timingSafeEqual(expectedBuffer, providedBuffer) ? { valid: true } : { valid: false, reason: "signature_mismatch" };
+}
+function parseTwilioFormPayload(rawBody) {
+  return new URLSearchParams(rawBody);
+}
+function normalizeTwilioWhatsappInboundEvent(input) {
+  const messageSid = input.formBody.get("MessageSid");
+  const from = input.formBody.get("From");
+  const to = input.formBody.get("To");
+  const body = input.formBody.get("Body");
+  if (!messageSid || !from || !body) {
+    return null;
+  }
+  return {
+    workspaceId: input.workspaceId,
+    providerKey: "messaging.whatsapp.twilio",
+    externalEventId: messageSid,
+    eventType: "whatsapp.twilio.message",
+    occurredAt: new Date,
+    signatureValid: input.signatureValid,
+    traceId: input.traceId,
+    rawPayload: input.rawBody,
+    thread: {
+      externalThreadId: from,
+      externalChannelId: to ?? undefined,
+      externalUserId: from
+    },
+    message: {
+      text: body,
+      externalMessageId: messageSid
+    },
+    metadata: {
+      accountSid: input.formBody.get("AccountSid") ?? "",
+      profileName: input.formBody.get("ProfileName") ?? ""
+    }
+  };
+}
+export {
+  verifyTwilioSignature,
+  parseTwilioFormPayload,
+  normalizeTwilioWhatsappInboundEvent
+};

package/dist/channel/whatsapp-twilio.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/index.d.ts

@@ -1,3 +1,4 @@
 export * from './runtime';
 export * from './health';
+export * from './channel';
 export * from './secrets';