@hailer/mcp 0.1.16 → 0.1.17

package/dist/mcp/webhook-handler.d.ts

@@ -19,11 +19,11 @@ export declare function verifyWebhookSignature(payload: string, signature: strin
  * Production: WEBHOOK_TOKEN env var (injected by AWS Secrets Manager)
  * Development: Falls back to file-based token for local testing
  */
-export declare function getWebhookToken(): string;
+export declare function getWebhookToken(): string | null;
 /**
  * Get the full webhook path with token (no prefix for security through obscurity)
  */
-export declare function getWebhookPath(): string;
+export declare function getWebhookPath(): string | null;
 interface WebhookField {
     id: string;
     type: string;

package/dist/mcp/webhook-handler.js

@@ -107,9 +107,10 @@ function getWebhookToken() {
         logger.debug('Using webhook token from environment');
         return process.env.WEBHOOK_TOKEN;
     }
-    // Development only: File-based fallback
+    // Production without WEBHOOK_TOKEN: webhooks disabled (optional feature)
     if (process.env.NODE_ENV === 'production') {
-        throw new Error('WEBHOOK_TOKEN environment variable is required in production');
+        logger.info('WEBHOOK_TOKEN not set - webhook endpoint disabled');
+        return null;
     }
     const configDir = path.join(process.cwd(), BOT_CONFIG_DIR);
     const secretPath = path.join(configDir, WEBHOOK_SECRET_FILE);
@@ -140,7 +141,8 @@ function getWebhookToken() {
  * Get the full webhook path with token (no prefix for security through obscurity)
  */
 function getWebhookPath() {
-    return `/${getWebhookToken()}`;
+    const token = getWebhookToken();
+    return token ? `/${token}` : null;
 }
 let botUpdateCallback = null;
 function onBotUpdate(callback) {

package/dist/mcp-server.js

@@ -327,54 +327,59 @@ class MCPServerService {
             }
         });
         // ===== Bot Config Webhook API =====
-        // Get secure webhook path (auto-generated token)
+        // Get secure webhook path (auto-generated token) - null if disabled
         const webhookPath = (0, webhook_handler_1.getWebhookPath)();
-        // POST /webhook/{token} - Receives updates from Hailer workflow webhooks
-        this.app.post(webhookPath, (req, res) => {
-            req.logger.info('Bot config webhook received', {
-                activityId: req.body?._id,
-                activityName: req.body?.name,
-                workspaceId: req.body?.cid,
-            });
-            try {
-                const result = (0, webhook_handler_1.handleBotConfigWebhook)(req.body);
-                if (result.success) {
-                    req.logger.info('Bot config updated via webhook', {
-                        action: result.action,
-                        workspaceId: result.workspaceId,
-                        botType: result.botType,
-                    });
-                    res.status(200).json(result);
+        if (webhookPath) {
+            // POST /webhook/{token} - Receives updates from Hailer workflow webhooks
+            this.app.post(webhookPath, (req, res) => {
+                req.logger.info('Bot config webhook received', {
+                    activityId: req.body?._id,
+                    activityName: req.body?.name,
+                    workspaceId: req.body?.cid,
+                });
+                try {
+                    const result = (0, webhook_handler_1.handleBotConfigWebhook)(req.body);
+                    if (result.success) {
+                        req.logger.info('Bot config updated via webhook', {
+                            action: result.action,
+                            workspaceId: result.workspaceId,
+                            botType: result.botType,
+                        });
+                        res.status(200).json(result);
+                    }
+                    else {
+                        req.logger.warn('Bot config webhook failed', { error: result.error });
+                        res.status(400).json(result);
+                    }
                 }
-                else {
-                    req.logger.warn('Bot config webhook failed', { error: result.error });
-                    res.status(400).json(result);
+                catch (error) {
+                    req.logger.error('Bot config webhook error', { error });
+                    res.status(500).json({
+                        success: false,
+                        error: error instanceof Error ? error.message : 'Internal error',
+                    });
                 }
-            }
-            catch (error) {
-                req.logger.error('Bot config webhook error', { error });
-                res.status(500).json({
-                    success: false,
-                    error: error instanceof Error ? error.message : 'Internal error',
+            });
+            // GET /webhook/{token}/status - Status endpoint to see all workspace configs
+            this.app.get(`${webhookPath}/status`, (_req, res) => {
+                const configs = (0, webhook_handler_1.listWorkspaceConfigs)();
+                res.json({
+                    timestamp: new Date().toISOString(),
+                    workspaceCount: configs.length,
+                    workspaces: configs.map((c) => ({
+                        workspaceId: c.workspaceId,
+                        workspaceName: c.workspaceName,
+                        hasOrchestrator: !!c.orchestrator,
+                        specialistCount: c.specialists.length,
+                        enabledSpecialists: c.specialists.filter((s) => s.enabled).length,
+                        lastSynced: c.lastSynced,
+                    })),
                 });
-            }
-        });
-        // GET /webhook/{token}/status - Status endpoint to see all workspace configs
-        this.app.get(`${webhookPath}/status`, (_req, res) => {
-            const configs = (0, webhook_handler_1.listWorkspaceConfigs)();
-            res.json({
-                timestamp: new Date().toISOString(),
-                workspaceCount: configs.length,
-                workspaces: configs.map((c) => ({
-                    workspaceId: c.workspaceId,
-                    workspaceName: c.workspaceName,
-                    hasOrchestrator: !!c.orchestrator,
-                    specialistCount: c.specialists.length,
-                    enabledSpecialists: c.specialists.filter((s) => s.enabled).length,
-                    lastSynced: c.lastSynced,
-                })),
             });
-        });
+        }
+        else {
+            this.logger.info('Webhook endpoint disabled (no WEBHOOK_TOKEN)');
+        }
         this.logger.debug('Routes configured', {
             routes: [
                 '/health',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hailer/mcp",
-  "version": "0.1.16",
+  "version": "0.1.17",
   "config": {
     "docker": {
       "registry": "registry.gitlab.com/hailer-repos/hailer-mcp"