@openclaw/crabline 0.1.9 → 0.1.11

package/dist/src/providers/builtin/discord.js

@@ -1,8 +1,11 @@
+import { createPublicKey, verify } from "node:crypto";
 import path from "node:path";
 import { CrablineError } from "../../core/errors.js";
 import { LocalMockProviderAdapter } from "../local-mock.js";
-import { authorFromBotFlag, createNativeTargetCodec, genericMockPayloadWithNativeThread, isRecord, optionalRecord, optionalString, requireNativeInboundId, } from "./native-local-mock.js";
-export async function resolveDiscordAdapterConfig(config, userName, env = process.env) {
+import { DISCORD_SNOWFLAKE_RULE, getBuiltinTargetCodec } from "../target-normalizers.js";
+import { authorFromBotFlag, genericMockPayloadWithNativeThread, isRecord, optionalRecord, optionalString, requireNativeInboundId, } from "./native-local-mock.js";
+import { requireExternalWebhookAuthentication } from "./external-webhook-auth.js";
+function resolveDiscordAdapterConfigValue(config, userName, env = process.env) {
     return {
         ...((config.discord?.applicationId ?? env.DISCORD_APPLICATION_ID)
             ? { applicationId: config.discord?.applicationId ?? env.DISCORD_APPLICATION_ID }
@@ -19,28 +22,108 @@ export async function resolveDiscordAdapterConfig(config, userName, env = proces
         userName,
     };
 }
+export async function resolveDiscordAdapterConfig(config, userName, env = process.env) {
+    return resolveDiscordAdapterConfigValue(config, userName, env);
+}
+function discordPublicKey(value) {
+    if (!/^[0-9a-f]{64}$/iu.test(value)) {
+        throw new CrablineError("Discord publicKey must be a 32-byte hexadecimal Ed25519 key.", {
+            kind: "config",
+        });
+    }
+    return createPublicKey({
+        format: "der",
+        key: Buffer.concat([Buffer.from("302a300506032b6570032100", "hex"), Buffer.from(value, "hex")]),
+        type: "spki",
+    });
+}
+function authenticateDiscordWebhook(publicKey, request, rawBody) {
+    const signature = request.headers.get("x-signature-ed25519");
+    const timestamp = request.headers.get("x-signature-timestamp");
+    if (!signature ||
+        !timestamp ||
+        !/^[0-9a-f]{128}$/iu.test(signature) ||
+        !verify(null, Buffer.from(timestamp + rawBody), publicKey, Buffer.from(signature, "hex"))) {
+        return new Response("invalid request signature", { status: 401 });
+    }
+    return undefined;
+}
+function discordApplicationCommandText(data) {
+    const name = optionalString(data, "name");
+    if (!name) {
+        return undefined;
+    }
+    const values = [];
+    const collectValues = (options) => {
+        if (!Array.isArray(options)) {
+            return;
+        }
+        for (const option of options) {
+            if (!isRecord(option)) {
+                continue;
+            }
+            if ((option.type === 1 || option.type === 2) && typeof option.name === "string") {
+                values.push(option.name);
+            }
+            const value = option.value;
+            if (typeof value === "string" || typeof value === "number" || typeof value === "boolean") {
+                values.push(String(value));
+            }
+            collectValues(option.options);
+        }
+    };
+    collectValues(data.options);
+    return [name, ...values].join(" ");
+}
+function discordInteractionText(data) {
+    const command = discordApplicationCommandText(data);
+    if (command) {
+        return command;
+    }
+    const values = [];
+    const collectValues = (value) => {
+        if (Array.isArray(value)) {
+            for (const child of value) {
+                collectValues(child);
+            }
+            return;
+        }
+        if (!isRecord(value)) {
+            return;
+        }
+        if (typeof value.value === "string") {
+            values.push(value.value);
+        }
+        if (Array.isArray(value.values)) {
+            for (const selected of value.values) {
+                if (typeof selected === "string" ||
+                    typeof selected === "number" ||
+                    typeof selected === "boolean") {
+                    values.push(String(selected));
+                }
+            }
+        }
+        collectValues(value.components);
+    };
+    collectValues(data);
+    const customId = optionalString(data, "custom_id");
+    const parts = [...(customId ? [customId] : []), ...values];
+    return parts.length > 0 ? parts.join(" ") : undefined;
+}
 function toRecorderPath(providerId, config) {
     const configuredPath = config.discord?.recorder.path;
     return configuredPath
         ? path.resolve(configuredPath)
         : path.resolve(".crabline", "recorders", `${providerId}.jsonl`);
 }
-const DISCORD_SNOWFLAKE_RULE = {
-    example: "123456789012345678",
-    name: "Discord snowflake id",
-    pattern: /^\d{17,20}$/u,
-};
-const DISCORD_CODEC = createNativeTargetCodec({
-    channel: DISCORD_SNOWFLAKE_RULE,
-    channelLabel: "Discord channel_id",
-    thread: DISCORD_SNOWFLAKE_RULE,
-    threadLabel: "Discord thread id",
-});
-function normalizeDiscordWebhookPayload(payload) {
+export function normalizeDiscordWebhookPayload(payload) {
     if (!isRecord(payload)) {
         throw new CrablineError("Discord webhook payload must be an object", { kind: "inbound" });
     }
-    if (optionalRecord(payload, "message")) {
+    const message = optionalRecord(payload, "message");
+    if ((message && ("text" in message || "threadId" in message)) ||
+        "text" in payload ||
+        "threadId" in payload) {
         return genericMockPayloadWithNativeThread({
             channelRule: DISCORD_SNOWFLAKE_RULE,
             payload,
@@ -51,7 +134,8 @@ function normalizeDiscordWebhookPayload(payload) {
     const author = optionalRecord(payload, "author") ?? optionalRecord(payload, "member")?.user;
     const channelId = optionalString(payload, "channel_id");
     const text = optionalString(payload, "content") ??
-        (data ? (optionalString(data, "content") ?? optionalString(data, "name")) : undefined);
+        (data ? (optionalString(data, "content") ?? discordInteractionText(data)) : undefined) ??
+        (message ? optionalString(message, "content") : undefined);
     if (!channelId || !text) {
         throw new CrablineError("Discord event payload requires channel_id and content", {
             kind: "inbound",
@@ -67,19 +151,61 @@ function normalizeDiscordWebhookPayload(payload) {
         threadId: requireNativeInboundId(threadId, DISCORD_SNOWFLAKE_RULE, "Discord thread_id"),
     };
 }
+export function createDiscordInteractionResponse(payload) {
+    if (!isRecord(payload)) {
+        return Response.json({ type: 5 }, { status: 200 });
+    }
+    if (payload.type === 3) {
+        return Response.json({ type: 6 }, { status: 200 });
+    }
+    if (payload.type === 4) {
+        return Response.json({ data: { choices: [] }, type: 8 }, { status: 200 });
+    }
+    return Response.json({ type: 5 }, { status: 200 });
+}
+export function handleDiscordWebhookPayload(payload) {
+    if (!isRecord(payload)) {
+        return undefined;
+    }
+    if (payload.type === 1) {
+        return Response.json({ type: 1 }, { status: 200 });
+    }
+    if (payload.type === 4) {
+        return createDiscordInteractionResponse(payload);
+    }
+    return undefined;
+}
 export class DiscordProviderAdapter extends LocalMockProviderAdapter {
-    constructor(id, config, _userName) {
+    constructor(id, config, userName, runtime) {
+        const env = runtime?.env ?? process.env;
+        const resolvedConfig = resolveDiscordAdapterConfigValue(config, userName, env);
+        const publicKey = resolvedConfig.publicKey
+            ? discordPublicKey(resolvedConfig.publicKey)
+            : undefined;
+        requireExternalWebhookAuthentication({
+            authenticated: Boolean(publicKey),
+            provider: "Discord",
+            requirement: "discord.publicKey or DISCORD_PUBLIC_KEY",
+            webhook: config.discord?.webhook,
+        });
         super({
-            codec: DISCORD_CODEC,
+            codec: getBuiltinTargetCodec("discord"),
             config,
             id,
             options: {
+                ...(publicKey
+                    ? {
+                        authenticateWebhookRequest: (request, rawBody) => authenticateDiscordWebhook(publicKey, request, rawBody),
+                    }
+                    : {}),
                 defaultWebhook: {
                     host: "127.0.0.1",
                     path: "/discord/interactions",
                     port: 8788,
                 },
+                createWebhookSuccessResponse: createDiscordInteractionResponse,
                 endpointLabel: "interactions endpoint",
+                handleWebhookPayload: handleDiscordWebhookPayload,
                 normalizeWebhookPayload: normalizeDiscordWebhookPayload,
                 platform: "discord",
                 publicUrl: config.discord?.webhook.publicUrl,

package/dist/src/providers/builtin/discord.js.map

@@ -1 +1 @@
-{"version":3,"file":"discord.js","sourceRoot":"","sources":["../../../../src/providers/builtin/discord.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAE5D,OAAO,EACL,iBAAiB,EACjB,uBAAuB,EACvB,kCAAkC,EAClC,QAAQ,EACR,cAAc,EACd,cAAc,EACd,sBAAsB,GAEvB,MAAM,wBAAwB,CAAC;AAMhC,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,MAAsB,EACtB,QAAgB,EAChB,GAAG,GAAuB,OAAO,CAAC,GAAG;IAErC,OAAO;QACL,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,IAAI,GAAG,CAAC,sBAAsB,CAAC;YAC/D,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,OAAO,EAAE,aAAa,IAAI,GAAG,CAAC,sBAAuB,EAAE;YACjF,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,IAAI,GAAG,CAAC,iBAAiB,CAAC;YACrD,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,IAAI,GAAG,CAAC,iBAAkB,EAAE;YAClE,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,cAAc,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;YACnD,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,OAAO,EAAE,cAAc,EAAE;YACpD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,IAAI,GAAG,CAAC,kBAAkB,CAAC;YACvD,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,IAAI,GAAG,CAAC,kBAAmB,EAAE;YACrE,CAAC,CAAC,EAAE,CAAC;QACP,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,UAAkB,EAAE,MAAsB;IAChE,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC;IACrD,OAAO,cAAc;QACnB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC;QAC9B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,WAAW,EAAE,GAAG,UAAU,QAAQ,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,sBAAsB,GAAiB;IAC3C,OAAO,EAAE,oBAAoB;IAC7B,IAAI,EAAE,sBAAsB;IAC5B,OAAO,EAAE,cAAc;CACxB,CAAC;AAEF,MAAM,aAAa,GAAG,uBAAuB,CAAC;IAC5C,OAAO,EAAE,sBAAsB;IAC/B,YAAY,EAAE,oBAAoB;IAClC,MAAM,EAAE,sBAAsB;IAC9B,WAAW,EAAE,mBAAmB;CACjC,CAAC,CAAC;AAEH,SAAS,8BAA8B,CAAC,OAAgB;IACtD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,aAAa,CAAC,2CAA2C,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,IAAI,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC;QACvC,OAAO,kCAAkC,CAAC;YACxC,WAAW,EAAE,sBAAsB;YACnC,OAAO;YACP,UAAU,EAAE,sBAAsB;SACnC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC;IAC5F,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACxD,MAAM,IAAI,GACR,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC;QAClC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACzF,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,IAAI,aAAa,CAAC,uDAAuD,EAAE;YAC/E,IAAI,EAAE,SAAS;SAChB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3D,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,SAAS,CAAC;IACnE,OAAO;QACL,MAAM,EAAE,iBAAiB,CAAC,YAAY,EAAE,GAAG,KAAK,IAAI,CAAC;QACrD,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,GAAG,EAAE,OAAO;QACZ,IAAI;QACJ,QAAQ,EAAE,sBAAsB,CAAC,QAAQ,EAAE,sBAAsB,EAAE,mBAAmB,CAAC;KACxF,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,sBAAuB,SAAQ,wBAAwB;IAClE,YAAY,EAAU,EAAE,MAAsB,EAAE,SAAiB;QAC/D,KAAK,CAAC;YACJ,KAAK,EAAE,aAAa;YACpB,MAAM;YACN,EAAE;YACF,OAAO,EAAE;gBACP,cAAc,EAAE;oBACd,IAAI,EAAE,WAAW;oBACjB,IAAI,EAAE,uBAAuB;oBAC7B,IAAI,EAAE,IAAI;iBACX;gBACD,aAAa,EAAE,uBAAuB;gBACtC,uBAAuB,EAAE,8BAA8B;gBACvD,QAAQ,EAAE,SAAS;gBACnB,SAAS,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS;gBAC5C,YAAY,EAAE,cAAc,CAAC,EAAE,EAAE,MAAM,CAAC;gBACxC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO;aACjC;SACF,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"discord.js","sourceRoot":"","sources":["../../../../src/providers/builtin/discord.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,EAAkB,MAAM,aAAa,CAAC;AACtE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAE5D,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACzF,OAAO,EACL,iBAAiB,EACjB,kCAAkC,EAClC,QAAQ,EACR,cAAc,EACd,cAAc,EACd,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,oCAAoC,EAAE,MAAM,4BAA4B,CAAC;AAUlF,SAAS,gCAAgC,CACvC,MAAsB,EACtB,QAAgB,EAChB,GAAG,GAAuB,OAAO,CAAC,GAAG;IAErC,OAAO;QACL,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,IAAI,GAAG,CAAC,sBAAsB,CAAC;YAC/D,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,OAAO,EAAE,aAAa,IAAI,GAAG,CAAC,sBAAuB,EAAE;YACjF,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,IAAI,GAAG,CAAC,iBAAiB,CAAC;YACrD,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,IAAI,GAAG,CAAC,iBAAkB,EAAE;YAClE,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,cAAc,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;YACnD,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,OAAO,EAAE,cAAc,EAAE;YACpD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,IAAI,GAAG,CAAC,kBAAkB,CAAC;YACvD,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,IAAI,GAAG,CAAC,kBAAmB,EAAE;YACrE,CAAC,CAAC,EAAE,CAAC;QACP,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,MAAsB,EACtB,QAAgB,EAChB,GAAG,GAAuB,OAAO,CAAC,GAAG;IAErC,OAAO,gCAAgC,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,aAAa,CAAC,8DAA8D,EAAE;YACtF,IAAI,EAAE,QAAQ;SACf,CAAC,CAAC;IACL,CAAC;IACD,OAAO,eAAe,CAAC;QACrB,MAAM,EAAE,KAAK;QACb,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;QAC/F,IAAI,EAAE,MAAM;KACb,CAAC,CAAC;AACL,CAAC;AAED,SAAS,0BAA0B,CAAC,SAAoB,EAAE,OAAgB,EAAE,OAAe;IACzF,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAC/D,IACE,CAAC,SAAS;QACV,CAAC,SAAS;QACV,CAAC,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC;QACpC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,EACzF,CAAC;QACD,OAAO,IAAI,QAAQ,CAAC,2BAA2B,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,6BAA6B,CAAC,IAA6B;IAClE,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,aAAa,GAAG,CAAC,OAAgB,EAAQ,EAAE;QAC/C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,OAAO;QACT,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtB,SAAS;YACX,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAChF,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;YAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;gBACzF,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC7B,CAAC;YACD,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC;IACH,CAAC,CAAC;IACF,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5B,OAAO,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,sBAAsB,CAAC,IAA6B;IAC3D,MAAM,OAAO,GAAG,6BAA6B,CAAC,IAAI,CAAC,CAAC;IACpD,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,aAAa,GAAG,CAAC,KAAc,EAAQ,EAAE;QAC7C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;gBAC1B,aAAa,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO;QACT,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACpC,IACE,OAAO,QAAQ,KAAK,QAAQ;oBAC5B,OAAO,QAAQ,KAAK,QAAQ;oBAC5B,OAAO,QAAQ,KAAK,SAAS,EAC7B,CAAC;oBACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC;QACH,CAAC;QACD,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAClC,CAAC,CAAC;IACF,aAAa,CAAC,IAAI,CAAC,CAAC;IACpB,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;IAC3D,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACxD,CAAC;AAED,SAAS,cAAc,CAAC,UAAkB,EAAE,MAAsB;IAChE,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC;IACrD,OAAO,cAAc;QACnB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC;QAC9B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,WAAW,EAAE,GAAG,UAAU,QAAQ,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,OAAgB;IAC7D,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,aAAa,CAAC,2CAA2C,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACnD,IACE,CAAC,OAAO,IAAI,CAAC,MAAM,IAAI,OAAO,IAAI,UAAU,IAAI,OAAO,CAAC,CAAC;QACzD,MAAM,IAAI,OAAO;QACjB,UAAU,IAAI,OAAO,EACrB,CAAC;QACD,OAAO,kCAAkC,CAAC;YACxC,WAAW,EAAE,sBAAsB;YACnC,OAAO;YACP,UAAU,EAAE,sBAAsB;SACnC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC;IAC5F,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACxD,MAAM,IAAI,GACR,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC;QAClC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACtF,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC7D,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,IAAI,aAAa,CAAC,uDAAuD,EAAE;YAC/E,IAAI,EAAE,SAAS;SAChB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3D,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,SAAS,CAAC;IACnE,OAAO;QACL,MAAM,EAAE,iBAAiB,CAAC,YAAY,EAAE,GAAG,KAAK,IAAI,CAAC;QACrD,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,GAAG,EAAE,OAAO;QACZ,IAAI;QACJ,QAAQ,EAAE,sBAAsB,CAAC,QAAQ,EAAE,sBAAsB,EAAE,mBAAmB,CAAC;KACxF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,OAAgB;IAC/D,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACvB,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,OAAgB;IAC1D,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACvB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,gCAAgC,CAAC,OAAO,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,OAAO,sBAAuB,SAAQ,wBAAwB;IAClE,YAAY,EAAU,EAAE,MAAsB,EAAE,QAAgB,EAAE,OAAiB;QACjF,MAAM,GAAG,GAAI,OAAsC,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QACxE,MAAM,cAAc,GAAG,gCAAgC,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC/E,MAAM,SAAS,GAAG,cAAc,CAAC,SAAS;YACxC,CAAC,CAAC,gBAAgB,CAAC,cAAc,CAAC,SAAS,CAAC;YAC5C,CAAC,CAAC,SAAS,CAAC;QACd,oCAAoC,CAAC;YACnC,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC;YACjC,QAAQ,EAAE,SAAS;YACnB,WAAW,EAAE,yCAAyC;YACtD,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO;SACjC,CAAC,CAAC;QACH,KAAK,CAAC;YACJ,KAAK,EAAE,qBAAqB,CAAC,SAAS,CAAC;YACvC,MAAM;YACN,EAAE;YACF,OAAO,EAAE;gBACP,GAAG,CAAC,SAAS;oBACX,CAAC,CAAC;wBACE,0BAA0B,EAAE,CAAC,OAAgB,EAAE,OAAe,EAAE,EAAE,CAChE,0BAA0B,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC;qBAC1D;oBACH,CAAC,CAAC,EAAE,CAAC;gBACP,cAAc,EAAE;oBACd,IAAI,EAAE,WAAW;oBACjB,IAAI,EAAE,uBAAuB;oBAC7B,IAAI,EAAE,IAAI;iBACX;gBACD,4BAA4B,EAAE,gCAAgC;gBAC9D,aAAa,EAAE,uBAAuB;gBACtC,oBAAoB,EAAE,2BAA2B;gBACjD,uBAAuB,EAAE,8BAA8B;gBACvD,QAAQ,EAAE,SAAS;gBACnB,SAAS,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS;gBAC5C,YAAY,EAAE,cAAc,CAAC,EAAE,EAAE,MAAM,CAAC;gBACxC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO;aACjC;SACF,CAAC,CAAC;IACL,CAAC;CACF","sourcesContent":["import { createPublicKey, verify, type KeyObject } from \"node:crypto\";\nimport path from \"node:path\";\nimport { CrablineError } from \"../../core/errors.js\";\nimport type { ProviderConfig } from \"../../config/schema.js\";\nimport { LocalMockProviderAdapter } from \"../local-mock.js\";\nimport type { ProviderAdapter } from \"../types.js\";\nimport { DISCORD_SNOWFLAKE_RULE, getBuiltinTargetCodec } from \"../target-normalizers.js\";\nimport {\n  authorFromBotFlag,\n  genericMockPayloadWithNativeThread,\n  isRecord,\n  optionalRecord,\n  optionalString,\n  requireNativeInboundId,\n} from \"./native-local-mock.js\";\nimport { requireExternalWebhookAuthentication } from \"./external-webhook-auth.js\";\n\ntype DiscordEnvironment = Partial<\n  Pick<NodeJS.ProcessEnv, \"DISCORD_APPLICATION_ID\" | \"DISCORD_BOT_TOKEN\" | \"DISCORD_PUBLIC_KEY\">\n>;\n\ntype DiscordRuntime = {\n  env?: DiscordEnvironment | undefined;\n};\n\nfunction resolveDiscordAdapterConfigValue(\n  config: ProviderConfig,\n  userName: string,\n  env: DiscordEnvironment = process.env,\n) {\n  return {\n    ...((config.discord?.applicationId ?? env.DISCORD_APPLICATION_ID)\n      ? { applicationId: config.discord?.applicationId ?? env.DISCORD_APPLICATION_ID! }\n      : {}),\n    ...((config.discord?.botToken ?? env.DISCORD_BOT_TOKEN)\n      ? { botToken: config.discord?.botToken ?? env.DISCORD_BOT_TOKEN! }\n      : {}),\n    ...((config.discord?.mentionRoleIds?.length ?? 0) > 0\n      ? { mentionRoleIds: config.discord?.mentionRoleIds }\n      : {}),\n    ...((config.discord?.publicKey ?? env.DISCORD_PUBLIC_KEY)\n      ? { publicKey: config.discord?.publicKey ?? env.DISCORD_PUBLIC_KEY! }\n      : {}),\n    userName,\n  };\n}\n\nexport async function resolveDiscordAdapterConfig(\n  config: ProviderConfig,\n  userName: string,\n  env: DiscordEnvironment = process.env,\n) {\n  return resolveDiscordAdapterConfigValue(config, userName, env);\n}\n\nfunction discordPublicKey(value: string): KeyObject {\n  if (!/^[0-9a-f]{64}$/iu.test(value)) {\n    throw new CrablineError(\"Discord publicKey must be a 32-byte hexadecimal Ed25519 key.\", {\n      kind: \"config\",\n    });\n  }\n  return createPublicKey({\n    format: \"der\",\n    key: Buffer.concat([Buffer.from(\"302a300506032b6570032100\", \"hex\"), Buffer.from(value, \"hex\")]),\n    type: \"spki\",\n  });\n}\n\nfunction authenticateDiscordWebhook(publicKey: KeyObject, request: Request, rawBody: string) {\n  const signature = request.headers.get(\"x-signature-ed25519\");\n  const timestamp = request.headers.get(\"x-signature-timestamp\");\n  if (\n    !signature ||\n    !timestamp ||\n    !/^[0-9a-f]{128}$/iu.test(signature) ||\n    !verify(null, Buffer.from(timestamp + rawBody), publicKey, Buffer.from(signature, \"hex\"))\n  ) {\n    return new Response(\"invalid request signature\", { status: 401 });\n  }\n  return undefined;\n}\n\nfunction discordApplicationCommandText(data: Record<string, unknown>): string | undefined {\n  const name = optionalString(data, \"name\");\n  if (!name) {\n    return undefined;\n  }\n\n  const values: string[] = [];\n  const collectValues = (options: unknown): void => {\n    if (!Array.isArray(options)) {\n      return;\n    }\n    for (const option of options) {\n      if (!isRecord(option)) {\n        continue;\n      }\n      if ((option.type === 1 || option.type === 2) && typeof option.name === \"string\") {\n        values.push(option.name);\n      }\n      const value = option.value;\n      if (typeof value === \"string\" || typeof value === \"number\" || typeof value === \"boolean\") {\n        values.push(String(value));\n      }\n      collectValues(option.options);\n    }\n  };\n  collectValues(data.options);\n  return [name, ...values].join(\" \");\n}\n\nfunction discordInteractionText(data: Record<string, unknown>): string | undefined {\n  const command = discordApplicationCommandText(data);\n  if (command) {\n    return command;\n  }\n\n  const values: string[] = [];\n  const collectValues = (value: unknown): void => {\n    if (Array.isArray(value)) {\n      for (const child of value) {\n        collectValues(child);\n      }\n      return;\n    }\n    if (!isRecord(value)) {\n      return;\n    }\n    if (typeof value.value === \"string\") {\n      values.push(value.value);\n    }\n    if (Array.isArray(value.values)) {\n      for (const selected of value.values) {\n        if (\n          typeof selected === \"string\" ||\n          typeof selected === \"number\" ||\n          typeof selected === \"boolean\"\n        ) {\n          values.push(String(selected));\n        }\n      }\n    }\n    collectValues(value.components);\n  };\n  collectValues(data);\n  const customId = optionalString(data, \"custom_id\");\n  const parts = [...(customId ? [customId] : []), ...values];\n  return parts.length > 0 ? parts.join(\" \") : undefined;\n}\n\nfunction toRecorderPath(providerId: string, config: ProviderConfig): string {\n  const configuredPath = config.discord?.recorder.path;\n  return configuredPath\n    ? path.resolve(configuredPath)\n    : path.resolve(\".crabline\", \"recorders\", `${providerId}.jsonl`);\n}\n\nexport function normalizeDiscordWebhookPayload(payload: unknown) {\n  if (!isRecord(payload)) {\n    throw new CrablineError(\"Discord webhook payload must be an object\", { kind: \"inbound\" });\n  }\n\n  const message = optionalRecord(payload, \"message\");\n  if (\n    (message && (\"text\" in message || \"threadId\" in message)) ||\n    \"text\" in payload ||\n    \"threadId\" in payload\n  ) {\n    return genericMockPayloadWithNativeThread({\n      channelRule: DISCORD_SNOWFLAKE_RULE,\n      payload,\n      threadRule: DISCORD_SNOWFLAKE_RULE,\n    });\n  }\n\n  const data = optionalRecord(payload, \"data\");\n  const author = optionalRecord(payload, \"author\") ?? optionalRecord(payload, \"member\")?.user;\n  const channelId = optionalString(payload, \"channel_id\");\n  const text =\n    optionalString(payload, \"content\") ??\n    (data ? (optionalString(data, \"content\") ?? discordInteractionText(data)) : undefined) ??\n    (message ? optionalString(message, \"content\") : undefined);\n  if (!channelId || !text) {\n    throw new CrablineError(\"Discord event payload requires channel_id and content\", {\n      kind: \"inbound\",\n    });\n  }\n\n  const authorRecord = isRecord(author) ? author : undefined;\n  const threadId = optionalString(payload, \"thread_id\") ?? channelId;\n  return {\n    author: authorFromBotFlag(authorRecord?.bot === true),\n    ...(optionalString(payload, \"id\") ? { id: optionalString(payload, \"id\") } : {}),\n    raw: payload,\n    text,\n    threadId: requireNativeInboundId(threadId, DISCORD_SNOWFLAKE_RULE, \"Discord thread_id\"),\n  };\n}\n\nexport function createDiscordInteractionResponse(payload: unknown): Response {\n  if (!isRecord(payload)) {\n    return Response.json({ type: 5 }, { status: 200 });\n  }\n  if (payload.type === 3) {\n    return Response.json({ type: 6 }, { status: 200 });\n  }\n  if (payload.type === 4) {\n    return Response.json({ data: { choices: [] }, type: 8 }, { status: 200 });\n  }\n  return Response.json({ type: 5 }, { status: 200 });\n}\n\nexport function handleDiscordWebhookPayload(payload: unknown): Response | undefined {\n  if (!isRecord(payload)) {\n    return undefined;\n  }\n  if (payload.type === 1) {\n    return Response.json({ type: 1 }, { status: 200 });\n  }\n  if (payload.type === 4) {\n    return createDiscordInteractionResponse(payload);\n  }\n  return undefined;\n}\n\nexport class DiscordProviderAdapter extends LocalMockProviderAdapter implements ProviderAdapter {\n  constructor(id: string, config: ProviderConfig, userName: string, runtime?: unknown) {\n    const env = (runtime as DiscordRuntime | undefined)?.env ?? process.env;\n    const resolvedConfig = resolveDiscordAdapterConfigValue(config, userName, env);\n    const publicKey = resolvedConfig.publicKey\n      ? discordPublicKey(resolvedConfig.publicKey)\n      : undefined;\n    requireExternalWebhookAuthentication({\n      authenticated: Boolean(publicKey),\n      provider: \"Discord\",\n      requirement: \"discord.publicKey or DISCORD_PUBLIC_KEY\",\n      webhook: config.discord?.webhook,\n    });\n    super({\n      codec: getBuiltinTargetCodec(\"discord\"),\n      config,\n      id,\n      options: {\n        ...(publicKey\n          ? {\n              authenticateWebhookRequest: (request: Request, rawBody: string) =>\n                authenticateDiscordWebhook(publicKey, request, rawBody),\n            }\n          : {}),\n        defaultWebhook: {\n          host: \"127.0.0.1\",\n          path: \"/discord/interactions\",\n          port: 8788,\n        },\n        createWebhookSuccessResponse: createDiscordInteractionResponse,\n        endpointLabel: \"interactions endpoint\",\n        handleWebhookPayload: handleDiscordWebhookPayload,\n        normalizeWebhookPayload: normalizeDiscordWebhookPayload,\n        platform: \"discord\",\n        publicUrl: config.discord?.webhook.publicUrl,\n        recorderPath: toRecorderPath(id, config),\n        webhook: config.discord?.webhook,\n      },\n    });\n  }\n}\n"]}

package/dist/src/providers/builtin/external-webhook-auth.d.ts

@@ -0,0 +1,11 @@
+type WebhookConfig = {
+    host?: string | undefined;
+    publicUrl?: string | undefined;
+};
+export declare function requireExternalWebhookAuthentication(params: {
+    authenticated: boolean;
+    provider: string;
+    requirement: string;
+    webhook: WebhookConfig | undefined;
+}): void;
+export {};

package/dist/src/providers/builtin/external-webhook-auth.js

@@ -0,0 +1,10 @@
+import { CrablineError } from "../../core/errors.js";
+import { isLoopbackHost } from "../../servers/http.js";
+export function requireExternalWebhookAuthentication(params) {
+    const host = params.webhook?.host ?? "127.0.0.1";
+    const externallyReachable = Boolean(params.webhook?.publicUrl) || !isLoopbackHost(host);
+    if (externallyReachable && !params.authenticated) {
+        throw new CrablineError(`${params.provider} externally reachable webhooks require ${params.requirement}.`, { kind: "config" });
+    }
+}
+//# sourceMappingURL=external-webhook-auth.js.map

package/dist/src/providers/builtin/external-webhook-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-webhook-auth.js","sourceRoot":"","sources":["../../../../src/providers/builtin/external-webhook-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAOvD,MAAM,UAAU,oCAAoC,CAAC,MAKpD;IACC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,IAAI,IAAI,WAAW,CAAC;IACjD,MAAM,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IACxF,IAAI,mBAAmB,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QACjD,MAAM,IAAI,aAAa,CACrB,GAAG,MAAM,CAAC,QAAQ,0CAA0C,MAAM,CAAC,WAAW,GAAG,EACjF,EAAE,IAAI,EAAE,QAAQ,EAAE,CACnB,CAAC;IACJ,CAAC;AACH,CAAC","sourcesContent":["import { CrablineError } from \"../../core/errors.js\";\nimport { isLoopbackHost } from \"../../servers/http.js\";\n\ntype WebhookConfig = {\n  host?: string | undefined;\n  publicUrl?: string | undefined;\n};\n\nexport function requireExternalWebhookAuthentication(params: {\n  authenticated: boolean;\n  provider: string;\n  requirement: string;\n  webhook: WebhookConfig | undefined;\n}): void {\n  const host = params.webhook?.host ?? \"127.0.0.1\";\n  const externallyReachable = Boolean(params.webhook?.publicUrl) || !isLoopbackHost(host);\n  if (externallyReachable && !params.authenticated) {\n    throw new CrablineError(\n      `${params.provider} externally reachable webhooks require ${params.requirement}.`,\n      { kind: \"config\" },\n    );\n  }\n}\n"]}

package/dist/src/providers/builtin/feishu.d.ts

@@ -1,10 +1,27 @@
 import type { ProviderConfig } from "../../config/schema.js";
 import { LocalMockProviderAdapter } from "../local-mock.js";
 import type { ProviderAdapter } from "../types.js";
-export declare function resolveFeishuAdapterConfig(config: ProviderConfig, _env?: NodeJS.ProcessEnv): {
+type FeishuEnvironment = Partial<Pick<NodeJS.ProcessEnv, "FEISHU_ENCRYPT_KEY" | "FEISHU_VERIFICATION_TOKEN">>;
+type FeishuAuthRuntime = {
+    now?: (() => number) | undefined;
+};
+export declare function resolveFeishuAdapterConfig(config: ProviderConfig, env?: FeishuEnvironment): {
     appId: string;
+    encryptKey: string | undefined;
     userName: string | undefined;
+    verificationToken: string | undefined;
 };
+export declare function handleFeishuWebhookPayload(payload: unknown): Response | undefined;
+export declare function createFeishuWebhookAuthenticator(config: ProviderConfig, env?: FeishuEnvironment, runtime?: FeishuAuthRuntime): ((request: Request, rawBody: string) => Promise<Response | undefined>) | undefined;
 export declare class FeishuProviderAdapter extends LocalMockProviderAdapter implements ProviderAdapter {
-    constructor(id: string, config: ProviderConfig, _userName: string, _runtime?: unknown);
+    constructor(id: string, config: ProviderConfig, _userName: string, runtime?: unknown);
 }
+export declare function normalizeFeishuWebhookPayload(payload: unknown): {
+    author?: "assistant" | "system" | "user" | undefined;
+    authorIsBot?: boolean;
+    id?: string | undefined;
+    raw: {};
+    text?: string | undefined;
+};
+export declare function decryptFeishuWebhookPayload(payload: unknown, encryptKey: string): unknown;
+export {};