@pellux/goodvibes-sdk 0.18.13 → 0.18.15

package/dist/_internal/platform/adapters/index.d.ts

@@ -0,0 +1,16 @@
+export * from './types.js';
+export { handleSlackSurfacePayload, handleSlackSurfaceWebhook } from './slack/index.js';
+export { handleDiscordGatewayDispatchPayload, handleDiscordInteractionPayload, handleDiscordSurfaceWebhook } from './discord/index.js';
+export { handleNtfySurfacePayload, handleNtfySurfaceWebhook } from './ntfy/index.js';
+export { handleTelegramSurfaceWebhook } from './telegram/index.js';
+export { handleGoogleChatSurfaceWebhook } from './google-chat/index.js';
+export { handleSignalSurfaceWebhook } from './signal/index.js';
+export { handleWhatsAppSurfaceWebhook } from './whatsapp/index.js';
+export { handleIMessageSurfaceWebhook } from './imessage/index.js';
+export { handleMSTeamsSurfaceWebhook } from './msteams/index.js';
+export { handleBlueBubblesSurfaceWebhook } from './bluebubbles/index.js';
+export { handleMattermostSurfaceWebhook } from './mattermost/index.js';
+export { handleMatrixSurfaceWebhook } from './matrix/index.js';
+export { handleGenericWebhookSurface } from './webhook/index.js';
+export { handleGitHubAutomationWebhook } from './github/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/_internal/platform/adapters/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/_internal/platform/adapters/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AACxF,OAAO,EAAE,mCAAmC,EAAE,+BAA+B,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AACvI,OAAO,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AACrF,OAAO,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AACxE,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,+BAA+B,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,8BAA8B,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,6BAA6B,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/_internal/platform/adapters/index.js

@@ -0,0 +1,15 @@
+export * from './types.js';
+export { handleSlackSurfacePayload, handleSlackSurfaceWebhook } from './slack/index.js';
+export { handleDiscordGatewayDispatchPayload, handleDiscordInteractionPayload, handleDiscordSurfaceWebhook } from './discord/index.js';
+export { handleNtfySurfacePayload, handleNtfySurfaceWebhook } from './ntfy/index.js';
+export { handleTelegramSurfaceWebhook } from './telegram/index.js';
+export { handleGoogleChatSurfaceWebhook } from './google-chat/index.js';
+export { handleSignalSurfaceWebhook } from './signal/index.js';
+export { handleWhatsAppSurfaceWebhook } from './whatsapp/index.js';
+export { handleIMessageSurfaceWebhook } from './imessage/index.js';
+export { handleMSTeamsSurfaceWebhook } from './msteams/index.js';
+export { handleBlueBubblesSurfaceWebhook } from './bluebubbles/index.js';
+export { handleMattermostSurfaceWebhook } from './mattermost/index.js';
+export { handleMatrixSurfaceWebhook } from './matrix/index.js';
+export { handleGenericWebhookSurface } from './webhook/index.js';
+export { handleGitHubAutomationWebhook } from './github/index.js';

package/dist/_internal/platform/adapters/matrix/index.d.ts

@@ -0,0 +1,3 @@
+import type { SurfaceAdapterContext } from '../types.js';
+export declare function handleMatrixSurfaceWebhook(req: Request, context: SurfaceAdapterContext): Promise<Response>;
+//# sourceMappingURL=index.d.ts.map

package/dist/_internal/platform/adapters/matrix/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/_internal/platform/adapters/matrix/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAgBzD,wBAAsB,0BAA0B,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAkGhH"}

package/dist/_internal/platform/adapters/matrix/index.js

@@ -0,0 +1,106 @@
+import { parseJsonRecord, readBearerOrHeaderToken, readTextBodyWithinLimit } from '@pellux/goodvibes-sdk/platform/adapters/helpers';
+function readRecord(value) {
+    return value && typeof value === 'object' ? value : null;
+}
+function readString(value) {
+    return typeof value === 'string' && value.trim().length > 0 ? value.trim() : undefined;
+}
+function readThreadId(content) {
+    const relatesTo = readRecord(content?.['m.relates_to']);
+    const reply = readRecord(relatesTo?.['m.in_reply_to']);
+    return readString(relatesTo?.event_id) ?? readString(reply?.event_id);
+}
+export async function handleMatrixSurfaceWebhook(req, context) {
+    const configuredToken = String(context.configManager.get('surfaces.matrix.accessToken') ?? '')
+        || await context.serviceRegistry.resolveSecret('matrix', 'primary')
+        || process.env.MATRIX_ACCESS_TOKEN
+        || '';
+    const providedToken = readBearerOrHeaderToken(req, 'x-goodvibes-matrix-token');
+    if (configuredToken && providedToken !== configuredToken) {
+        return Response.json({ error: 'Unauthorized' }, { status: 401 });
+    }
+    const rawBody = await readTextBodyWithinLimit(req);
+    if (rawBody instanceof Response)
+        return rawBody;
+    const body = parseJsonRecord(rawBody);
+    if (body instanceof Response)
+        return body;
+    const payload = readRecord(body);
+    if (!payload)
+        return Response.json({ error: 'Invalid JSON body' }, { status: 400 });
+    const event = readRecord(payload.event) ?? payload;
+    const content = readRecord(event.content);
+    const roomId = readString(event.room_id) ?? readString(payload.roomId);
+    const text = readString(content?.body) ?? readString(event.text) ?? readString(payload.text) ?? '';
+    if (!roomId)
+        return Response.json({ error: 'Missing room id' }, { status: 400 });
+    const threadId = readThreadId(content);
+    const policy = await context.authorizeSurfaceIngress({
+        surface: 'matrix',
+        userId: readString(event.sender) ?? readString(payload.sender),
+        channelId: roomId,
+        groupId: roomId,
+        threadId,
+        workspaceId: readString(payload.homeserver) ?? readString(context.configManager.get('surfaces.matrix.homeserverUrl')),
+        conversationKind: threadId ? 'thread' : 'channel',
+        text,
+        mentioned: true,
+        metadata: payload,
+    });
+    if (!policy.allowed) {
+        return Response.json({ error: `Blocked by channel policy: ${policy.reason}` }, { status: 403 });
+    }
+    const binding = await context.routeBindings.upsertBinding({
+        kind: threadId ? 'thread' : 'channel',
+        surfaceKind: 'matrix',
+        surfaceId: readString(context.configManager.get('surfaces.matrix.userId')) ?? 'matrix',
+        externalId: threadId ?? roomId,
+        channelId: roomId,
+        threadId,
+        title: roomId,
+        metadata: {
+            ...payload,
+            ...(readString(event.event_id) ? { eventId: readString(event.event_id) } : {}),
+            ...(readString(content?.msgtype) ? { msgtype: readString(content?.msgtype) } : {}),
+        },
+    });
+    if (!text) {
+        return Response.json({ ok: true, acknowledged: true, bindingId: binding.id });
+    }
+    const controlCommand = context.parseSurfaceControlCommand(text);
+    if (controlCommand) {
+        const message = await context.performSurfaceControlCommand(controlCommand);
+        return Response.json({ ok: true, acknowledged: true, message });
+    }
+    const submission = await context.sessionBroker.submitMessage({
+        routeId: binding.id,
+        surfaceKind: 'matrix',
+        surfaceId: binding.surfaceId,
+        externalId: binding.externalId,
+        threadId: binding.threadId ?? binding.channelId,
+        userId: readString(event.sender) ?? readString(payload.sender),
+        displayName: readString(payload.displayName) ?? readString(event.sender),
+        title: binding.title ?? 'Matrix',
+        body: text,
+        metadata: binding.metadata,
+    });
+    if (submission.mode === 'continued-live') {
+        return Response.json({ ok: true, continued: true, sessionId: submission.session.id, agentId: submission.activeAgentId ?? null });
+    }
+    const spawnResult = context.trySpawnAgent({ mode: 'spawn', task: submission.task }, 'handleMatrixSurfaceWebhook', submission.session.id);
+    if (spawnResult instanceof Response)
+        return spawnResult;
+    await context.sessionBroker.bindAgent(submission.session.id, spawnResult.id);
+    context.queueSurfaceReplyFromBinding(submission.routeBinding ?? binding, {
+        agentId: spawnResult.id,
+        task: text,
+        sessionId: submission.session.id,
+    });
+    return Response.json({
+        ok: true,
+        queued: true,
+        bindingId: binding.id,
+        sessionId: submission.session.id,
+        agentId: spawnResult.id,
+    });
+}

package/dist/_internal/platform/adapters/mattermost/index.d.ts

@@ -0,0 +1,3 @@
+import type { SurfaceAdapterContext } from '../types.js';
+export declare function handleMattermostSurfaceWebhook(req: Request, context: SurfaceAdapterContext): Promise<Response>;
+//# sourceMappingURL=index.d.ts.map

package/dist/_internal/platform/adapters/mattermost/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/_internal/platform/adapters/mattermost/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAgCzD,wBAAsB,8BAA8B,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAqHpH"}

package/dist/_internal/platform/adapters/mattermost/index.js

@@ -0,0 +1,139 @@
+import { parseJsonRecord, readBearerOrHeaderToken, readTextBodyWithinLimit } from '@pellux/goodvibes-sdk/platform/adapters/helpers';
+function readRecord(value) {
+    return value && typeof value === 'object' ? value : null;
+}
+function readString(value) {
+    return typeof value === 'string' && value.trim().length > 0 ? value.trim() : undefined;
+}
+async function readBody(req) {
+    const contentType = req.headers.get('content-type') ?? '';
+    if (contentType.includes('multipart/form-data')) {
+        const contentLength = parseInt(req.headers.get('content-length') ?? '0', 10);
+        if (Number.isFinite(contentLength) && contentLength > 1_000_000) {
+            return Response.json({ error: 'Payload too large' }, { status: 413 });
+        }
+        const form = await req.formData().catch(() => null);
+        if (!form)
+            return null;
+        return Object.fromEntries([...form.entries()].map(([key, value]) => [key, typeof value === 'string' ? value : String(value)]));
+    }
+    const rawBody = await readTextBodyWithinLimit(req);
+    if (rawBody instanceof Response)
+        return rawBody;
+    if (contentType.includes('application/x-www-form-urlencoded')) {
+        return Object.fromEntries(new URLSearchParams(rawBody));
+    }
+    const parsed = parseJsonRecord(rawBody);
+    return parsed instanceof Response ? null : readRecord(parsed);
+}
+export async function handleMattermostSurfaceWebhook(req, context) {
+    const body = await readBody(req);
+    if (body instanceof Response)
+        return body;
+    if (!body)
+        return Response.json({ error: 'Invalid webhook payload' }, { status: 400 });
+    const configuredToken = String(context.configManager.get('surfaces.mattermost.botToken') ?? '')
+        || await context.serviceRegistry.resolveSecret('mattermost', 'primary')
+        || process.env.MATTERMOST_BOT_TOKEN
+        || '';
+    const providedToken = readBearerOrHeaderToken(req, 'x-goodvibes-mattermost-token')
+        ?? readString(body.token)
+        ?? '';
+    if (configuredToken && providedToken !== configuredToken) {
+        return Response.json({ error: 'Unauthorized' }, { status: 401 });
+    }
+    const post = typeof body.post === 'string'
+        ? (() => {
+            try {
+                return readRecord(JSON.parse(body.post));
+            }
+            catch {
+                return null;
+            }
+        })()
+        : readRecord(body.post);
+    const message = readString(post?.message) ?? readString(body.text) ?? '';
+    const channelId = readString(post?.channel_id) ?? readString(body.channel_id);
+    const threadId = readString(post?.root_id) ?? readString(body.root_id);
+    const userId = readString(post?.user_id) ?? readString(body.user_id);
+    const teamId = readString(post?.team_id) ?? readString(body.team_id);
+    if (!channelId)
+        return Response.json({ error: 'Missing channel id' }, { status: 400 });
+    const task = readString(body.command) ? message : message;
+    const policy = await context.authorizeSurfaceIngress({
+        surface: 'mattermost',
+        userId,
+        channelId,
+        groupId: teamId ?? channelId,
+        threadId,
+        workspaceId: teamId,
+        conversationKind: threadId ? 'thread' : 'channel',
+        text: task,
+        mentioned: true,
+        metadata: {
+            ...body,
+            ...(post ? { post } : {}),
+        },
+    });
+    if (!policy.allowed) {
+        return Response.json({ error: `Blocked by channel policy: ${policy.reason}` }, { status: 403 });
+    }
+    const binding = await context.routeBindings.upsertBinding({
+        kind: threadId ? 'thread' : 'channel',
+        surfaceKind: 'mattermost',
+        surfaceId: teamId ?? 'mattermost',
+        externalId: threadId ?? channelId,
+        channelId,
+        threadId,
+        title: readString(body.channel_name) ?? channelId,
+        metadata: {
+            ...body,
+            ...(post ? { post } : {}),
+        },
+    });
+    if (!task) {
+        return Response.json({ ok: true, acknowledged: true, bindingId: binding.id });
+    }
+    const controlCommand = context.parseSurfaceControlCommand(task);
+    if (controlCommand) {
+        const message = await context.performSurfaceControlCommand(controlCommand);
+        return Response.json({ ok: true, acknowledged: true, message });
+    }
+    const submission = await context.sessionBroker.submitMessage({
+        routeId: binding.id,
+        surfaceKind: 'mattermost',
+        surfaceId: binding.surfaceId,
+        externalId: binding.externalId,
+        threadId: binding.threadId ?? binding.channelId,
+        userId,
+        displayName: readString(body.user_name) ?? userId,
+        title: binding.title ?? 'Mattermost',
+        body: task,
+        metadata: binding.metadata,
+    });
+    if (submission.mode === 'continued-live') {
+        return Response.json({ ok: true, continued: true, sessionId: submission.session.id, agentId: submission.activeAgentId ?? null });
+    }
+    const spawnResult = context.trySpawnAgent({ mode: 'spawn', task: submission.task }, 'handleMattermostSurfaceWebhook', submission.session.id);
+    if (spawnResult instanceof Response)
+        return spawnResult;
+    await context.sessionBroker.bindAgent(submission.session.id, spawnResult.id);
+    context.queueSurfaceReplyFromBinding(submission.routeBinding ?? binding, {
+        agentId: spawnResult.id,
+        task,
+        sessionId: submission.session.id,
+    });
+    if ((req.headers.get('content-type') ?? '').includes('application/x-www-form-urlencoded')) {
+        return Response.json({
+            response_type: 'ephemeral',
+            text: 'GoodVibes accepted the request and is processing it.',
+        });
+    }
+    return Response.json({
+        ok: true,
+        queued: true,
+        bindingId: binding.id,
+        sessionId: submission.session.id,
+        agentId: spawnResult.id,
+    });
+}

package/dist/_internal/platform/adapters/msteams/index.d.ts

@@ -0,0 +1,3 @@
+import type { SurfaceAdapterContext } from '../types.js';
+export declare function handleMSTeamsSurfaceWebhook(req: Request, context: SurfaceAdapterContext): Promise<Response>;
+//# sourceMappingURL=index.d.ts.map

package/dist/_internal/platform/adapters/msteams/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/_internal/platform/adapters/msteams/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAkCzD,wBAAsB,2BAA2B,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,QAAQ,CAAC,CA+IjH"}

package/dist/_internal/platform/adapters/msteams/index.js

@@ -0,0 +1,169 @@
+import { constantTimeEquals, readBearerOrHeaderToken, readTextBodyWithinLimit } from '@pellux/goodvibes-sdk/platform/adapters/helpers';
+function readRecord(value) {
+    return value && typeof value === 'object' ? value : null;
+}
+function readString(value) {
+    return typeof value === 'string' && value.trim().length > 0 ? value.trim() : undefined;
+}
+function stripTeamsMarkup(text) {
+    return text
+        .replace(/<at>.*?<\/at>/gi, ' ')
+        .replace(/<[^>]+>/g, ' ')
+        .replace(/&nbsp;/gi, ' ')
+        .replace(/&amp;/gi, '&')
+        .replace(/&lt;/gi, '<')
+        .replace(/&gt;/gi, '>')
+        .replace(/\s+/g, ' ')
+        .trim();
+}
+function teamsConversationKind(conversationType, threadId) {
+    if (threadId)
+        return 'thread';
+    if (conversationType === 'personal')
+        return 'direct';
+    if (conversationType === 'channel')
+        return 'channel';
+    return 'group';
+}
+function normalizeConversationId(raw) {
+    if (!raw)
+        return undefined;
+    return raw.replace(/;messageid=[^;]+$/i, '');
+}
+export async function handleMSTeamsSurfaceWebhook(req, context) {
+    const configuredSecret = String(context.configManager.get('surfaces.msteams.appPassword') ?? '')
+        || await context.serviceRegistry.resolveSecret('msteams', 'password')
+        || process.env.MSTEAMS_APP_PASSWORD
+        || '';
+    if (!configuredSecret) {
+        return Response.json({ error: 'Webhook not configured' }, { status: 503 });
+    }
+    const providedToken = readBearerOrHeaderToken(req, 'x-goodvibes-msteams-token');
+    if (!constantTimeEquals(configuredSecret, providedToken)) {
+        return Response.json({ error: 'Unauthorized' }, { status: 401 });
+    }
+    const rawBody = await readTextBodyWithinLimit(req);
+    if (rawBody instanceof Response)
+        return rawBody;
+    let body = null;
+    if (rawBody.trim().length > 0) {
+        try {
+            body = JSON.parse(rawBody);
+        }
+        catch {
+            return Response.json({ error: 'Invalid JSON body' }, { status: 400 });
+        }
+    }
+    const activity = readRecord(body);
+    if (!activity)
+        return Response.json({ error: 'Invalid JSON body' }, { status: 400 });
+    const activityType = readString(activity.type)?.toLowerCase();
+    if (activityType && activityType !== 'message' && activityType !== 'invoke') {
+        return Response.json({ ok: true, ignored: true, activityType });
+    }
+    const conversation = readRecord(activity.conversation);
+    const from = readRecord(activity.from);
+    const value = readRecord(activity.value);
+    const channelData = readRecord(activity.channelData);
+    const conversationId = normalizeConversationId(readString(conversation?.id));
+    if (!conversationId)
+        return Response.json({ error: 'Missing conversation id' }, { status: 400 });
+    const replyToId = readString(activity.replyToId);
+    const serviceUrl = readString(activity.serviceUrl)
+        ?? (String(context.configManager.get('surfaces.msteams.serviceUrl') ?? '').trim() || undefined);
+    const text = stripTeamsMarkup(readString(activity.text)
+        ?? readString(value?.text)
+        ?? readString(value?.command)
+        ?? '');
+    const conversationType = readString(conversation?.conversationType) ?? readString(channelData?.conversationType);
+    const channelId = readString(conversation?.id) ?? conversationId;
+    const team = readRecord(channelData?.team);
+    const channel = readRecord(channelData?.channel);
+    const tenant = readRecord(channelData?.tenant);
+    const teamId = readString(team?.['id']);
+    const channelEntryId = readString(channel?.['id']);
+    const tenantId = readString(tenant?.['id']);
+    const policy = await context.authorizeSurfaceIngress({
+        surface: 'msteams',
+        userId: readString(from?.id),
+        channelId,
+        groupId: channelEntryId ?? channelId,
+        threadId: replyToId,
+        workspaceId: teamId ?? tenantId,
+        conversationKind: teamsConversationKind(conversationType, replyToId),
+        text,
+        mentioned: conversationType === 'personal' || /goodvibes/i.test(text),
+        metadata: {
+            activityId: readString(activity.id),
+            conversationId,
+            conversationType,
+            replyToId,
+            serviceUrl,
+            teamId,
+            channelId: channelEntryId,
+            tenantId,
+        },
+    });
+    if (!policy.allowed) {
+        return Response.json({ error: `Blocked by channel policy: ${policy.reason}` }, { status: 403 });
+    }
+    const binding = await context.routeBindings.upsertBinding({
+        kind: replyToId ? 'thread' : 'channel',
+        surfaceKind: 'msteams',
+        surfaceId: readString(context.configManager.get('surfaces.msteams.botId'))
+            ?? readString(context.configManager.get('surfaces.msteams.appId'))
+            ?? 'msteams',
+        externalId: replyToId ?? conversationId,
+        channelId: channelId,
+        threadId: replyToId,
+        title: readString(conversation?.name) ?? readString(channel?.id) ?? conversationId,
+        metadata: {
+            ...activity,
+            conversationId,
+            serviceUrl,
+            conversationType,
+            replyToId,
+            teamId,
+            channelId: channelEntryId,
+        },
+    });
+    if (!text) {
+        return Response.json({ ok: true, acknowledged: true, bindingId: binding.id });
+    }
+    const controlCommand = context.parseSurfaceControlCommand(text);
+    if (controlCommand) {
+        const message = await context.performSurfaceControlCommand(controlCommand);
+        return Response.json({ ok: true, acknowledged: true, message });
+    }
+    const submission = await context.sessionBroker.submitMessage({
+        routeId: binding.id,
+        surfaceKind: 'msteams',
+        surfaceId: binding.surfaceId,
+        externalId: binding.externalId,
+        threadId: binding.threadId ?? binding.channelId,
+        userId: readString(from?.id),
+        displayName: readString(from?.name) ?? readString(from?.id),
+        title: binding.title ?? 'Microsoft Teams',
+        body: text,
+        metadata: binding.metadata,
+    });
+    if (submission.mode === 'continued-live') {
+        return Response.json({ ok: true, continued: true, sessionId: submission.session.id, agentId: submission.activeAgentId ?? null });
+    }
+    const spawnResult = context.trySpawnAgent({ mode: 'spawn', task: submission.task }, 'handleMSTeamsSurfaceWebhook', submission.session.id);
+    if (spawnResult instanceof Response)
+        return spawnResult;
+    await context.sessionBroker.bindAgent(submission.session.id, spawnResult.id);
+    context.queueSurfaceReplyFromBinding(submission.routeBinding ?? binding, {
+        agentId: spawnResult.id,
+        task: text,
+        sessionId: submission.session.id,
+    });
+    return Response.json({
+        ok: true,
+        queued: true,
+        bindingId: binding.id,
+        sessionId: submission.session.id,
+        agentId: spawnResult.id,
+    });
+}

package/dist/_internal/platform/adapters/ntfy/index.d.ts

@@ -0,0 +1,4 @@
+import type { SurfaceAdapterContext } from '../types.js';
+export declare function handleNtfySurfaceWebhook(req: Request, context: SurfaceAdapterContext): Promise<Response>;
+export declare function handleNtfySurfacePayload(body: Record<string, unknown>, context: SurfaceAdapterContext, url?: URL): Promise<Response>;
+//# sourceMappingURL=index.d.ts.map

package/dist/_internal/platform/adapters/ntfy/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/_internal/platform/adapters/ntfy/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEzD,wBAAsB,wBAAwB,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,QAAQ,CAAC,CA4B9G;AAED,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,OAAO,EAAE,qBAAqB,EAC9B,GAAG,CAAC,EAAE,GAAG,GACR,OAAO,CAAC,QAAQ,CAAC,CAgFnB"}

package/dist/_internal/platform/adapters/ntfy/index.js

@@ -0,0 +1,105 @@
+import { parseJsonRecord, readBearerOrHeaderToken, readTextBodyWithinLimit } from '@pellux/goodvibes-sdk/platform/adapters/helpers';
+export async function handleNtfySurfaceWebhook(req, context) {
+    const enabled = Boolean(context.configManager.get('surfaces.ntfy.enabled'));
+    const configuredToken = String(context.configManager.get('surfaces.ntfy.token') ?? '')
+        || await context.serviceRegistry.resolveSecret('ntfy', 'primary')
+        || process.env.NTFY_ACCESS_TOKEN
+        || '';
+    if (!enabled || !configuredToken) {
+        return Response.json({ error: 'ntfy webhook ingress is not configured' }, { status: 503 });
+    }
+    const providedToken = req.headers.get('x-ntfy-token')
+        ?? readBearerOrHeaderToken(req, 'x-goodvibes-ntfy-token')
+        ?? '';
+    if (providedToken !== configuredToken) {
+        return Response.json({ error: 'Unauthorized' }, { status: 401 });
+    }
+    const rawBody = await readTextBodyWithinLimit(req);
+    if (rawBody instanceof Response)
+        return rawBody;
+    let body = {};
+    if ((req.headers.get('content-type') ?? '').includes('application/json')) {
+        const parsed = parseJsonRecord(rawBody);
+        if (parsed instanceof Response)
+            return parsed;
+        body = parsed;
+    }
+    else if (rawBody.trim().length > 0) {
+        body = { message: rawBody.trim() };
+    }
+    return handleNtfySurfacePayload(body, context, new URL(req.url));
+}
+export async function handleNtfySurfacePayload(body, context, url) {
+    const topic = typeof body.topic === 'string'
+        ? body.topic
+        : url?.searchParams.get('topic') ?? '';
+    const message = typeof body.message === 'string'
+        ? body.message
+        : typeof body.text === 'string'
+            ? body.text
+            : '';
+    if (!topic) {
+        return Response.json({ error: 'Missing ntfy topic' }, { status: 400 });
+    }
+    const policy = await context.authorizeSurfaceIngress({
+        surface: 'ntfy',
+        channelId: topic,
+        groupId: topic,
+        conversationKind: 'channel',
+        text: message,
+        mentioned: true,
+        metadata: body,
+    });
+    if (!policy.allowed) {
+        return Response.json({ error: `Blocked by channel policy: ${policy.reason}` }, { status: 403 });
+    }
+    const binding = await context.routeBindings.upsertBinding({
+        kind: 'channel',
+        surfaceKind: 'ntfy',
+        surfaceId: 'ntfy',
+        externalId: topic,
+        channelId: topic,
+        title: typeof body.title === 'string' ? body.title : topic,
+        metadata: body,
+    });
+    if (!message) {
+        return Response.json({ acknowledged: true, queued: false, bindingId: binding.id });
+    }
+    const submission = await context.sessionBroker.submitMessage({
+        routeId: binding.id,
+        surfaceKind: 'ntfy',
+        surfaceId: binding.surfaceId,
+        externalId: topic,
+        threadId: topic,
+        title: typeof body.title === 'string' ? body.title : topic,
+        body: message,
+        metadata: body,
+    });
+    if (submission.mode === 'continued-live') {
+        return Response.json({
+            acknowledged: true,
+            queued: true,
+            continued: true,
+            bindingId: binding.id,
+            sessionId: submission.session.id,
+            agentId: submission.activeAgentId,
+        });
+    }
+    const spawnResult = context.trySpawnAgent({ mode: 'spawn', task: submission.task }, 'handleNtfySurfaceWebhook', submission.session.id);
+    if (spawnResult instanceof Response)
+        return spawnResult;
+    await context.sessionBroker.bindAgent(submission.session.id, spawnResult.id);
+    context.queueSurfaceReplyFromBinding(submission.routeBinding ?? binding, {
+        agentId: spawnResult.id,
+        task: message,
+        sessionId: submission.session.id,
+    });
+    return Response.json({
+        acknowledged: true,
+        queued: true,
+        bindingId: binding.id,
+        topic,
+        sessionId: submission.session.id,
+        agentId: spawnResult.id,
+    });
+}

package/dist/_internal/platform/adapters/signal/index.d.ts

@@ -0,0 +1,3 @@
+import type { SurfaceAdapterContext } from '../types.js';
+export declare function handleSignalSurfaceWebhook(req: Request, context: SurfaceAdapterContext): Promise<Response>;
+//# sourceMappingURL=index.d.ts.map

package/dist/_internal/platform/adapters/signal/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/_internal/platform/adapters/signal/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAUzD,wBAAsB,0BAA0B,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAgFhH"}