@twentyhq/call-recorder 1.0.1 → 1.0.2

package/src/logic-functions/recall-webhook.mjs

@@ -0,0 +1,391 @@
+import { createRequire as __createRequire } from 'module';
+const require = __createRequire(import.meta.url);
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __commonJS = (cb, mod) => function __require() {
+  try {
+    return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+  } catch (e) {
+    throw mod = 0, e;
+  }
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+
+// node_modules/@sniptt/guards/build/guards/primitives.js
+var require_primitives = __commonJS({
+  "node_modules/@sniptt/guards/build/guards/primitives.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.isSymbol = exports.isBigInt = exports.isString = exports.isNumber = exports.isBoolean = exports.isUndefined = void 0;
+    var isUndefined3 = (term) => {
+      return typeof term === "undefined";
+    };
+    exports.isUndefined = isUndefined3;
+    var isBoolean = (term) => {
+      return typeof term === "boolean";
+    };
+    exports.isBoolean = isBoolean;
+    var isNumber = (term) => {
+      return typeof term === "number" && !Number.isNaN(term);
+    };
+    exports.isNumber = isNumber;
+    var isString2 = (term) => {
+      return typeof term === "string";
+    };
+    exports.isString = isString2;
+    var isBigInt = (term) => {
+      return typeof term === "bigint";
+    };
+    exports.isBigInt = isBigInt;
+    var isSymbol = (term) => {
+      return typeof term === "symbol";
+    };
+    exports.isSymbol = isSymbol;
+  }
+});
+
+// node_modules/@sniptt/guards/build/guards/structural.js
+var require_structural = __commonJS({
+  "node_modules/@sniptt/guards/build/guards/structural.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.isDate = exports.isWeakSet = exports.isWeakMap = exports.isSet = exports.isMap = exports.isArray = exports.isObject = exports.isFunction = exports.isNull = void 0;
+    var isNull2 = (term) => {
+      return term === null;
+    };
+    exports.isNull = isNull2;
+    var isFunction = (term) => {
+      return typeof term === "function";
+    };
+    exports.isFunction = isFunction;
+    var isObject2 = (term) => {
+      return !exports.isNull(term) && typeof term === "object";
+    };
+    exports.isObject = isObject2;
+    var isArray2 = (term) => {
+      return Array.isArray(term);
+    };
+    exports.isArray = isArray2;
+    var isMap = (term) => {
+      return term instanceof Map;
+    };
+    exports.isMap = isMap;
+    var isSet = (term) => {
+      return term instanceof Set;
+    };
+    exports.isSet = isSet;
+    var isWeakMap = (term) => {
+      return term instanceof WeakMap;
+    };
+    exports.isWeakMap = isWeakMap;
+    var isWeakSet = (term) => {
+      return term instanceof WeakSet;
+    };
+    exports.isWeakSet = isWeakSet;
+    var isDate = (term) => {
+      return term instanceof Date;
+    };
+    exports.isDate = isDate;
+  }
+});
+
+// node_modules/@sniptt/guards/build/guards/convenience.js
+var require_convenience = __commonJS({
+  "node_modules/@sniptt/guards/build/guards/convenience.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.isNegativeInteger = exports.isNonNegativeInteger = exports.isPositiveInteger = exports.isInteger = exports.isNumberOrNaN = exports.isNonEmptyString = exports.isNonEmptyArray = exports.isObjectOrNull = void 0;
+    var primitives_1 = require_primitives();
+    var structural_1 = require_structural();
+    var isObjectOrNull = (term) => {
+      return typeof term === "object";
+    };
+    exports.isObjectOrNull = isObjectOrNull;
+    var isNonEmptyArray = (term) => {
+      return structural_1.isArray(term) && term.length > 0;
+    };
+    exports.isNonEmptyArray = isNonEmptyArray;
+    var isNonEmptyString2 = (term) => {
+      return primitives_1.isString(term) && term.length > 0;
+    };
+    exports.isNonEmptyString = isNonEmptyString2;
+    var isNumberOrNaN = (term) => {
+      return typeof term === "number";
+    };
+    exports.isNumberOrNaN = isNumberOrNaN;
+    var isInteger = (term) => {
+      return primitives_1.isNumber(term) && Number.isInteger(term);
+    };
+    exports.isInteger = isInteger;
+    var isPositiveInteger = (term) => {
+      return exports.isInteger(term) && term > 0;
+    };
+    exports.isPositiveInteger = isPositiveInteger;
+    var isNonNegativeInteger = (term) => {
+      return exports.isInteger(term) && term >= 0;
+    };
+    exports.isNonNegativeInteger = isNonNegativeInteger;
+    var isNegativeInteger = (term) => {
+      return exports.isInteger(term) && term < 0;
+    };
+    exports.isNegativeInteger = isNegativeInteger;
+  }
+});
+
+// node_modules/@sniptt/guards/build/index.js
+var require_build = __commonJS({
+  "node_modules/@sniptt/guards/build/index.js"(exports) {
+    "use strict";
+    var __createBinding = exports && exports.__createBinding || (Object.create ? (function(o, m, k, k2) {
+      if (k2 === void 0) k2 = k;
+      Object.defineProperty(o, k2, { enumerable: true, get: function() {
+        return m[k];
+      } });
+    }) : (function(o, m, k, k2) {
+      if (k2 === void 0) k2 = k;
+      o[k2] = m[k];
+    }));
+    var __setModuleDefault = exports && exports.__setModuleDefault || (Object.create ? (function(o, v) {
+      Object.defineProperty(o, "default", { enumerable: true, value: v });
+    }) : function(o, v) {
+      o["default"] = v;
+    });
+    var __importStar = exports && exports.__importStar || function(mod) {
+      if (mod && mod.__esModule) return mod;
+      var result = {};
+      if (mod != null) {
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+      }
+      __setModuleDefault(result, mod);
+      return result;
+    };
+    var __exportStar = exports && exports.__exportStar || function(m, exports2) {
+      for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports2, p)) __createBinding(exports2, m, p);
+    };
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.structural = exports.primitives = exports.convenience = void 0;
+    exports.convenience = __importStar(require_convenience());
+    __exportStar(require_convenience(), exports);
+    exports.primitives = __importStar(require_primitives());
+    __exportStar(require_primitives(), exports);
+    exports.structural = __importStar(require_structural());
+    __exportStar(require_structural(), exports);
+  }
+});
+
+// src/logic-functions/recall-webhook.ts
+var import_guards4 = __toESM(require_build());
+
+// twenty-sdk-define-stub:__twenty-sdk-define-stub__
+var __defineFactoryStub = (config) => ({
+  success: true,
+  config,
+  errors: []
+});
+var __anyHandler = {
+  get(_target, prop) {
+    if (prop === "__esModule") return true;
+    if (prop === Symbol.toPrimitive) return () => "";
+    if (typeof prop === "symbol") return void 0;
+    return new Proxy(() => void 0, __anyHandler);
+  },
+  apply() {
+    return new Proxy(() => void 0, __anyHandler);
+  }
+};
+var __anyStub = new Proxy(() => void 0, __anyHandler);
+var defineLogicFunction = __defineFactoryStub;
+
+// src/constants/process-recall-webhook-logic-function-universal-identifier.ts
+var PROCESS_RECALL_WEBHOOK_LOGIC_FUNCTION_UNIVERSAL_IDENTIFIER = "13d9c427-447e-494a-8d3c-1af5d0bacb82";
+
+// src/constants/recall-webhook-logic-function-universal-identifier.ts
+var RECALL_WEBHOOK_LOGIC_FUNCTION_UNIVERSAL_IDENTIFIER = "9215afe6-1497-4149-a49d-e608e239bbaf";
+
+// src/logic-functions/constants/recall-webhook-secret-env-var-name.ts
+var RECALL_WEBHOOK_SECRET_ENV_VAR_NAME = "RECALL_WEBHOOK_SECRET";
+
+// src/logic-functions/utils/as-record.util.ts
+var import_guards = __toESM(require_build());
+var asRecord = (value) => (0, import_guards.isObject)(value) && !(0, import_guards.isArray)(value) ? value : void 0;
+
+// src/logic-functions/utils/get-record-at-path.util.ts
+var getRecordAtPath = (record, path) => path.reduce(
+  (currentValue, pathPart) => asRecord(currentValue)?.[pathPart],
+  record
+);
+
+// src/logic-functions/recall-api/get-recall-webhook-bot-metadata.util.ts
+var getRecallWebhookBotMetadata = (body) => {
+  const data = asRecord(body.data);
+  const bot = asRecord(body.bot);
+  return asRecord(bot?.metadata) ?? asRecord(getRecordAtPath(data, ["bot", "metadata"])) ?? asRecord(getRecordAtPath(data, ["recording", "metadata"])) ?? asRecord(data?.metadata);
+};
+
+// src/logic-functions/utils/is-non-empty-string.util.ts
+var import_guards2 = __toESM(require_build());
+var isNonEmptyString = (value) => (0, import_guards2.isString)(value) && value.trim() !== "";
+
+// src/logic-functions/utils/get-string.util.ts
+var getString = (value) => isNonEmptyString(value) ? value : void 0;
+
+// src/logic-functions/recall-api/extract-twenty-workspace-id-from-recall-webhook.util.ts
+var extractTwentyWorkspaceIdFromRecallWebhook = (body) => getString(getRecallWebhookBotMetadata(body)?.twentyWorkspaceId);
+
+// src/logic-functions/recall-api/verify-recall-webhook-signature.util.ts
+var import_guards3 = __toESM(require_build());
+import { createHmac, timingSafeEqual } from "crypto";
+var RECALL_WEBHOOK_SECRET_PREFIX = "whsec_";
+var RECALL_WEBHOOK_TIMESTAMP_TOLERANCE_SECONDS = 5 * 60;
+var verifyRecallWebhookSignature = ({
+  rawBody,
+  headers,
+  secret,
+  now = /* @__PURE__ */ new Date()
+}) => {
+  if (!secret.startsWith(RECALL_WEBHOOK_SECRET_PREFIX)) {
+    return {
+      valid: false,
+      error: "Webhook secret must start with whsec_"
+    };
+  }
+  const webhookId = headers["webhook-id"] ?? headers["svix-id"];
+  const webhookTimestamp = headers["webhook-timestamp"] ?? headers["svix-timestamp"];
+  const webhookSignature = headers["webhook-signature"] ?? headers["svix-signature"];
+  if ((0, import_guards3.isUndefined)(webhookId) || (0, import_guards3.isUndefined)(webhookTimestamp) || (0, import_guards3.isUndefined)(webhookSignature)) {
+    return {
+      valid: false,
+      error: "Missing webhook signature headers"
+    };
+  }
+  const webhookTimestampSeconds = Number(webhookTimestamp);
+  if (!Number.isInteger(webhookTimestampSeconds)) {
+    return {
+      valid: false,
+      error: "Invalid webhook timestamp"
+    };
+  }
+  const nowSeconds = Math.floor(now.getTime() / 1e3);
+  if (Math.abs(nowSeconds - webhookTimestampSeconds) > RECALL_WEBHOOK_TIMESTAMP_TOLERANCE_SECONDS) {
+    return {
+      valid: false,
+      error: "Webhook timestamp is outside of the allowed tolerance"
+    };
+  }
+  const secretBytes = Buffer.from(
+    secret.slice(RECALL_WEBHOOK_SECRET_PREFIX.length),
+    "base64"
+  );
+  const expectedSignature = createHmac("sha256", secretBytes).update(`${webhookId}.${webhookTimestamp}.${rawBody}`).digest("base64");
+  const providedSignatures = webhookSignature.split(" ").map((signaturePart) => signaturePart.trim()).filter((signaturePart) => signaturePart !== "").flatMap((signaturePart) => {
+    if (signaturePart.startsWith("v1,") || signaturePart.startsWith("v1=")) {
+      return [signaturePart.slice(3).trim()];
+    }
+    return [];
+  }).filter((signaturePart) => signaturePart !== "");
+  if (providedSignatures.length === 0) {
+    return {
+      valid: false,
+      error: "Missing v1 signature"
+    };
+  }
+  const expectedSignatureBuffer = Buffer.from(expectedSignature, "base64");
+  for (const providedSignature of providedSignatures) {
+    const providedSignatureBuffer = Buffer.from(providedSignature, "base64");
+    if (providedSignatureBuffer.length !== expectedSignatureBuffer.length) {
+      continue;
+    }
+    if (timingSafeEqual(providedSignatureBuffer, expectedSignatureBuffer)) {
+      return { valid: true };
+    }
+  }
+  return {
+    valid: false,
+    error: "Signature verification failed"
+  };
+};
+
+// src/logic-functions/utils/get-application-variable-value.util.ts
+var getApplicationVariableValue = (key) => process.env[key];
+
+// src/logic-functions/recall-webhook.ts
+var recallWebhookRouteHandler = (routePayload) => {
+  const webhookSecret = getApplicationVariableValue(
+    RECALL_WEBHOOK_SECRET_ENV_VAR_NAME
+  );
+  if (!isNonEmptyString(webhookSecret)) {
+    throw new Error(
+      "RECALL_WEBHOOK_SECRET server variable is not set. A server admin must copy it from the Recall webhook endpoint settings and set it on the Call Recorder application registration."
+    );
+  }
+  const { rawBody } = routePayload;
+  if ((0, import_guards4.isUndefined)(rawBody)) {
+    throw new Error(
+      "Raw request body was not forwarded by the server; cannot verify the webhook signature"
+    );
+  }
+  const signatureCheck = verifyRecallWebhookSignature({
+    rawBody,
+    headers: routePayload.headers,
+    secret: webhookSecret
+  });
+  if (!signatureCheck.valid) {
+    throw new Error(`Invalid webhook signature: ${signatureCheck.error}`);
+  }
+  const body = routePayload.body;
+  if ((0, import_guards4.isUndefined)(body) || (0, import_guards4.isNull)(body)) {
+    throw new Error("Webhook payload was empty");
+  }
+  const workspaceId = extractTwentyWorkspaceIdFromRecallWebhook(body);
+  if (!isNonEmptyString(workspaceId)) {
+    throw new Error(
+      "Webhook payload is missing the Twenty workspace id in the Recall bot metadata"
+    );
+  }
+  return {
+    workspaceId,
+    targetLogicFunctionUniversalIdentifier: PROCESS_RECALL_WEBHOOK_LOGIC_FUNCTION_UNIVERSAL_IDENTIFIER,
+    payload: body
+  };
+};
+var recall_webhook_default = defineLogicFunction({
+  universalIdentifier: RECALL_WEBHOOK_LOGIC_FUNCTION_UNIVERSAL_IDENTIFIER,
+  name: "recall-webhook",
+  description: "Verifies Recall.ai webhook signatures and resolves the target workspace for the matching CallRecording update.",
+  timeoutSeconds: 30,
+  handler: recallWebhookRouteHandler,
+  serverRouteTriggerSettings: {
+    forwardedRequestHeaders: [
+      "webhook-id",
+      "webhook-timestamp",
+      "webhook-signature",
+      "svix-id",
+      "svix-timestamp",
+      "svix-signature"
+    ]
+  }
+});
+export {
+  recall_webhook_default as default,
+  recallWebhookRouteHandler
+};
+//# sourceMappingURL=recall-webhook.mjs.map

package/src/logic-functions/recall-webhook.mjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../node_modules/@sniptt/guards/lib/guards/primitives.ts", "../../../../node_modules/@sniptt/guards/lib/guards/structural.ts", "../../../../node_modules/@sniptt/guards/lib/guards/convenience.ts", "../../../../node_modules/@sniptt/guards/lib/index.ts", "../../../../src/logic-functions/recall-webhook.ts", "twenty-sdk-define-stub:__twenty-sdk-define-stub__", "../../../../src/constants/process-recall-webhook-logic-function-universal-identifier.ts", "../../../../src/constants/recall-webhook-logic-function-universal-identifier.ts", "../../../../src/logic-functions/constants/recall-webhook-secret-env-var-name.ts", "../../../../src/logic-functions/utils/as-record.util.ts", "../../../../src/logic-functions/utils/get-record-at-path.util.ts", "../../../../src/logic-functions/recall-api/get-recall-webhook-bot-metadata.util.ts", "../../../../src/logic-functions/utils/is-non-empty-string.util.ts", "../../../../src/logic-functions/utils/get-string.util.ts", "../../../../src/logic-functions/recall-api/extract-twenty-workspace-id-from-recall-webhook.util.ts", "../../../../src/logic-functions/recall-api/verify-recall-webhook-signature.util.ts", "../../../../src/logic-functions/utils/get-application-variable-value.util.ts"],
+  "sourcesContent": [null, null, null, null, "import { isNull, isUndefined } from '@sniptt/guards';\nimport { defineLogicFunction, type RoutePayload } from 'twenty-sdk/define';\n\nimport { PROCESS_RECALL_WEBHOOK_LOGIC_FUNCTION_UNIVERSAL_IDENTIFIER } from 'src/constants/process-recall-webhook-logic-function-universal-identifier';\nimport { RECALL_WEBHOOK_LOGIC_FUNCTION_UNIVERSAL_IDENTIFIER } from 'src/constants/recall-webhook-logic-function-universal-identifier';\nimport { RECALL_WEBHOOK_SECRET_ENV_VAR_NAME } from 'src/logic-functions/constants/recall-webhook-secret-env-var-name';\nimport { extractTwentyWorkspaceIdFromRecallWebhook } from 'src/logic-functions/recall-api/extract-twenty-workspace-id-from-recall-webhook.util';\nimport { type RecallWebhookBody } from 'src/logic-functions/recall-api/parse-recall-webhook-event.util';\nimport { verifyRecallWebhookSignature } from 'src/logic-functions/recall-api/verify-recall-webhook-signature.util';\nimport { getApplicationVariableValue } from 'src/logic-functions/utils/get-application-variable-value.util';\nimport { isNonEmptyString } from 'src/logic-functions/utils/is-non-empty-string.util';\n\ntype RecallWebhookResolverResult = {\n  workspaceId: string;\n  targetLogicFunctionUniversalIdentifier: string;\n  payload: RecallWebhookBody;\n};\n\n// A thrown error becomes a non-2xx, which makes Svix retry; a returned result dispatches to the target.\nexport const recallWebhookRouteHandler = (\n  routePayload: RoutePayload<RecallWebhookBody>,\n): RecallWebhookResolverResult => {\n  const webhookSecret = getApplicationVariableValue(\n    RECALL_WEBHOOK_SECRET_ENV_VAR_NAME,\n  );\n\n  if (!isNonEmptyString(webhookSecret)) {\n    throw new Error(\n      'RECALL_WEBHOOK_SECRET server variable is not set. A server admin must copy it from the Recall webhook endpoint settings and set it on the Call Recorder application registration.',\n    );\n  }\n\n  const { rawBody } = routePayload;\n\n  if (isUndefined(rawBody)) {\n    throw new Error(\n      'Raw request body was not forwarded by the server; cannot verify the webhook signature',\n    );\n  }\n\n  const signatureCheck = verifyRecallWebhookSignature({\n    rawBody,\n    headers: routePayload.headers,\n    secret: webhookSecret,\n  });\n\n  if (!signatureCheck.valid) {\n    throw new Error(`Invalid webhook signature: ${signatureCheck.error}`);\n  }\n\n  const body = routePayload.body;\n\n  if (isUndefined(body) || isNull(body)) {\n    throw new Error('Webhook payload was empty');\n  }\n\n  const workspaceId = extractTwentyWorkspaceIdFromRecallWebhook(body);\n\n  if (!isNonEmptyString(workspaceId)) {\n    throw new Error(\n      'Webhook payload is missing the Twenty workspace id in the Recall bot metadata',\n    );\n  }\n\n  return {\n    workspaceId,\n    targetLogicFunctionUniversalIdentifier:\n      PROCESS_RECALL_WEBHOOK_LOGIC_FUNCTION_UNIVERSAL_IDENTIFIER,\n    payload: body,\n  };\n};\n\nexport default defineLogicFunction({\n  universalIdentifier: RECALL_WEBHOOK_LOGIC_FUNCTION_UNIVERSAL_IDENTIFIER,\n  name: 'recall-webhook',\n  description:\n    'Verifies Recall.ai webhook signatures and resolves the target workspace for the matching CallRecording update.',\n  timeoutSeconds: 30,\n  handler: recallWebhookRouteHandler,\n  serverRouteTriggerSettings: {\n    forwardedRequestHeaders: [\n      'webhook-id',\n      'webhook-timestamp',\n      'webhook-signature',\n      'svix-id',\n      'svix-timestamp',\n      'svix-signature',\n    ],\n  },\n});\n", "\n// Auto-generated stub for twenty-sdk/define injected by the SDK CLI build.\n// Real implementations would pull in zod, twenty-shared and ~1MB of code; at\n// runtime only `default.config.handler` is consumed, so tiny no-ops suffice.\nconst __defineFactoryStub = (config) => ({\n  success: true,\n  config,\n  errors: [],\n});\n\nconst __anyHandler = {\n  get(_target, prop) {\n    if (prop === '__esModule') return true;\n    if (prop === Symbol.toPrimitive) return () => '';\n    if (typeof prop === 'symbol') return undefined;\n    return new Proxy(() => undefined, __anyHandler);\n  },\n  apply() {\n    return new Proxy(() => undefined, __anyHandler);\n  },\n};\nconst __anyStub = new Proxy(() => undefined, __anyHandler);\n\nexport const createValidationResult = __defineFactoryStub;\nexport const defineAgent = __defineFactoryStub;\nexport const defineApplication = __defineFactoryStub;\nexport const defineApplicationRole = __defineFactoryStub;\nexport const defineCommandMenuItem = __defineFactoryStub;\nexport const defineConnectionProvider = __defineFactoryStub;\nexport const defineField = __defineFactoryStub;\nexport const defineFrontComponent = __defineFactoryStub;\nexport const defineIndex = __defineFactoryStub;\nexport const defineLogicFunction = __defineFactoryStub;\nexport const defineNavigationMenuItem = __defineFactoryStub;\nexport const defineObject = __defineFactoryStub;\nexport const definePageLayout = __defineFactoryStub;\nexport const definePageLayoutTab = __defineFactoryStub;\nexport const definePermissionFlag = __defineFactoryStub;\nexport const definePostInstallLogicFunction = __defineFactoryStub;\nexport const definePreInstallLogicFunction = __defineFactoryStub;\nexport const defineRole = __defineFactoryStub;\nexport const defineSkill = __defineFactoryStub;\nexport const defineView = __defineFactoryStub;\nexport const defineViewField = __defineFactoryStub;\nexport const AggregateOperations = __anyStub;\nexport const DateDisplayFormat = __anyStub;\nexport const FieldMetadataSettingsOnClickAction = __anyStub;\nexport const FieldType = __anyStub;\nexport const HTTPMethod = __anyStub;\nexport const NavigationMenuItemType = __anyStub;\nexport const NumberDataType = __anyStub;\nexport const ObjectRecordGroupByDateGranularity = __anyStub;\nexport const OnDeleteAction = __anyStub;\nexport const PageLayoutTabLayoutMode = __anyStub;\nexport const RelationType = __anyStub;\nexport const RowLevelPermissionPredicateGroupLogicalOperator = __anyStub;\nexport const RowLevelPermissionPredicateOperand = __anyStub;\nexport const STANDARD_OBJECT = __anyStub;\nexport const STANDARD_OBJECT_UNIVERSAL_IDENTIFIERS = __anyStub;\nexport const STANDARD_PAGE_LAYOUT = __anyStub;\nexport const STANDARD_PAGE_LAYOUT_UNIVERSAL_IDENTIFIERS = __anyStub;\nexport const SystemPermissionFlag = __anyStub;\nexport const ViewCalendarLayout = __anyStub;\nexport const ViewFilterGroupLogicalOperator = __anyStub;\nexport const ViewFilterOperand = __anyStub;\nexport const ViewKey = __anyStub;\nexport const ViewOpenRecordIn = __anyStub;\nexport const ViewSortDirection = __anyStub;\nexport const ViewType = __anyStub;\nexport const ViewVisibility = __anyStub;\nexport const canAccessFullAdminPanel = __anyStub;\nexport const canImpersonate = __anyStub;\nexport const every = __anyStub;\nexport const everyDefined = __anyStub;\nexport const everyEquals = __anyStub;\nexport const favoriteRecordIds = __anyStub;\nexport const featureFlags = __anyStub;\nexport const generateDefaultFieldUniversalIdentifier = __anyStub;\nexport const hasAnySoftDeleteFilterOnView = __anyStub;\nexport const includes = __anyStub;\nexport const includesEvery = __anyStub;\nexport const isDashboardPageLayoutInEditMode = __anyStub;\nexport const isDefined = __anyStub;\nexport const isInSidePanel = __anyStub;\nexport const isLayoutCustomizationModeEnabled = __anyStub;\nexport const isNonEmptyString = __anyStub;\nexport const isSelectAll = __anyStub;\nexport const none = __anyStub;\nexport const noneDefined = __anyStub;\nexport const noneEquals = __anyStub;\nexport const numberOfSelectedRecords = __anyStub;\nexport const objectMetadataItem = __anyStub;\nexport const objectMetadataLabel = __anyStub;\nexport const objectPermissions = __anyStub;\nexport const pageType = __anyStub;\nexport const selectedRecords = __anyStub;\nexport const some = __anyStub;\nexport const someDefined = __anyStub;\nexport const someEquals = __anyStub;\nexport const someNonEmptyString = __anyStub;\nexport const targetObjectReadPermissions = __anyStub;\nexport const targetObjectWritePermissions = __anyStub;\nexport const validateFields = __anyStub;\n", "export const PROCESS_RECALL_WEBHOOK_LOGIC_FUNCTION_UNIVERSAL_IDENTIFIER =\n  '13d9c427-447e-494a-8d3c-1af5d0bacb82';\n", "export const RECALL_WEBHOOK_LOGIC_FUNCTION_UNIVERSAL_IDENTIFIER =\n  '9215afe6-1497-4149-a49d-e608e239bbaf';\n", "export const RECALL_WEBHOOK_SECRET_ENV_VAR_NAME = 'RECALL_WEBHOOK_SECRET';\n", "import { isArray, isObject } from '@sniptt/guards';\n\nexport const asRecord = (value: unknown): Record<string, unknown> | undefined =>\n  isObject(value) && !isArray(value)\n    ? (value as Record<string, unknown>)\n    : undefined;\n", "import { asRecord } from 'src/logic-functions/utils/as-record.util';\n\nexport const getRecordAtPath = (\n  record: Record<string, unknown> | undefined,\n  path: string[],\n): unknown =>\n  path.reduce<unknown>(\n    (currentValue, pathPart) => asRecord(currentValue)?.[pathPart],\n    record,\n  );\n", "import { type RecallWebhookBody } from 'src/logic-functions/recall-api/parse-recall-webhook-event.util';\nimport { asRecord } from 'src/logic-functions/utils/as-record.util';\nimport { getRecordAtPath } from 'src/logic-functions/utils/get-record-at-path.util';\n\n// Recall delivers bot metadata under several body shapes per event family; this is the single reader of all of them.\nexport const getRecallWebhookBotMetadata = (\n  body: RecallWebhookBody,\n): Record<string, unknown> | undefined => {\n  const data = asRecord(body.data);\n  const bot = asRecord(body.bot);\n\n  return (\n    asRecord(bot?.metadata) ??\n    asRecord(getRecordAtPath(data, ['bot', 'metadata'])) ??\n    asRecord(getRecordAtPath(data, ['recording', 'metadata'])) ??\n    asRecord(data?.metadata)\n  );\n};\n", "import { isString } from '@sniptt/guards';\n\n// Trimming variant of @sniptt/guards isNonEmptyString, for normalizing at read boundaries.\nexport const isNonEmptyString = (value: unknown): value is string =>\n  isString(value) && value.trim() !== '';\n", "import { isNonEmptyString } from 'src/logic-functions/utils/is-non-empty-string.util';\n\nexport const getString = (value: unknown): string | undefined =>\n  isNonEmptyString(value) ? value : undefined;\n", "import { getRecallWebhookBotMetadata } from 'src/logic-functions/recall-api/get-recall-webhook-bot-metadata.util';\nimport { type RecallWebhookBody } from 'src/logic-functions/recall-api/parse-recall-webhook-event.util';\nimport { getString } from 'src/logic-functions/utils/get-string.util';\n\nexport const extractTwentyWorkspaceIdFromRecallWebhook = (\n  body: RecallWebhookBody,\n): string | undefined =>\n  getString(getRecallWebhookBotMetadata(body)?.twentyWorkspaceId);\n", "import { createHmac, timingSafeEqual } from 'crypto';\n\nimport { isUndefined } from '@sniptt/guards';\n\nconst RECALL_WEBHOOK_SECRET_PREFIX = 'whsec_';\nconst RECALL_WEBHOOK_TIMESTAMP_TOLERANCE_SECONDS = 5 * 60;\n\nexport const verifyRecallWebhookSignature = ({\n  rawBody,\n  headers,\n  secret,\n  now = new Date(),\n}: {\n  rawBody: string;\n  headers: Record<string, string | undefined>;\n  secret: string;\n  now?: Date;\n}): { valid: true } | { valid: false; error: string } => {\n  if (!secret.startsWith(RECALL_WEBHOOK_SECRET_PREFIX)) {\n    return {\n      valid: false,\n      error: 'Webhook secret must start with whsec_',\n    };\n  }\n\n  const webhookId = headers['webhook-id'] ?? headers['svix-id'];\n  const webhookTimestamp =\n    headers['webhook-timestamp'] ?? headers['svix-timestamp'];\n  const webhookSignature =\n    headers['webhook-signature'] ?? headers['svix-signature'];\n\n  if (\n    isUndefined(webhookId) ||\n    isUndefined(webhookTimestamp) ||\n    isUndefined(webhookSignature)\n  ) {\n    return {\n      valid: false,\n      error: 'Missing webhook signature headers',\n    };\n  }\n\n  const webhookTimestampSeconds = Number(webhookTimestamp);\n\n  if (!Number.isInteger(webhookTimestampSeconds)) {\n    return {\n      valid: false,\n      error: 'Invalid webhook timestamp',\n    };\n  }\n\n  const nowSeconds = Math.floor(now.getTime() / 1000);\n\n  if (\n    Math.abs(nowSeconds - webhookTimestampSeconds) >\n    RECALL_WEBHOOK_TIMESTAMP_TOLERANCE_SECONDS\n  ) {\n    return {\n      valid: false,\n      error: 'Webhook timestamp is outside of the allowed tolerance',\n    };\n  }\n\n  const secretBytes = Buffer.from(\n    secret.slice(RECALL_WEBHOOK_SECRET_PREFIX.length),\n    'base64',\n  );\n  const expectedSignature = createHmac('sha256', secretBytes)\n    .update(`${webhookId}.${webhookTimestamp}.${rawBody}`)\n    .digest('base64');\n  const providedSignatures = webhookSignature\n    .split(' ')\n    .map((signaturePart) => signaturePart.trim())\n    .filter((signaturePart) => signaturePart !== '')\n    .flatMap((signaturePart) => {\n      if (signaturePart.startsWith('v1,') || signaturePart.startsWith('v1=')) {\n        return [signaturePart.slice(3).trim()];\n      }\n\n      return [];\n    })\n    .filter((signaturePart) => signaturePart !== '');\n\n  if (providedSignatures.length === 0) {\n    return {\n      valid: false,\n      error: 'Missing v1 signature',\n    };\n  }\n\n  const expectedSignatureBuffer = Buffer.from(expectedSignature, 'base64');\n\n  for (const providedSignature of providedSignatures) {\n    const providedSignatureBuffer = Buffer.from(providedSignature, 'base64');\n\n    if (providedSignatureBuffer.length !== expectedSignatureBuffer.length) {\n      continue;\n    }\n\n    if (timingSafeEqual(providedSignatureBuffer, expectedSignatureBuffer)) {\n      return { valid: true };\n    }\n  }\n\n  return {\n    valid: false,\n    error: 'Signature verification failed',\n  };\n};\n", "// Application and server variables are injected into process.env on every execution.\nexport const getApplicationVariableValue = (key: string): string | undefined =>\n  process.env[key];\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEO,QAAMA,eAAc,CAAI,SAA0C;AACvE,aAAO,OAAO,SAAS;IACzB;AAFa,YAAA,cAAWA;AAIjB,QAAM,YAAY,CAAI,SAAsC;AACjE,aAAO,OAAO,SAAS;IACzB;AAFa,YAAA,YAAS;AAIf,QAAM,WAAW,CAAI,SAAoC;AAC9D,aAAO,OAAO,SAAS,YAAY,CAAC,OAAO,MAAM,IAAI;IACvD;AAFa,YAAA,WAAQ;AAId,QAAMC,YAAW,CAAI,SAAoC;AAC9D,aAAO,OAAO,SAAS;IACzB;AAFa,YAAA,WAAQA;AAId,QAAM,WAAW,CAAI,SAAoC;AAC9D,aAAO,OAAO,SAAS;IACzB;AAFa,YAAA,WAAQ;AAId,QAAM,WAAW,CAAI,SAAoC;AAC9D,aAAO,OAAO,SAAS;IACzB;AAFa,YAAA,WAAQ;;;;;;;;;;ACpBd,QAAMC,UAAS,CAAI,SAAgC;AACxD,aAAO,SAAS;IAClB;AAFa,YAAA,SAAMA;AAIZ,QAAM,aAAa,CAAwB,SAA0B;AAC1E,aAAO,OAAO,SAAS;IACzB;AAFa,YAAA,aAAU;AAIhB,QAAMC,YAAW,CACtB,SAC0B;AAC1B,aAAO,CAAC,QAAA,OAAO,IAAI,KAAK,OAAO,SAAS;IAC1C;AAJa,YAAA,WAAQA;AAMd,QAAMC,WAAU,CAAO,SAAwC;AACpE,aAAO,MAAM,QAAQ,IAAI;IAC3B;AAFa,YAAA,UAAOA;AAIb,QAAM,QAAQ,CAAU,SAA0C;AACvE,aAAO,gBAAgB;IACzB;AAFa,YAAA,QAAK;AAIX,QAAM,QAAQ,CAAO,SAAoC;AAC9D,aAAO,gBAAgB;IACzB;AAFa,YAAA,QAAK;AAIX,QAAM,YAAY,CACvB,SACyB;AACzB,aAAO,gBAAgB;IACzB;AAJa,YAAA,YAAS;AAMf,QAAM,YAAY,CACvB,SACsB;AACtB,aAAO,gBAAgB;IACzB;AAJa,YAAA,YAAS;AAMf,QAAM,SAAS,CAAI,SAAgC;AACxD,aAAO,gBAAgB;IACzB;AAFa,YAAA,SAAM;;;;;;;;;;ACxCnB,QAAA,eAAA;AACA,QAAA,eAAA;AAEO,QAAM,iBAAiB,CAAsB,SAA0B;AAC5E,aAAO,OAAO,SAAS;IACzB;AAFa,YAAA,iBAAc;AAIpB,QAAM,kBAAkB,CAAO,SAAwC;AAC5E,aAAO,aAAA,QAAQ,IAAI,KAAK,KAAK,SAAS;IACxC;AAFa,YAAA,kBAAe;AAIrB,QAAMC,oBAAmB,CAAI,SAAoC;AACtE,aAAO,aAAA,SAAS,IAAI,KAAK,KAAK,SAAS;IACzC;AAFa,YAAA,mBAAgBA;AAItB,QAAM,gBAAgB,CAAI,SAAoC;AACnE,aAAO,OAAO,SAAS;IACzB;AAFa,YAAA,gBAAa;AAInB,QAAM,YAAY,CAAI,SAAoC;AAC/D,aAAO,aAAA,SAAS,IAAI,KAAK,OAAO,UAAU,IAAI;IAChD;AAFa,YAAA,YAAS;AAIf,QAAM,oBAAoB,CAAI,SAAoC;AACvE,aAAO,QAAA,UAAU,IAAI,KAAK,OAAO;IACnC;AAFa,YAAA,oBAAiB;AAIvB,QAAM,uBAAuB,CAAI,SAAoC;AAC1E,aAAO,QAAA,UAAU,IAAI,KAAK,QAAQ;IACpC;AAFa,YAAA,uBAAoB;AAI1B,QAAM,oBAAoB,CAAI,SAAoC;AACvE,aAAO,QAAA,UAAU,IAAI,KAAK,OAAO;IACnC;AAFa,YAAA,oBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AC/B9B,YAAA,cAAA,aAAA,qBAAA;AACA,iBAAA,uBAAA,OAAA;AACA,YAAA,aAAA,aAAA,oBAAA;AACA,iBAAA,sBAAA,OAAA;AACA,YAAA,aAAA,aAAA,oBAAA;AACA,iBAAA,sBAAA,OAAA;;;;;ACLA,IAAAC,iBAAoC;;;ACIpC,IAAM,sBAAsB,CAAC,YAAY;AAAA,EACvC,SAAS;AAAA,EACT;AAAA,EACA,QAAQ,CAAC;AACX;AAEA,IAAM,eAAe;AAAA,EACnB,IAAI,SAAS,MAAM;AACjB,QAAI,SAAS,aAAc,QAAO;AAClC,QAAI,SAAS,OAAO,YAAa,QAAO,MAAM;AAC9C,QAAI,OAAO,SAAS,SAAU,QAAO;AACrC,WAAO,IAAI,MAAM,MAAM,QAAW,YAAY;AAAA,EAChD;AAAA,EACA,QAAQ;AACN,WAAO,IAAI,MAAM,MAAM,QAAW,YAAY;AAAA,EAChD;AACF;AACA,IAAM,YAAY,IAAI,MAAM,MAAM,QAAW,YAAY;AAWlD,IAAM,sBAAsB;;;AChC5B,IAAM,6DACX;;;ACDK,IAAM,qDACX;;;ACDK,IAAM,qCAAqC;;;ACAlD,oBAAkC;AAE3B,IAAM,WAAW,CAAC,cACvB,wBAAS,KAAK,KAAK,KAAC,uBAAQ,KAAK,IAC5B,QACD;;;ACHC,IAAM,kBAAkB,CAC7B,QACA,SAEA,KAAK;AAAA,EACH,CAAC,cAAc,aAAa,SAAS,YAAY,IAAI,QAAQ;AAAA,EAC7D;AACF;;;ACJK,IAAM,8BAA8B,CACzC,SACwC;AACxC,QAAM,OAAO,SAAS,KAAK,IAAI;AAC/B,QAAM,MAAM,SAAS,KAAK,GAAG;AAE7B,SACE,SAAS,KAAK,QAAQ,KACtB,SAAS,gBAAgB,MAAM,CAAC,OAAO,UAAU,CAAC,CAAC,KACnD,SAAS,gBAAgB,MAAM,CAAC,aAAa,UAAU,CAAC,CAAC,KACzD,SAAS,MAAM,QAAQ;AAE3B;;;ACjBA,IAAAC,iBAAyB;AAGlB,IAAM,mBAAmB,CAAC,cAC/B,yBAAS,KAAK,KAAK,MAAM,KAAK,MAAM;;;ACF/B,IAAM,YAAY,CAAC,UACxB,iBAAiB,KAAK,IAAI,QAAQ;;;ACC7B,IAAM,4CAA4C,CACvD,SAEA,UAAU,4BAA4B,IAAI,GAAG,iBAAiB;;;ACLhE,IAAAC,iBAA4B;AAF5B,SAAS,YAAY,uBAAuB;AAI5C,IAAM,+BAA+B;AACrC,IAAM,6CAA6C,IAAI;AAEhD,IAAM,+BAA+B,CAAC;AAAA,EAC3C;AAAA,EACA;AAAA,EACA;AAAA,EACA,MAAM,oBAAI,KAAK;AACjB,MAKyD;AACvD,MAAI,CAAC,OAAO,WAAW,4BAA4B,GAAG;AACpD,WAAO;AAAA,MACL,OAAO;AAAA,MACP,OAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,YAAY,QAAQ,YAAY,KAAK,QAAQ,SAAS;AAC5D,QAAM,mBACJ,QAAQ,mBAAmB,KAAK,QAAQ,gBAAgB;AAC1D,QAAM,mBACJ,QAAQ,mBAAmB,KAAK,QAAQ,gBAAgB;AAE1D,UACE,4BAAY,SAAS,SACrB,4BAAY,gBAAgB,SAC5B,4BAAY,gBAAgB,GAC5B;AACA,WAAO;AAAA,MACL,OAAO;AAAA,MACP,OAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,0BAA0B,OAAO,gBAAgB;AAEvD,MAAI,CAAC,OAAO,UAAU,uBAAuB,GAAG;AAC9C,WAAO;AAAA,MACL,OAAO;AAAA,MACP,OAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,aAAa,KAAK,MAAM,IAAI,QAAQ,IAAI,GAAI;AAElD,MACE,KAAK,IAAI,aAAa,uBAAuB,IAC7C,4CACA;AACA,WAAO;AAAA,MACL,OAAO;AAAA,MACP,OAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,cAAc,OAAO;AAAA,IACzB,OAAO,MAAM,6BAA6B,MAAM;AAAA,IAChD;AAAA,EACF;AACA,QAAM,oBAAoB,WAAW,UAAU,WAAW,EACvD,OAAO,GAAG,SAAS,IAAI,gBAAgB,IAAI,OAAO,EAAE,EACpD,OAAO,QAAQ;AAClB,QAAM,qBAAqB,iBACxB,MAAM,GAAG,EACT,IAAI,CAAC,kBAAkB,cAAc,KAAK,CAAC,EAC3C,OAAO,CAAC,kBAAkB,kBAAkB,EAAE,EAC9C,QAAQ,CAAC,kBAAkB;AAC1B,QAAI,cAAc,WAAW,KAAK,KAAK,cAAc,WAAW,KAAK,GAAG;AACtE,aAAO,CAAC,cAAc,MAAM,CAAC,EAAE,KAAK,CAAC;AAAA,IACvC;AAEA,WAAO,CAAC;AAAA,EACV,CAAC,EACA,OAAO,CAAC,kBAAkB,kBAAkB,EAAE;AAEjD,MAAI,mBAAmB,WAAW,GAAG;AACnC,WAAO;AAAA,MACL,OAAO;AAAA,MACP,OAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,0BAA0B,OAAO,KAAK,mBAAmB,QAAQ;AAEvE,aAAW,qBAAqB,oBAAoB;AAClD,UAAM,0BAA0B,OAAO,KAAK,mBAAmB,QAAQ;AAEvE,QAAI,wBAAwB,WAAW,wBAAwB,QAAQ;AACrE;AAAA,IACF;AAEA,QAAI,gBAAgB,yBAAyB,uBAAuB,GAAG;AACrE,aAAO,EAAE,OAAO,KAAK;AAAA,IACvB;AAAA,EACF;AAEA,SAAO;AAAA,IACL,OAAO;AAAA,IACP,OAAO;AAAA,EACT;AACF;;;AC3GO,IAAM,8BAA8B,CAAC,QAC1C,QAAQ,IAAI,GAAG;;;AZiBV,IAAM,4BAA4B,CACvC,iBACgC;AAChC,QAAM,gBAAgB;AAAA,IACpB;AAAA,EACF;AAEA,MAAI,CAAC,iBAAiB,aAAa,GAAG;AACpC,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,QAAM,EAAE,QAAQ,IAAI;AAEpB,UAAI,4BAAY,OAAO,GAAG;AACxB,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,QAAM,iBAAiB,6BAA6B;AAAA,IAClD;AAAA,IACA,SAAS,aAAa;AAAA,IACtB,QAAQ;AAAA,EACV,CAAC;AAED,MAAI,CAAC,eAAe,OAAO;AACzB,UAAM,IAAI,MAAM,8BAA8B,eAAe,KAAK,EAAE;AAAA,EACtE;AAEA,QAAM,OAAO,aAAa;AAE1B,UAAI,4BAAY,IAAI,SAAK,uBAAO,IAAI,GAAG;AACrC,UAAM,IAAI,MAAM,2BAA2B;AAAA,EAC7C;AAEA,QAAM,cAAc,0CAA0C,IAAI;AAElE,MAAI,CAAC,iBAAiB,WAAW,GAAG;AAClC,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA,wCACE;AAAA,IACF,SAAS;AAAA,EACX;AACF;AAEA,IAAO,yBAAQ,oBAAoB;AAAA,EACjC,qBAAqB;AAAA,EACrB,MAAM;AAAA,EACN,aACE;AAAA,EACF,gBAAgB;AAAA,EAChB,SAAS;AAAA,EACT,4BAA4B;AAAA,IAC1B,yBAAyB;AAAA,MACvB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF,CAAC;",
+  "names": ["isUndefined", "isString", "isNull", "isObject", "isArray", "isNonEmptyString", "import_guards", "import_guards", "import_guards"]
+}