@websitelabs/n8n-nodes-software-teams 0.12.3

package/dist/src/hitl/slack.js

@@ -0,0 +1,202 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifySlackSignature = verifySlackSignature;
+exports.postQuestion = postQuestion;
+exports.postThreadReply = postThreadReply;
+const https = __importStar(require("node:https"));
+const crypto = __importStar(require("node:crypto"));
+/**
+ * Verify a Slack interactivity webhook request using the HMAC-SHA256 signature
+ * Slack attaches to every inbound HTTP request.
+ *
+ * Security (R-05 / auth hardening — T13): the n8n resume URL is the outer auth
+ * layer; this adds a second layer by confirming the body was signed by YOUR Slack
+ * app's signing secret, so an attacker who learns the URL cannot forge a valid
+ * `hitlAnswer` without knowing that secret.
+ */
+function verifySlackSignature(slackSignature, timestamp, rawBody, signingSecret, maxAgeSeconds = 300) {
+    if (!slackSignature || !timestamp || !signingSecret)
+        return false;
+    const ts = parseInt(timestamp, 10);
+    if (isNaN(ts) || Math.abs(Date.now() / 1000 - ts) > maxAgeSeconds)
+        return false;
+    const baseString = `v0:${timestamp}:${rawBody}`;
+    const expectedSig = 'v0=' +
+        crypto.createHmac('sha256', signingSecret).update(baseString, 'utf8').digest('hex');
+    try {
+        return crypto.timingSafeEqual(Buffer.from(slackSignature, 'utf8'), Buffer.from(expectedSig, 'utf8'));
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Post an agent HITL question to Slack using Block Kit.
+ *
+ * Embeds correlationId (not the full resumeUrl) in the button value — Slack
+ * limits button values to 75 characters; the interactivity handler looks up
+ * the resumeUrl from the HITL state store keyed by correlationId.
+ */
+async function postQuestion(token, channel, question, correlationId, _resumeUrl) {
+    const buttonValue = correlationId.slice(0, 75);
+    const payload = {
+        channel,
+        text: `🤖 *Software Teams agent needs your input*`,
+        blocks: [
+            {
+                type: 'header',
+                text: {
+                    type: 'plain_text',
+                    text: '🤖 Agent question',
+                    emoji: true,
+                },
+            },
+            {
+                type: 'section',
+                text: {
+                    type: 'mrkdwn',
+                    text: question,
+                },
+            },
+            {
+                type: 'divider',
+            },
+            {
+                type: 'section',
+                fields: [
+                    {
+                        type: 'mrkdwn',
+                        text: `*Correlation ID:*\n\`${correlationId}\``,
+                    },
+                    {
+                        type: 'mrkdwn',
+                        text: `*Action:*\nClick the button or reply in thread, then POST to the resume URL`,
+                    },
+                ],
+            },
+            {
+                type: 'actions',
+                elements: [
+                    {
+                        type: 'button',
+                        text: { type: 'plain_text', text: '💬 Provide answer', emoji: true },
+                        action_id: 'hitl_reply',
+                        value: buttonValue,
+                        style: 'primary',
+                    },
+                ],
+            },
+            {
+                type: 'context',
+                elements: [
+                    {
+                        type: 'mrkdwn',
+                        text: 'Your Slack interactivity handler receives this button click, ' +
+                            'looks up the `resumeUrl` from the HITL state store by `correlationId`, ' +
+                            'and POSTs `{ hitlAnswer: "<your answer>", correlationId: "<id>" }` to it.',
+                    },
+                ],
+            },
+        ],
+    };
+    const result = await slackApiCall('chat.postMessage', token, payload);
+    return {
+        ts: result['ts'],
+        channel: result['channel'],
+    };
+}
+/**
+ * Post a threaded reply in an existing Slack conversation.
+ * Uses the Slack HTTP API directly to avoid the n8n built-in Slack tool's
+ * thread_ts bug (GitHub #21252).
+ */
+async function postThreadReply(token, channel, threadTs, message) {
+    await slackApiCall('chat.postMessage', token, {
+        channel,
+        thread_ts: threadTs,
+        text: message,
+        mrkdwn: true,
+    });
+}
+/** Ingestion boundary: payload type is `unknown` because the Slack API accepts arbitrary JSON shapes per method. */
+async function slackApiCall(method, token, payload) {
+    const body = JSON.stringify(payload);
+    const contentLength = Buffer.byteLength(body, 'utf8');
+    return new Promise((resolve, reject) => {
+        const req = https.request({
+            hostname: 'slack.com',
+            path: `/api/${method}`,
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json; charset=utf-8',
+                'Content-Length': contentLength,
+                Authorization: `Bearer ${token}`,
+                Accept: 'application/json',
+            },
+        }, (res) => {
+            const chunks = [];
+            res.on('data', (chunk) => chunks.push(chunk));
+            res.on('end', () => {
+                var _a;
+                const raw = Buffer.concat(chunks).toString('utf8');
+                const parseResult = (() => {
+                    try {
+                        return { ok: true, parsed: JSON.parse(raw) };
+                    }
+                    catch (e) {
+                        return { ok: false, err: e };
+                    }
+                })();
+                if (!parseResult.ok) {
+                    reject(new Error(`Slack API ${method}: failed to parse response — ${String(parseResult.err)}\nBody: ${raw.slice(0, 200)}`));
+                    return;
+                }
+                const parsed = parseResult.parsed;
+                if (!parsed['ok']) {
+                    reject(new Error(`Slack API ${method} error: ${String((_a = parsed['error']) !== null && _a !== void 0 ? _a : 'unknown')}`));
+                }
+                else {
+                    resolve(parsed);
+                }
+            });
+            res.on('error', reject);
+        });
+        req.on('error', reject);
+        req.write(body, 'utf8');
+        req.end();
+    });
+}
+//# sourceMappingURL=slack.js.map

package/dist/src/hitl/slack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack.js","sourceRoot":"","sources":["../../../src/hitl/slack.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYA,oDAyBC;AAiBD,oCA4EC;AAOD,0CAYC;AArJD,kDAAoC;AACpC,oDAAsC;AAEtC;;;;;;;;GAQG;AACH,SAAgB,oBAAoB,CAClC,cAAkC,EAClC,SAA6B,EAC7B,OAAe,EACf,aAAiC,EACjC,aAAa,GAAG,GAAG;IAEnB,IAAI,CAAC,cAAc,IAAI,CAAC,SAAS,IAAI,CAAC,aAAa;QAAE,OAAO,KAAK,CAAC;IAElE,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACnC,IAAI,KAAK,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,EAAE,CAAC,GAAG,aAAa;QAAE,OAAO,KAAK,CAAC;IAEhF,MAAM,UAAU,GAAG,MAAM,SAAS,IAAI,OAAO,EAAE,CAAC;IAChD,MAAM,WAAW,GACf,KAAK;QACL,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAEtF,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,eAAe,CAC3B,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,EACnC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CACjC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAUD;;;;;;GAMG;AACI,KAAK,UAAU,YAAY,CAChC,KAAa,EACb,OAAe,EACf,QAAgB,EAChB,aAAqB,EACrB,UAAkB;IAElB,MAAM,WAAW,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAE/C,MAAM,OAAO,GAAG;QACd,OAAO;QACP,IAAI,EAAE,4CAA4C;QAClD,MAAM,EAAE;YACN;gBACE,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE;oBACJ,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,mBAAmB;oBACzB,KAAK,EAAE,IAAI;iBACZ;aACF;YACD;gBACE,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,QAAQ;iBACf;aACF;YACD;gBACE,IAAI,EAAE,SAAS;aAChB;YACD;gBACE,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE;oBACN;wBACE,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,wBAAwB,aAAa,IAAI;qBAChD;oBACD;wBACE,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,6EAA6E;qBACpF;iBACF;aACF;YACD;gBACE,IAAI,EAAE,SAAS;gBACf,QAAQ,EAAE;oBACR;wBACE,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,IAAI,EAAE;wBACpE,SAAS,EAAE,YAAY;wBACvB,KAAK,EAAE,WAAW;wBAClB,KAAK,EAAE,SAAS;qBACjB;iBACF;aACF;YACD;gBACE,IAAI,EAAE,SAAS;gBACf,QAAQ,EAAE;oBACR;wBACE,IAAI,EAAE,QAAQ;wBACd,IAAI,EACF,+DAA+D;4BAC/D,yEAAyE;4BACzE,2EAA2E;qBAC9E;iBACF;aACF;SACF;KACF,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,kBAAkB,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACtE,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,IAAI,CAAW;QAC1B,OAAO,EAAE,MAAM,CAAC,SAAS,CAAW;KACrC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,eAAe,CACnC,KAAa,EACb,OAAe,EACf,QAAgB,EAChB,OAAe;IAEf,MAAM,YAAY,CAAC,kBAAkB,EAAE,KAAK,EAAE;QAC5C,OAAO;QACP,SAAS,EAAE,QAAQ;QACnB,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,IAAI;KACb,CAAC,CAAC;AACL,CAAC;AAED,oHAAoH;AACpH,KAAK,UAAU,YAAY,CACzB,MAAc,EACd,KAAa,EACb,OAAgB;IAEhB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAEtD,OAAO,IAAI,OAAO,CAA0B,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC9D,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CACvB;YACE,QAAQ,EAAE,WAAW;YACrB,IAAI,EAAE,QAAQ,MAAM,EAAE;YACtB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,iCAAiC;gBACjD,gBAAgB,EAAE,aAAa;gBAC/B,aAAa,EAAE,UAAU,KAAK,EAAE;gBAChC,MAAM,EAAE,kBAAkB;aAC3B;SACF,EACD,CAAC,GAAG,EAAE,EAAE;YACN,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YACtD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;;gBACjB,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACnD,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE;oBACxB,IAAI,CAAC;wBACH,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,EAAE,CAAC;oBACnF,CAAC;oBAAC,OAAO,CAAC,EAAE,CAAC;wBACX,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;oBACxC,CAAC;gBACH,CAAC,CAAC,EAAE,CAAC;gBACL,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;oBACpB,MAAM,CACJ,IAAI,KAAK,CACP,aAAa,MAAM,gCAAgC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CACzG,CACF,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;gBAClC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;oBAClB,MAAM,CACJ,IAAI,KAAK,CACP,aAAa,MAAM,WAAW,MAAM,CAAC,MAAA,MAAM,CAAC,OAAO,CAAC,mCAAI,SAAS,CAAC,EAAE,CACrE,CACF,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,MAAM,CAAC,CAAC;gBAClB,CAAC;YACH,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,CAAC,CACF,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/src/ingestion/context.d.ts

@@ -0,0 +1,38 @@
+import type { ClickUpRef } from "@websitelabs/software-teams";
+/** The credential fields this adapter reads for ClickUp fetching. */
+export interface ClickUpContextCredentials {
+    clickupApiKey: string;
+}
+/** The credential fields this adapter reads for Datadog fetching. */
+export interface DatadogContextCredentials {
+    datadogApiKey: string;
+    datadogAppKey: string;
+}
+/** Context object emitted for a ClickUp source. */
+export interface ClickUpContext {
+    source: "clickup";
+    ticketId: string;
+    /** PII-scrubbed markdown summary produced by formatTicketAsContext() (R-02, CONTRACT.md §2). */
+    summary: string;
+}
+/** Context object emitted for a Datadog source. */
+export interface DatadogContext {
+    source: "datadog";
+    issueId: string;
+    /** PII-scrubbed markdown summary produced by formatDatadogAsContext(). Whitelisted fields only. */
+    summary: string;
+}
+/**
+ * Fetch a ClickUp ticket and map it onto the envelope's input.context.
+ * Temporarily injects the credential token into process.env.CLICKUP_API_TOKEN
+ * (the env var fetchClickUpTicket reads), then restores the previous value.
+ * Returns null when the token is absent or the fetch fails (graceful degradation).
+ */
+export declare function buildClickUpContext(ref: ClickUpRef, creds: ClickUpContextCredentials): Promise<ClickUpContext | null>;
+/**
+ * Fetch a Datadog Error Tracking issue and map it onto the envelope's input.context.
+ * Temporarily injects the credential tokens into DATADOG_API_KEY and DATADOG_APP_KEY,
+ * then restores them. Returns null when keys are absent or the fetch fails.
+ */
+export declare function buildDatadogContext(issueId: string, apiBase: string, creds: DatadogContextCredentials): Promise<DatadogContext | null>;
+//# sourceMappingURL=context.d.ts.map

package/dist/src/ingestion/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../../src/ingestion/context.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAE9D,qEAAqE;AACrE,MAAM,WAAW,yBAAyB;IACxC,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,qEAAqE;AACrE,MAAM,WAAW,yBAAyB;IACxC,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,mDAAmD;AACnD,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,SAAS,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,gGAAgG;IAChG,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,mDAAmD;AACnD,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,SAAS,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,mGAAmG;IACnG,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,UAAU,EACf,KAAK,EAAE,yBAAyB,GAC/B,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAwBhC;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,yBAAyB,GAC/B,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CA8BhC"}