botinabox 2.5.1 → 2.5.2

package/dist/channels/webhook/server.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Minimal HTTP server for webhook inbound messages.
+ * Story 4.7
+ */
+import type { InboundMessage } from "../../shared/index.js";
+export interface WebhookServerOpts {
+    port?: number;
+    secret?: string;
+    onMessage: (msg: InboundMessage) => Promise<void>;
+}
+export declare class WebhookServer {
+    private server;
+    private readonly port;
+    private readonly secret;
+    private readonly onMessage;
+    constructor(opts: WebhookServerOpts);
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    private handleRequest;
+}

package/dist/channels/webhook/server.js

@@ -0,0 +1,91 @@
+/**
+ * Minimal HTTP server for webhook inbound messages.
+ * Story 4.7
+ */
+import { createServer } from "node:http";
+import { verifyHmac } from "./hmac.js";
+export class WebhookServer {
+    server = null;
+    port;
+    secret;
+    onMessage;
+    constructor(opts) {
+        this.port = opts.port ?? 3200;
+        this.secret = opts.secret;
+        this.onMessage = opts.onMessage;
+    }
+    start() {
+        return new Promise((resolve) => {
+            this.server = createServer((req, res) => {
+                void this.handleRequest(req, res);
+            });
+            this.server.listen(this.port, () => resolve());
+        });
+    }
+    stop() {
+        return new Promise((resolve, reject) => {
+            if (!this.server) {
+                resolve();
+                return;
+            }
+            this.server.close((err) => {
+                if (err)
+                    reject(err);
+                else
+                    resolve();
+            });
+        });
+    }
+    async handleRequest(req, res) {
+        const url = req.url ?? "/";
+        const method = req.method ?? "GET";
+        if (method !== "POST" || url !== "/webhook/inbound") {
+            res.writeHead(404, { "Content-Type": "application/json" });
+            res.end(JSON.stringify({ error: "Not found" }));
+            return;
+        }
+        // Read body
+        let body = "";
+        for await (const chunk of req) {
+            body += chunk;
+        }
+        // Verify HMAC if secret is configured
+        if (this.secret) {
+            const sig = req.headers["x-webhook-signature"];
+            if (!sig || !verifyHmac(body, this.secret, sig)) {
+                res.writeHead(401, { "Content-Type": "application/json" });
+                res.end(JSON.stringify({ error: "Invalid signature" }));
+                return;
+            }
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(body);
+        }
+        catch {
+            res.writeHead(400, { "Content-Type": "application/json" });
+            res.end(JSON.stringify({ error: "Invalid JSON" }));
+            return;
+        }
+        // Build InboundMessage from payload
+        const msg = {
+            id: parsed["id"] ?? `webhook-${Date.now()}`,
+            channel: "webhook",
+            from: parsed["from"] ?? "unknown",
+            body: parsed["text"] ?? "",
+            threadId: parsed["threadId"],
+            receivedAt: new Date().toISOString(),
+            raw: parsed,
+        };
+        try {
+            await this.onMessage(msg);
+            res.writeHead(200, { "Content-Type": "application/json" });
+            res.end(JSON.stringify({ ok: true }));
+        }
+        catch (err) {
+            console.error('[webhook] Error:', err);
+            res.writeHead(500, { "Content-Type": "application/json" });
+            res.end(JSON.stringify({ error: "Internal server error" }));
+        }
+    }
+}