openbot 0.5.10 → 0.5.11

package/dist/app/cli.js

@@ -18,7 +18,7 @@ function checkNodeVersion() {
     }
 }
 checkNodeVersion();
-program.name('openbot').description('OpenBot CLI').version('0.5.10');
+program.name('openbot').description('OpenBot CLI').version('0.5.11');
 program
     .command('start')
     .description('Start the OpenBot harness')

package/dist/app/server.js

@@ -447,7 +447,7 @@ export async function startServer(options = {}) {
         }
     });
     const WEBHOOK_TIMEOUT_MS = Number(process.env.OPENBOT_WEBHOOK_TIMEOUT_MS ?? 30000);
-    app.post('/api/webhooks/:provider', async (req, res) => {
+    const handleInboundWebhook = async (req, res) => {
         const provider = req.params.provider?.trim();
         if (!provider || !/^[a-z0-9][a-z0-9_-]*$/i.test(provider)) {
             res.status(400).json({ error: 'Invalid webhook provider' });
@@ -471,6 +471,7 @@ export async function startServer(options = {}) {
             type: 'action:webhook',
             data: {
                 provider,
+                method: req.method,
                 rawBody: rawBody.toString('base64'),
                 headers: pickWebhookHeaders(req),
                 query: req.query,
@@ -478,14 +479,6 @@ export async function startServer(options = {}) {
         };
         try {
             ensureEventId(event);
-            console.log('runAgent', {
-                runId,
-                agentId,
-                event,
-                persistEvents: true,
-                publicBaseUrl: resolvePublicBaseUrl(),
-                onEvent,
-            });
             const runPromise = runAgent({
                 runId,
                 agentId,
@@ -511,6 +504,7 @@ export async function startServer(options = {}) {
             const isTimeout = error instanceof Error && error.message === 'webhook_timeout';
             console.error('[webhook] Failed to process inbound webhook', {
                 provider,
+                method: req.method,
                 agentId,
                 error,
             });
@@ -520,7 +514,9 @@ export async function startServer(options = {}) {
             }
             respondAgentDispatchError(res, error, 'Failed to process webhook');
         }
-    });
+    };
+    app.get('/api/webhooks/:provider', handleInboundWebhook);
+    app.post('/api/webhooks/:provider', handleInboundWebhook);
     app.get('/api/state', async (req, res) => {
         let event;
         try {

package/dist/app/webhook-routing.js

@@ -14,7 +14,7 @@ export function respondAgentDispatchError(res, error, fallbackMessage) {
     res.status(500).json({ error: fallbackMessage });
 }
 /**
- * Routes `POST /api/webhooks/:provider` to agent `<provider>` when that agent exists,
+ * Routes `GET`/`POST /api/webhooks/:provider` to agent `<provider>` when that agent exists,
  * otherwise falls back to {@link WEBHOOK_AGENT_FALLBACK_ID}.
  */
 export async function resolveWebhookAgentId(provider) {

package/docs/plugins.md

@@ -62,16 +62,28 @@ model as the tool result (`history.ts`). Structured fields (e.g. `list`,
 
 ## Inbound webhooks
 
-`POST /api/webhooks/:provider` forwards third-party HTTP payloads onto the bus as
-`action:webhook`. The URL segment is used as the target agent id when
+`GET` and `POST /api/webhooks/:provider` forward third-party HTTP requests onto the
+bus as `action:webhook`. The URL segment is used as the target agent id when
 `~/.openbot/agents/<provider>/AGENT.md` exists; otherwise the request falls back
 to the `system` agent. Attach a plugin to the routed agent and handle
 verification, channel/thread routing, transforms, and HTTP responses there.
 
+GET requests have an empty `rawBody`; use `event.data.method` and `event.data.query`
+for URL verification challenges (for example Meta `hub.challenge`).
+
 ```ts
 builder.on('action:webhook', async function* (event) {
   if (event.data?.provider !== 'slack') return;
 
+  if (event.data.method === 'GET') {
+    const challenge = event.data.query?.['hub.challenge'];
+    yield {
+      type: 'action:webhook:http-response',
+      data: { status: 200, body: String(challenge) },
+    };
+    return;
+  }
+
   const rawBody = Buffer.from(event.data.rawBody, 'base64');
 
   // Optional: control the HTTP response (URL challenges, 401s, custom acks)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openbot",
-  "version": "0.5.10",
+  "version": "0.5.11",
   "private": false,
   "type": "module",
   "engines": {
@@ -11,7 +11,7 @@
     "build": "tsc && mkdir -p dist/assets && cp src/assets/icon.svg dist/assets/icon.svg",
     "start": "node dist/app/cli.js start",
     "format": "prettier --write .",
-    "push": "fly deploy --build-only --push --config deploy/fly.toml -a openbot-runtime --image-label v0.5.10"
+    "push": "fly deploy --build-only --push --config deploy/fly.toml -a openbot-runtime --image-label v0.5.11"
   },
   "bin": {
     "openbot": "./dist/app/cli.js"

package/src/app/cli.ts

@@ -27,7 +27,7 @@ function checkNodeVersion() {
 
 checkNodeVersion();
 
-program.name('openbot').description('OpenBot CLI').version('0.5.10');
+program.name('openbot').description('OpenBot CLI').version('0.5.11');
 
 program
   .command('start')

package/src/app/server.ts

@@ -127,7 +127,7 @@ export async function startServer(options: ServerOptions = {}) {
       const threadId = parts[1]; // undefined if no ":"
       storageService
         .setLastRead({ channelId, threadId, lastReadEventId: chunk.id })
-        .catch(() => { });
+        .catch(() => {});
     }
 
     threadClients.forEach((client) => {
@@ -266,7 +266,7 @@ export async function startServer(options: ServerOptions = {}) {
             return storageService.setLastRead({ channelId, threadId, lastReadEventId: latestId });
           }
         })
-        .catch(() => { });
+        .catch(() => {});
     }
 
     if (channelId === GLOBAL_CHANNEL_ID) {
@@ -539,7 +539,7 @@ export async function startServer(options: ServerOptions = {}) {
 
   const WEBHOOK_TIMEOUT_MS = Number(process.env.OPENBOT_WEBHOOK_TIMEOUT_MS ?? 30_000);
 
-  app.post('/api/webhooks/:provider', async (req, res) => {
+  const handleInboundWebhook = async (req: express.Request, res: express.Response) => {
     const provider = req.params.provider?.trim();
     if (!provider || !/^[a-z0-9][a-z0-9_-]*$/i.test(provider)) {
       res.status(400).json({ error: 'Invalid webhook provider' });
@@ -567,6 +567,7 @@ export async function startServer(options: ServerOptions = {}) {
       type: 'action:webhook',
       data: {
         provider,
+        method: req.method,
         rawBody: rawBody.toString('base64'),
         headers: pickWebhookHeaders(req),
         query: req.query as Record<string, unknown>,
@@ -576,15 +577,6 @@ export async function startServer(options: ServerOptions = {}) {
     try {
       ensureEventId(event);
 
-      console.log('runAgent', {
-        runId,
-        agentId,
-        event,
-        persistEvents: true,
-        publicBaseUrl: resolvePublicBaseUrl(),
-        onEvent,
-      });
-
       const runPromise = runAgent({
         runId,
         agentId,
@@ -610,6 +602,7 @@ export async function startServer(options: ServerOptions = {}) {
       const isTimeout = error instanceof Error && error.message === 'webhook_timeout';
       console.error('[webhook] Failed to process inbound webhook', {
         provider,
+        method: req.method,
         agentId,
         error,
       });
@@ -621,7 +614,10 @@ export async function startServer(options: ServerOptions = {}) {
 
       respondAgentDispatchError(res, error, 'Failed to process webhook');
     }
-  });
+  };
+
+  app.get('/api/webhooks/:provider', handleInboundWebhook);
+  app.post('/api/webhooks/:provider', handleInboundWebhook);
 
   app.get('/api/state', async (req, res) => {
     let event: OpenBotEvent;

package/src/app/types.ts

@@ -148,11 +148,12 @@ export type GetActiveRunsEvent = BaseEvent & {
   type: 'action:storage:get-active-runs';
 };
 
-/** Inbound third-party webhook forwarded from `POST /api/webhooks/:provider`. */
+/** Inbound third-party webhook forwarded from `GET`/`POST /api/webhooks/:provider`. */
 export type WebhookEvent = BaseEvent & {
   type: 'action:webhook';
   data: {
     provider: string;
+    method: string;
     /** Request body encoded as base64 so plugins can verify HMACs on the raw bytes. */
     rawBody: string;
     headers: Record<string, string | string[] | undefined>;

package/src/app/webhook-routing.ts

@@ -24,7 +24,7 @@ export function respondAgentDispatchError(
 }
 
 /**
- * Routes `POST /api/webhooks/:provider` to agent `<provider>` when that agent exists,
+ * Routes `GET`/`POST /api/webhooks/:provider` to agent `<provider>` when that agent exists,
  * otherwise falls back to {@link WEBHOOK_AGENT_FALLBACK_ID}.
  */
 export async function resolveWebhookAgentId(provider: string): Promise<string> {