openbot 0.5.10 → 0.5.12

package/dist/app/cli.js

@@ -18,7 +18,7 @@ function checkNodeVersion() {
     }
 }
 checkNodeVersion();
-program.name('openbot').description('OpenBot CLI').version('0.5.10');
+program.name('openbot').description('OpenBot CLI').version('0.5.12');
 program
     .command('start')
     .description('Start the OpenBot harness')

package/dist/app/server.js

@@ -447,7 +447,7 @@ export async function startServer(options = {}) {
         }
     });
     const WEBHOOK_TIMEOUT_MS = Number(process.env.OPENBOT_WEBHOOK_TIMEOUT_MS ?? 30000);
-    app.post('/api/webhooks/:provider', async (req, res) => {
+    const handleInboundWebhook = async (req, res) => {
         const provider = req.params.provider?.trim();
         if (!provider || !/^[a-z0-9][a-z0-9_-]*$/i.test(provider)) {
             res.status(400).json({ error: 'Invalid webhook provider' });
@@ -471,6 +471,7 @@ export async function startServer(options = {}) {
             type: 'action:webhook',
             data: {
                 provider,
+                method: req.method,
                 rawBody: rawBody.toString('base64'),
                 headers: pickWebhookHeaders(req),
                 query: req.query,
@@ -478,14 +479,6 @@ export async function startServer(options = {}) {
         };
         try {
             ensureEventId(event);
-            console.log('runAgent', {
-                runId,
-                agentId,
-                event,
-                persistEvents: true,
-                publicBaseUrl: resolvePublicBaseUrl(),
-                onEvent,
-            });
             const runPromise = runAgent({
                 runId,
                 agentId,
@@ -511,6 +504,7 @@ export async function startServer(options = {}) {
             const isTimeout = error instanceof Error && error.message === 'webhook_timeout';
             console.error('[webhook] Failed to process inbound webhook', {
                 provider,
+                method: req.method,
                 agentId,
                 error,
             });
@@ -520,7 +514,9 @@ export async function startServer(options = {}) {
             }
             respondAgentDispatchError(res, error, 'Failed to process webhook');
         }
-    });
+    };
+    app.get('/api/webhooks/:provider', handleInboundWebhook);
+    app.post('/api/webhooks/:provider', handleInboundWebhook);
     app.get('/api/state', async (req, res) => {
         let event;
         try {

package/dist/app/webhook-routing.js

@@ -14,7 +14,7 @@ export function respondAgentDispatchError(res, error, fallbackMessage) {
     res.status(500).json({ error: fallbackMessage });
 }
 /**
- * Routes `POST /api/webhooks/:provider` to agent `<provider>` when that agent exists,
+ * Routes `GET`/`POST /api/webhooks/:provider` to agent `<provider>` when that agent exists,
  * otherwise falls back to {@link WEBHOOK_AGENT_FALLBACK_ID}.
  */
 export async function resolveWebhookAgentId(provider) {

package/dist/plugins/storage/service.js

@@ -4,11 +4,11 @@ import { DEFAULT_PLUGINS_DIR, DEFAULT_AGENTS_DIR, DEFAULT_CHANNELS_DIR, getBaseD
 import fs from 'node:fs/promises';
 import { readFileSync } from 'node:fs';
 import path from 'node:path';
-import { fileURLToPath, pathToFileURL } from 'node:url';
+import { fileURLToPath } from 'node:url';
 import crypto from 'node:crypto';
 import matter from 'gray-matter';
 import { OPENBOT_PLUGIN_ID } from '../../app/openbot-plugin.js';
-import { listBuiltInPlugins, parsePluginModule } from '../../services/plugins/registry.js';
+import { listBuiltInPlugins, resolvePlugin } from '../../services/plugins/registry.js';
 import { enrichOpenbotPluginDescriptor } from '../../services/plugins/enrich-openbot-plugin.js';
 import { processService } from '../../services/process.js';
 import { memoryService } from '../memory/service.js';
@@ -372,24 +372,22 @@ const listPluginsFromDisk = async () => {
     const ids = await listInstalledPluginIds(pluginsDir);
     const descriptors = await Promise.all(ids.map(async (id) => {
         try {
-            const pluginDir = path.join(pluginsDir, id);
-            const distPath = path.join(pluginDir, 'dist', 'index.js');
-            const module = await import(pathToFileURL(distPath).href);
-            const parsed = parsePluginModule(module);
-            if (!parsed)
+            const plugin = await resolvePlugin(id);
+            if (!plugin)
                 return null;
+            const pluginDir = path.join(pluginsDir, id);
             const [image, version] = await Promise.all([
                 resolveEntityImageDataUrl(pluginDir),
                 readPluginPackageVersion(pluginDir),
             ]);
             return {
                 id,
-                name: parsed.name || id,
-                description: parsed.description || '',
+                name: plugin.name || id,
+                description: plugin.description || '',
                 builtIn: false,
                 version,
-                image: parsed.image || image,
-                configSchema: parsed.configSchema,
+                image: plugin.image || image,
+                configSchema: plugin.configSchema,
                 createdAt: new Date(),
                 updatedAt: new Date(),
             };

package/docs/plugins.md

@@ -62,16 +62,28 @@ model as the tool result (`history.ts`). Structured fields (e.g. `list`,
 
 ## Inbound webhooks
 
-`POST /api/webhooks/:provider` forwards third-party HTTP payloads onto the bus as
-`action:webhook`. The URL segment is used as the target agent id when
+`GET` and `POST /api/webhooks/:provider` forward third-party HTTP requests onto the
+bus as `action:webhook`. The URL segment is used as the target agent id when
 `~/.openbot/agents/<provider>/AGENT.md` exists; otherwise the request falls back
 to the `system` agent. Attach a plugin to the routed agent and handle
 verification, channel/thread routing, transforms, and HTTP responses there.
 
+GET requests have an empty `rawBody`; use `event.data.method` and `event.data.query`
+for URL verification challenges (for example Meta `hub.challenge`).
+
 ```ts
 builder.on('action:webhook', async function* (event) {
   if (event.data?.provider !== 'slack') return;
 
+  if (event.data.method === 'GET') {
+    const challenge = event.data.query?.['hub.challenge'];
+    yield {
+      type: 'action:webhook:http-response',
+      data: { status: 200, body: String(challenge) },
+    };
+    return;
+  }
+
   const rawBody = Buffer.from(event.data.rawBody, 'base64');
 
   // Optional: control the HTTP response (URL challenges, 401s, custom acks)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openbot",
-  "version": "0.5.10",
+  "version": "0.5.12",
   "private": false,
   "type": "module",
   "engines": {
@@ -11,7 +11,7 @@
     "build": "tsc && mkdir -p dist/assets && cp src/assets/icon.svg dist/assets/icon.svg",
     "start": "node dist/app/cli.js start",
     "format": "prettier --write .",
-    "push": "fly deploy --build-only --push --config deploy/fly.toml -a openbot-runtime --image-label v0.5.10"
+    "push": "fly deploy --build-only --push --config deploy/fly.toml -a openbot-runtime --image-label v0.5.12"
   },
   "bin": {
     "openbot": "./dist/app/cli.js"

package/src/app/cli.ts

@@ -27,7 +27,7 @@ function checkNodeVersion() {
 
 checkNodeVersion();
 
-program.name('openbot').description('OpenBot CLI').version('0.5.10');
+program.name('openbot').description('OpenBot CLI').version('0.5.12');
 
 program
   .command('start')

package/src/app/server.ts

@@ -127,7 +127,7 @@ export async function startServer(options: ServerOptions = {}) {
       const threadId = parts[1]; // undefined if no ":"
       storageService
         .setLastRead({ channelId, threadId, lastReadEventId: chunk.id })
-        .catch(() => { });
+        .catch(() => {});
     }
 
     threadClients.forEach((client) => {
@@ -266,7 +266,7 @@ export async function startServer(options: ServerOptions = {}) {
             return storageService.setLastRead({ channelId, threadId, lastReadEventId: latestId });
           }
         })
-        .catch(() => { });
+        .catch(() => {});
     }
 
     if (channelId === GLOBAL_CHANNEL_ID) {
@@ -539,7 +539,7 @@ export async function startServer(options: ServerOptions = {}) {
 
   const WEBHOOK_TIMEOUT_MS = Number(process.env.OPENBOT_WEBHOOK_TIMEOUT_MS ?? 30_000);
 
-  app.post('/api/webhooks/:provider', async (req, res) => {
+  const handleInboundWebhook = async (req: express.Request, res: express.Response) => {
     const provider = req.params.provider?.trim();
     if (!provider || !/^[a-z0-9][a-z0-9_-]*$/i.test(provider)) {
       res.status(400).json({ error: 'Invalid webhook provider' });
@@ -567,6 +567,7 @@ export async function startServer(options: ServerOptions = {}) {
       type: 'action:webhook',
       data: {
         provider,
+        method: req.method,
         rawBody: rawBody.toString('base64'),
         headers: pickWebhookHeaders(req),
         query: req.query as Record<string, unknown>,
@@ -576,15 +577,6 @@ export async function startServer(options: ServerOptions = {}) {
     try {
       ensureEventId(event);
 
-      console.log('runAgent', {
-        runId,
-        agentId,
-        event,
-        persistEvents: true,
-        publicBaseUrl: resolvePublicBaseUrl(),
-        onEvent,
-      });
-
       const runPromise = runAgent({
         runId,
         agentId,
@@ -610,6 +602,7 @@ export async function startServer(options: ServerOptions = {}) {
       const isTimeout = error instanceof Error && error.message === 'webhook_timeout';
       console.error('[webhook] Failed to process inbound webhook', {
         provider,
+        method: req.method,
         agentId,
         error,
       });
@@ -621,7 +614,10 @@ export async function startServer(options: ServerOptions = {}) {
 
       respondAgentDispatchError(res, error, 'Failed to process webhook');
     }
-  });
+  };
+
+  app.get('/api/webhooks/:provider', handleInboundWebhook);
+  app.post('/api/webhooks/:provider', handleInboundWebhook);
 
   app.get('/api/state', async (req, res) => {
     let event: OpenBotEvent;

package/src/app/types.ts

@@ -148,11 +148,12 @@ export type GetActiveRunsEvent = BaseEvent & {
   type: 'action:storage:get-active-runs';
 };
 
-/** Inbound third-party webhook forwarded from `POST /api/webhooks/:provider`. */
+/** Inbound third-party webhook forwarded from `GET`/`POST /api/webhooks/:provider`. */
 export type WebhookEvent = BaseEvent & {
   type: 'action:webhook';
   data: {
     provider: string;
+    method: string;
     /** Request body encoded as base64 so plugins can verify HMACs on the raw bytes. */
     rawBody: string;
     headers: Record<string, string | string[] | undefined>;

package/src/app/webhook-routing.ts

@@ -24,7 +24,7 @@ export function respondAgentDispatchError(
 }
 
 /**
- * Routes `POST /api/webhooks/:provider` to agent `<provider>` when that agent exists,
+ * Routes `GET`/`POST /api/webhooks/:provider` to agent `<provider>` when that agent exists,
  * otherwise falls back to {@link WEBHOOK_AGENT_FALLBACK_ID}.
  */
 export async function resolveWebhookAgentId(provider: string): Promise<string> {

package/src/plugins/storage/service.ts

@@ -17,7 +17,7 @@ import {
 import fs from 'node:fs/promises';
 import { readFileSync } from 'node:fs';
 import path from 'node:path';
-import { fileURLToPath, pathToFileURL } from 'node:url';
+import { fileURLToPath } from 'node:url';
 import crypto from 'node:crypto';
 import matter from 'gray-matter';
 import {
@@ -32,7 +32,7 @@ import {
 } from '../../services/plugins/domain.js';
 import type { PluginRef } from '../../services/plugins/types.js';
 import { OPENBOT_PLUGIN_ID } from '../../app/openbot-plugin.js';
-import { listBuiltInPlugins, parsePluginModule } from '../../services/plugins/registry.js';
+import { listBuiltInPlugins, resolvePlugin } from '../../services/plugins/registry.js';
 import { enrichOpenbotPluginDescriptor } from '../../services/plugins/enrich-openbot-plugin.js';
 import { OpenBotEvent, OpenBotState } from '../../app/types.js';
 import { processService } from '../../services/process.js';
@@ -456,23 +456,21 @@ const listPluginsFromDisk = async (): Promise<PluginDescriptor[]> => {
   const descriptors = await Promise.all(
     ids.map(async (id): Promise<PluginDescriptor | null> => {
       try {
+        const plugin = await resolvePlugin(id);
+        if (!plugin) return null;
         const pluginDir = path.join(pluginsDir, id);
-        const distPath = path.join(pluginDir, 'dist', 'index.js');
-        const module = await import(pathToFileURL(distPath).href);
-        const parsed = parsePluginModule(module as Record<string, unknown>);
-        if (!parsed) return null;
         const [image, version] = await Promise.all([
           resolveEntityImageDataUrl(pluginDir),
           readPluginPackageVersion(pluginDir),
         ]);
         return {
           id,
-          name: parsed.name || id,
-          description: parsed.description || '',
+          name: plugin.name || id,
+          description: plugin.description || '',
           builtIn: false,
           version,
-          image: parsed.image || image,
-          configSchema: parsed.configSchema,
+          image: plugin.image || image,
+          configSchema: plugin.configSchema,
           createdAt: new Date(),
           updatedAt: new Date(),
         };