tbenandClaude Opus 5.5
bd9744043e
A bot hook (bot_hooks) is a secret URL, POST /api/hooks/<token>, whose calls queue the hook's brief plus the raw body as a task, per user and bot like a routine. Only the token's hash is kept (shown once, rotatable); an optional HMAC-SHA256 signing secret is stored encrypted. Calls are rate limited per address and per hook, recorded in bot_hook_events (pruned daily), deduplicated by delivery id, and a call while the last run still waits joins its brief instead of queueing another. The payload is fenced data and HookRunNote tells the bot never to take instructions from it; failed runs retry like routines. A hook can instead watch a computer's browser notifications: the app installs a small watcher that owns org.freedesktop.Notifications on the sandbox's session bus, so Chrome hands it every notification (it only looks for that service at start-up, so Chrome is restarted once, never mid-task), and it posts each one to its hooks, optionally filtered. Computers reach the app at COMPUTER_APP_URL or the app container's name. Users make hooks in the conversation's Hooks modal and manage them all on /admin/routines; bots never create or change hooks. Co-Authored-By: Claude Opus 5.5 <[email protected]>
47 lines
1.8 KiB
TypeScript
47 lines
1.8 KiB
TypeScript
import userAuth from "@/src/functions/backend/auth/user-auth";
|
|
import grabUserConversation from "@/src/functions/backend/db/bot-sessions/grab-user-conversation";
|
|
import grabBotHooks from "@/src/functions/backend/db/bot-hooks/grab-bot-hooks";
|
|
import type { BotHookWithNames } from "@/src/types";
|
|
import safeErrorMessage from "@/src/utils/safe-error-message";
|
|
import type { APIResponseObject, BunextAPIRouteHandler } from "@moduletrace/bunext/types";
|
|
|
|
/**
|
|
* One conversation's hooks of the session user: a bot's own in its chat
|
|
* (`?workspace_id=` left out) or the ones that run in that workspace. The
|
|
* modal loads them when it opens, so the page's props stay small.
|
|
*/
|
|
export const handler: BunextAPIRouteHandler<APIResponseObject<BotHookWithNames>> = async ({ req }) => {
|
|
try {
|
|
if (req.method != "GET") {
|
|
return { success: false, msg: `Method not allowed` };
|
|
}
|
|
|
|
const { user } = await userAuth({ req });
|
|
|
|
if (!user?.logged_in_status || !user.id) {
|
|
return { success: false, msg: `Unauthorized`, logoutUser: true };
|
|
}
|
|
|
|
const url = new URL(req.url);
|
|
const bot_id = Number(url.searchParams.get("bot_id")) || undefined;
|
|
const workspace_id = Number(url.searchParams.get("workspace_id")) || undefined;
|
|
|
|
if (!bot_id) {
|
|
return { success: false, msg: `Pick a bot.` };
|
|
}
|
|
|
|
const conversation = await grabUserConversation({ user_id: user.id, bot_id, workspace_id });
|
|
|
|
return {
|
|
success: true,
|
|
payload: await grabBotHooks({
|
|
user_id: user.id,
|
|
bot_id: conversation.bot.id,
|
|
workspace_id: conversation.workspace_id,
|
|
}),
|
|
};
|
|
} catch (error: unknown) {
|
|
return { success: false, msg: safeErrorMessage({ error }) };
|
|
}
|
|
};
|