Webhook 整合

const express = require('express');
const crypto = require('crypto');
const fetch = require('node-fetch');
 
const app = express();
app.use(express.json());
 
const ASGARD_API_KEY = process.env.ASGARD_API_KEY;
const ASGARD_BASE_URL = 'https://api.asgard-ai.com';
const NAMESPACE = 'your-namespace';
const BOT_PROVIDER = 'your-bot-provider';
const WEBHOOK_SECRET = process.env.WEBHOOK_SECRET;
 
/**
 * 驗證 Webhook 簽名（HMAC-SHA256）
 */
function verifySignature(payload, signature, secret) {
  const expected = `sha256=${crypto
    .createHmac('sha256', secret)
    .update(JSON.stringify(payload))
    .digest('hex')}`;
  return crypto.timingSafeEqual(
    Buffer.from(signature),
    Buffer.from(expected)
  );
}
 
/**
 * 接收 GitHub Push 事件並觸發 Asgard Workflow
 */
app.post('/webhook/github', async (req, res) => {
  const signature = req.headers['x-hub-signature-256'];
 
  // 驗證簽名
  if (!verifySignature(req.body, signature, WEBHOOK_SECRET)) {
    return res.status(401).json({ error: '簽名驗證失敗' });
  }
 
  const { repository, pusher, commits } = req.body;
  const channelId = `github-${repository.name}`;
  const messageId = `push-${Date.now()}`;
 
  // 組成傳送給 Asgard 的訊息
  const message = `GitHub Push 事件：${pusher.name} 推送了 ${commits.length} 個 commit 到 ${repository.full_name}`;
 
  try {
    const asgardUrl = `${ASGARD_BASE_URL}/generic/ns/${NAMESPACE}/bot-provider/${BOT_PROVIDER}/message/sse`;
 
    const asgardResponse = await fetch(asgardUrl, {
      method: 'POST',
      headers: {
        'Content-Type': 'application/json',
        'X-API-KEY': ASGARD_API_KEY,
      },
      body: JSON.stringify({
        customChannelId: channelId,
        customMessageId: messageId,
        text: message,
        action: 'NONE',
      }),
    });
 
    if (!asgardResponse.ok) {
      throw new Error(`Asgard API error: ${asgardResponse.status}`);
    }
 
    // 讀取 Asgard 的串流回應
    const reader = asgardResponse.body.getReader();
    const decoder = new TextDecoder();
    let buffer = '';
    let result = '';
 
    while (true) {
      const { done, value } = await reader.read();
      if (done) break;
 
      buffer += decoder.decode(value, { stream: true });
      const lines = buffer.split('\n');
      buffer = lines.pop() || '';
 
      for (const line of lines) {
        if (!line.startsWith('data:')) continue;
        const jsonStr = line.slice(5).trim();
        if (!jsonStr) continue;
 
        try {
          const event = JSON.parse(jsonStr);
          if (event.eventType === 'asgard.message.complete') {
            result = event.fact.messageComplete.message.text;
          }
          if (event.eventType === 'asgard.run.done') {
            return res.json({ success: true, result });
          }
        } catch (_) {}
      }
    }
 
    res.json({ success: true, result });
  } catch (error) {
    console.error('轉送 Asgard 失敗：', error);
    res.status(500).json({ error: error.message });
  }
});
 
app.listen(3000, () => {
  console.log('Webhook Server 運行於 http://localhost:3000');
});