Hermes daemon faz POST /webhooks/captain/hermes_callback?slug=<profile> mas controller só conhecia ?inbox_id. 404 → resposta do LLM nunca chegava ao Captain. Cliente via só auto-react. Fix: fetch_inbox resolve via Captain::Assistant.find_by(hermes_profile_name) quando slug está presente. Inbox é a primeira CaptainInbox associada a esse assistant. Suporta o pattern admin de re-apontar uma inbox de teste (ex: Angelina) entre vários agentes Hermes. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
121 lines
4.3 KiB
Ruby
121 lines
4.3 KiB
Ruby
# Recebe o callback do Hermes Agent via plugin captain-http-callback.
|
|
#
|
|
# Fluxo:
|
|
# 1. Captain::Hermes::Client dispara mensagem do cliente pro Hermes
|
|
# (POST /webhooks/captain-inbox-<id> no gateway do Hermes).
|
|
# 2. Hermes processa via subscription Codex/etc dele.
|
|
# 3. Hermes invoca o plugin captain-http-callback que POSTa nesta URL:
|
|
# POST /webhooks/captain/hermes_callback?inbox_id=<id>
|
|
# Body: { "content": "<resposta>", "reply_to": ..., "metadata": {...}, "timestamp": ... }
|
|
# 4. Este controller cria a mensagem outgoing na conversation correta.
|
|
#
|
|
# Identificação da conversation: como o Hermes não preserva metadata customizado
|
|
# de forma confiável, identificamos pela ÚLTIMA conversation pending da inbox
|
|
# que recebeu mensagem nos últimos 5 minutos. Aceitável pra PoC com 1 conversa
|
|
# de teste por vez. Pra produção, melhorar com Redis: delivery_id → conversation_id.
|
|
class Webhooks::Captain::HermesCallbackController < ApplicationController
|
|
RECENT_WINDOW = 5.minutes
|
|
|
|
skip_before_action :verify_authenticity_token, raise: false
|
|
before_action :verify_signature
|
|
before_action :fetch_inbox
|
|
|
|
def process_payload
|
|
content = extract_content
|
|
return head :bad_request if content.blank?
|
|
|
|
conversation = recent_conversation_for(@inbox)
|
|
return log_no_conversation_and_ack if conversation.blank?
|
|
|
|
log_reply(conversation, content)
|
|
if defined?(Captain::Hermes::DelayedReplyJob)
|
|
Captain::Hermes::DelayedReplyJob.perform_later(conversation.id, content)
|
|
else
|
|
create_outgoing_message(conversation, content)
|
|
end
|
|
head :ok
|
|
rescue StandardError => e
|
|
Rails.logger.error "[Hermes::Callback] error: #{e.class}: #{e.message}"
|
|
Rails.logger.error e.backtrace.first(5).join("\n")
|
|
head :internal_server_error
|
|
end
|
|
|
|
private
|
|
|
|
def fetch_inbox
|
|
inbox_id = params[:inbox_id].presence || params.dig(:metadata, :inbox_id).presence
|
|
if inbox_id.present?
|
|
@inbox = Inbox.find_by(id: inbox_id)
|
|
elsif (slug = params[:slug].presence)
|
|
# Resolve via slug (hermes_profile_name) — admin pode re-apontar a
|
|
# inbox pra qualquer agente Hermes sem mexer em URL de callback.
|
|
asst = Captain::Assistant.find_by(hermes_profile_name: slug, engine: 'hermes')
|
|
ci = asst&.captain_inboxes&.first
|
|
@inbox = ci&.inbox
|
|
end
|
|
head :not_found if @inbox.blank?
|
|
end
|
|
|
|
def verify_signature
|
|
secret = Captain::Hermes.callback_signing_secret
|
|
return true if secret.blank? # validação desabilitada (PoC sem secret)
|
|
|
|
signature = request.headers['X-Hermes-Callback-Signature'].to_s
|
|
return head :unauthorized if signature.blank?
|
|
|
|
expected = "sha256=#{OpenSSL::HMAC.hexdigest('SHA256', secret, request.raw_post)}"
|
|
return head :unauthorized unless ActiveSupport::SecurityUtils.secure_compare(signature, expected)
|
|
|
|
true
|
|
end
|
|
|
|
def recent_conversation_for(inbox)
|
|
inbox.conversations
|
|
.where('updated_at >= ?', RECENT_WINDOW.ago)
|
|
.where(status: %w[pending open])
|
|
.order(updated_at: :desc)
|
|
.first
|
|
end
|
|
|
|
def log_no_conversation_and_ack
|
|
Rails.logger.warn "[Hermes::Callback] no recent conversation for inbox #{@inbox.id} — ignorando callback"
|
|
head :ok
|
|
end
|
|
|
|
def extract_content
|
|
normalize_for_whatsapp(params[:content].to_s.strip)
|
|
end
|
|
|
|
# Converte markdown padrão (que LLMs default usam) pra formato WhatsApp:
|
|
# **negrito** -> *negrito*
|
|
# WhatsApp usa single asterisk pra bold; double asterisk aparece literal
|
|
# pro cliente, parecendo bug. Defesa caso o SOUL.md não convença o LLM.
|
|
def normalize_for_whatsapp(content)
|
|
return content if content.blank?
|
|
|
|
content.gsub(/\*\*([^*\n]+?)\*\*/, '*\1*')
|
|
end
|
|
|
|
def log_reply(conversation, content)
|
|
Rails.logger.info(
|
|
"[Hermes::Callback] reply received for conv #{conversation.display_id} (#{content.length} chars)"
|
|
)
|
|
end
|
|
|
|
def create_outgoing_message(conversation, content)
|
|
assistant = conversation.inbox.captain_assistant
|
|
sender = assistant.presence || User.find_by(id: conversation.assignee_id)
|
|
|
|
conversation.messages.create!(
|
|
message_type: :outgoing,
|
|
account_id: conversation.account_id,
|
|
inbox_id: conversation.inbox_id,
|
|
sender: sender,
|
|
content: content,
|
|
content_attributes: {
|
|
external_source: 'hermes_callback'
|
|
}
|
|
)
|
|
end
|
|
end
|