Describe, Deploy, Own

// Generated by N2C Compiler
// Workflow: "Refund approval" (ID: "refund_approval")
// Target: Cloudflare Workflow

import { WorkflowEntrypoint } from "cloudflare:workers";

export class N2CWorkflow extends WorkflowEntrypoint {
  async run(event, step) {
    const env = this.env;
    const ctx = {
      input: event.payload,
      output: {},
      nodes: {},
      env,
      execution: {
        id: crypto.randomUUID(),
        startedAt: new Date().toISOString(),
        durationMs: 0,
        retryCount: 0,
        currentStep: "",
        debugMode: false,
        traceId: crypto.randomUUID(),
        logger: { log: (msg) => console.log(msg), error: (msg) => console.error(msg) },
      },
      workflow: {
        id: "refund_approval",
        name: "Refund approval",
        version: 1,
        triggerType: "webhook",
        settings: {},
      },
      node: {},
    };

    // === Node: hook (webhook_trigger) ===
    ctx.nodes["hook"] = ctx.input;
    // === Node: summarize (openai) ===
    ctx.nodes["summarize"] = await step.do("summarize", async () => {
      const summarize_resRes = await fetch("https://api.openai.com/v1/chat/completions", {
        method: "POST",
        headers: {
          "Authorization": "Bearer " + env.CREDENTIAL_SUMMARIZE,
          "Content-Type": "application/json"
        },
        body: JSON.stringify({ model: "gpt-4o-mini", messages: [{ role: "user", content: `One line: why is ${ctx.input?.body?.customer} disputing?` }] }),
      });
      if (!summarize_resRes.ok) {
        throw new Error("OpenAI API error " + summarize_resRes.status + ": " + (await summarize_resRes.text()));
      }
      const summarize_res = await summarize_resRes.json();
      return summarize_res;
    });
    // === Node: ask (slack) ===
    ctx.nodes["ask"] = await step.do("ask", async () => {
      const ask_resRes = await fetch("https://slack.com/api/chat.postMessage", {
        method: "POST",
        headers: {
          "Authorization": "Bearer " + env.CREDENTIAL_ASK,
          "Content-Type": "application/json"
        },
        body: JSON.stringify({ channel: "#billing", text: `Approve refund? ${ctx.input?.summarize?.text}` }),
      });
      if (!ask_resRes.ok) {
        throw new Error("Slack API error " + ask_resRes.status + ": " + (await ask_resRes.text()));
      }
      const ask_res = await ask_resRes.json();
      return ask_res;
    });
    // === Node: approval (wait_for_event) ===
    ctx.nodes["approval"] = { ...(await step.waitForEvent("approval", { type: "refund_decision", timeout: "24 hours" })), timedOut: false };
    // === Node: gate (if) ===
    if (ctx.input?.approval?.approved) {
      // === Node: refund (http_request) ===
      ctx.nodes["refund"] = await step.do("refund", async () => {
        const refund_res = await fetch("https://api.stripe.com/v1/refunds", { method: "POST", signal: AbortSignal.timeout(30000) });
        return { status: refund_res.status, body: await refund_res.text() };
      });
    } else {
    }
  }
}

export default {
  async fetch(request, env, executionCtx) {
    if (["/favicon.ico","/robots.txt","/apple-touch-icon.png"].includes(new URL(request.url).pathname)) {
      return new Response(null, { status: 404 });
    }
    if (request.method === "POST" && new URL(request.url).pathname === "/__resume/approval") {
      {
        const legacyProvided = request.headers.get("X-CC-Webhook-Secret") ?? "";
        const expected = env.CC_RESUME_SECRET_APPROVAL ?? "";
        const legacyMaxLen = Math.max(legacyProvided.length, expected.length);
        let legacyMismatch = legacyProvided.length === expected.length ? 0 : 1;
        for (let i = 0; i < legacyMaxLen; i++) {
          legacyMismatch |= (legacyProvided.charCodeAt(i) || 0) ^ (expected.charCodeAt(i) || 0);
        }
        let authOk = legacyMismatch === 0 && expected !== "";

        const signatureHeader = request.headers.get("X-CC-Signature");
        if (!authOk && signatureHeader && expected !== "") {
          const sigMatch = /^t=(\d+),v1=([0-9a-f]+)$/.exec(signatureHeader);
          if (sigMatch) {
            const signedTimestamp = Number(sigMatch[1]);
            const ageSeconds = Math.abs(Date.now() / 1000 - signedTimestamp);
            if (Number.isFinite(ageSeconds) && ageSeconds <= 300) {
              const rawBody = await request.clone().text();
              const hmacKey = await crypto.subtle.importKey("raw", new TextEncoder().encode(expected), { name: "HMAC", hash: "SHA-256" }, false, ["sign"]);
              const signatureBytes = await crypto.subtle.sign("HMAC", hmacKey, new TextEncoder().encode(`${signedTimestamp}.${rawBody}`));
              const computedSignature = [...new Uint8Array(signatureBytes)].map((b) => b.toString(16).padStart(2, "0")).join("");
              const providedSignature = sigMatch[2];
              const sigMaxLen = Math.max(providedSignature.length, computedSignature.length);
              let sigMismatch = providedSignature.length === computedSignature.length ? 0 : 1;
              for (let i = 0; i < sigMaxLen; i++) {
                sigMismatch |= (providedSignature.charCodeAt(i) || 0) ^ (computedSignature.charCodeAt(i) || 0);
              }
              authOk = sigMismatch === 0;
            }
          }
        }

        if (!authOk) {
          return new Response("Unauthorized", { status: 401 });
        }
      }
      const resumeBody = await request.json().catch(() => ({}));
      const instanceId = typeof resumeBody.instanceId === "string" ? resumeBody.instanceId : "";
      if (instanceId === "") {
        return Response.json({ error: "instanceId is required" }, { status: 400 });
      }
      let instance;
      try {
        instance = await env.WORKFLOW.get(instanceId);
      } catch {
        return Response.json({ error: "Unknown workflow instance" }, { status: 404 });
      }
      try {
        await instance.sendEvent({ type: "refund_decision", payload: resumeBody.payload });
      } catch (resumeErr) {
        return Response.json({ error: String((resumeErr && resumeErr.message) || resumeErr) }, { status: 409 });
      }
      return Response.json({ ok: true, instanceId, type: "refund_decision" });
    }
    if (request.method !== "POST") {
      return new Response("Method Not Allowed", { status: 405 });
    }
    {
      const legacyProvided = request.headers.get("X-CC-Webhook-Secret") ?? "";
      const expected = env.CC_WEBHOOK_SECRET_HOOK ?? "";
      const legacyMaxLen = Math.max(legacyProvided.length, expected.length);
      let legacyMismatch = legacyProvided.length === expected.length ? 0 : 1;
      for (let i = 0; i < legacyMaxLen; i++) {
        legacyMismatch |= (legacyProvided.charCodeAt(i) || 0) ^ (expected.charCodeAt(i) || 0);
      }
      let authOk = legacyMismatch === 0 && expected !== "";

      const signatureHeader = request.headers.get("X-CC-Signature");
      if (!authOk && signatureHeader && expected !== "") {
        const sigMatch = /^t=(\d+),v1=([0-9a-f]+)$/.exec(signatureHeader);
        if (sigMatch) {
          const signedTimestamp = Number(sigMatch[1]);
          const ageSeconds = Math.abs(Date.now() / 1000 - signedTimestamp);
          if (Number.isFinite(ageSeconds) && ageSeconds <= 300) {
            const rawBody = await request.clone().text();
            const hmacKey = await crypto.subtle.importKey("raw", new TextEncoder().encode(expected), { name: "HMAC", hash: "SHA-256" }, false, ["sign"]);
            const signatureBytes = await crypto.subtle.sign("HMAC", hmacKey, new TextEncoder().encode(`${signedTimestamp}.${rawBody}`));
            const computedSignature = [...new Uint8Array(signatureBytes)].map((b) => b.toString(16).padStart(2, "0")).join("");
            const providedSignature = sigMatch[2];
            const sigMaxLen = Math.max(providedSignature.length, computedSignature.length);
            let sigMismatch = providedSignature.length === computedSignature.length ? 0 : 1;
            for (let i = 0; i < sigMaxLen; i++) {
              sigMismatch |= (providedSignature.charCodeAt(i) || 0) ^ (computedSignature.charCodeAt(i) || 0);
            }
            authOk = sigMismatch === 0;
          }
        }
      }

      if (!authOk) {
        return new Response("Unauthorized", { status: 401 });
      }
    }
    const payload = await request.json().catch(() => ({}));
    const instance = await env.WORKFLOW.create({ params: payload });
    return Response.json({ instanceId: instance.id, status: "started" });
  },
};