refactor(feeds): share signed payload helper

Gio Della-Libera · Gio Della-Libera · commit c62a50640ae8 · 2026-07-16T11:24:45.000-07:00
diff --git a/convex/httpApiV1/catalogFeedSigning.ts b/convex/httpApiV1/catalogFeedSigning.ts
@@ -11,14 +11,14 @@ import {
 export const OPENCLAW_CATALOG_FEED_PAYLOAD_TYPE =
   "openclaw.official-external-plugin-catalog-feed.v1";
 
-type FeedSigningConfig = {
+export type FeedSigningConfig = {
   keyId: string;
   privateKey: CryptoKey;
 };
 
 type SignedFeedEnvelope = {
   schemaVersion: 1;
-  payloadType: typeof OPENCLAW_CATALOG_FEED_PAYLOAD_TYPE;
+  payloadType: string;
   payload: string;
   signatures: readonly {
     keyId: string;
@@ -116,7 +116,8 @@ function toHex(bytes: Uint8Array) {
   return result;
 }
 
-export async function signCatalogFeedPayload(
+export async function signFeedPayload(
+  payloadType: string,
   payload: string,
   config: FeedSigningConfig,
 ): Promise<{ envelope: SignedFeedEnvelope; body: string; sha256: string }> {
@@ -125,12 +126,12 @@ export async function signCatalogFeedPayload(
     await crypto.subtle.sign(
       { name: "Ed25519" },
       config.privateKey,
-      dssePreAuthenticationEncoding(OPENCLAW_CATALOG_FEED_PAYLOAD_TYPE, payloadBytes),
+      dssePreAuthenticationEncoding(payloadType, payloadBytes),
     ),
   );
   const envelope: SignedFeedEnvelope = {
     schemaVersion: 1,
-    payloadType: OPENCLAW_CATALOG_FEED_PAYLOAD_TYPE,
+    payloadType,
     payload: base64UrlEncode(payloadBytes),
     signatures: [
       {
@@ -149,6 +150,10 @@ export async function signCatalogFeedPayload(
   };
 }
 
+export async function signCatalogFeedPayload(payload: string, config: FeedSigningConfig) {
+  return await signFeedPayload(OPENCLAW_CATALOG_FEED_PAYLOAD_TYPE, payload, config);
+}
+
 export async function signedCatalogFeedV1Handler(
   ctx: ActionCtx,
   request: Request,
