Webhooks

const result = await client.webhooks.list();
result.data;  // Webhook[]

const webhook = await client.webhooks.create({
  url: 'https://yourapp.com/webhooks/whatsrb',
  events: ['message.received', 'message.status', 'message.failed'],
});

webhook.id;       // 1
webhook.url;      // "https://yourapp.com/webhooks/whatsrb"
webhook.events;   // ["message.received", "message.status", "message.failed"]
webhook.secret;   // "whsec_xxx"  — only present on create, store it now!
webhook.isActive; // true

const webhook = await client.webhooks.retrieve('1');

const webhook = await client.webhooks.update('1', {
  url: 'https://yourapp.com/new-path',
  active: false,
  events: ['message.failed'],
});

await client.webhooks.delete('1');  // true

import { WebhookSignature } from '@whatsrb/cloud';

const isValid = WebhookSignature.verify({
  payload: rawBody,
  secret: process.env.WHATSRB_WEBHOOK_SECRET!,
  signature: request.headers['x-whatsrb-signature'] ?? request.headers['x-webhook-signature'],
  timestamp: request.headers['x-webhook-timestamp'],
});

import express from 'express';
import { WebhookSignature, EventRegistry } from '@whatsrb/cloud';

const app = express();
const events = new EventRegistry();

events.on('agent_run.completed', (data) => {
  console.log('Run completed:', data);
});

app.post('/webhooks/whatsrb', express.raw({ type: 'application/json' }), (req, res) => {
  const isValid = WebhookSignature.verify({
    payload: req.body.toString(),
    secret: process.env.WHATSRB_WEBHOOK_SECRET!,
    signature: req.headers['x-whatsrb-signature'] as string,
    timestamp: req.headers['x-webhook-timestamp'] as string,
  });

  if (!isValid) return res.status(401).end();

  const payload = JSON.parse(req.body.toString());
  events.dispatch(payload);
  res.status(200).end();
});

// app/api/webhooks/whatsrb/route.ts
import { WebhookSignature } from '@whatsrb/cloud';
import { NextResponse } from 'next/server';

export async function POST(request: Request) {
  const body = await request.text();
  const signature = request.headers.get('x-whatsrb-signature') ?? '';
  const timestamp = request.headers.get('x-webhook-timestamp') ?? undefined;

  if (!WebhookSignature.verify({
    payload: body,
    secret: process.env.WHATSRB_WEBHOOK_SECRET!,
    signature,
    timestamp,
  })) {
    return NextResponse.json({ error: 'Invalid signature' }, { status: 401 });
  }

  const payload = JSON.parse(body);
  // Handle the event...
  return NextResponse.json({ ok: true });
}