Webhooks

{
  "inputVariables": { "customerName": "Jane Smith" },
  "call": {
    "sessionId": "voo-ymhr-gxy",
    "roomName": "call-out-7f3k2",
    "callId": "8d0c6a8e-2f0b-4d8e-9a43-0b3f7f0e9c11",
    "campaignId": "c-renewals",
    "contactId": "ct-0042",
    "agentId": "agt-billing",
    "deploymentId": 12,
    "channel": "campaign"
  },
  "callOutcome": { "success": false, "disposition": "refund_promised", "source": "structured_output" },
  "transcription": [
    { "role": "user", "text": "I need help with my bill", "timestamp": "2026-01-01T12:00:00+00:00", "stepId": "skill-billing" },
    { "role": "assistant", "text": "I can help with that.", "timestamp": "2026-01-01T12:00:01+00:00", "stepId": "skill-billing" }
  ],
  "customerFeedback": {
    "customerName": "Jane Smith",
    "issueType": "billing",
    "success": false,
    "disposition": "refund_promised"
  },
  "callSummary": {
    "summary": "Caller disputed a duplicate charge. Refund of 20 dollars agreed.",
    "style": "brief"
  }
}

{
  "id": "evt_Jx2c3w0Fq9b8Zt1R4sYvN7aQ",
  "type": "call.ended",
  "createdAt": 1767268800000,
  "orgId": "org_1",
  "data": { "...": "..." }
}

{
  "eventId": "6f1c0e2a-…",
  "ruleId": "b7d4…",
  "ruleName": "Slow replies",
  "metric": "latency_e2e_p95_ms",
  "status": "firing",
  "reminder": true,
  "value": 2400,
  "threshold": 1500,
  "windowMinutes": 15,
  "sampleCount": 12,
  "message": "Slow replies: latency_e2e_p95_ms is 2400ms (> 1500ms, 12 samples over 15m)"
}

import crypto from "node:crypto";
import express from "express";

const signingSecret = loadSecret("gradientflow-webhooks"); // whsec_…, from your secret store

function verify(header, rawBody, secret, toleranceSeconds = 300) {
  const parts = Object.fromEntries((header ?? "").split(",").map((part) => part.split("=")));
  const timestamp = Number(parts.t);
  if (!timestamp || !parts.v1) return false;
  if (Math.abs(Date.now() / 1000 - timestamp) > toleranceSeconds) return false;
  const expected = crypto.createHmac("sha256", secret).update(`${timestamp}.${rawBody}`).digest();
  const given = Buffer.from(parts.v1, "hex");
  return given.length === expected.length && crypto.timingSafeEqual(given, expected);
}

const app = express();
app.post("/webhooks/gradientflow", express.raw({ type: "application/json" }), (req, res) => {
  if (!verify(req.get("X-GF-Signature"), req.body.toString("utf8"), signingSecret)) {
    return res.status(401).end();
  }
  const event = JSON.parse(req.body.toString("utf8"));
  // Handle event.type / event.data (or the Webhook node's payload) here.
  res.status(204).end();
});

import hashlib
import hmac
import time


def verify(header: str | None, raw_body: bytes, secret: str, tolerance_seconds: int = 300) -> bool:
    parts = dict(part.split("=", 1) for part in (header or "").split(",") if "=" in part)
    if not parts.get("t", "").isdigit() or "v1" not in parts:
        return False
    timestamp = int(parts["t"])
    if abs(time.time() - timestamp) > tolerance_seconds:
        return False
    signed = f"{timestamp}.".encode() + raw_body
    expected = hmac.new(secret.encode(), signed, hashlib.sha256).hexdigest()
    return hmac.compare_digest(expected, parts["v1"])

End ──▶ Webhook
End ──▶ Structured Output ──▶ Webhook
End ──▶ Summarization ──▶ Webhook