Webhooks

{
  "event": "test_run_completed",
  "timestamp": "2026-01-30T10:32:45Z",
  "test_run": {
    "id": "7c9e6679-7425-40de-944b-e07fc1f90ae7",
    "test_run_id": "TR-00042",
    "name": "Emergency Response Test",
    "agent_id": "6ba7b810-9dad-11d1-80b4-00c04fd430c8",
    "agent_name": "Healthcare Assistant",
    "status": "completed",
    "pass_rate": 85.0,
    "passed_count": 17,
    "failed_count": 3,
    "error_count": 0,
    "total_scenarios": 20,
    "started_at": "2026-01-30T10:30:00Z",
    "completed_at": "2026-01-30T10:32:45Z",
    "duration_seconds": 165
  },
  "results_url": "https://app.preclinical.dev/test/7c9e6679-7425.../results"
}

const crypto = require('crypto');

function verifyWebhookSignature(payload, signature, timestamp, secret) {
  // Recreate the signed payload
  const signedPayload = `${timestamp}.${JSON.stringify(payload)}`;

  // Compute expected signature
  const expectedSignature = crypto
    .createHmac('sha256', secret)
    .update(signedPayload)
    .digest('hex');

  // Compare signatures (timing-safe)
  return crypto.timingSafeEqual(
    Buffer.from(signature),
    Buffer.from(expectedSignature)
  );
}

// In your webhook handler
app.post('/webhook', (req, res) => {
  const signature = req.headers['x-webhook-signature'];
  const timestamp = req.headers['x-webhook-timestamp'];

  if (!verifyWebhookSignature(req.body, signature, timestamp, WEBHOOK_SECRET)) {
    return res.status(401).send('Invalid signature');
  }

  // Process the webhook...
  console.log('Test run completed:', req.body.test_run.id);
  res.status(200).send('OK');
});

import hmac
import hashlib
import json

def verify_webhook_signature(payload: dict, signature: str, timestamp: str, secret: str) -> bool:
    signed_payload = f"{timestamp}.{json.dumps(payload, separators=(',', ':'))}"
    expected_signature = hmac.new(
        secret.encode(),
        signed_payload.encode(),
        hashlib.sha256
    ).hexdigest()
    return hmac.compare_digest(signature, expected_signature)

// Express.js webhook handler that posts to Slack
app.post('/webhook/preclinical', async (req, res) => {
  const { test_run, results_url } = req.body;

  const emoji = test_run.pass_rate >= 90 ? ':white_check_mark:' : ':warning:';

  await fetch(SLACK_WEBHOOK_URL, {
    method: 'POST',
    headers: { 'Content-Type': 'application/json' },
    body: JSON.stringify({
      text: `${emoji} *${test_run.agent_name}* test completed`,
      blocks: [
        {
          type: 'section',
          text: {
            type: 'mrkdwn',
            text: `${emoji} *${test_run.agent_name}* test completed\n` +
                  `Pass Rate: *${test_run.pass_rate}%*\n` +
                  `Passed: ${test_run.passed_count} | Failed: ${test_run.failed_count} | Errors: ${test_run.error_count}`
          }
        },
        {
          type: 'actions',
          elements: [{
            type: 'button',
            text: { type: 'plain_text', text: 'View Results' },
            url: results_url
          }]
        }
      ]
    })
  });

  res.status(200).send('OK');
});