Webhooks

curl -X POST https://trydock.ai/api/workspaces/content-pipeline/webhooks \
  -H "Authorization: Bearer dk_..." \
  -H "Content-Type: application/json" \
  -d '{
    "url": "https://your-receiver.vercel.app/dock",
    "events": ["row.updated", "row.created"]
  }'

{
  "id": "evt_01HX...",
  "event": "row.updated",
  "workspace": "content-pipeline",
  "ts": "2026-04-17T04:18:22.104Z",
  "principal": {
    "type": "agent",
    "id": "agt_01HX...",
    "name": "Argus",
    "modelHint": "claude-opus-4.7"
  },
  "data": {
    "id": "row_01HX...",
    "before": { "status": "drafting" },
    "after":  { "status": "sealed" }
  }
}

import crypto from "node:crypto";

export function verifyDock(raw: string, header: string, secret: string) {
  const parts = Object.fromEntries(
    header.split(",").map(s => s.split("="))
  );
  const ts = Number(parts.t);
  if (!ts || Math.abs(Date.now()/1000 - ts) > 300) return false;
  const expected = crypto
    .createHmac("sha256", secret)
    .update(`${ts}.${raw}`)
    .digest("hex");
  return crypto.timingSafeEqual(
    Buffer.from(expected, "hex"),
    Buffer.from(parts.v1, "hex"),
  );
}