Webhooks

cURL

curl -X POST https://jarvissdk.com/api/v1/webhooks \
  -H "x-api-key: jsk_your_key" \
  -H "Content-Type: application/json" \
  -d '{
    "url": "https://your-app.com/webhooks/jarvis",
    "events": ["execution.completed", "execution.failed"],
    "secret": "whsec_your_signing_secret"
  }'

TypeScript

import { JarvisSDK } from "@jarvis-sdk/client";

const sdk = new JarvisSDK({ apiKey: "jsk_your_key" });

const webhook = await sdk.webhooks.create({
  url: "https://your-app.com/webhooks/jarvis",
  events: ["execution.completed", "execution.failed"],
  secret: "whsec_your_signing_secret",
});
console.log("Webhook ID:", webhook.id);

execution.completed payload

{
  "id": "evt_abc123",
  "event": "execution.completed",
  "timestamp": "2026-03-20T15:30:00Z",
  "data": {
    "execution_id": "exec_xyz789",
    "module": "text-toolkit",
    "action": "slugify",
    "status": "success",
    "latency_ms": 12,
    "request_id": "req_abc",
    "tenant_id": "335619a3-..."
  }
}

TypeScript (Node.js)

import crypto from "crypto";

function verifyWebhook(payload: string, signature: string, secret: string): boolean {
  const expected = crypto
    .createHmac("sha256", secret)
    .update(payload)
    .digest("hex");
  return crypto.timingSafeEqual(
    Buffer.from(signature),
    Buffer.from(expected)
  );
}

// Express handler
app.post("/webhooks/jarvis", (req, res) => {
  const isValid = verifyWebhook(
    req.rawBody,
    req.headers["x-webhook-signature"] as string,
    "whsec_your_secret"
  );
  if (!isValid) return res.status(401).send("Invalid signature");

  const event = JSON.parse(req.rawBody);
  console.log("Event:", event.event, event.data);
  res.status(200).send("OK");
});

Next.js App Router

// app/api/webhooks/jarvis/route.ts
import { NextRequest, NextResponse } from "next/server";
import crypto from "crypto";

const SECRET = process.env.JARVIS_WEBHOOK_SECRET!;

export async function POST(req: NextRequest) {
  const body = await req.text();
  const sig = req.headers.get("x-webhook-signature") ?? "";

  const expected = crypto
    .createHmac("sha256", SECRET)
    .update(body)
    .digest("hex");

  if (!crypto.timingSafeEqual(Buffer.from(sig), Buffer.from(expected))) {
    return NextResponse.json({ error: "Invalid signature" }, { status: 401 });
  }

  const event = JSON.parse(body);

  switch (event.event) {
    case "execution.completed":
      console.log("Module executed:", event.data.module, event.data.action);
      break;
    case "billing.limit_approaching":
      // Send Slack alert
      break;
    case "trust.score_changed":
      // Update internal dashboard
      break;
  }

  return NextResponse.json({ received: true });
}