Webhooks

import os
from flask import Flask, request, jsonify
from svix.webhooks import Webhook, WebhookVerificationError

app = Flask(__name__)
WEBHOOK_SECRET = os.environ["HANJI_WEBHOOK_SECRET"]  # whsec_… from the dashboard

@app.post("/webhooks/hanji")
def handle():
    # Pass the RAW body and the untouched headers object — signature
    # verification is sensitive to any change to the body bytes.
    try:
        payload = Webhook(WEBHOOK_SECRET).verify(request.get_data(), request.headers)
    except WebhookVerificationError:
        return jsonify(error="invalid signature"), 401

    # Ping events are health checks — acknowledge and stop.
    if payload["type"] == "webhook.ping":
        return jsonify(received=True), 200

    svix_id = request.headers["svix-id"]  # stable dedup key across retries
    status = payload["status"]

    # `completed` AND `partially_failed` both mean "results are ready".
    if status in ("completed", "partially_failed"):
        enqueue_fetch(payload["batch_id"], idempotency_key=svix_id)
    elif status in ("failed", "cancelled"):
        # No results to fetch — record the terminal outcome in your system.
        mark_terminal(payload["batch_id"], status=status, idempotency_key=svix_id)

    return jsonify(received=True), 200

import express from "express";
import { Webhook } from "svix";

const app = express();
const WEBHOOK_SECRET = process.env.HANJI_WEBHOOK_SECRET!; // whsec_… from the dashboard

app.post(
  "/webhooks/hanji",
  express.raw({ type: "application/json" }),
  (req, res) => {
    let payload: any;
    try {
      payload = new Webhook(WEBHOOK_SECRET).verify(req.body, {
        "svix-id": req.header("svix-id")!,
        "svix-timestamp": req.header("svix-timestamp")!,
        "svix-signature": req.header("svix-signature")!,
      });
    } catch {
      return res.status(401).json({ error: "invalid signature" });
    }

    if (payload.type === "webhook.ping") {
      return res.status(200).json({ received: true });
    }

    const svixId = req.header("svix-id")!; // stable dedup key across retries

    // `completed` AND `partially_failed` both mean "results are ready".
    if (["completed", "partially_failed"].includes(payload.status)) {
      enqueueFetch(payload.batch_id, svixId);
    } else if (["failed", "cancelled"].includes(payload.status)) {
      // No results to fetch — record the terminal outcome in your system.
      markTerminal(payload.batch_id, payload.status, svixId);
    }

    return res.status(200).json({ received: true });
  },
);