@graph8/sdk 0.5.3 → 0.7.2

package/README.md

@@ -96,9 +96,17 @@ const analysis = await g8.voice.analysis(call.id);
 const page = await g8.pages.clone('https://competitor.com/pricing');
 const { url } = await g8.pages.publish(page.id);
 
-// Webhook events
-g8.webhooks.on('reply_received', (event) => {
-  slack.send(`${event.contact} replied!`);
+// Webhook events (push model — verify each delivery server-side)
+app.post('/webhooks/graph8', (req, res) => {
+  const event = g8.webhooks.constructEvent(
+    req.rawBody,                          // raw body string (verify before JSON.parse)
+    req.header('X-Studio-Signature'),
+    req.header('X-Studio-Timestamp'),
+    process.env.G8_WEBHOOK_SECRET,
+    { toleranceSeconds: 300 },
+  );
+  if (event.event === 'engagement.email_replied') slack.send(`${event.data.contact} replied!`);
+  res.sendStatus(200);
 });
 ```
 
@@ -263,8 +271,8 @@ const { track, identify, visitors, copilot, calendar } = useG8();
 
 | Method | Description |
 |--------|-------------|
-| `g8.webhooks.on(event, cb)` | Listen for events |
-| `g8.webhooks.stop()` | Stop all listeners |
+| `g8.webhooks.constructEvent(body, sig, ts, secret, opts?)` | Verify a delivery's HMAC signature and return the parsed event (throws `WebhookSignatureError`) |
+| `g8.webhooks.knownEvents` | The known event-type catalog |
 
 ## Auth Modes