Webhooks

{
  "id": "019a0000-0000-7000-8000-000000000001",
  "type": "monitor.matched",
  "schemaVersion": 1,
  "occurredAt": "2026-10-14T15:30:00.000Z",
  "data": {
    "conversation": {
      "id": "019a0000-0000-7000-8000-000000000002",
      "externalId": "your-call-123",
      "endUserId": null,
      "startedAt": "2026-10-14T15:25:00.000Z",
      "url": "https://dashboard.zelto.ai/org/example/conversations/019a0000-0000-7000-8000-000000000002"
    },
    "agent": {
      "id": "019a0000-0000-7000-8000-000000000003",
      "name": "Collections agent"
    },
    "monitor": {
      "id": "019a0000-0000-7000-8000-000000000004",
      "name": "Complaint",
      "version": 3
    },
    "result": {
      "id": "019a0000-0000-7000-8000-000000000005",
      "affected": true,
      "overallScore": 100,
      "evaluatedAt": "2026-10-14T15:30:00.000Z",
      "items": [
        {
          "stageId": "complaint",
          "label": "Complaint",
          "kind": "boolean",
          "value": true,
          "reasoning": "The caller requests to file a complaint."
        }
      ]
    }
  }
}

{ "id": "019a0000-0000-7000-8000-000000000099", "type": "webhook.test", "schemaVersion": 1, "occurredAt": "2026-10-14T15:30:00.000Z", "data": { "test": true } }

import { createHmac, timingSafeEqual } from "node:crypto";

export function verifyWebhook(rawBody, timestamp, signature, secret, now = Date.now()) {
  if (!/^\d+$/.test(timestamp ?? "")) return false;
  const age = Math.abs(now / 1000 - Number(timestamp));
  if (!Number.isFinite(age) || age > 300) return false;
  if (!/^v1=[a-f0-9]{64}$/.test(signature ?? "")) return false;
  const expected = createHmac("sha256", secret)
    .update(`${timestamp}.${rawBody}`)
    .digest();
  return timingSafeEqual(expected, Buffer.from(signature.slice(3), "hex"));
}