Build agents.
Ship in hours.

import crypto from 'crypto';
import { EClipsClient } from '@eclips/sdk';

const client = new EClipsClient({ apiKey: process.env.ECLIPS_API_KEY! });

// Register a webhook — the signing secret is returned ONCE. Store it.
const { secret } = await client.createWebhook(
  'https://your-app.com/webhooks/eclips',
  ['run.completed', 'run.failed', 'run.triage_required'],
);

// Verify the request came from eClips
function verifySignature(rawBody: string, secret: string, sig: string) {
  const expected = crypto
    .createHmac('sha256', secret)
    .update(rawBody)
    .digest('hex');
  return `sha256=${expected}` === sig;
}

// Express handler
app.post('/webhooks/eclips', express.raw({ type: '*/*' }), (req, res) => {
  const sig = req.headers['x-eclips-signature'] as string;
  if (!verifySignature(req.body.toString(), process.env.WEBHOOK_SECRET!, sig)) {
    return res.status(401).send('Unauthorized');
  }

  const event = JSON.parse(req.body.toString());

  switch (event.event) {
    case 'run.completed':
      console.log('Run finished:', event.run_id, event.data.output);
      break;
    case 'run.failed':
      console.error('Run failed:', event.run_id, event.data.error);
      break;
    case 'run.triage_required':
      // Notify Slack, email the team, etc.
      break;
  }

  res.json({ ok: true });
});