Webhooks

import os
import requests

# There is no Python cloud SDK — use the REST API.
TORK_API_KEY = os.environ["TORK_API_KEY"]

response = requests.post(
    "https://tork.network/api/v1/webhooks",
    headers={
        "Authorization": f"Bearer {TORK_API_KEY}",
        "Content-Type": "application/json",
    },
    json={
        "name": "Production governance events",
        "url": "https://your-server.com/webhooks/tork",
        "events": [
            "policy.violation",
            "approval_requested",
            "approval_approved",
            "hitl.pending",
            "circuit_breaker.triggered",
        ],
    },
)
response.raise_for_status()

webhook = response.json()
print(f"Webhook ID: {webhook['id']}")
# The signing secret is returned ONLY at creation time — store it now.
print(f"Signing secret: {webhook['secret']}")

{
  "id": "evt_abc123def456",
  "type": "policy.violation",
  "created_at": "2024-01-15T10:30:00Z",
  "data": {
    "agent_id": "agent-123",
    "policy_name": "block-pii-sharing",
    "action": "BLOCK",
    "reason": "PII detected in output",
    "content_preview": "The user's SSN is...",
    "metadata": {
      "user_id": "user_456",
      "session_id": "sess_789"
    }
  },
  "environment": "production"
}

import hmac
import hashlib
from flask import Flask, request

app = Flask(__name__)
WEBHOOK_SECRET = "whsec_your_signing_secret"

@app.route("/webhooks/tork", methods=["POST"])
def handle_webhook():
    # Get the signature from headers
    signature = request.headers.get("X-Tork-Signature")
    timestamp = request.headers.get("X-Tork-Timestamp")

    # Compute expected signature
    payload = f"{timestamp}.{request.data.decode()}"
    expected = hmac.new(
        WEBHOOK_SECRET.encode(),
        payload.encode(),
        hashlib.sha256
    ).hexdigest()

    # Verify signature
    if not hmac.compare_digest(signature, f"sha256={expected}"):
        return "Invalid signature", 401

    # Process the event
    event = request.json
    print(f"Received event: {event['type']}")

    return "OK", 200