Webhooks

sente webhook register \
  --url https://agent.example.com/sente/events \
  --events message.received,run.blocked,run.completed,run.failed
# → prints a "Secret: whsec_…" line — store it:
#   echo "SENTE_WEBHOOK_SECRET=whsec_…" >> .env

sente webhook register --url https://agent.example.com/sente/events \
  --identity support-bot --events message.received   # scoped to one identity

sente webhook list
sente webhook delete whk_4a5b6c7d8e9f0a1b2c3d4e5f6a7b8c9d

import { Sente } from "@sente-labs/sdk";

const sente = new Sente({ apiKey: process.env.SENTE_API_TOKEN! });

const hook = await sente.webhooks.register({
  url: "https://agent.example.com/sente/events",
  events: ["message.received", "run.blocked", "run.completed", "run.failed"],
  // identityId: idt.id,   // omit for org-wide
});
console.log(hook.secret); // store it — list() never returns it

await sente.webhooks.list();
await sente.webhooks.delete(hook.id);

import os
from sente import Sente

sente = Sente(api_key=os.environ["SENTE_API_TOKEN"])

hook = sente.webhooks.register(
    url="https://agent.example.com/sente/events",
    events=["message.received", "run.blocked", "run.completed", "run.failed"],
    # identity_id=idt.id,   # omit for org-wide
)
print(hook.secret)  # store it — list() never returns it

sente.webhooks.list()
sente.webhooks.delete(hook.id)

import express from "express";
import { timingSafeEqual } from "node:crypto";

const app = express();

app.post("/sente/events", express.json(), (req, res) => {
  const got = Buffer.from(req.header("x-sente-secret") ?? "");
  const want = Buffer.from(process.env.SENTE_WEBHOOK_SECRET!);
  if (got.length !== want.length || !timingSafeEqual(got, want)) return res.sendStatus(401);

  res.sendStatus(200); // ack first — handle after

  const event = req.body;
  switch (event.type) {
    case "message.received":
      // thin notification: fetch the body + annotation when you need them
      void handleMail(event.message.id);
      break;
    case "run.blocked":
      void pageAHuman(event.run); // code, liveViewUrl, actionUrl, holdExpiresAt
      break;
    case "run.completed":
    case "run.failed":
      void recordOutcome(event.run);
      break;
  }
});

app.listen(3000);

import hmac
import os
from flask import Flask, request

app = Flask(__name__)
SECRET = os.environ["SENTE_WEBHOOK_SECRET"]

@app.post("/sente/events")
def sente_events():
    if not hmac.compare_digest(request.headers.get("X-Sente-Secret", ""), SECRET):
        return "", 401

    event = request.get_json(silent=True) or {}
    kind = event.get("type")
    if kind == "message.received":
        queue_mail(event["message"]["id"])       # thin notification — fetch the body later
    elif kind == "run.blocked":
        page_a_human(event["run"])               # code, liveViewUrl, actionUrl, holdExpiresAt
    elif kind in ("run.completed", "run.failed"):
        record_outcome(event["run"])
    return "", 200                               # ack fast; do the work off the request