How to Trigger Live Webhooks and AI Actions from Customer Chats

{
  "name": "check_order_status",
  "description": "Look up real-time shipping status and delivery date for a customer order",
  "parameters": {
    "type": "object",
    "properties": {
      "order_id": {
        "type": "string",
        "description": "The customer order number (e.g., ORD-8921)"
      }
    },
    "required": ["order_id"]
  }
}

import crypto from 'node:crypto';
import type { Request, Response } from 'express';

export function verifySiteMindWebhook(req: Request, res: Response) {
  const signatureHeader = req.headers['x-sitemind-signature'] as string;
  const secret = process.env.SITEMIND_WEBHOOK_SECRET!;
  const rawBody = req.rawBody as string;
  
  const timestamp = signatureHeader.split(',').find((part) => part.startsWith('t='))?.slice(2) ?? '';
  const received = signatureHeader.split(',').find((part) => part.startsWith('v1='))?.slice(3) ?? '';
  if (!timestamp || !received) {
    return res.status(401).json({ error: 'Invalid HMAC signature' });
  }
  
  const expected = crypto.createHmac('sha256', secret).update(`${timestamp}.${rawBody}`).digest('hex');
  
  const a = Buffer.from(expected, 'utf8');
  const b = Buffer.from(received, 'utf8');
  if (a.length !== b.length || !crypto.timingSafeEqual(a, b)) {
    return res.status(401).json({ error: 'Invalid HMAC signature' });
  }
  
  // Handle action (e.g., look up order from database)
  const { order_id } = req.body.parameters;
  return res.json({
    status: 'In Transit',
    estimatedDelivery: 'Tomorrow by 4:00 PM',
    carrier: 'FedEx'
  });
}