Skip to content

WebhookTriggerConfig

Defined in: types.ts:295

A webhook trigger: exposes POST /_zooid/webhooks/<name>, verifies an HMAC signature over the raw request body, and fires like a schedule trigger once accepted. See [[ZOD082]] §Design 4 and [[ZOD086]].

Properties

provider

provider: "github" | "stripe" | "slack" | "standard" | "custom"

Defined in: types.ts:296


secret

secret: string

Defined in: types.ts:298

Required. Interpolated from env — see [[ZOD081]] §Design 4, Secrets.


verify?

optional verify?: string

Defined in: types.ts:309

custom only, required: path to a module exporting the verifier function, resolved to an absolute path against the zooid.yaml directory at parse time. The escape hatch for any scheme without a named provider — ed25519, SHA-1 over sorted params, bespoke timestamped base strings. Code rather than declarative fields, because a config language for signing schemes is a security-critical mini-DSL that still would not cover them all. The daemon imports it at startup — see loadCustomVerifiers in the CLI.