Triggers & workflows

BODY='{"event":"order.escalated","order_id":"ord_1001","reason":"Item arrived damaged","idempotency_key":"escalation:ord_1001:1"}'
SIG=$(printf '%s' "$BODY" | openssl dgst -sha256 -hmac "$HIVE_TRIGGER_SECRET" | sed 's/^.* //')

curl -X POST https://console.agenticworkforce.me/hooks/$HIVE_TRIGGER_ID \
  -H "Content-Type: application/json" \
  -H "x-hive-signature: sha256=$SIG" \
  --data-binary "$BODY"
# → 202 { "run_id": "…" }

import { createHmac } from 'node:crypto';

/** x-hive-signature value for the exact bytes you send. */
export function signTriggerBody(secret: string, rawBody: string): string {
  return `sha256=${createHmac('sha256', secret).update(rawBody).digest('hex')}`;
}

export async function fireTrigger(payload: unknown): Promise<{ run_id: string }> {
  const raw = JSON.stringify(payload);            // sign THIS string, send THIS string
  const res = await fetch(`${process.env.HIVE_API_URL}/hooks/${process.env.HIVE_TRIGGER_ID}`, {
    method: 'POST',
    headers: {
      'content-type': 'application/json',
      'x-hive-signature': signTriggerBody(process.env.HIVE_TRIGGER_SECRET!, raw),
    },
    body: raw,
  });
  if (res.status !== 202) throw new Error(`hook ${res.status}: ${await res.text()}`);
  return (await res.json()) as { run_id: string };
}

import hashlib
import hmac
import json
import os
import urllib.request


def sign_trigger_body(secret: str, raw_body: bytes) -> str:
    """Value for the x-hive-signature header: sha256=<hex HMAC-SHA256(secret, raw body)>."""
    digest = hmac.new(secret.encode("utf-8"), raw_body, hashlib.sha256).hexdigest()
    return "sha256=" + digest


def fire_trigger(payload: dict) -> dict:
    raw = json.dumps(payload, separators=(",", ":")).encode("utf-8")  # sign THESE bytes
    req = urllib.request.Request(
        f"{os.environ['HIVE_API_URL']}/hooks/{os.environ['HIVE_TRIGGER_ID']}",
        data=raw,
        method="POST",
        headers={
            "Content-Type": "application/json",
            "x-hive-signature": sign_trigger_body(os.environ["HIVE_TRIGGER_SECRET"], raw),
        },
    )
    with urllib.request.urlopen(req, timeout=30) as res:  # 202 { "run_id": "…" }
        return json.loads(res.read())


if __name__ == "__main__":
    print(fire_trigger({"event": "order.escalated", "order_id": "ord_1001",
                        "reason": "Item arrived damaged", "idempotency_key": "escalation:ord_1001:1"}))

using System.Net.Http.Headers;
using System.Security.Cryptography;
using System.Text;
using System.Text.Json;

static string SignTriggerBody(string secret, byte[] rawBody)
{
    using var hmac = new HMACSHA256(Encoding.UTF8.GetBytes(secret));
    return "sha256=" + Convert.ToHexString(hmac.ComputeHash(rawBody)).ToLowerInvariant();
}

var payload = new { @event = "order.escalated", order_id = "ord_1001",
                    reason = "Item arrived damaged", idempotency_key = "escalation:ord_1001:1" };
byte[] raw = JsonSerializer.SerializeToUtf8Bytes(payload);        // sign THESE bytes

var req = new HttpRequestMessage(HttpMethod.Post,
    $"{Environment.GetEnvironmentVariable("HIVE_API_URL")}/hooks/{Environment.GetEnvironmentVariable("HIVE_TRIGGER_ID")}")
{
    Content = new ByteArrayContent(raw)
};
req.Content.Headers.ContentType = new MediaTypeHeaderValue("application/json");
req.Headers.Add("x-hive-signature", SignTriggerBody(Environment.GetEnvironmentVariable("HIVE_TRIGGER_SECRET")!, raw));
var res = await new HttpClient().SendAsync(req);                   // 202 { "run_id": "…" }

// Java 17+ (HexFormat). Jackson for the body.
import com.fasterxml.jackson.databind.ObjectMapper;
import javax.crypto.Mac;
import javax.crypto.spec.SecretKeySpec;
import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;
import java.nio.charset.StandardCharsets;
import java.util.HexFormat;
import java.util.Map;

static String signTriggerBody(String secret, byte[] rawBody) throws Exception {
    Mac mac = Mac.getInstance("HmacSHA256");
    mac.init(new SecretKeySpec(secret.getBytes(StandardCharsets.UTF_8), "HmacSHA256"));
    return "sha256=" + HexFormat.of().formatHex(mac.doFinal(rawBody));
}

byte[] raw = new ObjectMapper().writeValueAsBytes(Map.of(
    "event", "order.escalated", "order_id", "ord_1001",
    "reason", "Item arrived damaged", "idempotency_key", "escalation:ord_1001:1"));   // sign THESE bytes

HttpRequest req = HttpRequest.newBuilder(URI.create(
        System.getenv("HIVE_API_URL") + "/hooks/" + System.getenv("HIVE_TRIGGER_ID")))
    .header("Content-Type", "application/json")
    .header("x-hive-signature", signTriggerBody(System.getenv("HIVE_TRIGGER_SECRET"), raw))
    .POST(HttpRequest.BodyPublishers.ofByteArray(raw))
    .build();
HttpResponse<String> res = HttpClient.newHttpClient().send(req, HttpResponse.BodyHandlers.ofString()); // 202