# Webhooks

## Endpoints

| Method | Endpoint | Description |
|--------|----------|-------------|
| `GET` | `/v1/webhooks/settings` | Get webhook config |
| `POST` | `/v1/webhooks/settings` | Create webhook |
| `PUT` | `/v1/webhooks/settings` | Update webhook |
| `DELETE` | `/v1/webhooks/settings` | Delete webhook |
| `POST` | `/v1/webhooks/test` | Test webhook |
| `GET` | `/v1/webhooks/logs` | Get webhook delivery logs |

## Configure Webhooks

```bash
curl -X POST https://zernio.com/api/v1/webhooks/settings \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "My Webhook",
    "isActive": true,
    "url": "https://your-server.com/webhooks/zernio",
    "secret": "your_webhook_secret",
    "events": ["post.published", "post.failed", "account.disconnected"]
  }'
```

## Events

| Event | Description |
|-------|-------------|
| `post.scheduled` | Post scheduled successfully |
| `post.published` | Post published to platform |
| `post.failed` | Post failed on all platforms |
| `post.partial` | Post succeeded on some platforms |
| `account.connected` | Account connected |
| `account.disconnected` | Account disconnected (token expired) |
| `message.received` | New DM/message received (Instagram, Facebook, Telegram) |

## Verify Signature

```typescript
import crypto from 'crypto';

function verifyWebhook(payload: string, signature: string, secret: string): boolean {
  const expected = crypto
    .createHmac('sha256', secret)
    .update(payload)
    .digest('hex');
  return crypto.timingSafeEqual(
    Buffer.from(signature),
    Buffer.from(expected)
  );
}

// In your handler
const signature = req.headers['x-zernio-signature'];
const isValid = verifyWebhook(JSON.stringify(req.body), signature, secret);
```

## Payload Examples

### Post Event

```json
{
  "event": "post.published",
  "timestamp": "2024-03-01T10:00:00Z",
  "post": {
    "id": "post_123",
    "content": "Hello from Zernio API!",
    "status": "published",
    "scheduledFor": "2024-03-01T10:00:00Z",
    "publishedAt": "2024-03-01T10:00:05Z",
    "platforms": [
      {
        "platform": "twitter",
        "status": "published",
        "publishedUrl": "https://twitter.com/user/status/1234567890"
      },
      {
        "platform": "instagram",
        "status": "failed",
        "error": "Rate limit exceeded"
      }
    ]
  }
}
```

### Account Event

```json
{
  "event": "account.disconnected",
  "timestamp": "2024-03-01T10:00:00Z",
  "account": {
    "accountId": "acc_456",
    "profileId": "prof_123",
    "platform": "twitter",
    "username": "myhandle",
    "displayName": "My Account",
    "disconnectionType": "unintentional",
    "reason": "Token expired"
  }
}
```