Method receiveWebhook

backend/src/webhooks/webhooks.service.ts:286–385

(
    path: string,
    req: { body: unknown; headers: Record<string, string> },
  )

  // Public inbound webhook receiver (no auth)

  async receiveWebhook(
    path: string,
    req: { body: unknown; headers: Record<string, string> },
  ): Promise<{ status: string; runId?: string }> {
    // Look up webhook by path
    const webhook = await this.repository.findByPath(path);
    if (!webhook) {
      this.logger.warn(`Webhook path not found: ${path}`);
      throw new NotFoundException('Webhook not found');
    }

    if (webhook.status !== 'active') {
      this.logger.warn(`Webhook ${webhook.id} is not active`);
      throw new BadRequestException('Webhook is not active');
    }

    // Create delivery record
    const delivery = await this.deliveryRepository.create({
      webhookId: webhook.id,
      workflowRunId: null,
      status: 'processing',
      payload: typeof req.body === 'object' ? (req.body as any) : {},
      headers: req.headers,
      parsedData: null,
      errorMessage: null,
      createdAt: new Date(),
      completedAt: null,
    });

    this.logger.log(`Received webhook ${webhook.id}, delivery ${delivery.id}`);

    try {
      // Execute parsing script
      const parsedData = await this.executeParsingScript(
        webhook.parsingScript,
        typeof req.body === 'object' ? (req.body as any) : {},
        req.headers,
      );

      // Validate parsed data against expected inputs
      const validationErrors = this.validateParsedData(webhook.expectedInputs as any, parsedData);
      if (validationErrors.length > 0) {
        throw new BadRequestException(
          `Parsed data validation failed: ${validationErrors.map((e) => e.message).join(', ')}`,
        );
      }

      // Trigger workflow with organization context from webhook
      const triggerAuth: AuthContext = {
        userId: 'webhook-trigger',
        organizationId: webhook.organizationId,
        roles: ['MEMBER'],
        isAuthenticated: true,
        provider: 'internal',
      };

      const prepared = await this.workflowsService.prepareRunPayload(
        webhook.workflowId,