Dê mãos ao seu agente.

{
  "id": "0b6f3c1e-5d2a-4f7e-9a51-2c8d4e6f7a90",
  "type": "decision_point.opened",
  "timestamp": "2026-11-09T15:42:07.000Z",
  "workspace_id": "5a1e9d3b-7c40-4b8e-a2f1-93d6c0e4b215",
  "task_sequence": 7,
  "data": {
    "task_id": "c3d9a7f2-1b6e-4e0a-8f53-6a2b9d1c4e78",
    "phase_id": "e81f4b26-9c3a-4d57-b0e2-7f5a1c8d3b49",
    "decision_point_id": "4f2a8c61-3e9b-4d0f-a7c5-1b6e2d9f8a30",
    "reason": "phase_closed"
  },
  "links": { "console": "https://taskq.isat.pt/console/tasks/c3d9a7f2-1b6e-4e0a-8f53-6a2b9d1c4e78" }
}

npm install standardwebhooks

import { Webhook } from "standardwebhooks";

const wh = new Webhook(process.env.TASKQ_WEBHOOK_SECRET!); // "whsec_..."

export async function handle(req: Request): Promise<Response> {
  const body = await req.text(); // the raw body, before JSON.parse
  try {
    // HMAC-SHA256 check; rejects timestamps more than 5 minutes off
    const event = wh.verify(body, Object.fromEntries(req.headers)) as { id: string; type: string };
    if (event.type === "decision_point.opened") await wakeRunner(event); // dedupe on event.id
    return new Response(null, { status: 204 });
  } catch {
    return new Response("Invalid signature", { status: 400 });
  }
}