POST /api/webhooks-config
Authorization: Bearer <clerk_token>
Content-Type: application/json

{
  "url": "https://your-server.com/webhook",
  "events": ["lead.captured", "session.created"],
  "chatbotId": "optional_specific_chatbot_id"
}

{
  "event": "lead.captured",
  "chatbotId": "cmf9n7u1c...",
  "timestamp": "2026-03-26T15:30:00.000Z",
  "data": {
    "leadId": "clx...",
    "name": "John Doe",
    "email": "john@example.com",
    "source": "lead-tool",
    "sessionId": "rkt_abc123..."
  }
}

const crypto = require('crypto');

function verifyWebhook(body, signature, secret) {
  const expected = crypto
    .createHmac('sha256', secret)
    .update(body)
    .digest('hex');
  return signature === expected;
}