Update app.py

app.py

@@ -20,6 +20,7 @@ logging.basicConfig(level=logging.INFO)
 logger = logging.getLogger(__name__)
 
 from github_api import GitHubAppAuth, GitHubInsights, TokenManager
+from webhooks import GitHubWebhookHandler
 
 # Load environment variables from .env file
 load_dotenv()
@@ -43,8 +44,8 @@ app.add_middleware(
 
 # Load environment variables
 APP_ID = os.getenv("GITHUB_APP_ID")
-PRIVATE_KEY_PATH = os.getenv("GITHUB_PRIVATE_KEY_PATH")
-PRIVATE_KEY_CONTENT = PRIVATE_KEY_PATH  # Direct private key content
+PRIVATE_KEY_PATH = os.getenv("GITHUB_PRIVATE_KEY_PATH", "private-key.pem")
+PRIVATE_KEY_CONTENT = os.getenv("GITHUB_PRIVATE_KEY")  # Direct private key content
 SUPABASE_URL = os.getenv("SUPABASE_URL")
 SUPABASE_SECRET_KEY = os.getenv("SUPABASE_SECRET_KEY")
 DEFAULT_FIREBASE_ID = os.getenv("DEFAULT_FIREBASE_ID", "JDfZoVuGJhdLBEvR7rVCQKBG9r02")
@@ -83,6 +84,9 @@ else:
     supabase = None
     print("⚠️ WARNING: Supabase credentials not configured")
 
+# Initialize webhook handler
+webhook_handler = GitHubWebhookHandler(supabase, GITHUB_WEBHOOK_SECRET) if supabase else None
+
 # Simple JSON storage for installations
 INSTALLATIONS_FILE = "installations.json"
 
@@ -523,6 +527,64 @@ def register_installation(data: InstallationCallback):
     }
 
 
+@app.post("/github/webhooks")
+async def handle_github_webhook(request: Request):
+    """
+    Handle GitHub webhook events in real-time
+    
+    GitHub sends POST requests here when repository events occur:
+    - push: New commits pushed
+    - pull_request: PR created/updated/merged
+    - issues: Issue created/updated/closed
+    - repository: Repository created/deleted/renamed
+    
+    Verify signature header: X-Hub-Signature-256
+    Event type header: X-GitHub-Event
+    """
+    if not webhook_handler:
+        return {
+            "success": False,
+            "message": "Webhook handler not configured (Supabase not available)"
+        }
+    
+    try:
+        # Get headers
+        signature = request.headers.get("X-Hub-Signature-256")
+        event_type = request.headers.get("X-GitHub-Event")
+        
+        if not signature or not event_type:
+            return {
+                "success": False,
+                "message": "Missing required headers (X-Hub-Signature-256, X-GitHub-Event)"
+            }
+        
+        # Get raw body for signature verification
+        body = await request.body()
+        
+        # Verify signature
+        if not webhook_handler.verify_signature(body, signature):
+            logger.warning(f"Invalid webhook signature for {event_type}")
+            return {
+                "success": False,
+                "message": "Invalid signature"
+            }
+        
+        # Parse payload
+        payload = await request.json()
+        
+        # Route to handler
+        result = webhook_handler.handle_webhook(event_type, payload)
+        
+        return result
+        
+    except Exception as e:
+        logger.error(f"Failed to process webhook: {str(e)}", exc_info=True)
+        return {
+            "success": False,
+            "message": f"Failed to process webhook: {str(e)}"
+        }
+
+
 @app.get("/installations")
 def list_installations():
     """
@@ -991,9 +1053,5 @@ def test_sync(data: GitHubSyncRequest):
         }
 
 
-# ============================================================================
-# RUN SERVER
-# ============================================================================
-