From 23fda8da8cddbd8ebe56a63d2a40aef36a1d215c Mon Sep 17 00:00:00 2001
From: Chaim Marcus <chaim@marcus-law.co.il>
Date: Sat, 16 May 2026 17:18:26 +0000
Subject: [PATCH] fix: add payload validation guard in onWebhook handler

---
 src/worker.ts | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/src/worker.ts b/src/worker.ts
index 23266af..fc2f3ad 100644
--- a/src/worker.ts
+++ b/src/worker.ts
@@ -729,15 +729,16 @@ const plugin = definePlugin({
 		};
 
 		const { caseNumber, oldStatus, newStatus, companyId } = payload;
+
+		if (!caseNumber || !newStatus || !companyId) {
+			pluginCtx.logger.warn("onWebhook: malformed payload", { caseNumber, newStatus, companyId });
+			return;
+		}
+
 		pluginCtx.logger.info(`Webhook: case ${caseNumber} ${oldStatus} → ${newStatus}`, {
 			companyId,
 		});
 
-		if (!companyId) {
-			pluginCtx.logger.warn("onWebhook: missing companyId in payload", { caseNumber });
-			return;
-		}
-
 		// Find the Paperclip issue linked to this case number by scanning plugin state.
 		// State stores: issue.id → case_number (scopeKind=issue, stateKey=legal-case-number)
 		const issues = await pluginCtx.issues.list({ companyId });