Add webhook signature verification and event parsing tools

[AadiSharma49]

Description

This PR introduces the foundational webhook support for HubSpot integration.

It implements basic webhook utilities to enable event-driven workflows in Hive, specifically:

• Signature verification using HubSpot's HMAC SHA256 standard
• Structured parsing of incoming webhook event payloads

This follows the suggested incremental approach — starting with simple, testable webhook utilities before implementing subscription management and advanced features.

Type of Change

• New feature (non-breaking change that adds functionality)

Related Issues

#4035

Changes Made

• Added new hubspot_webhook_tool module
• Implemented:
  • hubspot_webhook_verify (HMAC SHA256 signature validation)
  • hubspot_webhook_receive (structured event parsing)
• Kept tools independent from credential requirements (no access token required)
• Updated tool registration to include webhook tools
• Added unit tests covering:
  • Valid signature verification
  • Invalid signature detection
  • Event payload parsing

Testing

Describe the tests you ran to verify your changes:

• Unit tests pass (cd tools && pytest)
• Lint passes (ruff check .)
• Manual testing performed

All integration, credential coverage, and registration contract tests pass locally.

Checklist

• My code follows the project's style guidelines
• I have performed a self-review of my code
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• My changes generate no new warnings
• I have added tests that prove my feature works
• New and existing unit tests pass locally with my changes

Screenshots (if applicable)

Not applicable (backend feature).

---

@bryanadenhq

As discussed, this PR focuses only on the basic webhook utilities review it and tell me

If this approach looks good, I will proceed with a follow-up PR implementing:

• hubspot_register_webhook_subscription
• hubspot_list_webhook_subscriptions

Let me know if you’d like any adjustments to scope or structure before moving to the next phase.

[AadiSharma49]

@Hundao check it !!

[bryanadenhq]

Hi @AadiSharma49, it seems like both of these tools are already handled by the Hive Runtime. WebhookServer (core/framework/runtime/webhook_server.py) does the signature verification and json payload parsing for webhook routes configure with a secret. By the time an agent node gets the event, it's already verified. I think it would be better to focus on hubspot_register_webhook_subscription and hubspot_list_webhook_subscriptions, those are operations we do not have.

[AadiSharma49]

Hey @bryanadenhq , so webhooks are already being handled in another PR, should I start working on hubspot_register_webhook_subscription and hubspot_list_webhook_subscriptions next?