Force UTF-8 encoding on raw webhook bodies

request.raw_post returns ASCII-8BIT bytes. When the body contained
non-ASCII characters (e.g. the · in the CLI setup example), persisting
raw_payload blew up with Encoding::UndefinedConversionError on the
SQLite bind. Affected every parser, not just CLI.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: joemasilotti

app/controllers/webhooks_controller.rb

@@ -10,7 +10,7 @@ def create
         return head :not_found
       end
 
-      body = request.raw_post
+      body = request.raw_post.dup.force_encoding(Encoding::UTF_8)
       unless source.parser.verify(request, body, source.signing_secret)
         Rails.logger.warn("rejected: invalid signature source=#{source.id} body_bytes=#{body.bytesize}")
         return head :unauthorized

test/controllers/webhooks_controller_test.rb

@@ -147,6 +147,20 @@ def cal_signature(body, secret)
     assert_equal "main a1b2c3d", notification.body
   end
 
+  test "handles non-ASCII bytes in the request body" do
+    source = sources(:cli)
+    payload = { "title" => "deploy done", "body" => "main · a1b2c3d" }
+
+    post webhook_url(parser_type: "cli", token: source.token),
+      params: payload.to_json,
+      headers: { "Content-Type" => "application/json" }
+
+    assert_response :success
+    notification = source.notifications.last
+    assert_equal "main · a1b2c3d", notification.body
+    assert_equal "main · a1b2c3d", JSON.parse(notification.raw_payload)["body"]
+  end
+
   test "creates a notification from a Hatchbox failed deploy script (form-encoded)" do
     source = sources(:hatchbox)