feat: expose webhook trigger settings

Author: Test User

docs/integrations/integrations.md

@@ -6,6 +6,30 @@ Night Watch CLI integrates with several third-party services to enable notificat
 
 ## Inbound Webhook Triggers
 
+Configure inbound triggers from Settings -> Integrations -> Inbound Webhook
+Triggers. The same values are stored in the `webhookTriggers` config block for
+users who manage configuration as code.
+
+The endpoint format is `/api/jobs/:id/run` in single-project mode and
+`/api/projects/:projectId/jobs/:id/run` in global mode. For GitHub webhooks,
+the matched rule's `jobId` is dispatched. If the signature is valid but no rule
+matches, Night Watch returns `202` with `accepted: false` and does not start a
+job.
+
+### Signed curl
+
+Use the Night Watch signature header for generic webhook clients:
+
+```bash
+payload='{"source":"manual"}'
+signature=$(printf '%s' "$payload" | openssl dgst -sha256 -hmac "$NIGHT_WATCH_WEBHOOK_SECRET" | awk '{print $2}')
+
+curl -X POST 'https://YOUR_NIGHT_WATCH_HOST/api/jobs/reviewer/run' \
+  -H 'Content-Type: application/json' \
+  -H "X-Night-Watch-Signature: sha256=$signature" \
+  --data "$payload"
+```
+
 ### GitHub Webhooks
 
 GitHub repository webhooks can start a Night Watch job when a configured event rule matches.
@@ -19,14 +43,20 @@ Night Watch verifies GitHub's `X-Hub-Signature-256` HMAC signature before it eva
 export NIGHT_WATCH_WEBHOOK_SECRET="your-random-webhook-secret"
 ```
 
-2. In GitHub, go to Repository Settings -> Webhooks -> Add webhook:
+2. In Settings -> Integrations, enable Inbound Webhook Triggers:
+   - Secret Environment Variable: `NIGHT_WATCH_WEBHOOK_SECRET`
+   - Allowed Jobs: choose each job that external callers may dispatch
+   - GitHub Events: enable GitHub and select the events used by your rules
+   - GitHub Rules: map event/action/branch/failure filters to a Night Watch job
+
+3. In GitHub, go to Repository Settings -> Webhooks -> Add webhook:
    - Payload URL: `https://YOUR_NIGHT_WATCH_HOST/api/jobs/reviewer/run`
    - Content type: `application/json`
    - Secret: the same value as `NIGHT_WATCH_WEBHOOK_SECRET`
    - SSL verification: enabled
    - Selected events: choose the events used by your rules, such as `workflow_run`, `check_suite`, `pull_request`, or `repository_dispatch`
 
-3. Enable webhook triggers in `night-watch.config.json`:
+4. Optional config-file equivalent:
 
 ```json
 {
@@ -51,12 +81,6 @@ export NIGHT_WATCH_WEBHOOK_SECRET="your-random-webhook-secret"
 }
 ```
 
-The endpoint format is `/api/jobs/:id/run` in single-project mode and
-`/api/projects/:projectId/jobs/:id/run` in global mode. For GitHub webhooks,
-the matched rule's `jobId` is dispatched. If the signature is valid but no rule
-matches, Night Watch returns `202` with `accepted: false` and does not start a
-job.
-
 ## Notification Integrations
 
 ### Slack

packages/core/src/shared/types.ts

@@ -128,6 +128,31 @@ export interface INotificationConfig {
   webhooks: IWebhookConfig[];
 }
 
+// ==================== Inbound Webhook Triggers ====================
+
+export interface IWebhookTriggerGithubRule {
+  event: string;
+  action?: string;
+  jobId: JobType;
+  branchPatterns?: string[];
+  onlyOnFailure?: boolean;
+}
+
+export interface IWebhookTriggerGithubConfig {
+  enabled: boolean;
+  events: string[];
+  rules: IWebhookTriggerGithubRule[];
+}
+
+export interface IWebhookTriggerConfig {
+  enabled: boolean;
+  secretEnv: string;
+  allowedJobIds: JobType[];
+  requireTimestamp: boolean;
+  maxSkewSeconds: number;
+  github: IWebhookTriggerGithubConfig;
+}
+
 // ==================== Roadmap Scanner Config ====================
 
 export interface IRoadmapScannerConfig {
@@ -281,6 +306,8 @@ export interface INightWatchConfig {
   prResolver?: IPrResolverConfig;
   merger?: IMergerConfig;
   queue: IQueueConfig;
+  /** Authenticated inbound job webhook trigger configuration */
+  webhookTriggers?: IWebhookTriggerConfig;
   /** Time-based provider schedule overrides */
   providerScheduleOverrides?: IProviderScheduleOverride[];
 }

web/api.ts

@@ -29,6 +29,9 @@ import type {
     IRoadmapStatus,
     IStatusSnapshot,
     IWebhookConfig,
+    IWebhookTriggerConfig,
+    IWebhookTriggerGithubConfig,
+    IWebhookTriggerGithubRule,
     JobType,
     MergeMethod,
     QaArtifacts,
@@ -41,7 +44,8 @@ import { getWebJobDef } from './utils/jobs';
 export type {
     ClaudeModel, DayOfWeek, IAnalyticsConfig, IAuditConfig, IBoardProviderConfig, IJobProviders, ILogInfo, IMergerConfig, INightWatchConfig,
     INotificationConfig, IPrdInfo, IProviderBucketConfig, IProviderPreset, IProviderScheduleOverride, IPrInfo, IProcessInfo, IQaConfig,
-    IPrResolverConfig, IQueueConfig, IRoadmapItem, IRoadmapScannerConfig, IRoadmapStatus, IStatusSnapshot, IWebhookConfig,
+    IPrResolverConfig, IQueueConfig, IRoadmapItem, IRoadmapScannerConfig, IRoadmapStatus, IStatusSnapshot, IWebhookConfig, IWebhookTriggerConfig,
+    IWebhookTriggerGithubConfig, IWebhookTriggerGithubRule,
     JobType, MergeMethod, QaArtifacts, QueueMode
 };
 

web/pages/Settings.tsx

@@ -19,16 +19,16 @@ import {
   IQaConfig,
   IRoadmapScannerConfig,
   IWebhookConfig,
+  IWebhookTriggerConfig,
+  JobType,
   removeProject,
   triggerInstallCron,
   updateConfig,
   updateGlobalNotifications,
   useApi,
 } from '../api';
-import WebhookEditor from '../components/settings/WebhookEditor.js';
 import PresetFormModal from '../components/providers/PresetFormModal.js';
 import Button from '../components/ui/Button';
-import Card from '../components/ui/Card';
 import Badge from '../components/ui/Badge.js';
 import Tabs from '../components/ui/Tabs';
 import { useStore } from '../store/useStore';
@@ -59,6 +59,30 @@ const JOB_PROVIDER_KEYS: Array<keyof IJobProviders> = [
   'merger',
 ];
 
+const WEBHOOK_TRIGGER_JOB_IDS: JobType[] = [
+  'executor',
+  'reviewer',
+  'qa',
+  'audit',
+  'slicer',
+  'analytics',
+  'pr-resolver',
+  'merger',
+];
+
+const DEFAULT_WEBHOOK_TRIGGERS: IWebhookTriggerConfig = {
+  enabled: false,
+  secretEnv: 'NIGHT_WATCH_WEBHOOK_SECRET',
+  allowedJobIds: WEBHOOK_TRIGGER_JOB_IDS,
+  requireTimestamp: false,
+  maxSkewSeconds: 300,
+  github: {
+    enabled: false,
+    events: [],
+    rules: [],
+  },
+};
+
 type ConfigForm = {
   provider: INightWatchConfig['provider'];
   providerLabel: string;
@@ -103,6 +127,7 @@ type ConfigForm = {
   prResolver: IPrResolverConfig;
   merger: IMergerConfig;
   queue: INightWatchConfig['queue'];
+  webhookTriggers: IWebhookTriggerConfig;
 };
 
 const toFormState = (config: INightWatchConfig): ConfigForm => {
@@ -174,6 +199,7 @@ const toFormState = (config: INightWatchConfig): ConfigForm => {
       },
       providerBuckets: {},
     },
+    webhookTriggers: config.webhookTriggers ?? DEFAULT_WEBHOOK_TRIGGERS,
   };
 };
 
@@ -377,6 +403,7 @@ const Settings: React.FC = () => {
         prResolver: form.prResolver,
         merger: form.merger,
         queue: form.queue,
+        webhookTriggers: form.webhookTriggers,
       });
 
       // Update form directly from server response to ensure it reflects persisted values
@@ -555,8 +582,10 @@ const Settings: React.FC = () => {
           form={form}
           updateField={updateField as <K extends keyof typeof form>(key: K, value: (typeof form)[K]) => void}
           globalWebhook={globalWebhook}
+          isGlobalMode={isGlobalMode}
           onSetGlobal={handleSetGlobal}
           onUnsetGlobal={handleUnsetGlobal}
+          selectedProjectId={selectedProjectId}
         />
       ),
     },