clawbot 7d49123874 Alerts to a JSON webhook, with a cooldown and an hourly summary (closes #26) ...

SWWAF_ALERT_WEBHOOK_URL gets one JSON POST per alert, in SPEC.md's
schema, with SWWAF_ALERT_WEBHOOK_HEADERS: ban and permanent_ban, with
the ban's notes, in observe mode too, marked mode observe and worked
out only when the alert would be sent; source_failure for GeoJS;
file_error for a rule or state file with an error. SWWAF_ALERT_EVENTS
chooses; SWWAF_ALERT_COOLDOWN holds back repeats by netblock, file or
source; past SWWAF_ALERT_MAX_PER_HOUR the hour ends in one summary. A
bounded queue, retried with backoff, holds up no request; a 4xx other
than 408 and 429 gives the alert up. alerts.json keeps the queue, the
cooldowns and the hour. Nothing shows the URL's path or query.

Judgement call: the summary's event is summary, which SPEC.md omits.
Judgement call: an admin's ban raises no alert.

Model: opus-5-5

2026-10-07 01:36:59 +00:00

..

state_test.go

Alerts to a JSON webhook, with a cooldown and an hourly summary (closes #26)

2026-10-07 01:36:59 +00:00

state.go

Alerts to a JSON webhook, with a cooldown and an hourly summary (closes #26)

2026-10-07 01:36:59 +00:00

write_internal_test.go

Take in an admin's edits of the state files while running (closes #68)

2026-10-06 14:18:13 +02:00