clawbot c981e3d78d Alerts to a JSON webhook, with a cooldown and an hourly summary (closes #26) ...

SWWAF_ALERT_WEBHOOK_URL gets one JSON POST per alert, in SPEC.md's
schema, with SWWAF_ALERT_WEBHOOK_HEADERS: ban and permanent_ban, with
the ban's notes, in observe mode too, marked mode observe;
source_failure for GeoJS; file_error for a rule or state file with an
error. SWWAF_ALERT_EVENTS chooses; SWWAF_ALERT_COOLDOWN holds back
repeats by netblock, file or source; past SWWAF_ALERT_MAX_PER_HOUR the
hour ends in one summary. A bounded queue, retried with backoff, holds
up no request; a 4xx other than 408 and 429 gives the alert up.
alerts.json keeps the queue, the cooldowns and the hour. Nothing shows
the URL's path or query.

Judgement call: the summary's event is summary, which SPEC.md omits.
Judgement call: an admin's ban raises no alert.

Model: opus-5-5

2026-10-07 01:00:20 +00:00

..

state_test.go

Alerts to a JSON webhook, with a cooldown and an hourly summary (closes #26)

2026-10-07 01:00:20 +00:00

state.go

Alerts to a JSON webhook, with a cooldown and an hourly summary (closes #26)

2026-10-07 01:00:20 +00:00

write_internal_test.go

Take in an admin's edits of the state files while running (closes #68)

2026-10-06 14:18:13 +02:00