zooid 0.14.0 → 0.14.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zooid",
-  "version": "0.14.0",
+  "version": "0.14.1",
   "description": "An open-source, self-hostable chat app for collaborating with AI agents alongside your team. Any model, any CLI.",
   "type": "module",
   "license": "MIT",
@@ -43,14 +43,14 @@
     "tar": "^7.5.16",
     "web-push": "^3.6.7",
     "yaml": "^2.5.0",
-    "@zooid/acp-client": "^0.14.0",
-    "@zooid/core": "^0.14.0",
-    "@zooid/pi-extension": "^0.13.1",
-    "@zooid/runtime-docker": "^0.14.0",
-    "@zooid/context-mcp": "^0.14.0",
-    "@zooid/runtime-local": "^0.14.0",
-    "@zooid/transport-matrix": "^0.14.0",
-    "@zooid/transport-http": "^0.14.0"
+    "@zooid/context-mcp": "^0.14.1",
+    "@zooid/acp-client": "^0.14.1",
+    "@zooid/transport-matrix": "^0.14.1",
+    "@zooid/runtime-docker": "^0.14.1",
+    "@zooid/core": "^0.14.1",
+    "@zooid/runtime-local": "^0.14.1",
+    "@zooid/transport-http": "^0.14.1",
+    "@zooid/pi-extension": "^0.13.1"
   },
   "devDependencies": {
     "@agentclientprotocol/sdk": "^0.21.0",

package/src/daemon/webhook-routes.test.ts

@@ -2,7 +2,7 @@ import { createHmac } from 'node:crypto'
 import { describe, expect, it, vi } from 'vitest'
 import { Hono } from 'hono'
 import { loadZooidConfig } from '@zooid/core'
-import { mountWebhookRoutes } from './webhook-routes.js'
+import { eventNameFor, mountWebhookRoutes } from './webhook-routes.js'
 
 const secret = 'route-secret'
 const body = JSON.stringify({ action: 'opened' })
@@ -72,3 +72,33 @@ describe('webhook route contract', () => {
     expect(sent).toHaveLength(0)
   })
 })
+
+describe('event name binding', () => {
+  const headers = { 'x-github-event': 'pull_request' }
+
+  it('reads GitHub from the header, not the payload', () => {
+    expect(eventNameFor('github', headers, { type: 'ignored' })).toBe('pull_request')
+  })
+
+  it('reads stripe and standard-webhooks from body.type', () => {
+    expect(eventNameFor('stripe', {}, { type: 'invoice.payment_failed' })).toBe(
+      'invoice.payment_failed',
+    )
+    expect(eventNameFor('standard', {}, { type: 'user.created' })).toBe('user.created')
+  })
+
+  it('reads slack from body.event.type', () => {
+    expect(eventNameFor('slack', {}, { event: { type: 'app_mention' } })).toBe('app_mention')
+  })
+
+  it('leaves custom unbound — only the operator knows their service shape', () => {
+    expect(eventNameFor('custom', headers, { type: 'anything' })).toBeUndefined()
+  })
+
+  it('yields undefined rather than throwing on a missing or wrong-typed path', () => {
+    expect(eventNameFor('stripe', {}, undefined)).toBeUndefined()
+    expect(eventNameFor('stripe', {}, { type: 42 })).toBeUndefined()
+    expect(eventNameFor('slack', {}, { event: null })).toBeUndefined()
+    expect(eventNameFor('github', {}, {})).toBeUndefined()
+  })
+})

package/src/daemon/webhook-routes.ts

@@ -16,8 +16,42 @@ const TRUNCATION_MARKER = '\n\n… (truncated)'
 // Comfortably past any provider's redelivery window.
 const DELIVERY_CACHE_TTL_MS = 24 * 60 * 60 * 1000
 
-const EVENT_HEADER_BY_PROVIDER: Partial<Record<WebhookTriggerConfig['provider'], string>> = {
-  github: 'x-github-event',
+/**
+ * Where each provider puts its event name. GitHub is the only one that uses
+ * a header; the rest carry it in the payload. Reading it per provider is the
+ * point — it keeps provider knowledge in code (the same knowledge the
+ * signature table encodes) so `event` means the same thing in an operator's
+ * `match:` whatever the sender. `custom` is absent on purpose: only the
+ * operator knows their service's shape, so their predicate reads `body`.
+ */
+const EVENT_SOURCE_BY_PROVIDER: Partial<
+  Record<WebhookTriggerConfig['provider'], { header: string } | { path: readonly string[] }>
+> = {
+  github: { header: 'x-github-event' },
+  stripe: { path: ['type'] },
+  standard: { path: ['type'] },
+  slack: { path: ['event', 'type'] },
+}
+
+/** Follow a dotted path through a parsed payload, yielding a string or nothing. */
+function stringAt(body: unknown, path: readonly string[]): string | undefined {
+  let cursor: unknown = body
+  for (const key of path) {
+    if (typeof cursor !== 'object' || cursor === null) return undefined
+    cursor = (cursor as Record<string, unknown>)[key]
+  }
+  return typeof cursor === 'string' ? cursor : undefined
+}
+
+/** The `event` binding for `match:` and `${...}`, per provider. */
+export function eventNameFor(
+  provider: WebhookTriggerConfig['provider'],
+  headers: Record<string, string | undefined>,
+  body: unknown,
+): string | undefined {
+  const source = EVENT_SOURCE_BY_PROVIDER[provider]
+  if (!source) return undefined
+  return 'header' in source ? headers[source.header] : stringAt(body, source.path)
 }
 
 const DELIVERY_ID_HEADER_BY_PROVIDER: Partial<Record<WebhookTriggerConfig['provider'], string>> = {
@@ -111,9 +145,6 @@ async function handleDelivery(
     const deliveryId = customDeliveryId ?? (idHeader ? headers[idHeader] : undefined)
     if (deliveryId !== undefined && cache.seen(`${name}:${deliveryId}`)) return
 
-    const eventHeader = EVENT_HEADER_BY_PROVIDER[webhook.provider]
-    const event = eventHeader ? headers[eventHeader] : undefined
-
     let body: unknown
     try {
       body = JSON.parse(raw)
@@ -121,6 +152,10 @@ async function handleDelivery(
       body = undefined
     }
 
+    // After parsing: every provider but GitHub carries its event name in the
+    // payload, not a header.
+    const event = eventNameFor(webhook.provider, headers, body)
+
     const ctx: MatchContext = {
       event,
       body,