[opticon454]

What

Opt-in webhook notifications. The same events that trigger Web Push (permission prompts, questions, errors, respawn blocked, crash loop, task complete, idle, response complete) can also be posted to ntfy, Slack, Discord, or any JSON URL, so a headless server can reach a phone with no browser tab open and no push subscription.

Settings → Notifications → "Webhook (ntfy, Slack, Discord)": enable, pick the service, paste the URL, choose "Needs attention" (skips the routine "response complete") or "Everything", Save, Send test. Off by default.

Design decisions worth a look

• The URL is a bearer secret (anyone holding a Slack/Discord URL can post as it), and GET /api/settings is readable by every logged-in user. So it is not a setting: it lives in ~/.codeman/webhook.json (0600, tmp+rename, like custom-model-hosts.json), is only written through PUT /api/webhook, and is never returned (the API and UI show scheme + host only). The URL box is write-only; changing only the service or scope never needs the secret re-sent. All three routes are admin-only in multi-user mode (the channel receives every session's events, the same reach an admin's own Web Push has).
• Delivery reuses the web-tab egress guard (webviewFetch): link-local and cloud-metadata targets are refused on the resolved address at connect time; save-time validation also rejects non-http(s), user:pass@, and those targets. Loopback and LAN stay allowed on purpose (a local ntfy is the feature). Redirects are not followed, the call times out after 5 s, and error text never contains the URL.
• Agent text can't ping a channel: Discord gets allowed_mentions: { parse: [] }, Slack control characters (<!channel>, <@U…>, <url|text>) are escaped, and ntfy headers are RFC 2047-encoded so a title can't inject a header.
• Fire-and-forget: the send runs before the "no push subscriptions" early return in sendPushNotifications (that is the headless case), never delays Web Push, dedupes the same event+session within 3 s, and caps in-flight requests at 5. The notification body text moved into a small static method so both channels share it; Web Push output is unchanged.

Tests

• test/webhook-notify.test.ts (39): URL validation, masking, scope, each service's request format, store (0600, tightens an existing 0644 file, coerces bad values), sender (status/redirect/timeout/network errors with no URL leak), notifier (dedupe, in-flight cap, test send), plus real delivery to a local HTTP server through webviewFetch and refusal of a metadata address / redirect-to-metadata.
• test/routes/webhook-routes.test.ts (17): masking, partial updates, clearing, 400s, strict schema, test route, multi-user gating.
• test/webhook-settings.browser.test.ts (6): real server + real Chromium + a local receiver: the UI saves, masks, sends a test that arrives with the ntfy headers, and shows a failing endpoint without exposing the URL.
• Full CI gate: typecheck, lint, format, public assets, catalogue and 8564 tests pass (two git-clone tests timed out once under load and pass alone, unrelated to this change).

🤖 Generated with Claude Code

[opticon454]

Heads-up on merge order. I checked my open PRs against each other with trial merges. Every overlap is a textual conflict in a shared registry or list (adjacent insertions), not a behavioural interaction, but whichever lands first, the others need a rebase:

• feat(notifications): ntfy/Slack/Discord/generic webhook for the push events #523 × fix(terminal): Shift+Enter no longer submits after inserting a newline #520 and × feat(terminal): newline chord as registry data, plus a Key tester in Settings #522: config/test-suites.ts (each adds its browser test at the same line), and with feat(terminal): newline chord as registry data, plus a Key tester in Settings #522 also src/web/public/settings-ui.js.
• feat(notifications): ntfy/Slack/Discord/generic webhook for the push events #523 × feat(mcp): sync MCP servers across enabled CLIs #521: docs/api-reference.md, src/web/public/settings-ui.js, src/web/routes/index.ts and src/web/server.ts (both register a route module in the same spot).

I'm not changing this PR for it. As the others merge I will rebase this one onto master, resolve the conflicts, re-run the full gate and push. If you have a preferred merge order, tell me and I will follow it.

[Ark0N]

Merged and shipped in 1.34.0. Thanks @opticon454! Keeping the URL in its own 0600 file that the API never returns, and sending delivery through the web-tab egress guard, is exactly how a bearer-secret channel should work, and it is what made this easy to take.

I applied the review items while landing (6d6e7da):

• The App Settings Save button now saves webhook edits too. Only an edited group is sent, and a refused URL keeps the dialog open with a warning toast instead of silently dropping the change.
• Send test saves pending edits first, so it never tests the old URL while the box shows a new one.
• A "Remove URL" button clears a saved URL ({ url: "", enabled: false }).
• test/webhook-push-glue.test.ts runs the real sendPushNotifications on a server with zero push subscriptions, the headless case this exists for.
• Docs: webhook.json is in the CLAUDE.md State Files list, there is a Webhooks section in the Notifications wiki page, and docs/security-architecture.md covers the new outbound channel.
• Nits: the schema reuses the shared kind/scope lists, egress refusals are recognised by error code rather than message text, and the config types moved to src/types/push.ts.