Method CreateWebhook

internal/identity/webhooks.go:104–147

CreateWebhook inserts a new row and returns it with the plaintext signing secret populated. The plaintext is only available on this response — subsequent GET/list calls scrub it. Filters validation (charset, count caps, agent ownership) is the handler's job in slice 2; the storage layer only verifi

(ctx context.Context, userID, url, description string, events []string, filters WebhookFilters)

// handler's job in slice 2; the storage layer only verifies the
// per-user count cap from account_limits.max_webhooks.
func (s *Store) CreateWebhook(ctx context.Context, userID, url, description string, events []string, filters WebhookFilters) (*Webhook, error) {
	// Enforce the per-user cap before generating any state. Race
	// across concurrent creates is bounded by the cap + 1 in the
	// worst case; an exact race-free check would need SELECT FOR
	// UPDATE on a sentinel row, which is not worth it for a cap of
	// 50. The race-window cost is "one user briefly has 51 webhooks"
	// — acceptable.
	max, err := s.MaxWebhooksForUser(ctx, userID)
	if err != nil {
		return nil, err
	}
	count, err := s.CountWebhooksByUser(ctx, userID)
	if err != nil {
		return nil, err
	}
	if count >= max {
		return nil, ErrWebhookCapReached
	}

	filtersJSON, err := json.Marshal(filters)
	if err != nil {
		return nil, fmt.Errorf("marshal filters: %w", err)
	}

	w := &Webhook{
		ID:            generateWebhookID(),
		UserID:        userID,
		URL:           url,
		Description:   description,
		Events:        events,
		Filters:       filters,
		SigningSecret: generateWebhookSecret(),
		Enabled:       true,
		CreatedAt:     time.Now(),
	}
	if _, err := s.pool.Exec(ctx,
		`INSERT INTO webhooks (id, user_id, url, description, events, filters, signing_secret, enabled, created_at)
		 VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9)`,
		w.ID, w.UserID, w.URL, w.Description, w.Events, filtersJSON, w.SigningSecret, w.Enabled, w.CreatedAt,
	); err != nil {
		return nil, fmt.Errorf("insert webhook: %w", err)
	}
	return w, nil
}

// GetWebhookByID returns the webhook iff it's owned by userID. Cross-
// user reads (or missing rows) return ErrWebhookNotFound — same