feat: receive relay events via webhook callbacks#1254

Open

PierreLeGuen wants to merge 17 commits intostagingfrom

feat/webhook-callbacks

Commits on Mar 16, 2026

feat: receive relay events via webhook callbacks instead of SSE
PierreLeGuen
committed
fix: address review feedback on webhook callback PR
PierreLeGuen
committed

Commits on Mar 17, 2026

security: adapt relay client to new channel-relay auth model

Pierre
and
claude
committed
security: use server-side approval tokens, remove caller-supplied routing

Pierre
and
claude
committed
fix: pass webhook_url during OAuth so callback_url is set on connection

Pierre
and
claude
committed
security: remove webhook_url from OAuth initiation

Pierre
and
claude
committed
chore: cargo fmt

Pierre
and
claude
committed
security: remove all URL params from OAuth initiation

Pierre
and
claude
committed
fix: restore CSRF nonce for OAuth callback validation

Pierre
and
claude
committed
security: per-instance callback signing secrets

Pierre
and
claude
committed
security: clean per-instance callback secrets, no shared secrets, no fallbacks

Pierre
and
claude
committed
fix: pass team_id to get_signing_secret for workspace-scoped lookup

Pierre
and
claude
committed