feat(gateway): add incident.io source

Signed-off-by: Yordis Prieto <yordis.prieto@gmail.com>

Author: yordis

devops/docker/compose/.env.example

@@ -18,6 +18,14 @@
 # TROGON_SOURCE_GITLAB_STREAM_MAX_AGE_SECS=604800
 # TROGON_SOURCE_GITLAB_NATS_ACK_TIMEOUT_SECS=10
 
+# --- incident.io Source ---
+# TROGON_SOURCE_INCIDENTIO_SIGNING_SECRET=  # Svix signing secret, includes whsec_ prefix
+# TROGON_SOURCE_INCIDENTIO_SUBJECT_PREFIX=incidentio
+# TROGON_SOURCE_INCIDENTIO_STREAM_NAME=INCIDENTIO
+# TROGON_SOURCE_INCIDENTIO_STREAM_MAX_AGE_SECS=604800
+# TROGON_SOURCE_INCIDENTIO_NATS_ACK_TIMEOUT_SECS=10
+# TROGON_SOURCE_INCIDENTIO_TIMESTAMP_TOLERANCE_SECS=300
+
 # --- Linear Source ---
 # TROGON_SOURCE_LINEAR_WEBHOOK_SECRET=
 # TROGON_SOURCE_LINEAR_SUBJECT_PREFIX=linear

devops/docker/compose/compose.yml

@@ -61,6 +61,13 @@ services:
       TROGON_SOURCE_GITLAB_STREAM_MAX_AGE_SECS: "${TROGON_SOURCE_GITLAB_STREAM_MAX_AGE_SECS:-604800}"
       TROGON_SOURCE_GITLAB_NATS_ACK_TIMEOUT_SECS: "${TROGON_SOURCE_GITLAB_NATS_ACK_TIMEOUT_SECS:-10}"
 
+      TROGON_SOURCE_INCIDENTIO_SIGNING_SECRET: "${TROGON_SOURCE_INCIDENTIO_SIGNING_SECRET:-}"
+      TROGON_SOURCE_INCIDENTIO_SUBJECT_PREFIX: "${TROGON_SOURCE_INCIDENTIO_SUBJECT_PREFIX:-incidentio}"
+      TROGON_SOURCE_INCIDENTIO_STREAM_NAME: "${TROGON_SOURCE_INCIDENTIO_STREAM_NAME:-INCIDENTIO}"
+      TROGON_SOURCE_INCIDENTIO_STREAM_MAX_AGE_SECS: "${TROGON_SOURCE_INCIDENTIO_STREAM_MAX_AGE_SECS:-604800}"
+      TROGON_SOURCE_INCIDENTIO_NATS_ACK_TIMEOUT_SECS: "${TROGON_SOURCE_INCIDENTIO_NATS_ACK_TIMEOUT_SECS:-10}"
+      TROGON_SOURCE_INCIDENTIO_TIMESTAMP_TOLERANCE_SECS: "${TROGON_SOURCE_INCIDENTIO_TIMESTAMP_TOLERANCE_SECS:-300}"
+
       TROGON_SOURCE_LINEAR_WEBHOOK_SECRET: "${TROGON_SOURCE_LINEAR_WEBHOOK_SECRET:-}"
       TROGON_SOURCE_LINEAR_SUBJECT_PREFIX: "${TROGON_SOURCE_LINEAR_SUBJECT_PREFIX:-linear}"
       TROGON_SOURCE_LINEAR_STREAM_NAME: "${TROGON_SOURCE_LINEAR_STREAM_NAME:-LINEAR}"

devops/docker/compose/services/trogon-gateway/README.md

@@ -14,6 +14,7 @@ prefix:
 | Slack | `/slack/webhook` | `TROGON_SOURCE_SLACK_SIGNING_SECRET` |
 | Telegram | `/telegram/webhook` | `TROGON_SOURCE_TELEGRAM_WEBHOOK_SECRET` |
 | GitLab | `/gitlab/webhook` | `TROGON_SOURCE_GITLAB_WEBHOOK_SECRET` |
+| incident.io | `/incidentio/webhook` | `TROGON_SOURCE_INCIDENTIO_SIGNING_SECRET` |
 | Linear | `/linear/webhook` | `TROGON_SOURCE_LINEAR_WEBHOOK_SECRET` |
 
 The gateway port is configured via `TROGON_GATEWAY_PORT` (default `8080`).
@@ -65,6 +66,17 @@ docker compose --profile dev up
 Find the ngrok tunnel URL in `docker compose logs ngrok`, then set it as
 your Discord application's Interactions Endpoint URL (append `/discord/webhook`).
 
+## incident.io webhooks
+
+incident.io uses Svix-style webhook signing. Set `TROGON_SOURCE_INCIDENTIO_SIGNING_SECRET`
+to the `whsec_...` signing secret from incident.io and configure the webhook
+endpoint as `/incidentio/webhook`.
+
+incident.io does not guarantee ordered delivery, and private incident events may
+contain only resource IDs rather than full objects. The gateway forwards the raw
+verified payload to NATS and leaves any enrichment or reordering to downstream
+consumers.
+
 ## Exposing webhooks with ngrok
 
 ```bash

rsworkspace/Cargo.lock

@@ -17,6 +17,7 @@ trogon-nats = { path = "crates/trogon-nats" }
 trogon-source-discord = { path = "crates/trogon-source-discord" }
 trogon-source-github = { path = "crates/trogon-source-github" }
 trogon-source-gitlab = { path = "crates/trogon-source-gitlab" }
+trogon-source-incidentio = { path = "crates/trogon-source-incidentio" }
 trogon-source-linear = { path = "crates/trogon-source-linear" }
 trogon-source-slack = { path = "crates/trogon-source-slack" }
 trogon-source-telegram = { path = "crates/trogon-source-telegram" }

rsworkspace/Cargo.toml

@@ -23,6 +23,7 @@ trogon-nats = { workspace = true }
 trogon-source-discord = { workspace = true }
 trogon-source-github = { workspace = true }
 trogon-source-gitlab = { workspace = true }
+trogon-source-incidentio = { workspace = true }
 trogon-source-linear = { workspace = true }
 trogon-source-slack = { workspace = true }
 trogon-source-telegram = { workspace = true }