Support per-route Slashwork auth tokens and add SKJS route

Each Slashwork app has its own auth token. Move authToken from the
global slashwork config into each RouteConfig so skipper and skjs
can post with different application identities.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: hubyrod

config.ts

@@ -6,10 +6,16 @@ const config: SkiphooksConfig = {
   },
   slashwork: {
     graphqlUrl: process.env.SLASHWORK_GRAPHQL_URL!,
-    authToken: process.env.SLASHWORK_AUTH_TOKEN!,
   },
   routes: {
-    "skipper": { groupId: "g_dUYLNrxW7GzSxQwCKfGGQL" },
+    skipper: {
+      groupId: "g_dUYLNrxW7GzSxQwCKfGGQL",
+      authToken: process.env.SLASHWORK_AUTH_TOKEN_SKIPPER!,
+    },
+    skjs: {
+      groupId: "g_dUYLNrxW7GzSxQwCKfGGQL",
+      authToken: process.env.SLASHWORK_AUTH_TOKEN_SKJS!,
+    },
   },
 };
 

src/config.ts

@@ -2,6 +2,7 @@ export type EventType = "pull_request" | "issues" | "issue_comment" | "push" | "
 
 export interface RouteConfig {
   groupId: string;
+  authToken: string;
 }
 
 export interface SkiphooksConfig {
@@ -10,7 +11,6 @@ export interface SkiphooksConfig {
   };
   slashwork: {
     graphqlUrl: string;
-    authToken: string;
   };
   routes: Record<string, RouteConfig>;
 }
@@ -27,9 +27,6 @@ export function loadConfig(): SkiphooksConfig {
   if (!config.slashwork?.graphqlUrl) {
     throw new Error("config: slashwork.graphqlUrl is required");
   }
-  if (!config.slashwork?.authToken) {
-    throw new Error("config: slashwork.authToken is required");
-  }
   if (!config.routes || Object.keys(config.routes).length === 0) {
     throw new Error("config: at least one route must be configured");
   }
@@ -38,6 +35,9 @@ export function loadConfig(): SkiphooksConfig {
     if (!route?.groupId) {
       throw new Error(`config: routes.${name}.groupId is required`);
     }
+    if (!route?.authToken) {
+      throw new Error(`config: routes.${name}.authToken is required`);
+    }
   }
 
   return config;

src/index.ts

@@ -11,10 +11,13 @@ import { releaseHandler } from "./handlers/release.ts";
 const config = loadConfig();
 const port = parseInt(process.env.PORT || "3000", 10);
 
-const connection: SlashworkConnection = {
-  graphqlUrl: config.slashwork.graphqlUrl,
-  authToken: config.slashwork.authToken,
-};
+function connectionForRoute(routeName: string): SlashworkConnection {
+  const route = config.routes[routeName]!;
+  return {
+    graphqlUrl: config.slashwork.graphqlUrl,
+    authToken: route.authToken,
+  };
+}
 
 const handlers: Record<EventType, EventHandler> = {
   pull_request: pullRequestHandler,
@@ -28,7 +31,9 @@ function log(level: string, message: string) {
   console.log(`[${new Date().toISOString()}] [${level}] ${message}`);
 }
 
-async function handleWebhook(req: Request, groupId: string): Promise<Response> {
+async function handleWebhook(req: Request, routeName: string): Promise<Response> {
+  const route = config.routes[routeName]!;
+  const connection = connectionForRoute(routeName);
   if (req.method !== "POST") {
     return new Response("Method not allowed", { status: 405 });
   }
@@ -76,7 +81,7 @@ async function handleWebhook(req: Request, groupId: string): Promise<Response> {
 
   try {
     const { markdown } = handler.format(payload);
-    await postToSlashwork(connection, groupId, markdown);
+    await postToSlashwork(connection, route.groupId, markdown);
     log("info", `Posted ${eventType} event: ${payload.action ?? "n/a"}`);
   } catch (err) {
     log("error", `Failed to post to Slashwork: ${err}`);
@@ -102,7 +107,7 @@ Bun.serve({
         log("warn", `No route configured for: ${name}`);
         return new Response("Not found", { status: 404 });
       }
-      return handleWebhook(req, route.groupId);
+      return handleWebhook(req, name);
     }
 
     return new Response("Not found", { status: 404 });
@@ -113,9 +118,12 @@ const routeNames = Object.keys(config.routes);
 log("info", `Server running on port ${port}`);
 log("info", `Routes: ${routeNames.map(n => `/github/${n}`).join(", ")}`);
 log("info", `Slashwork URL: ${config.slashwork.graphqlUrl}`);
-log("info", `Auth token loaded: ${config.slashwork.authToken.slice(0, 8)}...`);
 
-validateConnection(connection).then(
-  () => log("info", "Slashwork auth validated"),
-  (err) => log("error", `${err}`),
-);
+for (const name of routeNames) {
+  const conn = connectionForRoute(name);
+  log("info", `Route ${name}: token ${conn.authToken.slice(0, 8)}...`);
+  validateConnection(conn).then(
+    () => log("info", `Route ${name}: auth validated`),
+    (err) => log("error", `Route ${name}: ${err}`),
+  );
+}