Alarm webhook

const definition = {
  name: 'Alarm Webhook',
  namespace: 'com.example',
  description: 'Posts alarm panel changes to a webhook, with who caused them.',
  category: 'security',
};

const preferences = {
  pages: [{
    id: 'main',
    title: 'Alarm Webhook',
    inputs: [
      { key: 'panel', label: 'Alarm panel', type: 'entity', domainFilter: 'intrusion_alarm_panel', required: true },
      { key: 'url', label: 'Webhook URL', type: 'string', required: true, placeholder: 'https://hooks.example.com/…' },
      { key: 'token', label: 'Bearer token', type: 'password',
        description: 'Sent as an Authorization header. Never written to the log.' },
      { key: 'alarmsOnly', label: 'Only send Pending and Triggered', type: 'boolean', default: false },
    ],
  }],
};

function installed() { initialize(); }
function updated() { unsubscribe(); unschedule(); initialize(); }

function initialize() {
  subscribe(panel, {}, onPanelChange);                 // every change; the handler decides what matters
}

function onPanelChange(evt) {
  const from = evt.oldState.state;
  const to = evt.newState.state;
  if (from === to) return;                             // attribute-only change (battery, zones, …)

  const isAlarm = matchesState(evt.entityId, to, 'Pending') || matchesState(evt.entityId, to, 'Triggered');
  if (alarmsOnly === true && !isAlarm) return;

  const ctx = evt.newState.context ?? {};
  const payload = {
    event: 'alarm.state',
    entityId: evt.entityId,
    from,
    to,
    actor: ctx.actorType ?? 'system',                  // 'user', 'alarm-panel-user', 'smart-app', 'physical', …
    user: ctx.user ? `${ctx.user.firstName ?? ''} ${ctx.user.lastName ?? ''}`.trim() || undefined : undefined,
    at: new Date().toISOString(),
  };

  const headers = { 'Content-Type': 'application/json' };
  if (typeof token === 'string' && token) headers.Authorization = `Bearer ${token}`;

  const result = httpRequest({ url, method: 'POST', headers, body: JSON.stringify(payload) });
  if (result.ok) {
    state.sent = (state.sent ?? 0) + 1;
    console.log(`Webhook queued: ${from} → ${to} (${payload.actor})`);
  } else {
    state.refused = (state.refused ?? 0) + 1;
    console.warn('Webhook refused:', result.reason);  // bad URL or a blocked destination; see the egress policy
  }
}