feat(server): Java webhook runtime role; restarts no longer drop events (#1300)

Author: FelixTJDietrich

.claude/skills/fix-ci/SKILL.md

@@ -73,10 +73,9 @@ Before fixing anything, categorize every failure into this table.
 | 1 | Formatting | "Formatting failed", biome/prettier diff | `pnpm run format` |
 | 2 | Lint | Biome lint errors | `pnpm run check:fix` |
 | 3 | TypeScript | TS2xxx errors, type mismatch | Fix the type error in source |
-| 4 | Build failure | Compilation errors, missing exports | Fix imports/exports, verify with `pnpm run build:webhook-ingest` |
+| 4 | Build failure | Compilation errors, missing exports | Fix imports/exports, verify with `pnpm run build:webapp` |
 | 5 | Webapp tests | "FAIL" in webapp test output | Fix test or source, verify with `pnpm run test:webapp` |
 | 5 | App server tests | Maven test failures, assertion errors | Fix test or source, verify with `cd server && ./mvnw test -Dsurefire.includedGroups="unit" -Dmaven.test.skip=false -T 2C --batch-mode -q` |
-| 5 | Webhook tests | Vitest failures in webhook-ingest | Fix test or source, verify with `pnpm run test:webhook-ingest` |
 | 6 | OpenAPI sync | "OpenAPI out of sync" | `pnpm run generate:api` |
 | 6 | DB schema | "Schema drift detected" | `pnpm run db:draft-changelog` |
 | 6 | DB ERD | "ERD outdated" | `pnpm run db:generate-erd-docs` |
@@ -103,10 +102,6 @@ Then run tests for ALL components that had failures:
 # If webapp tests failed:
 pnpm run test:webapp
 
-# If webhook-ingest tests failed:
-pnpm run test:webhook-ingest
-
-
 # If app-server tests failed:
 cd server && ./mvnw test -Dsurefire.includedGroups="unit" -Dmaven.test.skip=false -T 2C --batch-mode -q && cd ../..
 ```

.claude/skills/land-pr/SKILL.md

@@ -36,8 +36,7 @@ git diff --name-only HEAD
 Map paths to components (mirrors CI's dorny/paths-filter config):
 - `webapp/**` → webapp changed
 - `server/**` OR `scripts/db-utils.sh` → app-server changed
-- `webhook-ingest/**` → webhook changed
-- `package.json` OR `package-lock.json` OR `.node-version` → webapp + webhook changed
+- `package.json` OR `package-lock.json` OR `.node-version` → webapp changed
 - `docs/**` → docs-only (skip all validation if nothing else changed)
 
 ## 3. Format
@@ -73,26 +72,10 @@ pnpm run db:draft-changelog
 pnpm run db:generate-erd-docs
 ```
 
-## 6. Build Affected TS Services
-
-If webhook changed:
-
-```bash
-pnpm run build:webhook-ingest
-```
-
-Build failures catch path alias and import issues that typecheck alone misses.
-
-## 7. Unit Tests for Affected Components
+## 6. Unit Tests for Affected Components
 
 Run ONLY tests for changed components. Order: fastest first.
 
-If webhook changed:
-
-```bash
-pnpm run test:webhook-ingest
-```
-
 If webapp changed:
 
 ```bash
@@ -107,7 +90,7 @@ cd server && ./mvnw test -Dsurefire.includedGroups="unit" -Dmaven.test.skip=fals
 
 ALL tests must pass before proceeding.
 
-## 8. OpenAPI Sync Check
+## 7. OpenAPI Sync Check
 
 If app-server changed:
 
@@ -118,7 +101,7 @@ git diff --quiet || echo "WARNING: OpenAPI specs were out of sync - staging chan
 
 Stage any drift that was caught.
 
-## 9. Final Validation Pass
+## 8. Final Validation Pass
 
 Regeneration can produce unformatted code. Run one final pass:
 
@@ -129,7 +112,7 @@ pnpm run check
 
 Both must pass.
 
-## 10. Create Branch (if on main)
+## 9. Create Branch (if on main)
 
 ```bash
 git branch --show-current
@@ -143,7 +126,7 @@ git checkout -b <type>/<description>
 
 Types: `feat`, `fix`, `docs`, `refactor`, `test`, `ci`, `chore`
 
-## 11. Commit
+## 10. Commit
 
 ```bash
 git add -A
@@ -156,19 +139,19 @@ git commit -m "<type>(<scope>): <description>"
 - Infra (no release): `ci`, `config`, `deps`, `deps-dev`, `docker`, `scripts`, `security`, `db`, `no-release`
 - Feature: `gitprovider`, `leaderboard`, `mentor`, `notifications`, `profile`, `teams`, `workspace`
 
-## 12. Push
+## 11. Push
 
 ```bash
 git push -u origin HEAD
 ```
 
-## 13. Check if PR Exists
+## 12. Check if PR Exists
 
 ```bash
 PAGER=cat gh pr view --json number,url 2>/dev/null && echo "PR exists - skip creation" || echo "No PR - create one"
 ```
 
-## 14. Create PR (if needed)
+## 13. Create PR (if needed)
 
 Skip if step 13 showed "PR exists".
 
@@ -184,7 +167,7 @@ PAGER=cat gh pr create --base main \
 <steps to verify, or 'CI covers this'>"
 ```
 
-## 15. Verify
+## 14. Verify
 
 ```bash
 PAGER=cat gh pr view --json url,title -q '"PR: \(.title)\nURL: \(.url)"'

.github/CODEOWNERS

@@ -12,9 +12,6 @@ renovate.json                    @ls1intum/hephaestus-maintainers
 # Application Server (Java/Spring)
 server/       @ls1intum/hephaestus-maintainers
 
-# Webhook Ingest (TypeScript/Hono)
-webhook-ingest/           @ls1intum/hephaestus-maintainers
-
 # Webapp (React/TypeScript)
 webapp/                          @ls1intum/hephaestus-maintainers
 

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -48,7 +48,7 @@ body:
       options:
         - Webapp (React UI)
         - Application Server (Java/Spring, includes Pi mentor agent)
-        - Webhook Ingest
+        - Webhook Server (inbound webhook receiver)
         - Don't know
     validations:
       required: true

.github/PULL_REQUEST_TEMPLATE.md

@@ -3,7 +3,7 @@ TITLE FORMAT (required):
   <type>(<scope>): <description>
 
   Types: feat | fix | docs | refactor | test | ci | perf | revert
-  Scopes (Service): webapp | server | ai | webhooks | docs
+  Scopes (Service): webapp | server | ai | docs
   Scopes (Infra - NO RELEASE): ci | config | deps | deps-dev | docker | scripts | security | db | no-release
   Scopes (Feature): gitprovider | leaderboard | mentor | notifications | profile | teams | workspace
 

.github/labeler.yml

@@ -13,10 +13,6 @@ application-server:
   - changed-files:
     - any-glob-to-any-file: server/**
 
-webhook-ingest:
-  - changed-files:
-    - any-glob-to-any-file: "webhook-ingest/**"
-
 ci:
   - changed-files:
     - any-glob-to-any-file:

.github/prompts/fix-ci.prompt.md

@@ -1,6 +1,6 @@
 ---
-mode: agent
 description: Diagnose and fix ALL failing CI checks on the current PR in a single pass
+subtask: true
 ---
 
 # Fix CI
@@ -58,10 +58,9 @@ Before fixing anything, categorize every failure into this table.
 | 1 | Formatting | "Formatting failed", biome/prettier diff | `pnpm run format` |
 | 2 | Lint | Biome lint errors | `pnpm run check:fix` |
 | 3 | TypeScript | TS2xxx errors, type mismatch | Fix the type error in source |
-| 4 | Build failure | Compilation errors, missing exports | Fix imports/exports, verify with `pnpm run build:webhook-ingest` |
+| 4 | Build failure | Compilation errors, missing exports | Fix imports/exports, verify with `pnpm run build:webapp` |
 | 5 | Webapp tests | "FAIL" in webapp test output | Fix test or source, verify with `pnpm run test:webapp` |
 | 5 | App server tests | Maven test failures, assertion errors | Fix test or source, verify with `cd server && ./mvnw test -Dsurefire.includedGroups="unit" -Dmaven.test.skip=false -T 2C --batch-mode -q` |
-| 5 | Webhook tests | Vitest failures in webhook-ingest | Fix test or source, verify with `pnpm run test:webhook-ingest` |
 | 6 | OpenAPI sync | "OpenAPI out of sync" | `pnpm run generate:api` |
 | 6 | DB schema | "Schema drift detected" | `pnpm run db:draft-changelog` |
 | 6 | DB ERD | "ERD outdated" | `pnpm run db:generate-erd-docs` |
@@ -88,9 +87,6 @@ Then run tests for ALL components that had failures:
 # If webapp tests failed:
 pnpm run test:webapp
 
-# If webhook-ingest tests failed:
-pnpm run test:webhook-ingest
-
 # If app-server tests failed:
 cd server && ./mvnw test -Dsurefire.includedGroups="unit" -Dmaven.test.skip=false -T 2C --batch-mode -q && cd ../..
 ```

.github/prompts/land-pr.prompt.md

@@ -1,6 +1,6 @@
 ---
-mode: agent
 description: Validate, branch, commit, and create PR following Hephaestus conventions
+subtask: true
 ---
 
 # Land PR
@@ -21,9 +21,8 @@ git diff --name-only HEAD
 
 Map paths to components (mirrors CI's dorny/paths-filter config):
 - `webapp/**` → webapp changed
-- `server/**` OR `scripts/db-utils.sh` → app-server changed
-- `webhook-ingest/**` → webhook changed
-- `package.json` OR `package-lock.json` OR `.node-version` → webapp + webhook changed
+- `server/**` OR `scripts/db-utils.sh` → app-server changed (includes webhook receiver since ADR 0008)
+- `package.json` OR `package-lock.json` OR `.node-version` → webapp changed
 - `docs/**` → docs-only (skip all validation if nothing else changed)
 
 ## 3. Format
@@ -59,26 +58,10 @@ pnpm run db:draft-changelog
 pnpm run db:generate-erd-docs
 ```
 
-## 6. Build Affected TS Services
-
-If webhook changed:
-
-```bash
-pnpm run build:webhook-ingest
-```
-
-Build failures catch path alias and import issues that typecheck alone misses.
-
-## 7. Unit Tests for Affected Components
+## 6. Unit Tests for Affected Components
 
 Run ONLY tests for changed components. Order: fastest first.
 
-If webhook changed:
-
-```bash
-pnpm run test:webhook-ingest
-```
-
 If webapp changed:
 
 ```bash
@@ -93,7 +76,7 @@ cd server && ./mvnw test -Dsurefire.includedGroups="unit" -Dmaven.test.skip=fals
 
 ALL tests must pass before proceeding.
 
-## 8. OpenAPI Sync Check
+## 7. OpenAPI Sync Check
 
 If app-server changed:
 
@@ -104,7 +87,7 @@ git diff --quiet || echo "WARNING: OpenAPI specs were out of sync - staging chan
 
 Stage any drift that was caught.
 
-## 9. Final Validation Pass
+## 8. Final Validation Pass
 
 Regeneration can produce unformatted code. Run one final pass:
 
@@ -115,7 +98,7 @@ pnpm run check
 
 Both must pass.
 
-## 10. Create Branch (if on main)
+## 9. Create Branch (if on main)
 
 ```bash
 git branch --show-current
@@ -129,7 +112,7 @@ git checkout -b <type>/<description>
 
 Types: `feat`, `fix`, `docs`, `refactor`, `test`, `ci`, `chore`
 
-## 11. Commit
+## 10. Commit
 
 ```bash
 git add -A
@@ -138,23 +121,23 @@ git commit -m "<type>(<scope>): <description>"
 
 **Scopes:**
 
-- Service: `webapp`, `server`, `ai`, `webhooks`, `docs`
+- Service: `webapp`, `server`, `docs`
 - Infra (no release): `ci`, `config`, `deps`, `deps-dev`, `docker`, `scripts`, `security`, `db`, `no-release`
 - Feature: `gitprovider`, `leaderboard`, `mentor`, `notifications`, `profile`, `teams`, `workspace`
 
-## 12. Push
+## 11. Push
 
 ```bash
 git push -u origin HEAD
 ```
 
-## 13. Check if PR Exists
+## 12. Check if PR Exists
 
 ```bash
 PAGER=cat gh pr view --json number,url 2>/dev/null && echo "PR exists - skip creation" || echo "No PR - create one"
 ```
 
-## 14. Create PR (if needed)
+## 13. Create PR (if needed)
 
 Skip if step 13 showed "PR exists".
 
@@ -170,7 +153,7 @@ PAGER=cat gh pr create --base main \
 <steps to verify, or 'CI covers this'>"
 ```
 
-## 15. Verify
+## 14. Verify
 
 ```bash
 PAGER=cat gh pr view --json url,title -q '"PR: \(.title)\nURL: \(.url)"'

.github/workflows/ci-docker-build.yml

@@ -20,11 +20,6 @@ on:
         required: false
         type: string
         default: "true"
-      webhook_ingest_changed:
-        description: "Whether webhook-ingest files changed (or should build for other reasons)"
-        required: false
-        type: string
-        default: "true"
       agent_images_changed:
         description: "Whether agent image files changed (or should build for other reasons)"
         required: false
@@ -76,29 +71,10 @@ jobs:
         org.opencontainers.image.licenses=MIT
         hephaestus.component=application-server
 
-  webhook-ingest-build:
-    name: "Webhook"
-    if: inputs.should_skip != 'true' && inputs.webhook_ingest_changed == 'true'
-    uses: ./.github/workflows/reusable-docker-build.yml
-    with:
-      image-name: "ls1intum/hephaestus/webhook-ingest"
-      docker-file: "./webhook-ingest/Dockerfile"
-      # Context = repo root so the Dockerfile can COPY pnpm-lock.yaml,
-      # pnpm-workspace.yaml, and the workspace package.json files needed for
-      # `pnpm install --filter webhook-ingest...` to resolve the workspace graph.
-      docker-context: "."
-      registry: "ghcr.io"
-      tags: |
-        ${{ github.ref_name }}
-        ${{ github.sha }}
-        ci-${{ github.run_number }}
-        ${{ github.event_name == 'pull_request' && format('pr-{0}', github.event.number) || 'latest' }}
-      labels: |
-        org.opencontainers.image.title=Hephaestus Webhook Ingest
-        org.opencontainers.image.description=Hono/TypeScript-based webhook processor for Hephaestus
-        org.opencontainers.image.vendor=AET TUM
-        org.opencontainers.image.licenses=MIT
-        hephaestus.component=webhook-ingest
+  # Note: the inbound webhook receiver lives in the application-server image
+  # (gitprovider.webhook package) and is deployed as a separate container via
+  # SPRING_PROFILES_ACTIVE=prod,webhook. No separate image build is required. See
+  # docker/compose.core.yaml (webhook-server service) and ADR 0008.
 
   agent-pi-build:
     name: "Agent: Pi"