test: trigger webhook notification test

The entrypoint used jq to parse MANUAL_USER_MAPPINGS as JSON, but
ParseManualMappings() in Go uses "GiteaUsername:SlackID,GiteaUser2:SlackID2"
format. The mismatch caused "set -e" to kill the shell when jq failed
on non-JSON input, preventing the Go binary from ever starting.

Fix: replace jq JSON parsing with comma/colon splitting to match
the Go code's expected format.

TEST_WEBHOOK.md

@@ -0,0 +1,4 @@
+# Test Webhook Notification
+
+This file exists only to trigger a test webhook notification.
+Delete after testing.

cmd/server/main.go

@@ -67,8 +67,15 @@ func main() {
 	slackClient := slacknotifier.New(&cfg.Notification.Slack, logger)
 	logger.Info().Msg("Slack notifier initialized")
 
-	// Initialize cached identity resolver
-	resolver := cache.NewCachedResolver(repo, emailLookup, slackClient, logger)
+	// Initialize cached identity resolver with optional manual mappings
+	manualMappings := cache.ParseManualMappings(os.Getenv("MANUAL_USER_MAPPINGS"))
+	if len(manualMappings) > 0 {
+		logger.Info().Int("count", len(manualMappings)).Msg("manual user mappings configured")
+		for username := range manualMappings {
+			logger.Debug().Str("username", username).Msg("manual mapping registered")
+		}
+	}
+	resolver := cache.NewCachedResolver(repo, emailLookup, slackClient, manualMappings, logger)
 	logger.Info().Msg("identity resolver initialized")
 
 	// Create processor adapter that implements webhook.EventHandler

docker-entrypoint.sh

@@ -3,7 +3,6 @@ set -e
 
 # Generate config.yaml from environment variables
 mkdir -p /app/config
-
 cat > /app/config/config.yaml << 'YAMLEOF'
 server:
   port: 8080
@@ -38,21 +37,23 @@ rules:
     notify_reviewers: true
 YAMLEOF
 
-# Seed manual user mappings from MANUAL_USER_MAPPINGS env var (JSON: {"gitea_username":"slack_id",...})
+# Seed manual user mappings from MANUAL_USER_MAPPINGS env var
+# Format: "GiteaUsername:SlackID,GiteaUser2:SlackID2" (same as Go's ParseManualMappings)
 # These bypass the Gitea API email lookup + Slack email lookup
 
 if [ -n "$MANUAL_USER_MAPPINGS" ]; then
-    # Create table and indexes using single-line calls to avoid sh issues with multi-line SQL
     sqlite3 /app/data/notifications.db "CREATE TABLE IF NOT EXISTS users (id INTEGER PRIMARY KEY AUTOINCREMENT, gitea_username TEXT UNIQUE, gitea_id INTEGER, email TEXT UNIQUE, full_name TEXT, slack_id TEXT, slack_name TEXT, created_at DATETIME DEFAULT CURRENT_TIMESTAMP, updated_at DATETIME DEFAULT CURRENT_TIMESTAMP);" 2>/dev/null || true
     sqlite3 /app/data/notifications.db "CREATE INDEX IF NOT EXISTS idx_users_email ON users(email);" 2>/dev/null || true
     sqlite3 /app/data/notifications.db "CREATE INDEX IF NOT EXISTS idx_users_gitea_username ON users(gitea_username);" 2>/dev/null || true
     sqlite3 /app/data/notifications.db "CREATE INDEX IF NOT EXISTS idx_users_slack_id ON users(slack_id);" 2>/dev/null || true
 
-    echo "$MANUAL_USER_MAPPINGS" | jq -r 'to_entries[] | "\(.key) \(.value)"' 2>/dev/null | \
-    while read -r gitea_user slack_id; do
-        [ -z "$gitea_user" ] && continue
+    echo "$MANUAL_USER_MAPPINGS" | tr ',' '\n' | while IFS=':' read -r name slack_id; do
+        name=$(echo "$name" | xargs)
+        slack_id=$(echo "$slack_id" | xargs)
+        [ -z "$name" ] && continue
+        [ -z "$slack_id" ] && continue
         sqlite3 /app/data/notifications.db \
-            "INSERT OR REPLACE INTO users(gitea_username, slack_id, slack_name, updated_at) VALUES('$gitea_user','$slack_id','$gitea_user',datetime('now'));" \
+            "INSERT OR REPLACE INTO users(gitea_username, slack_id, slack_name, updated_at) VALUES('$name','$slack_id','$name',datetime('now'));" \
             2>/dev/null || true
     done
 fi

internal/identity/cache/cache.go

@@ -12,6 +12,31 @@ import (
 	"github.com/vincentc-afk/gitea-notification-hub/internal/storage"
 )
 
+// ParseManualMappings parses a MANUAL_USER_MAPPINGS env var string
+// Format: "GiteaUsername:SlackID,GiteaUser2:SlackID2"
+func ParseManualMappings(raw string) map[string]string {
+	mappings := make(map[string]string)
+	raw = strings.TrimSpace(raw)
+	if raw == "" {
+		return mappings
+	}
+	for _, pair := range strings.Split(raw, ",") {
+		pair = strings.TrimSpace(pair)
+		if pair == "" {
+			continue
+		}
+		parts := strings.SplitN(pair, ":", 2)
+		if len(parts) == 2 {
+			username := strings.TrimSpace(parts[0])
+			slackID := strings.TrimSpace(parts[1])
+			if username != "" && slackID != "" {
+				mappings[username] = slackID
+			}
+		}
+	}
+	return mappings
+}
+
 // CachedResolver implements identity.Resolver with caching
 // It stores resolved identities in the database and only queries
 // external APIs when a user is not found in the cache
@@ -19,6 +44,7 @@ type CachedResolver struct {
 	repo           storage.Repository
 	emailLookup    identity.EmailLookup
 	slackLookup    identity.SlackLookup
+	manualMappings map[string]string // GiteaUsername -> SlackID
 	logger         zerolog.Logger
 }
 
@@ -27,18 +53,24 @@ func NewCachedResolver(
 	repo storage.Repository,
 	emailLookup identity.EmailLookup,
 	slackLookup identity.SlackLookup,
+	manualMappings map[string]string,
 	logger zerolog.Logger,
 ) *CachedResolver {
+	if manualMappings == nil {
+		manualMappings = make(map[string]string)
+	}
 	return &CachedResolver{
 		repo:           repo,
 		emailLookup:    emailLookup,
 		slackLookup:    slackLookup,
+		manualMappings: manualMappings,
 		logger:         logger.With().Str("component", "identity-resolver").Logger(),
 	}
 }
 
 // Resolve returns the external identity for a Gitea user
 // It follows this strategy:
+// 0. Check manual mappings (MANUAL_USER_MAPPINGS env var) - highest priority
 // 1. Check DB by Gitea username - if found with Slack ID, return cached result
 // 2. If not found, use Gitea API to get the real email (not the webhook email which may be noreply)
 // 3. Lookup Slack by email
@@ -49,6 +81,20 @@ func (r *CachedResolver) Resolve(ctx context.Context, user event.User) (*identit
 		Str("webhook_email", user.Email).
 		Logger()
 
+	// Step 0: Check manual mappings first (highest priority)
+	if user.GiteaUsername != "" {
+		if slackID, ok := r.manualMappings[user.GiteaUsername]; ok {
+			logger.Info().
+				Str("slack_id", slackID).
+				Msg("resolved user via manual mapping")
+			return &identity.ResolvedIdentity{
+				Email:     user.Email,
+				SlackID:   slackID,
+				SlackName: "",
+			}, nil
+		}
+	}
+
 	// Step 1: Try to find by Gitea username in cache
 	if user.GiteaUsername != "" {
 		dbUser, err := r.repo.GetUserByGiteaUsername(ctx, user.GiteaUsername)