From a7c70c3fb10d7d46b5673e8167bfc7dde9407b6d Mon Sep 17 00:00:00 2001
From: stack72 <public@paulstack.co.uk>
Date: Mon, 9 Dec 2024 16:45:05 +0000
Subject: [PATCH] feat(sdf, dal): Adding the ability to set a webhook url for a
 workspace

We currently only post to that webhook from the change set approval flow but we want to make this more of an opt-in to what you can / can't to
---
 .../components/WorkspaceIntegrationsModal.vue |  48 +++++++
 .../layout/navbar/WorkspaceSettingsMenu.vue   |  12 ++
 app/web/src/store/feature_flags.store.ts      |   1 +
 app/web/src/store/workspaces.store.ts         |  56 +++++++-
 lib/dal/src/lib.rs                            |   1 +
 .../U3410__workspace_integration.sql          |  11 ++
 lib/dal/src/workspace.rs                      |   6 +
 lib/dal/src/workspace_integrations.rs         | 126 ++++++++++++++++++
 lib/sdf-server/src/service/v2.rs              |   7 +
 lib/sdf-server/src/service/v2/change_set.rs   |  47 ++++++-
 .../src/service/v2/change_set/apply.rs        |  20 ++-
 .../src/service/v2/change_set/approve.rs      |  15 ++-
 .../v2/change_set/cancel_approval_request.rs  |  15 ++-
 .../src/service/v2/change_set/reject.rs       |  15 ++-
 .../service/v2/change_set/request_approval.rs |  15 ++-
 lib/sdf-server/src/service/v2/integrations.rs |  42 ++++++
 .../v2/integrations/get_integrations.rs       |  27 ++++
 .../v2/integrations/update_integration.rs     |  45 +++++++
 lib/si-id/src/lib.rs                          |   1 +
 19 files changed, 496 insertions(+), 14 deletions(-)
 create mode 100644 app/web/src/components/WorkspaceIntegrationsModal.vue
 create mode 100644 lib/dal/src/migrations/U3410__workspace_integration.sql
 create mode 100644 lib/dal/src/workspace_integrations.rs
 create mode 100644 lib/sdf-server/src/service/v2/integrations.rs
 create mode 100644 lib/sdf-server/src/service/v2/integrations/get_integrations.rs
 create mode 100644 lib/sdf-server/src/service/v2/integrations/update_integration.rs

diff --git a/app/web/src/components/WorkspaceIntegrationsModal.vue b/app/web/src/components/WorkspaceIntegrationsModal.vue
new file mode 100644
index 0000000000..e0db06f15e
--- /dev/null
+++ b/app/web/src/components/WorkspaceIntegrationsModal.vue
@@ -0,0 +1,48 @@
+<template>
+  <Modal
+    ref="modalRef"
+    type="save"
+    size="sm"
+    saveLabel="Save"
+    title="Save Integrations"
+    @save="updateIntegrations"
+  >
+    <VormInput ref="labelRef" v-model="webhookUrl" label="Slack Webhook Url" />
+  </Modal>
+</template>
+
+<script setup lang="ts">
+import { Modal, VormInput } from "@si/vue-lib/design-system";
+import { ref, computed } from "vue";
+import { useWorkspacesStore } from "@/store/workspaces.store";
+
+const workspacesStore = useWorkspacesStore();
+
+const modalRef = ref<InstanceType<typeof Modal>>();
+
+const integration = computed(() => workspacesStore.getIntegrations);
+
+function open() {
+  if (
+    integration.value &&
+    integration.value.slackWebhookUrl &&
+    integration.value.slackWebhookUrl !== ""
+  ) {
+    webhookUrl.value = integration.value.slackWebhookUrl;
+  }
+  modalRef.value?.open();
+}
+
+const webhookUrl = ref("");
+
+const updateIntegrations = () => {
+  if (!webhookUrl.value || webhookUrl.value === "" || !integration.value?.pk)
+    return;
+  workspacesStore.UPDATE_INTEGRATION(integration.value?.pk, webhookUrl.value);
+
+  modalRef.value?.close();
+  webhookUrl.value = "";
+};
+
+defineExpose({ open });
+</script>
diff --git a/app/web/src/components/layout/navbar/WorkspaceSettingsMenu.vue b/app/web/src/components/layout/navbar/WorkspaceSettingsMenu.vue
index 10461dc6f8..efaf9c89ff 100644
--- a/app/web/src/components/layout/navbar/WorkspaceSettingsMenu.vue
+++ b/app/web/src/components/layout/navbar/WorkspaceSettingsMenu.vue
@@ -33,11 +33,18 @@
         label="Copy Workspace Token"
         @click="copyWorkspaceToken"
       />
+      <DropdownMenuItem
+        v-if="featureFlagsStore.SLACK_WEBHOOK"
+        icon="settings"
+        label="Workspace Integrations"
+        @click="integrationsModalRef?.open()"
+      />
     </template>
   </NavbarButton>
 
   <WorkspaceImportModal ref="importModalRef" />
   <WorkspaceExportModal ref="exportModalRef" />
+  <WorkspaceIntegrationsModal ref="integrationsModalRef" />
 </template>
 
 <script setup lang="ts">
@@ -46,16 +53,21 @@ import { ref, computed } from "vue";
 import { useRouter, useRoute } from "vue-router";
 import WorkspaceImportModal from "@/components/WorkspaceImportModal.vue";
 import WorkspaceExportModal from "@/components/WorkspaceExportModal.vue";
+import WorkspaceIntegrationsModal from "@/components/WorkspaceIntegrationsModal.vue";
 import { useWorkspacesStore } from "@/store/workspaces.store";
 import { useChangeSetsStore } from "@/store/change_sets.store";
+import { useFeatureFlagsStore } from "@/store/feature_flags.store";
 import NavbarButton from "./NavbarButton.vue";
 
 const AUTH_PORTAL_URL = import.meta.env.VITE_AUTH_PORTAL_URL;
 const importModalRef = ref<InstanceType<typeof WorkspaceImportModal>>();
 const exportModalRef = ref<InstanceType<typeof WorkspaceExportModal>>();
+const integrationsModalRef =
+  ref<InstanceType<typeof WorkspaceIntegrationsModal>>();
 
 const workspacesStore = useWorkspacesStore();
 const changeSetStore = useChangeSetsStore();
+const featureFlagsStore = useFeatureFlagsStore();
 const router = useRouter();
 const route = useRoute();
 
diff --git a/app/web/src/store/feature_flags.store.ts b/app/web/src/store/feature_flags.store.ts
index 9d0b69c41d..dddc7bb8c0 100644
--- a/app/web/src/store/feature_flags.store.ts
+++ b/app/web/src/store/feature_flags.store.ts
@@ -17,6 +17,7 @@ const FLAG_MAPPING = {
   AI_GENERATOR: "ai-generator",
   REBAC: "rebac",
   OUTLINER_VIEWS: "diagram-outline-show-views",
+  SLACK_WEBHOOK: "slack_webhook",
 };
 
 type FeatureFlags = keyof typeof FLAG_MAPPING;
diff --git a/app/web/src/store/workspaces.store.ts b/app/web/src/store/workspaces.store.ts
index 11c29cefb9..aa2b373c4d 100644
--- a/app/web/src/store/workspaces.store.ts
+++ b/app/web/src/store/workspaces.store.ts
@@ -12,6 +12,7 @@ import handleStoreError from "./errors";
 import { AuthApiRequest } from ".";
 
 export type WorkspacePk = string;
+export type WorkspaceIntegrationId = string;
 
 type WorkspaceExportId = string;
 type WorkspaceExportSummary = {
@@ -39,6 +40,12 @@ export type WorkspaceImportSummary = {
   importedWorkspaceName: string;
 };
 
+export type WorkspaceIntegration = {
+  pk: WorkspaceIntegrationId;
+  workspaceId: WorkspacePk;
+  slackWebhookUrl?: string;
+};
+
 const LOCAL_STORAGE_LAST_WORKSPACE_PK = "si-last-workspace-pk";
 
 // Note(victor): The workspace import exists outside a change set context
@@ -60,6 +67,7 @@ export const useWorkspacesStore = () => {
         importId: null as string | null,
         importLoading: false as boolean,
         importError: undefined as string | undefined,
+        integrations: null as WorkspaceIntegration | null,
       }),
       getters: {
         allWorkspaces: (state) => _.values(state.workspacesByPk),
@@ -79,6 +87,9 @@ export const useWorkspacesStore = () => {
             null,
           );
         },
+        getIntegrations(): WorkspaceIntegration | null {
+          return this.integrations || null;
+        },
       },
 
       actions: {
@@ -162,6 +173,46 @@ export const useWorkspacesStore = () => {
             },
           });
         },
+
+        async GET_INTEGRATIONS() {
+          if (
+            this.selectedWorkspacePk === null ||
+            this.selectedWorkspacePk === ""
+          )
+            return;
+          return new ApiRequest({
+            method: "get",
+            url: `v2/workspaces/${this.selectedWorkspacePk}/integrations`,
+            onSuccess: (response) => {
+              this.integrations = {
+                pk: response.integration.pk,
+                workspaceId: response.integration.workspace_pk,
+                slackWebhookUrl: response.integration.slack_webhook_url,
+              };
+            },
+          });
+        },
+
+        async UPDATE_INTEGRATION(
+          workspaceIntegrationId: WorkspaceIntegrationId,
+          webhookUrl: string,
+        ) {
+          if (
+            this.selectedWorkspacePk === null ||
+            this.selectedWorkspacePk === ""
+          )
+            return;
+          return new ApiRequest({
+            method: "post",
+            url: `v2/workspaces/${this.selectedWorkspacePk}/integrations/${workspaceIntegrationId}`,
+            params: {
+              slackWebhookUrl: webhookUrl,
+            },
+            onSuccess: (response) => {
+              this.integrations = response.integration;
+            },
+          });
+        },
       },
 
       onActivated() {
@@ -169,7 +220,9 @@ export const useWorkspacesStore = () => {
         watch(
           () => authStore.userIsLoggedInAndInitialized,
           (loggedIn) => {
-            if (loggedIn) this.FETCH_USER_WORKSPACES();
+            if (loggedIn) {
+              this.FETCH_USER_WORKSPACES();
+            }
           },
           { immediate: true },
         );
@@ -181,6 +234,7 @@ export const useWorkspacesStore = () => {
         watch(
           () => this.selectedWorkspacePk,
           () => {
+            this.GET_INTEGRATIONS();
             realtimeStore.subscribe(
               this.$id,
               `workspace/${this.selectedWorkspacePk}`,
diff --git a/lib/dal/src/lib.rs b/lib/dal/src/lib.rs
index d206e6f703..b788cd1e62 100644
--- a/lib/dal/src/lib.rs
+++ b/lib/dal/src/lib.rs
@@ -66,6 +66,7 @@ pub mod user;
 pub mod validation;
 pub mod visibility;
 pub mod workspace;
+pub mod workspace_integrations;
 pub mod workspace_snapshot;
 pub mod ws_event;
 
diff --git a/lib/dal/src/migrations/U3410__workspace_integration.sql b/lib/dal/src/migrations/U3410__workspace_integration.sql
new file mode 100644
index 0000000000..cf32db319b
--- /dev/null
+++ b/lib/dal/src/migrations/U3410__workspace_integration.sql
@@ -0,0 +1,11 @@
+CREATE TABLE workspace_integrations
+(
+    pk                          ident primary key default ident_create_v1(),
+    slack_webhook_url           text NULL,
+    workspace_pk                ident NOT NULL
+);
+CREATE UNIQUE INDEX ON workspace_integrations (pk);
+CREATE UNIQUE INDEX ON workspace_integrations (workspace_pk);
+CREATE UNIQUE INDEX ON workspace_integrations (slack_webhook_url, workspace_pk);
+CREATE INDEX ON workspace_integrations (slack_webhook_url);
+CREATE INDEX ON workspace_integrations (workspace_pk);
diff --git a/lib/dal/src/workspace.rs b/lib/dal/src/workspace.rs
index 547280db0c..2e5af3451a 100644
--- a/lib/dal/src/workspace.rs
+++ b/lib/dal/src/workspace.rs
@@ -21,6 +21,7 @@ use crate::builtins::func::migrate_intrinsics_no_commit;
 use crate::change_set::{ChangeSet, ChangeSetError, ChangeSetId};
 use crate::feature_flags::FeatureFlag;
 use crate::layer_db_types::ContentTypes;
+use crate::workspace_integrations::{WorkspaceIntegration, WorkspaceIntegrationsError};
 use crate::workspace_snapshot::graph::WorkspaceSnapshotGraphDiscriminants;
 use crate::workspace_snapshot::WorkspaceSnapshotError;
 use crate::{
@@ -84,6 +85,8 @@ pub enum WorkspaceError {
     Transactions(#[from] TransactionsError),
     #[error(transparent)]
     User(#[from] UserError),
+    #[error("workspace integration error: {0}")]
+    WorkspaceIntegration(#[from] WorkspaceIntegrationsError),
     #[error("workspace not found: {0}")]
     WorkspaceNotFound(WorkspacePk),
     #[error("workspace snapshot error: {0}")]
@@ -367,6 +370,9 @@ impl Workspace {
         )
         .await?;
 
+        // Create an entry in the workspace integrations table by default
+        WorkspaceIntegration::new(ctx, None).await?;
+
         Ok(workspace)
     }
 
diff --git a/lib/dal/src/workspace_integrations.rs b/lib/dal/src/workspace_integrations.rs
new file mode 100644
index 0000000000..28efc97bb7
--- /dev/null
+++ b/lib/dal/src/workspace_integrations.rs
@@ -0,0 +1,126 @@
+use crate::{workspace::WorkspaceId, DalContext, TransactionsError};
+use serde::{Deserialize, Serialize};
+use si_data_pg::{PgError, PgRow};
+use thiserror::Error;
+
+#[remain::sorted]
+#[derive(Error, Debug)]
+pub enum WorkspaceIntegrationsError {
+    #[error(transparent)]
+    Pg(#[from] PgError),
+    #[error("transactions error: {0}")]
+    Transactions(#[from] TransactionsError),
+}
+
+pub type WorkspaceIntegrationsResult<T> = Result<T, WorkspaceIntegrationsError>;
+
+pub use si_id::WorkspaceIntegrationId;
+
+#[derive(Deserialize, Serialize, Debug, Clone, PartialEq, Eq)]
+pub struct WorkspaceIntegration {
+    pk: WorkspaceIntegrationId,
+    workspace_pk: WorkspaceId,
+    slack_webhook_url: Option<String>,
+}
+
+impl TryFrom<PgRow> for WorkspaceIntegration {
+    type Error = WorkspaceIntegrationsError;
+
+    fn try_from(row: PgRow) -> Result<Self, Self::Error> {
+        Ok(Self {
+            pk: row.try_get("pk")?,
+            workspace_pk: row.try_get("workspace_pk")?,
+            slack_webhook_url: row.try_get("slack_webhook_url")?,
+        })
+    }
+}
+
+impl WorkspaceIntegration {
+    pub fn pk(&self) -> &WorkspaceIntegrationId {
+        &self.pk
+    }
+
+    pub fn slack_webhook_url(&self) -> Option<String> {
+        self.slack_webhook_url.clone()
+    }
+
+    pub async fn update_webhook_url(
+        &mut self,
+        ctx: &DalContext,
+        webhook_url: String,
+    ) -> WorkspaceIntegrationsResult<()> {
+        ctx.txns()
+            .await?
+            .pg()
+            .query_none(
+                "UPDATE workspace_integrations SET slack_webhook_url = $2 WHERE pk = $1",
+                &[&self.pk, &webhook_url],
+            )
+            .await?;
+        self.slack_webhook_url = Some(webhook_url);
+
+        Ok(())
+    }
+
+    pub async fn new(
+        ctx: &DalContext,
+        webhook_url: Option<String>,
+    ) -> WorkspaceIntegrationsResult<Self> {
+        let workspace_pk = ctx.workspace_pk()?;
+
+        let row = ctx
+            .txns()
+            .await?
+            .pg()
+            .query_one(
+                "INSERT INTO workspace_integrations (workspace_pk, slack_webhook_url) VALUES ($1, $2)  RETURNING *",
+                &[&workspace_pk, &webhook_url],
+            )
+            .await?;
+
+        let workspace_integration = Self::try_from(row)?;
+
+        Ok(workspace_integration)
+    }
+
+    pub async fn get_integrations_for_workspace_pk(
+        ctx: &DalContext,
+    ) -> WorkspaceIntegrationsResult<Option<Self>> {
+        let workspace_pk = ctx.workspace_pk()?;
+
+        let maybe_row = ctx
+            .txns()
+            .await?
+            .pg()
+            .query_opt(
+                "SELECT * FROM workspace_integrations AS w WHERE workspace_pk = $1",
+                &[&workspace_pk],
+            )
+            .await?;
+        let maybe_workspace_integration = match maybe_row {
+            Some(found) => Some(Self::try_from(found)?),
+            None => None,
+        };
+        Ok(maybe_workspace_integration)
+    }
+
+    pub async fn get_by_pk(
+        ctx: &DalContext,
+        workspace_integration_id: WorkspaceIntegrationId,
+    ) -> WorkspaceIntegrationsResult<Option<Self>> {
+        let maybe_row = ctx
+            .txns()
+            .await?
+            .pg()
+            .query_opt(
+                "SELECT * FROM workspace_integrations AS w WHERE pk = $1",
+                &[&workspace_integration_id],
+            )
+            .await?;
+        let maybe_workspace_integration = match maybe_row {
+            Some(found) => Some(Self::try_from(found)?),
+            None => None,
+        };
+        Ok(maybe_workspace_integration)
+    }
+}
diff --git a/lib/sdf-server/src/service/v2.rs b/lib/sdf-server/src/service/v2.rs
index 3a6349b5c6..0d33d70ed3 100644
--- a/lib/sdf-server/src/service/v2.rs
+++ b/lib/sdf-server/src/service/v2.rs
@@ -6,6 +6,7 @@ pub mod admin;
 pub mod audit_log;
 pub mod change_set;
 pub mod func;
+pub mod integrations;
 pub mod management;
 pub mod module;
 pub mod variant;
@@ -16,6 +17,8 @@ const PREFIX: &str = "/workspaces/:workspace_id/change-sets/:change_set_id";
 // use this if you don't need to pass in the change_set id
 const CHANGE_SET_PREFIX: &str = "/workspaces/:workspace_id/change-sets";
 
+const INTEGRATIONS_PREFIX: &str = "/workspaces/:workspace_id";
+
 pub fn routes(state: AppState) -> Router<AppState> {
     Router::new()
         .nest("/admin", admin::v2_routes(state.clone()))
@@ -26,4 +29,8 @@ pub fn routes(state: AppState) -> Router<AppState> {
         .nest(&format!("{PREFIX}/schema-variants"), variant::v2_routes())
         .nest(&format!("{PREFIX}/management"), management::v2_routes())
         .nest(&format!("{PREFIX}/views"), view::v2_routes())
+        .nest(
+            &format!("{INTEGRATIONS_PREFIX}/integrations"),
+            integrations::v2_routes(),
+        )
 }
diff --git a/lib/sdf-server/src/service/v2/change_set.rs b/lib/sdf-server/src/service/v2/change_set.rs
index 0837c166ca..6a7af8b654 100644
--- a/lib/sdf-server/src/service/v2/change_set.rs
+++ b/lib/sdf-server/src/service/v2/change_set.rs
@@ -6,7 +6,12 @@ use axum::{
     routing::{get, post},
     Router,
 };
-use dal::{ChangeSetId, ChangeSetStatus, WsEventError};
+use dal::{
+    workspace_integrations::WorkspaceIntegration, ChangeSetId, ChangeSetStatus, DalContext,
+    HistoryEventError, WorkspacePk, WsEventError,
+};
+use reqwest::Client;
+use serde::Serialize;
 use si_data_spicedb::SpiceDbError;
 use thiserror::Error;
 
@@ -37,8 +42,12 @@ pub enum Error {
     DvuRootsNotEmpty(ChangeSetId),
     #[error("func error: {0}")]
     Func(#[from] dal::FuncError),
+    #[error("history event: {0}")]
+    HistoryEvent(#[from] HistoryEventError),
     #[error("permissions error: {0}")]
     Permissions(#[from] permissions::Error),
+    #[error("http error: {0}")]
+    Request(#[from] reqwest::Error),
     #[error("schema error: {0}")]
     Schema(#[from] dal::SchemaError),
     #[error("schema variant error: {0}")]
@@ -51,6 +60,10 @@ pub enum Error {
     Transactions(#[from] dal::TransactionsError),
     #[error("found an unexpected number of open change sets matching default change set (should be one, found {0:?})")]
     UnexpectedNumberOfOpenChangeSetsMatchingDefaultChangeSet(Vec<ChangeSetId>),
+    #[error("Failed to post to webhook: {0}")]
+    Webhook(String),
+    #[error("workspace integration error: {0}")]
+    WorkspaceIntegrations(#[from] dal::workspace_integrations::WorkspaceIntegrationsError),
     #[error("workspace snapshot error: {0}")]
     WorkspaceSnapshot(#[from] dal::WorkspaceSnapshotError),
     #[error("ws event error: {0}")]
@@ -76,6 +89,38 @@ pub type ChangeSetAPIError = Error;
 
 type Result<T> = result::Result<T, Error>;
 
+#[derive(Serialize)]
+struct SlackMessage<'a> {
+    text: &'a str,
+}
+
+pub async fn post_to_webhook(
+    ctx: &DalContext,
+    _workspace_id: WorkspacePk,
+    message: &str,
+) -> Result<()> {
+    if let Some(integration) = WorkspaceIntegration::get_integrations_for_workspace_pk(ctx).await? {
+        if let Some(webhook_url) = integration.slack_webhook_url() {
+            let client = Client::new();
+            let slack_message = SlackMessage { text: message };
+
+            let response = client
+                .post(webhook_url.clone())
+                .json(&slack_message)
+                .send()
+                .await?;
+
+            if response.status().is_success() {
+                return Ok(());
+            } else {
+                return Err(Error::Webhook(webhook_url));
+            }
+        }
+    }
+
+    Ok(())
+}
+
 pub fn v2_routes(state: AppState) -> Router<AppState> {
     Router::new()
         .nest(
diff --git a/lib/sdf-server/src/service/v2/change_set/apply.rs b/lib/sdf-server/src/service/v2/change_set/apply.rs
index 2205fc65f8..7b39179acf 100644
--- a/lib/sdf-server/src/service/v2/change_set/apply.rs
+++ b/lib/sdf-server/src/service/v2/change_set/apply.rs
@@ -2,7 +2,7 @@ use axum::extract::{Host, OriginalUri, Path};
 use dal::{ChangeSet, ChangeSetId, WorkspacePk};
 use si_events::audit_log::AuditLogKind;
 
-use super::{Error, Result};
+use super::{post_to_webhook, Error, Result};
 use crate::{
     extract::{AccessBuilder, HandlerContext, PosthogClient},
     track,
@@ -14,7 +14,7 @@ pub async fn apply(
     PosthogClient(posthog_client): PosthogClient,
     OriginalUri(original_uri): OriginalUri,
     Host(host_name): Host,
-    Path((_workspace_pk, change_set_id)): Path<(WorkspacePk, ChangeSetId)>,
+    Path((workspace_pk, change_set_id)): Path<(WorkspacePk, ChangeSetId)>,
 ) -> Result<()> {
     let mut ctx = builder
         .build(request_ctx.build(change_set_id.into()))
@@ -29,6 +29,12 @@ pub async fn apply(
 
     ChangeSet::apply_to_base_change_set(&mut ctx).await?;
 
+    let change_set_view = ChangeSet::find(&ctx, ctx.visibility().change_set_id)
+        .await?
+        .ok_or(Error::ChangeSetNotFound(ctx.change_set_id()))?
+        .into_frontend_type(&ctx)
+        .await?;
+
     track(
         &posthog_client,
         &ctx,
@@ -43,6 +49,16 @@ pub async fn apply(
     ctx.write_audit_log(AuditLogKind::ApplyChangeSet, change_set.name)
         .await?;
 
+    let actor = ctx.history_actor().email(&ctx).await?;
+    let change_set_url = format!("https://{}/w/{}/{}", host_name, workspace_pk, change_set_id);
+    let message = format!(
+        "{} applied change set {} to HEAD: {}",
+        actor,
+        change_set_view.name.clone(),
+        change_set_url
+    );
+    post_to_webhook(&ctx, workspace_pk, message.as_str()).await?;
+
     // WS Event fires from the dal
     ctx.commit().await?;
 
diff --git a/lib/sdf-server/src/service/v2/change_set/approve.rs b/lib/sdf-server/src/service/v2/change_set/approve.rs
index f5d61b6eac..258d9c439b 100644
--- a/lib/sdf-server/src/service/v2/change_set/approve.rs
+++ b/lib/sdf-server/src/service/v2/change_set/approve.rs
@@ -2,7 +2,7 @@ use axum::extract::{Host, OriginalUri, Path};
 use dal::{ChangeSet, ChangeSetId, WorkspacePk, WsEvent};
 use si_events::audit_log::AuditLogKind;
 
-use super::{Error, Result};
+use super::{post_to_webhook, Error, Result};
 use crate::{
     extract::{AccessBuilder, HandlerContext, PosthogClient},
     track,
@@ -14,7 +14,7 @@ pub async fn approve(
     PosthogClient(posthog_client): PosthogClient,
     OriginalUri(original_uri): OriginalUri,
     Host(host_name): Host,
-    Path((_workspace_pk, change_set_id)): Path<(WorkspacePk, ChangeSetId)>,
+    Path((workspace_pk, change_set_id)): Path<(WorkspacePk, ChangeSetId)>,
 ) -> Result<()> {
     let ctx = builder
         .build(request_ctx.build(change_set_id.into()))
@@ -64,6 +64,17 @@ pub async fn approve(
         change_set_view.name.clone(),
     )
     .await?;
+
+    let actor = ctx.history_actor().email(&ctx).await?;
+    let change_set_url = format!("https://{}/w/{}/{}", host_name, workspace_pk, change_set_id);
+    let message = format!(
+        "{} approved merge of change set {}: {}",
+        actor,
+        change_set_view.name.clone(),
+        change_set_url
+    );
+    post_to_webhook(&ctx, workspace_pk, message.as_str()).await?;
+
     WsEvent::change_set_status_changed(&ctx, old_status, change_set_view)
         .await?
         .publish_on_commit(&ctx)
diff --git a/lib/sdf-server/src/service/v2/change_set/cancel_approval_request.rs b/lib/sdf-server/src/service/v2/change_set/cancel_approval_request.rs
index be36e8298a..75295fd5cc 100644
--- a/lib/sdf-server/src/service/v2/change_set/cancel_approval_request.rs
+++ b/lib/sdf-server/src/service/v2/change_set/cancel_approval_request.rs
@@ -2,7 +2,7 @@ use axum::extract::{Host, OriginalUri, Path};
 use dal::{ChangeSet, ChangeSetId, WorkspacePk, WsEvent};
 use si_events::audit_log::AuditLogKind;
 
-use super::{Error, Result};
+use super::{post_to_webhook, Error, Result};
 use crate::{
     extract::{AccessBuilder, HandlerContext, PosthogClient},
     track,
@@ -14,7 +14,7 @@ pub async fn cancel_approval_request(
     PosthogClient(posthog_client): PosthogClient,
     OriginalUri(original_uri): OriginalUri,
     Host(host_name): Host,
-    Path((_workspace_pk, change_set_id)): Path<(WorkspacePk, ChangeSetId)>,
+    Path((workspace_pk, change_set_id)): Path<(WorkspacePk, ChangeSetId)>,
 ) -> Result<()> {
     let ctx = builder
         .build(request_ctx.build(change_set_id.into()))
@@ -50,10 +50,19 @@ pub async fn cancel_approval_request(
         change_set_view.name.clone(),
     )
     .await?;
-    WsEvent::change_set_status_changed(&ctx, old_status, change_set_view)
+    WsEvent::change_set_status_changed(&ctx, old_status, change_set_view.clone())
         .await?
         .publish_on_commit(&ctx)
         .await?;
+    let actor = ctx.history_actor().email(&ctx).await?;
+    let change_set_url = format!("https://{}/w/{}/{}", host_name, workspace_pk, change_set_id);
+    let message = format!(
+        "{} withdrew approval request of change set {}: {}",
+        actor,
+        change_set_view.name.clone(),
+        change_set_url
+    );
+    post_to_webhook(&ctx, workspace_pk, message.as_str()).await?;
 
     ctx.commit().await?;
 
diff --git a/lib/sdf-server/src/service/v2/change_set/reject.rs b/lib/sdf-server/src/service/v2/change_set/reject.rs
index 990346ee53..2a80d3d250 100644
--- a/lib/sdf-server/src/service/v2/change_set/reject.rs
+++ b/lib/sdf-server/src/service/v2/change_set/reject.rs
@@ -2,7 +2,7 @@ use axum::extract::{Host, OriginalUri, Path};
 use dal::{ChangeSet, ChangeSetId, WorkspacePk, WsEvent};
 use si_events::audit_log::AuditLogKind;
 
-use super::{Error, Result};
+use super::{post_to_webhook, Error, Result};
 use crate::{
     extract::{AccessBuilder, HandlerContext, PosthogClient},
     track,
@@ -14,7 +14,7 @@ pub async fn reject(
     PosthogClient(posthog_client): PosthogClient,
     OriginalUri(original_uri): OriginalUri,
     Host(host_name): Host,
-    Path((_workspace_pk, change_set_id)): Path<(WorkspacePk, ChangeSetId)>,
+    Path((workspace_pk, change_set_id)): Path<(WorkspacePk, ChangeSetId)>,
 ) -> Result<()> {
     let ctx = builder
         .build(request_ctx.build(change_set_id.into()))
@@ -50,6 +50,17 @@ pub async fn reject(
         change_set_view.name.clone(),
     )
     .await?;
+
+    let actor = ctx.history_actor().email(&ctx).await?;
+    let change_set_url = format!("https://{}/w/{}/{}", host_name, workspace_pk, change_set_id);
+    let message = format!(
+        "{} rejected merge of change set {}: {}",
+        actor,
+        change_set_view.name.clone(),
+        change_set_url
+    );
+    post_to_webhook(&ctx, workspace_pk, message.as_str()).await?;
+
     WsEvent::change_set_status_changed(&ctx, old_status, change_set_view)
         .await?
         .publish_on_commit(&ctx)
diff --git a/lib/sdf-server/src/service/v2/change_set/request_approval.rs b/lib/sdf-server/src/service/v2/change_set/request_approval.rs
index 60408fb8d1..1ff91d67f4 100644
--- a/lib/sdf-server/src/service/v2/change_set/request_approval.rs
+++ b/lib/sdf-server/src/service/v2/change_set/request_approval.rs
@@ -2,7 +2,7 @@ use axum::extract::{Host, OriginalUri, Path};
 use dal::{ChangeSet, ChangeSetId, WorkspacePk, WsEvent};
 use si_events::audit_log::AuditLogKind;
 
-use super::{Error, Result};
+use super::{post_to_webhook, Error, Result};
 use crate::{
     extract::{AccessBuilder, HandlerContext, PosthogClient},
     track,
@@ -14,7 +14,7 @@ pub async fn request_approval(
     PosthogClient(posthog_client): PosthogClient,
     OriginalUri(original_uri): OriginalUri,
     Host(host_name): Host,
-    Path((_workspace_pk, change_set_id)): Path<(WorkspacePk, ChangeSetId)>,
+    Path((workspace_pk, change_set_id)): Path<(WorkspacePk, ChangeSetId)>,
 ) -> Result<()> {
     let ctx = builder
         .build(request_ctx.build(change_set_id.into()))
@@ -37,13 +37,22 @@ pub async fn request_approval(
             "change_set": change_set_id,
         }),
     );
-
     let change_set_view = ChangeSet::find(&ctx, ctx.visibility().change_set_id)
         .await?
         .ok_or(Error::ChangeSetNotFound(ctx.change_set_id()))?
         .into_frontend_type(&ctx)
         .await?;
 
+    let actor = ctx.history_actor().email(&ctx).await?;
+    let change_set_url = format!("https://{}/w/{}/{}", host_name, workspace_pk, change_set_id);
+    let message = format!(
+        "{} requested an approval of change set {}: {}",
+        actor,
+        change_set_view.name.clone(),
+        change_set_url
+    );
+    post_to_webhook(&ctx, workspace_pk, message.as_str()).await?;
+
     ctx.write_audit_log(
         AuditLogKind::RequestChangeSetApproval {
             from_status: old_status.into(),
diff --git a/lib/sdf-server/src/service/v2/integrations.rs b/lib/sdf-server/src/service/v2/integrations.rs
new file mode 100644
index 0000000000..3a2c464f04
--- /dev/null
+++ b/lib/sdf-server/src/service/v2/integrations.rs
@@ -0,0 +1,42 @@
+use axum::{
+    response::{IntoResponse, Response},
+    routing::{get, post},
+    Router,
+};
+use hyper::StatusCode;
+use thiserror::Error;
+
+use crate::{service::ApiError, AppState};
+
+pub mod get_integrations;
+pub mod update_integration;
+
+#[remain::sorted]
+#[derive(Error, Debug)]
+pub enum IntegrationsError {
+    #[error("integration with id {0} not found")]
+    IntegrationNotFound(dal::workspace_integrations::WorkspaceIntegrationId),
+    #[error("transactions error: {0}")]
+    Transactions(#[from] dal::TransactionsError),
+    #[error("workspace integration error: {0}")]
+    WorkspaceIntegrations(#[from] dal::workspace_integrations::WorkspaceIntegrationsError),
+}
+
+pub type IntegrationsResult<T> = Result<T, IntegrationsError>;
+
+impl IntoResponse for IntegrationsError {
+    fn into_response(self) -> Response {
+        let (status_code, error_message) = (StatusCode::INTERNAL_SERVER_ERROR, self.to_string());
+
+        ApiError::new(status_code, error_message).into_response()
+    }
+}
+
+pub fn v2_routes() -> Router<AppState> {
+    Router::new()
+        .route(
+            "/:workspace_integration_id",
+            post(update_integration::update_integration),
+        )
+        .route("/", get(get_integrations::get_integration))
+}
diff --git a/lib/sdf-server/src/service/v2/integrations/get_integrations.rs b/lib/sdf-server/src/service/v2/integrations/get_integrations.rs
new file mode 100644
index 0000000000..661d050e38
--- /dev/null
+++ b/lib/sdf-server/src/service/v2/integrations/get_integrations.rs
@@ -0,0 +1,27 @@
+use crate::extract::{AccessBuilder, HandlerContext, PosthogClient};
+use axum::extract::{Host, OriginalUri};
+use axum::Json;
+use dal::workspace_integrations::WorkspaceIntegration;
+use serde::{Deserialize, Serialize};
+
+use super::IntegrationsResult;
+
+#[derive(Deserialize, Serialize, Debug)]
+#[serde(rename_all = "camelCase")]
+pub struct GetIntegrationResponse {
+    pub integration: Option<WorkspaceIntegration>,
+}
+
+pub async fn get_integration(
+    HandlerContext(builder): HandlerContext,
+    AccessBuilder(access_builder): AccessBuilder,
+    PosthogClient(_posthog_client): PosthogClient,
+    OriginalUri(_original_uri): OriginalUri,
+    Host(_host_name): Host,
+) -> IntegrationsResult<Json<GetIntegrationResponse>> {
+    let ctx = builder.build_head(access_builder).await?;
+
+    let integration = WorkspaceIntegration::get_integrations_for_workspace_pk(&ctx).await?;
+
+    Ok(Json(GetIntegrationResponse { integration }))
+}
diff --git a/lib/sdf-server/src/service/v2/integrations/update_integration.rs b/lib/sdf-server/src/service/v2/integrations/update_integration.rs
new file mode 100644
index 0000000000..eb98f062c4
--- /dev/null
+++ b/lib/sdf-server/src/service/v2/integrations/update_integration.rs
@@ -0,0 +1,45 @@
+use crate::extract::{AccessBuilder, HandlerContext, PosthogClient};
+use axum::extract::{Host, OriginalUri, Path};
+use axum::Json;
+use dal::workspace_integrations::{WorkspaceIntegration, WorkspaceIntegrationId};
+use dal::WorkspacePk;
+use serde::{Deserialize, Serialize};
+
+use super::{IntegrationsError, IntegrationsResult};
+
+#[derive(Deserialize, Serialize, Debug)]
+#[serde(rename_all = "camelCase")]
+pub struct UpdateIntegrationRequest {
+    slack_webhook_url: Option<String>,
+}
+
+#[derive(Deserialize, Serialize, Debug)]
+#[serde(rename_all = "camelCase")]
+pub struct UpdateIntegrationResponse {
+    pub integration: WorkspaceIntegration,
+}
+
+pub async fn update_integration(
+    HandlerContext(builder): HandlerContext,
+    AccessBuilder(access_builder): AccessBuilder,
+    PosthogClient(_posthog_client): PosthogClient,
+    OriginalUri(_original_uri): OriginalUri,
+    Host(_host_name): Host,
+    Path((_workspace_pk, workspace_integration_id)): Path<(WorkspacePk, WorkspaceIntegrationId)>,
+    Json(request): Json<UpdateIntegrationRequest>,
+) -> IntegrationsResult<Json<UpdateIntegrationResponse>> {
+    let ctx = builder.build_head(access_builder).await?;
+
+    let mut integration = WorkspaceIntegration::get_by_pk(&ctx, workspace_integration_id)
+        .await?
+        .ok_or(IntegrationsError::IntegrationNotFound(
+            workspace_integration_id,
+        ))?;
+
+    if let Some(webhook_url) = request.slack_webhook_url {
+        integration.update_webhook_url(&ctx, webhook_url).await?;
+    }
+    ctx.commit().await?;
+
+    Ok(Json(UpdateIntegrationResponse { integration }))
+}
diff --git a/lib/si-id/src/lib.rs b/lib/si-id/src/lib.rs
index 4ea72f6249..2f231eb6ff 100644
--- a/lib/si-id/src/lib.rs
+++ b/lib/si-id/src/lib.rs
@@ -64,6 +64,7 @@ id_with_pg_types!(FuncId);
 id_with_pg_types!(FuncRunId);
 id_with_pg_types!(SchemaId);
 id_with_pg_types!(UserPk);
+id_with_pg_types!(WorkspaceIntegrationId);
 
 // Please keep these alphabetically sorted!
 id_with_none!(SchemaVariantId);