feat: enhance event filtering with exclusion capability

- Added a new environment variable, FILTER_EVENTS_EXCLUDE, to specify event types that should be denied notifications.
- Updated the filtering logic to prioritize excluded events over allowed events, ensuring more precise control over notifications.
- Enhanced documentation to reflect the new exclusion feature and provide usage examples for both allowlist and denylist configurations.

Author: kWAYTV

apps/fumadocs/content/docs/installation/environment.mdx

@@ -116,16 +116,31 @@ Add the variables for at least one provider. See the [Providers](/docs/providers
 <TypeTable
   type={{
     FILTER_EVENTS: {
-      description: 'Comma-separated list of event types to allow',
+      description: 'Comma-separated allowlist of event types',
       type: 'string',
       default: 'all events',
     },
+    FILTER_EVENTS_EXCLUDE: {
+      description: 'Comma-separated denylist of event types',
+      type: 'string',
+      default: 'none',
+    },
   }}
 />
 
-Example: `FILTER_EVENTS=deployment.error,deployment.succeeded,deployment.ready`
+**Exclude noisy events:**
+```
+FILTER_EVENTS_EXCLUDE=deployment.cleanup
+```
 
-If set, only the specified events will trigger notifications. If not set, all events pass through.
+**Only allow specific events:**
+```
+FILTER_EVENTS=deployment.error,deployment.succeeded,deployment.ready
+```
+
+<Callout type="info">
+  `FILTER_EVENTS_EXCLUDE` takes priority over `FILTER_EVENTS`. An event in the exclude list is always blocked, even if it's in the allow list.
+</Callout>
 
 </Step>
 <Step>

apps/web/src/env.ts

@@ -19,6 +19,7 @@ export const env = createEnv({
     UPSTASH_REDIS_REST_TOKEN: string().optional(),
     // Filtering
     FILTER_EVENTS: string().optional(),
+    FILTER_EVENTS_EXCLUDE: string().optional(),
     FILTER_TARGETS: string().optional(),
   },
   client: {},
@@ -32,6 +33,7 @@ export const env = createEnv({
     UPSTASH_REDIS_REST_URL: process.env.UPSTASH_REDIS_REST_URL,
     UPSTASH_REDIS_REST_TOKEN: process.env.UPSTASH_REDIS_REST_TOKEN,
     FILTER_EVENTS: process.env.FILTER_EVENTS,
+    FILTER_EVENTS_EXCLUDE: process.env.FILTER_EVENTS_EXCLUDE,
     FILTER_TARGETS: process.env.FILTER_TARGETS,
   },
   extends: [vercel()],

apps/web/src/lib/filter.ts

@@ -5,16 +5,24 @@ const allowedEvents: Set<string> | null = env.FILTER_EVENTS
   ? new Set(env.FILTER_EVENTS.split(",").map((e) => e.trim()))
   : null;
 
+const excludedEvents: Set<string> | null = env.FILTER_EVENTS_EXCLUDE
+  ? new Set(env.FILTER_EVENTS_EXCLUDE.split(",").map((e) => e.trim()))
+  : null;
+
 const allowedTargets: Set<string> | null = env.FILTER_TARGETS
   ? new Set(env.FILTER_TARGETS.split(",").map((t) => t.trim().toLowerCase()))
   : null;
 
 /**
  * Check if an event type should trigger notifications.
- * If FILTER_EVENTS is not set, all events are allowed.
- * If set, only events in the comma-separated list are allowed.
+ * - FILTER_EVENTS_EXCLUDE takes priority (denylist)
+ * - FILTER_EVENTS is checked second (allowlist)
+ * - If neither is set, all events are allowed
  */
 export function isEventAllowed(type: WebhookType): boolean {
+  if (excludedEvents?.has(type)) {
+    return false;
+  }
   if (!allowedEvents) {
     return true;
   }

turbo.json

@@ -15,6 +15,7 @@
         "UPSTASH_REDIS_REST_TOKEN",
         "UPSTASH_REDIS_REST_URL",
         "FILTER_EVENTS",
+        "FILTER_EVENTS_EXCLUDE",
         "FILTER_TARGETS",
         "WEBHOOK_INTEGRATION_SECRET"
       ]