Mistral Workflows SSE Event Ingestion

Overview

Consume the current Workflows stream as an at-least-once boundary. Authenticate the outbound SSE connection, persist checkpoints/deduplication, and reconcile terminal run state after disconnects.

Prerequisites

• An approved Workflows deployment scope and server-side consumer.
• A durable checkpoint store and bounded reconnect policy.
• A reconciliation query, tenant mapping, retention policy, and synthetic fixtures.

Current Contract

The Events API documents SSE at GET /v1/workflows/events/stream. This authenticated outbound stream is not evidence of a generic Mistral-to-application webhook callback contract.

Authentication

Open SSE from a trusted service with Bearer auth. Never put the key in query strings, browser EventSource URLs, logs, checkpoints, or event records.