Webhook Delivery
experimentalOutbound mirror of the event bus: registers external endpoints (per-endpoint signing secret), delivers HMAC-signed domain events, and logs delivery attempts.
Webhook Delivery is source-visible, contract-first code — your agent reads the whole interface before it composes, never a black box.
Every hook has typed I/O and required tests, and the composition is pinned in
microservices.lock.json — what you inspect here is exactly what
pnpm microservices check verifies and deploys.
Typed hooks
Extension points with typed input/output and required tests — customize behavior without forking the module.
- beforeWebhookDeliver
- afterWebhookDelivered
Events emitted
A stable, documented event surface other modules can subscribe to.
- webhook.delivered
- webhook.failed
- auth.token_minted
- auth.key_rotated
- customer.created
- customer.updated
- booking.created
- booking.confirmed
- booking.cancelled
- payment.checkout_created
- payment.succeeded
- payment.refunded
- payment.failed
Permissions
Scoped capabilities the module declares; the gateway enforces them at the boundary.
- webhook.read
- webhook.write
- webhook.admin
- webhook-delivery.extend
Experimental listing. Generated from the canonical module manifest via `registry build`.