Webhook Delivery

experimental

Outbound mirror of the event bus: registers external endpoints (per-endpoint signing secret), delivers HMAC-signed domain events, and logs delivery attempts.

Webhook Delivery is source-visible, contract-first code — your agent reads the whole interface before it composes, never a black box.

Every hook has typed I/O and required tests, and the composition is pinned in microservices.lock.json — what you inspect here is exactly what pnpm microservices check verifies and deploys.

Typed hooks

Extension points with typed input/output and required tests — customize behavior without forking the module.

  • beforeWebhookDeliver
  • afterWebhookDelivered

Events emitted

A stable, documented event surface other modules can subscribe to.

  • webhook.delivered
  • webhook.failed
  • auth.token_minted
  • auth.key_rotated
  • customer.created
  • customer.updated
  • booking.created
  • booking.confirmed
  • booking.cancelled
  • payment.checkout_created
  • payment.succeeded
  • payment.refunded
  • payment.failed

Permissions

Scoped capabilities the module declares; the gateway enforces them at the boundary.

  • webhook.read
  • webhook.write
  • webhook.admin
  • webhook-delivery.extend

Experimental listing. Generated from the canonical module manifest via `registry build`.