Effect Webhook Dispatcher
Signed, retried, dead-lettered webhook delivery: every payload is signed HMAC-SHA256 over timestamp.body, delivery retries on Schedule.jittered exponential backoff with a per-attempt timeout, and an endpoint that stays down moves the event to a dead-letter queue with its attempt history instead of dropping it. The consumer-side verify uses a constant-time comparison and rejects timestamps outside a tolerance window, so a tampered body and a captured-and-replayed request both fail. Solves the silently dropped event and the forged webhook hitting an endpoint that trusts any JSON. Pinned to effect 4.0.0-beta.98.
npx shadcn@latest add @compronents/effect-webhook-dispatcherInstalls from ui.aryank.space. Needs a registry token and a one-time @compronents entry in components.json. The docs walk through both.
The partner's endpoint is mid-deploy and answers 503 for forty seconds. One attempt, one 503, and the invoice.paid event is gone: their outage became your data loss, and nobody on either side has a record to replay.