Effect Webhook Dispatcher
Signed, retried, dead-lettered webhook delivery: every payload is signed HMAC-SHA256 over timestamp.body, delivery retries on Schedule.jittered exponential backoff with a per-attempt timeout, and an endpoint that stays down moves the event to a dead-letter queue with its attempt history instead of dropping it. The consumer-side verify uses a constant-time comparison and rejects timestamps outside a tolerance window, so a tampered body and a captured-and-replayed request both fail. Solves the silently dropped event and the forged webhook hitting an endpoint that trusts any JSON. Pinned to effect 4.0.0-beta.98.
npx shadcn@latest add https://ui.aryank.space/r/effect-webhook-dispatcher.jsonInstalls from ui.aryank.space. To add it by hand, copy the files in Files below, or register the @compronents namespace via the docs.
The partner's endpoint is mid-deploy and answers 503 for forty seconds. One attempt, one 503, and the invoice.paid event is gone: their outage became your data loss, and nobody on either side has a record to replay.