Webhook Retry and Dead-Letter Worker

{
  "schemaVersion": "1.0",
  "capabilityId": "00000000-0000-4000-8000-000000000005",
  "name": "Webhook Retry and Dead-Letter Worker",
  "slug": "webhook-retry-dead-letter-worker",
  "summary": "Delivers signed webhooks with idempotency, configurable backoff, observability, replay, and dead-letter handling.",
  "granularity": "module",
  "purposes": [
    "webhooks",
    "retries",
    "dead letter queue",
    "event delivery"
  ],
  "features": [
    "exponential backoff",
    "HMAC signing",
    "idempotency",
    "replay"
  ],
  "functionalDescription": "Delivers signed webhooks with idempotency, configurable backoff, observability, replay, and dead-letter handling. The versioned contract documents deterministic behavior, failure modes, configuration, and integration boundaries for production teams.",
  "inputs": [
    {
      "name": "request",
      "contentType": "application/json",
      "description": "Validated application/json request payload",
      "required": true
    }
  ],
  "outputs": [
    {
      "name": "result",
      "contentType": "application/json",
      "description": "Typed application/json response with trace metadata",
      "required": true
    }
  ],
  "runtimes": [
    {
      "language": "TypeScript",
      "runtime": "node",
      "versions": [
        "20",
        "22"
      ]
    }
  ],
  "frameworks": [
    "BullMQ",
    "AWS SDK"
  ],
  "deploymentTargets": [
    "container",
    "aws-lambda"
  ],
  "dependencies": [
    {
      "name": "zod",
      "version": ">=2",
      "optional": false
    }
  ],
  "permissions": [
    {
      "resource": "temporary-storage",
      "access": "read-write",
      "reason": "Bounded request processing"
    }
  ],
  "dataClassifications": [
    "internal"
  ],
  "complianceClaims": [
    "SBOM available",
    "Dependency scan recorded"
  ],
  "testEvidence": {
    "coveragePercent": 95,
    "tests": 257,
    "lastRun": "2026-07-20T14:00:00.000Z",
    "status": "passing"
  },
  "securityEvidence": {
    "criticalFindings": 0,
    "highFindings": 0,
    "score": 92,
    "scannedAt": "2026-07-19T09:30:00.000Z",
    "scanner": "FixtureScan 1.4"
  },
  "benchmarks": [
    {
      "name": "p95 latency",
      "value": 100,
      "unit": "ms",
      "environment": "2 vCPU / 2 GB fixture runner"
    }
  ],
  "buildBenchmark": {
    "basis": "fixture-directional",
    "sampleSize": 0,
    "referenceTask": "Reimplement the declared webhook-retry-dead-letter-worker contract in a compatible greenfield repository",
    "tokenEstimate": {
      "low": 42000,
      "high": 104000
    },
    "agentTimeMinutes": {
      "low": 34,
      "high": 94
    },
    "humanReviewHours": {
      "low": 0.5,
      "high": 2.1
    },
    "observedAt": null,
    "methodology": "Directional fixture derived from declared granularity and integration effort; no coding-agent replay was run.",
    "confidence": "low",
    "disclosure": "Prototype estimate only. It is not an empirical benchmark and must not be presented as measured savings."
  },
  "integration": {
    "estimatedHours": 2,
    "packageManager": "pnpm",
    "configurationNotes": [
      "Pin the immutable artifact digest",
      "Configure scoped service credentials"
    ]
  },
  "composition": {
    "composable": true,
    "interface": "worker",
    "compatibleWith": [
      "idempotency-key-guard",
      "exponential-backoff-policy-kit",
      "hmac-webhook-signature-verifier"
    ],
    "requires": [],
    "contractStability": "stable",
    "evidence": "fixture-declared",
    "notes": [
      "Compatibility links are declared fixture metadata and have not been independently integration-tested"
    ]
  },
  "commercialModels": [
    "licensed-artifact",
    "source-license"
  ],
  "licenseOptions": [
    {
      "id": "evaluation",
      "name": "Private evaluation",
      "scope": "evaluation",
      "priceCents": 5,
      "unit": "evaluation",
      "rights": [
        "evaluation"
      ],
      "developerSeats": null,
      "restrictions": [
        "Non-production use only",
        "Results retained for 30 days"
      ]
    },
    {
      "id": "developer",
      "name": "Developer artifact",
      "scope": "individual",
      "priceCents": 19900,
      "unit": "one-time",
      "rights": [
        "artifact-access",
        "commercial-use"
      ],
      "developerSeats": 1,
      "restrictions": [
        "No redistribution",
        "One named developer"
      ]
    },
    {
      "id": "commercial-source",
      "name": "Commercial source",
      "scope": "commercial-source",
      "priceCents": 79900,
      "unit": "one-time",
      "rights": [
        "artifact-access",
        "source-access",
        "modification",
        "commercial-use"
      ],
      "developerSeats": 10,
      "restrictions": [
        "No standalone redistribution",
        "One production application"
      ]
    }
  ],
  "artifactDigests": [
    {
      "algorithm": "sha256",
      "digest": "67f2a6850783995565e3b32371c0097479e303456a9b660266dd7735340cf9db",
      "artifactType": "source"
    }
  ],
  "provenance": {
    "builder": "FunctionFoundry demo build service",
    "sourceRevision": "fixture-webhook-retry-dead-letter-worker-v1",
    "builtAt": "2026-07-18T12:00:00.000Z",
    "signed": true
  },
  "maintenanceStatus": "active",
  "version": "1.5.0",
  "seller": {
    "name": "Reliable Systems",
    "verified": true,
    "reputation": 4.8
  },
  "verificationBadges": [
    "Contract verified"
  ]
}