Webhooks

curl -X POST https://api.getsly.ai/v1/webhooks \
  -H "Authorization: Bearer pk_live_..." \
  -H "Content-Type: application/json" \
  -d '{
    "url": "https://hooks.example.com/sly",
    "events": ["transfer.completed", "transfer.failed", "approval.requested"],
    "description": "Production payments worker"
  }'

{
  "id": "wh_...",
  "url": "https://hooks.example.com/sly",
  "events": ["transfer.completed", "transfer.failed", "approval.requested"],
  "secret": "whsec_...",
  "status": "active",
  "created_at": "2026-04-22T14:00:00Z"
}

{
  "id": "evt_abc123",
  "type": "transfer.completed",
  "created_at": "2026-04-22T14:05:00Z",
  "data": {
    "transfer": { "id": "tx_...", "amount": "42.00", "status": "completed", ... }
  },
  "tenant_id": "ten_...",
  "environment": "live"
}

app.post('/webhooks/sly', (req, res) => {
  // Verify signature
  // Enqueue job
  res.status(202).end();  // ack
});

1 min → 5 min → 15 min → 1 hour → 24 hours (final)

pending ─▶ processing ─▶ delivered
   │             │
   │             └─▶ failed ─(retry)─▶ processing ─▶ delivered
   │                                                      │
   │                  (5 attempts exhausted) ─────────────┘
   │                            │
   └──────────────────────────▶ dlq (dead-letter)

if (await processedEvents.has(eventId)) return;
await processedEvents.add(eventId);
await handleEvent(event);