suaveplan/openspec/archive/2026-04-19-enterprise-webhook-client/tasks.md

Tasks: enterprise-webhook-client

1. Scaffold

• 1.1 universal/messaging/webhook-client/; 100/100/100/100; guard tests; CLAUDE/README/FOLDERS.

2. Errors + schemas

• 2.1 src/errors/error-codes.ts — codes + register; WebhookErrorCode.
• 2.2 Zod schemas per type.

3. Verifier

• 3.1 src/verifier/verifier.ts — WebhookVerifier (HMAC-SHA256 + JWS); timing-safe compare via @suaveplan/crypto.

4. Parser

• 4.1 src/parser/parser.ts — WebhookParser (JSON + form-encoded); schema validation with Zod-provided WebhookSchema.

5. Receiver

• 5.1 src/receiver/receiver.ts — WebhookReceiver (request ingestion + listener dispatch + replay protection).

6. Hooks

• 6.1 src/hooks.ts — onWebhookDelivering, webhookHooks.

7. Docs / barrel / subpath exports / README

8. Benchmarks

• 8.1 verify.bench.ts, receive.bench.ts.

9. Ship gate

• 9.1 Verification sequence; fold + archive.