recovery.* events

Automatic failover swapped a banned channel or group for its standby without the creator: the failover you sleep through.

When this fires

A probe finds a channel gone or the bot removed from it, the project has Automatic Failover switched on, a healthy standby is linked, and the allowance permits: the platform points the resource at its standby, revokes the old links and queues every active member's re-admission, all without the creator. This event fires the moment the resource points at the standby; it sits under a recovery whose recovery.operation_started carries automatic: true.

Members the bot cannot reach. A failover emails the members the bot can no longer message, at a per-email fee the creator accepted when switching failover on. The roll call's emailed counter says how many.

Caveats

  • The standby that was consumed fires recovery.standby_removed with reason: used beside this event.
  • project.resource.updated also fires for the same resource with changes.space_id, as it does for any swap.

Related events

  • recovery.resource_replaced: the same swap made by the creator.
  • recovery.operation_reverted: the creator put the old chat back.
postWebhookrecovery.resource_failed_over

Headers

SB-Signaturestring required

t=<unix seconds>,v1=<hex>: the HMAC-SHA256 of "<t>.<raw body>" under the endpoint's secret. Verify it before acting, and refuse a t more than 300 seconds from now. During a secret rotation a v0= signature under the previous secret may precede v1=.

SB-Event-Idstring required

The event's ULID, bare. The envelope's id is the same ULID prefixed evt_, so strip the prefix before comparing. Deduplicate on it: a retry carries the same id.

SB-Event-Namestring required

The event name, the same as the envelope's type.

Content-Typestring required

Always application/json.

User-Agentstring required

Always Subscriby-Webhooks/1.0.

Payload

idstring required

A ULID unique to the event, prefixed evt_. Every retry carries the same id, so it is the key to deduplicate on.

type'recovery.resource_failed_over' required

The event name, always recovery.resource_failed_over here.

created_atstring date-time required

When the event was emitted, server time, ISO 8601.

api_versionstring required

The contract version of the payload shape, 2026-05-01 today. A breaking change to a shape ships under a new version.

project_idstring uuid nullable required

The project the event belongs to; null for team-scoped and billing events.

Response

Your endpoint acknowledged the delivery. Any 2xx status within 30 seconds marks it delivered; the response body is ignored.

Changes

Webhooks have no change history: a webhook is keyed by its event name rather than a path and method, so no recorded change can name it.