WhatsApp inbound message

Catalog provisioning is a separate Bull job, whatsapp-catalog-provisioning / provision-catalog, declared on the service class rather than under src/workers/processors.

Signature

Env comment: unsigned payloads are rejected when META_APP_SECRET is unset. Fail closed. Payment webhooks read Stripe or Razorpay signatures in the adapter.

Orders

This path can create an order. It is not the MarketplaceRegistry class-name discovery used for Shopify. Address resolution can also arrive later as outbox order.address.resolution_triggered.

Failure

A rejected signature never reaches the agent. Downstream order writes follow the same transaction rules as other order creates only if they call the order command and the outbox writer. That call chain was not line-traced. Do not assume every WhatsApp order emits order.created until you read the checkout service.

Details: WhatsApp integration.