QEHSQEHS

Developer portal

module.published.v1

A Composer module version was published to production.

module.published.v1v1at-least-once delivery

Fires when

When a super-admin or tenant admin publishes a Composer draft, making it the active version for all users.

Payload fields

Envelope fields are shared across all event types. Event-specific data is nested under data.

FieldTypeRequiredDescription
eventIdstring (uuid)requiredUnique per delivery attempt. Use for deduplication.
eventstringrequiredFully-qualified event name, e.g. record.created.v1.
tenantIdstring (uuid)requiredTenant that owns the affected resource.
firedAtstring (date-time)requiredISO-8601 UTC timestamp when the event was emitted.
data.moduleKeystringrequiredThe Composer module key that was published.
data.versionintegerrequiredMonotonically increasing publish version number.
data.publishedBystring (uuid)requiredUser ID who triggered the publish.
data.publishedAtstring (date-time)requiredTimestamp of the publish action.

Sample payload

{
  "eventId": "cccccccc-dddd-eeee-ffff-000000000001",
  "event": "module.published.v1",
  "tenantId": "00000000-1111-2222-3333-444444444444",
  "firedAt": "2026-04-18T13:00:00.000Z",
  "data": {
    "moduleKey": "incidents",
    "version": 14,
    "publishedBy": "99999999-8888-7777-6666-555555555555",
    "publishedAt": "2026-04-18T13:00:00.000Z"
  }
}

Verify the signature

Every delivery includes X-QEHS-Signature: sha256=<hex> and X-Job-ID headers. Verify before trusting the body. See the webhooks signature docs for a full verification example.