miro-webhooks-events
Design and implement a repository-side replacement for retired Miro REST webhooks using explicit freshness requirements, bounded reconciliation, or in-board Web SDK events. Use when designing Miro change detection. Trigger with "Miro webhooks".
Allowed Tools
Provided by Plugin
miro-pack
Miro operator workflows for OAuth, boards, governance, migration, and resilient synchronization (24 skills; live actions remain approval-gated)
Installation
This skill is included in the miro-pack plugin:
/plugin install miro-pack@claude-code-plugins-plus
Click to copy
Instructions
Miro Eventing Gap and Supported Alternatives
Overview
Prevent new systems from depending on Miro's discontinued experimental webhook infrastructure. Select an alternative that honestly represents durability and freshness; use the evidence produced here to make the next decision explicit and reviewable.
Prerequisites
- Event use case, consumers, and freshness/loss tolerance
- Current REST and Web SDK capability inventory
- Authorized boards, rate budget, and reconciliation state store
Tool Discipline
Use Read, Glob, and Grep to inspect the repository, configuration names, adapters, tests, and evidence. Use WebFetch only for current official Miro documentation. Use Write or Edit after confirming the requested mode, target environment, tenant, board, and approval boundary. These declared tools do not call authenticated Miro APIs or deployment CLIs; implement client, configuration, and test changes, then return exact operator commands or an approval-gated handoff for live execution.
Current Contract
- Miro discontinued experimental REST webhooks and
/v2-experimental/webhooks/board_subscriptions. - There is no current production Miro REST callback/signature contract documented as its replacement.
- Web SDK UI events such as
items:createanditems:deleterun in active board app contexts; they are not durable server-to-server delivery. experimental:items:updateremains experimental, anditems:createdoes not fire for copy-paste or duplication.
Authentication
For REST work, use OAuth 2.0 Authorization Code with the narrowest Miro scopes. Bind each encrypted token record to its user, application, authorized team, and granted scopes. Never print access tokens, refresh tokens, client secrets, authorization codes, or board content.
Instructions
- Inventory every retired subscription call, callback handler, signature assumption, queue, and downstream consumer.
- Define required freshness, completeness, replay, ordering, and active-board assumptions.
- Choose bounded REST reconciliation for durable server state or supported Web SDK UI events for active in-board behavior.
- For polling, store normalized checkpoints, traverse cursors safely, budget credits, and run periodic full reconciliation.
- For Web SDK events, register and unregister stable handlers, tolerate duplicates/misses, and label session-only semantics.
- Remove retired endpoints and secrets; test detection gaps and publish the residual freshness/loss contract.
Approval Boundaries
Do not reactivate retired endpoints, invent a signature header, market session events as durable delivery, or increase polling load without owner approval. Pause when the responsible owner or exact target is uncertain.
Output
Return retired dependency inventory, chosen alternative, freshness/loss guarantee, rate budget, checkpoint design, tests, and migration plan. State what was not inspected or changed so the receipt cannot overclaim coverage.
Error Handling
| Condition | Response |
|---|---|
| Retired endpoint is still called | Disable that path and move the consumer to reconciliation or an approved alternative. |
| Consumer requires lossless real time | Report that current documented capabilities do not satisfy it. |
| Web SDK event misses duplication | Reconcile rather than claiming completeness. |
| Polling nears credit limit | Slow the schedule, narrow reads, or renegotiate freshness. |
Examples
The example is a redacted operator receipt; identifiers are hashes or bounded labels, not board content or credentials.
retired-subscriptions=3; replacement=cursor-reconcile; interval=5m; full-scan=24h; credit-headroom=35%; lossless=no