all(); $token = trim((string) ($payload['token'] ?? '')); $signature = trim((string) ($payload['signature'] ?? '')); if (! $service->verifySubhookSignature($token, $signature)) { Log::warning('sms.subhook invalid_signature'); return response()->json(['status' => 'error'], 403); } try { $service->applySubhook($payload); } catch (\Throwable $e) { Log::error('sms.subhook apply_failed', ['error' => $e->getMessage()]); } return response()->json(['status' => 'success']); } }