@volter/twin-stripe 2.0.38 → 3.0.1

package/journeys/demand.json

@@ -0,0 +1,706 @@
+{
+  "measured": "Applications are read at the scanned commits below. Demand includes SDK methods, delegated Stripe.js calls, raw URLs and API-path strings, and shipped guides that use a shipped feature. Credentials authorize a feature; they do not opt into it. Postiz ships Stripe as its web billing provider. Twenty workflow HTTP actions and enterprise website billing are independent of the server billing flag (which defaults false). Cal payment/OAuth needs an app-store install; its metadata installed flag makes the catalog entry available, while the user install requires a credential created by the install callback. All products in generated/DEMAND.md’s Volter column were searched, including their own World scenarios and seeds; none calls a removed operation. The launch does not name Stripe. Separately invoked Rallly billing CLI and Dub maintenance scripts are outside the running products. Dub’s raw GET /v1/mandates, POST /v1/fx_quotes and v2 calls remain outside the pinned v1 document and answer the vendor gap; their demand is retained, not classified optional.",
+  "applications": [
+    {
+      "name": "Open Autonomy",
+      "commit": "0841076bed91",
+      "client": "fetch (form-encoded REST, packages/backend/src/stripe.ts)",
+      "backend": [
+        {
+          "call": "stripe(env, 'POST', '/v1/issuing/cardholders')",
+          "operation": "PostIssuingCardholders",
+          "evidence": "packages/backend/src/rails.ts:35"
+        },
+        {
+          "call": "stripe(env, 'POST', '/v1/issuing/cards')",
+          "operation": "PostIssuingCards",
+          "evidence": "packages/backend/src/rails.ts:40"
+        },
+        {
+          "call": "stripe(env, 'GET', '/v1/issuing/cards/{card}', expand number, cvc)",
+          "operation": "GetIssuingCardsCard",
+          "evidence": "packages/backend/src/rails.ts:48"
+        },
+        {
+          "call": "stripe(env, 'POST', '/v1/issuing/cards/{card}', status canceled)",
+          "operation": "PostIssuingCardsCard",
+          "evidence": "packages/backend/src/rails.ts:99; packages/backend/src/rails.ts:107; packages/backend/src/rails.ts:118"
+        },
+        {
+          "call": "stripe(env, 'POST', '/v1/issuing/authorizations/{id}/approve' | '/decline')",
+          "operation": "PostIssuingAuthorizationsAuthorizationApprove; PostIssuingAuthorizationsAuthorizationDecline",
+          "evidence": "packages/backend/src/rails.ts:109"
+        },
+        {
+          "call": "fetch POST /v1/webhook_endpoints: the World's platform enrols its webhook endpoint for the card rail's three events",
+          "operation": "PostWebhookEndpoints",
+          "evidence": "apps/platform/world.ts:46"
+        },
+        {
+          "call": "curl -sf POST /v1/test_helpers/issuing/authorizations, merchant Namecheap, amount 200",
+          "operation": "PostTestHelpersIssuingAuthorizations",
+          "evidence": "world/model/scenario.ts:60"
+        },
+        {
+          "call": "curl -sf POST /v1/test_helpers/issuing/authorizations/{authorization}/capture",
+          "operation": "PostTestHelpersIssuingAuthorizationsAuthorizationCapture",
+          "evidence": "world/model/scenario.ts:62"
+        }
+      ],
+      "webhooks": [
+        {
+          "call": "POST /webhooks/stripe, verified by verifyStripeSignature (Stripe-Signature, t=,v1=, five minutes); a real-time issuing_authorization.request is answered {approved}",
+          "events": [
+            "issuing_authorization.request",
+            "issuing_authorization.created",
+            "issuing_transaction.created"
+          ],
+          "evidence": "packages/backend/src/rails.ts:77; packages/backend/src/rails.ts:88; packages/backend/src/rails.ts:113; packages/backend/src/stripe.ts:31"
+        }
+      ]
+    },
+    {
+      "name": "Twin",
+      "commit": "96ca4478bb39",
+      "client": "fetch (the platform's sample World seeder)",
+      "backend": [
+        {
+          "call": "call('stripe', '/v1/customers?email=…')",
+          "operation": "GetCustomers",
+          "evidence": "apps/platform/src/sample.ts:40"
+        },
+        {
+          "call": "call('stripe', '/v1/customers', form)",
+          "operation": "PostCustomers",
+          "evidence": "apps/platform/src/sample.ts:43"
+        },
+        {
+          "call": "call('stripe', '/v1/products', form)",
+          "operation": "PostProducts",
+          "evidence": "apps/platform/src/sample.ts:44"
+        },
+        {
+          "call": "call('stripe', '/v1/prices', form)",
+          "operation": "PostPrices",
+          "evidence": "apps/platform/src/sample.ts:45"
+        },
+        {
+          "call": "call('stripe', '/v1/payment_intents', confirm=true, payment_method=pm_card_visa)",
+          "operation": "PostPaymentIntents",
+          "evidence": "apps/platform/src/sample.ts:47"
+        }
+      ]
+    },
+    {
+      "name": "Volter Harness",
+      "commit": "62620578c014",
+      "client": "urllib (Python), container/retake/stack/app/src/app.py",
+      "backend": [
+        {
+          "call": "stripe('/v1/subscriptions', {'limit': 100, 'status': 'all'})",
+          "operation": "GetSubscriptions",
+          "evidence": "container/retake/stack/app/src/app.py:115"
+        },
+        {
+          "call": "stripe('/v1/customers', {'limit': 100})",
+          "operation": "GetCustomers",
+          "evidence": "container/retake/stack/app/src/app.py:116"
+        }
+      ]
+    },
+    {
+      "name": "dubinc/dub",
+      "commit": "7e0101363b2a",
+      "client": "stripe-node",
+      "backend": [
+        {
+          "call": "stripe.apps.secrets.create",
+          "operation": "PostAppsSecrets",
+          "evidence": "packages/stripe-app/src/utils/secrets.ts:20"
+        },
+        {
+          "call": "stripe.apps.secrets.find",
+          "operation": "GetAppsSecretsFind",
+          "evidence": "packages/stripe-app/src/utils/secrets.ts:36"
+        },
+        {
+          "call": "stripe.apps.secrets.deleteWhere",
+          "operation": "PostAppsSecretsDelete",
+          "evidence": "packages/stripe-app/src/utils/secrets.ts:60"
+        },
+        {
+          "call": "stripe.customers.retrieve",
+          "operation": "GetCustomersCustomer",
+          "evidence": "apps/web/app/(ee)/app.dub.co/invoices/[invoiceId]/domain-renewal-invoice.tsx:48; apps/web/app/(ee)/app.dub.co/invoices/[invoiceId]/partner-payout-invoice.tsx:78; apps/web/app/(ee)/api/admin/ban/delete-workspace-admin.ts:78; apps/web/app/(ee)/api/stripe/webhook/utils/detect-and-handle-fraudulent-failed-charge.ts:37; apps/web/app/api/workspaces/[idOrSlug]/billing/payment-methods/route.ts:66; apps/web/lib/tapfiliate/update-stripe-customers.ts:179; apps/web/app/(ee)/api/stripe/integration/webhook/utils/get-connected-customer.ts:20"
+        },
+        {
+          "call": "stripe.customers.search",
+          "operation": "GetCustomersSearch",
+          "evidence": "apps/web/app/(ee)/api/customers/search-stripe/route.ts:53; apps/web/lib/tapfiliate/update-stripe-customers.ts:133; apps/web/lib/tolt/update-stripe-customers.ts:121; apps/web/lib/partnerstack/update-stripe-customers.ts:160; apps/web/lib/firstpromoter/update-stripe-customers.ts:119"
+        },
+        {
+          "call": "stripe.transfers.list",
+          "operation": "GetTransfers",
+          "evidence": "apps/web/app/(ee)/api/admin/partners/delete-account/route.ts:50; apps/web/app/(ee)/api/cron/payouts/balance-available/route.ts:151"
+        },
+        {
+          "call": "stripe.accounts.del",
+          "operation": "DeleteAccountsAccount",
+          "evidence": "apps/web/app/(ee)/api/admin/partners/delete-account/route.ts:64"
+        },
+        {
+          "call": "stripe.balance.retrieve",
+          "operation": "GetBalance",
+          "evidence": "apps/web/app/(ee)/api/cron/trigger-withdrawal/route.ts:14; apps/web/app/(ee)/api/cron/payouts/balance-available/route.ts:50; apps/web/lib/stripe/fund-financial-account.ts:25"
+        },
+        {
+          "call": "stripe.payouts.create",
+          "operation": "PostPayouts",
+          "evidence": "apps/web/app/(ee)/api/cron/trigger-withdrawal/route.ts:59; apps/web/app/(ee)/api/cron/payouts/balance-available/route.ts:134"
+        },
+        {
+          "call": "stripe.balanceTransactions.list",
+          "operation": "GetBalanceTransactions",
+          "evidence": "apps/web/app/(ee)/api/cron/payouts/charge-succeeded/utils.ts:78"
+        },
+        {
+          "call": "stripe.paymentMethods.retrieve",
+          "operation": "GetPaymentMethodsPaymentMethod",
+          "evidence": "apps/web/app/(ee)/api/cron/payouts/process/process-payouts.ts:138; apps/web/app/api/workspaces/[idOrSlug]/billing/payment-methods/route.ts:39; apps/web/lib/actions/partners/confirm-payouts.ts:156"
+        },
+        {
+          "call": "stripe.paymentIntents.create",
+          "operation": "PostPaymentIntents",
+          "evidence": "apps/web/app/(ee)/api/cron/payouts/process/process-payouts.ts:221; apps/web/lib/stripe/create-payment-intent.ts:44"
+        },
+        {
+          "call": "stripe.subscriptions.retrieve",
+          "operation": "GetSubscriptionsSubscriptionExposedId",
+          "evidence": "apps/web/app/(ee)/api/stripe/webhook/checkout-session-completed.ts:50"
+        },
+        {
+          "call": "stripe.subscriptions.list",
+          "operation": "GetSubscriptions",
+          "evidence": "apps/web/app/(ee)/api/stripe/webhook/customer-subscription-deleted.ts:77; apps/web/app/(ee)/api/stripe/webhook/customer-subscription-deleted.ts:81; apps/web/app/api/workspaces/[idOrSlug]/billing/activate-paid-plan/route.ts:13; apps/web/app/api/workspaces/[idOrSlug]/billing/activate-paid-plan/route.ts:28; apps/web/app/api/workspaces/[idOrSlug]/billing/cancel/route.ts:29"
+        },
+        {
+          "call": "stripe.invoices.retrieve",
+          "operation": "GetInvoicesInvoice",
+          "evidence": "apps/web/app/(ee)/api/stripe/webhook/customer-subscription-deleted.ts:281; apps/web/app/(ee)/api/stripe/integration/webhook/invoice-paid.ts:476; apps/web/app/api/workspaces/[idOrSlug]/billing/retry-payment/route.ts:28"
+        },
+        {
+          "call": "stripe.invoices.voidInvoice",
+          "operation": "PostInvoicesInvoiceVoid",
+          "evidence": "apps/web/app/(ee)/api/stripe/webhook/customer-subscription-deleted.ts:287"
+        },
+        {
+          "call": "stripe.charges.retrieve",
+          "operation": "GetChargesCharge",
+          "evidence": "apps/web/app/(ee)/api/stripe/webhook/charge-dispute-created.ts:16"
+        },
+        {
+          "call": "stripe.radar.valueListItems.create",
+          "operation": "PostRadarValueListItems",
+          "evidence": "apps/web/app/(ee)/api/stripe/webhook/utils/add-to-stripe-fraud-value-lists.ts:20; apps/web/app/(ee)/api/stripe/webhook/utils/add-to-stripe-fraud-value-lists.ts:25; apps/web/app/(ee)/api/stripe/webhook/utils/add-to-stripe-fraud-value-lists.ts:31"
+        },
+        {
+          "call": "stripe.invoicePayments.list",
+          "operation": "GetInvoicePayments",
+          "evidence": "apps/web/app/(ee)/api/stripe/integration/webhook/charge-refunded.ts:22"
+        },
+        {
+          "call": "stripe.checkout.sessions.listLineItems",
+          "operation": "GetCheckoutSessionsSessionLineItems",
+          "evidence": "apps/web/app/(ee)/api/stripe/integration/webhook/utils/get-checkout-session-products.ts:47"
+        },
+        {
+          "call": "stripe.invoices.list",
+          "operation": "GetInvoices",
+          "evidence": "apps/web/app/api/workspaces/[idOrSlug]/billing/invoices/route.ts:48; apps/web/lib/api/customers/get-customer-stripe-invoices.ts:65"
+        },
+        {
+          "call": "stripe.paymentMethods.list",
+          "operation": "GetPaymentMethods",
+          "evidence": "apps/web/app/api/workspaces/[idOrSlug]/billing/payment-methods/route.ts:63; apps/web/lib/stripe/create-payment-intent.ts:20; apps/web/lib/stripe/create-payment-intent.ts:25"
+        },
+        {
+          "call": "stripe.billingPortal.sessions.create",
+          "operation": "PostBillingPortalSessions",
+          "evidence": "apps/web/app/api/workspaces/[idOrSlug]/billing/payment-methods/route.ts:127; apps/web/app/api/workspaces/[idOrSlug]/billing/manage/route.ts:23; apps/web/app/api/workspaces/[idOrSlug]/billing/upgrade/route.ts:104"
+        },
+        {
+          "call": "stripe.checkout.sessions.create",
+          "operation": "PostCheckoutSessions",
+          "evidence": "apps/web/app/api/workspaces/[idOrSlug]/billing/payment-methods/route.ts:153; apps/web/app/api/workspaces/[idOrSlug]/billing/upgrade/route.ts:141"
+        },
+        {
+          "call": "stripe.customers.update",
+          "operation": "PostCustomersCustomer",
+          "evidence": "apps/web/app/api/workspaces/[idOrSlug]/billing/payment-methods/route.ts:201"
+        },
+        {
+          "call": "stripe.paymentMethods.detach",
+          "operation": "PostPaymentMethodsPaymentMethodDetach",
+          "evidence": "apps/web/app/api/workspaces/[idOrSlug]/billing/payment-methods/route.ts:233; apps/web/lib/actions/partners/confirm-payouts.ts:182"
+        },
+        {
+          "call": "stripe.prices.list",
+          "operation": "GetPrices",
+          "evidence": "apps/web/app/api/workspaces/[idOrSlug]/billing/upgrade/route.ts:37"
+        },
+        {
+          "call": "stripe.subscriptions.update",
+          "operation": "PostSubscriptionsSubscriptionExposedId",
+          "evidence": "apps/web/app/api/workspaces/[idOrSlug]/billing/upgrade/route.ts:69; apps/web/app/api/workspaces/[idOrSlug]/billing/activate-paid-plan/route.ts:21; apps/web/app/(ee)/api/stripe/webhook/customer-subscription-created.ts:14; apps/web/app/api/workspaces/[idOrSlug]/billing/cancel/route.ts:48; apps/web/app/api/workspaces/[idOrSlug]/billing/cancel/route.ts:56; apps/web/lib/stripe/cancel-subscription.ts:23"
+        },
+        {
+          "call": "stripe.invoices.pay",
+          "operation": "PostInvoicesInvoicePay",
+          "evidence": "apps/web/app/api/workspaces/[idOrSlug]/billing/retry-payment/route.ts:44"
+        },
+        {
+          "call": "stripe.coupons.retrieve",
+          "operation": "GetCouponsCoupon",
+          "evidence": "apps/web/lib/rewardful/import-campaigns.ts:184; apps/web/lib/discounts/discount-provider-stripe.ts:87"
+        },
+        {
+          "call": "stripe.accounts.listExternalAccounts",
+          "operation": "GetAccountsAccountExternalAccounts",
+          "evidence": "apps/web/lib/partners/get-partner-bank-account.ts:25"
+        },
+        {
+          "call": "stripe.accounts.retrieve",
+          "operation": "GetAccountsAccount",
+          "evidence": "apps/web/lib/actions/partners/generate-stripe-account-link.ts:66; apps/web/lib/partners/create-stripe-transfer.ts:160; apps/web/lib/payouts/recompute-partner-payout-state.ts:32"
+        },
+        {
+          "call": "stripe.accounts.createLoginLink",
+          "operation": "PostAccountsAccountLoginLinks",
+          "evidence": "apps/web/lib/actions/partners/generate-stripe-account-link.ts:70"
+        },
+        {
+          "call": "stripe.accountLinks.create",
+          "operation": "PostAccountLinks",
+          "evidence": "apps/web/lib/actions/partners/generate-stripe-account-link.ts:71"
+        },
+        {
+          "call": "stripe.coupons.create",
+          "operation": "PostCoupons",
+          "evidence": "apps/web/lib/discounts/discount-provider-stripe.ts:136"
+        },
+        {
+          "call": "stripe.promotionCodes.create",
+          "operation": "PostPromotionCodes",
+          "evidence": "apps/web/lib/discounts/discount-provider-stripe.ts:184"
+        },
+        {
+          "call": "stripe.promotionCodes.list",
+          "operation": "GetPromotionCodes",
+          "evidence": "apps/web/lib/discounts/discount-provider-stripe.ts:275"
+        },
+        {
+          "call": "stripe.promotionCodes.update",
+          "operation": "PostPromotionCodesPromotionCode",
+          "evidence": "apps/web/lib/discounts/discount-provider-stripe.ts:294"
+        },
+        {
+          "call": "stripe.charges.list",
+          "operation": "GetCharges",
+          "evidence": "apps/web/lib/api/customers/get-customer-stripe-invoices.ts:97"
+        },
+        {
+          "call": "stripe.transfers.create",
+          "operation": "PostTransfers",
+          "evidence": "apps/web/lib/partners/create-stripe-transfer.ts:203"
+        },
+        {
+          "call": "stripe.subscriptions.cancel",
+          "operation": "DeleteSubscriptionsSubscriptionExposedId",
+          "evidence": "apps/web/lib/stripe/cancel-subscription.ts:20"
+        },
+        {
+          "call": "stripe.setupIntents.list",
+          "operation": "GetSetupIntents",
+          "evidence": "apps/web/lib/stripe/microdeposits.ts:94"
+        },
+        {
+          "call": "stripe.paymentIntents.list",
+          "operation": "GetPaymentIntents",
+          "evidence": "apps/web/lib/stripe/microdeposits.ts:99"
+        },
+        {
+          "call": "stripe.accounts.create",
+          "operation": "PostAccounts",
+          "evidence": "apps/web/lib/stripe/create-connected-account.ts:13"
+        },
+        {
+          "call": "stripe.promotionCodes.retrieve",
+          "operation": "GetPromotionCodesPromotionCode",
+          "evidence": "apps/web/app/(ee)/api/stripe/integration/webhook/utils/get-promotion-code.ts:18"
+        }
+      ],
+      "webhooks": [
+        {
+          "call": "app/(ee)/api/stripe/webhook (Dub's own billing), stripe.webhooks.constructEvent",
+          "events": [
+            "charge.succeeded",
+            "charge.failed",
+            "charge.refunded",
+            "charge.dispute.created",
+            "checkout.session.completed",
+            "customer.subscription.created",
+            "customer.subscription.updated",
+            "customer.subscription.deleted",
+            "invoice.payment_failed",
+            "payment_intent.requires_action",
+            "transfer.reversed"
+          ],
+          "evidence": "apps/web/app/(ee)/api/stripe/webhook/route.ts:18; apps/web/app/(ee)/api/stripe/webhook/route.ts:42"
+        },
+        {
+          "call": "app/(ee)/api/stripe/integration/webhook (a workspace's connected Stripe account), stripe.webhooks.constructEvent",
+          "events": [
+            "account.application.deauthorized",
+            "charge.refunded",
+            "checkout.session.completed",
+            "coupon.deleted",
+            "customer.created",
+            "customer.updated",
+            "customer.subscription.created",
+            "customer.subscription.deleted",
+            "invoice.paid",
+            "promotion_code.updated"
+          ],
+          "evidence": "apps/web/app/(ee)/api/stripe/integration/webhook/route.ts:22; apps/web/app/(ee)/api/stripe/integration/webhook/route.ts:65"
+        },
+        {
+          "call": "app/(ee)/api/stripe/connect/webhook (partners' connected accounts), stripe.webhooks.constructEvent",
+          "events": [
+            "account.application.deauthorized",
+            "account.external_account.updated",
+            "account.updated",
+            "balance.available",
+            "payout.paid",
+            "payout.failed"
+          ],
+          "evidence": "apps/web/app/(ee)/api/stripe/connect/webhook/route.ts:12; apps/web/app/(ee)/api/stripe/connect/webhook/route.ts:47"
+        }
+      ],
+      "frontend": [
+        {
+          "call": "Stripe.js redirectToCheckout for a plan upgrade",
+          "operation": "checkout.stripe.com (the Checkout page)",
+          "evidence": "apps/web/ui/workspaces/upgrade-plan-button.tsx:122"
+        }
+      ],
+      "gate": "Paid billing and payouts use Stripe directly in shipped routes; the secret authenticates them (apps/web/lib/stripe/index.ts:4; apps/web/app/api/workspaces/[idOrSlug]/billing/activate-paid-plan/route.ts:13)."
+    },
+    {
+      "name": "lukevella/rallly",
+      "commit": "3e63239dbdec",
+      "client": "stripe-node",
+      "backend": [
+        {
+          "call": "stripe.prices.list",
+          "operation": "GetPrices",
+          "evidence": "packages/billing/src/lib/stripe.ts:103; apps/web/src/features/licensing/mutations.ts:218"
+        },
+        {
+          "call": "stripe.checkout.sessions.retrieve",
+          "operation": "GetCheckoutSessionsSession",
+          "evidence": "apps/web/src/app/api/stripe/portal/route.ts:34"
+        },
+        {
+          "call": "stripe.checkout.sessions.create",
+          "operation": "PostCheckoutSessions",
+          "evidence": "apps/web/src/features/licensing/mutations.ts:242; apps/web/src/features/billing/actions.ts:116"
+        },
+        {
+          "call": "stripe.customers.create",
+          "operation": "PostCustomers",
+          "evidence": "apps/web/src/features/billing/actions.ts:92"
+        },
+        {
+          "call": "stripe.coupons.retrieve",
+          "operation": "GetCouponsCoupon",
+          "evidence": "apps/web/src/features/billing/nonprofit/mutations.ts:24"
+        },
+        {
+          "call": "stripe.coupons.create",
+          "operation": "PostCoupons",
+          "evidence": "apps/web/src/features/billing/nonprofit/mutations.ts:28"
+        },
+        {
+          "call": "stripe.billingPortal.sessions.create",
+          "operation": "PostBillingPortalSessions",
+          "evidence": "apps/web/src/features/billing/mutations.ts:22; apps/web/src/features/billing/mutations.ts:216; apps/web/src/features/billing/mutations.ts:248; apps/web/src/features/billing/mutations.ts:273; apps/web/src/features/billing/mutations.ts:286"
+        },
+        {
+          "call": "stripe.billingPortal.configurations.list",
+          "operation": "GetBillingPortalConfigurations",
+          "evidence": "apps/web/src/features/billing/mutations.ts:35"
+        },
+        {
+          "call": "stripe.prices.retrieve",
+          "operation": "GetPricesPrice",
+          "evidence": "apps/web/src/features/billing/mutations.ts:58"
+        },
+        {
+          "call": "stripe.billingPortal.configurations.create",
+          "operation": "PostBillingPortalConfigurations",
+          "evidence": "apps/web/src/features/billing/mutations.ts:66; apps/web/src/features/billing/mutations.ts:103"
+        },
+        {
+          "call": "stripe.subscriptions.update",
+          "operation": "PostSubscriptionsSubscriptionExposedId",
+          "evidence": "apps/web/src/features/billing/mutations.ts:309; apps/web/src/features/billing/mutations.ts:346"
+        },
+        {
+          "call": "stripe.subscriptions.cancel",
+          "operation": "DeleteSubscriptionsSubscriptionExposedId",
+          "evidence": "apps/web/src/features/billing/mutations.ts:396"
+        },
+        {
+          "call": "stripe.customers.del",
+          "operation": "DeleteCustomersCustomer",
+          "evidence": "apps/web/src/features/billing/mutations.ts:415"
+        },
+        {
+          "call": "stripe.subscriptions.retrieve",
+          "operation": "GetSubscriptionsSubscriptionExposedId",
+          "evidence": "apps/web/src/features/billing/webhook/mutations.ts:28; apps/web/src/features/billing/webhook/mutations.ts:357"
+        },
+        {
+          "call": "stripe.invoices.list",
+          "operation": "GetInvoices",
+          "evidence": "apps/web/src/features/billing/webhook/mutations.ts:362"
+        },
+        {
+          "call": "stripe.invoices.voidInvoice",
+          "operation": "PostInvoicesInvoiceVoid",
+          "evidence": "apps/web/src/features/billing/webhook/mutations.ts:368"
+        },
+        {
+          "call": "stripe.customers.update",
+          "operation": "PostCustomersCustomer",
+          "evidence": "apps/web/src/lib/auth.ts:500"
+        }
+      ],
+      "webhooks": [
+        {
+          "call": "app/api/stripe/webhook, stripe.webhooks.constructEvent",
+          "events": [
+            "checkout.session.completed",
+            "checkout.session.expired",
+            "customer.created",
+            "customer.deleted",
+            "customer.subscription.created",
+            "customer.subscription.deleted",
+            "customer.subscription.updated",
+            "payment_method.attached",
+            "payment_method.detached",
+            "payment_method.automatically_updated",
+            "payment_method.updated"
+          ],
+          "evidence": "apps/web/src/app/api/stripe/webhook/route.ts:33; apps/web/src/features/billing/webhook/mutations.ts:593"
+        }
+      ],
+      "gate": "Billing defaults on because NEXT_PUBLIC_SELF_HOSTED=false; it is Stripe as shipped (apps/web/.env.sample:43-45; apps/web/src/features/billing/constants.ts:4; apps/web/src/features/billing/service.ts:16-22)."
+    },
+    {
+      "name": "gitroomhq/postiz-app",
+      "commit": "e0a08a7d9592",
+      "client": "stripe-node",
+      "backend": [
+        {
+          "call": "stripe.paymentMethods.list",
+          "operation": "GetPaymentMethods",
+          "evidence": "libraries/nestjs-libraries/src/services/stripe.service.ts:96"
+        },
+        {
+          "call": "stripe.paymentIntents.create",
+          "operation": "PostPaymentIntents",
+          "evidence": "libraries/nestjs-libraries/src/services/stripe.service.ts:116"
+        },
+        {
+          "call": "stripe.paymentMethods.detach",
+          "operation": "PostPaymentMethodsPaymentMethodDetach",
+          "evidence": "libraries/nestjs-libraries/src/services/stripe.service.ts:128; libraries/nestjs-libraries/src/services/stripe.service.ts:137"
+        },
+        {
+          "call": "stripe.subscriptions.cancel",
+          "operation": "DeleteSubscriptionsSubscriptionExposedId",
+          "evidence": "libraries/nestjs-libraries/src/services/stripe.service.ts:129; libraries/nestjs-libraries/src/services/stripe.service.ts:138; libraries/nestjs-libraries/src/services/stripe.service.ts:414; libraries/nestjs-libraries/src/services/stripe.service.ts:458; libraries/nestjs-libraries/src/services/stripe.service.ts:1056; libraries/nestjs-libraries/src/services/stripe.service.ts:1367"
+        },
+        {
+          "call": "stripe.paymentIntents.cancel",
+          "operation": "PostPaymentIntentsIntentCancel",
+          "evidence": "libraries/nestjs-libraries/src/services/stripe.service.ts:133"
+        },
+        {
+          "call": "stripe.customers.create",
+          "operation": "PostCustomers",
+          "evidence": "libraries/nestjs-libraries/src/services/stripe.service.ts:246"
+        },
+        {
+          "call": "stripe.prices.list",
+          "operation": "GetPrices",
+          "evidence": "libraries/nestjs-libraries/src/services/stripe.service.ts:261; libraries/nestjs-libraries/src/services/stripe.service.ts:302; libraries/nestjs-libraries/src/services/stripe.service.ts:794; libraries/nestjs-libraries/src/services/stripe.service.ts:860"
+        },
+        {
+          "call": "stripe.products.list",
+          "operation": "GetProducts",
+          "evidence": "libraries/nestjs-libraries/src/services/stripe.service.ts:288; libraries/nestjs-libraries/src/services/stripe.service.ts:780; libraries/nestjs-libraries/src/services/stripe.service.ts:846"
+        },
+        {
+          "call": "stripe.products.create",
+          "operation": "PostProducts",
+          "evidence": "libraries/nestjs-libraries/src/services/stripe.service.ts:297; libraries/nestjs-libraries/src/services/stripe.service.ts:789; libraries/nestjs-libraries/src/services/stripe.service.ts:855"
+        },
+        {
+          "call": "stripe.prices.create",
+          "operation": "PostPrices",
+          "evidence": "libraries/nestjs-libraries/src/services/stripe.service.ts:319; libraries/nestjs-libraries/src/services/stripe.service.ts:810; libraries/nestjs-libraries/src/services/stripe.service.ts:876"
+        },
+        {
+          "call": "stripe.subscriptions.list",
+          "operation": "GetSubscriptions",
+          "evidence": "libraries/nestjs-libraries/src/services/stripe.service.ts:335; libraries/nestjs-libraries/src/services/stripe.service.ts:370; libraries/nestjs-libraries/src/services/stripe.service.ts:382; libraries/nestjs-libraries/src/services/stripe.service.ts:449; libraries/nestjs-libraries/src/services/stripe.service.ts:663; libraries/nestjs-libraries/src/services/stripe.service.ts:690; libraries/nestjs-libraries/src/services/stripe.service.ts:722; libraries/nestjs-libraries/src/services/stripe.service.ts:907; libraries/nestjs-libraries/src/services/stripe.service.ts:1046; libraries/nestjs-libraries/src/services/stripe.service.ts:1098; libraries/nestjs-libraries/src/services/stripe.service.ts:1247"
+        },
+        {
+          "call": "stripe.invoices.createPreview",
+          "operation": "PostInvoicesCreatePreview",
+          "evidence": "libraries/nestjs-libraries/src/services/stripe.service.ts:343; libraries/nestjs-libraries/src/services/stripe.service.ts:1126"
+        },
+        {
+          "call": "stripe.subscriptions.update",
+          "operation": "PostSubscriptionsSubscriptionExposedId",
+          "evidence": "libraries/nestjs-libraries/src/services/stripe.service.ts:394; libraries/nestjs-libraries/src/services/stripe.service.ts:427; libraries/nestjs-libraries/src/services/stripe.service.ts:668; libraries/nestjs-libraries/src/services/stripe.service.ts:730; libraries/nestjs-libraries/src/services/stripe.service.ts:915; libraries/nestjs-libraries/src/services/stripe.service.ts:1199"
+        },
+        {
+          "call": "stripe.billingPortal.sessions.create",
+          "operation": "PostBillingPortalSessions",
+          "evidence": "libraries/nestjs-libraries/src/services/stripe.service.ts:473"
+        },
+        {
+          "call": "stripe.promotionCodes.list",
+          "operation": "GetPromotionCodes",
+          "evidence": "libraries/nestjs-libraries/src/services/stripe.service.ts:486"
+        },
+        {
+          "call": "stripe.customers.update",
+          "operation": "PostCustomersCustomer",
+          "evidence": "libraries/nestjs-libraries/src/services/stripe.service.ts:543; libraries/nestjs-libraries/src/services/stripe.service.ts:619"
+        },
+        {
+          "call": "stripe.checkout.sessions.create",
+          "operation": "PostCheckoutSessions",
+          "evidence": "libraries/nestjs-libraries/src/services/stripe.service.ts:566; libraries/nestjs-libraries/src/services/stripe.service.ts:627"
+        },
+        {
+          "call": "stripe.charges.list",
+          "operation": "GetCharges",
+          "evidence": "libraries/nestjs-libraries/src/services/stripe.service.ts:679; libraries/nestjs-libraries/src/services/stripe.service.ts:971; libraries/nestjs-libraries/src/services/stripe.service.ts:1261"
+        },
+        {
+          "call": "stripe.subscriptions.retrieve",
+          "operation": "GetSubscriptionsSubscriptionExposedId",
+          "evidence": "libraries/nestjs-libraries/src/services/stripe.service.ts:950"
+        },
+        {
+          "call": "stripe.invoices.retrieve",
+          "operation": "GetInvoicesInvoice",
+          "evidence": "libraries/nestjs-libraries/src/services/stripe.service.ts:998; libraries/nestjs-libraries/src/services/stripe.service.ts:1287"
+        },
+        {
+          "call": "stripe.refunds.create",
+          "operation": "PostRefunds",
+          "evidence": "libraries/nestjs-libraries/src/services/stripe.service.ts:1027; libraries/nestjs-libraries/src/services/stripe.service.ts:1357"
+        },
+        {
+          "call": "stripe.coupons.create",
+          "operation": "PostCoupons",
+          "evidence": "libraries/nestjs-libraries/src/services/stripe.service.ts:1188"
+        },
+        {
+          "call": "stripe.subscriptions.deleteDiscount",
+          "operation": "DeleteSubscriptionsSubscriptionExposedIdDiscount",
+          "evidence": "libraries/nestjs-libraries/src/services/stripe.service.ts:1230"
+        }
+      ],
+      "webhooks": [
+        {
+          "call": "StripeService.processWebhook, stripe.webhooks.constructEvent",
+          "events": [
+            "invoice.payment_succeeded",
+            "customer.subscription.created",
+            "customer.subscription.updated",
+            "customer.subscription.deleted"
+          ],
+          "evidence": "libraries/nestjs-libraries/src/services/stripe.service.ts:37; libraries/nestjs-libraries/src/services/stripe.service.ts:62"
+        }
+      ],
+      "frontend": [
+        {
+          "call": "CheckoutProvider initCheckout/loadActions/getSession, PaymentElement mount/on/off/destroy, useCheckout confirm/applyPromotionCode/removePromotionCode",
+          "operation": "js.stripe.com loader and custom Checkout SDK wire (screens/stripe-js.ts, screens/checkout-js.ts), over the stored Checkout Session",
+          "evidence": "apps/frontend/src/components/billing/embedded.billing.tsx:6-11,58,111,464,494; pnpm-lock.yaml:164-169; @stripe/react-stripe-js@5.6.1:src/checkout/components/CheckoutProvider.tsx:105-120; @stripe/react-stripe-js@5.6.1:src/components/createElementComponent.tsx:138,188,215; @stripe/react-stripe-js@5.6.1:src/utils/useAttachEvent.ts:29,32; @stripe/stripe-js@8.9.0:dist/stripe-js/checkout.d.ts:606-609,632-645"
+        }
+      ],
+      "setting": "Shipped web payment provider: libraries/nestjs-libraries/src/services/payment/payment.provider.manager.ts:38-45 chooses the first registered provider for web; services/stripe.service.ts:24-26 registers Stripe with platform web. Keys authorize this default billing feature.",
+      "gate": "Shipped payment/subscription features validate the Stripe credential; no independent enabling choice (libraries/nestjs-libraries/src/services/stripe.service.ts:96,246; apps/backend/src/services/auth/public.auth.middleware.ts:60)."
+    },
+    {
+      "name": "twentyhq/twenty",
+      "commit": "1d561b8c73c9",
+      "client": "Workflow HTTP action, app health check, and stripe-node in the shipped enterprise website",
+      "backend": [
+        {
+          "call": "Workflow POST https://api.stripe.com/v1/invoices, customer, collection_method send_invoice, days_until_due 30",
+          "operation": "PostInvoices",
+          "evidence": "packages/twenty-docs/user-guide/workflows/how-tos/connect-to-other-tools/generate-quote-or-invoice-from-twenty.mdx:101; packages/twenty-server/src/modules/workflow/workflow-executor/workflow-actions/http-request/http-request.workflow-action.ts:28"
+        },
+        {
+          "call": "App health check GET https://api.stripe.com/v1/account with the user key",
+          "operation": "GetAccount",
+          "evidence": "packages/twenty-docs/developers/extend/apps/logic/logic-functions.mdx:850"
+        },
+        {
+          "call": "stripe.checkout.sessions.create",
+          "operation": "PostCheckoutSessions",
+          "evidence": "packages/twenty-website/src/app/api/enterprise/checkout/route.ts:51"
+        },
+        {
+          "call": "stripe.checkout.sessions.retrieve",
+          "operation": "GetCheckoutSessionsSession",
+          "evidence": "packages/twenty-website/src/app/api/enterprise/activate/route.ts:36"
+        },
+        {
+          "call": "stripe.subscriptions.retrieve",
+          "operation": "GetSubscriptionsSubscriptionExposedId",
+          "evidence": "packages/twenty-website/src/app/api/enterprise/status/route.ts:44"
+        },
+        {
+          "call": "stripe.subscriptions.update",
+          "operation": "PostSubscriptionsSubscriptionExposedId",
+          "evidence": "packages/twenty-website/src/app/api/enterprise/release/route.ts:87"
+        }
+      ],
+      "gate": "The shipped website enterprise checkout directly uses Stripe independently of the server IS_BILLING_ENABLED=false switch (packages/twenty-website/src/app/api/enterprise/checkout/route.ts:7-19,51)."
+    }
+  ],
+  "optional": [
+    {
+      "application": "calcom/cal.diy",
+      "what": "Stripe booking payments, paid-app installation, hosted team billing and premium usernames",
+      "setting": "Install: Stripe payments is a non-global app added by OmniInstallAppButton, not a default or onboarding install (packages/app-store/_components/AppCard.tsx:94-124; packages/app-store/utils.ts:47-58). Hosted team/premium billing additionally selects hosted features (packages/lib/constants.ts:82,130,168); the self-hosted default has them off.",
+      "evidence": "packages/app-store/stripepayment/_metadata.ts:8-12 enables the catalog entry when credentials exist, not a user install; packages/app-store/_components/OmniInstallAppButton.tsx:54-60 installs it; packages/app-store/stripepayment/api/add.ts:48 begins OAuth; api/callback.ts:39 creates the user credential; onboarding does not add this app. API v2 is the same app install: apps/api/v2/src/modules/stripe/controllers/stripe.controller.ts:87-98 documents install permissions, stripe.service.ts:128 creates the stripe_payment app credential. User onboarding and seed.ts/seed-utils.ts do not install Stripe payments."
+    },
+    {
+      "application": "twentyhq/twenty",
+      "what": "The twenty-server billing module and its billing-only browser screens; workflow HTTP actions and twenty-website enterprise routes are separate demanded features.",
+      "setting": "Configuration: IS_BILLING_ENABLED is a feature flag shipped false (packages/twenty-server/src/engine/core-modules/twenty-config/config-variables.ts:945).",
+      "evidence": "1d561b8c73c9: packages/twenty-server/src/engine/core-modules/twenty-config/config-variables.ts:945; packages/twenty-server/.env.example:22"
+    }
+  ]
+}