subscription-stripe

Stripe payment provider plugin for billing-foundation. Reads its Stripe API key + webhook secret from system config keys with backing:"secrets" (envelope-encrypted in the secrets store under the system tenant) and a billingLive system config flag — all at runtime, so keys rotate and prod goes live without a redeploy. The mask on each key derives the sysadmin settings screen + nav, so no app wires a hand-written config UI. Mount via createSubscriptionStripeFeature({ priceToTier }); the optional apiKey/webhookSecret options are env→secrets bridge fallbacks. The plugin always mounts — createCheckoutSession throws feature_disabled unless billingLive is true, so sk_test_ keys in prod never produce a live checkout. Implements all four provider methods (webhook verify, checkout, portal, cancel).

How it fits

What this feature needs to run (Requires).

flowchart TB
  n_subscription_stripe["subscription-stripe"]
  subgraph how_reqs["Requires"]
    n_billing_foundation["billing-foundation"]
    n_config["config"]
    n_secrets["secrets"]
  end
  n_billing_foundation --> n_subscription_stripe
  n_config --> n_subscription_stripe
  n_secrets --> n_subscription_stripe

Dependencies

• Requires: billing-foundation, config, secrets
• Activation: always on (not toggleable)

Configuration

Per-tenant config keys, set via the tenant-admin UI or a seed. 🔒 = encrypted at rest.

Key	Type	Default	Scope	Who can write	Who can read
api-key	text	—	system 🔒	SystemAdmin	TenantAdmin, Admin, SystemAdmin
billing-live	boolean	false	system	system, SystemAdmin	TenantAdmin, Admin, SystemAdmin
webhook-secret	text	—	system 🔒	SystemAdmin	TenantAdmin, Admin, SystemAdmin

Extensions & cross-feature APIs

• Registers extension: subscriptionProvider → stripe