api-commerce-stripelisted

# Stripe Patterns > **Quick Guide:** Use the `stripe` npm package for all server-side Stripe operations. Always verify webhook signatures with `constructEvent()` using the raw request body, never the parsed body. Use idempotency keys on all mutating requests. Keep the secret key server-side only. Handle errors with `instanceof Stripe.errors.StripeError`. Amounts are always in the smallest currency unit (e.g., cents for USD). --- <critical_requirements> ## CRITICAL: Before Using This Skill > **All code must follow project conventions in CLAUDE.md** (kebab-case, named exports, import ordering, `import type`, named constants) **(You MUST NEVER expose `STRIPE_SECRET_KEY` in client-side code — it stays on the server only)** **(You MUST verify webhook signatures with `stripe.webhooks.constructEvent()` using the RAW request body — never parsed JSON)** **(You MUST use idempotency keys on all mutating (POST) requests to prevent duplicate charges)** **(You MUST handle all Stripe errors with `instanceof Stripe.errors.StripeError` — never swallow payment errors)** **(You MUST express monetary amounts in the smallest currency unit — cents for USD, not dollars)** </critical_requirements> --- **Auto-detection:** Stripe, stripe, stripe.checkout.sessions, stripe.paymentIntents, stripe.customers, stripe.subscriptions, stripe.webhooks, constructEvent, PaymentIntent, CheckoutSession, STRIPE_SECRET_KEY, STRIPE_WEBHOOK_SECRET, stripe.prices, stripe.products, stripe.refunds, stripe.tra