PR Custody

feat(stripe-projects): add provider backend foundation

@KJ-11draftchecks n/achecks…stripe-projects-provider → master11 files · +1851 −3updated 5h ago

▸Description

Stack: #10684 (this PR) <- #10685 (account/provider endpoints) <- #10686 (resource provisioning) <- #10687 (dashboard deep links)

Backend foundation for Composio's Stripe Projects Milestone 1 APP provider.

DB schema + migration: adds StripeProjectsAccountLink, StripeProjectsResource, StripeProjectsIdempotencyKey, and StripeProjectsResourceStatus
provider token helper: generates recoverable composio_provider_token values, hashes them for lookup, and validates bearer token shape
request verification helper: supports Stripe APP JWT request verification, legacy HMAC fallback, bounded replay protection, and request URL/body binding checks
idempotency helper: request digesting, stored response replay, conflict detection, and APP-compatible 24h retention
env/config: adds the Stripe Projects secrets/config required by the provider backend
focused tests: token, request verification, and idempotency coverage

No paid plans, SPT, rotate/remove, connected account resources, MCP resources, or generic external provisioning in this PR.

Local verification: SKIP_VALIDATION=true pnpm --dir apps/apollo check-types.

loading diff…