Stacked on #10685 (account/provider endpoints); followed by #10687 (dashboard deep links).
Milestone 1 resource provisioning endpoints for Stripe Projects.
- POST /provisioning/resources: verifies Stripe request signatures plus provider bearer tokens, enforces
Idempotency-Key, creates/replays project resources, and returns one-time Composio access configuration
- GET /provisioning/resources/{id}: returns the current Stripe Projects resource status for the linked account
- resource service: creates Composio projects with org defaults, creates the managed project API key, persists resource linkage, and handles idempotency write races without stranding successful provisioning responses
- status responses: omit access configuration from later status reads so the project API key is only returned during provisioning
- OpenAPI wiring: registers resource routes on the current router-owned
createRoute API
- focused tests: access config construction, status response shape, replay/conflict behavior, and post-provision idempotency write failure handling
Still intentionally excludes paid plans, SPT, rotate/remove, connected account resources, MCP resources, and generic external provisioning.
Local verification: SKIP_VALIDATION=true pnpm --dir apps/apollo check-types.
@KJ-11draftchecks…stripe-projects-provider-resources → stripe-projects-provider-endpoints7 files · +1287 −0updated 5h ago