feat(r01): Stripe cash path, goal scorecard, PTV, multi-domain ops - #1
Merged
Merged
Conversation
added 7 commits
July 21, 2026 02:43
Expose 127.0.0.1:8792 via named tunnel inference-meter at https://inference.yennefer.quest (cert zone). Durable systemd unit cloudflared-inference, public URL files, and quick-tunnel fallback example. Preferred hostname inference.genesisconductor.io pending zone CNAME.
- Block public /admin/* at cloudflared edge (404 before origin) - Drop non-intentional hostname inference.genesisconductor.io.yennefer.quest - Add ops-inference-meter.service unit; enable meter + tunnel when creds exist - Soften public /pricing checkout_note (no /admin/keys mint advertising) - Prefer runtime public URL under reports/ (config only if INFERENCE_WRITE_CONFIG=1) - Add cloudflared-inference + ops-inference-meter to heal/verify allowlists
Add POST /webhook/stripe with Stripe-Signature HMAC verification, session→key mapping (Redis+disk), GET /issued-key for success-page redeem, and checkout URL placeholders on GET /pricing. On checkout.session.completed mint tier key and recordCashflow(R01). Reject missing webhook secret with 503; never log full API keys.
- Retry cashflow on already_fulfilled when cashflow_recorded is false - On first fulfill, mint key with cashflow_recorded=false; if ledger write fails return cashflow_pending so webhook answers 500 and Stripe retries (success only after cashflow sticks) - Include session_id in cashflow note for ops audit - tierFromCheckoutSession no longer defaults paid sessions to starter; only metadata.tier/plan or exact cents 2900/14900/99900 resolve
npm run test:inference hits live :8792 for health, chat auth, admin unauth, and Stripe webhook rejection without printing keys.
- verify: Inference meter (R01) boundary + optional public URL (trycloudflare non-critical) - maintenance-cycle: log estimated_mrr, active_keys, public URL; write reports/r01-go-live.json - STATUS: buyer playbook for Stripe webhook → https://inference.yennefer.quest/webhook/stripe
…ain ops - Wire procedural truth + goal scorecard into maintenance cycle and Agents SDK - Add Firecrawl monitor specs, Airflow 3.3 state-store DAGs, Axiom north-star dashboard - Stripe Directory partner shortlist + vault/webhook setup script for go-live - x402 monetize server tests and revenue flywheel helpers
|
Caution The consumer version of Gemini Code Assist on GitHub has been sunset. All code review activity has officially ceased. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Test plan
python3 swarm/test_procedural_truth_verifier.py(9/9) on diamondnodenode --test scripts/x402-monetize-server.test.mjs(8/8)node scripts/goal-scorecard.mjs→ PTV PASS, scorecard JSONPOST https://inference.yennefer.quest/webhook/stripefail-closed 503 until vault secretSTRIPE_WEBHOOK_SECRET/registerwithSTRIPE_SECRET_KEYcheckout.session.completedmints key + books R01 cashflowGo-live blockers
STRIPE_WEBHOOK_SECRETnot in vault