Direct Stripe Checkout redirect — no in-app card form, no PCI surface. A shared pricing module in @utboosting/contracts (calculateOrderPrice + RANK_LADDERS_BY_GAME + PRICING_RULES_BY_CONFIG) computes the exact same total on the storefront, the API, and the Stripe session — fixing a class of cents-rounding repros. Webhooks are signature-verified and idempotent via a payment-events de-dup table. The 3% processor fee shows as its own Stripe line item, ceil-rounded, with metadata. Coupons, store credit and free-service credit compose at checkout.
- Themed success / cancel return pages — no jarring Stripe handoff.
- Webhook idempotency via payment_webhook_events de-dup row.
- Confirm-endpoint fallback if webhook misses; idempotent vs later webhook.
- Refund/dispute path via compensation enum (full / partial / coupon / no-comp); operator records intent.
- Event-linked discounts resolved server-side at session creation.
- Deep dive · 01
System architecture
Four apps, one monorepo, typed end-to-end. Six services in compose; a shared contracts package as source of truth.
- Deep dive · 02
Order state machine
Nine DB statuses; six surfaced to customers. Every transition emits a typed audit event.
- Deep dive · 03
Eligibility-aware auto-assign
Two groups, two rounds each. Per-booster game / service / rank / max-order-value caps. 30-min default timer.
- Deep dive · 04
Anonymous Discord ops rooms
Discord is the ops UI. Per-order private channels named from a UUID hex. Reaction-driven ratings. Discord-as-admin-console.
- Deep dive · 06
Operator console + live SSE
Calm, keyboard-first, audit-first. Real-time updates via Redis pub/sub → SSE; engine pause / resume / start as first-class controls.
Got something
this size?
Big ambitions, we match the energy. Drop a brief — reply within one working day.